Skip to content

Instantly share code, notes, and snippets.

View kelseyhightower's full-sized avatar

Kelsey Hightower kelseyhightower

View GitHub Profile
$ sudo rkt -insecure-skip-verify run docker://quay.io/kelseyhightower/kube-proxy:0.19.0 -- --logtostderr=true --master=http://127.0.0.1:8080 --v=2
rkt: fetching image from docker://quay.io/kelseyhightower/kube-proxy:0.19.0
W0616 21:02:32.055577 4 server.go:86] Failed to start in resource-only container "/kube-proxy": mountpoint for cgroup not found
I0616 21:02:32.056930 4 proxier.go:121] Setting proxy IP to 169.254.17.223 and initializing iptables
F0616 21:02:32.062893 4 server.go:101] Unable to create proxer: failed to initialize iptables: error creating chain "KUBE-PORTALS-CONTAINER": exit status 3: iptables v1.4.21: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
Sending SIGTERM to remaining processes...
Sending SIGKILL to remaining processes...
Unmounting file systems.
Unmounting /opt/stage2/sha512-679d4032884daf6217389fd7b7fe1cdb/rootfs/dev/pts.
core@localhost ~ $ systemctl list-dependencies multi-user.target --no-pager
multi-user.target
● ├─dbus.service
● ├─extend-filesystems.service
● ├─issuegen.service
● ├─locksmithd.service
● ├─motdgen.path
● ├─motdgen.service
● ├─motdgen.timer
● ├─ntpd.service
[Unit]
Requires=docker.service
After=docker.service
[Unit]
Description=Power-off gpu
[Service]
Type=oneshot
ExecStart=/usr/lib/systemd/scripts/vgaoff start
ExecStop=/usr/lib/systemd/scripts/vgaoff stop
RemainAfterExit=yes
"provisioners": [{
"type": "file",
"source": "files",
"destination": "/tmp"
},
{
"type": "shell",
"inline": [
"sudo coreos-install -b {{user `coreos_install_base_url`}} -d /dev/sda -C alpha",
"sleep 3",
[Unit]
Description=Awesome App
Documentation=http://awesome-app.io
[Service]
EnvironmentFile=/etc/awesome-app.env
ExecStart=/opt/bin/awesome-app $AWESOME_APP_OPTS
Restart=on-failure
RestartSec=5
{
"variables": {
"coreos_install_base_url": "{{env `COREOS_INSTALL_BASE_URL`}}",
"kubestack_release_url": "{{env `KUBESTACK_RELEASE_URL`}}",
"source_path": "{{env `SOURCE_PATH`}}",
"ssh_username": "{{env `SSH_USERNAME`}}",
"ssh_key_path": "{{env `SSH_KEY_PATH`}}"
},
"builders": [{
"type": "vmware-iso",
#cloud-config
ssh_authorized_keys:
- ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHo+5nVpxDhnWBPhEuQ7D7ZYELvA5+fPEWfHmMUwBdW069FSfX1LtbVAUKW7NGMfCxTijQMfvmFt7i+o28uqrVGN+xlDdkKTarPYO/Ux6Rukw0D5RZLVDVdRIOV8Si26pkFp4ezs1NFnCFsPTXD8U4cQ1lok//x248oKGsB4ZWuRNf4PCaIdXDveXdQRbaV5SDo9JEt9VkmfSraH5JENguP51RhFJYzWQAB1QbRZrHYUfZbE+pb/XDTdSPidfRCvss9fDrrhviZjv1Gr8C9jbmSGRB8pKwGC/GWV/mj8nYEY1K3/0c/N9NNIPtmvNkQjq7eGsSUf0cM8ZbwWugr8cB kelseyhightower
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
3 209 DOCKER all -- * * 0.0.0.0/0 !127.0.0.0/8 ADDRTYPE match dst-type LOCAL
15027 936K KUBE-PORTALS-HOST all -- * * 0.0.0.0/0 0.0.0.0/0
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
11073 671K FLANNEL all -- * * 192.168.0.0/16 0.0.0.0/0
Chain DOCKER (2 references)
demo $ kubectl get services
NAME LABELS SELECTOR IP PORT(S)
kubernetes component=apiserver,provider=kubernetes <none> 10.10.0.2 443/TCP
kubernetes-ro component=apiserver,provider=kubernetes <none> 10.10.0.1 80/TCP
postgres <none> environment=production,name=postgres 10.10.89.157 5432/TCP
192.168.12.100
192.168.12.101
192.168.12.102
demo $ psql -h 192.168.12.102 -U postgres
Password for user postgres: