-
Terraform/Terragrunt conversion to the new 0.12 format
The latest Terraform 0.12.x version is out and it has a lot of good stuff but it also has breaking changes that needs a conversion to make your current 0.11.x Terraforms work with the latest version. With this change the same goes with Terrgrunt. This blog shows you how to update your Terraform 0.11.x to 0.12.x.
terraform | terragrunt | 0.12 | convert | cerversion
-
Prometheus has many samples rejected
Got this alert today from Prometheus and had no idea what it meant:
kubernetes | prometheus
-
Terraform 0.12.x Transformation
Terraform 0.12.x and future versions will not be compatible with previous versions. The syntax has changed and the usage of Terragrunt has also changed along with it.
Terraform | 0.12.x | Transformation
-
Why Is Kubernetes-ops Needed?
The main reason is so that we can all help each other out. Why should we all have to toil in infrastructure items?
Why | Is | Kubernetes-ops | Needed?
-
Why Kubernetes-ops
We are a big fan of Kubernetes, no matter how you bring up the cluster. Be it on a GKE, EKS, or a Kops cluster. For the last 3 years or so, on AWS we have been using an open source tool called Kops to bring up and maintain our Kubernetes cluster. Initially, AWS didn’t offer a Kubernetes service and when they did come out with one, we felt the Kubernetes life cycle management was still way better with Kops. Enough with our cluster opinions. We’ll have enough opinions on the packages we are about to describe to you =)
Why | Kubernetes-ops
-
Increasing DevOps Agility - follow these 3 rules to improve communication between DevOps and Developers
kubernetes | devops | agility | communication | developers
-
Kops Change Management
I am a big fan of using kops for deploying a Kubernetes clusters and more importantly maintaining a cluster throughout it’s lifecycle. Cluster creation is probably less than 10% of all the activities you will do with a cluster. The majority of the time is updating the cluster versions and changing different settings to meet your needs as you evolve with the cluster.
Kops | Change | Management
-
Kubernetes Nginx Ingress SSL Cipher ELB Hanging
Helm chart: https://github.com/helm/charts/tree/master/stable/nginx-ingress
Kubernetes | Nginx | Ingress | SSL | Cipher | ELB | Hanging
-
How to use Prometheus and k8sBot
This is us eating our own dog food. How else are we going to find these use cases =)
GKE | Prometheus | k8sBot
-
Kubernetes Troubleshooting Walkthrough - GKE Prometheus Operator alert KubeVersionMismatch
I am writing a series of blog posts about troubleshooting Kubernetes. One of the reasons why Kubernetes is so complex is because troubleshooting requires many levels of information gathering. It’s like trying to find the other end of a string in a tangled string ball.
GKE | Prometheus | Operator | alert | KubeVersionMismatch
-
Slack Oauth Permission Error
We recently updated the Slack Oauth permissions for our Slack application. This update was to remove the users:read.email permissions. The interesting thing is that when you remove a permission, you have to remove this permission ask in the Slack button for users to add this application to their Slack also.
Slack | Oauth | Permission | Error
-
Kops Kubernetes Audit Policy Setup Debug
Trying to enable Kubernetes audit policy on my Kops cluster but ran into some problems during my setup. Some of this guide is very specific to the problem about the audit policy but I think this is a good guide on general troubleshooting the Kubernetes Masters when a problem arises and what you should take a look at to figure out what the Kube masters are doing and if it is running correctly.
Kops | Kubernetes | Audit | Policy | Setup | Debug
-
Using k8sBot to get Kubernetes Pod Logs in Slack
Getting your Kubernetes pod logs into your Slack channel is easy now. No more cutting and pasting from kubectl to Slack. You can directly ask k8sBot to fetch the logs for you and post it to the channel.
kubernetes | k8sBot | pod | logs
-
Kubernetes Troubleshooting Walkthrough - imagepullbackoff
kubernetes | k8sbot | troubleshooting | imagepullbackoff
-
Kubernetes Troubleshooting Walkthrough - Pending Pods
kubernetes | k8sbot | troubleshooting | pending | pod
-
Kubernetes Troubleshooting Walkthrough - Trace ingress no service endpoints
This post is part of a Troubleshooting Walkthrough Series. I will talk about how to resolve common errors in Kubernetes clusters.
kubernetes | Trace | ingress | no | service | endpoints | k8sbot
-
Kubernetes Troubleshooting Walkthrough - Failing Job
This post is part of a Troubleshooting Walkthrough Series. I will talk about how to resolve common errors in Kubernetes clusters.
kubernetes | Failing | Job | k8sbot | troubleshooting
-
Kubernetes Troubleshooting Walkthrough - Tracing through an ingress
kubernetes | trace | ingress | service | port | not | matching | pod | port | k8sbot
-
Kubernetes Troubleshooting Walkthrough - Pod Failure CrashLoopBackOff
kubernetes | pod | failure | CrashLoopBackOff | k8sbot | troubleshooting
-
The Definitive Guide to Lowering Cloud Costs of Kubernetes Clusters
kubernetes | cloud | costs
-
Introducing k8sBot
A Kubernetes troubleshooting chatbot
kubernetes | slack | bot | troubleshooting | chatbot | k8sbot
-
ManagedKube launches on GKE Marketplace at KubeCon
ManagedKube is excited to announce their launch on GKE’s Marketplace at KubeCon! Keep an eye out for our application during Google’s keynote.
