John Freier - New pages [en]

Pickling

2025-10-21T16:47:51Z

Jfreier: Created page with "Pickled Jalapeños 1 Cup - Water 1 Cup - Vinegar 2 Tbs - Sugar 1 Tbs - Salt 10 - peppercorns 1 - Bay left 3 - Garlic Slice Jalapeños, boil ingredients, put all in jar. Cowb..."

Pickled Jalapeños
1 Cup - Water
1 Cup - Vinegar
2 Tbs - Sugar
1 Tbs - Salt
10 - peppercorns
1 - Bay left
3 - Garlic

Slice Jalapeños, boil ingredients, put all in jar.

Cowboy Candy
1 Cup - Apple Cider Vinegar
1 Cup - Sugar
1 Tsp - Garlic Powder
1/4 Tsp - Turmeric

Boil ingredients, then 5 mins on simmer, back to boil, add jalapeños, boil for 4 mins. Remove jalapeños, boil until reduced a bit, about 5 mins. Add mix to jalapeños. Wait 3-4 weeks, eat.

Coleslaw

2025-07-13T00:18:50Z

Jfreier: Created page with "1/2 cup milk 1/8 sugar (half 1/4 cup) 1/2 cup mayonnaise 1/2 tablespoon vinegar Lemon juice Salt & pepper Cabbage 1 carrot A little chopped onions"

1/2 cup milk
1/8 sugar (half 1/4 cup)
1/2 cup mayonnaise
1/2 tablespoon vinegar
Lemon juice
Salt & pepper
Cabbage
1 carrot
A little chopped onions

Python poetry

2025-05-30T15:48:44Z

Jfreier: Created page with "Create new project poetry init"

Create new project
poetry init

Python pdb

2024-05-28T20:42:11Z

Jfreier:

To debug python applications use the library pdb.

Add the following to the top of your file.

import pdb

To add a breakpoint in the python use
pdb.set_trace()
or
breakpoint() # 3.7 for higher

And then just add the following to your command.
--pdb

Example
pytest --pdb test/test.py

Once it starts up you will be brought to a promote.
From the there you can use any of the following.

Navigating Code (within the Pdb interpreter)
l(ist) list 11 lines surrounding the current line
l . list the current location
w(here) display the file and line number of the current line
n(ext) execute the current line
s(tep) step into functions called at the current line
r(eturn) execute until the current function’s return is encountered

Controlling Execution
b[#] create a breakpoint at line [#]
b list breakpoints and their indices
c(ontinue) execute until a breakpoint is encountered
clear[#] clear breakpoint of index [#]

Changing Variables / Interacting with Code
p<name> print value of the variable <name>
!<expr> execute the expression <expr> NOTE: this acts just like a python interpreter
q(uit) exit the debugger

Example Command
poetry run pytest -o log_cli=true --log-cli-level=INFO -v tests/functions/test_function.py::TestOne::test_one --pdb --no-cov

Issues
If pdb is breaking in the wrong location try adding the following flag.
--no-cov

Osx-users

2024-02-29T16:20:56Z

Jfreier: Created page with "Add a user to a group sudo dseditgroup -o edit -a john -t user agroup Create a group sudo dscl . create /Groups/dev List items about a group. dscacheutil -q group -a n..."

Add a user to a group
sudo dseditgroup -o edit -a john -t user agroup

Create a group
sudo dscl . create /Groups/dev

List items about a group.
dscacheutil -q group -a name dev

Plsql first records

2023-10-03T16:28:43Z

Jfreier: Created page with "To fetch the first 10 records from a result. SELECT * FROM table_a FETCH FIRST 1 ROW ONLY;"

To fetch the first 10 records from a result.

SELECT *
FROM table_a
FETCH FIRST 1 ROW ONLY;

Python pytest

2023-05-02T18:49:53Z

Jfreier:

To run tests in a specific dir
pytest path/to/dir

To run tests in a specific file
pytest path/to/test_file.py

To run a specific test in a file
pytest path/to/test_file.py::test_function

or

pytest path/to/test_file.py -k 'test_name'

To show the print statements.
-s or --capture=no

To show log statements
-o log_cli=true

To set the log level.
--log-cli-level=INFO

Python pyenv

2023-01-19T21:26:31Z

Jfreier: Created page with "PyEnv is a small app that helps manage different python versions in the system. https://github.com/pyenv/pyenv == Install a Python version == To list all the available versi..."

