Illustrative, not compile-ready. The goal is to show where the seams go.
Imports stdlib only, so there is no cycle with plumbing,
plumbing/format/packfile, plumbing/revlist, plumbing/storer or git.
| package hash | |
| import ( | |
| "encoding/hex" | |
| "hash" | |
| format "github.com/go-git/go-git/v5/plumbing/format/config" | |
| ) | |
| // FromHex parses a hexadecimal string and returns an ImmutableHash |
| #!/bin/bash | |
| set -eo pipefail | |
| BEFORE=$(mktemp) | |
| AFTER=$(mktemp) | |
| cleanup() { | |
| rm -f "${BEFORE}" "${AFTER}" | |
| } |
| #!/bin/bash | |
| set -eo pipefail | |
| VERBOSE="${VERBOSE:-false}" | |
| dirs=$(find -mindepth 1 -maxdepth 10 -type d -name .git) | |
| for dir in $dirs; do | |
| dir=$(dirname $dir) | |
| pushd "$dir" > /dev/null |
| package filtered | |
| import ( | |
| "io" | |
| "os" | |
| "time" | |
| "github.com/go-git/go-billy/v5" | |
| ) |
| apiVersion: cilium.io/v2 | |
| kind: CiliumNetworkPolicy | |
| metadata: | |
| name: webhook-strict | |
| namespace: cattle-system | |
| spec: | |
| endpointSelector: | |
| matchLabels: | |
| app: rancher-webhook |
Enable the use of AppArmor profiles by adding:
annotations:
container.apparmor.security.beta.kubernetes.io/manager: localhost/flux-controllersEnsure that the profiles are installed on all worker nodes, manually or with SPO: https://github.com/kubernetes-sigs/security-profiles-operator
| FROM alpine | |
| ARG KUBECTL_VERSION="1.21.7" | |
| RUN apk add curl | |
| RUN curl -LO "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" && \ | |
| curl -LO "https://dl.k8s.io/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl.sha256" && \ | |
| echo "$(cat kubectl.sha256) kubectl" | sha256sum -c && \ | |
| install -o root -g root -m 0755 kubectl /usr/local/bin/kubectl |
| { | |
| "go.autocompleteUnimportedPackages": true, | |
| "terminal.integrated.shell.linux": "/usr/bin/zsh", | |
| "terminal.integrated.fontFamily": "'Source Code Pro for Powerline', 'monospace', monospace, 'Droid Sans Fallback'", | |
| "editor.fontFamily": "'Source Code Pro for Powerline', 'monospace', monospace, 'Droid Sans Fallback'", | |
| "go.formatTool": "goimports", | |
| "editor.fontSize": 18, | |
| "terminal.integrated.fontSize": 18, | |
| "markdown.preview.fontSize": 18, | |
| "git.enableSmartCommit": true, |
I hereby claim:
To claim this, I am signing this object: