adamancini

---
apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: csi-driver-nfs
  namespace: flux-system
spec:
  interval: 24h
  url: https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
---

adamancini

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: cluster-wildcard-cert
  namespace: default
spec:
  secretName: cluster-wildcard-cert
  issuerRef:
    name: <issuer-name>

adamancini

kubectl get rolebindings,clusterrolebindings \
  --all-namespaces  \
  -o custom-columns='KIND:kind,NAMESPACE:metadata.namespace,NAME:metadata.name,SERVICE_ACCOUNTS:subjects[?(@.kind=="ServiceAccount")].name'

adamancini

FROM golang:alpine AS build-stage
WORKDIR /app
COPY * /app
RUN go build .

FROM golang:alpine AS run-stage
COPY --from=build-stage /app/fedilogger /app/fedilogger
CMD ["/app/fedilogger"]

adamancini

...
spec:
  contatiners:
  - env:
    - name: REQUESTS_CA_BUNDLE 
      value: /opt/cert/bundle.pem
    volumeMounts:
    - mountPath: /opt/cert
      name: custom-cert
      subPath: cert

adamancini

apiVersion: v1
kind: Deployment
metadata:
  name: my-pod
spec:
  containers:
  - name: my-app
    image: my-image
    volumeMounts:

adamancini

---
apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: netshoot
  labels:
    app: netshoot
spec:
  updateStrategy:
    type: RollingUpdate

adamancini

Instrumented Calico VXLAN test procedure 

Prerequisites

• root access is required
• make sure you are using a sufficiently new tcpdump version that supports the -T flag.  This is the version I used for testing:

root@ada-ec-1:/home/ada# tcpdump --version
tcpdump version 4.99.1
libpcap version 1.10.1 (with TPACKET_V3)

adamancini

Brew Bundle Brewfile Tips

Copyright & License

Unless otherwise noted (either in this file or in a file's copyright section) the contents of this gist are Copyright ©️2020 by Christopher Allen, and are shared under spdx:Creative Commons Attribution Share Alike 4.0 International (CC-BY-SA-4.) open-source license.

Sponsor

If you more tips and advice like these, you can become a monthly patron on my GitHub Sponsor Page for as little as $5 a month; and your contributions will be multipled, as GitHub is matching the first $5,000! This gist is all about Homebrew, so if you like it you can support it by donating to them or becoming one of their Github Sponsors.

adamancini

  apiVersion: "cluster.kurl.sh/v1beta1"
  kind: "Installer"
  metadata:
    name: "patch"
  spec:
    firewalldConfig:
      firewalld: enabled
      firewalldCmds:
        - ["--permanent", "--add-port=22/tcp"]
        - ["--zone=home", "--change-interface=eth0"]