Skip to content

Instantly share code, notes, and snippets.

@dmilan77
dmilan77 / restricted-psp.yaml
Created January 10, 2021 11:34 — forked from tallclair/restricted-psp.yaml
Restricted PodSecurityPolicy
apiVersion: extensions/v1beta1
kind: PodSecurityPolicy
metadata:
name: restricted
annotations:
seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
spec:
@dmilan77
dmilan77 / 1__RBAC_EKS.md
Last active August 12, 2019 12:03
1__RBAC_EKS

Create a Cluster

eksctl create cluster --region=us-east-1 --node-type=t2.medium --tags environment=testing --ssh-access  --ssh-public-key=mdasadmin-key-01 --region=us-east-1 --zones=us-east-1a,us-east-1b,us-east-1c
kubectl get configmap --all-namespaces
kubectl edit cm/aws-auth -n kube-system

@dmilan77
dmilan77 / 2c. Bonus Lab.md
Created August 7, 2019 19:48
2c. Bonus Lab
export PROJECT_DIR=~/project/kubeatl/kubelab
mkdir -p ${PROJECT_DIR}
cd ${PROJECT_DIR}
git clone https://github.com/dmilan77/kubernetes-engine-samples.git
cd ${PROJECT_DIR}/kubernetes-engine-samples/guestbook
cd ${PROJECT_DIR}/kubernetes-engine-samples/guestbook
kubectl apply -f redis-master-controller.yaml
kubectl apply -f redis-master-service.yaml
kubectl apply -f redis-slave-controller.yaml
@dmilan77
dmilan77 / 2a. Docker Lab.md
Last active August 7, 2019 23:12
2a. Docker Lab

Test your docker setup

docker run hello-world

You should see an output "Hello from Docker"

$ docker run hello-world
@dmilan77
dmilan77 / 2. Zero Labs.md
Last active August 8, 2019 11:10
2b. Kubernetes Labs

Inspect the cluster

kubectl config view
kubectl cluster-info

Create your first pod and expose**

@dmilan77
dmilan77 / 1. Installations.md
Last active August 7, 2019 23:18
1. Installations

Monolith

The Monolithic Ball of Mud

  • The Ball Of Mud represents the worst case scenario for a Monolith. Also called as Spaghetti Code.
  • No clear isolation in the application.
  • Complex dependencies where everything depends on every other thing.
  • Hard to understand and harder to modify.

Cleaning Up The Ball Of Mud

  • To clean up the ball of mud we introduce isolation into the application by dividing the application along clear domain boundaries.
  • We introduce packages and libraries that help isolate related pieces of code. They provide a clean and consistent interface.
@dmilan77
dmilan77 / blockstack.txt
Created March 10, 2018 13:54
First gist
Verifying my Blockstack ID is secured with the address 1MEv3FKnKBT2PPyBBkx82y7hTb4XLSZCqT https://explorer.blockstack.org/address/1MEv3FKnKBT2PPyBBkx82y7hTb4XLSZCqT