sathishphcl

• 0.1. References
• 0.2. Other cheatsheets
• 0.3. Manage multiple gcloud config configurations
  • 0.3.1. Switch gcloud context with gcloud config
• 0.4. Credentials
• 0.5. info
• 0.6. projects
• 0.7. zones & regions
• 0.8. Organization
• 0.9. billing

sathishphcl

The following videos, or playlists, can help ensure consistent knowledge amongst all core team members and help make customer support easier.

• CS fundamentals - 12-min videos (9 hr)

  • Learn about computer origins, transistors, logic gates, and computer architecture

  • Learn about binary, bits, and bytes (bits, bytes, and octets key in networking)

  • Computer architecture, programming, languages, ML, robotics

sathishphcl

The objective is to document findings and recommendations from the review of DevOps processes and artifacts.

Table of Contents

• Istio Recommendations
  • Telemetry with Stackdriver
  • Telemetry with Kiali
  • Canary Deployment
• Mesh-wide security options

sathishphcl

Overview

Troubleshooting pod, service, cluster.

• https://kubernetes.io/docs/tasks/debug-application-cluster/troubleshooting/
  • POD lifecycle
  • https://www.linode.com/docs/kubernetes/troubleshooting-kubernetes/
  • https://learnk8s.io/troubleshooting-deployments
• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html/getting_started_with_kubernetes/troubleshooting_kubernetes

Cases

• https://akomljen.com/learn-how-to-troubleshoot-applications-running-on-kubernetes/

sathishphcl

Security

Assign IAM roles to buckets:

gsutil iam ch user:(user_email):(role1,role2) gs://(BUCKET)

Remove IAM role from bucket:

gsutil iam ch -d user:(user_email):(role1,role2) gs://(BUCKET)

Remove all roles from bucket for given user:

gsutil iam ch -d user:(user_email) gs://(BUCKET)

sathishphcl

[CmdletBinding()]
PARAM()

<# CONSTANTS 

$AzureDefaultRuleNames contains the names of the defaule rules in an Azure Network Security Group.
These names can be updated if Microsoft introduce new default rules in to Azure Network Security Groups.

#>
$AzureDefaultRuleNames = @("ALLOW VNET INBOUND", "ALLOW AZURE LOAD BALANCER INBOUND", "DENY ALL INBOUND", "ALLOW VNET OUTBOUND", "ALLOW INTERNET OUTBOUND", "DENY ALL OUTBOUND")

sathishphcl

<# 
.SYNOPSIS 
    Migrates a Azure Virtual Machine to another subscription or data centre

.DESCRIPTION 
    Shutsdown the source VM
    Exports the VM config to a temporary file
    Loops through all Azure disks attached to the source VM
    Schedules an async copy of the underlying VHD to the destination storage account
        - optionally overwrites existing VHD in destination if it exists

sathishphcl

<#
    .SYNOPSIS
        This script:
        Creates a new resource group
        Creates a VNet with two subnets in the RG
        Allocates a static public IP
        Creates a NSG and adds rules permitting TCP 3389, 80 and 443
        Launches a WinSrv2012R2 instance
        Configures RDG server via Remote Desktop Services PowerShell provider using a DSC configuration
        The DSC configuration:

sathishphcl

Organization archetypes

The intention of this document is to provide some guidance and suggestions to customers who are wondering how they should structure organizations and teams in their GitHub Enterprise environment. The idea isn't to give hard and fast rules on which approach is better than the other, but to give examples of when one approach might be preferable to another depending on the use case.

1. A single organization with direct organization membership for repository access (not teams)

          ________________
          |     Org      |
          |    ______    |
          |   |      |\  |

| | Repo | \ |

sathishphcl

gcloud config set compute/zone us-east1-b
gcloud container clusters create nucleus-jumphost-webserver1
gcloud container clusters get-credentials nucleus-jumphost-webserver1
kubectl create deployment hello-app --image=gcr.io/google-samples/hello-app:2.0
kubectl expose deployment hello-app --type=LoadBalancer --port 8080
kubectl get service

cat << EOF > startup.sh
#! /bin/bash
apt-get update