PhilipSchmid

---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: kuard
  name: kuard
  namespace: kuard
spec:
  replicas: 1

PhilipSchmid

# NS
kubectl create ns cadvisor-issue-test

# PV
echo "
apiVersion: v1
kind: PersistentVolume
metadata:
  name: pvc-cadvisor-issue-test
spec:

PhilipSchmid

- name: custom_certmanager_monitoring
  rules:
    - alert: CertManagerAbsent
      expr: absent(up{job="cert-manager"})
      for: 1h
      annotations:
        message: "Cert Manager has dissapeared from Prometheus service discovery."
      labels:
        severity: critical
    - alert: CertManagerACMEProxyReachability

PhilipSchmid

Grafana Dashboards for Kubernetes Environments

Helpful Kubernetes Grafana dashboards. Tested with kube-state-metrics v2.0.0 & Grafana 8.0.3.

Original sources of the JSONs:

• https://grafana.com/grafana/dashboards/10000
• https://grafana.com/api/dashboards/1860/revisions/16/download
• https://github.com/kubernetes/ingress-nginx/blob/master/deploy/grafana/dashboards/nginx.json
• https://github.com/kubernetes/ingress-nginx/blob/master/deploy/grafana/dashboards/request-handling-performance.json)

PhilipSchmid

Alacritty, Tmux, Fish Setup

A short tutorial how to setup a nice terminal environment using Alacritty, Tmux, Fish, OMF and the Fish theme bobthefish.

Tested on Pop_OS 20.04.

Basic Installation

1. Install the required packages:

sudo apt install alacritty tmux fish fonts-powerline fonts-hack-ttf

PhilipSchmid

Prometheus Operator Custom Resource (CR) Testing Manifests

Ever searched for a simple setup to test the exposure of a /metrics endpoint and tried to add this endpoint to Prometheus using a ServiceMonitor CR? Well, use the manifests below and you are good to go :).

Creation

---
apiVersion: v1
kind: Namespace
metadata:
  name: testing

PhilipSchmid

#!/bin/bash

# Usage: ./minio-upload my-bucket my-file.zip

bucket=$1
file=$2

host=minio.example.com
s3_key=svc_example_user
s3_secret=svc_example_user_password

PhilipSchmid

---
# https://kubernetes.io/docs/concepts/policy/pod-security-policy/
# Attention: This PSP has quite some loose restrictions! Do not just copy & paste it!
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: example
spec:
  allowPrivilegeEscalation: true
  allowedCapabilities:

PhilipSchmid

Configure a Windows 10 KVM Guest to use an ultrawide display resolution (3440x1440)

1. virsh edit Windows10
2. Navigate to the <video> section and change it to the following one:

    <video>
      <model type='qxl' ram='131072' vram='131072' vgamem='32768' heads='1' primary='yes'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
    </video>

PhilipSchmid

Wireguard VPN Setup

This two scripts install & configure Wireguard on a CentOS8 "server" (peer) and on a Ubuntu 18.04 "client" peer. Of course, if you replace the # Installation script parts, these instructions can also be used on other distributions like Debian, CentOS 7, Fedora, etc..

Possible pitfall: When you change something in the /etc/wireguard/wg0.conf configuration file on the server, ensure to disable the wg-quick@wg0 service in advance:

sudo systemctl stop wg-quick@wg0
sudo systemctl disable wg-quick@wg0
sudo vim /etc/wireguard/wg0.conf    # edit what ever you like
sudo systemctl enable --now wg-quick@wg0