This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: templates.gatekeeper.sh/v1beta1 | |
| kind: ConstraintTemplate | |
| metadata: | |
| name: k8sazurecontainerprobesrequired | |
| spec: | |
| crd: | |
| spec: | |
| names: | |
| kind: K8sAzureContainerProbesRequired | |
| validation: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package main | |
| import ( | |
| "bytes" | |
| "fmt" | |
| "io" | |
| "log" | |
| "math/big" | |
| "os" | |
| "path/filepath" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| variable "cluster-name" { | |
| default = "terraform-eks-demo" | |
| type = string | |
| } | |
| # This data source is included for ease of sample architecture deployment | |
| # and can be swapped out as necessary. | |
| data "aws_availability_zones" "available" {} | |
| resource "aws_vpc" "demo" { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| helm plugin install https://github.com/hypnoglow/helm-s3.git | |
| helm repo add zparnold s3://zparnold-helm/charts | |
| helm install zparnold/hacksploit |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: VirtualService | |
| metadata: | |
| name: manager-service | |
| spec: | |
| hosts: | |
| - "ops.acceptance.ygreneworks.com" | |
| gateways: | |
| - manager-gateway | |
| http: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: "networking.istio.io/v1alpha3" | |
| kind: "DestinationRule" | |
| metadata: | |
| name: "manager-istio-client-mtls" | |
| spec: | |
| host: ygrene-manager-service.acceptance.svc.cluster.local | |
| trafficPolicy: | |
| tls: | |
| mode: ISTIO_MUTUAL |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: ServiceEntry | |
| metadata: | |
| name: stripe-external | |
| spec: | |
| hosts: | |
| - "api.stripe.com" | |
| ports: | |
| - number: 443 | |
| name: https |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: VirtualService | |
| metadata: | |
| name: stripe-external | |
| spec: | |
| hosts: | |
| - "api.stripe.com" | |
| tls: | |
| - match: | |
| - port: 443 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: ServiceEntry | |
| metadata: | |
| name: rds | |
| spec: | |
| addresses: | |
| - "172.20.0.0/16" | |
| ports: | |
| - name: tcp | |
| number: 3306 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/bash | |
| set -e | |
| function getPods() { | |
| local val=''; | |
| while [ true ]; do | |
| val=`kubectl get pods -n ${NAMESPACE} --selector="name=${1}" -o $2` | |
| if [[ $val != '' ]] || [[ $? -eq 0 ]]; then break; fi | |
| done | |
| echo "${val}" |
NewerOlder