| #!/bin/bash -xec | |
| export DOMAIN= | |
| rm -rf /etc/nginx/client_ssl | |
| mkdir -p /etc/nginx/client_ssl | |
| cd /etc/nginx/client_ssl | |
| openssl req -new -newkey rsa:2048 -nodes -keyout ca.key -sha256 -x509 -days 3650 -subj "/CN=${DOMAIN}" -out ca.crt |
| package main | |
| import ( | |
| "context" | |
| "fmt" | |
| "io" | |
| "log" | |
| "encoding/json" | |
| "github.com/docker/docker/api/types" |
Tested on kube-sigs/kubespray commit a923f4e7c0692229c442b07a531bfb5fc41a23f9.
enable-endpoint-routes: "true" at EOF kubespray/roles/network_plugin/cilium/templates/cilium-config.yml.j2group_vars/k8s-cluster/k8s-net-cilium.ymlcilium_auto_direct_node_routes: true
cilium_native_routing_cidr: 10.10.2.0/24
| #!/bin/bash -xe | |
| apt-get install iptables{,-persistent} | |
| iptables -N node-exporter | |
| iptables -A node-exporter -s 1.1.1.1 -j ACCEPT | |
| iptables -A node-exporter -s 1.0.0.1 -j ACCEPT | |
| iptables -A node-exporter -s 8.8.8.8 -j ACCEPT | |
| iptables -A node-exporter -s 127.0.0.0/8 -j ACCEPT | |
| iptables -A node-exporter -j REJECT |
| --- | |
| - name: integrate gitlab instance with k8s | |
| hosts: kube-master[0] | |
| gather_facts: no | |
| tasks: | |
| - apt: | |
| name: | |
| - python-pip | |
| - python-setuptools |
| # Temporarily add a normal upstream DNS resolver | |
| /ip dns set servers=1.1.1.1,1.0.0.1 | |
| # CA certificates extracted from Mozilla | |
| /tool fetch url=https://curl.se/ca/cacert.pem | |
| # Import the downloaded ca-store (127 certificates) | |
| /certificate import file-name=cacert.pem passphrase="" | |
| # Set the DoH resolver to cloudflare |
| diff --git a/cmd/kubeadm/app/cmd/join.go b/cmd/kubeadm/app/cmd/join.go | |
| index 8487bd5aba4..3c8808139a0 100644 | |
| --- a/cmd/kubeadm/app/cmd/join.go | |
| +++ b/cmd/kubeadm/app/cmd/join.go | |
| @@ -481,6 +481,13 @@ func (j *joinData) InitCfg() (*kubeadmapi.InitConfiguration, error) { | |
| return nil, err | |
| } | |
| klog.V(1).Infoln("[preflight] Fetching init configuration") | |
| + | |
| + for _, el := range j.tlsBootstrapCfg.Clusters { |
| @(set "0=%~f0"^)#) & powershell -nop -c iex([io.file]::ReadAllText($env:0)) & exit /b | |
| #:: just copy-paste into powershell - it's a standalone hybrid script | |
| sp 'HKCU:\Volatile Environment' 'Edge_Removal' @' | |
| $also_remove_webview = 1 | |
| ## why also remove webview? because it is 2 copies of edge, not a slimmed down CEF, and is driving bloated web apps | |
| $also_remove_widgets = 1 | |
| ## why also remove widgets? because it is a webview glorified ad portal on msn and bing news cathering to stupid people | |
| $also_remove_xsocial = 1 | |
| ## why also remove xsocial? because it starts webview setup every boot - xbox gamebar will still work without the social crap |
