| #!/bin/bash | |
| set -eux | |
| HC_NAMESPACE=sjenning | |
| HC_NAME=sjenning-mgmt | |
| NP_NAME=sjenning-mgmt-us-east-1a | |
| IGNITION_ROUTE=$(oc get route -n $HC_NAMESPACE-$HC_NAME ignition-server -ojsonpath='{.status.ingress[0].host}') | |
| NODEPOOL_TOKEN_SECERT=$(oc get secret | cut -f1 -d' ' | grep ^token-$NP_NAME) |
| { | |
| "kind": "AuthenticationConfiguration", | |
| "apiVersion": "apiserver.k8s.io/v1alpha1", | |
| "jwt": [ | |
| { | |
| "issuer": { | |
| "url": "https://login.microsoftonline.com/fa5d3dd8-b8ec-4407-a55c-ced639f1c8c5/v2.0", | |
| "audiences": [ | |
| "fdd45692-2aa8-4c30-b472-b86b84e5ed1d" | |
| ], |
| package main | |
| import ( | |
| "bufio" | |
| "encoding/json" | |
| "log" | |
| "os" | |
| "strings" | |
| ) |
hypershift create cluster aws --endpointAccess=PublicAndPrivate --external-dns-domain=service.ci.hypershift.devcluster.openshift.com
services:
- service: APIServer
servicePublishingStrategy:
route:
hostname: api-sjenning-guest.service.ci.hypershift.devcluster.openshift.com
type: Route
- service: OAuthServer
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| name: sjenning | |
| --- | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: Role | |
| metadata: | |
| name: hypershift | |
| namespace: sjenning |
| #!/bin/bash | |
| set -eux | |
| NODEPOOL=${NODEPOOL:-'example'} | |
| SECRET=$(oc get secret | grep ^token-${NODEPOOL} | cut -f1 -d' ') | |
| TOKEN=$(oc get secret ${SECRET} -ojsonpath='{.data.token}') | |
| IGNPOD=$(oc get pod | grep ignition-server | cut -f1 -d' ') | |
| oc rsh ${IGNPOD} /bin/curl --insecure -H "Accept: application/vnd.coreos.ignition+json; version=3.2.0" -H "Authorization: Bearer ${TOKEN}" -k https://127.0.0.1:9090/ignition | jq > ${NODEPOOL}.ign |
| #!/bin/bash | |
| # This script is a kubectl/oc plugin that will start namespace deletion, | |
| # watch the namespace conditions for resources blocking on finalizers, | |
| # and remove those finalizers from the blocking resources | |
| # TODO: Does not yet work against core resource types. The regex doesn't get them. | |
| NAMESPACE=$1 | |
| if ! oc get ns ${NAMESPACE} &>/dev/null; then |
| #!/bin/bash | |
| #set -eux | |
| TOKEN="" | |
| ID="" | |
| STATE_FILE="/root/heb-to-go/.state" | |
| #curl https://api.telegram.org/bot$TOKEN/getUpdates | jq .message.chat.id | |
| notify() { |
| #!/bin/sh | |
| set -eu | |
| cd $GOPATH/src/k8s.io/kubernetes | |
| for release in "1.15" "1.16" "1.17"; do | |
| echo "=== v${release} ===" | |
| git log --oneline --no-merges v${release}.0..upstream/release-${release} -- pkg/kubelet cmd/kubelet | |
| done |