SAML – Secure Assertion Markup Language is used for federated authentication when some service which we need to get access to (a Service Provider), asks another service (an Identity Provider) to perform a user’s authentification. Check the documentation here>>>. Service Provider (SP): is a system where need to authenticate, in our case this will be Jenkins… Read More »
Vertica is a data warehouse solution intended to store petabytes amount of data. The task, for now, is to spin up a kind of Proof of Concept for Vertica on an AWS EC2 to take a closer look at its setup and to give it to data-analytics to play with it a bit. Vertica has… Read More »
We have an AWS EC2 with Debian and logrotate. One day its root partition was exhausted and when I started investigating it – found, that we have a bunch of files like /var/log/syslog.N.gz. At the same time by default logrotate creates a config file to rotate syslog log files: [simterm] root@monitoring-dev:~# cat /etc/logrotate.d/syslog # Ansible… Read More »
You can use your own domain configured for Okta. The one thing worth to mention here is the fact that Okta’s official plugin doesn’t work with a Custom domain feature so you’ll have to use Okta’s URL for the plugin authentification, see the documentation for details. Custom domain configuration Go to the Settings > Customization:… Read More »
Okta is a service which provides Single Sign-On ability. I’d like to move all our users to the Okta for better management, so the task now will be to create a Gmail mailbox account and Slack community access. Okta Gmail app Register a new account, go to the Get started, in the Use single sign-on… Read More »
We have a picture in an AWS S3 bucket which updated, but AWS CloudFront still returns its old version. To remove it from the CloudFront cache – need to create an object’s invalidation. It can be created via AWS Console web-UI or by using AWS CLI. In the AWS Console – go to the desired… Read More »
In addition to the AWS: create an Elastic Container Registry and Jenkins deploy job post – the next part, where we will create a new Jenkins job to deploy a Docker Compose file to run our Docker image. Docker Compose file will be updated by an Ansible role called docker-deploy, which will set the desired… Read More »
We have an AWS EC2 which suddenly rebooted. The issue is that its /var/log/messages incomplete and the latest record is about rsyslog service killed – but nothing about who killed it and why. Then I went to the journald but surprise – it stores logs only for the current boot so there was no way… Read More »
Uptrends – just a simple pinging monitoring service already used for the RTFM blog (see the Prometheus: RTFM blog monitoring set up with Ansible – Grafana, Loki, and promtail post for more details). Now I’d like to add it as an additional alerting service for the project’s API-endpoints and configure its alerts to be sent… Read More »
The task is to create an AWS ECR repository and add a Jenkins job to build and deploy Docker images to this repository. See the next part – Jenkins: Docker Compose deployment from Ansible with ECR authentication. AWS ECR Go to the ECR, click Get Started, set a new repository name: Lave Mutable, so you’ll be… Read More »