[AWS] Solutions Architect Professional: Lesson 1 – Identity & Federation

Posted on By nim No Comments on [AWS] Solutions Architect Professional: Lesson 1 – Identity & Federation
[AWS] Solutions Architect Professional: Lesson 1 – Identity & Federation

https://media.datacumulus.com/aws-sap/AWS%20Certified%20Solutions%20Architect%20Professional%20Slides%20v3.1.1.pdf 1) IAM 1.1) What should you know by now Users: long-term credentialsGroupsRoles: short-term credentials, uses STS – EC2 Instance Roles: uses the EC2 metadata service. One role at a time per instance – Service Roles: API Gateway, CodeDeploy, etc… – Cross Account rolesPolicies – AWS Managed – Customer Manage – Inline PoliciesResource Based Policies…

Read More “[AWS] Solutions Architect Professional: Lesson 1 – Identity & Federation” »

AWS - Amazon Web Service

[ArgoCD/KSOPS/AWS] Encrypt secrets before pushing them to GitHub.

Posted on By nim No Comments on [ArgoCD/KSOPS/AWS] Encrypt secrets before pushing them to GitHub.
[ArgoCD/KSOPS/AWS] Encrypt secrets before pushing them to GitHub.

Trước đây mình có 1 bài hướng dẫn các bạn encypt 1 file manifest bất kì trước khi đẩy lên github và sau đó thì Argocd sẽ decrypt manifest và apply to k8s Ksop with KMS on Argocd Lần này chúng ta sẽ sử dụng KSOPS và KMS của aws. Chúng ta cần cài sops Cách…

Read More “[ArgoCD/KSOPS/AWS] Encrypt secrets before pushing them to GitHub.” »

ArgoCD

[Bitnami Sealed Secrets] How to save secrets On GitHub.

Posted on By nim No Comments on [Bitnami Sealed Secrets] How to save secrets On GitHub.
[Bitnami Sealed Secrets] How to save secrets On GitHub.

Như nhiều bài GitOps mà mình đã giới thiệu thì chúng ta sẽ cần lưu mọi template trên git, githubNhưng chúng ta không được phép lưu secret trên k8s vậy thì phải làm sao? Chúng ta có 1 giải pháp của bitnami đó chính là Sealed Secrets I) Install Sealed Secrets by helm Đầu tiên…

Read More “[Bitnami Sealed Secrets] How to save secrets On GitHub.” »

Kubernetes

[RabbitMQ] Installing RabbitMQ by Docker and Run RabbitMQ commands

Posted on By nim No Comments on [RabbitMQ] Installing RabbitMQ by Docker and Run RabbitMQ commands
[RabbitMQ] Installing RabbitMQ by Docker and Run RabbitMQ commands

Bạn đang chưa biết j về RabbitMQ.Chúng ta cùng tìm hiểu. Bạn cần Run RabbitMQ trên Docker Bạn Run Container với nhiệm Publish messages vào RabbitMQ Bạn có thể gửi message vào RabbitMQ Health check RabbitMQ. Nếu bạn đã cài 1 con rabbitMQ có rabbit Manager.Bạn có thể kiểm tra đường link: http://<RabbitMQ IP>/api/index.html

Docker

[Private NPM] Create The Private NPM Packages

Posted on By nim No Comments on [Private NPM] Create The Private NPM Packages
[Private NPM] Create The Private NPM Packages

Bạn đang cần dựng 1 Private NPM Packages 1) Private NPM Packages in Bitbucket Bạn có thể tham khảo bài viết bên dưới:https://mskutta.github.io/2018/05/25/private-npm-packages-in-bitbucket/#referencing-npm-packages-from-bitbuckethttps://community.atlassian.com/t5/Bitbucket-questions/How-can-I-install-an-npm-package-from-my-bitbucket-repository/qaq-p/752908https://sqllyw.wordpress.com/2015/10/17/npm-install-modules-from-bitbucket-private-repositories/ 2) nexus repository manager https://artifacthub.io/packages/helm/sonatype/nexus-repository-managerhttps://levelup.gitconnected.com/deploying-private-npm-packages-to-nexus-a16722cc8166

Bitbucket, Coding

[Goldilocks] Help you identify a starting point for resource requests and limits.

Posted on By nim No Comments on [Goldilocks] Help you identify a starting point for resource requests and limits.
[Goldilocks] Help you identify a starting point for resource requests and limits.

hồi trước chúng ta dụng kubecost ngày nay chúng ta có thêm Goldilockshttps://github.com/FairwindsOps/goldilockshttps://www.fairwinds.com/blog/introducing-goldilocks-a-tool-for-recommending-resource-requests?fbclid=IwAR0DTQZdb-D6gU3_Mes1W_NACDxxE8DNOQ9nL8OzGxZi3ruAecxsS1zcHyM

Kubernetes & Container

[Kubernetes] Kubernetes Scanner to find Security Vulnerability and Misconfiguration

Posted on By nim No Comments on [Kubernetes] Kubernetes Scanner to find Security Vulnerability and Misconfiguration
[Kubernetes] Kubernetes Scanner to find Security Vulnerability and Misconfiguration

Tạm thời note các tool để scan cluster k8shttps://geekflare.com/kubernetes-security-scanner/ Kube HunterKube BenchCheckovMKITKubeiKube ScanKubeauditKubesec Kubeeye https://www.kitploit.com/2022/11/kubeeye-tool-to-find-various-problems.html?fbclid=IwAR1oXWcLkiRt2-ntpp4L7OqvCeu6vVEBr7WQ6kdaA-hsAMhd5CLumSskr60

BareMetal

[Kubeshark] Monitoring and Viewing traffics on Kubernetes easily by Kubeshark

Posted on By nim No Comments on [Kubeshark] Monitoring and Viewing traffics on Kubernetes easily by Kubeshark
[Kubeshark] Monitoring and Viewing traffics on Kubernetes easily by Kubeshark

Một phần mền nội tiếng là wireshark thì trên k8s chúng ta có Kubeshark Kubeshark is an observability and monitoring tool for Kubernetes, enabling dynamic analysis of the microservices, detecting anomalies and triggering functions when certain patterns appear in runtime. 1) Install Kubeshark via helm chart Đâu tiên các bạn cần đăng nhập và lấy token:https://console.kubeshark.co/ Sau khi đã có token thì bạn…

Read More “[Kubeshark] Monitoring and Viewing traffics on Kubernetes easily by Kubeshark” »

Kubernetes & Container