IPTables Flow Chart
Posted by
Manish Panchmatia
on Wednesday, December 11, 2019
Labels:
security,
software
/
Comments: (0)
Full article...>>
Another interesting flowchart about IPTables in general
Reference: https://stuffphilwrites.com/2014/09/iptables-processing-flowchart/
Reference: https://stuffphilwrites.com/2014/09/iptables-processing-flowchart/
KubeProxy IPTables
I found this flowchart about execution of different rule chains of IPTables firewall. It is based on various configurations and service types. So let me share it with readers of my blog. Express YourSelf !
Reference :
https://twitter.com/thockin/status/1191766983735296000?lang=en
https://docs.google.com/drawings/d/1MtWL8qRTs6PlnJrW4dh8135_S9e2SaawT410bJuoBPk/edit
Reference :
https://twitter.com/thockin/status/1191766983735296000?lang=en
https://docs.google.com/drawings/d/1MtWL8qRTs6PlnJrW4dh8135_S9e2SaawT410bJuoBPk/edit
K8s Security : References from Kubecon2019
Posted by
Manish Panchmatia
on Thursday, December 5, 2019
Labels:
k8s,
security
/
Comments: (0)
Full article...>>
Extended NodeRestrictions for Pods: https://bit.ly/2XdeWOF
Bounding Self-Labeling Kubelets: https://bit.ly/351BaFN
Choose a minimal base image https://bit.ly/37eTPzT
Run as non root! https://bit.ly/2qpUNJ7
Use resource limits https://bit.ly/37k48Tx
Use least privilege authorization https://bit.ly/2CV1INd
Restrict network access https://bit.ly/37cL9dv
Node Authorizer: https://bit.ly/33XRIPb
Node Restriction: https://bit.ly/2QkRqhk
Kubelet Static Pods: https://bit.ly/2Qj0DGL
Extended NodeRestrictions for Pods: https://bit.ly/2XdeWOF
Bounding Self-Labeling Kubelets: https://bit.ly/351BaFN
ReplicaSet deletion logic: https://bit.ly/2NQTL1O
Run as non-root using security context https://bit.ly/2qpUNJ7
Minimal base images: https://bit.ly/37eTPzT
Resource limits: https://bit.ly/37k48Tx
Least privilege: https://bit.ly/2CV1INd
GKE hardening guide: g.co/gke/hardening
GKE sandboxes: g.co/gke/sandbox
Kata containers: katacontainers.io
Bounding Self-Labeling Kubelets: https://bit.ly/351BaFN
Choose a minimal base image https://bit.ly/37eTPzT
Run as non root! https://bit.ly/2qpUNJ7
Use resource limits https://bit.ly/37k48Tx
Use least privilege authorization https://bit.ly/2CV1INd
Restrict network access https://bit.ly/37cL9dv
Node Authorizer: https://bit.ly/33XRIPb
Node Restriction: https://bit.ly/2QkRqhk
Kubelet Static Pods: https://bit.ly/2Qj0DGL
Extended NodeRestrictions for Pods: https://bit.ly/2XdeWOF
Bounding Self-Labeling Kubelets: https://bit.ly/351BaFN
ReplicaSet deletion logic: https://bit.ly/2NQTL1O
Run as non-root using security context https://bit.ly/2qpUNJ7
Minimal base images: https://bit.ly/37eTPzT
Resource limits: https://bit.ly/37k48Tx
Least privilege: https://bit.ly/2CV1INd
GKE hardening guide: g.co/gke/hardening
GKE sandboxes: g.co/gke/sandbox
Kata containers: katacontainers.io
State of Kubernetes Security https://bit.ly/2OdqgWC
“The Devil in the Details: Kubernetes’ First Security Assessment”
https://bit.ly/34VkAr2
Walls Within Walls: What If Your Attacker Knows Parkour?”
https://bit.ly/33PZiLl
“Binary Authorization in Kubernetes” https://bit.ly/32L2yqj
“Piloting Around the Rocks: Avoiding Threats in Kubernetes”
https://bit.ly/36XLAbc
“Hello from the Other Side: Dispatches from a Kubernetes
Attacker” https://bit.ly/2NBpe7Y
“How Kubernetes Components Communicate Securely in Your
Cluster” https://bit.ly/2QrIzKP
“Sig-Auth Update” https://bit.ly/2Kk7kEQ
“Attacking and Defending Kubernetes Clusters: A Guided Tour”
https://bit.ly/36Xb0G0
kubectl productivity
Auto Complete
source <(kubectl completion bash) # setup autocomplete in bash into the current shell, bash-completion package should be installed first.
echo "source <(kubectl completion bash)" >> ~/.bashrc # add autocomplete permanently to your bash shell.
