navinrio

• Endpoint to onboard a repo with automatic analysis

  curl -X POST "https://sonarcloud.io/api/alm_integration/provision_projects" \
       -H "Authorization: Bearer <TOKEN>" \
       -H "Content-Type: application/x-www-form-urlencoded" \
       --data-urlencode "installationKeys={ORG_NAME}/{REPO_NAME}|{REPO_ID}" \
       --data-urlencode "organization={ORG_NAME}"

• How to find github repo_id in chrome
  • Click on More Tools

navinrio

macOS

Install the binary files provided by Oracle

• Download JDK 8 from Oracle WebSite. [jdk-8u65-macosx-x64.dmg for Mac].
• Double click on jdk-8u65-macosx-x64.dmg and follow the screen instructions.
• Once the JDK package is installed check the below output

$ ls -l /Library/Java/JavaVirtualMachines
total 0
drwxr-xr-x  3 root  wheel  96 Mar  5 09:53 jdk1.8.0_201.jdk

navinrio

If you are on a Mac, substitute command for control. Don't type the + (it means press both keys at once).

Shortcuts when in either command mode (outside the cells) or edit mode (inside a cell):

• Shift + Enter run selected cell or cells - if no cells below, insert a code cell below

• Ctrl + B toggle hide/show left sidebar

• Ctrl + S save and checkpoint

• Ctrl + Shift + S save as

navinrio

VULNERS OPENSOURCE, Vulners Project [https://vulners.com]

List storage and mount points.

esxcli storage filesystem list

List devices.

navinrio

My Openshift Cheatsheet

Openshift build secrets for cloning git repos using SSH Keys

• To create ssh secret:

oc create secret generic sshsecret \
    --from-file=ssh-privatekey=$HOME/.ssh/id_rsa

navinrio

We are using keystone as a global service and hence its centre of universe .
Any api calls internal or via customer for the OpenStack cloud has to go via keystone for auth which internally calls ldap and ,etc.
Also keystone is running on a seperate box , seperate from other OpenStack components.
Need some approvals to post architecture related data and hence just briefed as above to give some insight.

navinrio

On master and nodes

Pull images form internet access laptop

docker pull gcr.io/google_containers/kube-apiserver-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-controller-manager-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-proxy-amd64:v1.5.0
docker pull gcr.io/google_containers/kube-scheduler-amd64:v1.5.0
docker pull weaveworks/weave-npc:1.8.2
docker pull weaveworks/weave-kube:1.8.2

navinrio

alias kc='kubectl'
alias kclf='kubectl logs --tail=200  -f'
alias kcgs='kubectl get service -o wide'
alias kcgd='kubectl get deployment -o wide'
alias kcgp='kubectl get pod -o wide'
alias kcgn='kubectl get node -o wide'
alias kcdp='kubectl describe pod'
alias kcds='kubectl describe service'
alias kcdd='kubectl describe deployment'
alias kcdf='kubectl delete -f'

navinrio

# Virtual Tunnel Interface 
# 172.196.17.188 - 172.196.17.191 
set interfaces vti vti0 address 172.196.17.190/30
set interfaces vti vti0 description 'Virtual tunnel interface for VPN tunnel' 

# Phase 2 
set vpn ipsec esp-group ESP-Default compression 'disable' 
set vpn ipsec esp-group ESP-Default lifetime '3600' 
set vpn ipsec esp-group ESP-Default mode 'tunnel' 
set vpn ipsec esp-group ESP-Default pfs 'dh-group16' 

navinrio

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE configuration>
<project basedir="." default="all" name="sample">
  <property name="javac.debug" value="true"/>
  <property name="javac.debuglevel" value="source,lines,vars"/>
  <property name="javac.target" value="1.6"/>
  <property name="javac.source" value="1.6"/>
  <property name="javac.encoding" value="utf-8"/>

  <property name="src.java.dir" value="src"/>