Case Wylie cmwylie19

Keybase proof

I hereby claim:

I am cmwylie19 on github.
I am cmwylie19 (https://keybase.io/cmwylie19) on keybase.
I have a public key ASDGJ04T0MCyz9rzIMD6FmYjHh9Nc3vE_QFDgoKfXAXwjAo

To claim this, I am signing this object:

Understanding SecurityContexts

Pods and Containers both have security contexts. These contexts dictate the behavior of what the object is allowed to do.

Demo

Create a cluster where we simulate UDS Core or a K8s offering from a major cloud provider (control plane off limits)

k3d cluster create security-context-demo --k3s-arg '--kube-apiserver-arg=enable-admission-plugins=PodSecurity@server:*'

Scraping Pepr Metrics with Prometheus Operator

In release v0.34.0 Pepr will release Informer Metrics. This gist will give you a quick and dirty (non-production) way of trying out the Prometheus Operator to scrape Pepr metrics.

prereqs
Install Prometheus Operator
Install Pepr Module
Interact with the Metrics

Prereqs

Migration Test

This test is to ensure you can migrate test keys from one pepr version to the next and that the new version can read the old keys. It should work with multple capabilities like UDS Core.

MIG

Create a module using the existing Pepr Version with pepr and one capabilities.

pepr:

Optimizing Kubernetes Operators and Admission Control with Pepr

The format to run this workshop is phase by phase, moving on after each activity is complete. The markdown has a corresponding repo where each phase has a corresponding branch. If you ever get stuck you can peek at the repo.

	apiVersion: v1
	data:
	enhanced-metrics.json: \|
	{
	"title": "Enhanced Network Metrics Dashboard",
	"editable": true,
	"refresh": "10s",
	"time": { "from": "now-1h", "to": "now" },
	"templating": {
	"list": [

	apiVersion: apiextensions.k8s.io/v1
	kind: CustomResourceDefinition
	metadata:
	name: webapps.pepr.io
	spec:
	group: pepr.io
	versions:
	- name: v1alpha1
	served: true
	storage: true

	const fs = require('fs');
	import { K8s } from "kubernetes-fluent-client"
	import { GenericKind, RegisterKind } from "kubernetes-fluent-client";

	class PeprStore extends GenericKind {
	declare data: {
	[key: string]: string;
	};
	}

	in UDS-Core
	- packages

	uds run create-standard-package
	uds run create:k3d-standard-bundle
	uds dev-setup

	apiVersion: v1
	kind: ServiceAccount
	metadata:
	name: watch-recycle-sa
	namespace: pepr-system
	---
	kind: Role
	apiVersion: rbac.authorization.k8s.io/v1
	metadata:
	namespace: pepr-system