Context
kubectx
helps you switch between clusters back and forth:kubens
helps you switch between Kubernetes namespaces smoothly:
Explain
kubectl explain
command outputs the specification of the requested resource or field.
Alias
A script to generate hundreds of convenient kubectl aliases programmatically.
Syntax explanation
k
=kubectl
sys
=--namespace kube-system
- commands:
g
=get
d
=describe
rm
=delete
a
:apply -f
ex
:exec -i -t
lo
:logs -f
- resources:
po
=pod,dep
=deployment
,ing
=ingress
,svc
=service
,cm
=configmap
,sec
=secret
,ns
=namespace
,no
=node
- flags:
- output format:
oyaml
,ojson
,owide
all
:--all
or--all-namespaces
depending on the commandsl
:--show-labels
w
=-w/--watch
- output format:
- value flags (should be at the end):
n
=-n/--namespace
f
=-f/--filename
l
=-l/--selector
Reference
eBPF, OPA, Blackbox exporter, ffwd, Heroic
eBPF can be used for
1. Map application and HA architecture
2. Detect network issues
3. Identify misbehaving svc
https://www.youtube.com/watch?v=thBCB7YeZ2g&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=3
Open Policy Agent https://github.com/open-policy-agent/opa can be used to validate CRD
https://www.youtube.com/watch?v=DUe_8nf42Ik&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=5
The blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. https://github.com/prometheus/blackbox_exporter
ffwd is a flexible metric forwarding agent. It is intended to run locally on the system and receive metrics through a wide set of protocols and then forward them to your TSDB. https://github.com/spotify/ffwd
Heroic A scalable time series database based on Bigtable, Cassandra, and Elasticsearch. https://github.com/spotify/heroic
https://www.youtube.com/watch?v=AA8e5v43AcU&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=6
1. Map application and HA architecture
2. Detect network issues
3. Identify misbehaving svc
https://www.youtube.com/watch?v=thBCB7YeZ2g&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=3
Open Policy Agent https://github.com/open-policy-agent/opa can be used to validate CRD
https://www.youtube.com/watch?v=DUe_8nf42Ik&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=5
The blackbox exporter allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. https://github.com/prometheus/blackbox_exporter
ffwd is a flexible metric forwarding agent. It is intended to run locally on the system and receive metrics through a wide set of protocols and then forward them to your TSDB. https://github.com/spotify/ffwd
Heroic A scalable time series database based on Bigtable, Cassandra, and Elasticsearch. https://github.com/spotify/heroic
https://www.youtube.com/watch?v=AA8e5v43AcU&list=PLj6h78yzYM2NDs-iu8WU5fMxINxHXlien&index=6
Easily Observing Operators
kube-state-metrics you can gather the following state about your cluster:
- Counts of each object type
- All of the Kubernetes labels and their values attached to each object
- The creation time (as an epoch) of each object
- Some generic, object specific “info”
- Other states specific to the object in question
kube-state-metrics can be deployed like a classic Kubernetes service with only one replica.
List of metrics
Metrics about your CRD
Kustomize plugins
This is the third article out of three articles on Kubernetes tool : Kustomize. This article covers the plugins.
kustomize plugins
Kustomize offers a plugin framework allowing people to write their own resource generators and transformers.
kustomization.yaml
generators:
- gen_file.yaml
transformers:
- trans_file.yaml
Let's focus on gen_file. Trans_file will be similar.
gen_file.yaml
apiVersion: "apiVersion"
kind: Gen_File
metadata:
name: "some name"
Now the file name "Gen_File" will be searched at path
XDG_CONFIG_HOME = $HOME/.config = /home/manish.config
/home/manish/.config/kustomize/plugin/${apiVersion}/LOWERCASE(${kind})
Possible value for apiVersion = someteam.example.com/v1
If failed then "Gen_File.so" will be searched at same path
This file will be invoked with gen_file.yaml
Reference : https://github.com/kubernetes-sigs/kustomize/tree/master/docs/plugins
Built-in plugins : https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/chart.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/secretGeneratorPlugin.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/goGetterGeneratorPlugin.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/validationTransformer/README.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/transformerconfigs/README.md
Plugin Development
https://github.com/kubernetes-sigs/kustomize/blob/master/docs/plugins/execPluginGuidedExample.md
https://github.com/kubernetes-sigs/kustomize/blob/master/docs/plugins/goPluginGuidedExample.md
kustomize plugins
Kustomize offers a plugin framework allowing people to write their own resource generators and transformers.
kustomization.yaml
generators:
- gen_file.yaml
transformers:
- trans_file.yaml
Let's focus on gen_file. Trans_file will be similar.
