hh

• pod spec related kinds

pod spec related kinds

select distinct t.name , p.required , property , param_kind, param_type
from properties p , types t
where (t.name like '%PodSpec' or p.param_kind like '%PodSpec')
-- and p.param_kind like 'io%'
-- and p.required

hh

• How can we declaritively define behaviours in a standard fashion?
• Behaviours as Gherkin .feature files
• Complex Storytelling made Possible
• Metadata to match existing tests

How can we declaritively define behaviours in a standard fashion?

Requirement: A MAP that enumerates the State Space - Definition of Done

hh

# For the benefit of emacs users: -*- shell-script -*-
###########################
# xbindkeys configuration #
###########################
#
# Version: 1.8.6
#
# If you edit this file, do not forget to uncomment any lines
# that you change.
# The pound(#) symbol may be used anywhere for comments.

hh

Debugging kubeadm-dind-audit-logging

Branch Setup

https://github.com/ii/kubeadm-dind-cluster/tree/audit-policy

hh

FROM gitlab/gitlab-ce:10.7.3-ce.0
COPY *.patch /opt/gitlab/embedded/service/gitlab-rails/
RUN apt-get update ; apt-get install -y patch
# Allows http urls for .gitlab-ci.yml
# This patch may need some work cleanly apply with recent versions
RUN cd /opt/gitlab/embedded/service/gitlab-rails ; \
    patch -p1 < ci_yaml_http.patch

hh

#!/bin/bash
set -x
set -e
MASTER_NODE=$(gcloud compute instances list | grep master | awk '{print $1}')
if echo $1 | grep / ; then
    REPO=$(echo $1 | awk -F/ '{print $1}')
    KAPP=$(echo $1 | awk -F/ '{print $2}')
fi
kubectl create ns $KAPP
helm install $REPO/$KAPP \

hh

Need to run charts that use service accounts

#+NAME 162 stable 41 incubator 206 total charts

  ls stable | wc -l
  ls incubator | wc -l
echo ===
  ls stable incubator | wc -l

hh

audit-webhook needs

–audit-webhook-config-file

Most similar to AuditPolicyConfiguration / –audit-policy-file

It can’t really have a default value, because you need to specify a webhook url.

–audit-webhook-initial-backoff

hh

#!/bin/bash -x
set -euo pipefail

echo "Building conformance image..."
echo

APT_PACKAGES="rsync"
# build docker image of repository
docker build -t "${IMAGE_NAME}:${IMAGE_TAG}" - <<EOF
	FROM golang:1.8

hh

Pinning version of docker

The new docker-ce repos don't have the old versions. However the old docker-engine repos still contain versions back to 1.5.0

apt-key adv --keyserver keyserver.ubuntu.com --recv-keys F76221572C52609D
cat > /etc/apt/sources.list.d/docker.list <<EOF
deb [arch=amd64] https://apt.dockerproject.org/repo debian-jessie main 
EOF