Skip to content

Instantly share code, notes, and snippets.

View MalloZup's full-sized avatar
💟
Focusing and spreading love :)

Dario Maiocchi MalloZup

💟
Focusing and spreading love :)
View GitHub Profile

Keybase proof

I hereby claim:

  • I am mallozup on github.
  • I am dmaiocchi (https://keybase.io/dmaiocchi) on keybase.
  • I have a public key ASDFh73xPhftJ07jBqdRxrgLvHZnWaQyKYIbHl5cvQhNbAo

To claim this, I am signing this object:

# Sample config for Prometheus.
global:
scrape_interval: 5s
scrape_timeout: 5s
evaluation_interval: 5s
scrape_configs:
- job_name: hana-cluster
# The HANA scrapping follows a different scrapping time to reduce the execution load into the database
zypper in texlive-urwchancal
Refreshing service 'Basesystem_Module_15_x86_64'.
Refreshing service 'Desktop_Applications_Module_15_x86_64'.
Refreshing service 'SAP_Applications_Module_15_x86_64'.
Refreshing service 'SUSE_Linux_Enterprise_High_Availability_Extension_15_x86_64'.
Refreshing service 'SUSE_Linux_Enterprise_Server_for_SAP_Applications_15_x86_64'.
Refreshing service 'Server_Applications_Module_15_x86_64'.
Loading repository data...
Reading installed packages...
Resolving package dependencies...
topics we can offer:
# observability:
- monitoring: improve, refactoring and learn how to write code for Prometheus exporter from our existing SAP/HA exporters.
* add with our partners useful alerts and visualisation on dashboards
- logging: with loki solution, integrate SAP/HA logs pipeline and create alerts, visualisation in grafana

Create A read-only user with ACL

1) the user is already created via AD and belong to haclient group

hana02:~ # crm configure
crm(live/hana02)configure# role monitor read xpath:"/cib"
crm(live/hana02)configure# acl_target hawk-aduser monitor # this will add user read-only
crm(live/hana02)configure# show
crm(live/hana02)configure# commit
# Some material reference lecture around envoy:
- java technical: https://piotrminkowski.wordpress.com/2017/10/25/envoy-proxy-with-microservices/
- https://www.thoughtworks.com/insights/blog/building-service-mesh-envoy-0
- A bit dated:
https://jvns.ca/blog/2018/10/27/envoy-basics/
1) https://relay.sh/blog/command-line-ux-in-2020/

Disable TLS 1.0 and 1.1

ONLY SLE12 or LEAP12 systems

  1. Edit file: vim /srv/www/hawk/config/puma.rb
  ssl_bind @listen, @port, cert: @cert, key: @key, verify_mode: 'none', no_tlsv1: true,  no_tlsv1_1: true
  1. restart hawk with systemctl restart hawk