gen_file.yaml
apiVersion: "apiVersion"
kind: Gen_File
metadata:
name: "some name"
Now the file name "Gen_File" will be searched at path
XDG_CONFIG_HOME = $HOME/.config = /home/manish.config
/home/manish/.config/kustomize/plugin/${apiVersion}/LOWERCASE(${kind})
Possible value for apiVersion = someteam.example.com/v1
If failed then "Gen_File.so" will be searched at same path
This file will be invoked with gen_file.yaml
Reference : https://github.com/kubernetes-sigs/kustomize/tree/master/docs/plugins
Built-in plugins : https://github.com/kubernetes-sigs/kustomize/tree/master/plugin/builtin
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/chart.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/secretGeneratorPlugin.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/goGetterGeneratorPlugin.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/validationTransformer/README.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/transformerconfigs/README.md
Plugin Development
https://github.com/kubernetes-sigs/kustomize/blob/master/docs/plugins/execPluginGuidedExample.md
https://github.com/kubernetes-sigs/kustomize/blob/master/docs/plugins/goPluginGuidedExample.md
UseCases of Kustomize
This is the second article out of three articles on Kubernetes tool : Kustomize. This article covers the usecases.
==============================
UseCase 1 : Config map generation and secreat generation
secretGenerator:
- name: myregistrykey
type: docker-registry
literals:
- docker-server=DOCKER_REGISTRY_SERVER
- docker-username=DOCKER_USER
- docker-password=DOCKER_PASSWORD
- docker-email=DOCKER_EMAIL
This is same as:
kubectl create secret docker-registry myregistrykey --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
Same as above configMapGenerator
configMapGenerator
- name: profile
files:
- hello.config
We can also merge two configmaps
configMapGenerator:
- name: my-configmap
behavior: merge
files:
- plumbing.properties
- secret.properties
Configmap from literals
configMapGenerator:
- name: my-configmap
literals:
- foo=bar
- baz=qux
==============================
UseCase 2 : Creating multiple variants using overlays.
Edit attributes as per specific file. Here localserv.yaml . Keyword is patchesStrategicMerge
kustomize edit add patch ocalserv.yaml
bases:
- ../../base
patchesStrategicMerge:
- localserv.yaml
Multi Variant Examples:
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/helloWorld/README.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/breakfast.md
we can use "kustomize diff base/variant1/variant2" command to see the difference.
==============================
UseCase 3 : edit container image and tag
kustomize edit set image busybox=alpine:3.6
images:
- name: busybox
newName: alpine
newTag: 3.6
==============================
UseCase 4 : Remote Target
kustomize build can be run on a URL.
The effect is the same as cloning the repo, checking out a particular ref (commit hash, branch name, release tag, etc.), then running kustomize build against the desired directory in the local copy.
==============================
UseCase 5 : applying a JSON patch. Replace and add
cat <$DEMO_HOME/ingress_patch.json
[
{"op": "replace", "path": "/spec/rules/0/host", "value": "foo.bar.io"},
{"op": "replace", "path": "/spec/rules/0/http/paths/0/backend/servicePort", "value": 8080}
]
EOF
You can also write the patch in YAML format. This example also shows the "add" operation:
cat <$DEMO_HOME/ingress_patch.yaml
- op: replace
path: /spec/rules/0/host
value: foo.bar.io
- op: add
path: /spec/rules/0/http/paths/-
value:
path: '/test'
backend:
serviceName: my-test
servicePort: 8081
EOF
patchesJson6902:
- target:
group: apps
version: v1
kind: Deployment
name: my-nginx
path: patch.yaml
==============================
UseCase 6 : Patch on multiple objects
JSON patch and strategic merge patch can be applied to selected resources
patches:
- path: "PatchFile"
target:
group: "Group"
version: "Version"
kind: "Kind"
name: "Name"
namespace: "Namespace"
labelSelector: "LabelSelector"
annotationSelector: "AnnotationSelector"
==============================
UseCase 7 : Injecting k8s runtime data into containers
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/wordpress/README.md
==============================
UseCase 1 : Config map generation and secreat generation
secretGenerator:
- name: myregistrykey
type: docker-registry
literals:
- docker-server=DOCKER_REGISTRY_SERVER
- docker-username=DOCKER_USER
- docker-password=DOCKER_PASSWORD
- docker-email=DOCKER_EMAIL
This is same as:
kubectl create secret docker-registry myregistrykey --docker-server=DOCKER_REGISTRY_SERVER --docker-username=DOCKER_USER --docker-password=DOCKER_PASSWORD --docker-email=DOCKER_EMAIL
Same as above configMapGenerator
configMapGenerator
- name: profile
files:
- hello.config
We can also merge two configmaps
configMapGenerator:
- name: my-configmap
behavior: merge
files:
- plumbing.properties
- secret.properties
Configmap from literals
configMapGenerator:
- name: my-configmap
literals:
- foo=bar
- baz=qux
==============================
UseCase 2 : Creating multiple variants using overlays.
