jjo

apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: null
  labels:
    run: jjo-alp
  name: jjo-alp
spec:
  initContainers:
  - args:

jjo

#!/bin/sh
# Launch a Pod ab-using a hostPath mount to land on a Kubernetes node cluster as root
# without requiring `privileged: true`, in particular can abuse `DenyExecOnPrivileged`
# admission controller.
# Pod command in turn runs a privileged container using node's /var/run/docker.sock.
node=${1}
case "${node}" in
"")
    nodeSelector=''
    podName=${USER+${USER}-}docker-any

jjo

#!/bin/sh
# Launch a Pod ab-using a privileged=true to land on a Kubernetes node cluster as root,
# uses `privileged: true` to then nsenter init mount its (root) namespace,
# hostPID and hostNetwork already set for the Pod.
node=${1}
case "${node}" in
"")
    nodeSelector=''
    podName=${USER+${USER}-}sudo-any
    ;;

jjo

$ helm fetch stable/mysql
$ helm template mysql-0.6.0.tgz 
---
# Source: mysql/templates/secrets.yaml
apiVersion: v1
kind: Secret
metadata:
  name: RELEASE-NAME-mysql
  labels:
    app: RELEASE-NAME-mysql

jjo

apiVersion: apps/v1beta1
kind: StatefulSet
metadata:
  name: nginx-sts-pvc
spec:
  replicas: 3
  serviceName: nginx-sts
  updateStrategy: {type: RollingUpdate}
  template:
    metadata:

jjo

---
apiVersion: apps/v1beta1
kind: Deployment
metadata:
  labels:
    app: mideploy
  name: mideploy
spec:
  replicas: 3
  selector:

jjo

apiVersion: extensions/v1beta1
kind: DaemonSet
metadata:
  namespace: kube-system
  name: kube-proxy-cleanup
  labels:
    k8s-app: kube-proxy-cleanup
spec:
  selector:
    matchLabels:

jjo

FROM bitnami/minideb-extras:jessie-r14-buildpack as build

ARG SRC_REPO=github.com/bitly/oauth2_proxy
ARG SRC_TAG=v2.2
ARG BINARY=oauth2_proxy

RUN bitnami-pkg install go-1.8.7-0 --checksum b4f95f751cfee5dfc82820327089c7a9afd09ecadb41894189e5925ed61c1390
RUN install_packages ca-certificates

ENV GOPATH=/gopath

jjo

---
# Source: metallb/templates/namespace.yaml
apiVersion: v1
kind: Namespace
metadata:
  name: metallb-system

---
# Source: metallb/templates/rbac.yaml
# Roles

jjo

---
apiVersion: v1
kind: ConfigMap
metadata:
  name: kube-router-cfg
  namespace: kube-system
  labels:
    tier: node
    k8s-app: kube-router
data: