surajssd

Configs

• These configs are for the blog https://suraj.io/post/docker-seccomp-manual/
• The default seccomp profile is taken at https://github.com/moby/moby/blob/238f8eaa31aa74be843c81703fabf774863ec30c/profiles/seccomp/default.json

surajssd

apiVersion: flagger.app/v1alpha3
kind: Canary
metadata:
  name: podinfo
  namespace: test
spec:
  # deployment reference
  targetRef:
    apiVersion: apps/v1
    kind: Deployment

surajssd

# download the release from https://istio.io/docs/setup/kubernetes/#downloading-the-release

cd ~/study/istio-setup/istio-1.2.2/
kubectl apply -f install/kubernetes/istio-demo-auth.yaml
kubectl get pods,svc -n istio-system
sleep 200
kubectl apply -f <(istioctl kube-inject -f samples/bookinfo/platform/kube/bookinfo.yaml)
kubectl apply -f samples/bookinfo/networking/bookinfo-gateway.yaml
kubectl apply -f samples/bookinfo/networking/destination-rule-all-mtls.yaml
kubectl get pods,svc 

surajssd

start-minikube
kubectl apply -f https://raw.githubusercontent.com/kinvolk/terraform-render-bootkube/kinvolk-master/resources/manifests/psp-restricted.yaml
kubectl apply -f https://raw.githubusercontent.com/kinvolk/terraform-render-bootkube/kinvolk-master/resources/manifests/psp-privileged.yaml


kubectl --namespace kube-system create sa tiller
kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount=kube-system:tiller
helm init --service-account tiller

surajssd

---
apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  annotations:
    storageclass.beta.kubernetes.io/is-default-class: "true"
  labels:
    addonmanager.kubernetes.io/mode: EnsureExists
  name: standard
provisioner: k8s.io/minikube-hostpath

surajssd

Keybase proof

I hereby claim:

• I am surajssd on github.
• I am surajd (https://keybase.io/surajd) on keybase.
• I have a public key ASB8i9JgXg7hQyCJZbvRL7BtgYjhzKacxHCdOVvGeOXJOQo

To claim this, I am signing this object:

surajssd

#!ipxe

set base-url https://stable.release.flatcar-linux.net/amd64-usr/current
kernel ${base-url}/flatcar_production_pxe.vmlinuz initrd=flatcar_production_pxe_image.cpio.gz flatcar.first_boot=1 flatcar.oem.id=packet console=ttyS1,115200n8
initrd ${base-url}/flatcar_production_pxe_image.cpio.gz
boot

surajssd

-- Logs begin at Tue 2019-01-15 07:46:21 UTC, end at Tue 2019-01-15 07:51:50 UTC. --
Jan 15 07:46:34 minikube systemd[1]: Started kubelet: The Kubernetes Node Agent.
Jan 15 07:46:34 minikube kubelet[2379]: Flag --cluster-dns has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jan 15 07:46:34 minikube kubelet[2379]: Flag --authorization-mode has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jan 15 07:46:34 minikube kubelet[2379]: Flag --client-ca-file has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information.
Jan 15 07:46:34 minikube kubelet[2379]

surajssd

sudo -i
echo " 
[Allow vagrant libvirt management permissions]
Identity=unix-user:vagrant
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes
" | tee /etc/polkit-1/localauthority/50-local.d/vagrant.pkla

surajssd

sudo dnf -y install git
mkdir ~/git
cd ~/git
git clone https://github.com/surajssd/dotfiles
cd dotfiles
./installers/install-configs.sh
./installers/install-local-bin.sh