Edit attributes as per specific file. Here localserv.yaml . Keyword is patchesStrategicMerge
kustomize edit add patch ocalserv.yaml
bases:
- ../../base
patchesStrategicMerge:
- localserv.yaml
Multi Variant Examples:
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/helloWorld/README.md
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/breakfast.md
we can use "kustomize diff base/variant1/variant2" command to see the difference.
==============================
UseCase 3 : edit container image and tag
kustomize edit set image busybox=alpine:3.6
images:
- name: busybox
newName: alpine
newTag: 3.6
==============================
UseCase 4 : Remote Target
kustomize build can be run on a URL.
The effect is the same as cloning the repo, checking out a particular ref (commit hash, branch name, release tag, etc.), then running kustomize build against the desired directory in the local copy.
==============================
UseCase 5 : applying a JSON patch. Replace and add
cat <
[
{"op": "replace", "path": "/spec/rules/0/host", "value": "foo.bar.io"},
{"op": "replace", "path": "/spec/rules/0/http/paths/0/backend/servicePort", "value": 8080}
]
EOF
You can also write the patch in YAML format. This example also shows the "add" operation:
cat <
- op: replace
path: /spec/rules/0/host
value: foo.bar.io
- op: add
path: /spec/rules/0/http/paths/-
value:
path: '/test'
backend:
serviceName: my-test
servicePort: 8081
EOF
patchesJson6902:
- target:
group: apps
version: v1
kind: Deployment
name: my-nginx
path: patch.yaml
==============================
UseCase 6 : Patch on multiple objects
JSON patch and strategic merge patch can be applied to selected resources
patches:
- path: "PatchFile"
target:
group: "Group"
version: "Version"
kind: "Kind"
name: "Name"
namespace: "Namespace"
labelSelector: "LabelSelector"
annotationSelector: "AnnotationSelector"
==============================
UseCase 7 : Injecting k8s runtime data into containers
https://github.com/kubernetes-sigs/kustomize/blob/master/examples/wordpress/README.md
Kustomize
This is the first article out of three articles on Kubernetes tool : Kustomize. This article covers the basics.
Kustomize
Kustomize is a CLI for managing K8s style objects with declarative ways
==============================
Edit name attribute by adding prefix/suffix to it
namePrefix: prod-
nameSuffix: "-001"
Edit labels (k,v)
commonLabels:
app: my-wordpress
Edit annotations (k,v)
commonAnnotations:
description: this is test
Edit namespace
namespace: my-namespace
==============================
Edit attribute to Multiple Files.
kustomize edit add resource deployment.yaml
kustomize edit add resource service.yaml
commonLabels:
app: my-wordpress
resources:
- deployment.yaml
- service.yaml
==============================
Edit attribute to Multiple directory.
commonLabels:
app: my-wordpress
bases:
- ./wordpress
- ./mysql
==============================
$ kustomize build $DEV_HOME
Its output is concatenated YAML documents. They can be directed to file or to kubectl
kubectl apply -k $DEV_HOME
kustomize build $DEV_HOME | kubectl apply -f -
kubectl kustomize $DEV_HOME
==============================
Useful Terms
base: A combination of a kustomization and resource(s). Bases can be referred to by other kustomizations.
kustomization: Refers to a kustomization.yaml file, or more generally to a directory containing the kustomization.yaml file and all the relative file paths that the YAML file references.
overlay: A combination of a kustomization that refers to a base, and a patch. An overlay may have multiple bases.
patch: General instructions to modify a resource.
resource: Any valid YAML file that defines an object with a kind and a metadata/name field.
target: The argument to kustomize build. For example, kustomize build $TARGET. A target must be a path or a URL to a kustomization. A target can be a base or an overlay.
variant: The outcome of applying an overlay to a base.
