The Iron Rose fucked around with this message at 21:45 on Dec 18, 2020

- name: Construct Json on server
  template:
    src: data.json.j2
    dest: /path/to/file.json

- name: Copy json to server
  copy:
    src: /path/to/encrypted/file.json
    dest: /path/to/decrypted/file.json

The Iron Rose fucked around with this message at 21:20 on Feb 11, 2021

users_dictionary:
  service:
    username: serviceUsername
    password_hash: encryptedString
  otherService:
    username: otherServiceUsername
    password_hash: otherEncryptedString
    tags: administrator

{% for user in users_dictionary.values() %}
{
  "hashing_algorithm": "application_password_hashing_sha256",
  "name": "{{ user.username }}",
  "password_hash": "{{ user.password_hash }}",
  "tags": "{{ user.tags|default("") }}"
{% if not loop.last %}
},
{% else %}
}
{% endif %}
{% endfor %}

---
- hosts: localhost
  vars_files:
    - vars.yml
  tasks:
    - name: test jinja2
      template: src=template.j2 dest=test.conf

The Iron Rose fucked around with this message at 00:52 on Feb 17, 2021

The Iron Rose fucked around with this message at 01:03 on Feb 17, 2021

The Iron Rose fucked around with this message at 22:49 on Feb 24, 2021

The Iron Rose fucked around with this message at 14:24 on Aug 29, 2021

The Iron Rose fucked around with this message at 06:50 on Jun 28, 2022

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    # add an annotation indicating the issuer to use.
    cert-manager.io/cluster-issuer: mycluster-cert-manager-cluster-issuer
    kubernetes.io/ingress.class: nginx
    #### ---NGINX SERVER CONFIG FOR FOO-API.EXAMPLE.COM
    # Server snippet adds custom configuration to all the servers in the nginx configuration
    # location block lives within server blocks, and are used to define how Nginx should handle requests for different resources and URIs    
    # Based on request method we set the target destination to an arbitrary path prefix
    # we then store the variable $original_uri based on the normalized uri nginx is currently processing
    # finally, we rewrite the original uri to read or write.
    # The request then flows to the backend based on the path, and the uri is subsequently rewritten to the original uri
    nginx.ingress.kubernetes.io/server-snippet: |
      location /api/v1 {
        if ( $request_method = GET) {
          set $target_destination '/_read';
        }
        if ( $request_method != GET) {
          set $target_destination '/_write';
        }
        set $original_uri $uri;
        rewrite ^ $target_destination last;
      }
    #### ---FOOAPI-INGRESS CONFIG
    # Configuration snippets modify headers for specific ingresses
    # see: [url]https://kubernetes.github.io/ingress-nginx/examples/customization/configuration-snippets/[/url]
    # internal specifies that a given location can only be used by internal requests
    # see: [url]https://nginx.org/en/docs/http/ngx_http_core_module.html#internal[/url]
    # rewrite says that if the regular expression matches a request URI, URI is changed as specified in the replacement string
    # in this case rewrite matches the original uri with the caret (^), and replaces it with $originaluri, which we stored above.
    nginx.ingress.kubernetes.io/configuration-snippet: |
      internal;
      rewrite ^ $original_uri break;
  name: fooapi-ingress
  namespace: default
# The path will be overwritten by the original uri
spec:
  rules:
  - host: foo-api.example.com
    http:
      paths:
      - pathType: ImplementationSpecific
        path: /_read
        backend:
          service:
            name: foo-api-ro
            port:
              number: 80
      - pathType: ImplementationSpecific
        path: /_write
        backend:
          service:
            name: foo-api
            port:
              number: 80
  tls: # < placing a host in the TLS config will determine what ends up in the cert's subjectAltNames
  - hosts:
    - foo-api.example.com
    secretName: fooapi-ingress-cert # < cert-manager will store the created certificate in this secret.[s][/s]

    # featuring lovely weighted custom load balancing
    nginx.ingress.kubernetes.io/server-snippet: |
      location /api/v1 {
        set $original_uri $uri;
        content_by_lua_block {
          local reqType = ngx.var.request_method
          if reqType == ngx.HTTP_GET
          then
              local randNum = math.random(1, 100)
              if randNum < 66
              then
                res = ngx.location.capture("/_read")
              else
                res = ngx.location.capture("/_write")
          else
              res = ngx.location.capture("/_write")
          end
          ngx.say(res.body)
        };
      }

The Iron Rose fucked around with this message at 21:42 on Jul 22, 2022

The Iron Rose fucked around with this message at 23:45 on Jul 22, 2022

The Iron Rose fucked around with this message at 21:41 on Jul 23, 2022

The Iron Rose fucked around with this message at 03:58 on Sep 20, 2022

The Iron Rose fucked around with this message at 05:47 on Sep 20, 2022

The Iron Rose fucked around with this message at 19:55 on Oct 24, 2022

The Iron Rose fucked around with this message at 08:44 on Dec 12, 2022

The Iron Rose fucked around with this message at 22:41 on Dec 21, 2022

The Iron Rose fucked around with this message at 19:57 on Feb 14, 2023

The Iron Rose fucked around with this message at 20:39 on Feb 14, 2023

The Iron Rose fucked around with this message at 20:40 on Feb 14, 2023