Today we are going to visit with the sexist people and you know you must be counted. It is absolutely the most imperative thing you do this year other than vote, but you can do both. So we are going to talk to Richard Maderas, right, and he is the project manager for the Native Hawaiian Advancement. I'm getting right. Richard. There you are. Okay, let me get the title right. Richard, I'm going to give you the title. I am the program manager for the Council for Native Hawaiian Advancement overseeing the Native Hawaiian and Pacific Islander Complete Count Committee for those senses. Okay. Now, Native Hawaiian, let's identify that because I just got an email saying that there's a hearing on tomorrow and it's about protecting Native Hawaiians at the legislature. So what's the difference in Native Hawaiian and Hawaiians? So for Native Hawaiians, and the one that you're referring to, I believe, is the Senate Committee hearing tomorrow on the resolution for Hawaiian national status. Native Hawaiians, the two different designations are those that are 50% and over, which qualify to be beneficiaries of the Department of Hawaiian Homelands to receive those benefits. Other Native Hawaiians are anybody who has Hawaiian ancestry or has ancestral ties to the indigenous people of Hawaiians. So in what we're doing, we're trying to count all Native Hawaiians and Pacific Islanders because we see the similarities and the needs, especially when it comes towards education and healthcare. And the importance is this is a very quickly growing community, but it's also a community that doesn't traditionally respond to the U.S. census. And the data that is collected by the census is very important when it comes to getting programs and funding out to the communities and to the need specific to Native Hawaiians and Pacific Islanders. So by not responding, would that be the group that says they're not American? Is that the reason they don't respond? There are some that will not respond because of that. And to that argument, I would say, please respond anyway. The census does not count American citizens. It accounts the population within the United States and all of its territories. One of the ways that we can definitely help the situation for Native Hawaiians everywhere is to be counted so that the United States can see that that is a population that does exist. But when it comes to general, we want to make sure everybody's counted because there's a lot of funds that go to our communities that we may or may not be getting because of a lack of participation. Historically, Native Hawaiians and Pacific Islanders are being hard to count because we live in communities that aren't necessarily as engaged or in some way sometimes we live in communities like where I live in Manapuni, where I have a physical address but mail doesn't deliver there. So those addresses are often forgotten, but we want to make sure that just because you weren't on that list that you are still counted because there are other ways. What do you mean the mail doesn't deliver there? I thought they went everywhere. Yeah. My whole life is the problem. It's a problem I've always faced with where I grew up because I have a physical address, but we always had to have appeal box because the mail and I can see from my driveway where the mail ends its delivery. But in rural communities, it doesn't necessarily deliver to every physical address. So the census does update leave, which means they send somebody out and they drop out something at your front door so that you can reply to it. But you wouldn't necessarily get the same letters and postcards that they send to all the addresses in the United States. So now, okay, let's talk about the telephone and the internet. Now I do know there are places out there beyond you, not non-acculately, but further out where they don't have internet connection. So what about them? Not necessarily Hawaiians, but period. Yes. So in the rural communities that are farther out of way from the cities, which we see more on the neighbor islands than we do in Oahu, but it does exist in Oahu. The census will do something called update leave, which means they leave paperwork at your door for you to do. That will include the survey. So you can do the physical survey, put it in the mailbox and send it in that way. They can also call one of the census numbers to do the survey that way. But some of those communities, like where I live to, I may have my cell phone, but reception doesn't always work. So for those communities, mail is a great way to do it. The other thing is the census eventually, due to the COVID concerns, they weren't as early as they planned to, but they will be sending enumerators to homes to assist people with doing the physical forms. So, but now things are getting better, I think, with the COVID, for at least for Hawaii. Yes. So does that mean that they can send more people out? To that, we were in discussions with them yesterday, and they are ramping up that effort. So they are going to be starting that very soon, probably within the next couple of weeks. But safety is very important to them. And while we've seen a little bit of an uptake in cases, I think it's still relatively safe. And you don't have to necessarily be face to face. You can easily be six feet apart and talking about, to collect that information. Information is very simple. It's things that most people wouldn't know off the top of their head. So they wouldn't have to go search for information to give to them. Now, let's talk about Pacific Islanders, because there's so many different islands. And then they're all lumped in together. Tell us, for anyone that doesn't know, how many different Pacific Islanders do we have? How many different islands are they from? I don't mean the number of collectives, but how many different islands are they from? A lot. I couldn't tell you an exact number from the work that I've been doing. We've reached out to a lot of groups of people that I didn't even know existed, which is, you know, it's eye-opening and educational for me, particularly when we're seeing some of the Polynesians and Micronesians that I didn't realize were, you know, were their own entities. But that's why it's important to get these people counted so that we know who they are, where they are, and that way we can try to give the proper services. Because ultimately, I know you mentioned earlier voting, and voting is very important. But census is one of those things that I think is even more important. Because we need to know where our communities are, what the needs of these communities are. Voting and district lines for senators and representatives is based off of census data. Without census, voting really can't be done properly. And yes, and next year we have a redistricting. Yes, we do. So they're going to take all of this data that we collect now, and they're going to determine the new districts. And if districts don't participate properly and they don't get their right numbers out, they may gain or lose, you know, political power and authority. Now, you live in, is that a homestead where you live? I live right above a homestead. Traditionally, my family were farmers. So I still live in a rural area of Mamakuni. So, but that area is growing so much, my goodness, all the new housing and everything. And they still, and they don't deliver to the farms. Is that what you're saying? They deliver to a certain area. And then once you get so far up in the mountain, they kind of stop at that point. Yeah. Come on. And it happens. We see it a lot on the neighbor islands where the more rural areas they just delivery is poor or non-existent. And that's what you'll see. A lot of people have have peel boxes. Yeah. So when the census sends out their people before the actual farms go out and they verify all the addresses, they don't necessarily need mailing addresses, but when they do the first mail-outs, it only goes to physical addresses that receive mail. So anybody with a peel box doesn't get that initial, that initial mail. What happens? OK, so you send that one and then because they don't have a physical address, but you send it to what should be the physical address, right? Yes. And it comes back to you. Then do you send it to the post office? I mean, to the post office box. They do not. And that's one of the things. As in the census to try to to incorporate peel boxes as well. Thus far, we haven't gotten that from them. But that's why they then will send somebody physically to those areas with a little packet. It's in a little because I receive it's your census information, the data forms with a code for it. And they put it in a little plastic white and black and white U.S. census bag and they leave it on your doorstep because I have a neighbor and we live in Honolulu in this and he has a post office box. And I didn't know whether she doesn't use her street address. And I just wonder about that, because this is the heart of the city. Yeah. For that, they would send it to the street address and hopefully, you know, it was received by her. But if not, if you don't respond after so many times, they physically send somebody to you. So even if you do have a physical address that does receive mail after so many attempts, they send somebody physically there to either leave paperwork or to knock on the door to help. So they send it to every postal address, regardless of the name on the yes. OK. All right. Yes. So every street address gets a package in the entire country. Yes. Now, that's a big job. It's a huge job. And I think that's why they only do it once every 10 years. It takes 10 years to get, especially with new developers. Especially here in Hawaii. I mean, in the one I know where I live, it is crazy how many new ones you get. Yes. Yes, it is. And which it's crazy because the traffic just gets bigger and bigger. Traffic gets bigger and bigger. School sizes, classroom sizes get bigger, but the classroom themselves do the same size. And that's why we need accurate counts so that when we're doing community planning, we can project that we need this many classrooms for this many kids that will be eventually going to school. If our communities are growing, we want to make sure that that the infrastructure is growing with the population. At Campbell High School, honestly, that is remarkable how that's grown.  