Skip to main content

Posts

Amazon RDS Blue/Green Deployments

In order to avoid some errors I experienced when proceeding as described in the official documentation, I describe what I did in order. 1) Modify parameters of source_database * error: Blue Green Deployments requires cluster parameter group has binlog enabled. RDS Parameter groups: source-params-group binlog_format => MIXED mysql> show global variables like 'binlog_format'; 2) Insert a row after rebooting the source database, to avoid this error. * error: Correct the replication errors and then switch over. Read Replica Replication Error - IOError: 1236, reason: Got fatal error 1236 from master when reading data from binary log: 'Could not find first log file name in binary log index file' => To Fix: You need to change the data in the source database. INSERT INTO dummy_table ( `favorite_id` , `favorite_order` , `user_id` , `board_id` ) VALUES ('100001', '1', '11111', '11111'); 3) Modify the param...
Post a Comment
Read more
Recent posts

Running out of Private IP in EKS

  In particular, there are cases where the pending state persists despite not running out of CPU or memory. There is a case that it is due to lack of private ip.If the node group is shown as "Degraded" in the EKS cluster configuration and you can see the following error in Health issues. "Amazon Autoscaling was unable to launch instances because there are not enough free addresses in the subnet associated with your AutoScaling group(s)." And you can see that the number of "Available IP4 addresses" in the AWS VPC subnet used in the node group is 0. By designating the IP that the node group occupies, you can get some IPs back. kubectl set env -n kube-system daemonset/aws-node MINIMUM_IP_TARGET=10 WARM_IP_TARGET=2 kubectl get daemonset -n kube-system aws-node -o json | jq -r '.spec.template.spec.containers[] |select ( .name == "aws-node" ).env' You can see that the number of "Available IP4 addresses" in the AWS VPC subnet is increa...
Post a Comment
Read more

Free SSL Certificate & Basic Authentication with Certbot & Nginx

1. make a folder  mkdir -p /var/www/html/.well-known/acem-challenge 2. change nginx setting for getting auth files  vi /etc/nginx/sites-enabled/default  location /.well-known {    root /var/www/html;    allow all;  } nginx -s stop nginx 3. generate auth files cd /usr/local/bin  * https://certbot.eff.org/all-instructions/ wget https://dl.eff.org/certbot-auto chmod +x certbot-auto certbot-auto certonly -a webroot --webroot-path=/var/www/html -d nagios.topzone.com * certbot-auto certonly -a webroot --webroot-path=/var/www/html -d ldap.topzone.com -d ganglia.topzone.com -d nagios.topzone.com Do you want to continue? [Y/n] y Enter email address: doogee323@gmail.com (A)gree/(C)ancel: A (Y)es/(N)o: N IMPORTANT NOTES:   - Congratulations! Your certificate and chain have been saved at: /etc/letsencrypt/live/nagios.topzone.com/fullchain.pem Your key file has been saved at: /etc/letsencrypt/live/...
Post a Comment
Read more

실리콘밸리 구직 체험기3_201704 - 아직도 진행 중...

혼돈의 시간을 보내고 이제야 안정을 찾게 되었습니다. 3주전 팀장이 회사를 나가고 디렉터는 revenue를 갉아 먹던 우리팀을 정리할 절호의 기회를 잡았다는 듯이 팀원들에게 4주의 시간을 줄 테니 다른 곳을 알아보라고 통보했습니다. 그 얘기를 듣고 며칠 안되서 시민권이 있는 다른 팀원들은 호기롭게도(? 아무런 걱정도 없이) 휴가를 내고 자리를 비웠습니다. 저만 남아서 사내 다른 팀으로 transfer할 수 있는지 알아보고 linkedIn에도 구직상태로 변경했습니다. 디렉터도 제 상황을 알기 때문에 영주권 진행에 문제가 덜 발생할 만한 규모 있는 회사를 알아보라는 조언을 했고 그 조언을 따라 규모가 큰 회사를 대상으로 apply했습니다. 이번에는 링크드인으로만 apply를 하고 메일을 보냈는데도 연락이 참 많이 왔습니다. (apply한 회사 중에서 연락이 없던 곳은 facebook, uber 정도를 빼고는 다 통화를 했네요.) 한국에서 왔을 때와 스타트업에서 옮길 때와는 또 다른 반응이였습니다. 아마도 규모 있는 현 회사에서 구직을 해기 때문에 상황이 바뀐 것 같았습니다. 그런데 그렇게 많이 연락을 받았는데도 기술 인터뷰를 통과하지 못한 나를 보면서 속이 타들어갔습니다. 사내 팀에서도 코딩인터뷰를 했었는데 비교적 쉬운 것도 풀지 못하고, 게다가 그 자리가 principal 자리인 지라 저를 인터뷰하는 개발자가 어처구니 없다는 듯이 돌아설 때에는 정말 초라하고 답답한 마음이 밀려 왔습니다. 제게 이번 경험의 특징은 크게 2가지 입니다. 1. on-site coding / assignment on-site coding 또는 assignment 가 많았다는 것인데 준비가 제대로 되지 않은 저는 한 군데도 통과를 하지 못했습니다. linkedIn -> on-line coding citrix -> on-line coding vmware -> on-line coding (quiz) Salesforce -> on-line coding S...
2 comments
Read more

