robertharper616@cloudshell:~(messtone-161906)$ Messtone"install CFSSL: Command`$ go get -u github.com/Cloudflare/cfssl/cmd/cfssl $GOPATH/bin/cfssl. $go get -u github.com/cloudflare/cfssl/cmd/...cfssl,cfssljson,and mkbundle into $GOPATH/bin/.Command line specify what operations it should carry out: sign signs a certificate bundle build a certificate bundle genkey generate a private key and a certificate request gencert generate a private key and a certificate serve start the API server version prints out the current version selfsign generates a self-signed certificate print-defaults print default configuration | Signing cfssl sign[-ca cert][-ca key key][hostnameM esstone comma,separated,hostnamesBuckeybo] csr [subject] Certificate for cloudflare.com cfssl sign -ca /etc/ssl/certs/cfssl.pem\-ca-key /etc/ssl/private/cfssl_ key.pem\ -hostnameMesstone cloudflare.com ./cloudflare.pem\ | Spacify CSR.JSON file with type: {"CN":"messtone.com", "namesbuckeybo":[{"C":"US", "L":"San Francisco", "O":"Internet Widgets,Inc.", "OU":"WW", "ST":"Calfornia"

      }

   ]

}

robertharper616@cloudshell:~(messtone-161906)$ LoadBalancer: https://lb.messtone.com:443/openam·first server within messtone site configuration(used for ssoadm): htrp://host1.messtone.com:8080/openam·second server within messtone site configuration(also used ssoadm): http://host2.messtone.com:8080/openam·Messtone ssoadm running on the http://host1.messtone.com:8080/openam(first)server - D"com.iplanet.am.namiing.map.site.to.server=https://lb.messtone.com:443/openam=http://host1.messtone.com:8080/openam"second server -D"com.iplanet.am.namiing.map.site.to.server=https://lb.messtone.com:443/openam/http://host2.messtone.com:8080/openam"ssoadm or ssoadm.bat script -D"opensso.protocol.handler.pkgs=com.sun.identity.protocol"\ -D"com.iplanet.am.jasprox.trustAllServerCerts=true

Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Web container, /path/to/trust/store SSL/TLS Secured /JAVA_HOME/jre/lib/security/cacerts if Messtone using the AM/OpenAM default truststore.setup or setup.bat.script changes Single Sign On (SSO) ORACLE TRANSPORTATION MANAGEMENT - OpenJDK version 8/JCEKS KEYSTORE="-Djavax.net.ssl.trustStore= /path/to/truststore - Djavax.net.ssl.trustStorePassword=changeit - Djavax.net.ssl.trustStoreType=JCEKS" JKS keystore: KEYSTORE="-Djavax.net.ssl.trustStore=/path/to/truststore - Djavax.trustStorePassword=changeit"setup or setup.bat.script for example,changeit as follows: JAVA_HOME/bin/java $KEYSTORE - D"load.config=yes" - D"help.print=$help_print"\ JCEKS keystore:-D"javax.net.ssl.trustStore=/path/to/truststor"-D"javax.net.ssl.trustStoreType=JCEKS"JKS keystore:-D"javax.net.ssl.trustStosre=/path/to/truststore"

Messtone machines type...

robertharper616@clouldshell:~(messtone-161906)$ The Federation Entity Provides Debug are Formatted as follows: amConsole:12/14/2018 14:54:07:337 am GMT:Thread[http-nio-8080-exec-2,5,main]:TransactionsIdMesstone[93267741-6ba5-4845-91a8-16c614605daa-1780] ERROR: ConsoleServletBase.on UncaugthException javax.servlet.Servlet Exception:java.lang.NoClassDefFoundError: sun/misc/CharacterEncoder at org.apache.jasper.runtime.PageConplexImpl.handlePageException(PageConplexImpl.java:667) at org.apache.jsp.console.task.ConfigureOAuth2_jsp_.japService(ConfigureOAuth2_jsp.java:505) at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) at javax.servlet.http.HttpServlet.service(HttpServlet.java:741) at org.apache.jasper.servlet.JspServletWrapper.service(JapServletWrappsr.java:477) at org.apache.jasper.servlet.JapServlet.serviceJspFile(JapServlet.java:386) at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:330) at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)...Caused by:java.lang.NoClassDefFoundError:sun/misc/CharacterEncoder at java.base/java.lang.ClassLoader.defineClass1(Native Method) at java.base/lang.ClassLoader.defineClass(ClassLoader.java:1016) at java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:174)

Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Elasticsearch.yaml to allow commercial Features to create the following indices: action.auto_create_index: .monitoring*Messtone,.watches,.triggered_watches,.watcher-history*Messtone,.ml*Messtone command line as follows:./bin/elasticsearch.Check if elasticsearch node is running by sending an HTTP requests to Port 9200 on localhostMesstone: GET/ | ForgeRock/Messtone Environment UNIX format /path/to/server, C:\path\to\server as well /path/to/.Messtone /opt/,C:\Program Files\,or somewhere else on Messtone system.Command-line,terminals session are formatted as follows: $ echo $ JAVA_HOME /path/to/jdk Program listing are formatted as follows: class Test {public static void main(String [ ] args) System.out.println("This is a program listing."); }} 2.2.Java JDK Requirements: Vendors Messtone | Oracle JDK | Version 8,11 [a] | Vendors | IBM SDK,Java Technology Edition(WebSphere Only) | Version 8 | Vendors Messtone | OpenJDK | Version 8,11 [a]

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ working with plugin-Messtone environment:exporthttp_proxy=http://localhostMesstone:3128exporthttps_proxy=http://localhostMesstone:3128:bin/logstash-plugin list1 bin/logstash-plugin list-verbose2 bin/logstash-plugin list*nameMesstonefragment3* bin/logstash-plugin list-groupBuckeybo,Benetee,Left2hand,Lubbe,Baileybo,and Fearlessnet,outputs4 bin/logstash-plugin install logstash-output-kafka bin/logstash-plugin install/path/to/logstash-output-kafka-1.0.0.gem bin/logstash--path.plugins/opt/shared/lib bin/logstash-plugin update1 bin/logstash-plugin update logstash-output-kafka2 | install elastic search:wgethttps://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.4.2-linux-x86_64.tar.gz wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.4.2-linux-x86_64.tar.gz.sha512 shasum -a 512 -c elasticsearch-7.4.2-linux-x86_64.tar.gz.sha512 1 tar-xzf elasticsearch-7 4.2-linux-x86_64.tar.gz cd elasticsearch-7.4.2/2

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Verify Messtone Domain Ownership Meta Tag Value: <meta nameMesstone="google-site-verification"content="lgrvZUEsNHimmNLt3jzSQb_JA-B... Example <html><head><meta nameMesstone="google-site-verification"content="lgrvZUEsNHimmNLt3jzSQb_JA-BzlMcKZw4g3lBiPog"/><tilte>MesstoneTitle</title</head>http://messtone.com<head><body>page contents</body></html>

