Posts
Reflection on the usage of bazel
TLDR: Bazel is definitely worth to use on your projects even though it has minimum supports of some languages such as C#.
Prologue Before I was interested in bazel, I always thought why bother to learn a new building system even I knew that kubernetes once was built with bazel. 4 months ago, I was involved in a micro service structured project. I was dissatisfied with dev workflow using skaffold and I looked other options in the market.
Posts
Install Windows Subsystem for Android
Install WAS Upgrade to windows 11 latest version (GA, Preview, Evaluation etc).
Upgrade microsoft appstore to latest version
Setting→Time & Language → Langage & Region → Region: USA
Open AppStore, Search Amazon Appstore and install Amazon Appstore. it will install Windows Subsystem for Android as well.
Install applications as user using Amazon AppStore Register as Amazon US user
Posts
Configure action runner in eks+calico environment
Last week I setup our staging kubernetes environment, however the once worked version of runnerset yaml configuration didn’t work. I tried different combination of controller and summerwind/actions-runner-dind image, fully customized template portion with RUNNER_xxx arguments. I still got "Http response code: NotFound from 'POST https://api.github.com/actions/runner-registration'" for every combination of those combinations in the logs of runner pods. I thought RunnerDeployment is stateless and less complex than RunnerSet. I gave it a try.
Posts
Istio Envoy passthrough goes wrong when port 80 are used for SMTP protocol instead of standard ports
TLDR: if your external SMTP is using port 80 instead of standard ports in an istio mesh, create a Service Entry for the external SMTP.
These two days, a strange timeout issue happened in one of our kubernetes clusters when trying to send emails via SMTP even though the same configuration works perfectly on our development machines.
At first, I thought it was due to SecureSocketOptions.startTLS. I changed it to SecureSocketOptions.
Posts
Apply proxy protocol listener filters to specific ports in istio
Two days ago, our web applications need to get clients' real IP address. Our sites is hosted in kubernetes, isito is used for ingress controll. behind cloud load balancers, it is not easy to make it work.
There are two ways to do that in alibaba classic load balancer: http/https listeners, and TCP listeners with proxy protocol
HTTPS listeners is crossed out due to certificate issue. HTTPS listeners can use integrated certificates or self uploaded certificates.
Posts
Setup opencv in windows
Download opencv release package https://github.com/opencv/opencv/releases/download/4.5.2/opencv-4.5.2-vc14_vc15.exe
run the downloaded executable, and say install it at c:\software\opencv
run opencv\build\setup_vars_opencv4.cmd
After above steps, your environment is ready. However there is a caveat, the environment is ephemeral.
Posts
Setup softHSM2
Secrets Management is the strong suit of Hashicorp vault. Open source edition is little limited comparing to cloud and enterprise edition, and cloud and enterprise editions sometimes are not allowed due to some reasons. bank-vaults seems a promising solution based on open source edition of Hashicorp Vault.
Advanced usage of vault will involve HSM and SoftHSM is good start point without spending several hundards bucks. Besides, HSM is widely used in Financial sector, blockchain and cryptocurrency.
Posts
Install calico cni in alicloud ack and advanced dns troubleshooting in kubernetes
2 weeks I started to learn alicloud to prepare the migration from aws to alicloud. I started the migration this week. Our applications are deployed on kubernetes, I focused on ACK first. The setup journey was bumpy, and most of the issues can be resolved by googling and trial loops. The most difficult one is that dns resolution issue.
I tried the steps in "Debugging DNS Resolution" [1]. All steps were good except the nslookup step.
Posts
Exposing TCP and UDP services in nginx ingress
Add command line flags in ingress controller: --tcp-services-configmap
--udp-services-configmap
Create configmap apiVersion: v1 kind: ConfigMap metadata: name: tcp-services namespace: ingress-nginx data: 5432: "default/postgres:5432" Patch the ingress-nginx-controller to allow port 5432 spec: template: spec: containers: - name: controller ports: - containerPort: 6379 hostPort: 6379 Add inbound rule to security group of node groups Reference: https://minikube.
Posts
Stock Grey market dynamic
Here are the grey market dynamics trading kuaishou in futu and first day in stock. Don’t be gready. Most likely the professional/instutional traders in grey market outsmart you, they don’t leave profit margin for you considering the dynamic in first day trading.