#kubiscan is the tool to scan Kubernetes cluster permission.

https://www.facebook.com/2132214327032157/posts/2654564561463795/

For more details click on above link.

#ssh tips in #linux os. Following things are listed

1. Allow ssh access to specific ip address using #iptables

2. Allow ssh access to specific ip address using hosts.allow file

3. Disable password authentication for specific users whereas let the root user accessible using password

https://www.facebook.com/2132214327032157/posts/2656562951263956/

You can also join our conversation on telegram channel: t.me/fouriglance

Do us your favour by like, share our post and page to all techies guyz in your group.

#ssl #certificate #letsencrypt #linux #https #httpd #apache


Generate free certificate using letsencrypt's certbot. It is the easiest way to create/renew SSL certificate for your domain. The steps are as follow:

1. Download the letencrypt repo on linux machine.
2. Stop the webserver.
3. Run letsencrypt-auto certonly command with standalone parameter
4. Accept the license and enter asked values.

Click below for details:

https://www.facebook.com/2132214327032157/posts/2664758360444415/

You can also join our conversation on telegram channel: t.me/fouriglance

Your each like, share and comment is great motivation for us to share more quality content.

#regexp #vscode #hack #vscode #sed

Regular expression hack in visual studio code. Replace set of desired keywords in over a file using a simple regular expression with something like a word, letter, etc or nothing.

I tried to replace lot of words one by one in a long endless file. Suddenly, I realised to give a try to a regular expression.

Click below for details:

http://www.facebook.com/story.php?story_fbid=2678038302449754&id=2132214327032157

You can also join our conversation on telegram channel: t.me/fouriglance

Your each like, share and comment is great motivation for us to share more quality content.

#namespace #kubernetes #4iglance

Resolved: Deleting kubernetes namespace stuck at "Terminating" state

~~~~~~
Error from server (Conflict): Operation cannot be fulfilled on namespaces "qa": The system is ensuring all content is removed from this namespace. Upon completion, this namespace will automatically be purged by the system.
~~~~~~~~~~~~

http://www.facebook.com/story.php?story_fbid=2683555288564722&id=2132214327032157

Like and Share with your colleagues or friends. Enable them to learn and grow.

#rds #database #backup #mysqldump

Take dump of your database and restore while watching the progress.

https://www.facebook.com/4iglance/posts/2686370501616534

You can also join our conversation on telegram channel: t.me/fouriglance

Like and Share with your colleagues or friends. Enable them to learn and grow.

Hi,

Today, we have class of AWS Cloudformation at 8:00 pm IST. You can invite your friend or colleagues.

Meeting URL: https://meet.google.com/vif-hqvy-wmb

#mysql most usable query for devops. The list contents is listed below:

1. Check MySQL version
2. Create username
3. Grant write access
4. Grant read access
5. Revoke write access
6. Change password

For more details:
https://www.facebook.com/2132214327032157/posts/2717376788515905/

You can also join our conversation on telegram channel: t.me/fouriglance

Like and share with your colleagues or friends for more updates. Enable them to learn and grow.

If you would to share your knowledge and experiences then please join us on telegram.

#kubernetes #auth #serviceaccount #role #rolebinding

Find out what permission a user has in kubernetes cluster?
Try auth can-i to verify your access level.

I found auth can-i helpful when I thought to verify whether one of the pods has access to create another. I mainly used it when airflow tried to create a new pod.

In the Architecture diagram, When a user creates a DAG, they would use an operator like the "SparkSubmitOperator" or the "PythonOperator" to submit/monitor a Spark job or a Python function respectively. To find more details click on below link:

https://www.facebook.com/2132214327032157/posts/2722975374622713/

You can join our conversation on telegram channel: t.me/fouriglance

Like and share our facebook page (fb.com/4iglance) with your colleagues or friends for direct updates. Enable your love one to learn and grow.

If you want to share your knowledge and experience then you can join us on telegram.

#kubernetes #auth #grafana #gmail #oauth

Grafana authentication with Gmail account

To find more details click on below link:

https://www.facebook.com/2132214327032157/posts/2760184807568436/

You can join our conversation on telegram channel: t.me/fouriglance

Like and share our facebook page (fb.com/4iglance) with your colleagues or friends for direct updates. Enable your love one to learn and grow.

If you want to share your knowledge and experience then you can join us on telegram.

Hi,

I am looking for a DevOps Engineer who has good experience on Kubernetes. And who can join immediately. Rest of thing I will take care for you.

Company: Goals101 Data Solutions (AI based Fintech Company)
Location: Delhi

You can reach me at hisrarul@gmail.com or whatsapp number: +91-9711011556

*Position for DevOps:*

You may share this opportunity within your network and if interested you can also share your resume at nisha@shyplite.com

Referral Name: Israrul Haque

We enable E-retailers to automate their logistics and increase efficiency in shipments by providing a single-window shipping platform integrated with multiple carriers.



Role: DevOps Engineer


Responsibilities


Monitor various systems capacity and health indicators and trends to maintain platform reliability and scalability

Owns the production environment and troubleshoot and fix the bugs in a record time

Create and maintain system information and architecture

Implement metrics and improve monitoring, alerts, logs, and reporting

Maintain and monitor platform & other tools for security risk, and manage access

Identify areas for efficiency improvement on the platform; recommend a solution and assist in the implementation

Improve CI/CD tooling

Drive automation of application deployment for production, and pre-releases environment



Requirements


Solid understanding and hands-on experience AWS cloud (including Cloudwatch, RDS)

Experience in managing Linux based infrastructure

Solid understanding of TCP/IP, load balancing, firewalls, clusters

Hands-on experience in at least one scripting language

Experience in scaling services on AWS cloud

Experience with build management & continuous integration tools (Github actions, Jenkins, Travis - anyone)

Knowledge of containers and container orchestration is good to have

Different opportunities at *Relevance Lab.* You may share these opportunities within your network and if interested you can also contact HR: Mr. Mohit at *+919980534438*

Referral Name: Israrul Haque

1) Devops Engineer
Experience: 5+ Years
Mandate skill set: Devops, Linux, AWS and Kubernetes

• 5+ years hands-on experience with designing, deploying and managing core AWS services and infrastructure
• Proficiency in scripting using Python, Ruby, Groovy, or similar languages
• Experience in source control management, specifically with Git
• Hands-on experience in Unix/Linux and bash scripting
• Experience building, managing Helm-based build and release CI-CD pipelines for Kubernetes platforms (EKS, Openshift, GKE)
• Strong experience with orchestration and config management tools such as Terraform, Ansible or Cloudformation
• Ability to debug, analyze issues leveraging tools like App Dynamics, New Relic and Sumologic
• Knowledge of Agile Methodologies and principles
• Good writing and documentation skills
• Strong collaborator with the ability to work well with core teammates and our colleagues across STS

2) Security Infra Specialist
Experience: - 5+ years

Job Overview

Responsible for monitoring and investigating the security events on 24x7 basis. Align with Global Security team for alert analysis & risk mitigation. Understand network architecture and work with network team in the event of external attacks for resolution.

40 % of Time
Monitor and investigate cyber security events
· Demonstrate ability to work in 24x7 facility in rotating shifts.
· Thorough knowledge and adequate experience on Security Incident & Event Management (SIEM) system.
· Good understanding of network protocols.
· Deep understanding on Windows end point investigation.
· Achieve containment time defined by Global Security.
· Fair Knowledge on perimeter security devices like firewall, WAS, routers,AD,Windows Servers, Linux servers, FTP, Paloalto, Cisco ASA etc.
· Quick learner, good analytical skill, and action-oriented.
· Agility in incident response.

30% of Time
Maintain quality and consistency
· Perform weekly random reviews of the ticket and be an escalation point for any security incidents.
· Make a timely and high-quality decision.
· Collaborate across boundaries.
· Fine-tuning the current detection rules & adding more new rules.
· Develop indicators of compromise.
· Lead the lesson learned meetings for any incidents.
· Preferred certification on ECIH.

30% of Time
Advance capabilities
· Learning new tools and share them with the team to improve the team’s overall investigation skills.
· Identify the scope of improvement for the CSIRT process and investigation techniques.
· Fine-tuning existing rules in the SIEM system.
· Support the investigation tools and informs the leads of any problem.
· Identify the scope of automation for collecting evidence.
· Evaluate latest standards and techniques in the world of incident response.

3) Cyber Security Specialist
Experience: - 6+ years

• Security Analyst (SOC) Security Automation for a Global leading Product Development Company
• Proven and Demonstrated passion for cyber security at least 3+ Years relevant experience.
• Good understanding of security operations, network security, threat intelligence, incident response.
• SIEM configuration (particularly Qradar). Incident and alarm response procedures, engagement with operations teams to manage incidents.
• Experience/ Understanding of Cloud based services (AWS), technologies, and providers (eg SaaS, IaaS, PaaS, etc.)
• Experience with writing queries, parsing and correlating data.
• Technical understanding of PaloAlto, firewall, IDS and Wildfire features

• The ability to perform analysis of log files from multiple different devices and environments, and identify indicators of security threats. Strong understanding of parsing and analyzing web, system and security logs
• Strong technical knowledge across a range of server and gateway platforms, including Linux/ Unix/ Windows/ Mac
• Demonstrable knowledge of scripting/ programming tools such as PowerShell, Python
• Understanding of VPN infrastructure, 2FA.
• Deep understanding of network protocols and network security TCP/ IP, UDP, DHCP, FTP, SFTP, SNMP, SMTP, SSH, SSL, VPN, RDP, HTTP, and HTTPS.
• Knowledge of Endpoints Security, DLP is huge plus
• Familiar with YARA, STIX, TAXII, OpenIOC
• Excellent verbal and written communication skills; ability to articulate technical knowledge to non- technical audience; production of policy/ standards/ project documentation
• Knowledge of data leakage prevention tools is a add on
• Having a certification background in any one of GCIH, GCIA, GPEN, OSCP or other relevant certifications within Cyber Security is highly advantageous.

4) Senior SRE Engineer
Experience :- 5+ years

• Candidate will be part of the SRE team and lead technical role to determine
• Reliability Engineering needs of mission critical systems and business processes
• Candidate will assess high level architecture and design issues relating to platform enterprise software interactions with other systems
• Application development infrastructure and middleware teams to ensure stability and reliability of the system Engineering will proactive detect issues within the applications platform network.
• Candidate should have familiarity with Internet protocols such as HTTP DNS TCP and UDP and Linux development environment and well versed with DevOps.
• Candidate will identify anti patterns optimization and support development of self-healing capabilities
• Responsibilities Create operational tooling for monitoring self-healing infrastructures and testing
• Design and create controlled in production systems
• Work across teams identify and fix issues that affect systems reliability and performance
• Dive into system and latent reliability issues service performance and capacity modeling of distributed systems at scale
• Partner with development team to identify anti patterns and optimization strategies create fallback options and help develop self-healing capabilities across the enterprise in a sustainable manner
• Requirements A passion for creating reliable applications and a systematic problem solving approach coupled with a strong sense of ownership and drive
• 3+ years of hands on experience with cloud-based technologies and tools in configuration management deployment monitoring and operations
• Experience with Engineering tools such as Terraform, Ansible, Consul and Linux development environment.
• Experience in Application Performance Managing Real User Monitoring infrastructure monitoring and log analysis tool such as Apica Nagios Sensu and Sumologic NewRelic with DevOps Continuous Delivery
• Expertise in working in partnership with colleagues throughout the firm and in leading collaborative teams to achieve common goals
• Experience in an Agile delivery environment
• Experience as a hands on software engineer so you understand the core principles of the engineering work
• Experience in communication and organization in large distributed teams
• A Bachelor s degree is required
[24/06, 14:08] +91 99805 34438: 5) Network Specialist
Experience: 8+ Years

Job description:
• 8+ years’ experience with enterprise-level network design and deployment.
• Capable of Installing, Maintaining and troubleshooting Palo Alto and Cisco Firewalls.
• Capable of maintaining and troubleshooting Cisco Wireless infrastructure
• Strong performance tuning and capacity planning experience; traffic trending analysis, network optimization

• Solid understanding of Solarwinds or any other monitoring applications
• Solid understanding of routing protocols: OSPF, EIGRP, BGP
• Ability implement Routing/Switching Protocols utilizing Cisco Routers and Switches
• Experienced with Nexus 2/3/5/7K platform, ISR’s, 3900 series routers.
• Ability to implement LAN/WAN technologies including MPLS and QoS (prioritization for voice and video)
• Ability to implement DMVPN over the enterprise.
• Ability to implement Network Security technologies; Access control and VPN using Palo Alto/Cisco ASA Firewalls
• Proven track record identifying and championing appropriate new technologies; ability to quickly adapt to changes
• Exceptionally organized, self-motivated and directed with ability to set and manage priorities judiciously
• Superior analytical problem solving and troubleshooting skills
• Understanding of Cloud technologies, Network Security in a Multi Tenancy Environment.
• Understanding AWS is a must
• Understanding of PCI and SOX compliancy is a plus
• Understanding of Cisco IWAN is a plus
• Understanding of Software Defined Networking