- Check certificates
- /etc/kubernetes/pki
- openssl x509 -in <certificate.crt> -noout -text
- kubeadm certs renew all
- Check PID Namespace isolation
- v1.PodSpec.shareProcessNamespace: true
- Use Network policies
- Default deny ingress
- Default deny egress
- frontend to backend
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
customCommands: | |
containers: | |
- name: bash | |
attach: true | |
command: 'docker exec -it {{ .Container.ID }} bash' | |
serviceNames: [] | |
- name: sh | |
attach: true | |
command: 'docker exec -it {{ .Container.ID }} sh' | |
serviceNames: [] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
use std::sync::Arc; | |
use embedded_svc::storage::{RawStorage, StorageBase}; | |
use esp_idf_svc::{nvs::EspDefaultNvs, nvs_storage::EspNvsStorage}; | |
use esp_idf_sys as _; // If using the `binstart` feature of `esp-idf-sys`, always keep this module imported | |
use log::*; | |
fn main() { | |
// Temporary. Will disappear once ESP-IDF 4.4 is released, but for now it is necessary to call this function once, |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Checking esp-idf-hal v0.33.1 (/Users/pyaillet/Projets/esp32/esp-idf-hal) | |
error[E0433]: failed to resolve: use of undeclared crate or module `rmt_item32_t__bindgen_ty_1__bindgen_ty_1` | |
--> src/rmt.rs:564:38 | |
| | |
564 | let mut inner_item = rmt_item32_t__bindgen_ty_1__bindgen_ty_1::default(); | |
| ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ use of undeclared crate or module `rmt_item32_t__bindgen_ty_1__bindgen_ty_1` | |
error[E0425]: cannot find function `rmt_set_tx_loop_count` in this scope | |
--> src/rmt.rs:451:23 | |
| |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
version: "3" | |
services: | |
blue: | |
image: containous/whoami | |
labels: | |
- traefik.http.routers.blue.rule=PathPrefix("/") | |
- color=blue | |
proxy: | |
image: traefik:v2.5.4 | |
# Enables the web UI and tells Traefik to listen to docker |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env sh | |
# Install | |
apt update | |
apt install -y python3 python3-pip neovim docker.io golang | |
USER="pyaillet" | |
USER_HOME="/home/$USER" | |
groupadd $USER | |
useradd -d $USER_HOME -m -g $USER -G adm,dialout,cdrom,floppy,audio,dip,video,plugdev,netdev,lxd,ubuntu,google-sudoers $USER |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"CN": "Kubernetes", | |
"key": { | |
"algo": "rsa", | |
"size": 2048 | |
}, | |
"names": [ | |
{ | |
"C": "FR", | |
"L": "Nantes", |
NewerOlder