Well, I remember as a boy, you know, whenever we had to go shopping and we had to go to Waipahu or Pearl Ridge, because those were the nearest places to go. When you're driving through what's now Calculate, it was just and it seemed like it took forever to get wherever you were going. It does. My daughter lives in a few homes of Makakilo, and now you have all of Calculate. We moved to Makakilo. There was no fire station, and it only went up so far. And the lease rent was nine dollars. I wish I was still like that. That's a long time. But there was also no Walmart. There were no store, no company in my school. No, the closest thing was the plug point, the Navy. That's why I'm amazed, you know, I'm 38 years old. I've seen Calculate go from just being fields to being a city. So I can only imagine in the next 20 to 30 years how much Hawaii is going to change again. It has. It has changed so much. And the problem is that when you see it every day, you don't see the change until when we shut down and I could drive. I did drive one day and was absolutely loving the highway with no traffic and the air smelled so good. I said, oh, my God, this is all the way. I love it. Yeah, it's that's one of the blessings of COVID that traffic has been much better. It's I see families getting together better and spending more time together than they did before. There is a silver lining to this. Yes, and especially at your way, where the traffic was just and it was such it's such a beautiful without the traffic. It is the waves were gorgeous. We don't want the traffic. Yeah, we don't want the traffic for tourists, but we don't do. We really need all the we don't want them to see how amazing that sunset is. Oh, yes. And what he came without a whole lot of people. Oh, my goodness, it was so beautiful. And I talked to a couple of people, so they've never been to what he came before. Yeah, I personally, I haven't I haven't gone to what he had to for a meeting or anything until a couple of weeks ago. That was the first time I think of my life that I went to like he just to walk around. It was so I just drove down Carltown Avenue and it was surfing, but there are no rental cars, none of those fancy buses and nobody walking. Everybody was. Yeah, and it's all the local families. All local families in Hawaii. Yes, it was it was absolutely delightful. Now, to the census. Yes. OK, Papakaleo. And they were talking at one point really about how to do the census because they don't plan or not be an American. Is there any difference? I think there's a difference. And we've done we've been trying to educate a lot of people that. This this supersedes being Hawaiian and the supersedes being American. This is counting you as a human. And that's what's really important here because we want to make sure that our children and most generations are taking care of from a Hawaiian standpoint. Another thing that's a big benefit of the census is it helps us with ancestry and genealogy. Your census data, the information you give them is confidential. Some of the data is released 70 to 72 years after that census was taken. And that's how we trace back where our families were a long time ago. So for us, especially for our families, we really like to see where our families were and try to trace our family line. And the census is one of those ways to do that. We've tried to explain to Hawaiian groups that that's some of the benefits of it. The other benefits, the Native Hawaiian health centers, those are funded and put where they are based off of census data. Native Hawaiian school programs, immersion schools, our organization, the Council for Native Hawaiian Advancement, the Office for Hawaiian Affairs, Kamehameha Schools, they all use census data when they're determining where to do Hawaiian programming, where to build a school, how many children to allow to a program in a certain area. We're all using those projections to try to assist with that data. So I like to say that I have talking to people at Papakalea. I just wondered if if somehow and I'm sure they're not the only ones, I'm certain that that's not the only area that had that issue. So that time to disavow that knowledge notion that that just because they're Hawaiian, that they can, that they will not, yeah. Yes, just putting out the census and participating does not does not equate to being a U.S. citizen, it does not equate to you agreeing to that. It doesn't take away from you being Hawaiian at all. I think it actually adds to it because it allows for us to find out where Hawaiians are so that we know where we should be. For the Council for Native Hawaiian Advancement, we'd like to do a different program into the Hawaiian communities and we'd like to know where they are so that I, you know, we don't want to do like a language workshop where there's not going to be any Hawaiian people. So we want to see where those people are so that we are doing the right programming in the right areas. Well, what about the people that are part Hawaiian and part this and part that and what not? That's all you get to choose. Yes, in the ethnicity section, there are multiple things that you can choose. And we recommend that you choose everything that you are because one, we definitely want to see where native Hawaiians are. But we also would like to see what the mixtures are getting to be because then we can health statistics and make sure that we're addressing the proper issues that come up with certain ethnicities and certain groups. We're all aware that some diseases are generic. So we like to try to prepare for them. So OK, so you got all these different ethnic groups in one person. Now, can that person say, well, my mother's this, my father's that, but I'd really like to take the Hawaiian language. I'd really like to study the Hawaiian issues. Can you separate yourself and say, this is what I want to choose? I want to learn more about. Yeah. Yeah. So the census itself, you choose what you are.  But there are boxes for those different for different ethnicities. Additionally, if you are something that is not listed in one of those boxes, like if you're, say, Tongan, you can click Pacific Islander and then there's space underneath to write down specifically what you are. Oh, so because you've got so many different people from Melanesia, Micronesia, the Marshall Islands, Guam, Saipan. Yes. So they can if what they what they identify as is not on that list, they can write in what they identify as. So if there's you're from Guam and you're tomorrow. So is there a place for there actually is Chamorro listed in a box on the census? So native Hawaiian, I believe Chamorro is on the box. But I do know Tongan is not. So if you're Tongan and you identify as that, you would click Pacific Islander and write in Tongan. And so the Marshall Islands are separate from the Micronesian Islands. Yes. So you can identify exactly as what you are. You can even identify down to the island and the culture that you identify. Oh, now that's great, because there's so many islands out there. Yes. So if they identify as Trukees, they can they can identify as such. Yes, I did. A speech for Pacific Islanders. And it took forever because they would translate in four different languages. So that was my introduction to these Pacific Islanders. That that that part, the Micronesian Melon Micronesian part with all these different languages. Yeah, and their languages are all very different. So that now. The same thing applies in the Asian languages. And in Chinatown, for instance, there's seven at least seven different languages in our little Chinatown. Yes. I mean, Chinese has so many dialects, just like Filipino has a lot of different dialects. So oh, yeah, the Filipinos are in every neighborhood in Hawaii. So you can't pick out one neighborhood and say, well, that's where they are. Exactly. No, no. Now, let's go back to the native Hawaiian. So exactly what do you do as a native Hawaiian advancement? What is your mission? So the consulate native Hawaiian advancement is we try to uplift native Hawaiians in every way that we can. While I manage the census program, we also have many other programs that we do in response to covid with a lot of our native Hawaiian crafters not getting to sell their products at the Mary Monarch with a Prince Coheal Festival. We did an online and televised pop up my kicking for them to showcase their information and for people to purchase it. I did buy something. Yeah. Thank you. So if you actually lived in a hard to count census community, we would send you a census message with your order as well. Oh, now that's smart. So we do that. We do emergency funding programs right now. We have the Cahiel program specific to native Hawaiians to assist to have been in an emergency situation. We have the whole program right now. It's just for the for residents of the city and county of Honolulu to assist them with child care utilities during during the economic recovery during covid. We also have our membership. We have the Hawaiian Way Fund right now. We're trying to raise money to help you in the county palace because they're facing their own hardships during covid. Yes. So there's a lot of things that we do. It no two days are the same for us. Well, no, this is this has been a trying time for all of us. Yes, it definitely has. But the good parts about these trying times is that we have seen people get together in ways that they've never gotten together before. We've seen communities reestablished, people helping each other out, no longer being individualistic, being more communal. I have seen even in grocery shopping how everybody's so nice and they talk a lot nicer. Yes, and they actually talk to each other. And it's just I'm loving this. I hate to say that. I know there are a lot of people who feel housebound and closed up, but I'm really enjoying this way of life. I am, too. Like I said, I find people are just nicer in general. That sense of community has definitely come down. As much as I want things to go back to normal, I hate to see the good parts. Well, I don't think we'll ever be normal again.  We did did all kinds of things that never should have been done.  We, you know, of our resource. Yeah, horrible things to the planet. So you saw how in less than a month of us not doing things, our beaches and our shores started showing improvement. I live out here near a Hanama Bay and it's gorgeous. The fish are just beautiful. Yeah, fish have come back. Yes. Yes. So let's let's hope that when we do open up and we must that we figure out a new way of living, a new way of treating each other. Yes. Yeah, absolutely. Yeah, so. What was I getting ready to say? Do I have a message here? I do. I was thinking somebody was asking a question, but I didn't. We have an opportunity for people to ask questions when we did. So, OK, now tell us how we can reach you and give us an email for the organization. And anything else that we can meet you should we should we need to or anybody that's one thing? You can reach us. Easy Sway is our website. It's www.HawaiianCouncil.org. You can see all of our programs. You can send up for our email list over there. So as we do updates, we can definitely keep everybody informed. If you need to reach out to me, email is the easiest way. My email is Richard at HawaiianCouncil.org. My office line is<PHONE_NUMBER>. Would you repeat that again? Your office number? It is Eric code<PHONE_NUMBER>. Thank you so much, Richard. It has been a real pleasure visiting with you. And hopefully we'll get to do this again. Absolutely. Thank you so much for the opportunity.


