Fixing Letsencrypt renewal errors on SSL only domains

The Problem As you know, the Letsencrypt certificates are valid only for 90 days and you need to renew them before it expires. Most of us have a cron job that takes care of it using letsencrypt renew or certbot renew. [Read More]
Tags: Linux, SSL, Letsencrypt, Fix

Creating an SSD persistent volume in Google Kubernetes Engine

In my humble opinion, Google Kubernetes Engine (previously known as Google Container Engine) is the best kubernetes implementation among all the cloud providers. It is THE easiest to set up as well. Because of that, we’ve been using GKE extensively on many of our projects. And recently, I came across... [Read More]
Tags: Linux, Containers, Kubernetes, GKE

Checking SNI SSL certificate expiry in Linux/Mac

The Problem This is how we normally check the expiry of an SSL certificate echo | openssl s_client -connect 2>/dev/null | openssl x509 -noout -dates This is all fine and dandy if you have only one SSL domain hosted in the same IP address. If you try to check... [Read More]
Tags: Linux, Mac, OpenSSL, SSL, Letsencrypt

Debugging in Google Container Engine nodes

If you are using Kubernetes in Google Container Engine, at some point, you might have to debug from the node level (Nodes are the virtual machines where the entire cluster lives). For any debugging, you might need some additional packages, like tcpdump or netstat. The catch here is that the... [Read More]
Tags: Debian, Ubuntu, GoogleCloud, Bucket