Kat Morgan usrbinkat

Observations:

Following the official multus quickstart verbatim results in the same failure to configure a multus interface in a basic pod
multus.conf is correctly configured on the host sudo cat /etc/cni/net.d/00-multus.conf | jq .
cni plugins are correctly installed on the host ls /opt/cni/bin/
reproducing with k3s, microk8s, talos, or kubespray clusters results in success
logs collected with k logs -n cluster-network-addons cluster-network-addons-operator-dc8d5d95c-b2bd6 -c cluster-network-addons-operator

Reproducer:

Pursuant to microshift + cluster-network-addons multus debugging in #virtualization and #microshift slack threads.

Scratch nodes WIP

talosctl gen config talos-kubevirt https://talos-kubevirt.home.arpa:6443 --additional-sans 192.168.1.70,talos-kubevirt --install-disk /dev/vda --output-dir $(pwd)/talos
❯ cat deploy.sh
#kubectl --kubeconfig $HOME/.kube/poweredge delete -f ./kubevirt/
#sleep 12
#kubectl --kubeconfig $HOME/.kube/poweredge apply -f ./kubevirt/

#sleep 120

Kong Builders LiveStream

Focus: Kong Gateway

Background: Deploy and Secure Istio's Bookinfo application through Kong Gateway.

Topics:

CP Prereqs
Deploy CP
DP Prereqs

State of the Art:

The Open Container Initiative, and OCI Registries have proven a strong solution for distributing containers and other artifact types, with the benefits of both location and content addressing. OCI Registries also support strong software supply chain security.

OCI Registry As Storage (ORAS) built on these strengths to enable distribution of all content types.

Universal Object Reference Framework (UOR) (Additional Info) leverages all of these technologies, along with exploiting the Image Manifest Spec to add a new addressing type called Attribute Addressing which enables publishing and interacting with all attribute addressed content with the inherent benefits of relational a database and [Directed Acyclic Graph (DAG)](https://en.wikipedia.org/wiki/Directed_

brew install helm kind arkade kubectl

kind create cluster
watch kubectl get po -A

arkade install cert-manager
watch kubectl get po -A

arkade install inlets-operator \

Hacking on UOR Framework based ai-model-registry

Build Container

cat <<EOF > Dockerfile && docker build -t registry .
FROM --platform=x86_64 cgr.dev/chainguard/go:latest-glibc as build
RUN CGO_ENABLED=0 GOBIN=/home/nonroot go install github.com/google/go-containerregistry/cmd/registry@latest

FROM --platform=x86_64 cgr.dev/chainguard/static:latest

Bare Metal:

	version: "3"
	networks:
	kong-ee:

	volumes:
	certs:
	driver: local
	redis_data:
	driver: local

	#cloud-config
	ssh_authorized_keys:
	- ssh-rsa AAAAB3Nz..truncated..x8yI8KlVt2U= admin@mprcs
	vyos_config_commands:
	- configure
	- set firewall all-ping 'enable'
	- set firewall syn-cookies 'enable'
	- set firewall config-trap 'disable'
	- set firewall log-martians 'enable'
	- set firewall ip-src-route 'disable'

	apiVersion: argoproj.io/v1alpha1
	kind: Application
	metadata:
	name: argocd
	spec:
	destination:
	name: ''
	namespace: argocd
	server: 'https://kubernetes.default.svc'
	project: default