mattmattox

Overview

This project provides a Flannel annotation watchdog for Kubernetes nodes. It continuously checks whether the flannel.alpha.coreos.com/backend-data annotation is present on the node. If missing (which typically indicates a Flannel restart or networking issue), it can optionally restart the Flannel container. A dry-run mode allows detection without restarting.

Installation

Download the script and the systemd service file, then install and enable the watchdog.

1. Fetch the repository content

mattmattox

#!/bin/bash

volume_names=$(kubectl -n longhorn-system get volumes.longhorn.io -o json | jq -r '.items[]  | .metadata.name')

for volume_name in $volume_names;
do
  echo "############################################################################################################################"
  echo -n "numberOfReplicas "
  kubectl -n longhorn-system patch volumes.longhorn.io $volume_name --type='merge' -p '{"spec":{"numberOfReplicas":1}}';

mattmattox

#!/bin/bash

# List all Helm releases in the cluster
helm list --all-namespaces --short | while read -r release; do
    echo "Processing release: $release"
    # Get revision history for the release
    revisions=$(helm history "$release" --short | tail -n +2)
    
    # Keep the latest revision
    latest_revision=$(echo "$revisions" | head -n 1)

mattmattox

#!/bin/bash

while getopts "c:h" opt; do
  case $opt in
    c)
      CLUSTER="${OPTARG}"
      ;;
    h)
      help && exit 0
      ;;

mattmattox

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: log-watcher-sa
  namespace: cert-manager
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:

mattmattox

#!/bin/bash
# Create CA private key
if [ ! -f ca-private.pem ]; then
    openssl ecparam -name prime256v1 -genkey -noout -out ca-private.pem
fi
# Create CA public key
openssl ec -in ca-private.pem -pubout -out ca-public.pem
# Create self signed CA certificate
openssl req -x509 -new -key ca-private.pem -days 365 -out ca.crt -subj "/CN=root.linkerd.cluster.local"

mattmattox

#!/bin/bash
ln -s /var/lib/rancher/rke2/bin/kubectl /usr/local/bin/kubectl
mkdir -p ~/.kube/
ln -s /var/lib/rancher/rke2/server/cred/admin.kubeconfig ~/.kube/config

mattmattox

  ...
  config:
    global:
      resolve_timeout: 5m
      slack_api_url: "https://hooks.slack.com/services/abcdef/123456789...."
    receivers:
    - name: "slack"
      slack_configs:
      - api_url: 'https://hooks.slack.com/services/abcdef/123456789....'
        username: 'ClusterName'

mattmattox

#!/bin/bash


objects=`kubectl api-resources --verbs=list --namespaced -o name`

for namespace in `kubectl get ns -o name | awk -F '/' '{print $2}'`
do
  echo "Namespace: $namespace"
  mkdir -p namespace/"$namespace"
  for object in $objects

mattmattox

apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
  annotations:
    meta.helm.sh/release-name: monitoring
    meta.helm.sh/release-namespace: monitoring
    prometheus-operator-validated: "true"
  labels:
    app: kube-prometheus-stack
    app.kubernetes.io/instance: monitoring