devops

Pinned ·

Why Insomnia and not Postman?

Well, answer is straightforward – apples vs oranges. Somewhat I prefer Insomnia, though it is just a simplistic API client. But this is exactly what I normally need without additional features and Insomnia seems to be fulfilling my daily needs. Depending on against what environm…

Pinned ·

Scanning docker container images

Looking for potential vulnerabilities in docker images is crucial before shipping these to customers or putting them into production. Scanning of images should be a part of any CI pipeline so that it’s ensured that shipped software is secured as possible and security vulnerabilit…

Pinned ·

openstack cli in a docker container

If you need to access your openstack cluster but there is no option to install packages on a jumpbox host that can access the cluster (lack of internet access or privileges) an alternative is to build locally a docker image that includes openstack CLI utility. Assumption is that …

Pinned ·

AWS CloudFormer

Creating in AWS can performed using multiple ways: AWS CLI AWS SDK (Java/Python/JS) IT automation/IaaC tools (Chef, Puppet, Terraform, Ansible, SaltStack, Pulumi) REST API directly CloudFormation templates First 3 underneath are using REST API, but using directly REST API to cr…

Pinned ·

EFK (Elasticsearch-Fluentd-Kibana) in kubeadm-dind-cluster

When you wish to have your logs sent to Elasticsearch and browse them with Kibana you should add to your k8s cluster EFK stack. My first attempt to install EFK was with. However it was fluentd was failing to send logs to Elasticsearch. Fortunately on digitalocean website there is…

Pinned ·

kubeadm-dind-cluster or kind

Even though it was recently retired in favour of kind kubeadm-dind is still a great way to run a kubernetes cluster locally on laptop (in my case it is MacBook). It’s main limitation is that it supports v1.14.1, while kind supports v1.15.3 (though yesterday v1.16 version got rele…

Pinned ·

Terraform or Pulumi for IaC

Terraform by Hashicorp is a pioneer in the area of IaC tooling which allows to define infrastructure in a declarative manner by using its own language (HCL – Hashicorp Configuration Language). That means: it takes definition of the infrastructure (simplistic example could be a c…

Pinned ·

ConfD – making your network elements programmable

Tail-F, originally a Swedish company bought over by Cisco Systems, created a management agent software framework for network elements and applications – ConfD. If employed as a part of software – ConfD allows to be programmability an inherent part of it. This post will us a very …

Pinned ·

Automatically provisioning baremetal/VM server

During my endavours I had a situation where I had to provision 10 servers (install all of them manually and configure same things on all of them, same files etc). There is a nice alternative to it called Stacki from StackIQ (bought by Teradata last year). What it offers is specia…

Pinned ·

Connecting over SSH and running a command over NETCONF

When HW/virtualized/containerized network element offers NETCONF interface to manage, it is extremely beneficial to use it for repetitive tasks (upgrades, sanity checking, route table checking etc). NETCONF can be used over different transports as below: netconf-ssh 830/tcp …

Pinned ·

Udemy – courses to recommend

Udemy is a great place to learn. I would like to recommend some intro courses to AWS, Jenkins and Kubernetes – which are free of charge: Kubernetes AWS Jenkins