First of all, you need to define better what you want to measure. Imagine a sports team. One could say that "improving" means "winning more games" - and one could say that a software team is "improving" when the product is making more money or has a bigger user base. However, in both cases, one can break down what makes the team and analyse specific aspects. It will be highly contextual, depending on your strategy (both in the sport and on the software development).

One common important factor for testers is "are we being able to test more, or are we doing other things?". If that's important to you, you can look at Session-Based Test Management (SBMT).

The data input for SBMT will be the test charters:

From the charters, you can extract information. For instance, how much of the tester's time is spent in different activities:

This can identify problems with testability for instance.

Or how many testing sessions are done throughout time:

Of course, you can think of many other things: You can make a word cloud from the "Bugs" session, in order to identify things that more frequently happening on the bugs; how are you dividing your testing between OS/devices, etc...

The "PF" field refers to port forwarding.

You may setup port forwarding, ("shift-f" in pod view). This indicator probably means you have setup some port forwarding -- in my case, it prints some weird character.

Although to be honest ... I only figured it out, searching their git repository history .... Introduced here: https://github.com/derailed/k9s/commit/f1111174aa8df815e25b0a029ba1465d3a855b49#diff-5b19eaab395254884c7dff045b0e50a599c29794e80a81fe42c9667450b6e9d4

I'm using Github Actions to publish my python packages automatically. When working with PyPI everything works fine and providing different config to point on different repository is not an issue. But when repository (JFrong artifactory) is located behind VPN GH Actions is not able to push/fetch from there.

What is the right approach to deal with such kind of situation? Is there any kind of existing solution for this issue?

I am new to Terraform. How can I use Terraform to configure EC2 instance for hosting a flask web application?

• Is it to configure a security group for the instance? How is that done in Terraform?

• what else can Terraform be used to configure for hosting a web application?

• Does Terraform also perform deployment of web application to the infrastructure, besides creating the infrastructure?

I also wonder how? (links to documents are also appreciated.)

Thanks.

I have tried to start using phpstan pipeline on gitlab according to https://www.tremplin-numerique.org/en/how-to-create-a-gitlab-ci-pipeline-to-statically-analyze-php-projects .

The problem is that the pipeline does not work at all (Command 'sh' is not defined) and i don't know how to fix it.

Here is my .gitlab-ci.yml file:

stages:
  - check
phpstan:

stage: check

image: ghcr.io/phpstan/phpstan

script:

- analyse --no-progress --error-format gitlab > phpstan.json

And here is the pipeline output:

Running with gitlab-runner 15.2.0~beta.17.g34ae4a68 (34ae4a68)
  on blue-5.shared.runners-manager.gitlab.com/default -AzERasQ
Preparing the "docker+machine" executor
Using Docker executor with image ghcr.io/phpstan/phpstan ...
Pulling docker image ghcr.io/phpstan/phpstan ...
Using docker image sha256:797d91431d4ecb9c7c570d793db215dec2ae01f942b85e4e6e7cf4e07d07c8f2 for     ghcr.io/phpstan/phpstan with digest     ghcr.io/phpstan/phpstan@sha256:ac693ee977b314976226205631cd9071364f6c84b3b113f0c9404f9d4747a0b5     ...
Preparing environment
00:01
Running on runner--azerasq-project-37231833-concurrent-0 via runner-azerasq-shared-1658326011-    484bb33b...
Getting source from Git repository
00:03
$ eval "$CI_PRE_CLONE_SCRIPT"
Fetching changes with git depth set to 20...
Initialized empty Git repository in /builds/balikobot/BalikobotAdmin/.git/
Created fresh repository.
Checking out e4512b17 as feature/ci-pipeline...
Skipping Git submodules setup
Executing "step_script" stage of the job script
00:01
Using docker image sha256:797d91431d4ecb9c7c570d793db215dec2ae01f942b85e4e6e7cf4e07d07c8f2 for     ghcr.io/phpstan/phpstan with digest     ghcr.io/phpstan/phpstan@sha256:ac693ee977b314976226205631cd9071364f6c84b3b113f0c9404f9d4747a0b5     ...
Command "sh" is not defined.
Cleaning up project directory and file based variables

00:01

ERROR: Job failed: exit code 1

This looks like a case for a conditional resource.

First, look up the secrets with a https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/data-sources/key_vault_secrets block:

data "azurerm_key_vault_secrets" "example" {
  key_vault_id = data.azurerm_key_vault.keyvault.id
}

and then a condition on the lookup:

data "azure_rm_key_vault_secret" "win_admin_pass" {
  count        = contains(data.azurerm_key_vault_secrets.win_admin_pass.names, var.secret_name) ? 1 : 0
  name         = var.secret_name
  key_vault_id = data.azurerm_key_vault.keyvault.id
}

If the secret doesn't exist, the data will look up zero resources.

