Skip to content

Commit 55ff336

Browse files
authored
Bunch of changes (#715)
* [Closes #712] Page on bucket size wasabi * [Closes #681] Page on pods in specific status * [Closes #704] Wiz connector not set * [Closes #702] Wiz terraform provider config * [Closes #685] Clear recents on mac finder
1 parent 9411ecc commit 55ff336

7 files changed

Lines changed: 247 additions & 1 deletion
898 KB
Loading
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
title: List bucket size on Wasabi
3+
---
4+
5+
## Why
6+
7+
The UI is often not up to date around the bucket size, so it can cause you issues when working out their stupid 90 days storage cost.
8+
9+
## How
10+
11+
You will need to know your service URL for your bucket.
12+
13+
Read the page [Service URLs for Wasabi's Storage Regions](https://docs.wasabi.com/docs/what-are-the-service-urls-for-wasabi-s-different-storage-regions)
14+
15+
Examples below
16+
17+
=== "London"
18+
```shell
19+
aws s3 ls --summarize --human-readable --recursive --endpoint-url=https://s3.eu-west-1.wasabisys.com s3://<bucket name>
20+
```
21+
=== "Tokyo"
22+
```shell
23+
aws s3 ls --summarize --human-readable --recursive --endpoint-url=https://s3.ap-northeast-1.wasabisys.com s3://<bucket name>
24+
```
25+
26+
=== "Texas"
27+
```shell
28+
aws s3 ls --summarize --human-readable --recursive --endpoint-url=https://s3.us-central-1.wasabisys.com s3://<bucket name>
29+
```
Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
---
2+
title: Clear recents in Finder on Mac
3+
---
4+
5+
## Why
6+
7+
Perhaps you've been browsing files you do not want others to know exist, like your Will or something else.
8+
9+
## How
10+
11+
### Step 1: Finder UI
12+
13+
**Finder** > **Go** > **Recent Folders** > **Clear**
14+
15+
![Finder > Go > Recent Folders > Clear](../../assets/clear-recents-in-finder-on-mac.png)
16+
17+
### Step 2: Shell
18+
19+
Open Terminal and paste the below
20+
21+
```shell
22+
rm -rf $TMPDIR../C/com.apple.recentitems/
23+
killall Finder
24+
```
Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
title: Kubectl get pods in certain status
3+
---
4+
5+
## Why
6+
7+
Sometimes when working on a cluster you want to know how many pods have failed across the entire cluster or herpahs how
8+
many are pending.
9+
10+
## How
11+
12+
### Failed
13+
14+
```shell
15+
kubectl get pods --all-namespaces --field-selector status.phase=Failed
16+
```
17+
18+
### Pending
19+
20+
```shell
21+
kubectl get pods --all-namespaces --field-selector status.phase=Pending
22+
```
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
---
2+
title: Wiz Kubernetes Failed executing entrypoint CONNECTOR_ID is not set
3+
---
4+
5+
## What
6+
7+
When deploying the Kubernetes connector to a cluster using Wiz security, your deployment may fail with the below error
8+
9+
```json
10+
{"level":"fatal","time":"2026-01-19T14:10:14.047213534Z","msg":"Failed executing entrypoint","error":"CONNECTOR_ID is not set"}
11+
```
12+
13+
## How to resolve
14+
15+
Check that your wiz connector secret actually contains a value
16+
17+
```shell
18+
kubectl get secret/wiz-connector -o yaml
19+
```
20+
21+
If you see an output like the below, then your secret is not populated
22+
23+
```yaml
24+
apiVersion: v1
25+
data:
26+
connectorData: e30=
27+
kind: Secret
28+
metadata:
29+
creationTimestamp: "2026-01-19T11:21:22Z"
30+
labels:
31+
app.kubernetes.io/instance: wiz
32+
app.kubernetes.io/managed-by: Helm
33+
app.kubernetes.io/name: wiz-kubernetes-connector
34+
app.kubernetes.io/version: "3.0"
35+
helm.sh/chart: wiz-kubernetes-connector-4.0.3
36+
name: wiz-connector
37+
namespace: wiz
38+
resourceVersion: "1768821682186527019"
39+
uid: 46685ad8-7fd7-496b-ac98-e8a740156b55
40+
type: Opaque
41+
```
42+
43+
### Recreate the secret
44+
45+
Depending on how you're managing the resources, you may have to recreate the secret by pulling it from External Secrets again, or re-run your `kubectl` command to create the secret
Lines changed: 120 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,120 @@
1+
---
2+
title: Wiz list terraform provider versions
3+
---
4+
5+
## Why
6+
7+
As Wiz does not use the Hashicorp registry for its provider, not a public git repo we don't get a nice UI to see the versions.
8+
9+
All their docs do not include a version either.
10+
11+
When writing terraform you want to pin the provider version to ensure backwards compatibility etc. It's a best practice
12+
13+
## How
14+
15+
### Using `tfupdate` CLI
16+
17+
!!! note "Relies on the tfupdate command line tool"
18+
19+
Can be installed from [github.com/minamijoyo/tfupdate](https://github.com/minamijoyo/tfupdate)
20+
21+
#### 1. Set the registry URL
22+
23+
```shell
24+
export TFREGISTRY_BASE_URL="https://tf.app.wiz.io/"
25+
```
26+
27+
#### 2. Query the registry for releases
28+
29+
```shell
30+
tfupdate release list -s tfregistryProvider wizsec/wiz
31+
```
32+
33+
You will then get an output like the below
34+
35+
```text
36+
➜ tfupdate release list -s tfregistryProvider wizsec/wiz
37+
1.28.11229
38+
1.28.11336
39+
1.28.11764
40+
1.28.11875
41+
1.28.12451
42+
1.28.12559
43+
1.28.12840
44+
1.28.13179
45+
1.28.13755
46+
1.28.13893
47+
```
48+
49+
### Using CURL
50+
51+
Terraform registries make use of `/.well-known/terraform.json` endpoints to work out where to access providers and modules
52+
53+
```shell
54+
curl https://tf.app.wiz.io/.well-known/terraform.json | jq
55+
```
56+
57+
We then get an output like
58+
59+
```json
60+
{
61+
"modules.v1": "/v1/modules/",
62+
"providers.v1": "/v1/providers/"
63+
}
64+
```
65+
66+
Now we can make a request to the providers endpoint for the provider we want, in this case `wizsec/wiz`
67+
68+
```shell
69+
curl -s https://tf.app.wiz.io/v1/providers/wizsec/wiz/versions | jq
70+
```
71+
72+
We get an output similar to
73+
74+
```json
75+
{
76+
"versions": [
77+
{
78+
"namespace": "wizsec",
79+
"name": "wiz",
80+
"version": "1.10.2114",
81+
"platforms": [
82+
{
83+
"os": "darwin",
84+
"arch": "amd64"
85+
},
86+
{
87+
"os": "darwin",
88+
"arch": "arm64"
89+
},
90+
{
91+
"os": "linux",
92+
"arch": "amd64"
93+
},
94+
{
95+
"os": "linux",
96+
"arch": "arm64"
97+
},
98+
{
99+
"os": "windows",
100+
"arch": "amd64"
101+
}
102+
]
103+
},
104+
...
105+
]
106+
}
107+
```
108+
109+
## Specifying the version in out `providers.tf` file
110+
111+
```terraform
112+
terraform {
113+
required_providers {
114+
wiz = {
115+
source = "tf.app.wiz.io/wizsec/wiz"
116+
version = "1.28.13893"
117+
}
118+
}
119+
}
120+
```

