IT Ghost

Expose your kubernetes sevices using gateway-api with envoy-gateway.

I wanted to see what benefits the gateway-api has in comparison with other service types on kubernetes that each has their own use case with their pros and cons. After I have research different providers I decided to use envoy-gateway as it was the most stable and complete integration. I

Self hosted kubernetes loadbalancing with cilium

Self hosted kubernetes loadbalancing with cilium

I have switched from calico CNI to cilium mostly because cilium comes with an ability to create a loadBalancer type of service without installing any third party application that is not possible using calico. With calico I was using metallb to have the ability to create loadbalancer. In order to

Create kubernetes loadbalancer on self hosted cluster using metallb

Create kubernetes loadbalancer on self hosted cluster using metallb

If you use a self hosted environment and you want to use an ingress controller or a gateway api you will have to have the ability to create a loadbalancing type of service. As the loadbalancing services are tied to a hosted service environment you don't have much options. One

Run a multiarch build using podman

When we want to create an image that can be deployed on multiple architectures we need to create an image with multi architecture support. For this project this time will use podman. In case you are using podman in a emulated environment like macosx for example where the podman machine

Create an easy kubernetes cluster using kind and docker on your workstation

Create an easy kubernetes cluster using kind and docker on your workstation

Assuming that you want to have a quick way to spawn up a kubernetes cluster for some development work all you need to do is to have docker desktop installed and install kind app on your computer. I will not go through the installation process as it is very well

Kubernetes generate certificate using certmanager with dns authenticator using cloudflare

Now that I have installed a haproxy ingress controller [https://zozoo.io/install-and-configure-haproxy-ingress-controller-on-kubernetes/] it is time to add ssl to our website. For this I will be using an ssl certificate generated on cloudflare by certmanager. Since I am hosting the DNS on cloudflare and mostly using wildcard certificates I

Install and configure Haproxy ingress controller on kubernetes

kubernetes Featured

Install and configure Haproxy ingress controller on kubernetes

In this post I will explain how to install and configure the haproxy ingress In order to have this work you need a fully installed kubernetes cluster a workstation with Helm 3.6 preferably 3.7 installed. We need to install the haproxy repository to the helm chart. #helm repo

Building a kubernetes cluster on raspberry pi using k3s

Building a kubernetes cluster on raspberry pi using k3s

On a smaller raspberry pi where you don't have that much resources (usually 1-2 gb of ram) you don't have the resources to run a full fledged kubernetes cluster. There is a project for providing fully working lightweight kubernetes cluster using rancher's k3s. Prerequisites In order to be able to

How to create multiarch docker images.

How to create multiarch docker images.

If you are like me and you need to create some kubernetes integration I prefer to have it done locally without too much fuss and for that I am mostly using raspberry pi's to create either standalone docker server or create a kubernetes cluster and have it running on that

How to run JupyterHub in docker swarm environment using swarmSpawner.

How to run JupyterHub in docker swarm environment using swarmSpawner.

I had a request in these days where I was asked to run JupyterHub in a docker environment. To be able to provide horizontal scaling to the platform taking in count that for each customer will start a new container and each container will use resources. Jupyterhub is a great

Setup docker swarm cluster

Setting up a swarm cluster is really easy. All you need is a minimum of two nodes with OS of your choosing and having docker-ce installed on them both. Since I am mostly using debian I will be following the steps for installing docker-ce for ubuntu/debian since both of

Managing your elasticsearch indices with curator

If you are monitoring your environment using beats the default action is to rotate the indices every day and create new indices at midnight. After some time your disk will start filling up and it is very hard to see what you want to delete or keep and what you

Creating swap file on your filesystem

Some times you just need more memory in your system that you physically have. You don't know what to do but you cannot add more memory for various reasons. Filesystem is always there is it has more space than you could need in memory so why not use it to

Create an ipsec VPN tunnel between GCE network and AWS network

Recently I got a task to link the AWS network with the GCE network so that the traffic between the two networks would be going via an encrypted and secured tunnel without accessing the public network. For this you will need a GCE account. If you don't have one google

How to create your own in house elasticsearch alerts.

Since I am using elasticsearch for getting server side healthchecks, statistics and check on services which are important for the blog to function, I was wondering if I can use elasticsearch to write my own alerts in case something goes down. Therefore I have installed heartbeat [https://www.elastic.co/

Putting Kibana behind haproxy as /kibana and enable simple http authentication.

In this post we will talk about why and how to put kibana behind haproxy. First thing I am thinking is to be able to have multiple kibana setups and either do loadbalancing between them or use them as active - backup setup. This is how I will be using

Create percona xtradb cluster using rkt containers on multiple hosts over flannel overlay network

Since the new technologies are using containers I have decided to give rkt a try to see what it can do. Rkt is developed by CoreOs and was announced in 2014. It got alot of attention in February 2016 when it was released version 1.0. Rkt can run docker

Recovering unassigned shards on elasticsearch 2.x

I got accross the problem when decided to add a node to the elasticsearch cluster and that node was not able to replicate the indexes of the cluster. This issue is usually happens when there is not enough disk space available, or not available master or different elasticsearch version. While

Logstash using dissect instead of grok for filtering

Some time a go I've came across the dissect filter for logstash to extract data from my access_logs before I hand it over to elasticsearch. Dissect is a different type of filter than grok since it does not use regex, but it's an alternative way to aproach data. Dissect

How to create snapshot and restore snapshot with elasticsearch

In this post we will show you how to create snapshots and restore those snapshots with ElasticSearch easily. This is a very easy method if you want to migrate your current elasticsearch cluster to a new version, which cannot be performed on major upgrades, and you don't want to loose

How to install Ansible and use it to upgade a server.

For this tutorial we will install Ansible 2 on debian jessie. In order to install the latest version of ansible on debian jessie we will need to compile it from source since the official debian repositories does not support Ansible 2.x yet. Therefore first we will need to fetch

elasticsearch 2.x

Configure elasticsearch logstash filebeats with shield to monitor nginx access.log

In this post I will show how to install and configure elasticsearch for authentication with shield and configure logstash to get the nginx logs via filebeat and send it to elasticsearch. Why we do need filebeat when we have packetbeat? It is a good question. The short answer it is

Loadbalance your website with haproxy and varnish

In this post will show how to install haproxy and varnish. The setup will have haproxy as frontend and varnish will be between haproxy and the nodes. Why not use varnish as a frontend? Because in case you would like to use https varnish does not have https support. We

Monitor your servers with Elasticsearch 2.x and Beats and display it in Kibana

In this post we will cover the installation and configuration of elasticsearch 2.x, and configure packetbeat and topbeat for monitoring web services databases and server load. After all these are set up we will be using Kibana to show the data in a graphical interface. Elasticsearch## First we will