Skip to content

Instantly share code, notes, and snippets.

Avatar
🤖
Don't panic!

Alexei Ledenev alexei-led

🤖
Don't panic!
View GitHub Profile
@alexei-led
alexei-led / Markdium-Shell.bash
Created April 29, 2021 14:39
Markdium-Exploring AWS Spot Instances from command line
View Markdium-Shell.bash
spotinfo --type="^[[:alnum:]]{2}g\.\S*" --cpu=8 --region=us-west-2 --sort=price --output=text
## output
type=t4g.2xlarge, vCPU=8, memory=32GiB, saving=70%, interruption='<5%', price=0.08
type=c6g.2xlarge, vCPU=8, memory=16GiB, saving=50%, interruption='<5%', price=0.14
type=m6g.2xlarge, vCPU=8, memory=32GiB, saving=54%, interruption='<5%', price=0.14
type=r6g.2xlarge, vCPU=8, memory=64GiB, saving=63%, interruption='<5%', price=0.15
type=c6g.4xlarge, vCPU=16, memory=32GiB, saving=50%, interruption='<5%', price=0.27
type=m6g.4xlarge, vCPU=16, memory=64GiB, saving=54%, interruption='5-10%', price=0.28
type=r6g.4xlarge, vCPU=16, memory=128GiB, saving=63%, interruption='<5%', price=0.30
@alexei-led
alexei-led / Markdium-Shell.bash
Created April 29, 2021 14:39
Markdium-Exploring AWS Spot Instances from command line
View Markdium-Shell.bash
spotinfo --type=t4g.small --output=table --region=all
# output
┌────────────────┬───────────────┬──────┬────────────┬────────────────────────┬───────────────────────────┬──────────┐
│ REGION │ INSTANCE INFO │ VCPU │ MEMORY GIB │ SAVINGS OVER ON-DEMAND │ FREQUENCY OF INTERRUPTION │ USD/HOUR │
├────────────────┼───────────────┼──────┼────────────┼────────────────────────┼───────────────────────────┼──────────┤
│ us-west-2 │ t4g.small │ 2 │ 2 │ 70% │ <5% │ 0.005 │
├────────────────┼───────────────┼──────┼────────────┼────────────────────────┼───────────────────────────┼──────────┤
│ ap-northeast-1 │ t4g.small │ 2 │ 2 │ 70% │ <5% │ 0.0065 │
├────────────────┼───────────────┼──────┼────────────┼────────────────────────┼───────────────────────────┼──────────┤
@alexei-led
alexei-led / Markdium-Shell.sh
Last active April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-Shell.sh
kubectl create -f deployment/service-account.yaml
@alexei-led
alexei-led / Markdium-YAML.yaml
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-YAML.yaml
{
"Version": "2012-10-17",
"Statement": {
"Effect": "Allow",
"Action": "secretsmanager:GetSecretValue",
"Resource": "arn:aws:secretsmanager:us-west-2:123456789012:secret:aes128-1a2b3c"
}
}
@alexei-led
alexei-led / Markdium-Shell.sh
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-Shell.sh
# environment variable passed to `secrets-init`
DB_PASSWORD=arn:aws:secretsmanager:$AWS_REGION:$AWS_ACCOUNT_ID:secret:dbpassword-cdma3
# environment variable passed to the child process, resolved by `secrets-init`
DB_PASSWORD=very-secret-password
@alexei-led
alexei-led / Markdium-Shell.sh
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-Shell.sh
kubectl create -f deployment/mutatingwebhook-bundle.yaml
@alexei-led
alexei-led / Markdium-Shell.sh
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-Shell.sh
kubectl create -f deployment/deployment.yaml
kubectl create -f deployment/service.yaml
@alexei-led
alexei-led / Markdium-text.txt
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-text.txt
./deployment/webhook-create-signed-cert.sh
creating certs in tmpdir /var/folders/vl/gxsw2kf13jsf7s8xrqzcybb00000gp/T/tmp.xsatrckI71
Generating RSA private key, 2048 bit long modulus
.........................+++
....................+++
e is 65537 (0x10001)
certificatesigningrequest.certificates.k8s.io/secrets-init-webhook-svc.default created
NAME AGE REQUESTOR CONDITION
secrets-init-webhook-svc.default 1s alexei@doit-intl.com Pending
@alexei-led
alexei-led / Markdium-Shell.sh
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-Shell.sh
cat ./deployment/mutatingwebhook.yaml | ./deployment/webhook-patch-ca-bundle.sh > ./deployment/mutatingwebhook-bundle.yaml
@alexei-led
alexei-led / Markdium-YAML.yaml
Created April 27, 2020 06:41
Markdium-Kubernetes and Secrets Management in Cloud: Part 2
View Markdium-YAML.yaml
[...]
service:
name: secrets-init-webhook-svc
namespace: default
path: "/pods"
caBundle: ${CA_BUNDLE}
[...]