Kubernetes | cost | tool
-
Launching ManagedKube, a tool to help you decrease Kubernetes Cloud Costs
Using Kubernetes? Us too. It’s helped us deploy code that is more flexible, reliable, and efficient. However, the inherent sharing nature of Kubernetes that facilitates these benefits also creates a problem — you have no visibility into how much stuff costs. Once you’re up and running with Kubernetes, the next question I always hear as a DevOps consultant is, “What is this costing me?”
Kubernetes | costs
-
Kubernetes Troubleshooting a Deployment
I have launched my deployment but when i list the pods, I don’t see a pod for that deployment. How would I troubleshoot this and what would I look for.
Kubernetes | troubleshooting
-
Kubernetes: troubleshooting ingress and services traffic flows
Kubernetes is a great platform to run your application on, and it handles a lot of the heavy lifting on wiring up your application together.
Kubernetes | ingress | flows
-
How to check TLS Cert Expiration Date
$ kubectl -n devops get secret NAME TYPE DATA AGE default-token-88ssj kubernetes.io/service-account-token 3 109d devops-grafana Opaque 3 102d devops-grafana-token-ldcsh kubernetes.io/service-account-token 3 102d grafana-tls kubernetes.io/tls 2 91d istio.default istio.io/key-and-cert 3 35d istio.devops-grafana istio.io/key-and-cert 3 35d istio.kube-state-metrics istio.io/key-and-cert 3 35d istio.prometheus istio.io/key-and-cert 3 35d kube-state-metrics-token-qb2d2 kubernetes.io/service-account-token 3 105d prometheus-tls kubernetes.io/tls 2 91d prometheus-token-6pfxv kubernetes.io/service-account-token 3 105d
Kubernetes | gitops
-
KOPS Updating Cluster Is Awesome
Here is yet another reason why I think the Kops tool for creating and managing a Kubernetes’ cluster lifecycle is so great.
Kubernetes | kops | gitops
-
Kubernetes RBAC Port Forward
The kubectl CLI tool has a really nice feature that lets you port-forward a local port to a remote port into a pod. For example, if you are running a Postgres server or a web server, you usually cant reach it without exposing a nodeport or an ingress. Sometime this is undesirable because you dont want to expose it out to the world or you just need to access this port for debugging reasons.
Kubernetes | RBAC | Port | Forward | port-forward
-
Kubernetes Cron Jobs
Sometime you just have to run a cronjob that does something and sometime you have to run a cronjob that restarts a service. Yeah, unfortunately this is a thing.
kubernetes | cron | job
-
Using the AWS CLI - find and terminate an EC2 Instance
aws | cli | ec2
-
Kubernetes Access External Services
There are often time when you will need to access an external service in Kubernetes but still want to use a static name.
kubernetes | service | external
-
sshuttle VPN
sshuttle uses ssh and python to create a tunnel from your local machine to any remote network you are able to ssh into.
kubernetes | vpn
-
Docker Container Toolbox
docker | aws | tools | troubleshooting
-
Various kubectl Usage
Download the latest kubectl version here: https://kubernetes.io/docs/tasks/tools/install-kubectl/
kubernetes | kubectl | logs
-
Kops Cluster Templating
If you havent heard of the tool Kops (https://github.com/kubernetes/kops) for create Kubernetes clusters, you should check it out right now! It is a great tool to create and manage the lifecycle of a Kubernetes cluster.
kubernetes | kops
-
Kubernetes RBAC - giving permissions for logging and port-forwarding
I am really liking Kubernetes RBAC. It is “fairly” simple to use and so powerful.
Kubernetes | Rbac | Security
-
S3 - How to restore an entire folders version
This tutorial explains how to use a tool that will help you to restore an entire S3 folder’s files.
Aws | S3 | Troubleshooting | Versioning
-
Kubernetes DNS Troubleshooting
On a new cluster we saw the following logs from an application we launched:
Aws | Kubernetes
-
Why use Kops
Why Use Kops to create your Kubernetes cluster
Aws | Kubernetes | Kops
-
Kubectl Pod logs
There are a few useful options when getting logs from your Kubernetes pods:
Aws | Kubernetes | Logs
-
AWS WAF
The AWS WAF (Web application firewall) protects your web servers from malicious attacks from the internet and provides DDoS protection at a very low cost compared to all other available solutions. With so many automated bots looking to exploit vulnerabilities, you can be hacked even if you’re not targeted. Once a bot scan has found you susceptible to a certain vulnerability, it will extract as much information as possible. In today’s world, you must take active steps to protect yourself before something bad happens.
Aws | Waf | Security
