todd-dsm

Generate Strong Password with OpenSSL

Requirements:

• 256 bits of entropy from a trusted source: macOS
• Replaces some characters from SET1 with those specified
• Snags the first 32 characters

I've stored this script /usr/local/bin/gen-passwd

todd-dsm

########################################################################################################################
# EKS Addons
# VER: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons/releases
# TFR: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons#usage
# GHR: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons/blob/99520ae0125df7b24163e14cf4eba2c96fcf14bd/docs/amazon-eks-addons.md#configuration-values
########################################################################################################################
module "eks_blueprints_addons" {
  source  = "aws-ia/eks-blueprints-addons/aws"
  version = "~> 1.21.0"

todd-dsm

########################################################################################################################
# Modern Istio Gateway using Kubernetes Gateway API
# Infrastructure (Deployment/Service) is automatically provisioned by Istio
########################################################################################################################
# https://istio.io/latest/docs/tasks/traffic-management/ingress/gateway-api/
# https://gateway-api.sigs.k8s.io/guides/
# https://istio.io/latest/docs/setup/additional-setup/gateway/#gateway-deployment-topologies
########################################################################################################################
# Gateway Class for Istio (defines the controller)
resource "kubernetes_manifest" "istio_gateway_class" {

todd-dsm

# Deploy the TEST app to the demo namespace
# REF: https://bit.ly/3EKx0cT
---
apiVersion: v1
kind: Namespace
metadata:
  name: demo
---
apiVersion: apps/v1
kind: Deployment

todd-dsm

# REF HCP: https://developer.hashicorp.com/vault/docs/platform/k8s/helm/configuration
# REF VAL: https://github.com/hashicorp/vault-helm/blob/main/values.yaml
# REF PLT: https://repo1.dso.mil/big-bang/product/packages/vault/-/blob/main/chart/values.yaml
# ---------------------------------------------------------------------------------------------------------
global:
  enabled: true
  namespace: "vault"
  tlsDisable: true # Default: true
  imagePullSecrets:
    - name: private-registry

todd-dsm

# Deploy webapp to test the demo namespace
# REF: https://bit.ly/3EKx0cT
---
apiVersion: v1
kind: Namespace
metadata:
  name: demo
---
apiVersion: apps/v1
kind: Deployment

todd-dsm

Sync DAW Files Between Collaborators

Install Go

brew install golang

Set the golang binary directory

export GOPATH="$HOME/go"

todd-dsm

Example shellcheckrc File

% cat ~/.shellcheckrc
# ShellCheck: Global Rules
#------------------------------------------------------------------------------
# Disable these annoying rules
disable=SC2317,SC2154,SC2155,SC2086

# Allow the sourcing of files

todd-dsm

########################################################################################################################
# EKS Addons
# VER: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons/releases
# TFR: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons#usage
# GHR: https://github.com/aws-ia/terraform-aws-eks-blueprints-addons/blob/99520ae0125df7b24163e14cf4eba2c96fcf14bd/docs/amazon-eks-addons.md#configuration-values
########################################################################################################################
module "eks_blueprints_addons" {
  source  = "aws-ia/eks-blueprints-addons/aws"
  version = "~> 1.16.3"

todd-dsm

###----------------------------------------------------------------------------
### MAIN PROGRAM
###----------------------------------------------------------------------------
### PREP
###---


###---
### The kube-prometheus stack includes a resource metrics API server, so the
### metrics-server addon is unnecessary.