thapakazi

• enable pod eni: https://github.com/aws/amazon-vpc-cni-k8s#enable_pod_eni-v170

kubectl -n kube-system set env daemonset aws-node ENABLE_POD_ENI=true

• for healthcheck set, DISABLE_TCP_EARLY_DEMUX=true for init container https://github.com/aws/amazon-vpc-cni-k8s#disable_tcp_early_demux-v173

thapakazi

resource "tls_private_key" "ca" {
  algorithm = "RSA"
}

resource "tls_self_signed_cert" "ca" {
  key_algorithm   = "RSA"
  private_key_pem = "${tls_private_key.ca.private_key_pem}"

  subject {
    common_name  = "${var.domain}"

thapakazi

install:
	ln -s $PWD/librespeed-cli.service ~/.config/systemd/user/librespeed-cli.service
	systemctl --user enable librespeed-cli.service
	systemctl --user start librespeed-cli.service

re-install:
	systemctl --user daemon-reload
	systemctl --user restart librespeed-cli.service

thapakazi

#!/bin/bash

meta_url='http://169.254.169.254'

AWS_REGION=$(curl --silent $meta_url/latest/dynamic/instance-identity/document | jq -r .region)
INSTANCE_ID=$(curl --silent $meta_url/latest/meta-data/instance-id)
ASG_NAME=$(aws autoscaling describe-auto-scaling-instances \
               --instance-ids $INSTANCE_ID \
               --region $AWS_REGION \
               | jq -r '.[] | .[] | .AutoScalingGroupName')

thapakazi

Session Manager - Simplified

• Alternative login to your ec2 instances via session manager
  • Make sure you are using vm with session manager installed
  • Your instance is attached with a iam role that has following policy attached:
    • policy_arn = “arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore”

thapakazi

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "iam:CreatePolicy",
                "iam:CreateRole",
                "iam:AttachRolePolicy"

thapakazi

xps
    description: Notebook
    product: XPS 15 7590 (0905)
    vendor: Dell Inc.
    serial: 2K14DB3
    width: 64 bits
    capabilities: smbios-3.2.0 dmi-3.2.0 smp vsyscall32
    configuration: boot=normal chassis=notebook family=XPS sku=0905 uuid=44454C4C-4B00-1031-8034-B2C04F444233
  *-core
       description: Motherboard

thapakazi

variable date {}
variable url {}

meetup "terraform_tidbits" {
  date = var.date
  url = var.url

  title = "Terraform Practical Tit-Bits"
  description  = "In this session we will explore some of the common practical tit-bits of using terraform. If you are having difficulties collaborating with your friends/co-workers due to hassles of state file management, dealing with 10s of secrets/variables, managing different infra environments; well, this session is just for you."
}

thapakazi

    #create config map
    curl -sL https://git.io/Jt80f  > /tmp/site.conf
    kubectl create cm nginx-config --from-file=/tmp/site.conf -o yaml --dry-run=client
    
    #lets see it in action, will ya ? 
    kubectl create cm nginx-config --from-file=/tmp/site.conf 
    
    kubectl apply -f https://git.io/Jt8uz 

thapakazi

server {
    listen       80;
    listen  [::]:80;
    server_name  localhost;

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
    }