Docker's Remote API can be secured via TLS and client certificate verification.
First of all you need a few certificates and keys:
- CA certificate
- Server certificate
- Server key
- Client certificate
- Client key
Expose Kubernetes ClusterIP services with inlets.dev
# Linux
sudo curl -Lo /usr/local/bin/kind \| # Install Homebrew | |
| /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" | |
| # Install QEMU OSX port with ARM support | |
| brew install qemu | |
| export QEMU=$(which qemu-system-arm) | |
| # Dowload kernel and export location | |
| brew install wget | |
| wget https://github.com/dhruvvyas90/qemu-rpi-kernel/raw/master/kernel-qemu-4.4.34-jessie |
| # Install Homebrew | |
| /usr/bin/ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" | |
| # Install QEMU OSX port with ARM support | |
| brew install qemu | |
| export QEMU=$(which qemu-system-arm) | |
| # Dowload kernel and export location | |
| brew install wget | |
| wget https://github.com/dhruvvyas90/qemu-rpi-kernel/raw/master/kernel-qemu-4.4.34-jessie |
| apiVersion: v1 | |
| kind: ConfigMap | |
| metadata: | |
| name: fluent-bit-config | |
| namespace: tanzu-system-logging | |
| labels: | |
| k8s-app: fluent-bit | |
| data: | |
| # Configuration files: server, input, filters and output | |
| # ====================================================== |
| ############################################################################## | |
| # History Configuration | |
| ############################################################################## | |
| HISTSIZE=5000 #How many lines of history to keep in memory | |
| HISTFILE=~/.zsh_history #Where to save history to disk | |
| SAVEHIST=5000 #Number of history entries to save to disk | |
| #HISTDUP=erase #Erase duplicates in the history file | |
| setopt appendhistory #Append history to the history file (no overwriting) | |
| setopt sharehistory #Share history across terminals | |
| setopt incappendhistory #Immediately append to the history file, not just when a term is killed |
| Put this in your `local-configure.yml` file, add as many users as you need: | |
| users: | |
| - name: fulvio | |
| sudoer: yes | |
| auth_key: ssh-rsa blahblahblahsomekey this is actually the public key in cleartext | |
| - name: plone_buildout | |
| group: plone_group | |
| sudoer: no | |
| auth_key: ssh-rsa blahblahblah ansible-generated on default |