tuannvm

Register A Cluster To Deploy Apps To (Optional)

argocd cluster add docker-desktop

https://registry.terraform.io/providers/oboukili/argocd/latest/docs/resources/cluster

Application Definition

tuannvm

References

• https://github.com/varmaprr/Confluent-Kafka-Certification
• https://github.com/afonsir/apacha-kafka-ccdak
• https://www.confluent.io/wp-content/uploads/confluent-kafka-definitive-guide-complete.pdf
• https://kafka.apache.org/documentation/
• https://docs.confluent.io/platform/current/platform.html
• Developer questions
• Administrator questions

tuannvm

package main

import (
	"fmt"
	"io/ioutil"
	"log"
	"net/http"

	"github.com/gorilla/mux"
)

tuannvm

• Histogram bucket for negative values ("(..., 0)")
• https://github.com/iovisor/bpftrace/blob/master/docs/reference_guide.md

tuannvm

• CKS
  • Helpful Tips
  • Introduction
  • Cloud Native Security
    • Area of Concern for Kubernetes Infrastructure
    • Area of Concern for Workload Security
    • Area of Concern for Containers
    • Area of Concern for Code
  • Pod Security Standards
• What's the difference between a security policy and a security context?

tuannvm

Content-Type: multipart/mixed; boundary="//"
MIME-Version: 1.0

--//
Content-Type: text/cloud-config; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="cloud-config.txt"

#cloud-config

tuannvm

<?xml version="1.0" encoding="UTF-8"?>
<!-- Do not edit this file, it will be overwritten on install.
        Copy the file to $HOME/.config/openbox/ instead. -->
<openbox_config xmlns="http://openbox.org/3.4/rc" xmlns:xi="http://www.w3.org/2001/XInclude">
  <resistance>
    <strength>10</strength>
    <screen_edge_strength>20</screen_edge_strength>
  </resistance>
  <focus>
    <focusNew>yes</focusNew>

tuannvm

• Need to disable shared runner for new repository

tuannvm

Isitio evaluation

Setting Request Timeouts

One more thing to note about timeouts in Istio is that in addition to overriding them in route rules, as you did in this task, they can also be overridden on a per-request basis if the application adds an x-envoy-upstream-rq-timeout-ms header on outbound requests. In the header, the timeout is specified in milliseconds instead of seconds.

https://istio.io/docs/tasks/traffic-management/secure-ingress/sds/

Doesn't work in istio-enabled GKE, as right after we try to modify ingressgateway GKE will try to revert that :(

tuannvm

Evaluation

Pros

Cons

• Only support us-central1 atm
• 3 predefined roles
  • admin
• invoker