When I run kubectl get pods -w --namespace kubeapps I see all my pods are pending

NAME                                                         READY   STATUS    RESTARTS   AGE
kubeapps-internal-dashboard-584c686cc6-qwjnf                 0/1     Pending   0          19h
kubeapps-585bc584db-j994c                                    0/1     Pending   0          19h
kubeapps-internal-apprepository-controller-5d7685c4f-zsxnk   0/1     Pending   0          19h
kubeapps-internal-kubeops-7686579468-ddp8z                   0/1     Pending   0          19h
kubeapps-internal-kubeappsapis-6f65bccf89-mzbtn              0/1     Pending   0          19h
kubeapps-internal-dashboard-584c686cc6-wxnfd                 0/1     Pending   0          19h
kubeapps-postgresql-0                                        0/1     Pending   0          19h
kubeapps-585bc584db-rgvfq                                    0/1     Pending   0          19h
kubeapps-internal-kubeops-7686579468-tzjwf                   0/1     Pending   0          19h
kubeapps-internal-kubeappsapis-6f65bccf89-rbdrm              0/1     Pending   0          19h

When I check journalctl -u k3s, I see

E0604 11:37:07.861130    1301 configmap.go:200] Couldn't get configMap kube-system/chart-content-traefik: object "kube-system"/"chart-content>
E0604 11:37:07.861184    1301 nestedpendingoperations.go:335] Operation for "{volumeName:kubernetes.io/configmap/84367524-fc49-4db2-bf08-b217>
E0604 11:37:08.062023    1301 configmap.go:200] Couldn't get configMap kube-system/chart-content-traefik-crd: object "kube-system"/"chart-con>
E0604 11:37:08.062042    1301 configmap.go:200] Couldn't get configMap kube-system/chart-values-traefik: object "kube-system"/"chart-values-t>
E0604 11:37:08.062060    1301 configmap.go:200] Couldn't get configMap kube-system/chart-values-traefik-crd: object "kube-system"/"chart-valu>
E0604 11:37:08.062089    1301 nestedpendingoperations.go:335] Operation for "{volumeName:kubernetes.io/configmap/84367524-fc49-4db2-bf08-b217>
E0604 11:37:08.062099    1301 nestedpendingoperations.go:335] Operation for "{volumeName:kubernetes.io/configmap/46bd29b8-1c81-4585-a8fb-ca7e>
E0604 11:37:08.062105    1301 nestedpendingoperations.go:335] Operation for "{volumeName:kubernetes.io/configmap/46bd29b8-1c81-4585-a8fb-ca7e>
I0604 11:37:08.079010    1301 eviction_manager.go:338] "Eviction manager: attempting to reclaim" resourceName="ephemeral-storage"
I0604 11:37:08.079027    1301 container_gc.go:85] "Attempting to delete unused containers"
I0604 11:37:08.079496    1301 image_gc_manager.go:327] "Attempting to delete unused images"
I0604 11:37:08.082310    1301 eviction_manager.go:349] "Eviction manager: must evict pod(s) to reclaim" resourceName="ephemeral-storage"
I0604 11:37:08.082338    1301 eviction_manager.go:367] "Eviction manager: pods ranked for eviction" pods=[kube-system/coredns-d76bd69b-2svkn >
E0604 11:37:08.082353    1301 eviction_manager.go:560] "Eviction manager: cannot evict a critical pod" pod="kube-system/coredns-d76bd69b-2svk>
E0604 11:37:08.082359    1301 eviction_manager.go:560] "Eviction manager: cannot evict a critical pod" pod="kube-system/metrics-server-7cd5fc>
E0604 11:37:08.082363    1301 eviction_manager.go:560] "Eviction manager: cannot evict a critical pod" pod="kube-system/local-path-provisione>
I0604 11:37:08.082368    1301 eviction_manager.go:390] "Eviction manager: unable to evict any pods from the node"

I think this is a result of the eviction manager, because my system is low on disk space? Perhaps it's just looking at percent free, the below is the device from df -h

I'm also seeing this in the error log,

k3s[1301]: I0604 11:52:13.741674    1301 image_gc_manager.go:310] "Disk usage on image filesystem is over the high threshold, trying to free bytes down to the low threshold" usage=98 highThreshold=85 amountToFree=337223212236 lowThreshold=80
k3s[1301]: E0604 11:52:13.742880    1301 kubelet.go:1347] "Image garbage collection failed multiple times in a row" err="failed to garbage collect required amount of images. Wanted to free 337223212236 bytes, but freed 0 bytes"

Filesystem                 Size  Used Avail Use% Mounted on
/dev/mapper/x1c7--vg-root  1.8T  1.7T   50G  98% /

Where are these settings on k3s?

An easy way to override the settings from Azure DevOps is to install the Chrome extension " https://chrome.google.com/webstore/detail/locale-switcher/kngfjpghaokedippaapkfihdlmmlafcc "

A personal access token to push to the registry does not just require write_registry but ALSO read_registry or read_api (more general).

I have 2 web servers with MySql server onboard, let's call them b.myserver.com and c.myserver.com .

I'd like to create a server (db.myserver.com) with phpMyAdmin onboard to be able to access all the databases on b.myserver and c.myserver without the need to create new remote mysql users. I plan to add some new servers in the future so I'd like to reduce the setup to the bare minimum.

Every server is configured to accept connections on port 80,443 and SSH. MySql listen to localhost only on 3306. SSH access is restricted to allowed keys only

I made some research and I think I can use ssh tunnelling but it's unclear to me how to do exactly.

phpMyAdmin allow me to define multiple configurations (one per server) so I thought I can assign one local port and one ssh tunnel per server.

i.e:

localhost:10001 (on db.myserver.com) forward over ssh to b.myserver.com:3306 localhost:10002 (on db.myserver.com) forward over ssh to c.myserver.com:3306

and so on.

I can use autossh to re-establish connection if needed.

Can I consider this a good and safe approach or are there other alternatives available?

Thanks

It seems that you need to add a pull-secret in the same namespace (seems that you work with default)

Command:

kubectl create secret docker-registry  --docker-server= --docker-username= --docker-password= --docker-email=

Ref: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/

Then your manifest should look like

.....
    spec:
      imagePullSecrets:
        - name: 
      containers:
        - env:
......