gserrano

echo -n $'\E[31m'
echo '                                 -hNNNNNNNNNNNNNNNNNNNNNNNNmdo`                                     '
echo '                               .hNNNNNNNNNNNNNNNNNNNNNNNNNNNNNms..                                  '
echo '                              `mNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNmm-                                 '
echo '                             /dNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNms`                               '
echo '                           .hNNNNNNmmdmmNmmmmdNdyo+sdmNNNNNNNNNNNNNNh.                              '
echo '                          `hNNNNdo:--...-....::.....--:/sdNNNNNNNNNNmo.                             '
echo '                         `hNNNNs----.````````````````..---yNNNNNNNNNNNy`                            '
echo '                         yNNmm+-----.`````````````````..---/ymNNNNNNNNNh`                           '
echo '                        :NNNN+----..``````````````````....--:hmNNNNNNNNN+                           '

unguiculus

#!/usr/bin/env bash

set -e
set -o pipefail

kubectl proxy &
proxy_pid="$!"
trap 'kill "$proxy_pid"' EXIT

for ns in $(kubectl get namespace --field-selector=status.phase=Terminating --output=jsonpath="{.items[*].metadata.name}"); do

hoegaarden

Running

# using defaults:
#   BOARDS: sig-release-master-blocking sig-release-master-upgrade
#   STATES: FAILING
./shot.sh

saschagrunert

FROM debian:10

RUN apt-get update && apt-get install -y wget gnupg
RUN echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_10/ /' \
    > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
RUN wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_10/Release.key -O- |\
    apt-key add -

RUN apt-get update && apt-get install -y podman
RUN sed -i 's/driver = ""/driver = "vfs"/' /etc/containers/storage.conf

jimangel

Enable auditing on KinD

TODO

• Use a webhook vs. file backend (maybe cloudrun?)
• This might only be possible if Docker is running as root - need to test

Config

Make a temporary directory to host files to be mounted in KinD.

saschagrunert

#!/usr/bin/env bash
set -euox pipefail

TAG=v1.26.0-rc.1
URL=https://dl.k8s.io/release/$TAG/bin/linux/amd64
BIN=kubectl

for EXT in "" .sig .cert; do
    FILE=$BIN$EXT
    curl -sSfL --retry 3 --retry-delay 3 $URL/$FILE -o $FILE