Knappek

#!/usr/bin/env bash

set -e
set -u
set -o pipefail

# Prompt for GOVC environment variables if not already set
: "${GOVC_URL:?ESX or vCenter URL (e.g., https://1.2.3.4:443): }"
: "${GOVC_USERNAME:=administrator@vsphere.local}"
: "${GOVC_PASSWORD:=VMware1!}"

Knappek

#@data/values
---
unwanted_routes:
- method: "GET"
  path: "/api/foo"
- method: "GET"
  path: "/api/3"
- method: "POST"
  path: "/api/bla"

Knappek

kind: Policy
rules:
  # The following requests were manually identified as high-volume and low-risk,
  # so drop them.
  - level: None
    users: ["system:serviceaccount:kube-system:kube-proxy"]
    verbs: ["watch"]
    resources:
      - group: "" # core
        resources: ["endpoints", "services", "services/status"]

Knappek

apiVersion: cluster.x-k8s.io/v1beta1
kind: ClusterClass
metadata:
  annotations:
    run.tanzu.vmware.com/resolve-tkr: ""
  name: custom-audit-policy
  namespace: auditing
spec:
  controlPlane:
    machineHealthCheck:

Knappek

#@ load("@ytt:overlay", "overlay")

#@overlay/match by=overlay.all
---
instance_groups:
#@overlay/match by=overlay.subset({"name": "postgres-instance"})
- jobs:
   #@overlay/match by=overlay.subset({"name": "postgres"})
   - properties:
       databases:

Knappek

#!/bin/bash

show_help() {
  cat <<EOF
Usage: $0 --control-plane-nodes <nodes> --worker-nodes <count> --name <name>
          [--control-plane-cpus <cpus>] [--control-plane-memory <memory>]
          [--worker-cpus <cpus>] [--worker-memory <memory>]
          [--ssh-public-key <path>] [--ssh-private-key <path>]
          [--control-plane-disk <disk>] [--worker-disk <disk>]
          [-h|--help]