Read More: https://github.com/kubernetes-sigs/kustomize/blob/master/docs/glossary.md
Reference:
https://www.mirantis.com/blog/introduction-to-kustomize-part-1-creating-a-kubernetes-app-out-of-multiple-pieces/
https://www.mirantis.com/blog/introduction-to-kustomize-part-2-overriding-values-with-overlays/
https://github.com/kubernetes-sigs/kustomize
https://kustomize.io/
Other similar tools
https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/declarative-application-management.md
https://docs.google.com/spreadsheets/d/1FCgqz1Ci7_VCz_wdh8vBitZ3giBtac_H8SBw4uxnrsE/edit#gid=0
Kustomize
Kustomize is a CLI for managing K8s style objects with declarative ways
==============================
Edit name attribute by adding prefix/suffix to it
namePrefix: prod-
nameSuffix: "-001"
Edit labels (k,v)
commonLabels:
app: my-wordpress
Edit annotations (k,v)
commonAnnotations:
description: this is test
Edit namespace
namespace: my-namespace
==============================
Edit attribute to Multiple Files.
kustomize edit add resource deployment.yaml
kustomize edit add resource service.yaml
commonLabels:
app: my-wordpress
resources:
- deployment.yaml
- service.yaml
==============================
Edit attribute to Multiple directory.
commonLabels:
app: my-wordpress
bases:
- ./wordpress
- ./mysql
==============================
$ kustomize build $DEV_HOME
Its output is concatenated YAML documents. They can be directed to file or to kubectl
kubectl apply -k $DEV_HOME
kustomize build $DEV_HOME | kubectl apply -f -
kubectl kustomize $DEV_HOME
==============================
Useful Terms
base: A combination of a kustomization and resource(s). Bases can be referred to by other kustomizations.
kustomization: Refers to a kustomization.yaml file, or more generally to a directory containing the kustomization.yaml file and all the relative file paths that the YAML file references.
overlay: A combination of a kustomization that refers to a base, and a patch. An overlay may have multiple bases.
patch: General instructions to modify a resource.
resource: Any valid YAML file that defines an object with a kind and a metadata/name field.
target: The argument to kustomize build. For example, kustomize build $TARGET. A target must be a path or a URL to a kustomization. A target can be a base or an overlay.
variant: The outcome of applying an overlay to a base.
Read More: https://github.com/kubernetes-sigs/kustomize/blob/master/docs/glossary.md
Reference:
https://www.mirantis.com/blog/introduction-to-kustomize-part-1-creating-a-kubernetes-app-out-of-multiple-pieces/
https://www.mirantis.com/blog/introduction-to-kustomize-part-2-overriding-values-with-overlays/
https://github.com/kubernetes-sigs/kustomize
https://kustomize.io/
Other similar tools
https://github.com/kubernetes/community/blob/master/contributors/design-proposals/architecture/declarative-application-management.md
https://docs.google.com/spreadsheets/d/1FCgqz1Ci7_VCz_wdh8vBitZ3giBtac_H8SBw4uxnrsE/edit#gid=0
Transcendence - 3
---------------------------------------------------------------------------------------Let me share some pearls of wisdom from a book.
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 3rd part of the book.
---------------------------------------------------------------------------------------
Part 3 Fusion of science and spirituality
17
People who are unable to understand perfectly both scripture and science far outnumber those who do understand them perfectly. The former glancing superficially through the scriptures, could easily arrogate to themselves the authority to decide upon every question of physics on the strength of some word which they have misunderstood, and which was consciously employed by the sacred authors for some different purpose. And the smaller number of understanding men could not dam up the furious torrent of such people. These people would gain the most followers, simply because it is much more pleasant to gain a reputation for wisdom without effort or study, than to consume oneself tirelessly in the most laborious disciplines.
18
To sense that behind everything that can be experienced there is something that our minds cannot grasp, whose beauty and sublimity reaches us only indirectly: that is religiousness. In this sense… I am a devoutly religious man.
A religion is a system of symbols, which acts to establish powerful, pervasive, and long-lasting moods in men by formulating conceptions of a general order of existence and clothing those conceptions with such and aura of factuality that the moods and motivations seem uniquely realistic.
We see what we want to see!
‘Faith’ is interpreted as being similar to ‘having working hypothesis’.
It is a dangerous act of self-delusion if one attempts to get rid of an unpleasant moral obligation, by claiming the human action is the inevitable result of an inexorable law of nature.
Since we are totally connected with everything and every creature in this universe, it is most foolish for each of us to strive to better ourselves without regard to what happens to others.
20
The purpose of journey on this precious Earth is now to align our personalities with our souls. It is to create harmony, cooperation, sharing, and reverence for life. It is to grow spiritually. This is our new evolutionary pathway.
Genes do not control life. It is the environment, and more specifically, our perception of the environment that controls gene activity. In the end, it comes down to a simple case of mind over matter in controlling the fate of our lives.
There are very dark forces trying hard to manipulate us into negativity.
One can live and work in this world as an awakened professional.
This chapter 20 also sheds light on how status quo of our own inner lives harms us. We denounce wisdom of others when it does not fit into our emotional framework. We choose to agree only with opinions of others who share our personal values and feelings...In this state of ignorance, we become subservient, we are at the mercy of the popular status quo.
21
Chapter 21 is more about Baruch Spinoza a Dutch philosopher and Hindu Vedaanta philosophy.
