ams0

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: dashboard-viewonly
rules:
- apiGroups:
  - ""
  resources:
  - configmaps

ams0

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: docker-root
spec:
  selector:
    matchLabels:
      name: docker-root
  template:
    metadata:

ams0

#!/bin/bash
$saname=$1

k create sa $saname


#works on Mac OS X
server=`kubectl cluster-info | sed $'s,\x1b\\[[0-9;]*[a-zA-Z],,g'| grep master | awk '{print $6}'`

name=`kubectl get secret | grep $saname|awk '{print $1}'`

ams0

apiVersion: v1
kind: Secret
metadata:
  name: kiali
  namespace: istio-system
  labels:
    app: kiali
type: Opaque
data:
  username: YWRtaW4=

ams0

#Istio demo #https://docs.microsoft.com/en-us/azure/aks/istio-scenario-routing

https://docs.microsoft.com/en-us/azure/aks/istio-install

ISTIO_VERSION=1.0.4
curl -sL "https://github.com/istio/istio/releases/download/$ISTIO_VERSION/istio-$ISTIO_VERSION-osx.tar.gz" | tar xz
cd istio-\$ISTIO_VERSION

ams0

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: apt-get-install
spec:
  selector:
    matchLabels:
      name: apt-get-install 
  template:
    metadata:

ams0

PSP are evaluated only when a pod is created directly; when a Deployment or a Daemonset creates a pod, does so using the default serviceaccount of that namespace. Thus, you need to give that SA (or a purposefully create SA) a binding to the appropriate PSP.

ams0

apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
  name: istio-init-psp
spec:
  privileged: true
  allowPrivilegeEscalation: true
  allowedCapabilities:
  - '*'
  volumes:

ams0

#https://github.com/Hyperfish/vsts-build.git

# values.yaml
vsts:
  enabled: true
  repository: microsoft/vsts-agent
  tag: "ubuntu-16.04-docker-18.06.1-ce-standard"
 replicaCount: 2

ams0

alias h3='helm3'

#I can only make it work in kube-system
kubectl config set-context $(kubectl config current-context) --namespace=kube-system

#to be replaced with helm?
kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.8/deploy/manifests/00-crds.yaml

h3 upgrade --install cert-manager \
--version v0.8.0 jetstack/cert-manager \