OKD/OpenShift console for vanilla Kubernetes

I have using OpenShift almost 4 years and WEB console better than default Kubernetes Dashboard IMHO.

swagger nginx location close from external

location ~* ^/(api/swagger-ui) {
proxy_pass https://10.204.11.123:443;
include sites-available/includes/proxy.conf;
allow 10.186.35.0/24;
allow 10.204.11.0/24;
allow 10.204.1.0/24;
error_page 403 =404 /uri;
deny all;
}

nginx ingress server-snippet example

location ~* ^/api/swagger-ui(.) {

  allow XX.107.99.176;

  allow 10.186.33.0/24;

  allow 10.186.32.0/24;

  allow 10.186.35.0/24;

  allow 10.204.11.0/24;

  allow 10.204.1.0/24;

  deny all;

  return 403;  

}

prometheus systemd unit file

 [Unit]

Description=Prometheus

Wants=network-online.target

After=network-online.target

[Service]

#ExecStart=/etc/prometheus/prometheus

ExecStart=/etc/prometheus/prometheus \

--config.file=/etc/prometheus/prometheus.yml \

--storage.tsdb.path=/var/prometheus/data \

--storage.tsdb.retention.time=60d

WorkingDirectory=/etc/prometheus/

Restart=on-failure

User=root

Group=root

[Install]

WantedBy=multi-user.target

CRIO pull images from insecure registry.

 1. edit file /etc/containers/registries.conf

 2. add in the config file.

[[registry]]
insecure = true
location = "IP ADDRESS"

3. systemctl daemon-reload && systemctl restart crio

loki compactor remove old chunks

 auth_enabled: false

chunk_store_config:

  max_look_back_period: 0s

compactor:

  delete_request_cancel_period: 10m # don't wait 24h before processing the delete_request

  retention_enabled: true # actually do the delete

  compaction_interval: 10m

  retention_delete_delay: 2h # wait 2 hours before actually deleting stuff

  shared_store: filesystem

  working_directory: /data/loki/boltdb-shipper-compactor

ingester:

  chunk_block_size: 262144

  chunk_idle_period: 3m

  chunk_retain_period: 1m

  lifecycler:

    ring:

      replication_factor: 1

  max_transfer_retries: 0

  wal:

    dir: /data/loki/wal

limits_config:

  retention_period: 30d # Keep 30 days

  enforce_metric_name: false

  max_entries_limit_per_query: 5000

  reject_old_samples: true

  reject_old_samples_max_age: 168h

memberlist:

  join_members:

  - 'loki-memberlist'

schema_config:

  configs:

  - from: '2020-10-24'

    index:

      period: 24h

      prefix: index_

    object_store: filesystem

    schema: v11

    store: boltdb-shipper

server:

  grpc_listen_port: 9095

  http_listen_port: 3100

storage_config:

  boltdb_shipper:

    active_index_directory: /data/loki/boltdb-shipper-active

    cache_location: /data/loki/boltdb-shipper-cache

    cache_ttl: 24h

    shared_store: filesystem

  filesystem:

    directory: /data/loki/chunks

table_manager:

  retention_deletes_enabled: true

  retention_period: 672h

JAVA добавление своего ключа в keystore

конвертируем ключ из *.p12 в pem формат.

openssl pkcs12 -in certificate.p12 -out cert.pem -clcerts -nokeys

openssl pkcs12 -in certificate.p12 -out private.key -nocerts -nodes

список ключей в keystore

keytool -list -v -trustcacerts -cacerts -storepass changeit

импорт своего ключа в дефолтный keystore

keytool -import -trustcacerts -cacerts -alias test -file /root/cert.pem -storepass changeit

rabbitmq create queue

 Создание очереди в rabbitmq 

rabbitmq-plugins enable rabbitmq_management

rabbitmqadmin -u admin -p your password -V / declare queue name=job-start-notification-service-q durable=true