davidmontoyago

listener "tcp" {
  ...
}

telemetry {
  ...
}

service_registration "kubernetes" {}

davidmontoyago

resource "vault_kubernetes_auth_backend_config" "kubernetes_apps_cluster" {
  backend              = vault_auth_backend.kubernetes.path
  kubernetes_host      = "https://${data.terraform_remote_state.clusters.outputs.cluster_endpoint}"
  kubernetes_ca_cert   = chomp(base64decode(data.terraform_remote_state.clusters.outputs.cluster_ca_cert))
  issuer               = "https://container.googleapis.com/v1/${data.terraform_remote_state.clusters.outputs.cluster_id}"
  disable_local_ca_jwt = true
  token_reviewer_jwt   = data.kubernetes_secret.token_reviewer_jwt.data.token
}

davidmontoyago

apiVersion: v1
kind: Service
metadata:
  name: vault-active
  namespace: vault
  labels:
    app: vault
    component: server
spec:
  ports:

davidmontoyago

containers:
  - name: vault
    image: vault:1.6.2
    args:
      - "server"
      - "-config=/home/vault/config/vault.hcl"
    env:
      - name: VAULT_K8S_POD_NAME
        valueFrom:
          fieldRef:

davidmontoyago

apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: vault
  namespace: vault
  annotations:
    kubernetes.io/ingress.class: "nginx-vault"
    nginx.ingress.kubernetes.io/ssl-passthrough: "true"
    nginx.ingress.kubernetes.io/service-upstream: "true"
    nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"

davidmontoyago

package main

import "fmt"

func main() {
    fmt.Println("hello again from slack")
}

davidmontoyago

package main

import "fmt"

func main() {
    fmt.Println("hello from slack")
}

davidmontoyago

Keybase proof

I hereby claim:

• I am davidmontoyago on github.
• I am davidmontoyago (https://keybase.io/davidmontoyago) on keybase.
• I have a public key ASBXK_w0LK7rOxZj21yWi0X9lRCoPa_6idC9ZWMHVSo2kwo

To claim this, I am signing this object:

davidmontoyago

#!/bin/bash
total_load_time=0
total_runs=10

if [ -z "$1" ]; then
        host="http://localhost:3000"
else
        host=`echo $1`
fi

davidmontoyago

[core]
  safecrlf = true
  pager = "less -FX"
  excludesFile = .gitignore
	editor = vim
[alias]
  co = checkout
  ci = commit
  st = status
  br = branch