PyEnv is a small app that helps manage different python versions in the system.

https://github.com/pyenv/pyenv

== Install a Python version ==
To list all the available versions.
pyenv install --list

To install a version
pyenv install 3.9.14

== Install location ==

Where are the versions of python installed.
~/.pyenv/versions

or
pyenv root

== Set Python version ==
To see all the installed versions.
pyenv versions

This will set the local python command to a version. You can also use 'global'.
pyenv local 3.9.14

Containerfile

2023-01-17T17:52:14Z

Jfreier:

Containerfile and Dockerfile are interchangeable for the most part.

OCI prefers the generic term Containerfile.

== WORKDIR ==
This set the working directory, it will also create the directory if it doesn't exists.
WORKDIR /opt

== COPY ==
This will copy a file from the local host to the container.
COPY app.tar /app

* user ADD if you want to have more options, like auto extract and git pulls.

== ENV ==
To set an environment variable.
ENV EXAMPLE=/opt/example
ENV APP_PROFILE=dev

Nodejs

2023-01-05T18:25:06Z

Jfreier:

== How to use Require ==

Require will cache objects after it calls them, kind of like a singleton pattern.

To build out an object that require can grab there are a couple of different ways.

The following way will create an object based on a function so it can have private variables.

example.js
const exampleService = (function() {
const self = this;

self.print = function() {
console.log('...');
}

return this;

})();
module.exports = exampleService;

Another way is to create a kind of JSON object with functions.

example.js
const exampleService = {
name: 'example',
print: function() {
console.log('...');
}

};
module.exports = exampleService;

Then you can call them from your script like so.
const exampleService = require('./service/example');
exampleService.print();

You don't need to add the .js but I think you have to start with '.' directory.

Dynamodb

2023-01-05T15:29:23Z

Jfreier:

DynamoDB is an AWS product that has a stand alone app for development but is really suppose to be built out in AWS where they handle the administration/OPS.

This is a NoSQL database.

== DynamoDB Local ==
Amazon has a local version of the DynamoDB that can be downloaded and ran, for development purposes.

1. Download the dynamodb_local_latest.tar.gz
2. Extract
3. Run
java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb

When ran a file gets created that holds the data. If deleted...data lost.
shared-local-instance.db

== Partition Key and Sort Key ==
There are two types of keys that can be used to define a primary key.

Partition keys are the how the database separates data in the backend. There are used to optimize queries.
When using `scan`, DynamoDB will go through ever record in the table, when using `query`, it will look in the partition.

Sort keys allow you to sort data by a secondary column.

If more sorting is required, take a look at using Local Global Index.

When adding data, which ever is setup...These fields will be required, all other data is optional.

== Global Secondary Index ==
This allows you to create a super table from the base table, to allow for different keys and sorting when using the `query` command.

Example
var AWS = require("aws-sdk");
AWS.config.update({
region: "local",
endpoint: "http://localhost:8000"
});
var dynamodb = new AWS.DynamoDB();
var params = {
TableName: "statements",
AttributeDefinitions: [{ // Attributes are the items that are used in the key definitions and GSI/LSI.
AttributeName: "id",
AttributeType: "S" // S - String
},
{
AttributeName: "time",
AttributeType: "N" // N - Number
},
{
AttributeName: "userId",
AttributeType: "S"
}
],
KeySchema: [{
AttributeName: "id",
KeyType: "HASH"
}, //Partition key
{
AttributeName: "userId",
KeyType: "RANGE"
}, //Sort key
],
GlobalSecondaryIndexes: [{
IndexName: 'statement_user_index',
KeySchema: [{
AttributeName: 'userId',
KeyType: 'HASH',
},
{
AttributeName: 'time',
KeyType: 'RANGE',
}
],
Projection: {
ProjectionType: 'ALL' // KEY_ONLY, INCLUDE, ALL - This holds the columns that are used in the GSI and returned when queried.
},
ProvisionedThroughput: {
WriteCapacityUnits: 5,
ReadCapacityUnits: 5
}
}],
ProvisionedThroughput: {
ReadCapacityUnits: 5,
WriteCapacityUnits: 5
}
};
dynamodb.createTable(params, function(err, data) {
if (err) {
console.error("Unable to create table. Error JSON:", JSON.stringify(err, null, 2));
} else {
console.log("Created table. Table description JSON:", JSON.stringify(data, null, 2));
}
});

