In kubernetes 1.22 PSP (Pod Security Policies) is depricated. Here are the relevant docs extracted from kubernetes/website#28903
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env bash | |
VERSION=4.0.1 | |
SCRIPT=`basename "$0"` | |
APPNAME="My App" | |
APPICONS="/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/GenericApplicationIcon.icns" | |
OSX_VERSION=`sw_vers -productVersion` | |
PWD=`pwd` | |
function usage { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
## containerd prereq | |
modprobe br_netfilter | |
modprobe overlay | |
cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf | |
overlay | |
br_netfilter | |
EOF | |
cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
apiVersion: bitnami.com/v1alpha1 | |
kind: SealedSecret | |
metadata: | |
annotations: | |
sealedsecrets.bitnami.com/cluster-wide: "true" | |
creationTimestamp: null | |
name: friday | |
spec: | |
encryptedData: | |
COLOR: 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 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
apiVersion: krew.googlecontainertools.github.com/v1alpha2 | |
kind: Plugin | |
metadata: | |
name: ing | |
spec: | |
version: "v0.0.6" | |
homepage: https://github.com/lalyos/kubectl-ing | |
shortDescription: "Generates an Ingress for a svc" | |
description: | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
--- | |
apiVersion: v1 | |
kind: ServiceAccount | |
metadata: | |
name: kube-explorer | |
namespace: kube-system | |
labels: | |
app: kube-explorer | |
--- | |
kind: ClusterRoleBinding |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
namespace: fleet-helm-example | |
helm: | |
releaseName: kyverno-test | |
chart: "https://github.com/lalyos/kyverno-chart/archive/master.zip" |
Generate svg diagrams from k8s manifest files
generate dot
file from manifest