Cheyi Lin CheyiLin

Information in this Gist originally from this github issue, which is outdated.

As @RomanMinkin mentioned, you can also consider Casbin (https://github.com/casbin/casbin). It is the most starred authorization library in Golang. There are several differences between Casbin and OPA.

Feature	Casbin	OPA
Library or service?	Library/Service	Library/Service
How to write policy?	Two parts: model and policy. Model is general authorization logic. Policy is concrete policy rule.	A single part: Rego
RBAC hierarchy	Casbin supports role hierarchy (a role can have a sub-role)	Role hierarchies can be encoded in data. Also with the new `graph.reachable()` built-in function queries over those hierarchies are much more feasible now.
RBAC separation of duties	Not supported	Supported: two roles cannot be assigned together

AWS CNI plugin is now merged with kops: kubernetes/kops#3997. This gist explains how to build kops, create a Kubernetes cluster using correct --networking option, and then test it.

Build kops

export GOPATH=`pwd`
mkdir src/k8s.io; cd src/k8s.io
git clone [email protected]:kubernetes/kops.git
cd kops
export S3_BUCKET_NAME=<some bucket you own>

| Title | Description

Disable Device Enrollment Notification on Mac.md

Restart the Mac in Recovery Mode by holding `Comment-R` during restart

Open Terminal in the recovery screen and type

csrutil disable

Nginx FastCGI response buffer sizes

By default when Nginx starts receiving a response from a FastCGI backend (such as PHP-FPM) it will buffer the response in memory before delivering it to the client. Any response larger than the set buffer size is saved to a temporary file on disk.

This process is outlined at the Nginx ngx_http_fastcgi_module page manual page.

Introduction
Determine actual FastCGI response sizes
Setting the buffer size
Verifying results

	package main

	import (
	"github.com/aws/aws-sdk-go/aws"
	"github.com/aws/aws-sdk-go/aws/session"
	"github.com/aws/aws-sdk-go/service/sqs"

	"fmt"
	)

	$win_user = "ipc"
	$linux_user = "ipc"
	$package = "CanonicalGroupLimited.Ubuntu18.04onWindows_79rhkp1fndgsc"
	$base_path = "C:\Users\" + $win_user + "\AppData\Local\Packages\" + $package + "\LocalState\rootfs"
	$dirs = @("\bin", "\sbin", "\usr\bin", "\usr\sbin", "\home\" + $linux_user + "\.cargo\bin")
	$dirs \| ForEach { Add-MpPreference -ExclusionProcess ($base_path + $_ + "\*") }
	Add-MpPreference -ExclusionPath $base_path

	- Open Automator
	- File -> New -> Service
	- Change "Service Receives" to "files or folders" in "Finder"
	- Add a "Run Shell Script" action
	- Change "Pass input" to "as arguments"
	- Paste the following in the shell script box: open -n -b "com.microsoft.VSCode" --args "$*"
	- Save it as something like "Open in Visual Studio Code"

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	###

	#!/bin/sh
	#
	# consul - this script manages the consul agent
	#
	# chkconfig: 345 95 05
	# processname: consul

	### BEGIN INIT INFO
	# Provides: consul
	# Required-Start: $local_fs $network