dallasmarlow

{
    "Statement": [
        {
            "Action": [
                "eks:UpdateClusterVersion",
                "eks:UpdateClusterConfig",
                "eks:UntagResource",
                "eks:TagResource",
                "eks:ListClusters",
                "eks:DescribeCluster",

dallasmarlow

package main

import (
	"crypto/sha1"
	"crypto/tls"
	"crypto/x509"
	"errors"
	"flag"
	"fmt"
	"log"

dallasmarlow

resource "kubernetes_manifest" "eks_console_role" {
  manifest = {
    apiVersion = "rbac.authorization.k8s.io/v1"
    kind = "ClusterRole"
    metadata = {
      name = "eks-console"
    }
    rules = [
      {
        "apiGroups" = [

dallasmarlow

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: eks-console
rules:
  - apiGroups:
      - ""
    resources:
      - nodes

dallasmarlow

import os
import boto3

BATCH_SIZE = 25
REGION = 'us-west-2'
SRC_TABLE = os.environ['SRC']
SNK_TABLE = os.environ['SNK']

client = boto3.client('dynamodb', REGION)
tables = client.list_tables()['TableNames']

dallasmarlow

#!/usr/bin/env fish

source ../include/env.fish
source ../include/build_and_push.fish

dallasmarlow

.DEFAULT_GOAL := push
DIR = $(shell pwd)
MAKEFLAGS += --no-builtin-rules
MAKEFLAGS += --no-builtin-variables

base_img := debian:buster-slim
img := abc

build: pull
	docker build -t ${img} .

dallasmarlow

#!/usr/bin/env bash
set -e
REMOTE_CHARTS=(
	"https://aws.github.io/eks-charts/|eks|aws-load-balancer-controller|1.1.0"
	"https://kubernetes.github.io/dashboard/|kubernetes-dashboard|kubernetes-dashboard|3.0.0"
)
S3_BUCKET=$(terraform output s3_bucket_helm_repo)

if [[ ! -d "./charts" ]]; then
	mkdir charts

dallasmarlow

data "aws_iam_policy_document" "helm_repo_bucket_policy" {
	statement {
		actions = [
			"s3:*",
		]
		condition {
			test = "NotIpAddress"
			variable = "aws:SourceIp"
			values = [
				var.remote_network,

dallasmarlow

---
apiVersion: v1
kind: Secret
metadata:
  namespace: pypicloud
  name: pypicloud
type: Opaque
stringData:
  config.ini: |
    [app:main]