neoakris

Overview

The following is based on 2 GCP / GKE How to Guides:

• https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed
• https://cloud.google.com/stackdriver/docs/managed-prometheus/query

What this adds is additional checks / verification commands that can be run to help troubleshoot.

Step 0: Prereqs

• provisioned GKE autopilot cluster v1.26.5 with all defaults
• alias k=kubectl

nonamed01

#!/bin/bash
# Uncomment the following line to debug the script:
#set -x
#####################################################################################
# fuckForticlient.sh
#
#	Script to authenticate against Fortinet SAML servers using Firefox and
#	openfortivpn. This replaces Forticlient for GNU/Linux completely.
#	Because openfortivpn does not support SAML login (yet), this script uses Firefox
#	to authenticate, grabs SVPNCOOKIE and then calls openfortivpn to setup 

nathanl

Deadlocks Demo

For a basic discussion and demo, see https://www.postgresql.org/docs/current/explicit-locking.html#id-1.5.12.6.8.2

My own demo follows.

Setup

Create two tables with unique indexes:

Lighfer

为了方便，将所有的用户名密码统一为Abc12345

最后会开放所有用户的所有权限，如果需要实现真正的权限控制，【授权】那一节请根据实际需求修改命令

生成证书

使用jdk的keytool生成，所有参数的含义keytool --help都带有中文文档，此处不再解释

krisek

groups:
- name: node_exporter_alerts
  rules:
  - alert: Node down
    expr: up{job="monitoring-pi"} == 0
    for: 2m
    labels:
      severity: warning
    annotations:
      title: Node {{ $labels.instance }} is down

waynedovey

oc patch clusterversion/version --type='merge' -p "$(cat <<- EOF
spec:
  overrides:
  - group: apps/v1
    kind: Deployment
    name: cluster-monitoring-operator
    namespace: openshift-monitoring
    unmanaged: true
EOF
)"

slok

Enable profiling

Default http server

import (
    _ "net/http/pprof"
    "net/http"
)

monmonja

# download this file to your project folder and excute
# chmod +x generate-ios.sh
# then run using
# ./generate-ios.sh

# flutter build defaults to --release
flutter build ios

# make folder, add .app then zip it and rename it to .ipa
mkdir -p Payload

kekru

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

• at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
• check nginx -V for the following:

  ...
  TLS SNI support enabled

milesbxf

###################################################
##
## Alertmanager YAML configuration for routing.
##
## Will route alerts with a code_owner label to the slack-code-owners receiver 
## configured above, but will continue processing them to send to both a
## central Slack channel (slack-monitoring) and PagerDuty receivers
## (pd-warning and pd-critical)
##