Reality is perfection. If circumstances are seen as unfortunate, it is only because of our inadequate conception of reality. …. The world as it exists look imperfect only because of our limited perception.
22
The deep emotional conviction of the presence of a superior reasoning power, which is revealed in the incomprehensible universe, form my idea of God.
24
Where your talents and the needs of the world cross, there lies your purpose.
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 3rd part of the book.
---------------------------------------------------------------------------------------
Part 3 Fusion of science and spirituality
17
People who are unable to understand perfectly both scripture and science far outnumber those who do understand them perfectly. The former glancing superficially through the scriptures, could easily arrogate to themselves the authority to decide upon every question of physics on the strength of some word which they have misunderstood, and which was consciously employed by the sacred authors for some different purpose. And the smaller number of understanding men could not dam up the furious torrent of such people. These people would gain the most followers, simply because it is much more pleasant to gain a reputation for wisdom without effort or study, than to consume oneself tirelessly in the most laborious disciplines.
18
To sense that behind everything that can be experienced there is something that our minds cannot grasp, whose beauty and sublimity reaches us only indirectly: that is religiousness. In this sense… I am a devoutly religious man.
- Albert Einstein from conclusion of ‘What I Believe’ , 1930
A religion is a system of symbols, which acts to establish powerful, pervasive, and long-lasting moods in men by formulating conceptions of a general order of existence and clothing those conceptions with such and aura of factuality that the moods and motivations seem uniquely realistic.
-American anthropologist Clifford Geertz
19We see what we want to see!
‘Faith’ is interpreted as being similar to ‘having working hypothesis’.
– Max Plank
It is a dangerous act of self-delusion if one attempts to get rid of an unpleasant moral obligation, by claiming the human action is the inevitable result of an inexorable law of nature.
Since we are totally connected with everything and every creature in this universe, it is most foolish for each of us to strive to better ourselves without regard to what happens to others.
20
The purpose of journey on this precious Earth is now to align our personalities with our souls. It is to create harmony, cooperation, sharing, and reverence for life. It is to grow spiritually. This is our new evolutionary pathway.
- Gary Zukav (Spiritual author and teacher)
Genes do not control life. It is the environment, and more specifically, our perception of the environment that controls gene activity. In the end, it comes down to a simple case of mind over matter in controlling the fate of our lives.
-Bruce Harold Lipton (American developmental Biologist) from his book “The Biology of Belief”
There are very dark forces trying hard to manipulate us into negativity.
-Bruce Harold Lipton (American developmental Biologist) from his book “The Biology of Belief”
One can live and work in this world as an awakened professional.
This chapter 20 also sheds light on how status quo of our own inner lives harms us. We denounce wisdom of others when it does not fit into our emotional framework. We choose to agree only with opinions of others who share our personal values and feelings...In this state of ignorance, we become subservient, we are at the mercy of the popular status quo.
21
Chapter 21 is more about Baruch Spinoza a Dutch philosopher and Hindu Vedaanta philosophy.
Reality is perfection. If circumstances are seen as unfortunate, it is only because of our inadequate conception of reality. …. The world as it exists look imperfect only because of our limited perception.
- Baruch Spinoza a Dutch philosopher
22
The deep emotional conviction of the presence of a superior reasoning power, which is revealed in the incomprehensible universe, form my idea of God.
- Albert Einstein
In daily life, we can reliably apply spiritual action at four levels - obedience, belief, understanding and knowledge. Each individual ... favour one specific level...based on his/her relative stage of spiritual practice.
1. Obedience as a type of spiritual action, is the relationship between word and action.
2. Beliefs are conclusions that we accept about our world. Our beliefs significantly comprises our sense of reality, ....how we perceive and feel about our world. ... They predispose us to expectations about outcome. When we imbibe beliefs in goodness... it gives us our trust and faith.
3. Understanding ...the mental seeing that results from the spiritual process of understanding.....
4. Knowledge Spiritual Knowledge expands and evolves as we identify with our spiritual principles, understand them, embody them, and allow them to be infinite.
Understanding and experience can work together to form knowledge.
23
Our prime purpose in this life is to help others. And if you cannot help them, at least do not hurt them.
- Dalai Lama
God sleeps in the minerals, awakens in plants, walks in animals and thinks in man.
- Arthur Middleton Young (Designer of first helicopter and writer)
You cannot pluck a little flower
Without the shaking of star.
- A poet
24
Where your talents and the needs of the world cross, there lies your purpose.
- Aristotle
Pre-Christian Greek philosopher and scientist
Transcendence - 1
Posted by
Manish Panchmatia
on Sunday, November 17, 2019
Labels:
BAPS,
Book,
Spiritual Science
/
Comments: (0)
Full article...>>
---------------------------------------------------------------------------------------Let me share some pearls of wisdom from a book.