All right, I also wanted another candidate. This is kind of out of left field a little bit, but I think really interesting. It's certainly gonna throw a lot of dynamism and I think some real discussion or real debate into the fray. And that's Vivek Ramaswamy. Vivek Ramaswamy. I don't know if you followed Vivek, if you haven't, you should. Vivek is a businessman, a former biotech executive. He is the guy that has led the charge against ESG. He founded an investment company that specifically is not ESG, does not invest in ESG companies and gotten a lot of traction and the investment fund is very large. Well, I think he's basically said he's running for the, in the Republican primary to be a presidential candidate. He is a, he is super dynamic, beautifully articulate. You're not gonna get any wishy washy BS from him. He is the antithesis of a politician, but this is the big difference with Trump. Super smart, off the charts smart, off the charts articulate knows exactly what he's saying and really engage.  I don't know, but this guy is interesting. Now, it turns out that I agree with a lot of what he says and then some things he says, I disagree violently. But I think he is so radical in many of what he says, even when the bad stuff, but also the good stuff, that he's gonna force a real debate. He's gonna force a real debate in America. I mean, one of his lines is America's lost site of their ideals that make it great. So he is explicitly referring to America's past as a great nation and the American principles that made it a great nation. He explicitly refers to the founding fathers and the constitution and declaration in terms of the documents that shaped American, shaped American culture. He is definitely so far as I've seen a free marketer and good on that. I'll get to a few, a couple of things. I mean, they're really only a couple of things that I disagree with him that I don't know of now. I have a theory that I disagree with him on other things as well, but it'll be interesting to see this. So here's some things that he stands for, right?  I mean, this is a Republican candidate for president saying affirmative action has to go. That's great. Abandoned climate, religion, that's amazing. This guy's obviously been influenced by Alex, by Alex Epstein, he's probably read Alex's book. Use military, okay, we'll get to that in a second. Let's see what else is good.  That's good. Fire most federal bureaucrats and have I think he wants to have an eight year term limits on all government bureaucrats. And he says this is just the beginning. He's got lots of other, but then he says things like, so that's the good stuff. And it's not just good, it's very good stuff, right? It's radical, it's dramatic, it's big, it's country changing in a positive way, not a negative way. And he says this in an articulate way and a passionate, super charismatic. I've seen him up on stage, not live, but on video. He is super charismatic. You want to look at this guy, you want to listen to this guy, you want to pay attention to what he's saying. And then, but this is the stuff I don't like, right? Use military force, the military, to secure the border. So obviously he's anti-immigration in some significant way. How much I don't know yet, we'll find out. But this one is ridiculous and decimate the drug cartels. One of the things he's really running on is, I think Trump has mentioned this, we should use the American military to crush the drug cartels. In other words, we should send the military into Mexico and we should wipe them all out. We should kill them all, we should have a thing and we should get really, really, really, really tough on drug dealers and drug smugglers and drugists. So sadly, he would continue, enhance, put on steroids the war on drugs, which I think is a massive mistake and very, very, very unfortunate. But, you know, this is his tagline on his website. Capitalist, capitalist, proud capitalist, that's pretty good. Capitalist and citizen on a mission to revive excellence in American life. That's pretty good. You know, so, while I would love, I would love to, you know, I'd love to be able to see more from him. I hope he makes that up on the stage in the debates and articulates these arguments and gives some energy and he'll be the only charismatic guy on the stage.  So I encourage you to follow Vivek Ramaswamy. Again, some of his views, I think his views on free speech are bad, his views, I think he wants to make political speech a civil right, which means force, use the government force to force the digital media, to force them to allow all political speech on their platform. In other words, to deny them free speech. I think on a number of issues, he's probably very bad. This idea of going to war with the drug cartels is a really, really bad idea. But on other things, he's super good. And if he can bring that energy and these ideas onto the Republican stage and force them to talk about it and force a dialogue about actual ideas and some of which are very good ideas, I could really change the dynamics of the election. So I'm rooting for Vivek. I'm rooting for him to be on stage. I'm rooting for him to have the opportunity to express these ideas to the national audience and to force the Republicans, if you will, to confront and deal with his ideas and confront and deal with all of these things. So that is my, that's Vivek. So those are my two, yeah, that's it. Let's see, what do we want to do now? Yeah, as Moislav says on the chat, Vivek was actually on Alex Epstein's power hour. And look, I'm not endorsing Vivek. I just want him on stage. I want him to bring that excitement to the stage. But I'm not endorsing him, but at least when it comes to energy, it seems clear that he's been influenced by Alex and on other issues. It's almost like he read maybe my state of the union address and has taken some ideas from there. I don't think he has. Maybe he's heard some of my talks on capitalism. I would not be surprised at all if he has heard my morality of capitalism talk or my inequality talk or any of my other talks. So I'd be surprised if he hadn't. I think a lot of people have listened to those talks, heard those talks on YouTube. Thank you for listening or watching the Iran Book Show. If you'd like to support the show, we make it as easy as possible for you to trade with me. You get value from listening, you get value from watching, show your appreciation. You can do that by going to iranbrookshow.com slash support by going to Patreon, subscribe stall locals and just making a appropriate contribution on any one of those channels. Also, if you'd like to see the Iran Book Show grow, please consider sharing our content and of course, subscribe, press that little bell button right down there on YouTube so that you get an announcement when we go live. And for those of you who are already subscribers and those of you who are already supporters of the show, thank you. I very much appreciate it.


BTS is one of the hottest boy bands at the moment and with fans across the globe aka their BTS army that includes many admirers. There's a lot that we know about this kpop band from their love of food to where they call home and much more, but they have done almost too good of a job keeping their love lives under wraps. With over 20 million followers on Instagram alone and numerous record breaking awards under their belt, the world is feeling the BTS fever. Jungkook, J-Hope, Jimin, RM, Jin, V, and Suga are all considered heartthrobs in their own right and you already know plenty are vying for a chance with them. A question that often comes up is do the BTS boys have girlfriends or are they dating anyone? Well keep watching and you'll find out. If we're being real none of the members have been in public relationship since BTS formed in 2013. So what is the deal? While being a celeb in South Korea is very different than being an A-Lister in America, kpop stars aren't supposed to date publicly but not to worry we've done some digging. And of course some of the older members including Suga and J-Hope have opened up about past girlfriends too. What's going on guys? It's Kara back at it with a new series we've titled Who Dated Who.  But for some reason I don't think the BTS boys will give us any issues with that. I'm gonna go through each member of the group and see what I can tell you about who they dated. I'm also probably gonna butcher a lot of the names so please bear with me. We recently did a dating list on the OG pop princess Britney Spears which I'll link at the end. As we do with our other series I need you guys to let me know who to do next in the comments down below. I'm thinking Taylor Swift because we know she dated a lot of studs or maybe like Bella Thorne. Do let me know you know where and I'll see you guys after the intro. Let's start with Jungkook. According to a bunch of online reports his ideal woman is someone who's at least 5'5 but smaller than him, a good wife, a good cook, smart, has nice legs, is kind and is good at singing. In terms of current girlfriends he's single right now but was rumored to be dating K-pop star Jang Ye from the group Lovelies, Jeong Chaeyeon from DIA. In 2015 there were rumors he dated Cube trainee Ko Soyeon. Fans said they found an Instagram account that proved it and their nicknames Cookie and Moki continued to flood the internet. It was also said that Jungkook was talking about her in this clip. Not to mention before his debut there were some other girlfriends including a classmate by the name of Park Sehwan. When this photo surfaced it was apparently of the two kissing. She also tweeted about her boyfriend that was too busy to spend time with her when this picture came out. Jungkook is also known for his huge crush on singer IU and has even been caught fanboying during her performances. Maybe one day it'll happen. Next up is Jimin who is currently single. He admits that in the past he was victim to one sided love when he crushed on a girl, he would blush and his heart would go crazy. Rumors have swirled around his status over the years though the biggest one being that he was dating fellow K-pop star Han Soonyoon from the group CARA. In fact she got pretty candid about being into the shortest BTS member. In an interview on the show Weekly Idol Han was asked if she had her eye on Jimin and responded. That's right when we were promoting Mamamia our promotion periods overlapped. He has caught my eye ever since. It was nice when our promotion periods overlapped by one week this time around too. But nothing seemed to happen with that. During an interview on Idol's True Colors radio Jimin confessed that he likes someone who is cute and has odd charms, meaning someone who is a bit silly. RM formerly known as Rap Monster is single and seems to be caught up in dating rumors less than the other BTS dudes. He is one member that did admit having a girlfriend and in an episode of problematic men he said his high school girlfriend was popular with boys and would often make him doubt himself. They broke up eventually over this. And there was a more recent rumor. In 2017 it was thought that RM had a secret girlfriend. During an interview with Billboard explaining the outro of BTS Love Yourself album RM said, I thought it was the right outro for this album because it really is a range of emotions. I'm saying I'm at this person I really love. This person is a love of my life right now. I'm saying that I was confused and I was looking for love and this world is complex. There were different theories about what RM meant about this but the most popular was that he was hiding a secret girlfriend from fans and this was indeed about his secret lady. I guess we'll never know. Like most of the members of BTS Jin has also faced him dating rumors. The biggest one surrounding him has got to be with comedian Lee Kook Joo in 2015 especially after Jin thanked her in the first 3 BTS album notes. Of course this put the army on high alert. 