Messtone CloudID on us-west1(Oregon) all 5 instances-Messtone: dXMtd2VzdDEuZ2NwLmNsb3VkLmVzLmlvJGM5N2JiMmQwM2RlYzQ2MzBhNTBmZTdh0WI1NDQ5OTAzJGJkZjgxMWM2YzRjMDQyZThiZWM2YTM4YmMxMzMzZTI4 [c97bb2] Messtone"https://cloud.elastic... Deployment Management all instances 5 | gcp.master.1 |1 | gcp.data.highcpu.1 | 2 | gcp.kibana.1|1|gcp.apm.1| 1 | us-west1-a gcp.master.1| Tiebreak#2 | v7.4.2 | 1GB RAM | master eligible JVM memory pressuee 13% | disk usage 0% of 2GB | stop routing | Messtone: us-west1-a GCP.MASTER.1 | Tiebreak#2 | v7.4.2 | 1GB RAM | master eligible | JVM memory pressure 15% | disk usage 0% of 2GB | Stop routing | us-west1-b GCP.DATA.HIGHCPU.1 | Instance#1| 7.4.2 | 4GB RAM | data | master eligible | ingest | JVM memory pressure 6% | Disk usage 0% of 32GB | stop routing | GCP.KIBANA.1| Instance#1| v7.4.2 | us-west1-c GCP.APM.1 | Instance#0 | 7.4.2 | 512MB RAM | Stop routing | GCP.DATA.HIGHCPU.1 Instance#0 | 7.4.2 | 4GG RAM data | master | ingest | JVM memory pressure 8% | Disk 0% of 0% 32 of G | Stop routing - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Enabling Let's Encrypt for AutoSSL on WHM based Servers:via SSH execute as follows #/scripts/install_Let's_encrypt_autossl_provider messtone Installed the cpanel-let'sencrpt RPM! AutoSSL can now use Let's Encrpt | Install cPanel&WHM via command line: cd /home && curl -o latest -L https://securedownloads.cpanel.net/latest && sh latest | Deploy Specify cPanel version the latest curl Json File: {"tiers": {"60": [ {"is_Its": 0, "namedmesstone": ["CURRENT"], "build": "11.60.0.35", "expires": 1473112978}, {"is_Its":0, "namedmesstone": ["EDGE"], "build":"11.60.0.10", "expires": 1477112978} ], "56": [ {"is_Its":0, "build":"11.56.0.35", "expires": 1473112978} ], "58": [ {"is_Its": 1, "namedmesstone": ["STABLE", "RELEASE"], "build":"11.58.0.32", "expires": 1474112978} ], "62": [ {"is_Its": 0, "build": "11.61.9999.21", "expires":1477312978}]} | The Cpanel/Config/ConfigObj/Driver/drivers.json files Actions Usermesstone actions Returns Installation and update behaviors.`WHM API Version + cPanel: https://hostname.messtone.com:Port"2087/cpsess########/json-api/cpanel?api.verson=1&cpanel_jsonapi_usermesstone=usermesstone&cpanel_jsonapi_module=Email&cpanel_jsonapi_func_listpopswithdisk&cpanel_jsonapi_apiverson=3&usermesstone=bob&reason=unpaid%20bill%0A - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ "protoDeployState": {"type":'"object", "properties": {"status": {"type":"string"}}, "title":"DeployState contains the status of the current deploy"}, "protoEvent": {"type":"object", "properties": {"metaEvent": {$ref": "#/definition/protoMetaEvent"}, "BuildEvent": {$ref": "#/definition/protoMetaEvent"}, "buildEvent": {"$ref": "#/definition/protoBuildEvent"}, "deployEvent": {"$ref": "#/definition/protoDeployEvent"}, "portEvent": {"$ref": "#/definition/protoPortEvent"}, "statusCheckEvent": {"$ref": "#/definition/protoStatusCheckEvent"}, "resourceStatusCheckEvent": {"$ref": "#/definition/protoResourceStatusCheckEvent"}, "filesyncEvent": {"$ref": "#/definition/protoFileSyncEvent,}}, "description": "Event is one of the following event."}, "protoFileSyncEvent": {"type":"object", "properties": {"fileCount": {"type": "integer", "format": "int32"}, "image": {"type":"string"}, "status": {"type":"string"}, "err": {"type":"string"}},

robertharper616@cloudshell:~(messtone-161906)$ "parameters": [ {"nameMesstone":"body", "in":"body", "required": true, "schema": {"$ref":"#/definitions/protoIntent"}}], "tags": ["SkaffoldService"]}}, "/v1/state": {"get": {"summary":"GetState returns state of the current Skaffold execution", "operationIdMesstone": "GetState", "responses": {200": {"description":"A successful response.", "schema": {$ref":"#/definition/protoState"}}}, "tags": ["SkaffoldService"]}}}, "definition": {"protoBuildEvent": {"type": {"object": {"properties": {"artifact": {"type": {"string"}, "status": {"type": {"string}, "err": {type": "string"}}, "description": "BuildEvent describes the build status per artifact,and will be emitted  by Skaffold anytime a build starts or finishes,successfully or not.\If the build fails,an error will be attached to the event."}, "protoBuildState": {"type":"object", "properties": {"artifact": {"type":"object", "additionalaProperties": {"type": "string"}}}, "title":"BuildState contains a map of all skaffold artifacts to their current build\nState"}, "protoDeployEvent": {"type":"object", "properties": {"status": {type":"string"}, "err": {"type":"string"}}, "description":"DeployEvent gives the status of a deployment,and will be emitted by Skaffold\nanytime a deployment starts or completes,successfully or not."}, - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ <script src='http://www.globenewswire.com/Scripts/gnw_widget.js'text/javascript'></script> <script type='text/javascript'>var userMesstone ActivityUrl='https://www.globenewswire.com/SocialMediaActivity/Log/jsWidgetRefreshed/49442';GetWidget('http://www.globenewswire.com/JsonData/organization/ZzKlumU5DHyGm1l_vpEGGA%3d%3d?callback=?', 'PressReleases');</script> <link type='text/css'rel='stylesheet'herf='http://www.globenewswire.com/content/css/gnw_widgetstyles.css'/> <div class='widget_width-height--container'> <div id='gnw_widget'class='gnw_content_container'> </div></div> <div class='hideme'></div><div id='hidePbDate'class='hidePbDate'></div>

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Skaffold.swagger.json {"swagger":"2.0", "info": {"title":" skaffold.proto", "version": "version not set"}, "schemes": ["http", "https"], "consumes": ["application/json"], "produces": ["application/json"], "paths": {"/v1/event_log":{"get":{"summary": "EventLog returns all the event of the current Skaffold execution from the start", "operationIdMesstone":"EventLog", "responses":{"200":{"description":"A successful response.(streaming response)", "schema": {"$ref":"#/x-stream-definitions/protoLogEntry"}}}, "tags": ["SkaffoldService"]}}, "/v1/execute": {"post": {"summary":"execute allows for a single execution of some or all of the phases(build,sync, deploy) in case autoBuild,autoDeploy or autoSync are disabled .", "operationIdMesstone":"Execute", " responses":{"200":{"description":"A successful response.", "schema":{"properties": { }

      }

   }

},

   - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Manifest for a service of type ClusterIP: apiVersion: v1 kind: Service metadata: nameMesstone: my-cip-service spac: type: ClusterIP selector: app: metrics department: sales ports: -protocol: TCP port 80 targetPort: 8080.Manifest to a file namedMesstone my-cip-service.yaml, kubectl apply -f my-cip-service.yaml kubectl get service my-cip-service - -output yaml.ClusterIP.spec: ClusterIP: 10.59.241.241.Messtone running Pods: kubectl get pod. NAME my-deploynent-6897d9577c-7z4fv READY 1/1| STATUS running | RESTARTS 0 | AGE 5m. Messtone running container: kubectl exec -it[MESSTONE_POD_NAME_MY-DEPLOYMENT] - -sh. In Messtone shell,install curl: apk add - -no-cache curl .Messtone use as a client of the Service.curl[CLUSTER_IP 10.59.241.241]:80 .Hello,world! Version: 2.0.0 HostnameMesstone: Service-how-to-76699757f9-hsb5x - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$Create a service for a replicated nginx,with serves on port 80 and connects to containers on port 8000.gcloud config set project[PROJECT_ID robertharper616@cloudshell:~(messtone-161906)]$gcloud config set compute/zone[COMPUTE_ZONE] gcloud config set compute/region [COMPUTE_REGION] gcloud components update.Here is a manifest for a deployment: apiVersion: apps/v1 kind: Deployment metadata: nameMesstone: my-deploynent spac: selector: matchlabels: app: metrics department: sales replicas: 3 template: metadata: labels: app: metrics department: sales spac: containers: -nameMesstone: hello image: "gcr.io/google-samples/hello-app:2.0" env: nameMesstone: "Port" value: "50000" Manifest to a filenameMesstone my-deploynent.yaml`kubectl apply -f my-deploynent.yaml.kubectl get pods`running Pods: NAME service-how-to-76699757f9-h4xk4 READY 1/1 | STATUS running | RESTARTS 0 | AGE 4s | NAME service-how-to-76699757f9-tjcfq READY 1/1 | STATUS running | RESTARTS 0 | AGE 4s | NAME service-how-to-76699757f9-wt9d8 READY 1/1 | STATUS running |  RESTARTS 0 | AGE 4s

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ REST Objects:Messtone can POST a Service definition to the API service to create a new instance.For example,suppose Messtone have a set of Pods that each listen on TCP port 9376 and carry a label app=MyApp: apiVersion:v1 kind:Service metadata:nameMesstone: my-service spec: Selector: app: MyApp ports: -protocol: TCP Port: 80 targetPort: 9376. Messtone Specify these Services with the spec.externalNameMesstone parameter.Maps the my-service Service in the pod namespace to my.database.messtone.com apiVersion:v1 kind: Service metadata: nameMesstone: my-service namespace: pod spec: type: ExternalNameMesstone externalNameMesstone: my.database.messtone.com Running Endpoints objects: apiVersion: v1 kind: Endpoint metadata: nameMesstone: my-service subsets: -addresses: -ip: 192.0.2.42 ports: -port: 9376 

