Ops

• k8s Cheatsheet

  Force a Redeployment If you want to recycle pods in a deployment kubectl rollout restart deploy/<mydeployment> Get ALL resources Only gets pods/deployments/services kubectl get all <-n namespace> Great hint from this kubectl issue on leveraging kubectl api-resources to get all resources within a namespace kubectl api-resources --verbs=list --namespaced -o name \ | xargs -n 1 kubectl get --show-kind --ignore-not-found -l <label>=<value> -n <namespace> Job from Cronjob kubectl create job --from=cronjob/<cronjob> <newjobname> Custom columns Super useful for a LOT of quick information.

• Kubernetes

  Kubernetes - the API for the modern data-center! At least why I find it so exciting. General Kubernetes: Main Kubernetes page. Docs are fairly good and in depth. Kubernetes Production Check List: Good list of best practices when running kubernetes in production Ambassador K8S Initializer: Opinionated monitoring/Gitops stack generator. 47 Things To Become a Kubernetes Expert - Really good detailed items for k8s foundational work 100 Days of Kubernetes - Source Why you should build on Kubernetes from day one Beginners Guide to Kubernetes Components CRI: Container Runtimes CNI: Network Plugins CNI Comparison services that are potentially needed with running kuberntes in production.

• Monitor

  All things monitoring related. Cloud Native My preferred stack: Prometheus, Grafana, Loki Node Exporter: Prometheus exporter for server/OS statistics Elk Stack for Log Monitoring: ELK tends to be a bit heavy, but keeping this around just in case Changd: Notify if WebUI changes. Performance related articles at https://www.brendangregg.com Internet Monitoring (globally) AWS CloudWatch Internet Weather Map CloudFlare Radar- Cloudflare Overall Internet and statistic monitor. Contrack talkes - one thousand and one flows - Interesting article on monitoring the maximum number of entries in the Linux Contrack table, used for statefile firewall setup Datadog Updog Outage Tracker - Public API based tracking from Datadog Pingdom’s State of the Internet Down Detector Oracle Internet Intelligence The Outage Mailing List - Network admins chatting about global issues Internet Monitoring (locally) Open Speed Test: Browser based, no client login required.

• OpenSSL Cheatsheet

  OpenSSL Quick Commands Details of a certificate openssl x509 -noout -text -in <cert> Generate the Sha1 or sha256 fingerprint for a certificate openssl x509 - -noout -text -fingerprint [-sha1|-sha256] in <certificate> SSL Private CA Build a CA See JamieLinux.com for a good walkthrough. Build a new certificate openssl req -out mydomain.csr -new -sha256 -newkey rsa:2048 -nodes -keyout mydoamin.key Parameters Country: US State: Michigan Locality Name: Full City Name Organization Name: Company Organizational Unit: Department Common name: fqdn.

• Operations

  Now that my day job involves more specific DevOps practices, I’ve grown my Sysadmin phylosophy to be more all-encompassing. Beyond just automation of system configuration, modern practices requires more encompassing practices such as tight integration with developers, version control, test driven development, and continuous integration and delivery. From ScaledAgileFramework Collaboration and organization: A primary focus of Devops is around culture. Instead of an “us versus them” mentality between production and development teams, high integration of those roles is necessary.