Francois BAYART frbayart

Kubernetes Hardening Checklist (NSA & CISA Guidance v1.2)

Ensure containers run as non-root users
Enable immutable container filesystems (where applicable)
Scan container images for vulnerabilities/misconfigurations
Disable privilege escalation and dangerous capabilities:
- No privileged containers
- No hostPID, hostIPC, hostNetwork
No allowedHostPath

Content :

 npm install @azure/storage-blob\n
 npm install uuid dotenv

Detect which python3 to use based on .python-version file (created by pyenv) anf fallback to python3 in $PATH

ie if vault_save.py is in ~/bin/ try to get ~/bin/'python-version` if it exists if will be used to execute the current Python file.

So if your $PATH is PATH=~/bin:$PATH, you can run from anywhere vault_save.py and it will use the pyenv version defined in ~/bin

	# https://github.com/Homebrew/homebrew-bundle
	tap "homebrew/bundle"
	tap "homebrew/cask"
	tap "homebrew/cask-fonts"
	tap "homebrew/core"

	# set arguments for all 'brew install --cask' commands
	cask_args appdir: "~/Applications", require_sha: true

	# CASK

	<?xml version="1.0" encoding="UTF-8"?>
	<opml version="1.1">
	<head>
	<title>The Old Reader</title>
	<dateCreated>Tue, 13 Dec 2022 15:13:31 GMT</dateCreated>
	<dateModified>Tue, 13 Dec 2022 15:13:31 GMT</dateModified>
	<ownerName>Francois Bayart</ownerName>
	<ownerEmail>[email protected]</ownerEmail>
	</head>
	<body>

	from github import Github
	from jinja2 import Environment, FileSystemLoader
	import os
	import yaml


	g = Github(os.environ['GITHUT_PAT'])

	repo = g.get_repo("GH-ORG/REPONAME")

	module kensu.io/m/v2

	go 1.16

	require github.com/aws/aws-lambda-go v1.24.0