XTI-DFDenni XTIDfdenni

When it comes to databases and AWS VPC, best practice is to place your database in private subnet. By definition, private subnet in AWS is not reachable from the Internet because no Internet gateway is attached to private subnet. This is the way you protect your data. This kind of configuration is good for security but bad for data management.

How can you easily access and manage your secured data?

There are two basic ways to acees it.

Access postgres RDS from bastion host. There are following requirements for this.

How to create an HTTPS certificate for localhost domains

This focuses on generating the certificates for loading local virtual hosts hosted on your computer, for development only.

Do not use self-signed certificates in production ! For online certificates, use Let's Encrypt instead (tutorial).

	[root@localhost ~]# INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh
	[INFO] Skipping k3s download and verify
	[INFO] Creating /usr/local/bin/kubectl symlink to k3s
	[INFO] Creating /usr/local/bin/crictl symlink to k3s
	[INFO] Skipping /usr/local/bin/ctr symlink to k3s, command exists in PATH at /bin/ctr
	[INFO] Creating killall script /usr/local/bin/k3s-killall.sh
	[INFO] Creating uninstall script /usr/local/bin/k3s-uninstall.sh
	[INFO] env: Creating environment file /etc/systemd/system/k3s.service.env
	[INFO] systemd: Creating service file /etc/systemd/system/k3s.service
	[INFO] systemd: Enabling k3s unit

	import argparse
	import os

	import boto3


	class S3MultipartUpload(object):
	# AWS throws EntityTooSmall error for parts smaller than 5 MB
	PART_MINIMUM = int(5e6)

	provider "aws" {
	region = "us-east-1"
	}

	data "aws_caller_identity" "current" {}

	data "aws_vpc" "vpc" {
	filter {
	name = "tag:Name"
	values = [

	#!/bin/bash

	# Setup
	#
	# - Create a new Jenkins Job
	# - Mark "None" for Source Control Management
	# - Select the "Build Periodically" build trigger
	# - configure to run as frequently as you like
	# - Add a new "Execute Shell" build step
	# - Paste the contents of this file as the command