1, 2, 3, 1, 2, 3, again. People started talking when another comedian publicly joked that Lee was dating a handsome idol trainee. And even more so when it was discovered Lee and Jin were close. On top of this Jin previously revealed that his ideal girlfriend would be on the chubby side so then everyone really believed it. However both Jin and Lee have insisted they are just friends. During an interview Lee explained, So there's a person who I have been close to for over 4 years and I have even cheered him on at Music Core when he debuted, BTS Jin. We are very close. He thanked me in thanks to section of his first 3 albums and fans put two and two together. Another note Jin said his ideal type is someone with a puppy-like face and personality whatever that means. Oh and he has a crush on Anne Hathaway which is pretty random. Next up we got Suga who stated he's just too busy to date. In middle school he submitted a letter about love to a local radio host saying he fell in love with a fellow classmate. Although they were friends he wasn't able to tell her how he felt at first but once he finally did they began dating. Unfortunately things were very awkward between the two. He admitted they didn't date long because of their problems and broke off their relationship. A rumor came of that Suga was dating fellow K-pop star Su-ran after the pair worked together on the song Wine but that was put to rest before it even really began. Not to mention Suga is also known for supporting LGBT rights. In a 2014 interview he said when asked what he first noticed as a girl, I focus on personality and atmosphere. I don't have an ideal type and it's not limited to a girl. Now on to V. His love life is actually the only one that BTS's management company has addressed publicly. Allegedly V was dating a BTS fan called Hi and this was proven by V's regular use of the phrase Hi Nuna on Instagram. When the boys management spoke about this to fans they claimed that V and Hi were friends in irregular contact but weren't dating. The army can't be fooled that easily though. There has been a lot more suggesting the two were an item. Hi was accused of traveling with V whenever he was scheduled overseas and dated in secret by exchanging notes on the plane. She also gifted V a ring which he took photos wearing more than once. Aside from this V admitted that before his BTS days he had multiple girlfriends but none were serious. He said, I have never been in a serious relationship, actually I couldn't refuse a confession. I think that's the reason why I've never been in a relationship for more than 20 days. V also says his type is someone who's kind to her parents and can help him manage his money, as well as appears cold at first but has a warm heart. Finally we have J-Hope. It's said he was in a relationship before BTS and that he's split with his girlfriend after she moved on with someone else. But there were really not that many dating rumors about him. On an episode of rookie king he performed dynamic duo's solo because it reminded him of his past girlfriend. He reminisced about how the song played after she left him for another man. J-Hope's dream girl as someone who loves to read takes care of others and is good at cooking. Not to mention she has to support him and only think about him. So after looking at the dating histories of the BTS boys it's clear that none of them have come out with a relationship publicly since they got together. This leaves a lot to the imagination especially for their army members wishing for a date. It seems less because they're busier uninterested but more so to protect their careers. Like I said it's frowned upon for K-pop stars to date publicly especially for the ones with young fans. Korean media never asks K-pop stars about their dating life cause chances are they'll say it doesn't exist. However American interviewers are often unaware of the cultural difference and like to ask BTS about their lovers. Just like when the boys went on Ellen. They either find creative ways to answer or just avoid it all together. Anyways guys that about wraps it up for our list on who the boys from BTS have dated over the years. Although they're good at covering their tracks the army seems to be really skilled at finding things out. From rumors of some of them dating fans to other K-pop stars and everyone in between rumors seem to be all we got to work with right now. I wonder how long it'll be until one of them actually gets into a relationship publicly. Now of course I want to hear from you guys in those comments down below. Did you know about all these BTS dating stories or were there some that surprised you? I'm no expert so be sure to tell me if I missed anything too. If you like these who dated who videos let me know whose list you'd like to see next. Make sure you're subscribed and follow me on Instagram if you want to chat more. I'll see you next time with some new videos. Bye!


Welcome everyone. Welcome to today's session about virtual machines and service mesh, service mesh in enterprise. We will provide you much more than five things you need to know, but we hope you can pick up five things that are important for your environment and your implementation of service mesh and your application and take them and implement in your architecture. My name is Peter McAllister. I work for Citrate. If you don't know, Citrate is a leader in a service mesh space. We provide a platform to run your service mesh in multi-cluster in the press environment. In this session, we will cover first how VM joining service mesh, what concepts we use, what architectures we see in enterprise environments and how we address them. And at the end, we also want to go through the demo to see how VM is onboarded and how application VM works after it's onboarded. So, let's spend a little bit of time just discussing basic concepts before actual experience. So, everyone starts with the question, why? Why would we add VM to service mesh? And hopefully, if you're in this session, you already understand benefits of service mesh. I will touch on them a little bit later, but in general, mostly people who are asking these questions already know why they need service mesh. So, why do you need VM in the service mesh? It's the next question. And answer to it is mostly because you may have some traditional application in monolithic form factor and you want to put it into microservices, but it's work that cannot be done in one day. It requires multiple months or maybe even years to migrate all applications. So, and microservices idea is to start small and extend. So, you start with few services running in Kubernetes ports and the rest of your applications served by VM. Or you may have some services that run in Kubernetes space and the same time in VM. So, for load balancing and fillover and all other reasons, you may have two different form factors running the same application. For service mesh advantage, of course, you can just run with two instances independently and use load balancers, but question comes, what if I want to benefit from service mesh concepts? And first of all, of course, security. So, encryption of the traffic, you don't need any extra VPN solutions to tunnel your traffic between ports and VMs. You also can identify requests if they're coming from a valid source and respond to them only if they're validated. You can also get different rules around your traffic patterns. That is important. And finally, for your troubleshooting and analyze analysis of your performance, you also need to have one single picture of application, doesn't matter if it runs in a microservices or a VM app form factor. How we look at it in terms of technologies? So, we're trying to look at VM as it's another port, meaning you have a VM that runs application and it runs proxy. And all traffic comes to proxy and application and proxy only communicates using load balancers. So, application in theory shouldn't be exposed through the external world. It's a security requirement and it's a newspaper, actually written by one of my Twitter colleagues together with other members of our community that covers these concepts of securing application behind proxy. And if you think of port, you never reach application directly. You always go to proxy if application is on boarded to service mesh. The same time, even if we treat it as a port, we cannot completely treat it as a port because technically, on next level, you cannot run VM on the side of Kubernetes. You run it on a separate piece of infrastructure. So, in play comes all things you wouldn't worry about in one Kubernetes cluster, such things as a network and fire walling and routing. Additional to it, you think about application running in the same namespace. So, you cannot say, oh, my VM is completely independent. I can have it to be a member of multiple namespaces. Namespaces, it's very interesting concept on Kubernetes and it limits and specifies rules around your workload. If you're getting conflict between these workload specifications from different namespaces, it causes bigger problems that you won't avoid at all possible costs. Additionally, in terms of detecting where application traffic is going, what application traffic belongs to, it also needs to have namespace attribute or namespace label. Moving along, so what we're seeing in real life, it's multiple different combinations and architectures. So, okay, your VM, we discussed it already, runs in different platform, right? So, it's not part of your Kubernetes cluster. But what if it's behind firewall? What if it's behind load balancer? And you're addressing VM using IP address, but what if it's behind AWS?  So, now you have FQDM different than FQDM of your application running on VM. And question is how we're going to authenticate it because certificate of VM doesn't match FQDM of AWS. So, what if you want to run multiple applications on VM? How proxy will find out traffic belongs to application number one or number two? How we collect metrics around this data? How we provide security around these applications that we want to keep separately? So, all these different scenarios and they come in very, very different shapes. There's no single answer how would you add VM to your service measure depends how your service measures build, how your VMs are hosted, what is the connection between them. But whatever scenario we look back to my previous comment, VM has to belong to namespace and Kubernetes. It cannot be shared between different namespaces. So, question comes, okay, what I need to do to onboard VM? So, you have to create free objects. Object number one is workload entry. And if you're not familiar, workload entry provides you description of VM. So, IP address of VM, label of VM, and all other stuff. Workload entry is the object that we actually use to bootstrap VM. So, data from this object together with certificates, together with a bigger mesh config gets transferred to VM. VM gets bootstrapped and it connects back to Istio ID and gets authorized there. So, then certificate exchange happens and VM becomes part of your service measure. You need two more objects here. One is sidecar. So, one in the middle. And sidecar basically defines how your application and your sidecar communicate. So, what ports are they listening to? What ports they sending traffic to? How they talk to each other on what all back addresses, what namespaces can call this instance with workload, what namespaces with workload can reach out. So, all these different things are specified inside car. And last thing you need to create, you need to create service entry. And service entry tells Kubernetes ports where they can find your VM or workload endpoint. So, it basically has pointer, it has service name and it has pointer to your workload. Sidecar and service entry can be replaced, changed and modified at any moment and always changes immediately applied or almost instantly applied to your Kubernetes infrastructure. With workload entry a little bit different. As I mentioned at the beginning, all data, it's part of a dataset that getting transferred to VM for bootstrapping. So, if you change your workload entry, the most common case you're adding additional labels or you're changing IP address of your VM, you need to take this file and put it on VM and rebootstrap it. So, workload entry changes are really closely comparing to other two. So, last thing before demo I want to cover, I want to cover how VM and port communicate to each other. And we totally relate here on mesh network configuration. Mesh network configuration specifies networks for your ports and your VMs and you can have gateway attached to these ports and VMs or you may have no