A Technical I.T./DevOps Blog
Problem scenario
You use EKS to create a Kubernetes cluster. How do you create a group for AWS user accounts to enable them to manage Kubernetes clusters in AWS?
Solution
1. Log into the AWS web console.
2. Go here: https://console.aws.amazon.com/iam/home?
3. Go to Groups on the left.
4. Click the “Create New Group” button.
5. Enter a name (e.g., coolgroup).
…
Problem scenario
How do you create an AWS user that can run AWS CLI commands and log into the AWS web console?
Solution
1. Log into the AWS web console.
2. Go here: https://console.aws.amazon.com/iam/home?
3. Go to Users on the left.
4. Click the “Add User” button.
5. Enter a name (e.g., jdoe).
6. Check the boxes for both “Programmatic access” and “AWS Management Console access”.
…
Problem scenario
You want to create an ARN Role in AWS. What do you do?
Solution
1. Log into the AWS web console and go here: https://console.aws.amazon.com/iam/home?#/roles
2. Click “Create role” (a blue button).
3. The type of trusted entity (at the top) should be “AWS Service” (a button like option near the top).
4. Click the hyperlink that you desire.
…
Continue reading “How Do You Create an Amazon Resource Name Role in AWS?”
Problem scenario
For security reasons, you do not want to have to use “sudo” to elevate your privileges when you run docker commands. What should you do?
Solution
1. Run these commands as the user that will be able to run docker commands:
sudo groupadd docker
sudo gpasswd -a $USER docker
newgrp docker
2. Install Docker. See this
…
Continue reading “How Do You Run Docker commands without sudo?”
Problem scenario
You want to manage Kubernetes (e.g., Amazon EKS) via a server in AWS. You want to install the aws-iam-authenticator on a Linux server. How do you do this?
Solution
1. To install aws-iam-authenticator go here to obtain the link that is relevant for your server. You will search the above link for “aws-iam-authenticator binary from Amazon S3”
2.
…
Continue reading “How Do You Install The aws-iam-authenticator?”
Problem scenario
You run a ulimit -Hn command. You see the limit of the file descriptors to be what you expect. But in the logs of an application, there is a discrepancy. Why is one log reporting that the limit to file descriptors is different from the output of a “ulimit -Hn” or “ulimit -Sn” command?
Solution
Root cause
The ulimit -Hn and ulimit -Sn commands do not show the whole story.
…
Problem scenario
You run an Ansible playbook. You receive an error about the SSL certificate not being valid. What should you do to get the playbook to transfer a file from a website using SSL or TLS to a managed node?
Possible Solution #1
If the problem pertains to retrieving a file from a website URL, this may apply. If the problem is between the managed node and the website and not between the control node and the website,
…
Continue reading “How Do You Solve an Ansible Problem about an SSL Certificate Error?”
Problem Scenario
You want to use a key kair to log into AWS instances. You created an AWS EC-2 instance (aka a virtual machine or server) running Linux. You want to connect to this Linux server (a VM). You created a key pair when you created this VM. You downloaded the .pem file. You need a .ppk file to log in. What should you do?
Solution
1.
…
Continue reading “How Do You Create a .ppk File from a .pem File?”
Problem scenario
You use the openssl command, but you receive an error. You run a command such as this:
openssl s_client -connect https://www.continualintegration.com:80
You get a message such as this:
getaddrinfo: Servname not supported for ai_socktype
connect:errno=0
What should you do to view the SSL certificates?
Solution
Run the command without the “http://”. Here is an example of the correct syntax:
openssl s_client -connect continualintegration.com:80
For Future Reference
OpenSSL uses SSL and TLS.
…
Problem scenario
Your Super AntiSpyware updates are not downloading properly. You tried reinstalling the application. The problem happens on Windows 7 and Windows 10. What should you do?
Possible solution #1
Do not use a VPN connection for your internet browsing. This can cause a problem with getting the updates.
Possible solution #2
See if your have a firewall blocking special ports.
…
Continue reading “How Can You Get SUPERAntispyware Updates to Download Reliably?”