mkdocs.yml

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -108,6 +108,7 @@ nav:
108108
- Uninstall Netplan: kb/linux-networking/uninstall-netplan.md
109109
- Mac:
110110
- Bose Headphones Crackle when connected to mac via bluetooth: kb/mac/bose-headphones-crackle.md
111+
- Clear recents in Finder on Mac: kb/mac/clear-recents-in-finder-on-mac.md
111112
- Command not found compdef: kb/mac/command-not-found-compdef.md
112113
- Connect to serial port on mac: kb/mac/connect-to-serial-port-on-mac.md
113114
- Markdown:
@@ -273,6 +274,7 @@ nav:
273274
- View logs on who enabled an API: cloud/gcp/view-logs-on-who-enabled-an-api.md
274275
- Wasabi:
275276
- Backup Synology NAS to Wasabi: cloud/wasabi/backup-synology-nas-to-wasabi.md
277+
- List bucket size on Wasabi: cloud/wasabi/list-bucket-size-wasabi.md
276278
- Cloud Secret manager cost Comparison: cloud/secret-manager-comparison.md
277279
- Kubernetes:
278280
- kubernetes/index.md
@@ -333,7 +335,8 @@ nav:
333335
- Force Delete pod: kubernetes/kb/force-delete-pod.md
334336
- Get Kubernetes nodes and their labels: kubernetes/kb/get-kubernetes-nodes-and-their-labels.md
335337
- Kubectl commands: kubernetes/kb/kubectl-commands.md
336-
- "Kubectl get pod and node it's on": kubernetes/kb/kubectl-get-pods-and-nodes.md
338+
- Kubectl get pod and node it's on: kubernetes/kb/kubectl-get-pods-and-nodes.md
339+
- Kubectl get pods in certain status: kubernetes/kb/kubectl-get-pods-in-certain-status.md
337340
- Kubectl get Service accounts and namespaces: kubernetes/kb/kubectl-get-service-accounts-namespaces.md
338341
- Set default namespace kubectl: kubernetes/kb/kubectl-set-namespace.md
339342
- Testing RBAC: kubernetes/kb/rbac-testing.md
@@ -365,6 +368,9 @@ nav:
365368
- Promptfoo using mitmproxy or mitmweb: security/promptfoo/promptfoo-using-mitmproxy-or-mitmweb.md
366369
- Rapid7:
367370
- Add Google Organization to Rapid7: security/rapid7/add-google-organization-to-rapid7.md
371+
- Wiz:
372+
- Wiz Kubernetes Failed executing entrypoint CONNECTOR_ID is not set: security/wiz/wiz-connector-no-connector-id.md
373+
- Wiz list terraform provider versions: security/wiz/wiz-list-terraform-provider-versions.md
368374
- Certifications:
369375
- Google Cloud Architect:
370376
- Google architect - Page 1: certifications/google-certs/gcp-architect/gcp-architect-1.md

0 commit comments

Comments
 (0)