gateway attached to it. And you can see basically all for combinations here. So, if there's no gateway attached to VM or Kubernetes port network communication going direct. So, your workload calls Istio proxy, Istio proxy calls destination Istio proxy and reaches destination workload. If you have gateway defined for VM, what happens here? Kubernetes, Kubernetes workload reach out to a gateway and then gateway reach out to VM. And opposite side, if gateway is defined for Kubernetes cluster, VM reaches out gateway and then gateway routes traffic to destination Kubernetes ports. And of course, if we have gateway defined on both ends, we're going to throw two gateways. It's important to understand just for your traffic pattern, traffic troubleshooting. I know in some use cases, are really, really looking at decreasing latency. So, having extra hopes differently may be concerned for performance. So, I just wanted to mention it. So, you have better idea. You understand how it works in a big application. So, let's move to the demo. So, first, just quick coverage what we will do in a demo and how it's set up. So, if you worked with Istio before, you know, one of the applications that heavily used is Bookinfo. So, Bookinfo application is already set up and I already have VMs that runs ratings and details on the same VM. We will look at the end how it works for the pre-established VM, but most important thing, we want to show you how to onboard new VM. So, we already pre-created service entry inside car in Kubernetes. So, we will not really change or touch them. So, what we will do here, we will create workload entry for new VMs that also I already pre-provisioned, meaning it's instance created on GCP. In my case, it can be AWS, it can be anything. And I have IP addresses of this VM and also inside of VM Docker is installed. Today, we can run Istio proxy on VM as a Docker container and as binary. For this specific demo, we use container, but really it's up to your decision as a customer what you prefer container or binary. During demo, we will create workload entry. As I mentioned, we use tctl, ttrade, service bridge utility to bootstrap VM. We will use SSH direct connection to bootstrap it, but you have also option to do offloading. So, export your configuration and import it on your VM, transfer it to your VM and upload there. We will show how proxies installed and configured and run. We will confirm that rating application response, rating application response to your request. And also confirm connection back from a VM to product page or show VM in a txb, ttrade, service bridge UI interface. And have a quick peek on existing VMs that runs already two different services, rating some details. And let's start demo. So, here you have a usb-tsb interface. So, right now we have a booking for application with all services running. Here is ratings that runs as a Kubernetes service and it's v1. So, what we are going to do, we're going to add another service that is going to be v2. But first, let's look what we have already in this cluster. So, we have workload entry and we have two sidecars. One is the full sidecar and one created for VMs. So, also I pre-created workload entry. You can see multiple labels here and also IP address that we're confirming on our right window, IP address of VM, external address and also internal. So, we need internal address so VM uses it because it's not aware of its internet address. And also we specify external address twice because we're going to use it for bootstrapping too. And now we're running commands to, sorry, let's apply this workload entry. So, it's successfully applied. Next thing we will do is to confirm it. It's applied, yeah. So, one second since it's created. And other records, as I said, we have already, it's for VMs that are already running and running details and rating similar, that's called details. These two services running on it. So, connecting to VM, you can see that if we run Docker command, there is no containers currently running. Switch back to Kubernetes cluster and basically run command to bootstrap VM. So, it takes a workload entry and it transfers all files to VM and it starts production. And you can see now we have proxy running here for five seconds. And that's successful. You can see in a log files, it's successful successfully connected back to Kubernetes cluster and running already in a ready mode. Let's start ratings. Rating started. Okay. So, we have now proxy in ratings containers running on VM. And if we look, there's a number of requests coming from my traffic generator. Let's confirm that it's not pre-recorded. Okay. So, there's new requests coming from our traffic generator. We get 200 successful response. If you look at logs for ratings, we also can see ratings container receives multiple, multiple requests and response to them. So, because right now TLS is not enabled, I should be able to query proxy directly from my machine instead of Kubernetes spot. Yeah. And you can see I'm getting successful response here. Okay. So, now let's try to call back. So, what we will do, we will just call from a VM back to product page and product page is a Kubernetes container, sorry, Kubernetes spot, and we got successful response here. So, last thing we want to show is different VM that already runs two services, details and reviews, I believe. So, it's called ratings, but I think that's details and reviews we will see in a second. So, we connected to this VM and let's see. Yeah. So, I have, it's another version of ratings actually I'm running here. So, I have reached your proxy in two application containers listening on different ports. And now when I look here, I can see I have our VM added to my map and I have version two, version two is VM that I added and that's successfully shown with diagram. So, we can see the traffic is growing there and getting responses and we can get all additional metrics. That's all I wanted to share today. Thank you very much for your attention. So, I would like to think service mesh project for platform, creating platform for us to make difference in this space, service mesh cone differently for accepting with proposal and letting us to meet you, you for your attention and hopefully you will be able to bring something back home and discuss. And of course, our customers, the trade customers for the great feedback that allowed us to make this product with functionality better understand different use cases, different scenarios, a life scenario that hopefully a lot of you can apply. Chita Red team for tremendous efforts are getting all of it implemented and available for our customers. And finally, I just want to say thank you to whole big Chita Red team for focus and concentration. Hopefully you've got five things that you need to find out in your environment before implementing VMs and we will be more than happy to talk to you of different use cases you have as enterprise, maybe something that we didn't cover so far and need multiple customers or you personally would benefit from. Thank you.


You're watching Bianca Renee today and sub just kidding. I know everybody hates that saying but this is a new look For the new year or for at least today now if you watch my last video I just started a no heat challenge where I'm challenging all of you not to put heat in your hair No more straighteners and one way to get past touching that straightener ever again is by Wearing a wig. This is always an option It's a great protective styling to protect your natural hair and still get a different look if you really want it If I straighten my hair one it would not look this nice and perfect It would be all frizzy and a hot mess and I'd be adding so much damage to my hair But now if I want long straight hair short hair or even curly hair that I just don't even want to do you can throw on Away and this wig in particular is from my first wig comm my first wig comm has a bunch of different types of wigs But since I already have a long straight one and a long curly one I want to switch it up for the new year and get a short Bob Now this one is their virgin Malaysian hair short Bob And this is a lace wig So the cool thing about a lace wig that I was able to choose this little Side part right here because all this part right here is lace and when all that part is lace and not tracks You actually could change where you want your part so I could flip to the other side I can have a middle part whatever I want so that is the cool thing about having a full lace wig This is a natural hair color. This is 10 inches See if you guys a little walk through 10 inches of length It's a yaki texture yaki texture is a little bit more coarse than like silky straight But this would probably be how my hair would be if I did straighten it and it still feels really really soft smooth And shiny the lace color I got was light brown my cap size is size 2 But the thing about this wig at first I thought it was a little bit too big But then I noticed these straps in the back where you could change it and now it's tight enough So it's just perfect. So it is cool that if you do order a little bit too big You can still adjust the straps in the back. No big deal now inside the box It came in this cute little pink bag that says my first wig which is quality wigs for beginners My first wig is a great website where if you are brand new to the wig game like me This is kind of a good place to get your starter wig a good Quality wig and they really show you how to get through it now Honestly, my first wig is my favorite wig website their website is really clean really organized and they have models wearing the actual wigs They don't have a lot of inspiration photos. They don't have different celebrities They just have what the wig looks like so when you order, you know that if it looks like that in the website It's gonna look like that when it arrives and I just put this on straight from the back I didn't straighten it again. I didn't style it I mean I put this part and put on this side But that's all I did and I probably could make it even better if I did run a straightener through it or try to curl up The ends or something, but I wanted to show you how it was straight out the bag When you first take the wig out of the bag, you'll see that it comes in this little Netted type of mesh holder to keep it all intact So you're gonna take it out and then you're also gonna notice that it has all the lace still attached to the front You also notice that it has three clips so you can really strap it on to your head so it doesn't move around You're then gonna remove the lace using a pair of scissors ever so carefully on the front and the back of the wig And voila your wig is ready to be worn It also came with this other little bag that says my first wig It has some bobby pins and it had this little instruction bag that shows you exactly How to put on the wig and style it and it's really really good For us first timers that might not know what to do. So besides this little pamphlet that they have Inside the box. They also have a bunch of tutorials right on their website So I think that is also really great because sometimes you need a visual tutorial to see what to do They also gave you an elastic band to adjust the size A rat tail comb so you can get your part right and comb your hair Two clips to clip your hair back when you're trying to style it Since I ordered mine around Christmas. I did get a little Christmas coin purse, which is really cute And last but not least is a wig cap very important And what I was most excited about was this collapsible wig stand I was just about to order some of these on amazon and ebay, but now they gave us one So I have a place to rest my wig Overall, I'm very pleased with the quality of this wig how it looks It was really easy to put on it has three clips so I could just snap it into place It is very secure and I don't know. I think it's a lot of fun I must say I'm really liking this short hair. It's giving me like cleopatra meets like sophisticated Boss lady can't tell me nothing stunting on them vibes This is giving me flashback to when I actually cut my hair and it was this short and I do miss it sometimes So it's nice to be able to go back and forth without the dramatics if you know cutting all my hair off If you are someone that has never bought a wig before I definitely recommend buying your very first wig from myfirstwig.com Since I already have a long straight wig and a long curly wig I want to try something new by getting this short bob look But if you want something longer or curly, they got it all definitely go to their website myfirstwig.com And if you are thinking about purchasing your very first wig make sure you use my discount code So it'll save you some money Now before you go make sure you follow me on all social media at Ms. Bianca Renee on twitter Pinterest instagram snapchat. I got it all Let's become besties and hit that subscribe button and the little bell next to it So you are notified as soon as I post a new video, which is every sunday. I hope to see you guys next week Thanks for watching Bianca Renee today


