Alxandr

! BGP
router bgp 65002
  no bgp default ipv4-unicast
  bgp router-id 192.168.30.1
  bgp fast-convergence
  !
  ! Peer group for Talos nodes
  neighbor talos peer-group
  neighbor talos remote-as 65001
  neighbor talos soft-reconfiguration inbound

Alxandr

10:46:54.735144 eth0  In  IP 10.239.0.186.38204 > ca1.lab.internal.https: Flags [S], seq 1018524152, win 62370, options [mss 8910,sackOK,TS val 2452454125 ecr 0,nop,wscale 7], length 0
10:46:54.735169 eth0  Out IP ca1.lab.internal.https > 10.239.0.186.38204: Flags [S.], seq 1677770166, ack 1018524153, win 65160, options [mss 1460,sackOK,TS val 3359833327 ecr 2452454125,nop,wscale 7], length 0
10:46:55.742061 eth0  Out IP ca1.lab.internal.https > 10.239.0.186.38204: Flags [S.], seq 1677770166, ack 1018524153, win 65160, options [mss 1460,sackOK,TS val 3359834334 ecr 2452454125,nop,wscale 7], length 0
10:46:55.759282 eth0  In  IP 10.239.0.186.38204 > ca1.lab.internal.https: Flags [S], seq 1018524152, win 62370, options [mss 8910,sackOK,TS val 2452455149 ecr 0,nop,wscale 7], length 0
10:46:55.759293 eth0  Out IP ca1.lab.internal.https > 10.239.0.186.38204: Flags [S.], seq 1677770166, ack 1018524153, win 65160, options [mss 1460,sackOK,TS val 3359834351 ecr 2452454125,nop,wscale 7], length 0
10:46:56.783090 eth0 

Alxandr

#!/bin/env bash

set -euo pipefail
shopt -s nullglob

rm -rf tmp
mkdir -p tmp

common_patches=(05-talos/patches/common/*.yaml)
controlplane_patches=(05-talos/patches/controlplane/*.yaml)

Alxandr

apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
  name: cilium
  namespace: flux-system
spec:
  interval: 10m
  timeout: 5m
  chart:
    spec:

Alxandr

# 
# cilium-dbg bgp route-policies
VRouter   Policy Name                        Type     Match Peers       Match Families   Match Prefixes (Min..Max Len)   RIB Action   Path Actions
65001     allow-local                        import                                                                      accept                                                               
65001     cloud-gateway-fiber-ipv4-PodCIDR   export   192.168.30.1/32                    10.239.1.0/24 (24..24)          accept       {SetLocalPreference: 99} {AddCommunities: [65001:99]}   

Alxandr

-- for posterity
with worst as (
select era.to_party, count(*) as sub_unit_count
from register.external_role_assignment era 
where era."source" = 'ccr'
  and (era.identifier = 'ikke-naeringsdrivende-hovedenhet' OR era.identifier = 'hovedenhet')
group by era.to_party
)
select p.uuid, p."organization_identifier", p.id, w.sub_unit_count
from worst w

Alxandr

I (24) boot: chip revision: v0.1
I (27) boot.esp32c6: SPI Speed      : 40MHz
I (32) boot.esp32c6: SPI Mode       : DIO
I (36) boot.esp32c6: SPI Flash Size : 4MB
I (41) boot: Enabling RNG early entropy source...
I (47) boot: Partition Table:
I (50) boot: ## Label            Usage          Type ST Offset   Length
I (57) boot:  0 nvs              WiFi data        01 02 00009000 00006000
I (65) boot:  1 phy_init         RF data          01 01 0000f000 00001000
I (72) boot:  2 factory          factory app      00 00 00010000 003f0000

Alxandr

{
  description = "A very basic flake";

  nixConfig = {
    extra-substituters = [ "https://om.cachix.org" ];
    extra-trusted-public-keys = [ "om.cachix.org-1:ifal/RLZJKN4sbpScyPGqJ2+appCslzu7ZZF/C01f2Q=" ];
  };

  inputs = {
    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";

Alxandr

-- include: party,person,org,org.subunits,user
-- filter: party-id,party-uuid,person-identifier,organization-identifier,user-id,multiple

WITH uuids_by_party_uuid AS (
    SELECT party."uuid", party.version_id
    FROM register.party AS party
    WHERE party."uuid" = ANY (@partyUuids)
),
uuids_by_party_id AS (
    SELECT party."uuid", party.version_id

Alxandr

with uuids_by_party_id as (
	select p."uuid"
	from register.party p
	where p.id = any (:partyids)
), uuids_by_user_id as (
	select u."uuid"
	from register."user" u
	where u.user_id = any (:userids)
), uuids as (
	select "uuid"