lawrencejones

make-it-rain.json: make-it-rain.jsonnet
	jsonnet -J $(ANU_ROOT)/utopia/lib -J $(ANU_ROOT)/utopia/jvendor $^ > $@

ghostsquad

#! /usr/bin/env bash

set -Eeuo pipefail

scripts_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1 && pwd)"
source "${scripts_dir}/functions.sh"

test_jq
test_yq
test_kubeseal

quiye

Prepare

• get yq 3.x from https://github.com/mikefarah/yq/releases

• get jsonnet (Go) from

  go get github.com/google/go-jsonnet/cmd/jsonnet
  go install github.com/google/go-jsonnet/cmd/jsonnet

maddie

#!/bin/sh

LOGGER_TAG=v2ray-geodata-updater

log () {
  echo $@
  logger -t $LOGGER_TAG "$@"
}

log "fetching geoip url..."

atheiman

These Kubernetes resource manifest yaml files demonstrate

1. vault.yaml

• setting up a test vault service
• configuring the vault service with kubernetes auth and a role for a test app

2. app.yaml

• running an app with a vault-init initContainer to login to vault and obtain a token
• a vault-secret-manager container to continuously interact with vault throughout the lifecycle of the app
• an app container to use the secret saved by the vault-secret-manager container

iamtakingiteasy

passwd:
    users:
        - name: "root"
          groups:
              - "sudo"
              - "wheel"
          password_hash: "$6$gO2u2Sjk$Q5T/SqiwFzK95jRqO6FArDDmDGmdXblnKHtL4HiA.NrGgfJk8CJF5AfAfoMt8kF/jlsqHEgRDxYOFYzw9sroS/"
        - name: "user"
          groups:
              - "sudo"

serdroid

- generate ssh key for gitlab-runner user
- add ssh key to project's deploy keys (project/setting/repository)

add below commands into script section of .gitlab-ci.yml file.
# CI_REPOSITORY_URL contains gitlab-ci-token. replace start of the string up to '@'  with git@' and append a ':' before first '/'
# example 
# CI_REPOSITORY_URL=https://gitlab-ci-token:xxxxxxxxxxxxxxxxxxxx@example.com/gitlab-examples/ci-debug-trace.git
# should be git@example.com:/gitlab-examples/ci-debug-trace.git
    - export PUSH_REPO=$(echo "$CI_REPOSITORY_URL" | sed -e "s|.*@\(.*\)|git@\1|" -e "s|/|:/|" )