codesenju

alias k=kubectl
alias kgc='kubectl config get-contexts'
alias kuc='kubectl config use-context'
alias kn='kubectl config set-context --current --namespace'

codesenju

#!/bin/bash
set -e

# Check if the NAMESPACE argument is provided
if [ -z "$1" ]; then
  echo "Error: NAMESPACE argument not provided"
  echo "Usage: $0 NAMESPACE"
  exit 1
fi

codesenju

{
    "Effect": "Allow",
    "Principal": {
        "Federated": "arn:aws:iam::${AWS_ACCOUNT_ID}:oidc-provider/oidc.eks.${AWS_REGION}.amazonaws.com/id/${OIDC_PROVIDER_ID}"
    },
    "Action": "sts:AssumeRoleWithWebIdentity",
    "Condition": {
        "StringEquals": {
            "oidc.eks.${AWS_REGION}.amazonaws.com/id/${OIDC_PROVIDER_ID}:sub": "system:serviceaccount: ${NS}:${SA}",
                                "oidc.eks.${AWS_REGION}.amazonaws.com/id/${OIDC_PROVIDER_ID}:aud": "sts.amazonaws.com"

codesenju

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: cluster-autoscaler
  labels:
    k8s-addon: cluster-autoscaler.addons.k8s.io
    k8s-app: cluster-autoscaler
rules:
  - apiGroups: [""]

codesenju

set number
autocmd FileType yaml,yml setlocal ts=2 sts=2 sw=2 et ai
set colorcolumn=80
set cursorcolumn

codesenju

Ecs Exec A Guide

Prerequisite

[+] Install SessonManager on local machine, alternatively you can use AWS CloudShell. [+] IAM permissions required for ECS Exec, see[2].

export cluster_name=**
export private_subnet_one=**
export private_subnet_two=**
export container_security_group=**

codesenju

Containerd

List containers with crt in k8s.io namespace

ctr -n k8s.io container ls

Display PID namespace processes that are running

ps -e -o pidns,pid,args

codesenju

server {
    listen              80;
    listen              443 ssl;
    server_name         nginx.example.com;
    ssl_certificate     /certs/nginx.example.com.pem;
    ssl_certificate_key /certs/nginx.example.com.key;
    #access_log  /var/log/nginx/host.access.log  main;

    location / {
        root   /usr/share/nginx/html;

codesenju

Exposing Kubernetes Applications, Part 2: AWS Load Balancer Controller

Prerequisites

Create AWS Load Balancer Controller Identity and Access Management (AWS IAM) Policy

Download IAM policy for the AWS Load Balancer Controller

• curl -o iam-policy.json https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.4.6/docs/install/iam_policy.json

Create an IAM policy called AWSLoadBalancerControllerIAMPolicy

codesenju

Here is the AWS CLI command to create an ECS task definition:

cat <<EOF> task-definition.json
{
  "family": "eb-start-ecs-stask",
    "taskRoleArn": "arn:aws:iam::${AWS_ACCOUNT_ID}:role/ecsTaskExecutionRole",
    "executionRoleArn": "arn:aws:iam::${AWS_ACCOUNT_ID}:role/ecsTaskExecutionRole",
    "networkMode": "bridge",
    "containerDefinitions": [
      {