juniorz

Multi-zone

K8s supports running a single cluster in multiple failure zones (zones in GCP, availability zones in AWS). A single k8s cluster is limited to a single region (and cloud provider). Multi-cloud providers and multi-region requires multiple clusters.

• Pods in a replication controller or service are automatically spread across zones.
  • What is SelectorSpreadPriority?
    • https://kubernetes.io/docs/concepts/scheduling/kube-scheduler/#scoring
  • What is the effect of podAntiAffinity with topologyKey: "failure-domain.beta.kubernetes.io/zone" then?
  • How does it interact with topologySpreadConstraints (1.16)?

juniorz

1. Install Envoy (and Istio proxy) dependencies
   1. https://github.com/envoyproxy/envoy/blob/master/bazel/README.md
   2. https://github.com/istio/proxy/blob/3781be0e624470a4ee613c4ffc9816976f5dd701/.circleci/config.yml#L95
      1. Install XCode
      2. sudo xcode-select -s /Applications/Xcode.app/Contents/Developer; sudo xcodebuild -license; bazel clean --expunge; See: https://github.com/bazelbuild/bazel/issues/6056#issuecomment-456913324
   3. https://www.envoyproxy.io/docs/envoy/latest/install/building#requirements
2. Configure the dev environment
   1. https://github.com/istio/istio/wiki/Preparing-for-Development#setting-up-environment-variables
   2. https://medium.com/@nadundesilva/building-istio-from-source-on-linux-be860d660aa7

juniorz

Certified Kubernetes Administrator (CKA)

Curriculum v1.14.1

Source: https://github.com/cncf/curriculum/blob/master/CKA_Curriculum_V1.14.1.pdf

Core Concepts (19%)

Understand the Kubernetes API primitives

juniorz

Unlock Telepatria vtelca v865m movilnet

12345678 (was the initial code)

##3646633## (engineering mode) Simme Lock Network Personalization Unlock permanently

juniorz

Kubernetes based/native CI/CD

Prow

• https://github.com/kubernetes/test-infra/blob/master/prow/README.md
• https://jenkins-x.io/architecture/prow/
• https://www.youtube.com/watch?v=DBrkSC6nS8A

Components

juniorz

AWS

Get managed roles ARN

aws iam list-policies --query "Policies[][Arn]" --output text

juniorz

YMMV

juniorz

package main

import (
	"fmt"

	"github.com/coyim/coyim/xmpp"
)

func main() {
	//TODO: this nil will crash. You need to setup a verifier

juniorz

How

• https://riseup.net/pt/security/message-security/openpgp/gpg-best-practices
• https://github.com/drduh/YubiKey-Guide
• https://ekaia.org/blog/2009/05/10/creating-new-gpgkey/
• https://gist.github.com/ageis/14adc308087859e199912b4c79c4aaa4

Why

• https://wiki.debian.org/Subkeys

juniorz

---
  site: bjshare-grouped
  name: BJ Share (w/ stupid grouping)
  description: BJ Share tracker w/ grouped layout
  language: pt-br
  links:
    - https://bj-share.me/

  caps:
    categories: