schmichael

enable_debug = true
log_level    = "DEBUG"

data_dir = "/tmp/nomad-devagent"

client {
  enabled = true
}

server {

schmichael

job "nginx-proxy" {

  group "nginx" {
    network {
      port "http" {
        static = 8080
        to     = 8080
      }
    }

schmichael

• PayPal supports HS256 https://www.paypalobjects.com/.well-known/openid-configuration
• Yahoo supports ES256 https://api.login.yahoo.com/.well-known/openid-configuration

RS256 only:

• GitHub - https://token.actions.githubusercontent.com/.well-known/openid-configuration
• GitLab - https://gitlab.com/.well-known/openid-configuration
• Google - https://accounts.google.com/.well-known/openid-configuration
• Intuit - https://developer.api.intuit.com/.well-known/openid_configuration
• Microsoft - https://login.microsoftonline.com/fabrikamb2c.onmicrosoft.com/v2.0/.well-known/openid-configuration

schmichael

job "example" {
  type = "batch"
  task t {
    driver = "exec"
    config {
      command = "/bin/sh"
      args    = ["-c", "echo '>> /proc'; grep ^Cap /proc/self/status; echo '>> getpcaps'; getpcaps 0; echo '>> prlimit'; prlimit"]
    }
  }
}

schmichael

variable "vault_version" {
  type = string
  default = "1.14.0"
}

job "vault" {
  datacenters = ["*"]
  type = "service"
  group "vault" {
    count = 1

schmichael

enable_debug = true
log_level    = "debug"

name     = "mixed1"
data_dir = "/tmp/nomad-mixed1"

client {
  enabled = true
  servers = ["127.0.0.1:4647"]
}

schmichael

package main

import (
	"fmt"
	"sync"
	"time"
)

func timeTasks(count int) time.Duration {
	nopTask := func(done func()) {

schmichael

job "example" {

  group "cache" {
    network {
      port "db" {
        to = 6379
      }
    }

    task "redis" {

schmichael

$ biscuit keypair --only-private-key > private-key-file
$ biscuit keypair --from-private-key-file private-key-file --only-public-key > public-key-file
$ echo 'right("file1");' | biscuit generate --private-key-file private-key-file - > biscuit-file.bc
$ biscuit inspect --raw-input biscuit-file.bc --public-key-file public-key-file 
thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: Format(DeserializationError("deserialization error: DecodeError { description: \"unexpected end group tag\", stack: [] }"))', /home/schmichael/.cargo/registry/src/github.com-1ecc6299db9ec823/biscuit-cli-0.2.0/src/main.rs:193:42
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

schmichael

client {
  cpu_total_compute = 1000
  memory_total_mb   = 1000
}