Skip to content

Instantly share code, notes, and snippets.

View tasdikrahman's full-sized avatar
💭
Automate everything

Tasdik Rahman tasdikrahman

💭
Automate everything
View GitHub Profile
@tasdikrahman
tasdikrahman / read-only-rbac.yaml
Created October 29, 2018 05:49
k8s read only rbac
# These rules are copied from `kubectl get clusterroles admin -o yaml`
# With create, delete, deletecollection, patch, and update verbs removed
# Removed secrets resource except for list, impersonate:serviceaccounts,
# and pods/exec, pods/attach, and pods/proxy. Added (get,list,watch):nodes.
rules:
- apiGroups:
- ""
resources:
- pods/portforward
verbs:
---
apiVersion: v1
kind: Namespace
metadata:
name: traefik
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: traefik
@tasdikrahman
tasdikrahman / traefik-service-weights-example.yaml
Created October 25, 2018 12:03
traefik service weights example v1.7.0
# this feature is available only from traefik version 1.7.0 and upwards
# https://github.com/containous/traefik/releases/tag/v1.7.0
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
kubernetes.io/ingress.class: traefik-external
traefik.ingress.kubernetes.io/service-weights: |
myapp: 90%
myapp-canary: 10%
@tasdikrahman
tasdikrahman / traefik-daemonet.yaml
Last active February 8, 2022 08:50
traefik daemonset config for ingress controller
---
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: traefik-ingress-controller
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: traefik-ingress-controller
subjects:
@tasdikrahman
tasdikrahman / 00-namespace.yaml
Created October 15, 2018 06:42
docker-cleanup
apiVersion: v1
kind: Namespace
metadata:
name: docker
@tasdikrahman
tasdikrahman / devopsdays-india-2018-proposal.md
Last active December 9, 2018 06:10
kuberception - self hosting kubernetes - devopsdays India, 2018 talk proposal

Kuberception : self-hosting kubernetes

Who is this talk for?

  • Cluster operators - Who manages kubernetes cluster(s).
  • Anyone interested in kubernetes and how to run it in production, instead of using a managed solution.

5 Parts to the talk

  1. What is Self-hosted kubernetes?
  • self hosted: refers to the ability of a system to be expressed in terms of itself.
kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
name: web-allow-all
namespace: default
spec:
podSelector:
matchLabels:
app: web
ingress:

Effective Engineer - Notes

What's an Effective Engineer?

  • They are the people who get things done. Effective Engineers produce results.

Adopt the Right Mindsets

Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.