haani-niyaz

Go Journal

Developer Environment

Private Repo Setup

git config --global \
  url."https://${user}:${personal_access_token}@privategitlab.com".insteadOf \
 "https://privategitlab.com"

haani-niyaz

HAPROXY Docker Nexus (No HTTP Connector)

Background

1. The docker-login repo is setup with minimal (read-only) access which allows all users to login. This creates the necessary credentials store required for all subsequent docker operations. The team docker repositories will be setup with RBAC to only allow access to members of that respective team to perform docker push/pull operations.

2. The proxy will inspect the context path for the docker pull/push operations and proceed only if authorization is successful.

haani-niyaz

Ansible

Build Ansible from source

$ sudo yum install python-setuptools
$ sudo easy_install pip
$ sudo yum install python-devel
$ sudo pip install ansible

haani-niyaz

GIT Portforwarding

Setup port forwarding connection from a server that does not have access to the git_server but does have access to the proxy_server.

Configure port forwarding

#ssh -L <local_port>:git_server:<git_port> proxy_server
$ ssh -L 3333:mygitserver.com:7999 myproxyserver

haani-niyaz

global
    log 127.0.0.1 local2
    user haproxy
    group haproxy
    chroot /var/lib/haproxy
    pidfile /var/run/haproxy.pid
    daemon
    maxconn 1000

defaults

haani-niyaz

Go Dev Guiding Principles

An opinionated list of practices when developing in Go.

(1) Names

Names should be self revealing.

haani-niyaz

Code is clean if it can be understood easily – by everyone on the team. Clean code can be read and enhanced by a developer other than its original author. With understandability comes readability, changeability, extensibility and maintainability.

---

General rules

1. Follow standard conventions.
2. Keep it simple stupid. Simpler is always better. Reduce complexity as much as possible.
3. Boy scout rule. Leave the campground cleaner than you found it.
4. Always find root cause. Always look for the root cause of a problem.

Design rules

haani-niyaz

cd k8s-specs

git pull

export AWS_ACCESS_KEY_ID=[...]

export AWS_SECRET_ACCESS_KEY=[...]

aws --version

haani-niyaz

Verify what protocol the server supports

https://www.ssllabs.com/ssltest

For www.atlassian.com:

Protocols
TLS 1.2	Yes
TLS 1.1	Yes

haani-niyaz

RHEL Admin Tasks

Set timezone

$ sudo timedatectl set-timezone Australia/Melbourne

Setup NTP

$ yum install -y ntp