Skip to content

Instantly share code, notes, and snippets.

View joshisa's full-sized avatar
🎯
Focusing

Sanjay Joshi joshisa

🎯
Focusing
View GitHub Profile
@joshisa
joshisa / test-aws-ebs-claim.yaml
Created November 27, 2018 18:34
aws-ebs-test-claim
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: ebs-test-claim
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 1Mi
sudo apt-get purge golang*
sudo rm -rf /usr/lib/go-1.6/ /usr/lib/go-1.6/src/ /usr/lib/go-1.6/src/runtime/ /usr/lib/go-1.6/src/runtime/race
curl -O https://storage.googleapis.com/golang/go1.11.1.linux-amd64.tar.gz
sudo tar -C /usr/local -xzf go1.11.1.linux-amd64.tar.gz
mkdir -p ~/go; echo "export GOPATH=$HOME/go" >> ~/.bashrc
echo "export PATH=$PATH:$HOME/go/bin:/usr/local/go/bin" >> ~/.bashrc
source ~/.bashrc
go get github.com/go-sql-driver/mysql
kubectl exec -n kube-system $(kubectl get pods -n kube-system | grep dns | awk '{print $1}') -- kill -SIGUSR1 1
curl -ks -u "oauthadmin:$(kubectl get secrets -n kube-system platform-oidc-credentials -o yaml | grep OAUTH2_CLIENT_REGISTRATION_SECRET | awk '{print $2}' | (base64 -D && echo "\n") | head -n 1 | sed 's/\\n//g')" -X GET https://mycluster.icp:9443/oidc/endpoint/OP/registration
#!/bin/sh
masterNode='x.x.x.x'
dockerRegistry='mycluster.icp'
dockerRegistryPort='8500'
user="admin"
sudo echo "$masterNode $dockerRegistry" | sudo tee -a /etc/hosts > /dev/null
openssl s_client -showcerts -connect "$dockerRegistry:$dockerRegistryPort" </dev/null 2>/dev/null|openssl x509 -outform PEM >$dockerRegistry.docker.crt
# FOR OSX
# sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain $dockerRegistry.docker.crt
@joshisa
joshisa / extract-cert.sh
Created May 31, 2018 05:24
Extracting the certs from cert-manager issuer
#!/bin/sh
kubectl get secrets -o yaml example-com-tls | grep -E 'tls.(crt|key)' | while read line;
do
OUT=$(echo $line | awk -F:\ '{print$1}')
echo $line | awk -F:\ '{print$NF}' | base64 -d -i - > mycluster-icp-$OUT
done
@joshisa
joshisa / gist:627c0c57bb87840d59c6c63760079fa0
Created May 30, 2018 13:40 — forked from danrigsby/gist:8346b842d1446628de5223b600668dca
Copy kubernetes secrets between namespaces
kubectl get secrets -o json --namespace old | jq '.items[].metadata.namespace = "new"' | kubectl create -f -
@joshisa
joshisa / helm_extract.sh
Last active May 14, 2018 21:47
One-liner for extracting the ICP Helm Binary. Pre-req: Configured bx CLI and pr plugin plus a curl binary
curl -k -Lo helm https://mycluster.icp:8443/helm-api/cli/linux-amd64/helm --header "Authorization: $(bx pr tokens | grep "Access token:" | cut -d' ' -f3- | sed -e 's/^[[:space:]]*//')" && chmod +x helm && sudo mv helm /usr/local/bin/helm
#!/bin/bash
CLUSTER_HOST="mycluster.icp"
USER=admin
PW=admin
ID=id-mycluster-account
echo -e "Resetting Helm client env ..."
echo -e ""
sudo rm -rf ~/.helm
#!/bin/bash
# ----------------------------------------------------------------------------------------------------\\
# Description:
# Setup and deploy Weave Scope into a running Kubernetes Cluster
# ----------------------------------------------------------------------------------------------------\\
set -e
kubectl apply -f "https://cloud.weave.works/k8s/scope.yaml?k8s-version=$(kubectl version | base64 | tr -d '\n')"
# https://gist.github.com/592fd3bccb49874235597e4ec553cac3 (waiter.sh)