Administration Guide¶
1. Kubernetes¶
- Kubernetes
- Certificate renewal
- How to restart a machine that is part of a Kubernetes cluster?
- Upgrading a Kubernetes cluster
- Troubleshooting problems arising after Kubernetes cluster upgrades
2. Backup and Disaster Recovery¶
3. Cassandra¶
- Cassandra
- Check the health of a Cassandra node
- How to inspect tables and data manually
- How to rolling-restart a Cassandra cluster
4. Elasticsearch¶
- Elasticsearch
- How to rolling-restart an Elasticsearch cluster
- How to manually look into what is stored in Elasticsearch
- Check the health of an Elasticsearch node
- Check cluster health
- List cluster nodes
- Troubleshooting
5. Etcd¶
- Etcd
- How to see cluster health
- How to inspect tables and data manually
- How to rolling-restart an Etcd cluster
- Backing up and restoring
- Troubleshooting
6. General - Linux¶
- General - Linux
- Which ports and network interface is my process running on?
- How can I see if my TLS certificates are configured the way I expect?
- How can I see if my TLS certificates are configured the way I expect (special case Kubernetes from a Kubernetes machine)
7. Minio¶
- Minio
- Should you be using Minio?
- Setting up interaction with Minio
- Minio maintenance
- Rotate root credentials
- Check the health of a MinIO node
8. Operational Procedures¶
- Operational procedures
- Reboot procedures
- Health checks
- Draining pods from a node for maintenance
- Understand release tags
9. Restund (TURN)¶
- Restund (TURN)
- Wire-Server Configuration
- How to see how many people are currently connected to the restund server
- How to restart restund (with downtime)
- Rebooting a Restund node
- How to restart restund without having downtime
- How to renew a certificate for restund
- How to check which restund/TURN servers will be used by clients
10. Coturn Client Certificate with Extended Key Usage (EKU)¶
- Coturn Client Certificate with Extended Key Usage (EKU)
- Overview
- Prerequisites
- Step 1: Create a Self-Signed CA
- Step 2: Create a Certificate Signing Request (CSR)
- Step 3: Sign the Certificate with Your CA
- Step 4: Verify Certificate Has Correct EKU
- Step 5: Prepare Certificate Files
- Step 6: Update Coturn Helm Values
- Step 7: Deploy Coturn with Updated Configuration
- Step 8: Verify Certificate is Deployed
- Step 9: Test Federation DTLS Connection
- Troubleshooting
- Certificate Renewal
11. Investigative Tasks¶
- Investigative tasks (e.g. searching for users as server admin)
- Manually searching for users in Cassandra
- Deleting a user which is not a team user
- Searching and deleting users with no team
- Manual search on Elasticsearch (via brig, recommended)
- How to manually search for a user on Elasticsearch directly (not recommended)
- How to manually delete a user from Elasticsearch only
- Mass-invite users to a team
- How to obtain logs from an Android client to investigate issues
- How to obtain logs from an iOS client to investigate issues
- How to retrieve metric values manually
- Reset session cookies
- Identify all users using SSO
- Create a team using the SCIM API
12. Manuals¶
- Test an ingress is working from inside the cluster
- Load an image into containerd in an offline/airgapped environment