eranchetz

SSH

OS Login enables centralized SSH key management with IAM, and it disables metadata-based SSH key configuration on all instances in a project. OS Login can be enabled on the project level or on the instance level. Instance-level values override the project-level value.

• OS Login Reference

Instructions

1. Access project
   • https://console.cloud.google.com/compute/instances?project=[project-id]
2. Click Metadata
3. Click Edit, and then click Add item.

eranchetz

# Install Docker ninja style 
curl -fsSL https://get.docker.com -o get-docker.sh
sh get-docker.sh

# Install docker compose 
curl -L "https://github.com/docker/compose/releases/download/1.29.1/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
chmod +x /usr/local/bin/docker-compose

# Install git
apt udpate 

eranchetz

<config>
  <! — Client Control →
  <fold-anon v=’true’/>
<! — Folding Slot Configuration →
  <gpu v=’true’/>
<! — Slot Control →
  <power v=’full’/>
<! — User Information →
  <user v=’eranchetz’/>
<! — Folding Slots →

eranchetz

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: echoserver
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: echoserver

eranchetz

package main

import (
	"github.com/go-vgo/robotgo"
	"time"
)

func main() {

	time.Sleep(3 * time.Second)

eranchetz

# Based on this documentation : https://kubernetes.io/docs/reference/access-authn-authz/rbac/

# Create a Service Account
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: my-service-account

# Create a role that allows API calls for get/list/watch on pods 

eranchetz

Using strace and lsof to debug blocked processes

You can use strace on a specific pid to figure out what a specific process is doing, e.g.:

strace -fp <pid>

You might see something like:

select(9, [3 5 8], [], [], {0, 999999}) = 0 (Timeout)

eranchetz

Keybase proof

I hereby claim:

• I am eranchetz on github.
• I am eranchetz (https://keybase.io/eranchetz) on keybase.
• I have a public key whose fingerprint is 8ABD 7604 887E D7AD 5839 8B66 724C E217 5F8E 1E1F

To claim this, I am signing this object:

eranchetz

{{
# /opt/my-app/consul.ctmpl
#
# This file is read by Consul Template and rendered onto disk using
# the configuration placed in /etc/consul-template.d.
}}

{{ with vault "postgresql/creds/readonly" }}
[config]
  username = "{{ .Data.username }}"

eranchetz

# description: logstash 

# Source function library.
. /etc/init.d/functions

RETVAL=0
prog="logstash"
PIDFILE=/var/run/$prog.pid
LOCKFILE=/var/lock/subsys/$prog
PATH=/sbin:/usr/sbin:/bin:/usr/bin