Example query
this.findLatest = async function(table, userId) {
var params = {
TableName: table,
IndexName: 'statement_user_index', // Must have the indexName too query against an GSI index.
KeyConditionExpression: 'userId = :userId', // Must contain the key
ExpressionAttributeValues: { ':userId': userId }, // Used like prepared statements.
Limit: 1, // Number of results returned (optional)
ScanIndexForward: false // Ascending or Descending. (Optional)
};
try {
const results = await docClient.query(params).promise();
return results.Items;
} catch (err) {
console.log(err);
throw err;
};
}

== Local Secondary Index ==
This creates a super table on top of the base table to allow for more sorting abilities only.

Example
var AWS = require("aws-sdk");
AWS.config.update({
region: "local",
endpoint: "http://localhost:8000"
});
var dynamodb = new AWS.DynamoDB();
var params = {
TableName: "statements",
AttributeDefinitions: [{ // Attributes are the items that are used in the key definitions and GSI/LSI.
AttributeName: "id",
AttributeType: "S" // S - String
},
{
AttributeName: "time",
AttributeType: "N" // N - Number
},
{
AttributeName: "userId",
AttributeType: "S"
}
],
KeySchema: [{
AttributeName: "id",
KeyType: "HASH"
}, //Partition key
{
AttributeName: "userId",
KeyType: "RANGE"
}, //Sort key
],
LocalSecondaryIndexes: [{
IndexName: 'statement_user_index',
KeySchema: [{
AttributeName: "id", // Must have the same key as the base.
KeyType: "HASH"
},
{
AttributeName: 'time', // This is the secondary sort key.
KeyType: 'RANGE',
}
],
Projection: {
ProjectionType: 'ALL' // KEY_ONLY, INCLUDE, ALL - This holds the columns that are used in the GSI and returned when queried.
},
ProvisionedThroughput: {
WriteCapacityUnits: 5,
ReadCapacityUnits: 5
}
}],
ProvisionedThroughput: {
ReadCapacityUnits: 5,
WriteCapacityUnits: 5
}
};
dynamodb.createTable(params, function(err, data) {
if (err) {
console.error("Unable to create table. Error JSON:", JSON.stringify(err, null, 2));
} else {
console.log("Created table. Table description JSON:", JSON.stringify(data, null, 2));
}
});

== Get a record ==
var params = {
TableName: table,
Key: {
"id": id
}
};
try {
const results = await docClient.get(params).promise();
console.log('Find by id ' + id, JSON.stringify(results, null, 2));
return results;
} catch (err) {
console.log(err);
throw err;
};

== Add a record ==
var params = {
TableName: table,
Item: entity
};
try {
const results = await docClient.put(params).promise();
console.log('Added ', entity);
return entity;
} catch (err) {
console.log(err);
throw err;
};

== Delete a record ==
var params = {
TableName: table,
Key: {
id: id
}
};
try {
const results = await docClient.delete(params).promise();
console.log('Removed ' + id + " from " + table);
return results;
} catch (err) {
console.log(err);
throw err;
};

Kafka

2022-08-24T14:30:19Z

Jfreier:

== Run Kafka in Podman ==
The following will run Kafka and Zookeeper in Podman, and allow you to connect to localhost:9092.

Pull the Zookeeper and Kafka images.

podman pull bitnami/kafka
podman pull bitnami/zookeeper

Create a pod container to place the containers in so they can talk to each other.

podman pod create \
--name kafka-pod \
-p 9092:9092 \
-p 2181:2181

Start the Zookeeper instance.

podman run \
-d \
--pod kafka-pod \
--name zookeeper \
-e ALLOW_ANONYMOUS_LOGIN=yes \
bitnami/zookeeper

Start the Kafka instance.

podman run \
-d \
--pod kafka-pod \
--name kafka \
-e ALLOW_PLAINTEXT_LISTENER=yes \
-e KAFKA_CFG_ZOOKEEPER_CONNECT=127.0.0.1:2181 \
-e KAFKA_CFG_LISTENERS=PLAINTEXT://:9092 \
-e KAFKA_CFG_ADVERTISED_LISTENERS=PLAINTEXT://localhost:9092 \
bitnami/kafka

Linux arch install

2022-06-22T15:48:15Z

Jfreier:

Here are my steps. These steps are for bios, NOT uefi

1. Boot in to Arch ISO.

2. Update date time.
# timedatectl set-ntp true

3. Setup Partitions

3.a Use lsblk or fdisk -l to find the path of the harddisk.
/dev/sda

3.b Start up fdisk to format a harddisk.

