James Cole jamcole
jamcole
/ setup-router.yml
Created
February 25, 2020 18:20
OCP 3.11 Playbook to enable extended logging, disable tls 1.0, and enable modern ciphers
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| - name: Configure OpenShift Router | |
| hosts: bastion | |
| gather_facts: no | |
| any_errors_fatal: yes | |
| roles: | |
| - oc_host | |
| - ocp_login_master | |
| tasks: | |
| # Configure router | |
| - name: Pause router rollout |
jamcole
/ OpenShiftCredentials.groovy
Created
February 25, 2020 21:17
OpenShift Token Credentials Creator Jenkins Library
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import jenkins.model.* | |
| import com.cloudbees.hudson.plugins.folder.*; | |
| import com.cloudbees.hudson.plugins.folder.properties.*; | |
| import com.cloudbees.hudson.plugins.folder.properties.FolderCredentialsProvider.FolderCredentialsProperty; | |
| import com.cloudbees.plugins.credentials.impl.*; | |
| import com.cloudbees.plugins.credentials.*; | |
| import com.cloudbees.plugins.credentials.domains.*; | |
| import com.openshift.jenkins.plugins.OpenShiftTokenCredentials; | |
| import hudson.util.Secret; |
jamcole
/ .sops.yaml
Created
February 25, 2020 21:58
SOPS POC - Run before and after 'kustomize' commands... Secret files are named *.secret.*, files are renamed to *.encrypted.*
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Config file for Mozilla SOPS: https://github.com/mozilla/sops | |
| # | |
| # find files to decrypt with `find . -name '*.encrypted.*' | |
| # find files to encrypt with `find . -name '*.secret.*' | |
| # | |
| # creation rules are evaluated sequentially, the first match wins | |
| creation_rules: | |
| # all files that match pattern *.secret.* or *.encrypted.* | |
| - path_regex: \.(secret|encrypted)\. | |
| pgp: '166586CD6F1A906D0786BE50C26EFAE7B312A5D8' |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # https://github.com/kubernetes-sigs/kustomize/blob/master/examples/transformerconfigs/README.md | |
| commonLabels: | |
| # set labels at metadata.labels for all types | |
| - path: metadata/labels | |
| # create metadata.labels if it doesn't exist | |
| create: true | |
| - path: spec/template/metadata/labels | |
| kind: DeploymentConfig | |
| create: true |
jamcole
/ example-dc.yaml
Last active
July 30, 2020 14:16
Seamlessly Load CAs from ConfigMap into k8s Pods with InitContainer
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| initContainers: | |
| - args: | |
| - -c | |
| - cp | |
| /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt | |
| /usr/share/pki/ca-trust-source/anchors/k8s && mkdir -p | |
| /etc/pki/ca-trust/extracted/pem | |
| /etc/pki/ca-trust/extracted/openssl | |
| /etc/pki/ca-trust/extracted/java && update-ca-trust | |
| command: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| global: | |
| resolve_timeout: 5m | |
| route: | |
| group_wait: 30s | |
| group_interval: 5m | |
| repeat_interval: 12h | |
| receiver: default | |
| routes: | |
| - match: | |
| alertname: DeadMansSwitch |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/sh | |
| if [ $(ss -nlt4H '( sport = :8443 )'|wc -c) -eq 0 ]; then exit 1; fi |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| module keepalived_ping 1.0; | |
| require { | |
| type ping_exec_t; | |
| type ifconfig_exec_t; | |
| type keepalived_t; | |
| class process setcap; | |
| class file { execute execute_no_trans getattr open read }; | |
| class capability { setuid net_raw }; | |
| class rawip_socket { getopt create setopt write read }; | |
| class netlink_socket create; |
jamcole
/ haproxy.cfg
Created
March 19, 2021 22:25
simple tcp example (only the frontend and backend sections are meaningful)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| global | |
| log 127.0.0.1 local2 | |
| chroot /var/lib/haproxy | |
| pidfile /var/run/haproxy.pid | |
| maxconn 4000 | |
| user haproxy | |
| group haproxy | |
| daemon |
jamcole
/ Dockerfile
Last active
November 7, 2023 20:13
Example Taskfile Task using Docker or Podman Containers to Run Commands ( https://taskfile.dev/ )
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| FROM docker.io/ealen/echo-server:latest | |
| USER 65534 |
OlderNewer