Skip to content

Instantly share code, notes, and snippets.

View j-zimnowoda's full-sized avatar

jeho j-zimnowoda

24 followers · 13 following
  • Akamai
View GitHub Profile
@j-zimnowoda
j-zimnowoda / jwks.json
Last active January 3, 2020 15:34
{
"keys": [
{
"kty": "RSA",
"n": "rPvfNwvSHt-W7KdRn4SNbmXqmMZoRiG1VVQD13483RxK1kahEKBWXutwuIlM8uXRbmISRrQTT5CQbYbKQj50yZ9crxSWOru3K-fNPaN86_rKQa-XSYPEXlerUX9XSlMkPB1x8T7kALvYf3L-z96oYWnw--iv8F0gk-jJYeQaDZeO77QqVBn3XzPgcALyu4ybYF7M3yxglLBNWbLyq8rKcFUVWsYb9r76XUtGSOzTgl8PCgYySXitoW2mGwi6hw3WT9N0VnEOgVKe1SC7c4swNXZHSQSGVGa-Y48jTq3PSuuOEUec2D_fXRAkug6v52d53x-njHQHI2bQY5M1ihwOSw",
"e": "AQAB"
}
]
}
@j-zimnowoda
j-zimnowoda / k8s-node-iptables.yaml
Created September 30, 2019 10:34
$ sudo iptables -nvL -t nat|grep <n-port>
pkts bytes target prot opt in out source destination
0 0 KUBE-SVC-4N57TFCL4MD7ZTDA tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:<n-port>
$ sudo iptables -nvL KUBE-SVC-4N57TFCL4MD7ZTDA -t nat
Chain KUBE-SVC-4N57TFCL4MD7ZTDA (2 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-SEP-MY5A6PB7BTRKZPFB all -- * * 0.0.0.0/0 0.0.0.0/0 statistic mode random probability 0.50000000000
0 0 KUBE-SEP-SVLVCUBUSSLYUQIN all -- * * 0.0.0.0/0 0.0.0.0/0
@j-zimnowoda
j-zimnowoda / kubernetes-iptables.yaml
Created September 10, 2019 12:46
assess
$ sudo iptables -nvL -t nat
Chain KUBE-SEP-ALILC42MQIXVGPDG (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.2.7 0.0.0.0/0
0 0 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp to:10.36.2.7:8000
Chain KUBE-SEP-S7DRJLMEEYB5YVDU (1 references)
pkts bytes target prot opt in out source destination
0 0 KUBE-MARK-MASQ all -- * * 10.36.0.16 0.0.0.0/0
@j-zimnowoda
j-zimnowoda / node.yaml
Last active September 9, 2019 20:57
$ kubectl get node -o yaml
apiVersion: v1
items:
- apiVersion: v1
kind: Node
status:
addresses:
- address: <n-ip1>
type: InternalIP
- apiVersion: v1
@j-zimnowoda
j-zimnowoda / pods.yaml
Created September 9, 2019 19:36
$ kubectl get pods -o yaml
apiVersion: v1
items:
- apiVersion: v1
kind: Pod
spec:
containers:
ports:
- containerPort: <p-port>
hostIP: <n-ip1>
@j-zimnowoda
j-zimnowoda / service-output.yaml
Last active September 30, 2019 07:55
$ kubectl get service web -o yaml
apiVersion: v1
kind: Service
spec:
clusterIP: <s-ip>
ports:
- nodePort: <n-port>
port: <s-port>
targetPort: <p-port>
@j-zimnowoda
j-zimnowoda / basic-ingress-output.yaml
Last active September 9, 2019 17:42
Name: basic-ingress
Namespace: default
Address: <Public IP>
Default backend: web:<p-port> (10.36.0.15:<s-port>)
Rules:
Host Path Backends
---- ---- --------
* * web:8000 (10.36.0.15:8000)
Annotations:
ingress.kubernetes.io/backends: {"k8s-be-32332--<id>":"HEALTHY"}
@j-zimnowoda
j-zimnowoda / ice-deployment.yaml
Created September 7, 2019 18:24
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: web
namespace: default
spec:
selector:
matchLabels:
run: web
template:
@j-zimnowoda
j-zimnowoda / gce-service.yaml
Last active September 30, 2019 07:56
apiVersion: v1
kind: Service
metadata:
name: web
namespace: default
spec:
ports:
- port: <s-port>
protocol: TCP
targetPort: <p-port>
@j-zimnowoda
j-zimnowoda / gce-compute-resources-made-with-k8s-ingress
Last active September 6, 2019 16:21
$ gcloud compute forwarding-rules list
NAME REGION IP_ADDRESS IP_PROTOCOL TARGET
k8s-fw-default-basic-ingress--38187d215818b1cb 35.190.122.250 TCP k8s-tp-default-basic-ingress--38187d215818b1cb
gcloud compute target-http-proxies list
NAME URL_MAP
k8s-tp-default-basic-ingress--38187d215818b1cb k8s-um-default-basic-ingress--38187d215818b1cb
$ gcloud compute url-maps list
NAME DEFAULT_SERVICE