felixhummel

The MIT License (MIT)

Copyright (c) 2015 Felix Hummel

Permission is hereby granted, free of charge, to any person obtaining a copy of
this software and associated documentation files (the "Software"), to deal in
the Software without restriction, including without limitation the rights to
use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
of the Software, and to permit persons to whom the Software is furnished to do
so, subject to the following conditions:

felixhummel

server {
    listen       80 default_server;

    location / {
        default_type text/plain;
        return 418 "418 I'm a teapot\n";
    }
}

felixhummel

ssh-rsa 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 felix@port

felixhummel

#!/usr/bin/env python
# encoding: utf-8
"""
Call me like this::

    python log_example.py

To set the log level::

    LOGLEVEL=INFO log_example.py

felixhummel

mine_functions:
  dkim_pubkey:
    - mine_function: file.read
    - /etc/opendkim/foo/keys/bar.pub

felixhummel

Generate the key-pair:

salt-call state.apply postfix.opendkim_genkey

Get the public key and set it on your DNS server:

salt-call file.read /etc/opendkim/keys/felixhummel.de/mail.txt

felixhummel

#!/bin/bash
set -euo pipefail

# major device number 7 is loop
#   grep loop /proc/devices
#disks=$(lsblk --raw --noheadings -o type,name | grep ^disk | awk '{ print "/dev/"$2 }')
# weird though: "--exclude 252" (device-mapper) does not work...
lsblk -o MAJ:MIN,UUID,SIZE,LABEL,NAME,MOUNTPOINT,FSTYPE --exclude 7 | grep -v ^252

felixhummel

LULZ=/tmp/compose-lulz
foolulz=$LULZ/foo/lulz
barlulz=$LULZ/bar/lulz
mkdir -p $foolulz $barlulz

cat <<'EOF' > $foolulz/docker-compose.yml
version: '3.7'

services:
  app:

felixhummel

#!/bin/bash
# License: WTFPL
set -euo pipefail

# "--diff-filter d" excludes deleted files from this list
files=$(git diff --cached --diff-filter d --name-only -- "*.tf")

for f in $files; do
  terraform fmt "$f"
  git add "$f"

felixhummel

Problem

ConfigMap changes do not result in deployment changes (which makes sense generally)

Solution

If you change the configuration of your app, then you want the Deployment to restart your pods.

• use configMapRef and secretRef to keep things clean: https://gist.github.com/troyharvey/4506472732157221e04c6b15e3b3f094#file-deployment-yml-L26-L29
• make configmap and secret immutable, update deployment.yml accordingly https://stackoverflow.com/a/40624029/241240
• alternatively use kubectl rollout restart (if you catch your configmap / secrets changing)