Skip to content

Instantly share code, notes, and snippets.

View jenting's full-sized avatar
:octocat:

JenTing jenting

:octocat:
View GitHub Profile
@jenting
jenting / kyverno-mutate-policy.yaml
Last active March 18, 2025 23:54
Deny App CR update status.reconciledAt
apiVersion: kyverno.io/v1
kind: Policy
metadata:
name: drop-reconciledat-only-update
namespace: your-namespace # Replace with your target namespace
spec:
mutateExistingOnPolicyUpdate: false # Only mutate admission requests, not existing resources
rules:
- name: drop-reconciledat-only-update
match:
@jenting
jenting / yaml
Last active March 4, 2025 22:19
argocd extension
kubectl apply -n argo-rollouts -f https://github.com/argoproj/argo-rollouts/releases/download/v1.7.2/install.yaml
initContainers:
- env:
- name: EXTENSION_URL
value: https://github.com/argoproj-labs/rollout-extension/releases/download/v0.3.7/extension.tar
image: quay.io/argoprojlabs/argocd-extension-installer:v0.0.8
imagePullPolicy: IfNotPresent
name: rollout-extension
resources: {}
@jenting
jenting / admin.yaml
Created May 20, 2024 22:20
Kubeadm ClusterRole
aggregationRule:
clusterRoleSelectors:
- matchLabels:
rbac.authorization.k8s.io/aggregate-to-admin: "true"
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
annotations:
rbac.authorization.kubernetes.io/autoupdate: "true"
labels:
@jenting
jenting / admin.yaml
Last active May 20, 2024 22:23
Rancher ClusterRole
aggregationRule:
clusterRoleSelectors:
- matchLabels:
rbac.authorization.k8s.io/aggregate-to-admin: "true"
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
annotations:
rbac.authorization.kubernetes.io/autoupdate: "true"
labels:
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: conditional-mutate-pod
spec:
admission: true
background: false
validationFailureAction: Audit
rules:
- name: conditional-mutate-cpu-requests
https://itnext.io/kubernetes-scheduler-deep-dive-fdfcb516be30
https://streamlit.io/
@jenting
jenting / gist:d9a0b83534a940eb9fc982f3446e9bfe
Created August 3, 2023 13:22
ArgoCD Watch failed context canceled
retrywatcher.go:130] "Watch failed" err="Get \"https://yadda/apis/apps/v1/namespaces/NAMESPACE_HERE/RESOURCE_NAME_HERE/?allowWatchBookmarks=true&resourceVersion=5645476686&watch=true\": context canceled"
https://github.com/argoproj/argo-cd/issues/11458
https://github.com/argoproj/argo-cd/releases/tag/v2.6.8
@jenting
jenting / gist:5d292c9a2a08dd668bf49c921159e85c
Last active August 6, 2023 13:58
Register a custom indexer
https://stackoverflow.com/a/57083222
https://cloud.tencent.com/developer/article/1794652
https://wbuntu.com/golang-note-11-controller-runtime/
https://github.com/kubernetes-sigs/e2e-framework/pull/125/files
https://promlabs.com/promql-cheat-sheet/
https://valyala.medium.com/promql-tutorial-for-beginners-9ab455142085