weekly community building call, let's call it that. It really came about because Tito and I were planning to do some Hyssop training in Uganda earlier this year, and then both of us were unable to travel. I mean, this might be a better format anyway, to have a kind of weekly series of meetings. So the idea being that we can touch base regularly together once a week, people might not make it every week. It's really important that you grab the link that Tito has given, plug your name in on the attendance section of the notes. The reason being is when we look back at the end of the year and we see how many people have been attending meetings, we'll help us decide whether it was a good idea and whether we should go forward with it or not. So please grab the link down there. Tito has put it in the chat and put your name on the attendance. I see nobody has done so yet. See who's going to be first. So we took a little bit more. We'll leave ourselves 10 minutes at the end to talk about some topics of the kind of things we might be talking about in these meetings. But for now, OK, the link that maybe people who are joining late, maybe don't get the link. Let me share it. So one of the exciting things about today is that many of you know me, I think, but I've not yet met Tito. So today you're going to meet Tito. Tito is basically taken over the role of shepherding this server admin community. For me, I will be Tito's sidekick from now on. He'll be hosting the meetings. I like to think of it as Tito will be the new Joe Rogan of server admin with a weekly call of interesting items. Besides Tito, some of you know we've got Danny from Solid Lines working with us part-time as well. But Tito is glad you're going to be leading the group. What he's going to be talking about today will be his conversion of all my horrible bash scripts. They're familiar with my horrible bash scripts, which people have used for doing quick setup and maintenance of their DHS2 installations. It's good to see Stephen on the call. Stephen actually contributed quite a bit to those early scripts. Tito's converted all those interansible playbooks, which is something we've been meaning to do for a long time. He's going to introduce a little bit of that today. But I think we'll have lots of opportunity in the weeks ahead to dig into some of those. Then we want to leave ourselves at least 10 minutes at the end that we can have a little bit of a round table about different kind of topics that we might discuss in future meetings. So guys, that's it from me. Tito, can I hand over to you now and forever? You can introduce yourself a little bit and maybe jump into what you're going to show us today about the ensemble tooling. Thank you. Welcome everybody who's made the call. And thanks for filling in the attendance and spread the word. And let's keep rolling. OK, Tito, that's it from me. Thank you. Thank you for the introduction, Bob, to the team. So my name is Tito. I'm from Kurgat and I'm based in Nairobi, Kenya. I'm taking over from Bob on Matters System Administration. But yes, I think he's going to be available maybe for the guidance. But most of the duties and responsibilities I'll be taking over on the system admin community. So yeah, well, I have close to one year right now in the HS2 University of Oslo. And when I joined, yes, we had a way that people used to do installation of an automated way where people would use to install the HS2 in their environments. Those are the Bob's Bashcripts, which kind of make things easier when you do deploy the HS2 and its components into a server. Well, one of the main reasons why or the reason why I got in is to at least support the scripts and also figure out a better way of deploying the HS2 not with Bashcripts or use Ansible for that matter. And I prepared a few slides that I'm going to at least explain the rationale why we are hoping to get to Bashcripts, get to Ansible scripts and do away with the Bashcripts. But I'm not entirely replacing Bashcripts. There are some other tasks that you cannot or Ansible is not going to handle best. Like even backups, backups would need a script that might or run from the background. And again, you cannot use Ansible to do backup because at the end of the day, Ansible would need, say, SSH or LXD to connect to your database. And if that happens, then that means that you need to really have a very good connection. And for you to run a backup and a backup, a very good backup or if you have a very huge database, might take not even or rather more than 30 minutes. And having a tunnel app or other SSH running all that time might be a challenge. Say if you have not good internet connection. That is why for issues backups, we will stick with Bashcripts and even other things. So I'm going to do up to Centation that will give us a brief overview of how Ansible comes into the whole world of deploying DHS to. So this is the slides. And I'm going to explain a bit about Ansible and how we are going to use Ansible to deploy in future DHS to application. And once more, give a few demos on why or explain and demonstrate the rationale why we are using Ansible. So traditionally, DHS2 can be deployed manually. And with that, it's a web-based Java application. And you need to just get the components running. One is the Java application, which is running, of course, on top of Tomcat. And then it needs to at least connect to a database, which is Postgres in our case. That means you need to again install Postgres database and then integrate your app. That is a Tomcat application with the same database. That means you're going to create manually database user and a database and the password. And then those details will get to the DHS2 application. And then it will be able to communicate back to the database, of course, when the app is running. Again, you need to deploy other components like proxy because at the end of the day, you don't want your Tomcat application to be hit directly from the internet. You want it to be hiding behind some proxy. In our case, we are using either Apache 2 or IngenX. That also you need to do it manually and traditionally. Somehow you get to install the application and then do SSL offloading. Of course, our DHS2 application is not doing SSL stuff. While it can do theoretically, you can just do SSL stuff on top of Tomcat, but not the way we are doing our stuff. We are doing SSL termination on the proxy. And then after that, well, at the end of the day, you need to do configuration file on either IngenX or Apache 2 proxy forwarding. At the end of the day, all your requests after SSL stuff is done to the bucket application, which is in our case Tomcat. Yeah, and those are the co-components of DHS2. But at the end of the day, in a very good production environment, it wants me monitoring. So you would also need to deploy monitoring on top of your co-components. So that alone would take a lot of time for you to have all those components set up and all integrated so that they can all work together. It will take a lot of your time. And if, say, you want another instance, again, you have to repeat the whole process and get another instance up and running. So that was monitoring installation. There are documents or documentation about the same or how you could do DHS2 installation step by step. And as I have mentioned, it will take time for you to at least have one instance up and running. And it's prone to errors also because you do interact directly with the system. It's very prone to errors. And also, it may, you may or not, appear to the best security practices when you do manual installation because at the end of the day, you will have to do permissions yourself. You'll have to ensure that Tomcat user is created and at the same time, all those files for Tomcat applications are owned by that user. All those security considerations, you'll have to do it manually. And most of the time, you'll find people forgetting those best practices when they do manual installation. And you would go to an extra mile of even creating system B files for your app. And sometimes people would deploy application that has or doesn't have those system B files so that whenever your server does a reboot, you have to do manual. You have to get your application up manually. So, and there we go. We went through automating stuff. Well, there are scripts developed by the team and both. Those are bash scripts. They do the job well. They do the installation of DHS2 perfectly well. And it gets all those components up and running. You don't have to worry that how to integrate, say proxy DHS2 application, which is the compute part of your stack and then the database. You don't need to worry about the end-to-end communication. It will just happen with the bash scripts because at the end of the day, it does create your config files. And then at the end of it all, you will just have to access the URL that was applied on the variables that you declared before the installation. And you'll have the app up and running. Of course, you'll do a few tricks, maybe for optimization, for the application and also the database. But from the fly, you'll have your instance up and running and you'll be able to access the data. I mean, sorry, the app from the web. Yes, but then the bash scripts is there, but it has a few challenges. One is, say you have an infrastructure on which database is sitting on its own server. Application is sitting on a separate server and even monitoring server is different.  They are not running from within one host. Then you need to figure out a way you would have the apps deployed on those components running on different servers. And the way bash scripts worked is you would have to be sitting on the server where you're doing deployment and then run the script from within that server. That would ideally or rather practically deploy the application from within that host only. That means it's not supporting that environment that I talked about where you have components running on their separate servers. Yes, so I think I guess we've talked about this. So to eliminate that is when we are opting for Ansible because with Ansible you can use other connection methods. You're not confined to running your script from within the host only. You can use SSH as a connection, underlying connection protocol where you just need to have a deployment server and then from the deployment server you get to run script remotely over SSH. Yes, so that you would have tasks that are related to say data is to application deploying Tomcat and you have those tasks grouped into a role and then it will deploy data is to application on on the application instance and then all the tasks that are related to database are grouped into a different role and they will deploy Postgres database on Postgres server and at the end of the day do the do the do the integration between the two. So with Ansible you're able to achieve that and Ansible has more than 15 connection models. One of them is LXD. That is when you want to deploy DHS2 within one host and you're using LXD containers then you can just connect to those LXD containers with LXD module. And another one is SSH. That is when we want to connect to the components, the server components separately with SSH and deploy DHS2 on those components and even database and monitoring separately. You could also connect with Docker. That is when you're deploying DHS2 with Docker containers. You're not limited to either using LXD or SSH. You can also do Docker and even more connection modules