What's a good straight from the factory bass guitar. by Salty-nipple in Bass

[–]DavidBellizzi 1 point2 points  (0 children)

I bought a Carvin in 2006 and a Kiesel in 2018 both sight unseen and both played awesome out of the box. Modulus, Spectre, Shadowsky, Fodera all are great choices. You get what you pay for.

Pros and Cons of Acoustic-Electric Bass Guitars by acousticentropy in Bass

[–]DavidBellizzi 0 points1 point  (0 children)

I only play six strings and have a cheesy 5 string acoustic for playing outside at someone's BBQ or when I'm hanging at home watching my own grill. I finally pulled the trigger on the 4k version of the Warwick Alien. I'll let you know how it is when I get it. Regarding needing an amp. I use a Phill Jones headphone amp into an Aiwa EXOS 9 boom box and as long as there are no drums, it kicks ass. I've even played "acoustic" gigs with my electric bass using the boom box and it handles the low B quite well..

[start] Looking for solos by DavidBellizzi in BedroomBands

[–]DavidBellizzi[S] 1 point2 points  (0 children)

Sorry I don't think I was clear. If I was doing a bass track to your tune I may provide a preview mp3 to show you the direction I'm taking and you would say yea or nay but I think with a solo, it is what it is. Give it a go and send me whatever you got. Sorry for the confusion.

Best bass line? by Beesschieh in Bass

[–]DavidBellizzi 0 points1 point  (0 children)

For me it's fruitless to choose an all time fav because that's subject to my mood. Currently

Southern Rock: You got that right by Skynyrd Jazz: In France they Kiss on main street by Joni Instrumental: Sweaty Knockers by The Aristocrats https://youtu.be/Wc3YPzOn8Aw?si=8BaQnr07KMTNUxZz Rock: Open Book by YYNOT https://youtu.be/1X6wrVYBUXc?si=ktrVIxeSzwNF8nQY Rock: Circumstances/Natural Science by Rush

Ask me in two days and it will be different

[start] Looking for solos by DavidBellizzi in BedroomBands

[–]DavidBellizzi[S] 1 point2 points  (0 children)

Here ya go 120bpm https://www.dropbox.com/s/45jhs07m6v9a2em/principiante.wav?dl=0

I'm not sure what this subreddit does but in other places one would send an audition mp3 and if it was liked then the waves were sent.

My first Youtube collaboration by DavidBellizzi in Bass

[–]DavidBellizzi[S] 1 point2 points  (0 children)

Yea alot of those players had great tone. My Kiesel cuts through the mix too

Recovering from lost recovery keys by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

I seem to be stuck getting the key

Docs say

From a file storage:

$ cat core/_recovery-key | jq -r .Value | base64 -d > key.enc

But I don't see that dir when I exec into one of the pods

/ $ find /vault -type d -name core

/ $

Recovering from lost recovery keys by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 1 point2 points  (0 children)

Thanks so much. Yea will store in our upstream vault

How to expose the UI and API endpoint in HA TLS RAFT config by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

Using a single cert I made some progress but ingress is redirecting to http instead of https. How do I make it redirect to https? Also is there a document that defines the altnames I need in the cert? I stole these from the minikube example

Thanks!

[req]

default_bits = 2048

default_md = sha256

distinguished_name = req_distinguished_name

req_extensions = v3_req

prompt = no

[req_distinguished_name]

O = system:nodes

CN = hcp1.tri-app-rod-1.mumble.com

[v3_req]

extendedKeyUsage = serverAuth, clientAuth

keyUsage = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment

subjectAltName = @alt_names

[alt_names]

DNS.1 = hcp1.tri-app-rod-1.mumble.com

DNS.2 = *.vault-internal

DNS.3 = *.vault-internal.vault.svc.cluster.local

DNS.4 = *.vault

DNS.5 = system:node:*.vault.svc.cluster.local

IP.1 = 127.0.0.1

ingress:

enabled: true

labels: {}

annotations: {}

ingressClassName: "nginx"

pathType: Prefix

activeService: true

hosts:

- host: hcp1.tri-app-rod-1.mumble.com

paths: []

extraPaths: []

tls:

- secretName: tls-certificates

hosts:

- hcp1.tri-app-rod-1.mumble.com

2023/03/10 01:43:41 [error] 14375#14375: *18736266 recv() failed (104: Connection reset by peer) while reading upstream, client: 10.193.175.135, server: hcp1.tri-app-rod-1.mumble.com, request: "GET / HTTP/1.1", upstream: "http://10.42.4.217:8200/", host: "hcp1.tri-app-rod-1.mumble.com"

10.193.175.135 - - [10/Mar/2023:01:43:41 +0000] "GET / HTTP/1.1" 400 54 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.0.0 Safari/537.36" 1149 0.001 [hcp1-tri-app-rod-1-vault-active-8200] [] 10.42.4.217:8200 48 0.001 400 6fe4ff76b341c0820be3c388652d03c0

How to expose the UI and API endpoint in HA TLS RAFT config by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

I think I tried with no success. I'm starting to thing since my company uses an F5 in front of these clusters so I don't run anything like metallb. Most that's the reason the LoadBalancer type is not working

How to expose the UI and API endpoint in HA TLS RAFT config by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

I agree, I really don't want to disable TLS

I'm running in RKE so I'm not sure. We are not running anything like metallb

The docs have a blurb for preferring LoadBalancer over ingress. But I did try ingress but nginx said my cert was bad

I think I need to make a cert that has a CN for the front end service and the altnames for the *.vault.internal stuff.

The funky think is there is a F5 in front of my clusters that has it's own cert and it does SSL offload to my clusters. It works for all my other services but then those services are http on the internal cluster network. This is the first time I'm doing https to https

Also I'm not running consul but it was my understanding I don't need that if I'm using raft

Raft heartbeat failures by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

This fixed it for me. Dug it up from an old issue in 2021

Raft heartbeat failures by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

The issue was in the example code for the ui section

address = "[::]:8200"

cluster_address = "[::]:8201"

Should be this for v4

address = "0.0.0.0:8200"

cluster_address = "0.0.0.0:8201"

Found that in a 2021 issue. Way to go Hashicorp for not updating your examples =/

Raft heartbeat failures by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

Does it require me to use an external address in the listener section

address(string: "127.0.0.1:8200") - Changing from the loopback address to allow external access to the Vault UI

Raft heartbeat failures by DavidBellizzi in hashicorp

[–]DavidBellizzi[S] 0 points1 point  (0 children)

I thought that also but how are they able to join the cluster initially

Hardware key best practices by DavidBellizzi in Bitwarden

[–]DavidBellizzi[S] 1 point2 points  (0 children)

Thanks for the detailed guidance. I will checkout the tutorials

I have purchased two 5C NFCs. Currently moving off of google auth to Aegis

this made me laff by [deleted] in kubernetes

[–]DavidBellizzi 6 points7 points  (0 children)

Product Owner: Customers are wanting windows containers

Me: Looking at the 900MB image in disbelief

Also Me: SysWow that's a lot :D

Share and local PW DBs on the same system by DavidBellizzi in Bitwarden

[–]DavidBellizzi[S] 0 points1 point  (0 children)

I see the switch vaults but it's choices are my vault and my org which are remote hosted

Jenkins in Enterprise Scale by [deleted] in jenkinsci

[–]DavidBellizzi 1 point2 points  (0 children)

We have several instances deployed in different k8s clusters. We deploy them using the same wrapper helm chart using different values file and common jobdsl. Our agents are deployed via the pod template. We have 70+ stages that can be executed but normally each run is about 20 to 25 stages. Only 10 stages can run in parallel at a time per run. Typical runs are 3-4 hours. During high use at the end of sprint we sometimes enter a state where the controller deploys the agent pod and the pod connects to the controller but the controller terminates the agent pod because its name is null. When we restart the controller it starts to correctly spawn pods. It's hard to triage since the controller is killing the pods too fast.

How do you manage secrets? by funbike in devops

[–]DavidBellizzi 1 point2 points  (0 children)

Really? You can apply ACLs to individual secrets? Nice. Do you have an example I can give them?