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 1st part of the book.
---------------------------------------------------------------------------------------
Part 1 Experiencing the presence
Tolerance of others' view and opinions is essential in building teams and accomplishing tasks that are beyond the individuals' capacities.
1.
Srimad Bhagavad Gita defines renunciation in a unique way: "One must renounce not the performance of deeds, but renounce the desire for the fruits of those actions."
2.
When things go smoothly and fall into place, you have most likely made the right choices so that the right event could come into your life. When your decisions of efforts encounter resistance or roadblocks, seriously re-examine the choices you have made.
"Who I really am".... can only be revealed when the mind is quiet and no longer telling me who I am. When all the preconceptions about myself are stilled, what remains is who I really am: consciousness, awareness, stillness, presence, peace, love, and the Divine. You are that which is nameless and yet has been given a thousand names.
3.
Harmony makes small things grow, lack of it makes great things decay.
When you go to a place of worships, you pray for peace and prosperity, not only for yourself but also for everyone around you.
Sulah meaning peace and peacemaking in Arabic.
Sulah is also the root of the word Islah denoting development and improvement.
4.
It is easier to build strong children than to repair broken men
The empires of the future are the empires of the mind. Dream, dream, dream. Dreaming leads to thoughts. Thoughts lead to action.
"How can you mix spirituality and social service?"
Pramukh Swamiji asks, "How can you separate the two?"
5.
Success can only come to you by courageous devotion to the task in front of you... You will be remembered for creating the one page in the history of the nation - whether it is the page of invention, innovation, discovery or fighting injustice.
6.
The wise discipline themselves, the unwise discipline others
As long as there is the pull of gravity whatever you throw up is always going to come down. But once a rocket is out of the attraction of the Earth's gravity, it will not fall back and will escape into space. Likewise, as long as we are attracted and attached to
- the comforts of this body
- desires of the mind and
- the material world,
we are consigned to the cycle of births and deaths. There will be no escape. But as your wordly desires decreases, you transcend the pull of the world and eventually you connect to God.
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 1st part of the book.
---------------------------------------------------------------------------------------
Part 1 Experiencing the presence
Tolerance of others' view and opinions is essential in building teams and accomplishing tasks that are beyond the individuals' capacities.
- Dr. Brahma Prakash
1.
Srimad Bhagavad Gita defines renunciation in a unique way: "One must renounce not the performance of deeds, but renounce the desire for the fruits of those actions."
- Pramukh Swamiji
2.
When things go smoothly and fall into place, you have most likely made the right choices so that the right event could come into your life. When your decisions of efforts encounter resistance or roadblocks, seriously re-examine the choices you have made.
"Who I really am".... can only be revealed when the mind is quiet and no longer telling me who I am. When all the preconceptions about myself are stilled, what remains is who I really am: consciousness, awareness, stillness, presence, peace, love, and the Divine. You are that which is nameless and yet has been given a thousand names.
3.
Harmony makes small things grow, lack of it makes great things decay.
- Sallust
1st century BC Roman senator
When you go to a place of worships, you pray for peace and prosperity, not only for yourself but also for everyone around you.
Sulah meaning peace and peacemaking in Arabic.
Sulah is also the root of the word Islah denoting development and improvement.
4.
It is easier to build strong children than to repair broken men
- Frederick Douglass
19th Centaury African-American social reformer
The empires of the future are the empires of the mind. Dream, dream, dream. Dreaming leads to thoughts. Thoughts lead to action.
"How can you mix spirituality and social service?"
Pramukh Swamiji asks, "How can you separate the two?"
5.
Success can only come to you by courageous devotion to the task in front of you... You will be remembered for creating the one page in the history of the nation - whether it is the page of invention, innovation, discovery or fighting injustice.
- A.P.J. Abdul Kalam (in book 'Indomitable Spirit')
6.
The wise discipline themselves, the unwise discipline others
- Pramukh Swamiji
As long as there is the pull of gravity whatever you throw up is always going to come down. But once a rocket is out of the attraction of the Earth's gravity, it will not fall back and will escape into space. Likewise, as long as we are attracted and attached to
- the comforts of this body
- desires of the mind and
- the material world,
we are consigned to the cycle of births and deaths. There will be no escape. But as your wordly desires decreases, you transcend the pull of the world and eventually you connect to God.
- Pramukh Swamiji
Transcendence - 2
---------------------------------------------------------------------------------------Let me share some pearls of wisdom from a book.
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 2nd part of the book.
---------------------------------------------------------------------------------------
Part 2 Spirituality in Action
9.