are supported. Yeah, so automation basically means that we don't interact ourselves more with the installation process. It's automated and we will not have or we will eliminate, if not do away with all the errors that normally happen when doing manual installation. And then when you want to deploy new DHS2 application, you just need to run a playbook or rather a bar script and it will do it in a fly. So yeah, that means you're going to spend very, very little time doing the deployment process. Yeah, so the two deployment automation approaches that we have right now is bar scripts that legacy bar scripts that we've been using on unknown. And then we have the DHS2 server tools, which I definitely know. And then these ones now are using Ansible. And right now they support two connection modules, the plugins that is SSH and LXD. So that means you can have DHS2 running on a single server and you'd be using LXD connection plugin. You just need to declare that and it will set up DHS2 and all its components within one server using LXD plugin. And if you want to, if you go to an environment where DHS2 is the components and the application stack are spread over virtual machines or physical servers, then you don't need to worry. As long as you have network connectivity between all these components, that you just need to have one or other small deployments of a way you have Ansible. And then you set your connection to SSH. Of course, prior to that, you need to make sure that you have at least SSH connection to those hosts that you're going to be deploying DHS2 into. Yeah. So, yeah, I've also explained why we want to get to Ansible entirely and afford using Barskips. And one of the reasons is because with multiple connections, we can support multiple architectures. And of course, also there's inter potency. That means Ansible, whenever you run a task and then you repeat the same playbook again, it will not do nothing. It will just tick that that is already done and you don't need to do anything. It will just be skipped. Those tasks are going to be skipped. So, yeah, it is very important and that is a very good feature because you're not going to have undecided effects when you do repeat your playbook. It will just do nothing. So, when you do deployment once, you don't have to worry about what will happen when you do repeat running your playbook. Okay. And I'm going to do a quick demo on the connections that are supported by Ansible and then also, say, demonstrate the inter potency with Ansible. So, I'm going to switch to terminal. Yeah. So, I have a server here that's fresh. It's running Ubuntu 2204 with this IP address. Yeah. So, I'm going to connect into it via SSH. Yeah. And then we're going to check the SSH files, for instance. SSH defined for, just for example. Let me ping. Be sure that the server is reachable from here. Okay. Yeah. LXD list. So, it's just another LXD container. I'm just using SSH server and I want to ping it from my laptop. This server is sitting elsewhere and I am able to reach. I'm accessing it via VPN. So, I'm going to, as I said, into this server and check SSHB configuration file. So, I'm going to edit SSHB config. And this is the, at least the default configurations that you get when you install a fresh Ubuntu server. And of course, enabled SSH. So, it doesn't have much. It has lots of the basic say port 22 for SSH. And with this, even password authentication, as I please know. But then I might, let me just change it to yes. And then I will run later on as Ansible Scripts to change that. That the Ansible Script is supposed to have an SSH, for instance. Yes. And then, yeah. So, it's very fresh config file. It doesn't have, it has defaults. At least I've changed the authentication to allow password authentication. But then I'll run as my Ansible Script and see and we can watch together what it's happening. So, I'm going to run Ansible also from my laptop, Ansible Playbook. And then, of course, the playbook I want to run is to set up. And then I'm going to put the host, which I want to run my playbook against. And the host is this. It has this IP address. It has .179 as its IP address. So, you put its IP address there. And then, yeah. And then with minus K, you will be prompted for a pseudo password. Because at the end of the day, as much as Ansible is connecting via SSH to the remote host, you need, and you need to do tasks that require elevation, it requires pseudo. Then you need to instruct Ansible at least to be able to run elevated privileges remotely. And of course, remote server has pseudo password. So, with minus K, it enables you to supply that pseudo password, which will be used at least to do elevated privileges on the remote server. So, this playbook, toolsetup.yaml, has SSH optimization tasks.  So, this minus K is going to prompt for that, for the become password. So, it has to be minus I, not minus L. Minus L is for limiting, but just minus I. Yeah. So, this is now running all the tasks on that playbook. And it will at least show you what's happening in the scenes. And we have an error, pseudo password, I didn't type it well, let's repeat and see. Yeah. So, the password is correct. So, first task is gathering facts. Normally Ansible when you run and you don't instruct it to not gather facts, then it will gather facts about the OS that you're running against. And facts are actually metadata about the OS or rather the server that you're running playbook against. For instance, in our case, if it's an Ubuntu, then it will catch the OS release and all, even the gateway IP address and all the metadata about that server. There are a lot of information here. So, but you can turn off that if you don't want. So, now it's running the tasks. And those tasks are actually, I mean, adding SSH to make sure that it meets at least the best security settings. And see the first task is disabling with key exchange algorithms and enabling strict symmetric key ciphers and configuring secure message authentication algorithms. So, this task, it checks actually really the configuration files that Ansible, sorry, that SSH has and it's changing if it's not meeting the top security. Like this one now here, password authentication, it's being said to know because I had 33 years when I accessed that server. So, it's now reverting to know and even other lines are being changed right now. So, when this finishes and we check the configuration file on this server, it will have changed. It will have changed a lot. Yeah. So, this playbook is now finished and we can check the configuration file once more and see what's changed. Now, you see the configuration file has a lot of changes. This one was not there before. We have it now that only authentication method allow this public key. And if you go to the very beginning, you see that this whole key parameters that you see and commented here, these four lines here or even five, they were added and they are actually making secure, making SSH more secure and even making the FABOS level, I mean the local level into FABOS and disabling root login, for instance, and enabling only public key authentication or setting it to yes. And even disabling password authentication, which we had said to yes just for demonstration. And even down here, you notice that the other lines that were added. So, upon running this script once more by Ansible playbook once more, I hope I've done correct to the password. You will notice that nothing will happen this time round because all those changes that are declared on the task are done already. So it will not do anything. You're seeing this now that disabling key exchange algorithms is green. Green means it's not doing anything. And everything that happens now this time round will just be green, green, green, because that's now explains the interpotency of Ansible, that it should not repeat the same thing once it's done already. So that explains. You know, you can have to watch your time a little bit if we're going to leave 10 minutes at the end. Okay. So that explains the interpotency. So yeah, and then we want to check also Ansible connection supported. So you'll notice that all that happens here will just be green, green, green. It will not change anything. And this is the desired characteristic of Ansible that once you run your playbook and some changes are made, you don't need to, when you run it again, it will just do nothing. And we watched that also during our, our data is to deployment. Yeah. So let me demonstrate the connection feature. Let me, let me wait for this to finish then I'll demonstrate that also. But at the end of the day, right now, everything that happens here is through SSH. It's happening via SSH connection. This server, as I mentioned, is sitting somewhere else. It's not within a VM here. It's even some other building. And connection to that server is with SSH using at least public private key authentication. So if I do Ansible dots, let me see Ansible and then dots and check. I mean, at least the type connection, the number of connection that we, they are supported. You notice that there are many, there are many. And we are focusing on SSH and at least LXD somewhere here. Yeah, here is LXD. So these are the two connections that we are using right now. But you can even explore LXD because with LXD connection, you can also connect to your containers. There's also Docker connection and even these other connections that we are not using. You can use Ansible to connect to LXD and even KMO, you know, all these connection protocols are supported. Yeah. So Ansible, let me just add hook command. Ansible and then I want to connect to, I want to connect to this server over SSH, this server over SSH and just ping. Ping is just used for testing connectivity. Okay. That is used to test this connectivity. The module I'm running is ping. Just to test if I'm able to connect to this server here using Ansible ad hoc command. And this means that I'm able to connect to that server with SSH. Of course, I could verbose and check connection used under the hood, for instance. And you'll notice that it's using, at the end of the day, SSH connection and it's using my username KT to connect to that server and it's able to connect and it's able to ping. Yeah. Yeah. So when I am sitting within this server and of course LXD containers are running here, I could also run the same ad hoc command from the server. But now this time around, I want to use LXD connection. And for LXD connection, we just connect with them with the container's name, not even the IP address. Let's just connect to the container's name server admin and then use environment variables where you set your first connection really to be LXD and not defaulting to SSH. Because as I said, at the end of today, it's a default connection. So we can connect with that and do a ping and see what happens. It's also successful, it's success. And we can check really and prove that LXD was used under the hood. And this is going to show us that with a little verbose, we're going to check and be sure that really the connection used was LXD. You can also use Docker and all those connections that I did, I showed back here. Yeah. So I've demonstrated Ansible's ability for the, for in-dem potency and also that it can support even SSH and LXD connection. So maybe I can just show you the structure of my Ansible script, HS2 scripts. And yeah, it has this structure. We have two directories, deploy and then docs directory. Of course, this is in GitHub already. And we want to have documentation and how to documents within this folder and then the code of the Ansible script within the deploy folder. And then read me, of course, is on the top of the directory where it gives us at least how you could install or follow the installation process. Yeah. Okay. So within the deploy script, deploy folder, we have Ansible playbook and also the roles. So the main playbook that we normally run is the HS2.yaml. Let me just edit and see, display the same. It has a few roles. It has Postgres. These are roles that are related to Postgres database. Deploying Postgres within either an LXD container or within a server sitting somewhere else and access is over SSH. We have the HS2. This is really focused on deploying the HS2 application either on a standalone server or within the LXD container. This is