cjmatta

Configuration for Connect worker(s)

Set these settings in your Kafka Connect worker config (Confluent Doc for this here: https://docs.confluent.io/current/kafka/authentication_sasl_plain.html#kafka-connect)

# Connect worker
security.protocol=SASL_SSL
ssl.truststore.location=/var/ssl/private/kafka.client.truststore.jks
ssl.truststore.password=test1234
sasl.mechanism=PLAIN

ScriptingSquirrel

(Assuming a Debian 8-like system)

• Install prometheus-node-exporter

  $ sudo apt update && sudo apt install prometheus-node-exporter

• Configure prometheus-node-exporter to expose metrics only to localhost, not on to all networks. Modify file /etc/default/prometheus-node-exporter:

  # Set the command-line arguments to pass to the server.

kekru

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

• at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
• check nginx -V for the following:

  ...
  TLS SNI support enabled

monmonja

# download this file to your project folder and excute
# chmod +x generate-ios.sh
# then run using
# ./generate-ios.sh

# flutter build defaults to --release
flutter build ios

# make folder, add .app then zip it and rename it to .ipa
mkdir -p Payload

slok

Enable profiling

Default http server

import (
    _ "net/http/pprof"
    "net/http"
)

waynedovey

oc patch clusterversion/version --type='merge' -p "$(cat <<- EOF
spec:
  overrides:
  - group: apps/v1
    kind: Deployment
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    unmanaged: true
EOF
)"

Lighfer

为了方便，将所有的用户名密码统一为Abc12345

最后会开放所有用户的所有权限，如果需要实现真正的权限控制，【授权】那一节请根据实际需求修改命令

生成证书

使用jdk的keytool生成，所有参数的含义keytool --help都带有中文文档，此处不再解释

neoakris

Overview

The following is based on 2 GCP / GKE How to Guides:

• https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed
• https://cloud.google.com/stackdriver/docs/managed-prometheus/query

What this adds is additional checks / verification commands that can be run to help troubleshoot.

Step 0: Prereqs

• provisioned GKE autopilot cluster v1.26.5 with all defaults
• alias k=kubectl