talos in aws the all talos nodes don’t enable public ip, can use private subnet and vpc ip cidr Operate workflow ​ Installation the talosctl to operator machine talosctl Create aws resources VPC Subnet SecurityGroup NetworkLoadbalancer : listener tcp 443 forward to control plane nodes tcp: 6443 TargetGroup: for …

read more

When use imagePullSecret to pull image from ecr in eks cluster for particular task etc. Istio WSAM plugin from ecr registry, need specific imagePullSecret Basic workflow create cronjob in eks cluster schedule login to ecr and obtain credentials create a secrets in some Namespaces named aws-registry save the docker pull …

read more

You can generate Python, Java, and .NET software libraries from a TypeScript source use jsii of AWS Cloud Development Kit (AWS CDK). Initialization the project constructure 1pnpm init -y 2pnpm install –development jsii jsii-pacmak The package.json like following this 1{ 2 "name": "jsii-demo", 3 …

read more

Usually, user data scripts are only run the first time the instance is started, however this can be changed using cloud-init to run every time the instance restarts. Create the cloud config file 1Content-Type: multipart/mixed; boundary="//" 2MIME-Version: 1.0 3 4–// 5Content-Type: text/cloud-config; …

read more

POC process Construct attack machine to listener and redirect the credentials url 1#!/usr/bin/env python3 2 3 4# ./redirect.py 1337 http://169.254.169.254/latest/meta-data/iam/security-credentials/ 5 6import sys 7from http.server import HTTPServer, BaseHTTPRequestHandler 8 9if len(sys.argv)-1 != 2: 10 …

read more