ipedrazas

helm ls --all --short | xargs -L1 helm delete --purge

ipedrazas

Checklist: Application Readiness for Kubernetes

• Not running latest
• Readiness Checks
• Liveness Checks
• Metric/Telemetry instrumentation
• Limits
• Requests
• Listen to signals (graceful shutdowns)
• Labels

ipedrazas

kubectl get all -o json \
  | jq -cj '.items[] | tostring+"\u0000"' \
  | xargs -n1 -0 -I@ bash -c "echo '@' | conftest test -"

ipedrazas

# Initialise a git project
    git init .
# Initialise a git repo so that we can pull/push from/to it
    git init --base master.git
# Run a Git Daemon
    # CentOS
    git daemon --verbose --base-path=/path/to/workspace/ --base-path-relaxed --reuseaddr --informative-errors --export-all
    # Cygwin
    git daemon --verbose --base-path=C:/path/to/workspace/ --base-path-relaxed --reuseaddr --informative-errors --export-all
# Then we can clone our local repo (the default port is 9418)

ipedrazas

Requirements

Minikube requires that VT-x/AMD-v virtualization is enabled in BIOS. To check that this is enabled on OSX / macOS run:

sysctl -a | grep machdep.cpu.features | grep VMX

If there's output, you're good!

Prerequisites

ipedrazas

echo "
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /$1
  name: rewrite
  namespace: default
spec:
  rules:

ipedrazas

-> % svcs -n twistlock

NAME                TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)                      AGE
twistlock-console   ClusterIP   10.103.43.18   <none>        8084/TCP,8083/TCP,8081/TCP   18h

-> % k get ep -n twistlock

NAME                ENDPOINTS                                                  AGE
twistlock-console   10.103.129.17:8081,10.103.129.17:8084,10.103.129.17:8083   18h

ipedrazas

kubectl patch deploy --namespace kube-system tiller-deploy -p '{"spec":{"template":{"spec":{"serviceAccount":"tiller"}}}}'

ipedrazas

# To call from outside the cluster a service type `ClusterIP`
# We use `kubectl proxy`
kubectl proxy

# Then, the service can be accessed by calling:
curl http://localhost:8001/api/v1/namespaces/status/services/x01-kstatus-api:5000/proxy/api/jobs

# This is
# curl http://localhost:8001/api/v1/namespaces/[NAMESPACE]/services/[SERVICE:PORT]/proxy/[QUERY_STRING]

ipedrazas

        livenessProbe:
          exec:
            command:
            - /bin/sh
            - -c
            - |-
              FATAL_ERRORS=$( echo "${LIVENESS_PROBE_FATAL_ERRORS}" | grep -q '\S' && \
                  grep -F "${LIVENESS_PROBE_FATAL_ERRORS}" /tmp/.liveness_probe )
              cp /dev/null /tmp/.liveness_probe
              if [ ! -z "${FATAL_ERRORS}" ]; then