Skip to content

Instantly share code, notes, and snippets.

View tamalsaha's full-sized avatar
🎢
Building. Learning. Improving.

Tamal Saha tamalsaha

🎢
Building. Learning. Improving.
View GitHub Profile
@tamalsaha
tamalsaha / jsonpatch_arr.py
Created August 21, 2017 12:26
JsonPatch of Array
# https://python-json-patch.readthedocs.io/en/latest/tutorial.html#creating-a-patch
import jsonpatch
src = {
"spec": {
"loadBalancerSourceRanges": [
"192.101.0.0/16",
"192.0.0.0/24"
]
}
@tamalsaha
tamalsaha / sample.hcl
Last active September 17, 2017 08:34
HCL sample
path "secret/*" {
capabilities = ["create", "read", "update", "delete", "list"]
}
path "secret/super-secret" {
capabilities = ["deny"]
}
path "secret/restricted" {
capabilities = ["create"]
allowed_parameters = {
"foo" = []
/usr/bin/kubelet
--allow-privileged=true
--authorization-mode=Webhook
--bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf
--cadvisor-port=0
--cert-dir=/var/lib/kubelet/pki
--client-ca-file=/etc/kubernetes/pki/ca.crt
--cloud-provider=external
--cluster-dns=10.96.0.10
--cluster-domain=cluster.local
/home/kubernetes/bin/kubelet
--allow-privileged=true
--anonymous-auth=false
--authorization-mode=Webhook
--bootstrap-kubeconfig=/var/lib/kubelet/bootstrap-kubeconfig
--cert-dir=/var/lib/kubelet/pki/
--cgroup-root=/
--client-ca-file=/etc/srv/kubernetes/pki/ca-certificates.crt
--cloud-provider=gce
--cluster-dns=10.11.240.10
apiVersion: voyager.appscode.com/v1beta1
kind: Ingress
metadata:
name: fanout-demo
annotations:
ingress.appscode.com/type: NodePort
ingress.appscode.com/force-service-port: "false"
spec:
rules:
- http:
@tamalsaha
tamalsaha / gist:46dc6d331dcc8b998a1d95788febea96
Created December 15, 2017 08:25
git clone all remote branches locally
#!/bin/bash
for branch in `git branch -a | grep remotes | grep -v HEAD | grep -v master `; do
git branch --track ${branch#remotes/origin/} $branch
done
@tamalsaha
tamalsaha / minikube-1.9.sh
Last active February 21, 2018 17:18
RBAC enabled Kubernetes 1.9 cluster using Minikube
#!/bin/bash
minikube delete
# https://github.com/kubernetes/kubeadm/issues/629
minikube start \
--kubernetes-version=v1.9.0 \
--bootstrapper=kubeadm \
--extra-config=apiserver.admission-control="NamespaceLifecycle,LimitRanger,ServiceAccount,PersistentVolumeLabel,DefaultStorageClass,ValidatingAdmissionWebhook,ResourceQuota,DefaultTolerationSeconds,MutatingAdmissionWebhook"
@tamalsaha
tamalsaha / apiserver-builder.txt
Last active January 22, 2018 22:16
apiserver-boot run local
```console
$ apiserver-boot run local
2018/01/22 13:50:25 regenerating generated code. To disable regeneration, run with --generate=false.
/usr/local/apiserver-builder/bin/apiregister-gen --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/apis/... --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/controller/...
/usr/local/apiserver-builder/bin/conversion-gen --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/apis/insect/v1beta1 --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/apis/insect -o /home/tamal/go/src --go-header-file boilerplate.go.txt -O zz_generated.conversion --extra-peer-dirs k8s.io/apimachinery/pkg/apis/meta/v1,k8s.io/apimachinery/pkg/conversion,k8s.io/apimachinery/pkg/runtime
/usr/local/apiserver-builder/bin/deepcopy-gen --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/apis/insect/v1beta1 --input-dirs github.com/tamalsaha/apiserver-builder-demo/pkg/apis/insect -o /home/tamal/go/src --go-header-file boilerplate.go.txt -O zz_generated.deepco
I0206 13:45:35.895169 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/..2982_06_02_13_45_35.422325828": CREATE]
I0206 13:45:35.895573 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/..2982_06_02_13_45_35.422325828": CHMOD]
I0206 13:45:35.895716 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/..data_tmp": RENAME]
I0206 13:45:35.895825 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/..data": CREATE]
I0206 13:45:35.895854 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/config.yaml": CHMOD]
I0206 13:45:35.895898 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/config.yaml": REMOVE]
I0206 13:45:35.895933 1 watcher.go:49] [file watcher event: -------------------------------------- "/srv/kubed/..data/config.yaml": REMOVE]
I0206 13:45
#!/bin/bash
## runs etcd on 27.0.0.1:2380
# minikube delete; minikube start
## build sample apiserver
# cd ~/go/src/k8s.io/sample-apiserver
# go build .
## run apiserver