proxy, which can be in GNEX or Apache 2 and also monitoring. Monitoring is for the Munich, for general server monitoring and also even application monitoring with Glowroot. Yeah. So this is the basic structure. So at the end of the day, it reads variables somewhere and those variables are in inventory host file. And on inventory host file, just edit. This is where you can declare the type of connection that you want to use, either LXD or SSH. In case you have your servers scattered everywhere and you have access with the network, with the IP address, then you would set this to SSH. That way it will connect to those servers with SSH and deploy your HS2. And a few other configuration parameters like SSL type that you want to use, you might have your SSL certificate with you or you want to get that with a net encrypt and even time zone and the network that you want to at least be using. So this is the configuration file that have all those together within one file. Of course, there are other ways that you could declare your variables with Ansible. There are a ton of ways that you could declare your variables. Right now we are using these and these scripts are being improved. They're actively actually developed and we keep improving every time. I think up to that point, I have done a couple of introduction with Ansible and even our tools. Yes. So we have roles done or written into this directory. They're all cooked into this roles directory. If you go into that directory and list the contents, then you have data is to firewall, integration and even monitoring and Postgres directories. Those are hosting raw scripts or other scripts that deploy those applications. Let's just check one script for deploying data is to. It's within data is to folder tasks. And then within that, you have so many tasks that you can see this one, this one, only this one. And this one have YAML scripts. These are now with Ansible. And you see it's somehow has description, the comments. And this one, one comment is for instance, setting up Tomcat and Java. It's installing at the end of the day, Jerry and Zip and Tomcat 9 and Tomcat 9. So it's just like the basic way that you would use to install application or other package with apt. But this now you're using apt module because Ansible have a ton of modules that you could use. Instead of, you could run raw command here, but you can take make use of apt module for the interpreters and even other benefits and install those packages with this single task. And then all the other tasks that are relating to DHS2 will now come until the end. And even like this one, very last one here is getting the file. You can get the file from either a file or from the internet where we normally host our files. So yes, so I think we can now go back to the last section of the agenda. Unless there's a question. Yes, Tito, can I come in? Yes. Okay, thank you very much. I think that's a great job that you have done and looks more interesting to try and find out maybe which area to improve and things like that. Of course, it's good that you have come with another initiative to have multiple alternatives if somebody wants to install DHS2, which scripted we use. We have been using a bash, as you said before, and then coming to this, Ansible looks more a bit interesting. So I think you will try and try to come up maybe the next time we meet. We might have some feedback maybe to share or so where the area to improve and things like that. Yes, yeah, in even sessions that come after today is I would even demonstrate that they all installation with Ansible. I mean, like in a session, do installation from scratch either using LXD connection and deploy our apps within the single server with all of us watching and with all of us on call with share screen and then we run and see all the tasks that happens behind the scenes and then also discuss more about it. Of course, another session we can even schedule connection with SSH, set up virtual machines and try from a deployment server deploy DHS2 using SSH connection to those servers and have a few questions from you and even discuss more about that, yeah. That sounds good. If as many people as possible get the chance to just try them out too in the week, then yeah, maybe next week Tito, maybe you can do a kind of end-to-end installation but also let's deal with feedback and questions and suggestions for improvements from the people. Yes. Moses was worried that maybe the setup of Ansible is a little bit complicated. No, no. Well, from the readme, let me just get to the readme file, DHS2 server tools. I know what I was talking about Michael, I think last month because it's not so much that the setup of Ansible is complicated but the whole layout of Ansible scripts can be a little bit intimidating to start with. But yeah, you've done a good job here of describing the setup. It's not so bad. Yeah. So with these few commands here, you can at least have Ansible setup on the server. Just need to brand them and that will get Ansible platform installed. And then from there, the only thing required now for you is to run the script using the installed Ansible. Yeah. Of course, there are the packages like Python net address that will be required before you start installation but then this will take care of that. Yeah, I think. I can confirm that I was successfully able to set up everything with Ansible. Check this from scratch, no preparation before. There were some minor packages missing and I did them successfully but it was down the pure like Ubuntu setup without any extra packages in the system. So the documentation is sufficient to make it happen. Thanks Michael. Good to hear you, maybe just for the purpose of other people on the call who haven't met you. Michael is our security boss. One of the things that he's doing is going to use these Ansible scripts as a sort of security reference configuration. So everything that we recommend in terms of security compliance to whatever controls we think are suitable all of that should be the reference implementation should implement all of those controls. So it's a good thing to watch and maybe we'll get a chance to interview Michael one of these weeks about some of that work. Yeah, I just wanted to add that our idealistic and probably achievable goal is to set an environment where we ought to configure the environment where we can safely deploy DHS to a system which is secure by default. And the scripts are already doing a lot of the work for that. So the configuration was thoroughly done to ensure that we have important security company where all proper configuration for SSH and other things done by default and we will be assessing this reference setup on our test platform. So I hope that in the near future we'll be to say that once you use these tools and install the system without any extra addition it will be or changes. It will be reasonably secure by default. This is a kind of a super goal for us. Yeah, I agree. And the beauty of the scripts Ansible Script is that you can now improve with time to suit your security requirements and say you want to fix some permission of a fine that will be deployed. You can just with time change that and at the end of the day the end goal is to make sure that whatever the scripts do deploy meets the best security standards. Yeah. Okay, so maybe without getting too far into the love fest of the beauty of your script, let's see if we get a little bit of feedback from people. I know this is a very fast call that we've done and we've got an idea where next week we'll go ahead and you'll continue with doing the full setup. But I listed down a whole lot of possible topics in that agenda item four. I'd be interested to hear from people what's their kind of priority interest? What kind of things would they like to be talking about? Any suggestions? One of the things we can do, so it's not so boring, is we can find interesting people to talk to. They would get Michael on one of these weeks. We can talk to maybe the infrastructure team in Oslo. We could talk to different implementers out there, ISP South Africa, BAO, just get interesting people on, and lots of tutorial sessions. But please, anyone, what's their thinking about topics? Is the weekly call a good idea? It's a good idea. It's a bit of a commitment for everyone on a Thursday morning. And maybe suggestions on maybe other topics that you would need us to talk about? Hello, Tito. Yes. Yes, I think most of the time we have been focusing on installing VCHS to especially when we are online, connect to the internet. But with my experience visiting it to Eritrea, it's just another situation that where it's totally offline and it's somehow very hard to install VCHS to offline, where you might also need to gather doing this virtual thing and clear out that visualization that we have created online to the offline site. Maybe we can find a way to do this kind of VCHS to installation offline. This script that we are creating, all we have been using works fine when we are online. But what if it's offline? How is it going to work? Maybe we have some early exploration on that. Yes, that's a good point. When because the scripts at the end of the day, when you're doing, say for instance, installing Postgres, you pulling it from the official Postgres SQL repositories or even when you're installing Tomcat, you don't get the file. And then you're not doing it from a file. You just get the files from the internet. So there are situations really when internet is locked and you don't have access to any server outside there and you want to deploy VCHS to that way you get your packages and ideally you need to get them into the server, say via SSH and then have VCHS to running. So it's kind of manual setup without internet where you put your packages and put it the right place and then you start Postgres with those, yeah, bin files. I think the way I would probably approach that is to assemble my travel kit before you left. Maybe set up by a kind of a local app repository with all the packages that I've freshened up before I've left taken on my portable hard drive or USB stick or what have you. Steven, you've done quite a lot of installations of odd software in odd places. Including Eritrea. Hi, Steven here. Yeah, it's exactly what you said, Bob. I tend to, when I've done it in difficult places, put together my kit as it were and bring it along. In the past, sort of before Linux containers happened, I was a fan of using tools like VMware, which are more commercial, but they offer you the ability to relatively easy, just grab an entire virtual machine and dump it onto a hard disk and just bring it along with you and just redeploy it. These days, with containers, the other neat thing you can do with either LXC containers natively in Ubuntu or if you use a tool like Proxmox, which makes LXC containers have a nice web UI and all that, to right-click back up, and then you just have the whole container and then you just take the container with you. I mean, the nice thing these days is disk space is cheap, so it's pretty easy to carry things along. Great presentation, by the way. I really welcome seeing people starting to use Ansible, and I make a lot of use of it as well, and if anybody ever wants to have a further talk on this meeting, covering topics like going a little bit further with Ansible about maybe how to deploy in an environment where you have other things running. If anybody's interested in tools like Telegraph or InflexDB, that might be integrated into Monitor, things like DHIS2, love to share. Also, I do something similar when I deploy DHIS2, but I actually make use of the Oslo Docker images because I find Docker really, really useful, so I actually deploy different Docker containers using Ansible. If anybody's interested in that, love to share there. Thanks. Yeah, Stephen, we'll put you on our list of interesting people to enter. Okay. I think it's great that you're having this meeting as well too. I think these face-to-face type discussions are fantastic. Yeah, I think we can, our time is up. We can wrap up today and then, yeah. Feel free to add more topics that we can discuss more about maybe next week and even subsequent calls. It's 13 hours. Cool. Thanks, Tito. I got to get on to another call, so see you all next week. Bye. Okay, thank you very much.