Frank Kloeker eumel8

prerequisites

have a Rancher project with 2 namespaces where the Pods and Services seen each other

service exposes via IngressRoutesTCP

helm -n vc1 upgrade vc1 --set isolation.networkPolicy.enabled=false --version 0.15.7 oci://mtr.devops.telekom.de/caas/charts/vcluster

	#!/bin/bash
	# Was brauch man hier:
	# * Google Cloud Account https://console.cloud.google.com/
	# * Goofle Projekt mit aktivem Rechnungskonto
	# * AKtoierte Vertex AI API https://cloud.google.com/vertex-ai/generative-ai/docs/model-reference/veo-video-generation?hl=de#rest-ttv
	set -e

	PROJECT_ID=""
	LOCATION_ID="us-central1"
	API_ENDPOINT="us-central1-aiplatform.googleapis.com"

	# https://github.com/containerd/nerdctl/releases/latest
	# https://github.com/containerd/nerdctl/blob/main/docs/rootless.md
	# https://rootlesscontaine.rs/getting-started/common/
	# https://github.com/containernetworking/plugins
	VERSION=2.1.3

	mkdir nerd
	cd nerd
	# Download the all-in-one archive
	curl -LO https://github.com/containerd/nerdctl/releases/download/v${VERSION}/nerdctl-${VERSION}-linux-amd64.tar.gz

	// a program to sort keys in a given directory with yaml files
	package main

	import (
	"fmt"
	"io/ioutil"
	"log"
	"os"
	"sort"
	"strings"

	apiVersion: apiextensions.crossplane.io/v1
	kind: Composition
	metadata:
	annotations:
	name: vcluster.caas.telekom.de
	spec:
	compositeTypeRef:
	apiVersion: caas.telekom.de/v1alpha1
	kind: Vcluster
	mode: Resources

	# adjust s3 access_key,host_base, secret_key, and s3 bucketname
	apiVersion: v1
	kind: Secret
	metadata:
	name: s3cfg
	type: Opaque
	stringData:
	.s3cfg: \|-
	[default]
	access_key = xxxxx

	package mystruct


	// LoggingSpec defines the desired state of Logging
	type MyStruct struct {
	// Reference to the logging system. Each of the `loggingRef`s can manage a fluentbit daemonset and a fluentd statefulset.
	LoggingRef string `json:"loggingRef,omitempty"`
	// Disable configuration check before applying new fluentd configuration.
	FlowConfigCheckDisabled bool `json:"flowConfigCheckDisabled,omitempty"`
	// Whether to skip invalid Flow and ClusterFlow resources

	---
	apiVersion: v1
	kind: ServiceAccount
	metadata:
	labels:
	name: getpods
	name: getpods
	---
	apiVersion: rbac.authorization.k8s.io/v1
	kind: Role