This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
@(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & exit /b | |
#:: just copy-paste into powershell - it's a standalone hybrid script | |
sp 'HKCU:\Volatile Environment' 'Edge_Removal' @' | |
$also_remove_webview = 1 | |
## why also remove webview? because it is 2 copies of edge, not a slimmed down CEF, and is driving bloated web apps | |
$also_remove_widgets = 1 | |
## why also remove widgets? because it is a webview glorified ad portal on msn and bing news cathering to stupid people | |
$also_remove_xsocial = 1 | |
## why also remove xsocial? because it starts webview setup every boot - xbox gamebar will still work without the social crap |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
diff --git a/cmd/kubeadm/app/cmd/join.go b/cmd/kubeadm/app/cmd/join.go | |
index 8487bd5aba4..3c8808139a0 100644 | |
--- a/cmd/kubeadm/app/cmd/join.go | |
+++ b/cmd/kubeadm/app/cmd/join.go | |
@@ -481,6 +481,13 @@ func (j *joinData) InitCfg() (*kubeadmapi.InitConfiguration, error) { | |
return nil, err | |
} | |
klog.V(1).Infoln("[preflight] Fetching init configuration") | |
+ | |
+ for _, el := range j.tlsBootstrapCfg.Clusters { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Temporarily add a normal upstream DNS resolver | |
/ip dns set servers=1.1.1.1,1.0.0.1 | |
# CA certificates extracted from Mozilla | |
/tool fetch url=https://curl.se/ca/cacert.pem | |
# Import the downloaded ca-store (127 certificates) | |
/certificate import file-name=cacert.pem passphrase="" | |
# Set the DoH resolver to cloudflare |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
- name: integrate gitlab instance with k8s | |
hosts: kube-master[0] | |
gather_facts: no | |
tasks: | |
- apt: | |
name: | |
- python-pip | |
- python-setuptools |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash -xe | |
apt-get install iptables{,-persistent} | |
iptables -N node-exporter | |
iptables -A node-exporter -s 1.1.1.1 -j ACCEPT | |
iptables -A node-exporter -s 1.0.0.1 -j ACCEPT | |
iptables -A node-exporter -s 8.8.8.8 -j ACCEPT | |
iptables -A node-exporter -s 127.0.0.0/8 -j ACCEPT | |
iptables -A node-exporter -j REJECT |
Tested on kube-sigs/kubespray commit a923f4e7c0692229c442b07a531bfb5fc41a23f9.
- Add
enable-endpoint-routes: "true"
at EOFkubespray/roles/network_plugin/cilium/templates/cilium-config.yml.j2
- Modify kubespray inventory
group_vars/k8s-cluster/k8s-net-cilium.yml
cilium_auto_direct_node_routes: true
cilium_native_routing_cidr: 10.10.2.0/24
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package main | |
import ( | |
"context" | |
"fmt" | |
"io" | |
"log" | |
"encoding/json" | |
"github.com/docker/docker/api/types" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash -xec | |
export DOMAIN= | |
rm -rf /etc/nginx/client_ssl | |
mkdir -p /etc/nginx/client_ssl | |
cd /etc/nginx/client_ssl | |
openssl req -new -newkey rsa:2048 -nodes -keyout ca.key -sha256 -x509 -days 3650 -subj "/CN=${DOMAIN}" -out ca.crt |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/bin/bash -xe | |
apt-get install -yq md5deep wget fakeroot | |
[ -z "${GO_VERSION}" ] && GO_VERSION=1.17 | |
mkdir -p /tmp/golang/{DEBIAN,usr/local} | |
cd /tmp/golang/ | |
wget https://dl.google.com/go/go${GO_VERSION}.linux-amd64.tar.gz |
NewerOlder