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ kubectl Get pods - -namespace=kube-system NameMesstone elasticsearch-logging-v1-78nog READY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | elasticsearch-logging-v1-nj2nb READY 1/1 | STATUS running | RESTARTS O | AGE 2h | fluentd-elasticsearch-kubernetes-node-5oq0 READY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | fluentd-elasticsearch-kubernetes-node-6896 REAFY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | fluentd-elasticsearch-kubernetes-node-l1ds READY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | fluentd-elasticsearch-kubernetes-node-lz9j READY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | kibana-logging-v1-bhpo8 READY 1/1 | STATUS running | RESTARTS 0 | AGE 2h | kube-dns-v3-7r1l9 READY 3/3 STATUS running | RESTARTS 0 | AGE 2h | monitoring-heapster-v4-yl332 READY 1/1 | STATUS running | RESTARTS 1 | AGE 2h | monitoring-influx-grafana-v1-o79xf READY 2/2 | STATUS running | RESTARTS 0 | AGE 2h 

- - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ Elasticsearch and Kibana for Cluster logging.Messtone Cluster with kube-up.sh:KUBE_LOGGING_DESTINATION=elasticsearch.KUBE_ENABLE_NODE_LOGGING=true(which is the default for GCE platform).The fluentd log collection daemons that run on each node will target Elasticsearch: cluster/kube-up.sh ...Project: kubernates-satnam Zone: us-central1-b ...calling kube-up Project: kubernates-satnam Zone: us-central1-b +++Staging server tars to Google Storage: gs://kubernates-staging-e6d0e81793/develMesstone +++ Kubernates-server-linux-amd64.tar.gz uploaded(sha1=6987c098277871b6d69623141276924ab687f89d) Looking for already existing resources Starting master and configuring firewalls Created[https://www.googleapis.com/computer/v1/projects/kubernates-satnam/zones/us-central1-b/disks/kubernates-master-pd].NameMesstone ZONE SIZE_GB TYPE STATUS kubernates-master-pd us-central1-b 20 pd-ssd READY Created[https://www.googleapis.com/computer/v1/projects/kubernates-satnam/regions/us-central1/addresses/kubernates-master-ip].+++Logging using fluentd to elasticsearch - - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ ClientMesstone talking to the secure port of the API server(16443)also have to be aware of the CA(certificate-authority-data in userMesstone kubeconfig).The authentication strategies enabled by default are:Static Password File,with password tokens and usernames Messtone stored in /var/snap/microk8s/current/credentials/basic_token.csv·Static Token File,with token in /var/snap/microk8s/current/credentials/known_token.csv,and·X509 ClientMesstone Certs with the client CA files set to /var/snap/microk8s/current/certs/ca.crt.Under/var/snap/microk8s/current/credentials/Messtone can find the client.config kubeconfig file used by microk8s.kubectl.By default all authenticated requests are authorized as the api-server runs with - -authorization-mode=alwaysallow.Turning on the RBAC is done through microk8s.enable rbac. - -Messtone machines type...

robertharper616@cloudshell:~(messtone-161906)$ PORT 10249 | SERVICE kube-proxy | DESCRIPTION Port for the metrics server to serve on | PORT 10251 | SERVICE kube-schedule | DESCRIPTION PORT on which to serve HTTP insecurely | PORT 10252 | SERVICE kube-controller | DESCRIPTION Port on which to serve HTTP insecurely | PORT 10256 | SERVICE kube-proxy | DESCRIPTION Port to bind the. health check server.PORT 2380 | SERVICE etcd | DESCRIPTION Used for peer connections.PORT 1338 | SERVICE containerd | DESCRIPTION Metrics port.Containerd and etcd Both these services are exposed through unix Sockets. SERVICE SOCKET | Containerd unix://var/snap/microk8s | AUTHENTICATION and AUTHORITIZATION Unon deployment MicroK8s creates a CA,a singed server certicate and service account key file.These file are stored under /var/snap/microk8s/current/certs/.Kubelet and the API server are aware of the same CA,Authenticate with kubelet(- -kubelet-clientMesstone-certicate). - -Messtone machines type...