warroyo

apiVersion: v1
kind: Pod
metadata:
  name: bf-demo2
  namespace: default
spec:
  containers:
  - name: bf-demo
    image: shawnmkelly/bitfusion:tensorflow
    resources:

warroyo

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  labels:
    app: win-webserver
  name: win-webserver
spec:
  replicas: 2
  template:
    metadata:

warroyo

apiVersion: apps/v1
kind: Deployment
metadata:
  name: blog-2019
  labels:
	app: blog-2019
spec:
  replicas: 1
  template:
     metadata:

warroyo

apiVersion: v1
kind: ServiceAccount
metadata:
  name: tiller
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
  name: tiller

warroyo

kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
  name: cic-k8s-role
rules:
  - apiGroups: [""]
    resources: ["endpoints", "ingresses", "pods", "secrets", "nodes", "routes", "namespaces"]
    verbs: ["get", "list", "watch"]
  # services/status is needed to update the loadbalancer IP in service status for integrating
  # service of type LoadBalancer with external-dns

warroyo

---
apiVersion: cluster.x-k8s.io/v1alpha3
kind: Cluster
metadata:
  name: '${ CLUSTER_NAME }'
  namespace: '${ NAMESPACE }'
spec:
  clusterNetwork:
    pods:
      cidrBlocks:

warroyo

#!/bin/bash
set -e


BOSH_IDS=$(kubectl get nodes -o=jsonpath='{.items[*].metadata.labels.bosh\.id}')

for i in ${BOSH_IDS} ; do
 VM=$(govc find -json /  -type m -customValue "*:$i")
 echo "Node: $i"
 echo "VM: $VM"

warroyo

#!/usr/bin/env bash
set -euxo pipefail
tdnf update -y
tdnf install -y ca-certificates
tdnf install -y openssl-c_rehash
TRUSTED_CERT="-----BEGIN CERTIFICATE-----
MIIE8zCCA1ugAwIBAgIQXmh5aHQ2iQdNCA2F0SvKuzANBgkqhkiG9w0BAQsFADCB
kTEeMBwGA1UEChMVbWtjZXJ0IGRldmVsb3BtZW50IENBMTMwMQYDVQQLDCp3aWxs
aWFtYXJyb3lvQFdpbGxpYW1zLU1hY0Jvb2stUHJvLTIubG9jYWwxOjA4BgNVBAMM
MW1rY2VydCB3aWxsaWFtYXJyb3lvQFdpbGxpYW1zLU1hY0Jvb2stUHJvLTIubG9j

warroyo

  {
  "name": "Istio-prom-metrics",
  "url": "Istio-prom-metrics",
  "description": "This dashboard displays real-time visibility into the Istio service mesh.",
  "eventFilterType": "BYCHART",
  "eventQuery": "",
  "defaultTimeWindow": "2h",
  "displayDescription": false,
  "displaySectionTableOfContents": true,
  "displayQueryParameters": true,

warroyo

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: wcp:administrators:override
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: cluster-admin
subjects:
- apiGroup: rbac.authorization.k8s.io