Liz Rice lizrice

I hereby claim:

I am lizrice on github.
I am lizrice (https://keybase.io/lizrice) on keybase.
I have a public key whose fingerprint is 09C3 9806 D4C5 31E7 2215 D9C9 19C1 59ED 9DBA D993

To claim this, I am signing this object:

Accessing Kubelet API

curl -sk https://localhost:10250/pods/

If --anonymous-auth is turned off, you will see a 401 Unauthorized response.
If --anonymous-auth is true and --authorization-mode is Webhook you'll see 403 Forbidden response with message Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy)
If --anonymous-auth is true and --authorization-mode is AlwaysAllow you'll see a list of pods.


	from __future__ import with_statement
	from fabric.api import local, lcd

	# Usage:
	# fab connect - mounts /home/pi/<pi_dir> so it's available locally at <workspace><remote>
	# fab disconnect - unmount
	#
	# Note this is Mac specific - Linux distributions use fusermount -u instead of umount
	# Requires OSXFUSE and SSHFS from http://osxfuse.github.io/

	package main

	// @lizrice, mostly copied from @doctor_julz: https://gist.github.com/julz/c0017fa7a40de0543001

	import (
	"fmt"
	"os"
	"os/exec"
	"syscall"
	)

	{
	"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
	"contentVersion": "1.0.0.0",
	"parameters": {
	},
	"resources": [
	{
	"name": "helloContainerGroup",
	"type": "Microsoft.ContainerInstance/containerGroups",
	"apiVersion": "2017-08-01-preview",

	# Usage:
	# aws cloudformation --region <region> create-stack --stack-name <stack name> --template-body file://vpc-fargate.yaml

	# This template will:
	# Create a VPC with:
	# 2 Public Subnets
	# 2 Private Subnets
	# An Internet Gateway (with routes to it for Public Subnets)
	# A NAT Gateway for outbound access (with routes from Private Subnets set to use it)
	#

	# -- mode: ruby --
	# vi: set ft=ruby :

	# This script to install Kubernetes will get executed after we have provisioned the box
	$script = <<-SCRIPT

	# Install kubernetes
	apt-get update && apt-get install -y apt-transport-https
	curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg \| apt-key add -
	cat <<EOF >/etc/apt/sources.list.d/kubernetes.list

	# -- mode: ruby --
	# vi: set ft=ruby :

	# After loading this
	# Install a pod network
	# $ kubectl apply -f https://cloud.weave.works/k8s/net?k8s-version=$(kubectl version \| base64 \| tr -d '\n')

	# Allow pods to run on the master node
	# $ kubectl taint nodes --all node-role.kubernetes.io/master-

	$ cat Vagrantfile
	# -- mode: ruby --
	# vi: set ft=ruby :

	$script = <<-SCRIPT

	cat > /etc/docker/daemon.json << EOF
	{
	"insecure-registries": [
	"172.30.0.0/16"

	#!/usr/bin/python
	from bcc import BPF
	from time import sleep

	# This outputs a count of how many times the clone and execve syscalls have been made
	# showing the use of an eBPF map (called syscall).

	program = """
	BPF_HASH(syscall);