# fdisk /dev/sda

Remember to change the type for swap to hex '82' or swap

sda1 - primary - Linux - boot - 1gb
sda2 - primary - Linux swap - swap - 1.5 x memmory
sda3 - primary - Linux - root - The rest.

3.c When all the partitions are setup use 'w' to apply the changes.

# w

4. Format the new partitions.

# mkfs.ext2 /dev/sda1
# mkswap /dev/sda2
# mkfs.ext4 /dev/sda3

5. Mount the new file partitioned file systems and turn swap on.

# mount /dev/sda3 /mnt
# mount --mkdir /dev/sda1 /mnt/boot

swapon /dev/sda2

6. Use pacstrap in install arch.

# pacstrap /mnt base base-devel linux linux-firmware networkmanager vim

7. Generate the fstab file to define the partitions and filesystems

# genfstab -U /mnt >> /mnt/etc/fstab

8. Sudo login in to the system

# arch-chroot /mnt

9. Set the timezone.

# ln -sf /usr/share/zoneinfo/America/Chicago /etc/localtime

Update the time in /etc/adjtime

# hwclock --systohc

10. Localization - Edit the file

vim /etc/locale.gen

Uncomment out
en_US.UTF-8 UTF-8
en_US ISO-8859-1

Generate language file by running the following file.
# locale-gen

11. Create and edit the locale.conf.

# vim /etc/locale.conf

Add the following
LANG=en_US.UTF-8

12. Set the hostname.

# echo "archlinux" > /etc/hostname

13. Set the root password

# passwd

14. Install Grub - This is the bootloader

# pacman -S grub
# grub-install --target=i386-pc /dev/sda
# grub-mkconfig -o /boot/grub/grub.cfg

15. Enable NetworkManager - To make sure you have internet upon startup.

# systemctl enable NetworkManager

15. Done. Now exit, remove the IOS, and restart.

# exit

Python requirements

2022-06-03T14:21:28Z

Jfreier: Created page with "Python Requirements These are python dependencies that may need to be installed. To install these dependencies you can use an application called pip. Install pip insta..."

Python Requirements

These are python dependencies that may need to be installed.

To install these dependencies you can use an application called pip.

Install
pip install -r requirements.txt

To see all dependencies and lock all sub dependencies in place.
pip freeze > requirements.txt

Python ve

2022-06-03T14:08:40Z

Jfreier: Created page with "Python Virtual Environments A python virtual environment is a way of setting up a python project in a environment sandbox. Create the environment python3 -m venv env Acti..."

Python Virtual Environments

A python virtual environment is a way of setting up a python project in a environment sandbox.

Create the environment
python3 -m venv env

Activate the environment
source ./env/bin/activate

Deactivate the environment
./deactivate

Linux cert install

2022-05-24T19:05:02Z

Jfreier: Created page with "If you having trouble with cert issues in Alpine Linux try the following. Copy the perm file to the following directory. cp ./my_cert.pem /usr/local/share/ca-certificates/..."

If you having trouble with cert issues in Alpine Linux try the following.

Copy the perm file to the following directory.
cp ./my_cert.pem /usr/local/share/ca-certificates/

Then run the following command to update your systems certs.
update-ca-certificates

* This command updates all the certs in the /etc/ssl/certs folder with the certs listed in /etc/ca-certificates.conf and all certs in the /usr/local/share/ca-certificates directory.

Resource
https://manpages.ubuntu.com/manpages/xenial/man8/update-ca-certificates.8.html

Osx-nginx

2022-05-18T23:28:01Z

Jfreier:

To install Nginx on OSX.

1. Download Nginx.
2. Extract
3. Run the following
./configure
make
sudo make install

It will install Nginx to /usr/local/nginx

Nginx will default to port 80.

