James Dube jamesdube

Open a webpage that uses the CA with Firefox
Click the lock-icon in the addressbar -> show information -> show certificate
the certificate viewer will open
click details and choose the certificate of the certificate-chain, you want to import to CentOS
click "Export..." and save it as .crt file
Copy the .crt file to /etc/pki/ca-trust/source/anchors on your CentOS machine
run update-ca-trust extract
test it with wget https://thewebsite.org

apiVersion: v1
kind: Namespace
metadata:
  name: gitlab

	kind: ClusterRole
	apiVersion: rbac.authorization.k8s.io/v1
	metadata:
	name: system:aggregated-metrics-reader
	labels:
	rbac.authorization.k8s.io/aggregate-to-view: "true"
	rbac.authorization.k8s.io/aggregate-to-edit: "true"
	rbac.authorization.k8s.io/aggregate-to-admin: "true"
	rules:
	- apiGroups: ["metrics.k8s.io"]

	#!/bin/bash

	while true
	do
	STATUS=$(curl -s -o /dev/null -w '%{http_code}' http://example.com/poll-me)
	if [ $STATUS -eq 200 ]; then
	echo "Got 200! All done!"
	break
	else
	echo "Got $STATUS :( Not done yet..."

	#!/bin/bash
	## Generic installation on all nodes

	sysctl -w net.ipv4.ip_forward=1
	sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g' /etc/sysctl.conf
	sudo sysctl -p /etc/sysctl.conf

	swapoff -a
	sed -i '2s/^/#/' /etc/fstab

	#!/usr/bin/env bash

	set -e -o pipefail; [[ -n "$DEBUG" ]] && set -x

	CERT_DIR="${CERT_DIR:-"/usr/local/share/ca-certificates"}"

	function usage() {
	echo "Usage: $(basename "$0") [-n clustername] certfile ..." >&2
	}

	#!/bin/sh

	EXPECTED_CHECKSUM="$(wget -q -O - https://composer.github.io/installer.sig)"
	php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
	ACTUAL_CHECKSUM="$(php -r "echo hash_file('sha384', 'composer-setup.php');")"

	if [ "$EXPECTED_CHECKSUM" != "$ACTUAL_CHECKSUM" ]
	then
	>&2 echo 'ERROR: Invalid installer checksum'
	rm composer-setup.php

	#!/bin/sh

	KUBECTL="/usr/local/bin/kubectl"

	# Get only nodes which are not drained yet
	NOT_READY_NODES=$($KUBECTL get nodes \| grep -P 'NotReady(?!,SchedulingDisabled)' \| awk '{print $1}' \| xargs echo)
	# Get only nodes which are still drained
	READY_NODES=$($KUBECTL get nodes \| grep '\sReady,SchedulingDisabled' \| awk '{print $1}' \| xargs echo)

	echo "Unready nodes that are undrained: $NOT_READY_NODES"