klapcsik

# Source: https://gist.github.com/681a5f4455428379e00bc815450e12d8

#############################################
# eksctl                                    #
# How to Create and Manage AWS EKS clusters #
# https://youtu.be/pNECqaxyewQ              #
#############################################

#########
# Setup #

klapcsik

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {
        "AWS": "arn:aws:iam::${aws_elb_account_id}:root"
      },
      "Action": "s3:PutObject",
      "Resource": "arn:aws:s3:::${bucket_name}/prefix/AWSLogs/${your_account_id}/*"

klapcsik

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AWSLogDeliveryWrite",
      "Effect": "Allow",
      "Principal": {
        "Service": "delivery.logs.amazonaws.com"
      },
      "Action": "s3:PutObject",

klapcsik

###################################################
##
## Alertmanager YAML configuration for routing.
##
## Will route alerts with a code_owner label to the slack-code-owners receiver 
## configured above, but will continue processing them to send to both a
## central Slack channel (slack-monitoring) and PagerDuty receivers
## (pd-warning and pd-critical)
##

klapcsik

# Count total EBS based storage in AWS
aws ec2 describe-volumes | jq "[.Volumes[].Size] | add"
# Count total EBS storage with a tag filter
aws ec2 describe-volumes --filters "Name=tag:Name,Values=CloudEndure Volume qjenc" | jq "[.Volumes[].Size] | add"
# Describe instances concisely
aws ec2 describe-instances | jq '[.Reservations | .[] | .Instances | .[] | {InstanceId: .InstanceId, State: .State, SubnetId: .SubnetId, VpcId: .VpcId, Name: (.Tags[]|select(.Key=="Name")|.Value)}]'
# Wait until $instance_id is running and then immediately stop it again
aws ec2 wait instance-running --instance-id $instance_id && aws ec2 stop-instances --instance-id $instance_id

# Get 10th instance in the account

klapcsik

This script performs the following actions:

1. Creates a TLS certificate in ACM
2. Upserts a validation CNAME record in Route 53
3. Waits for the validation CNAME record to complete/update
4. Waits for the certificate to validate and issue
5. Outputs a description of the certificate

This obviously assumes that your domain's DNS is hosted on Route 53. It also uses the AWS credentials and region for the environment it is executed in.

klapcsik

IAM Policies
---
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": "secretsmanager:GetSecretValue",
            "Resource": "*"

klapcsik

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "execute-api:Invoke",
            "Resource": "*"
        },
        {

klapcsik

#!/usr/bin/env bash
set -o errexit -o pipefail -x

GIT_ROOT="$(git rev-parse --show-toplevel)"
CLUSTER_NAME=example-test
export KUBECONFIG="${GIT_ROOT}/test/test-kubeconfig.yaml"

# usage: portfwd [namespace] [port]
# assumes service exists with same name as namespace
portfwd() {

klapcsik

# Source: https://gist.github.com/627fcfbfbc17a683a70210947e02eaa3

##########
# Kaniko #
##########

open https://github.com/vfarcic/kaniko-demo

# Fork it