== Start/Stop ==
To start Nginx
cd /usr/local/nginx/sbin
sudo ./nginx

To stop Nginx
ps aux | grep nginx
kill [nginx_pid]

Helm

2022-04-28T18:56:18Z

Jfreier:

Helm is a package manager for Kubernetes.

Things I found out while working with Helm.
- You do not need name spaces.

To help with debugging add the following
--debug

Process a single manifest and see the results.
helm template -s templates/application-service.yaml app-project

or

helm template -f ../environments/dv.yaml -s templates/application-service.yaml .

List all helm installs
helm list

Install a helm chart
helm install [project_name] [helm_chart_name]

example:
helm install helm-test test-project

Update a helm chart
helm upgrade [project_name] [helm_chart_name]

Remove a helm chart
helm upgrade [project_name]

Osx-access-issue

2022-04-20T14:04:50Z

Jfreier: Created page with "If you have an application that keeps asking for the root password, you can just give the app access. These steps were taking from another suggestion for VPN Global protect k..."

If you have an application that keeps asking for the root password, you can just give the app access.

These steps were taking from another suggestion for VPN Global protect keep asking for the password.

1. In Keychain Access application, locate the Machine Certificate issued to Mac OS X Client in the System keychain.
2. Right Click on the private key assoicated with Certificate and click Get Info, then click Access Control tab
3. Then click + sign to select an Application to allow
4. Then press key combiniation "<Command> + <Shift> + G" to open Go to Folder
5. Enter "/Applications/GlobalProtect.app/Contents/Resources and click Go
6. Find PanGPS and click, then press Add
7. Save Changes to private key

Kubectl

2022-04-11T14:06:26Z

Jfreier:

Kubectl is an application that interacts with Kubernetes clusters.

'''Check the context'''

This checks who kubectl is connected to.
kubectl config current-context

'''Apply a configuration yaml file.'''
kubectl apply -f [name_of_file]

'''Get the configuration yaml file.'''
kubectl get pod [podname] --namespace [namespace] -o yaml

== Deploy ==
'''Get Deployments'''
kubectl get deployments --namespace=cs

'''Delete Deployments'''
kubectl delete deployment [name_of_deployment] --namespace=cs

== Pods ==
'''Get Pods'''

This gets all the pods.
kubectl get pods --namespace cs

Delete a pod
kubectl delete pod [pod_name]

== Remote in to a pod ==
This will allow you to execute a command which in the example below it will start up a shell.
kubectl exec --stdin --tty [pod_name] --namespace [namespace] -- /bin/sh

== Volume ==

List Persistent Volumes Claims
kubectl describe pvc --namespace=cs

== Logs ==
Get the logs from a pod.
kubectl logs -p [pod_name] --namespace=cs

For any sidecars you may need to specifiy a container.
kubectl logs -p [pod_name] --namespace=cs --container gce-proxy

You can also follow the logs live with the following flaf.
--follow

== Events ==
Get a list of events.

kubectl get events

== Extra commands to help.==
If you have to include a name space.
--namespace scdf-jf

To be past any SSL issues.
--insecure-skip-tls-verify

Podman

2022-04-06T15:58:39Z

Jfreier:

== Podman ==

'''Start Podman'''
podman machine start

== Images ==

'''List Images'''
podman images

'''Pull an image'''
podman pull docker.io/library/httpd

'''Run an image'''
podman run -dt -p 8080:80/tcp docker.io/library/httpd

podman run -it --entrypoint="/bin/sh" docker.io/library/httpd

podman run -it -v /home/user/project:/app --entrypoint="/bin/bash" python:3.9.13-buster

* The -d will run the container in detach mode, so you wont see any console.
* The -t command connects the container to your terminal so it will not exit after it runs.

The following command with -rm will clean up the container and remove any persists data.
podman run -rm docker.io/library/httpd

To commit a container to the list of podman images.
podman commit {id}

'''Continue a container'''
This will start back up an exited container, it will continue where you left off.
podman start {id}
To start with shell.
podman start -ai {id}

'''Get in to a running container'''
podman exec -it {id} /bin/sh

'''List running images'''
podman ps -a

'''Remove Image'''
podman rmi {image_sha}

'''Load an Image'''
Worked
cat cs-oci.tar | podman load

Did not work.
podman load oci-archive:cs-oci.tar:latest

'''Update the tag for an image'''
podman tag e7b8dd57dec6 cs:latest

== Containers ==

'''List all containers'''
podman ps -a

'''Remove Container'''
podman rm ff22b3bfecc1

'''Remove all stopped Containers'''
podman container prune

== Pods ==

'''Create a pod'''
podman pod create --name mypod

'''List pods'''
podman pod list

'''Start pod'''
podman pod start {podname}

'''Stop pod'''
podman pod stop {podname}

'''List all processes with pods'''
podman ps -a --pod

== Volume ==

Volume in Podman can be a virtual volume that is mounted through Podman. This virtual volume can be exported or imported as well.

