JohnStrunk

FROM registry.access.redhat.com/ubi9:latest

RUN rpm -i http://mirror.stream.centos.org/9-stream/BaseOS/x86_64/os/Packages/attr-2.5.1-3.el9.x86_64.rpm

ADD script.sh /
RUN chmod a+rx /script.sh

CMD [ "/script.sh" ]

JohnStrunk

#! /bin/bash

docker run -it --rm --pull always aquasec/trivy image --ignore-unfixed --exit-code 1 "$@"

JohnStrunk

#! /bin/bash

set -e -o pipefail

function usage {
    cat - <<USAGE
Usage:
    $0 -n namespace -s source -d destination
USAGE
}

JohnStrunk

# Taken from kubectl create -k "github.com/kubernetes-sigs/aws-ebs-csi-driver/deploy/kubernetes/overlays/alpha/?ref=master" --dry-run -oyaml
# Changes:
#   Change secret info
#   Set hostNetwork for controller
#   Remove liveness probe container
#   Remove healthz ports from controller

---
apiVersion: v1
kind: ServiceAccount

JohnStrunk

---

apiVersion: ceph.rook.io/v1
kind: CephCluster
metadata:
  name: rook-ceph
  namespace: rook-ceph
spec:
  cephVersion:
    image: ceph/ceph:v14

JohnStrunk

---

kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: block-pv
spec:
  accessModes:
    - ReadWriteOnce
  volumeMode: Block

JohnStrunk

---

apiVersion: "operator.gluster.org/v1alpha1"
kind: GlusterCluster
metadata:
  # Name for the Gluster cluster that will be created by the operator
  name: my-cluster
  # CRD is namespaced
  namespace: gcs
spec:

JohnStrunk

---

# PVC for a block device we want to access
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: block-pvc
spec:
  storageClassName: local-block
  accessModes: