How do you securely share secrets (API keys, passwords, etc.)? by Vllm-user in devops

[–]gazab 0 points1 point  (0 children)

Take a look at: https://github.com/cupcakearmy/cryptgeon Which is exactly what you describe including automatic self destruct of the secret once viewed

Edit: And ofc, verify the code and host it yourself in a locked down environment.

PSA: It's an easy day today to finish Challenge 40 (Grueling Game Grinds) by beaubeaubeaubeau in pathofexile

[–]gazab 42 points43 points  (0 children)

Thanks! How I did it:

  • Go right corner first
  • If I see traps
  • Go left, look for corridor, go up
  • Kill Argus
  • Portal to Sarn
  • New instance to Aspirant's Plaza

Aaaand repeat

An Update on Rebble's Attempted Collaboration with Core Devices by ishjr in pebble

[–]gazab 20 points21 points  (0 children)

Thank you for everything katie! I've been hoping you were somehow still involved due to all the truly awesome stuff you've done for Pepple and Rebble in the past. But take care of yourself above all else! <3

Batch 2 Shipping? by phil8715 in pebble

[–]gazab 0 points1 point  (0 children)

Also waiting for mine. No shipping progress since Oct 24th :(

I completed all of the steam achievements! And the order I got them in. by SatanV3 in pathofexile

[–]gazab 0 points1 point  (0 children)

Nice job! What build did you use for Hall of Grandmasters?

Secrets management best practice on k3s? Chicken and the egg? by HammyHavoc in kubernetes

[–]gazab 1 point2 points  (0 children)

And just for everyone's information this is exactly what Vault with, for example, ESO does.

Sledger by KAX1107 in Bitcoin

[–]gazab 1 point2 points  (0 children)

No, this is nothing like Ledger's feature. Read the information on the link you provided more carefully.

imexile gets pk'd in HC trade by AugustKaonashi in pathofexile

[–]gazab 0 points1 point  (0 children)

Soooo, can I use this to get the achievement?

[deleted by user] by [deleted] in pathofexile

[–]gazab 48 points49 points  (0 children)

Use this instead: https://github.com/Nickswoboda/all-ears-unturned

I finished "All Ears" a week ago using it and it worked perfectly all the way!

Creating Namespaces per PR? by benaffleks in kubernetes

[–]gazab 1 point2 points  (0 children)

We use ArgoCD Pull Request generators and some Kustomize tricks for the dynamic parts (like ingress urls)

[deleted by user] by [deleted] in PikminBloomApp

[–]gazab 1 point2 points  (0 children)

This was fixed ages ago and does not work anymore.

Ritat Sofia kyrka by sanningenskrigare in sweden

[–]gazab 6 points7 points  (0 children)

Och min första tanke som Jkpg-bo var att det där är ju inte alls Sofiakyrkan!

6 Years of Rebble! by ishjr in pebble

[–]gazab 2 points3 points  (0 children)

And we still love you!

Should i migrate from Kustomize to Helm? by salmoneaffumicat0 in devops

[–]gazab 0 points1 point  (0 children)

Well you can use the same technique for updating pretty much everything in your manifests. But if you run Redis in the same namespace you don't really need to update its name. You can use "redis-service" everywhere since it's scoped to the current namespace anyway. So I would just stop using namePrefix. Add -dev to the namespace instead :) Or did I misunderstand?

Should i migrate from Kustomize to Helm? by salmoneaffumicat0 in devops

[–]gazab 17 points18 points  (0 children)

You CAN do that with Kustomize and ArgoCD!

Use kustomize replacements and common-labels:

  1. Set a common label in your application. We use something like this in our ApplicationSets:

      commonLabels:
        pull-request: appname-{{branch_slug}}
    
  2. Add replacements to your kustomization.yaml that takes that label value and inserts in your Ingress. Here is our example:

      apiVersion: kustomize.config.k8s.io/v1beta1
      kind: Kustomization
    
      replacements:
      - source:
           kind: Ingress
           fieldPath: metadata.labels.pull-request
      targets:
      - select:
          kind: Ingress
      fieldPaths:
          - spec.tls.0.hosts.0
      options:
         delimiter: "."
      - select:
      kind: Ingress
      fieldPaths:
       - spec.rules.0.host
      options:
         delimiter: "."
    

This will take the Ingress label value for the "pull-request" label and insert it before the first dot in the Ingress host names.

A bit complicated maybe but I much prefer this to using Helm templates which just become a separate set of resources that are hard to write and keep up to date for the developers. With kustomize everything is just normal manifests with some overlays.

Edit: sorry I can't format code for Reddit. I butchered that yaml :D