Author: nim

[EKS] Adjusting things to migrate EKS legacy to new versions.

Posted on By nim No Comments on [EKS] Adjusting things to migrate EKS legacy to new versions.

Nếu anh em đã có provison eks windows trước đó thì anh có thể thấy 2 thành phần: vpc-admission-webhook and vpc-resource-controller trong eks cluster của anh em. Nhưng ở các version mới của eks từ 1.23 + thì aws ko còn sử dụng chúng nữahttps://docs.aws.amazon.com/eks/latest/userguide/windows-support.html#enable-windows-support Và chúng ta cần remove vpc-admission-webhook and vpc-resource-controller ra khỏi cluster nếu bạn đang…

Read More “[EKS] Adjusting things to migrate EKS legacy to new versions.” »

AWS - Amazon Web Service, Kubernetes

[Tetragon] Security Observability and Runtime Enforcement

Posted on By nim No Comments on [Tetragon] Security Observability and Runtime Enforcement

Tetragon is a flexible Kubernetes-aware security observability and runtime enforcement tool that applies policy and filtering directly with eBPF, allowing for reduced observation overhead, tracking of any process, and real-time enforcement of policies. https://isovalent.com/blog/post/can-i-use-tetragon-without-cilium-yes/

Kubernetes

[Docker] Setup Docker for Windows Containers (NO Docker Desktop Needed!)

Posted on By nim No Comments on [Docker] Setup Docker for Windows Containers (NO Docker Desktop Needed!)

Setting up Docker for Windows Containers manually is not really that hard to do. You can use Docker for Desktop, but if you don’t want to pay for a license, you can easily set up the Docker Daemon and CLI utilities to work with all your favorite development tools like Visual Studio or VS Code….

Read More “[Docker] Setup Docker for Windows Containers (NO Docker Desktop Needed!)” »

Docker

[Prometheus] filter or allowlist metrics before sending to the remote storage via remote_write in Prometheus

Posted on By nim No Comments on [Prometheus] filter or allowlist metrics before sending to the remote storage via remote_write in Prometheus

There are a few options to filter or allowlist metrics before they are sent to the remote storage via remote_write in Prometheus: 1. Use metric relabeling You can configure relabelling rules on the remote_write config to filter or transform metrics before they are sent. For example: This would only keep metrics matching the regex ^my_metric_.*…

Read More “[Prometheus] filter or allowlist metrics before sending to the remote storage via remote_write in Prometheus” »

Prometheus

How to join labels of 2 different metrics on PromQL

Posted on By nim No Comments on How to join labels of 2 different metrics on PromQL

Look into the situation Đầu tiên chúng ta có 2 metric labels như sau: Metrics and Labels: Look into kube_pod_container_info metrics. With kube_pod_container_info Look into windows_container_cpu_usage_seconds_kernelmode windows_container_cpu_usage_seconds_kernelmode thì có container_id, nhưng lại không có namespace, pod, container==> Bằng mắt: thì chúng ta không thể nào nhận biết được CPU usage này của container nào. Từ…

Read More “How to join labels of 2 different metrics on PromQL” »

Prometheus

[Python] Look into FastAPI to contribute backend by Python

Posted on By nim No Comments on [Python] Look into FastAPI to contribute backend by Python

1) Define Function in Python. Sau đây chúng ta define 1 function trong python. Trong đoạn mã Python trên, hàm my_func có một đối số có tên là my_var có kiểu dữ liệu được ghi là str | None. Đây là kiểu gợi ý cho Python biết đối số my_var có thể là một chuỗi…

Read More “[Python] Look into FastAPI to contribute backend by Python” »

Python