curtis ccollicutt

I'm building stuff! Security stuff. AI stuff. Infra stuff. Python stuff. Golang stuff. Template stuff!

ccollicutt / kubernetes_commands.md

Created September 26, 2018 17:24 — forked from edsiper/kubernetes_commands.md

Kubernetes Useful Commands

Kubernetes Commands

Helper setup to edit .yaml files with Vim:

List of general purpose commands for Kubernetes management:

ccollicutt / kubedingdong.md

Created September 27, 2018 18:59 — forked from herpiko/kubedingdong.md

Kubernetes notes for CKA exam preparation 💪

This notes applied to Kubernetes version 1.9.1-00 on Ubuntu Xenial.

TO BE WRITTEN

ccollicutt / ISTIO 1.4 on PKS with PSPs.md

Created December 6, 2019 18:42 — forked from svrc/ISTIO 1.4 on PKS with PSPs.md

Installing Istio 1.4 on PKS with restrictive Pod Security Policy

Shows you how to use Istio 1.4 on Kubernetes 1.14+ with a modicum of runtime security for your workloads.
Specifically it installs Istio with CNI support, and allows the use of restrictive PodSecurityPolicies for your workloads.
It is designed for VMware PKS, but doesn't require it ... (just change the CNI bin dir and excluded namespaces in values-cni.yml, also swap the ClusterRole pks-privileged and pks-restricted mentioned throughout these files with your own PSP roles).
It doesn't fix the need for Istio itself to run as root, but that should be fixed in a future Istio release as it's already fixed in trunk.