patmigliaccio

Docker Commands

A generic set of commands to reference when working with Docker

Containers

Create Container

$ sudo docker run --name mydb -e MYSQL_ROOT_PASSWORD=pass -d mysql:latest

patmigliaccio

Linux SSH Keys

A list of steps to generate new SSH keys to a new Linux VM / machine.

Generate a New Key

$ ssh-keygen -t rsa -b 2048

Enter file in which to save the key (/home/<user>/.ssh/id_rsa): ~/.ssh/**azure_key**

patmigliaccio

Configuring Cloudflare SSL/TLS on Google App Engine

Implementing end-to-end HTTPS encryption with CloudFlare for Google App Engine applications.

Google App Engine - Custom Domains

Add Domains

Register the root domain with Google Cloud Platform at the following:

patmigliaccio

import os
import base64

encoded_env_file = os.environ.get("ENV_FILE")

if encoded_env_file != None:
    decoded_env_file = base64.b64decode(encoded_env_file).decode('utf-8')

    with open("./" + str(os.environ.get("FILE_NAME", ".env")), "w") as text_file:
        text_file.write(decoded_env_file)

patmigliaccio

for node in $(kubectl get nodes -l cloud.google.com/gke-nodepool=default-pool -o=name); do
  kubectl drain --force --ignore-daemonsets --delete-local-data --grace-period=10 "$node";
done

patmigliaccio

for node in $(kubectl get nodes -l cloud.google.com/gke-nodepool=default-pool -o=name); do
  kubectl cordon "$node";
done

patmigliaccio

gcloud container node-pools create my-pool \
  --cluster=my-cluster \
  --machine-type=n1-highmem-2 \
  --num-nodes 1 --enable-autoscaling
  --min-nodes 1 --max-nodes 3

patmigliaccio

kubectl create -f ingress-service.yml

# Verify exposed IP address is ready
kubectl get ingress

patmigliaccio

# Adds the converted origin certficate
gcloud compute ssl-certificates create ingress-cert  \
  --certificate ./certs/<DOMAIN>.pem \
  --private-key ./certs/<DOMAIN>.key

patmigliaccio

# ingress-service.yaml
---
apiVersion: "extensions/v1beta1"
kind: "Ingress"
metadata:
  name: "ingress"
  annotations:
    kubernetes.io/ingress.global-static-ip-name: "my-dev-ip"
    ingress.gcp.kubernetes.io/pre-shared-cert: "ingress-cert"
spec: