Stickies

ELK 教學 - 定期清除 Elasticsearch 資料 https://blog.johnwu.cc/article/elk-purge-elasticsearch-index.html https://www.elastic.co/guide/en/elasticsearch/client/curator/current/configfile.html https://www.elastic.co/guide/en/elasticsearch/client/curator/current/ex_delete_indices.html https://anjia0532.github.io/2017/04/06/elasticsearch-delete-indices-by-date/ config.yml # Remember, leave a key empty if there is no value. None will be a string, # not a Python "NoneType" client: hosts: - xxx.xxx.xxx.xxx port: 9200 url_prefix: use_ssl: False certificate: client_cert: client_key: ssl_no_validate: False http_auth: timeout: 30 #timeout: 60 master_only: False logging: loglevel: INFO logfile: logformat: default blacklist: ['elasticsearch', 'urllib3'] curator_filebeat.yml # Remember, leave a key empty if there is no value. None will be a string, # not a Python "NoneType" # # Also remember that all examples have 'disable_action' set to True. If you # want to use this action as a template, be sure to set this to False after # copying it. actions: 1: action: delete_indices description: >- Delete indices older than 30 days (based on index name), for logstash- prefixed indices. Ignore the error if the filter does not result in an actionable list of indices (ignore_empty_list) and exit cleanly. options: ignore_empty_list: True disable_action: False filters: - filtertype: pattern kind: prefix value: filebeat- - filtertype: age source: name direction: older timestring: '%Y.%m.%d' unit: days unit_count: 30 curator_heartbeat.yml ...

How to UI show with flutter And Some flutter action

今天找到一篇有分享經驗的文章 http://sueboy.blogspot.com/2019/01/vault.html 1、量大 Vault有機會掛 2、Vault的重啟 需要特定 5把金錀 3把同意 才能開啟，所以人要登入，不然就是要模擬操作 但模擬操作就失去意義 3、服務被更新重啟，又會發生2的情況 Vault就是簡單說就是管理 帳號、密碼、token、金錀，配合上ACL url ，有群組權限等功能 專案角度就是 啟動服務(docker)後，前端直接跟Vault做驗證登入，api url 呼叫是否有權限等，都是Vault會給出回應 能登入否 能存取否 更進階是token 金鑰 時效等等都可以設定，可用Vault的管理介面 當然 會面臨的第一個問題，怎麼建立account 、怎麼判斷(go server要去呼叫Vault，前端也可以呼叫Vault)，再來要多一個維護的系統，而且這個系統是最重要的，一掛，所以有的系統都登入不了 真的有比較好嗎？ 1、要多一個系統做管理 2、要再多學一個系統操作、設定 3、真的掛了，運用本身沒掛，那……… 4、有bug或是無法滿足特定條件權限時，怎麼辨 好處： 統一方式，除非將來Vault沒了，不然很多專案可以使用

https://medium.com/getamis/vault-dynamic-credentials-fd651d6c28a9 https://medium.com/@gmaliar/dynamic-secrets-on-kubernetes-pods-using-vault-35d9094d169