You can also setup to point to a local host directory but because Podman is rootless Podman will need access to the directory, by either permissions on the directory or the user that runs the container from Podman.

'''Create Virtual Volume'''
podman volume create myvolume

'''Export Virtual Volume'''
podman volume export myvolume --output myvolume.tar

== Repositories ==
To login to a repository.
The below example is for harbor but could be used for others.
podman login --username JDOE --password {cli_secret} https://registry.harbor-url.com/

== Build ==

To build and avoid any cached layers use the following.
podman build --no-cache -t $container_name:$container_tag .

== Logs ==

'''View Logs'''
podman logs ff22b3bfecc1

'''Stop the latest container'''

podman stop ff22b3bfecc1

== Kube ==

'''Generate kubernetes yaml'''
podman generate kube -f infra.yaml mypod

'''Load kubernetes yaml'''
podman play kube infra.yaml

'''Kubernetes File'''
# Kubernetes setup for CS.
apiVersion: v1
kind: ConfigMap
metadata:
name: cs-config
data:
CS_DATABASE_MONGODB_EMBEDED_ENABLED: "false"
SPRING_DATA_MONGODB_HOST: "localhost"
---
apiVersion: v1
kind: Pod
metadata:
name: mypod
labels:
app: mypod
spec:
containers:
- name: database
image: docker.io/library/mongo:4.4.13
securityContext:
runAsUser: 0
volumeMounts:
- name: mongodb-data-volume
mountPath: /data/db
- name: application
image: cs:latest
ports:
- containerPort: 8080
hostPort: 8080
envFrom:
- configMapRef:
name: cs-config
volumes:
- name: mongodb-data-volume
persistentVolumeClaim:
claimName: mongodb-data-storage

== Examples ==

'''Example run MongoDB'''
podman run \
--detach \
--publish 27017:27017 \
--userns=keep-id \
--volume ./mongo-data:/data/db \
--name some-mongo \
mongo:4.4.13

# --detach, -d - Detached mode: run the container in the background and print the new container ID. The default is false
# --publish, -p - Publish a container’s port, or range of ports, to the host.
# --userns - Because podman runs rootless we need to assign a user that can access the local volumn. This sets the podman user to the same user who ran the podman command.
# --volume, -v - Create a bind mount.
# --name - Assign a name to the container.

'''Example running with pods'''
This is a test to see how apps can talk between each other in a podman network within a pod.

Create the pod
podman pod create --userns=keep-id --publish 8080:8080 --name mypod

podman run --detach --volume ./mongo-data:/data/db --pod mypod --name some-mongo mongo:4.4.13

podman run --detach --pod mypod --name myapp -e SPRING_DATA_MONGODB_HOST="localhost" -e CS_DATABASE_MONGODB_EMBEDED_ENABLED="false" e7b8dd57dec6

Not used - only for debug
podman run -it --pod mypod --name myapp --volume ./config:/config --entrypoint "/bin/sh" e7b8dd57dec6

Minikube

2022-04-04T21:23:01Z

Jfreier:

Minikube is an application that sets up a local single node Kubernetes cluster.

Start Minikube
minikube start

Stop Minikube
minikube stop

Clean up Minikube
minikube delete

'''Pull Local Images'''

Pull images from localhost podman
eval $(minikube podman-env)

Pull images from localhost Docker
eval $(minikube docker-env)

Also we need to set the ImagePullPolicy to Never in order to use local docker images.

To get an image inside minikube.
minikube cache add [image-name]:[tag]

or this might work, haven't tried yet.
minikube image load my_image

'''Dashboard'''

This starts up a dashboard to show all the different items.

minikube dashboard

'''SSH'''
minikube ssh

'''ip'''
minikube ip

== Ingress ==
You need to enable ingress.
minikube addons enable ingress

To expose minikube to localhost
minikube tunnel --cleanup

This will allow you to hit localhost:80 to reach the ingress controller.