Appearance is a glimpse of the unseen
A temple is the physical manifestation of the unseen
Do not confuse excellence with perfection. Excellence man can reach, but perfection is God's work.
10.
Courage is not absence of fear, but the triumph over it. The brave man is not be who does not feel afraid, but he who conquers the fear.
To overcome fear by forgiving through faith.
11.
If you surround yourself with good and righteous, they can only raise you up.
If you surround yourself with ordinary, they will drag you down into the pessimism of mediocrity, and they will keep you there, but only as long as you permit it.
Youth needs a wisdom.
Youth needs a vision.
Youth needs credible guidance
and above youth needs an example.
Great minds give all three.
The vision of a prosperous and peaceful humanity.
guidance through the idea of great institutions like BAPS
and the example of impeccable service
are beacons of that guide souls from drifting and foundering
however deep and dark the turbulent sea.
Where there is faith, there is love
Where there is love, there is peace
Where there is peace, there is God
And where there is God, there is no need.
12.
If you are irritated by every run, how will your mirror be polished?
Where there is righteousness in the heart,
There is beauty in the character.
When there is beauty in the character,
There is harmony in the home.
When there is harmony in the home,
There is order in the nation.
When there is order in the nation,
There is peace in the world.
13.
We cannot teach people anything; we can only help them discover it within themselves.
Human brain
* 2% of body weight
* receives 15% of cardiac power
* 20 % of total body consumption
* 25 % of total body glucose utilization
15.
If you talk to a man in a language he has learned in school, it goes to his head. If you talk to him in a lanugage he has heard from his mother, it goes to his heart
If I have a beautiful mind, I will have beautiful thoughts
If I have a beautiful thoughts, I will have beautiful life
If I have a beautiful life, I will become a great soul like Pramukh Swamiji
Confidence leads to creativity
Creativity leads to knowledge
Knowledge leads to thinking
Thinking makes on great.
Every time we smile angel wins and every time we sulk Satan wins
Transcendence
My Spiritual Experiences with Pramukh Swamiji
by A.P.J. Abdul Kalam
with Arun Tiwari.
This is not a book review.
This article is just like
'key take away points' for me.
The book is divided in 4 parts. This article covers 2nd part of the book.
---------------------------------------------------------------------------------------
Part 2 Spirituality in Action
9.
Appearance is a glimpse of the unseen
- Anaxagora
Pre-Socratic Greek Philosopher
A temple is the physical manifestation of the unseen
- Pramukh Swami Maharaj
Do not confuse excellence with perfection. Excellence man can reach, but perfection is God's work.
- Pramukh Swami Maharaj
10.
Courage is not absence of fear, but the triumph over it. The brave man is not be who does not feel afraid, but he who conquers the fear.
-Nelson Mandela
To overcome fear by forgiving through faith.
- Pramukh Swami Maharaj
11.
If you surround yourself with good and righteous, they can only raise you up.
If you surround yourself with ordinary, they will drag you down into the pessimism of mediocrity, and they will keep you there, but only as long as you permit it.
- father of A.P.J. Abdul Kalam.
Youth needs a wisdom.
Youth needs a vision.
Youth needs credible guidance
and above youth needs an example.
Great minds give all three.
The vision of a prosperous and peaceful humanity.
guidance through the idea of great institutions like BAPS
and the example of impeccable service
are beacons of that guide souls from drifting and foundering
however deep and dark the turbulent sea.
Where there is faith, there is love
Where there is love, there is peace
Where there is peace, there is God
And where there is God, there is no need.
- Leo Tolstoy
in book "The Kingdom of God Is Within You"
12.
If you are irritated by every run, how will your mirror be polished?
- Rumi
13th Century Persian poet
Where there is righteousness in the heart,
There is beauty in the character.
When there is beauty in the character,
There is harmony in the home.
When there is harmony in the home,
There is order in the nation.
When there is order in the nation,
There is peace in the world.
13.
We cannot teach people anything; we can only help them discover it within themselves.
-Galileo Galilei
16th century Italian philosopher.
Human brain
* 2% of body weight
* receives 15% of cardiac power
* 20 % of total body consumption
* 25 % of total body glucose utilization
15.
If you talk to a man in a language he has learned in school, it goes to his head. If you talk to him in a lanugage he has heard from his mother, it goes to his heart
-Nelson Mandela
If I have a beautiful mind, I will have beautiful thoughts
If I have a beautiful thoughts, I will have beautiful life
If I have a beautiful life, I will become a great soul like Pramukh Swamiji
Confidence leads to creativity
Creativity leads to knowledge
Knowledge leads to thinking
Thinking makes on great.
Every time we smile angel wins and every time we sulk Satan wins