Author Archives: setevoy

AWS: eksctl – “Put http://169.254.169.254/latest/api/token: net/http: request canceled”
0 (0)

26 April 2020

We have a Docker image with the eksctl tool included. We also have an ЕС2 with Linux with the eksctl. There is an AWS IAM Instance Profile attached to this EC2 with the AdminAccess policy assigned. On this ЕС2 we have Jenkins running in a Docker container, and it spawns its jobs inside in additional… Read More: AWS: eksctl – “Put http://169.254.169.254/latest/api/token: net/http: request canceled”0 (0) »

Loading

AWS Elastic Kubernetes Service: a cluster creation automation, part 1 – CloudFormation
0 (0)

24 April 2020

The task is: create automation to roll out an AWS Elastic Kubernetes Service cluster from scratch. Will use: Ansible: to automate CloudFormation stack creation and to execute eksctl with necessary parameters CloudFormation with NestedStacks: to create an infrastructure – VPC, subnets, SecurityGroups, IAM-roles, etc eksctl: to create a cluster itself using resources created by CloudFormation… Read More: AWS Elastic Kubernetes Service: a cluster creation automation, part 1… »

Loading

Google Drive: using via terminal on Linux Debian 9 with insync-headless
0 (0)

24 April 2020

I’d like to attach a Google Drive with my Calibre books library to a Debian host because to run the Calibre Web application, as Nextcloud with a big data not too much stable and I have around 5 GB of books (see the Calibre Web: home in-browser online-library with Nextcloud storage and Moon+ Reader on… Read More: Google Drive: using via terminal on Linux Debian 9 with… »

Loading

AWS Elastic Kubernetes Service: running ALB Ingress controller
0 (0)

21 April 2020

AWS ALB Ingress Controller for Kubernetes – is a Kubernetes controller which actually controls AWS Application Load Balancers (ALB) in an AWS account when an Ingress resource with the kubernetes.io/ingress.class: alb annotation is created in a Kubernetes cluster. This Ingress resource in its turn describes an ALB Listeners configuration with SSL termination or traffic routing… Read More: AWS Elastic Kubernetes Service: running ALB Ingress controller0 (0) »

Loading

Kubernetes: part 5 — RBAC authorization with a Role and RoleBinding example
0 (0)

26 March 2020

The next task is to add a new user who will have access to check pods state and watch logs – any other operations must be prohibited. AWS EKS uses AWS IAM for authentification in a Kubernetes cluster (check the Kubernetes: part 4 – AWS EKS authentification, aws-iam-authenticator and AWS IAM post for details), bot… Read More: Kubernetes: part 5 — RBAC authorization with a Role and… »

Loading

Linux: processes core dumps, systemd-coredump and Debian
0 (0)

14 March 2020

Need to get a dump from fro ma PHP process on Debian 9. In this post will take a Linux kernel mechanism to create and manage processes dumps. Kernel’s dumps are created in another way, check Kdump на Arch Wiki. Linux Core Dump The kernel will create a process dump if it performed an invalid… Read More: Linux: processes core dumps, systemd-coredump and Debian0 (0) »

Loading

AWS: CloudFormation – Nested Stacks and stacks parameters Import/Export
0 (0)

29 February 2020

Nested Stacks in AWS CloudFormation are stacks, created from another, a “parent”, stack using AWS::CloudFormation::Stack. The main idea behind the Nested Stacks is to avoid writing superfluous code and to make templates reusable. Instead, a template is created only once, stored in an S3 bucket, and during stacks creation – you just refer to it.… Read More: AWS: CloudFormation – Nested Stacks and stacks parameters Import/Export0 (0) »

Loading

Linux: gnome-keyring setup as Freedesktop SecretService
0 (0)

26 February 2020

Currently, I’m using KeePass as passwords, RSA-keys, and as the Freedesktop SecretService, see the KeePass: an MFA TOTP codes, a browser’s passwords, SSH keys passwords storage configuration and Secret Service integration post. The first issue I faced with during such a setup is the fact that KeePass’ database is synced between my computers (it’s database… Read More: Linux: gnome-keyring setup as Freedesktop SecretService0 (0) »

Loading

Redis: “psync scheduled to be closed ASAP for overcoming of output buffer limits” and the client-output-buffer-limit
0 (0)

26 February 2020

We have a Redis-cluster with Master-slave replication and Sentinel, see the Redis: replication, part 2 – Master-Slave replication, and Redis Sentinel, Redis: fork – Cannot allocate memory, Linux, virtual memory and vm.overcommit_memory, and Redis: main configuration parameters and performance tuning overview posts. The system worked great until we started using it much more actively. Redis… Read More: Redis: “psync scheduled to be closed ASAP for overcoming of… »

Loading

Linux: PHP-FPM, Docker, STDOUT and STDERR – no an application’s error logs
0 (0)

24 February 2020

We have a Docker image with NGINX, PHP-FPM, and Supervisor. In the same image, we have our PHP application included, which outputs its errors to the /dev/stderr as per its php.ini file: … [global] error_log=/dev/stderr … The problem is, that if run kubectl logs –  there will be no error output from the application. So,… Read More: Linux: PHP-FPM, Docker, STDOUT and STDERR – no an application’s… »

Loading