DevOps JD's required skills from LinkedIn

From some of DevOps JD on linkedIn, I realised that DeveOps should be the leader of the organization. https://docs.google.com/spreadsheets/d/1P520nH0pYcAdN0rJcnMQqsgu9cV9GdknztJ92J8l7-s/pubhtml DevOps' Required Skills From LinkedIn on 8/30/16: DevOps should be the leader of the company! Yahoo Netflix Samsung Salesforce Fortinet SUM OS admin UNIX systems Unix platforms Linux administrator Linux VMs Docker VMs VMware, OpenStack, Hyper-V Openstack, KVM, VMWare Version control version control systems Git, SVN Cloud Amazon AWS AWS AWS, Azure DB MySql Oracle, MySQL, NoSQL Mysql administration and strong command of SQL MySQL RabbitMQ MySql, MongoDB, Redis, Oracle, ProgreSQL N/W TCP/IP networking, DNS, HTTP NAS Understanding of network stack, network tuning, subnet/VLANs. HAProxy, DNS, IPTable Script Lang Shell, Perl, Python, Ruby, PHP bash Python, Bash/tcsh a scripting language: Perl, Python and Unix Shell preferred Python, Perl, Ruby Python, Ruby, Shell, PHP Web LAMP stack...
Post a Comment
Read more

Install CoreOs on linode without VM

Install CoreOs on linode without VM 1. Add a Linode 2. Create a new Disk   CoreOS 3. Rescue > Reboot into Rescue Mode 4. Remote Access   Launch Lish Console 5. make an install script cat <<'EOF1' > install.sh # add needed package sudo apt-get update sudo apt-get install -y curl wget whois sudo apt-get install -y ca-certificates #sudo apt-get install gawk -y # get discovery url discoveryUrl=`curl https://discovery.etcd.io/new` # write cloud-config.yml cat <<EOF2 > cloud-config.yml #cloud-config users:   - name: core     groups:       - sudo       - docker coreos:   etcd:     name: node01     discovery: $discoveryUrl hostname: node01 EOF2 # get the coreos installation script #wget https://raw.github.com/coreos/init/master/bin/coreos-install wget https://raw.githubusercontent.com/coreos/init/master/bin/coreos-install # run installation chmod 75...
28 comments
Read more

Fortidirector setting with GoDaddy

Fortidirector setting with GoDaddy cf.  https://www.youtube.com/watch?v=HjHGsqyawqQ&feature=youtu.be < Fortidirector Service cases > - Real serivce domain:  http://topzone.biz 1. http redirection (Herp) curl -v http://chart.topzone.biz => < HTTP/1.1 302 Found < Location: http://topzone.biz/ 2. dns redirection (Derp) dig +trace map.topzone.biz => map.topzone.biz. 1 IN CNAME topzone.biz. ;; Received 58 bytes from 23.249.53.30#53(r0.r1cd.com) in 51 ms - supported by health check (http, tcp, ping etc) < Fortidirector Settings > [Herp Setting] 1. add Records in godaddy https://dcc.godaddy.com/manage/topzone.biz/dns Type Name Value TTL CNAME chart cnames.r1cd.com 600 seconds 2. add http resource in fortidirector https://www.fortidirector.com/fd/app/traffic_manager/network_resources - from url dewey_from_http http://chart.topzone.biz/ - to url dewey_to_http http:/...
Post a Comment
Read more