ada mancini adamancini

Instrumented Calico VXLAN test procedure

Prerequisites

root access is required
make sure you are using a sufficiently new tcpdump version that supports the -T flag. This is the version I used for testing:

root@ada-ec-1:/home/ada# tcpdump --version
tcpdump version 4.99.1
libpcap version 1.10.1 (with TPACKET_V3)

Brew Bundle Brewfile Tips

Copyright & License

Unless otherwise noted (either in this file or in a file's copyright section) the contents of this gist are Copyright ©️2020 by Christopher Allen, and are shared under spdx:Creative Commons Attribution Share Alike 4.0 International (CC-BY-SA-4.) open-source license.

Sponsor

If you more tips and advice like these, you can become a monthly patron on my GitHub Sponsor Page for as little as $5 a month; and your contributions will be multipled, as GitHub is matching the first $5,000! This gist is all about Homebrew, so if you like it you can support it by donating to them or becoming one of their Github Sponsors.

Create user CSR

openssl genrsa -out user1.key 2048
openssl req -new -key user1.key -out user1.csr

Approve CSR

openssl x509 -req -in user1.csr -CA /etc/kubernetes/pki/ca.crt -CAkey /etc/kubernetes/pki/ca.key -CAcreateserial -out user1.crt -days 500

	...
	spec:
	contatiners:
	- env:
	- name: REQUESTS_CA_BUNDLE
	value: /opt/cert/bundle.pem
	volumeMounts:
	- mountPath: /opt/cert
	name: custom-cert
	subPath: cert


	apiVersion: v1
	kind: Deployment
	metadata:
	name: my-pod
	spec:
	containers:
	- name: my-app
	image: my-image
	volumeMounts:

	---
	apiVersion: apps/v1
	kind: DaemonSet
	metadata:
	name: netshoot
	labels:
	app: netshoot
	spec:
	updateStrategy:
	type: RollingUpdate

	apiVersion: "cluster.kurl.sh/v1beta1"
	kind: "Installer"
	metadata:
	name: "patch"
	spec:
	firewalldConfig:
	firewalld: enabled
	firewalldCmds:
	- ["--permanent", "--add-port=22/tcp"]
	- ["--zone=home", "--change-interface=eth0"]

	apiVersion: "cluster.kurl.sh/v1beta1"
	kind: "Installer"
	metadata:
	name: "patch"
	spec:
	kotsadm:
	version: "1.104.5"

	#!/bin/bash

	set -e

	bail() {
	printf "${RED}$1${NC}\n" 1>&2
	exit 1
	}

	function registry_pki_secret() {