abdennour

Configuration

Put the file alongside the ansible.cfg (root project)

Usage

invenotry example

192.168.11.23 ansible_host=mynode.example.com

abdennour

brew install nginx

# Docroot is: /usr/local/var/www

# The default port has been set in /usr/local/etc/nginx/nginx.conf to 8080 so that
# nginx can run without sudo.

# nginx will load all files in /usr/local/etc/nginx/servers/.

# To have launchd start nginx now and restart at login:

abdennour

Overview

This is a solution of a common problem with Nexus Docker repositories. The administrator has to expose port for "pull", another port for "push", other ports for each hosted repository. This solution is about leveraging Nginx reverse proxy to avoid using these ports.

How it works ?

Given :

• Nexus hostname is "nexus.example.com"
• Nexus web port is 8081

abdennour

#!/bin/bash
# Usage: $0 myuser


k_user=${1}
#...

# 1. Step one: This new User generate a private key 

openssl genrsa -out ${k_user}.pem 2048

abdennour

1. Initializes cluster master node:

 kubeadm init --apiserver-advertise-address $(hostname -i)

2. Initialize cluster networking:

abdennour

Details

https://github.com/coreos/coreos-kubernetes/blob/master/Documentation/kubernetes-networking.md

Summary

*Master node(s):*
TCP     6443*       Kubernetes API Server

abdennour

- name: k3s readiness
  hosts: localhost
  become: yes
  tasks:
  - name: firewalld is installed
    yum:
     name: firewalld
     state: latest
  - name: service is started
    service:

abdennour

---
- hosts: localhost
  tasks:
  - name: download user_list.yml
    get_url:
      url: http://files.example.com/user_list.yml
      dest: /home/ansible/files/user_list.yml

- hosts: node1

abdennour

View the file *http://files.example.com/user_list.yml* from *control1*. Create a playbook in */home/ansible/exam/users.yml* that follows the instructions provided in the file.
Create the file /home/ansible/exam/users.yml containing the following:

---
- hosts: localhost
  tasks:
  - name: download user_list.yml
    get_url:
      url: http://files.example.com/user_list.yml

abdennour

#!/bin/bash

# Usage: $0 java google.com 443
CLIENT=$1
HOST=$2
PORT=$3


# openssl s_client -servername $HOST -connect $HOST:$PORT </dev/null 2>/dev/null | openssl x509 -inform PEM -outform DER -out ${HOST}.cer