Kubernetes

2022-04-04T19:39:53Z

Jfreier:

== Configurations YAML File ==

Deployment

- kind: Deployment
apiVersion: apps/v1
metadata:
name: app-deployment
namespace: app-ns
spec:
replicas: 1
selector:
matchLabels:
app: my-app
template:
metadata:
labels:
app: my-app
spec:
volumes:
- name: app-secrets-volume
secret:
secretName: my-secret
containers:
- image: ${CONTAINER_REGISTRY_URL}/${IMAGE_NAME}:${IMAGE_TAG}
name: my-app
ports:
- containerPort: 8080
envFrom:
- configMapRef:
name: app-config
- secretRef:
name: my-secrets
env:
- name: CUSTOM_ENV_VAR
value: "soon_to_come"
volumeMounts:
- name: app-secrets-volume
mountPath: /opt/my-app/secrets-volume
readOnly: true
restartPolicy: Always
terminationGracePeriodSeconds: 30

Service

- kind: Service
apiVersion: v1
metadata:
name: app-service
namespace: app-ns
spec:
ports:
- port: 8080
targetPort: 8080
selector:
app: my-app

Use the following option to make the service Headless, this is good when each of the pods has state and the state could be different between them. This exposes each pods ip through a DNS lookup.
Service.spec.clusterIP: None

ConfigMap

# ConfigMap Configuration
- kind: ConfigMap
apiVersion: v1
metadata:
name: app-config
namespace: app-ns
data:
CONFIG_TEMP: soon-to-come

Templates

To use templates, allows for values to be injected.

kind: Template
apiVersion: template.openshift.io/v1
metadata:
name: my-project
annotations:
description: "This is my project"
tags: "java,project,other"

objects:
...

# Template Parameters
parameters:
- description: "This param is an example"
required: true
name: PARAM_1
- description: "To use the param use the dollar sign followed by braces."
required: true
name: IMAGE_NAME

Then to use the params inline, use
${PARAM_1}

Buildah

2022-04-04T19:31:56Z

Jfreier:

This tool is used to build images.

Build an image
buildah bud -t {image}:{tag}

List all images
buildah images

Build using a Dockerfile
buildah build-using-dockerfile --format docker --file Dockerfile --tag cs:latest

Push image to a local file as oci format
-- Build in OCI format for running in Podman.
buildah push --format oci localhost/cs:latest oci-archive:/app/target/cs-oci.tar

-- Build in docker format and run in docker.
buildah push --format docker localhost/cs-docker:latest docker-archive:/app/target/cs-docker2.tar

To run buildah using docker
docker run -it \
--security-opt seccomp=unconfined \
--security-opt apparmor=unconfined \
--device /dev/fuse \
--entrypoint "/bin/bash" \
quay.io/buildah/stable

You need to have the following flags
--security-opt seccomp=unconfined
--security-opt apparmor=unconfined
--device /dev/fuse

seccomp - Docker restricts using unshare system call inside a containers.

apparmor - This flag is required.

/dev/fuse - This is needed to use the fuse-overlay program inside the container rather then using the host kernel overlay.

Openshift

2022-04-04T19:29:56Z

Jfreier:

RedHat OpenShift

== OpenShift CLI - OC ==

Switch Projects.
oc project ${project_name}

This will process a Kubernetes template with a param file.
oc process -f templates/template.yaml --param-file=parameters/dev.yaml --ignore-unknown-parameters=true | oc apply -f-

After applying a deployment you need to restart the OpenShift containers.
oc rollout resume deployment/${deployment_name}

Scale deployment to 0
oc get deployment -o name # Get the deployment names
oc scale --replicas=0 [deployment_name]

Example:
oc scale --replicas=0 deployment.apps/test-deployment

Get all events
oc get events

Get all pods
oc get pods

Connect to pod - terminal
oc rsh {pod}

Open a tunnel to a pod
oc port-forward $POD_NAME 5432 > port-forward.log &

Iac

2022-04-04T17:52:57Z

Jfreier: Created page with "Infrastructure As Code Docker"

Infrastructure As Code

[[docker|Docker]]