avaussant

#!/usr/local/bin/python3
from kubernetes import client, config
import sys

config.load_kube_config()

def print_help():
    print('I need the namespace(s) as an argument')

if len(sys.argv) <= 1:

avaussant

#!/bin/sh
#
# Delete a VPC and its dependencies

if [ -z "$1" ] then
    echo "usage: $0 <vpcid>"
    exit 64
fi
vpcid="$1"

avaussant

Helm CheatSheet

• Helm CheatSheet
  • Get Started
  • Struture
  • General Usage
  • Template
  • Hooks
  • Chart Repository
  • Signing

avaussant

node("${params.BUILD_AGENT}") {
    
    stage('Dangling Containers') {
      sh 'docker ps -q -f status=exited | xargs --no-run-if-empty docker rm'
    }

    stage('Dangling Images') {
      sh 'docker images -q -f dangling=true | xargs --no-run-if-empty docker rmi'
    }
    

avaussant

#!/bin/bash

#### Functions ###
display_usage() { 
	echo "This script must be run with Docker capable privileges and you should login to your registry before pushing!" 
	echo -e "\nUsage:\n$0 <saved_image> [--push]\n" 
	echo -e " <saved_image>\t\t\tThe image file to load and push" 
	echo -e " [--push]\t\t\tPush to registry" 	
	echo -e "\nExample: $0 /mydir/ubuntu.tar --push "
} 

avaussant

Getting a shell on each node

I run several K8S cluster on EKS and by default do not setup inbound SSH to the nodes. Sometimes I need to get into each node to check things or run a one-off tool.

Rather than update my terraform, rebuild the launch templates and redeploy brand new nodes, I decided to use kubernetes to access each node directly.

Alternative option

https://github.com/alexei-led/nsenter

avaussant

AWS CLI Cheatsheet

http://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html https://www.youtube.com/watch?v=_wiGpBQGCjU

Setup

avaussant

DUMP
// pod-name         name of the postgres pod
// postgres-user    database user that is able to access the database
// database-name    name of the database
kubectl exec [pod-name] -- bash -c "pg_dump -U [postgres-user] [database-name]" > database.sql

RESTORE
// pod-name         name of the postgres pod
// postgres-user    database user that is able to access the database
// database-name    name of the database

avaussant

import sys
import csv

tabin = csv.reader(sys.stdin, dialect=csv.excel_tab)
commaout = csv.writer(sys.stdout, dialect=csv.excel)

for row in tabin:
  commaout.writerow(row)

avaussant

resource "aws_iam_policy" "terraform_create_policy" {
    name = "terraform_create_policy"
    path = "/"
    policy = "${data.aws_iam_policy_document.terraform_create_policy.json}"
}

data "aws_iam_policy_document" "terraform_create_policy" {
    statement {
        sid = "1"
        actions = [