sudhirpandey

kubectl get deployments.apps  -o name | xargs -I {} kubectl patch {} --patch "$(cat patch.yml)"

kubectl get nodes --no-headers | awk '{print $1}' | xargs -I {} sh -c 'echo {}; kubectl describe node {} | grep Allocated -A 5 | grep -ve Event -ve Allocated -ve percent -ve -- ; echo'

kubectl describe daemonset aws-node --namespace kube-system | grep Image | cut -d "/" -f 2 ( to find out the cni)

kubectl run busybox --restart=Never --image=busybox:1.28 -- sleep 3600

kubectl exec  busybox -- nslookup google.com

sudhirpandey

Java, do you trust me? 🤔

Using openssl to test an SSL connection to google.com, using a CA file that's been pulled out from a Java keystore. For those days when you want to verify that you've got the right certificate in the store:

1. Download the Equifax root certificate (which is the root CA for Google)
2. Import the certificate into a new Java keystore
3. Export the certificate back out again
4. Convert the certificate to PEM
5. Use openssl to test an SSL connection to Google with that cert

sudhirpandey

#download certificate
echo -n | openssl s_client -connect server:port | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/server.cert

#verify cert against CA
openssl verify -verbose -CAfile /etc/pki/ca-trust/source/anchors/<ca>.crt /tmp/server.cert

#inspect cert to see issuer
openssl x509 -in /tmp/server.crt -text -noout

sudhirpandey

#To be able to deploy the app as service in openshift we can follow various routes.

#I have follwed the binary build and deployment method..
https://access.redhat.com/documentation/en-us/red_hat_jboss_middleware_for_openshift/3/html/red_hat_java_s2i_for_openshift/get_started#source_to_image_s2i_build

#Other methods are also discussed in the recoommened guide above for being able to do deployment. for private source repository 
Image secret is need while doing s2i builds from the repo

#https://developers.redhat.com/blog/2017/02/23/getting-started-with-openshift-java-s2i/ provides other useful ways of deployment

sudhirpandey

NORMAL="\[\e[00m\]"     # Normal
BLACK="\[\e[0;30m\]"    # Black
RED="\[\e[1;31m\]"      # Red
GREEN="\e[0;32m"    # Green
YELLOW="\[\e[0;33m\]"   # Yellow
BLUE="\[\e[0;34m\]"     # Blue
PURPLE="\[\e[0;35m\]"   # Purple
CYAN="\[\e[0;36m\]"     # Cyan
WHITE="\[\e[0;37m\]"    # White
BLACKRED="\e[41;1;30m"

sudhirpandey

from pyspark import SparkConf, SparkContext
from collections import namedtuple
import re
conf = SparkConf().setAppName("ESTest")
sc = SparkContext(conf=conf)

es_read_conf = {
        "es.nodes" : "es-server",
        "es.port" : "19200",
        "es.resource" : "paasapp-2018.07.31/access_log",

sudhirpandey

----Dockerfile-----
FROM registry.access.redhat.com/rhel7/rhel:latest
MAINTAINER Sudhir Pandey <sudhir2pandey@gmail.com>
COPY oc /usr/local/bin/oc
ENV HOME /apps
RUN mkdir -p /apps &&\
    chown -R 1001:0 ${HOME} &&\
    chmod -R g+rwX ${HOME}
COPY scripts/ /apps
WORKDIR ${HOME}

sudhirpandey

# Example scrape config for pods
    #
    # The relabeling allows the actual pod scrape endpoint to be configured via the
    # following annotations:
    #
    # * `prometheus.io/scrape`: Only scrape pods that have a value of `true`
    # * `prometheus.io/path`: If the metrics path is not `/metrics` override this. This
    #    will be the same for every container in the pod that is scraped.
    # * this will scrape every container in a pod with `prometheus.io/scrape` set to true and the
        port is name `metrics` in the container

sudhirpandey

#expose console from 443
oc create route reencrypt master --service kubernetes --port 443 -n default

#nested loops , tags count in IS
oc get is --template='{{range $i, $is:=.items}}{{ $total :=0 }}{{ range $index, $element :=$is.status.tags }}{{if eq $element.tag "latest"}}{{$is.metadata.name}}{{"\t"}}{{ $index }}{{end}}{{end}}{{"\n"}}{{end}}'

get complex labels
oc get nodes --template='{{ with $i := index .items 0 }}{{ index $i.metadata.labels "failure-domain.beta.kubernetes.io/region" }}{{ end }}'

#patchin resource limits

sudhirpandey

Kubectl output options

Let's look at some basic kubectl output options.

Our intention is to list nodes (with their AWS InstanceId) and Pods (sorted by node).

We can start with:

kubectl get no