pritunl-k8s-tf-do
thanos
Our great sponsors
pritunl-k8s-tf-do | thanos | |
---|---|---|
11 | 66 | |
23 | 12,577 | |
- | 1.0% | |
3.6 | 9.6 | |
6 months ago | 6 days ago | |
HCL | Go | |
MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pritunl-k8s-tf-do
-
Why migrate to GitHub from Jenkins?
I have a full example here of a working GHA pipeline that deploys terraform infrastructure. This deploys atlantis, which can then be used to deploy Pritunl VPN. Works almost perfectly except for the fact that helm yaml encoded sensitive values are revealed on terraform destroy, so I simply don't have anything sensitive encoded in yaml.
-
[FOR HIRE] Where are the high paying remote DevOps jobs that don't require LeetCode?
Hey now, I've already got a homelab that launches a k8s cluster and installs Pritunl VPN for coffee shop wifi. I do at least understand that tools need a valid use case before being applied, although admittedly installing it on k8s vs just using Nomad or something is more RDD than not for this one.
-
Start date pushed back multiple times at new contract gig. Looking to see what else is out there.
I'm looking for a company that is willing to judge me based off of past experience and previous projects I've already completed. So ideally no LeetCode, and no more take homes unless you want me to post them publicly. Ideally looking to come in at $160K+ for mid level or $200K+ for senior, depending on how much of a match there is between me and the position, and a sign-on bonus would be incredible. Hopefully I have enough of a reputation at this point where you've seen my posts and comments in /r/devops and already know what I'm capable of, but if not, I'm happy to chat about previous projects in-depth and go over what I've worked on. A code review as part of the interview process would be absolutely stellar. This is what I've been working on recently as well as my "homelab" if you re looking for some specifics. DM or chat with your work email for an official resume
-
So I've installed grafana, loki, and prometheus on the personal Kubernetes cluster via Terraform. Now what?
Already done, but good call on learning how to create conditionals. I will look into it!
-
Ask r/kubernetes: What are you working on this week?
Playing around with grafana/loki/prometheus all via Terraform, GitHub Actions, and Atlantis in a public repo.
-
What's the best cloud provider for me to mess around in and learn k8s without accidentally getting charged a lot of dollar?
I set up a whole pipeline to install and configure Pritunl VPN on DigitalOcean and it only costs me like $60/month for a 3 node cluster.
-
I built an open source deployment pipeline of Pritunl to Digital Ocean using Github Actions and Atlantis. User-friendly, open source, VPN on Kubernetes at under $60/month!
https://github.com/autotune/pritunl-k8s-tf-do/blob/master/README.md is the repo. The README should answer any questions about how the pipeline works but the end result is a pritunl webgui listening on port 80 with an ingress route for https, a SERVICE load balancer that listens for VPN connections, and the ability to connect to said service load balancer over Pritunl VPN client. Note this is missing a few things, for one you can only have a replica set of 1 in the deployment. I need to figure out how to add HA with the "enterprise" edition at $70/month extra (still relatively cheap for what you get!). But for personal use it should suffice. Also, I tried using an ingress for the vpn itself but can't get it working, so stuck with SVC load balaner instead, which works fine. Any suggestions here would be appreciated!
-
Any folks from the zerossl project lurking these forums? Your user signup page cert is expired.
All I know for sure is the one cert I was using with letsencrypt kept failing to renew. I just tried it with zerossl since the sign up page cert was finally renewed last night and people have generally been happy with them outside this little incident and seems to actually be working as expected. The helm release I am using is linked to via tf here and the ingress rules are here.
thanos
-
Looking for a way to remote in to K's of raspberry pi's...
Monitoring = netdata on each RPi https://www.netdata.cloud/ binded to the vpn interface being scraped into a prometeus thaons https://thanos.io/ setup with grafana to give management the Green all is good screens (very important).
-
thanos VS openobserve - a user suggested alternative
2 projects | 30 Aug 2023
- FLaNK Stack Weekly for 24 July 2023
- FLaNK Stack Weekly for 10 July 2023
-
Monitoring multiple kubernetes cluster with single Prometheus operator
Sounds like you want something like Thanos
-
Is anyone frustrated with anything about Prometheus?
Yes, but also no. The Prometheus ecosystem already has two FOSS time-series databases that are complementary to Prometheus itself. Thanos and Mimir. Not to mention M3db, developed at Uber, and Cortex, then ancestor of Mimir. There's a bunch of others I won't mention as it would take too long.
-
Thousandeyes Pricing Model
Long term storage all depends on your needs and sophistication. I use Thanos for our system since it has an extremely flexible scaling system. But there is also Grafana Mimir. They're both similar in that they use Prometheus TSDB format as part of the underlying storage. One nice Thanos advantage is that it does do downsampling in addition to being able to store raw metric data for a long time. It will auto-select downsampled data to make requests faster.
-
Monitoring many cluster k8s
You can aggregate all your clusters Prometheus metrics together with a wonderful tool called Thanos. This will allow you to use just a single Grafana instance against Thanos and using a label select which cluster you wish to see metrics from. The downside of this, is that none of the Grafana dashboards from the internet will work as-is. You'll need to customize all of them for Thanos support. The other downside is, you have a single point of failure, and (see next item) you can't customize who can access what in regards to your dev vs production data/metrics/access.
-
Best unicorn monitoring system?
Depending on how you want to set things up, you can use Thanos or Mimir to create the single-pane-of-glass view of your data.
-
Prometheus vs EFS: I don't know who to believe
You could look at something like Thanos and store your data in S3: https://thanos.io/
What are some alternatives?
locust - Write scalable load tests in plain Python 🚗💨
mimir - Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.
pritunl-client-electron - Pritunl OpenVPN client
VictoriaMetrics - VictoriaMetrics: fast, cost-effective monitoring solution and time series database
k3s - Lightweight Kubernetes
cortex - A horizontally scalable, highly available, multi-tenant, long term Prometheus.
beeswithmachineguns - A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
promscale - [DEPRECATED] Promscale is a unified metric and trace observability backend for Prometheus, Jaeger and OpenTelemetry built on PostgreSQL and TimescaleDB.
predator - A powerful open-source platform for load testing APIs.
Telegraf - The plugin-driven server agent for collecting & reporting metrics.
helmfile - Deploy Kubernetes Helm Charts
istio - Connect, secure, control, and observe services.