Posts

Showing posts from May, 2022

Understanding Docker TOCTOU Vulnerability

Image

[Resolved] Metric client health check failed: the server is currently unable to handle the request (get services dashboard-metrics-scraper). Retrying in 30 seconds.

  Issue:-  Issue is with the dashboard service. When deploying the Dashboard service using the yaml in the kubernetes it gives the following error. Error:-   Metric client health check failed: the server is currently unable to handle the request (get services dashboard-metrics-scraper). Retrying in 30 seconds. Effect:- Because the dashboard service is not able to connect to the dashboard-metrics-scraper service the UI for the dashboard service is not loading up due to which the Dashboard is not working in the UI and timeout after some time.

[Resolved] Error from server (ServiceUnavailable): the server is currently unable to handle the request (get nodes.metrics.k8s.io)

Issue:-  When installing the metricserver in the kubernetes getting the following error.  Error:-   Error from server (ServiceUnavailable): the server is currently unable to handle the request (get nodes.metrics.k8s.io) Effect:- Due to the above error the metricserver will not work [centos@kubemaster dashboard]$ kubectl top nodes W0529 10:18:25.234815   13218 top_node.go:119] Using json format to get metrics. Next release will switch to protocol-buffers, switch early by passing --use-protocol-buffers flag Error from server (ServiceUnavailable): the server is currently unable to handle the request (get nodes.metrics.k8s.io)

Analysing various threats in application tampering and security and SLSA mitigation of such threats

Image

Linux Fundamentals for Devops/Developers/Beginners Part1

Image

Understanding the Levels of assurances in SLSA - Part2

Image

Understanding Supply chain Levels for Software Artifacts SLSA Part1

Image

Understanding Dockershim removal by kubernetes with version v1.24

Image

Understanding CI/CD devops pipelines with GITLAB with realworld analogy ...

Image

[Resolved] An error occurred (Throttling) when calling the DescribeLoadBalancers operation (reached max retries: 4): Rate exceeded

  Issue:-  If you are having big infrastructure and you have put lot of automation in place than your awscli limits might reach the thresholds which might result in error like. Error:-   An error occurred (Throttling) when calling the DescribeLoadBalancers operation (reached max retries: 4): Rate exceeded Effect:- The command or the script which you have run might failed due to the limit being reached for the calls to the aws resource and retries also exhausted. You might run the command again if you doing it manually and facing error but in case its some script that will cause bigger issue to make the script failed without the retry logic written within the script as well which you have created.

Weaknesses/Limitations of gRPC Part5

Image

Strengths of gRPC

Image

Understanding gRPC ARchitecture Part3

Image

Basic gRPC concepts Part2

Image

Introduction to gRPC for fast and scalable api development - Part1

Image

Understanding kubernetes components kubectl, daemon, apiserver, apiversi...

Image

Terraform modules practices for scalable architecture implementation & i...

Image

Terraform modules practices for scalable architecture implementation

Image

[Resolved] from setuptools_rust import RustExtension ModuleNotFoundError: No module named 'setuptools_rust'

  Issue:-  Issue with the cryptography package and Rust during the Ansible Installation on the Centos. Error:-    Downloading https://files.pythonhosted.org/packages/3d/5f/addb8b91fd356792d28e59a8275fec833323cb28604fb3a497c35d7cf0a3/cryptography-37.0.1.tar.gz (585kB) 100% |████████████████████████████████| 593kB 2.0MB/s Complete output from command python setup.py egg_info: =============================DEBUG ASSISTANCE========================== If you are seeing an error here please try the following to successfully install cryptography: Upgrade to the latest pip and try again. This will fix errors for most users. See: https://pip.pypa.io/en/stable/installing/#upgrading-pip =============================DEBUG ASSISTANCE========================== Traceback (most recent call last): File "<string>", line 1, in <module> File "/tmp/pip-build-nfv80r3s/cryptography/...

[Resolved] Error response from daemon: invalid MountType: "=bind"

  Issue:-  Unable to deploy the visualizer service in the Docker Swarm Error:-    Error response from daemon: invalid MountType: "=bind" Effect:- # docker service create --name=viz --publish=8080:8080/tcp --constraint=node.role==manager --mount=type==bind,src=/var/run/docker.sock,dst=/var/run/docker.sock dockersamples/visualizer Resolution:- # docker service create --name=viz --publish=8080:8080/tcp --constraint=node.role==manager --mount=type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock dockersamples/visualizer Explanation:- You need to use the =bind and not ==bind to solve the problem

All About IPAM and use in cloud, devops, vpc troubleshooting

Image

Preventing DDOS Attacks Using AWS WAF Rule based WEBACL PART 3

Image

Preventing DDOS Attacks Using AWS WAF Rule based WEBACL PART 2

Image

Preventing DDOS Attacks Using AWS WAF Rule based WEBACL

Image