Cedric Lamoriniere clamoriniere

## readme.md

      
              1 file
            
          
              0 forks
            
          
              0 comments
            
          
              0 stars
            
          
                clamoriniere
                / readme.md
            
            
              Last active
              May 31, 2020 15:09
            
              
                How to update datadog-cert in kubernetes datadog dd-agent (v5) daemonset
              
          
    How to override datadog-cert.pem in a k8s pod

download new cert and create a secret

$ curl https://raw.githubusercontent.com/DataDog/dd-agent/master/datadog-cert.pem > datadog-cert.pem

$ export KUBERNETES_NS=<placeholder>

$ kubectl -n $KUBERNETES_NS create secret generic dd-agent-cert --from-file=datadog-cert.pem

  
## k8snssetup
k8snssetup multi 10 --kubeconfig=/tmp/admin.kubeconfi.yaml

## ProxyRole.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: userProxy
  namespace: kube-system
rules:
- apiGroups: ["*"]
  resources: ["services/proxy"]
  verbs: ["*"]

## UserRoleBinding.yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: ns-admin
subjects:
- kind: ServiceAccount
  name: foo
  namespace: foo-ns
roleRef:
  kind: Role

## config.yaml
apiVersion: v1
kind: Config
clusters:
- cluster:
    insecure-skip-tls-verify: true
    server: https://10.0.0.1:8443
  name: cluster-lab
contexts:
- context:
    cluster: cluster-lab

## .travis.yml
language: go
os: linux
sudo: required
services:
  - docker

go:
  - 1.9.x
install:
  - curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl"
	apiVersion: rbac.authorization.k8s.io/v1
	kind: Role
	metadata:
	name: userProxy
	namespace: kube-system
	rules:
	- apiGroups: ["*"]
	resources: ["services/proxy"]
	verbs: ["*"]
	apiVersion: rbac.authorization.k8s.io/v1
	kind: RoleBinding
	metadata:
	name: ns-admin
	subjects:
	- kind: ServiceAccount
	name: foo
	namespace: foo-ns
	roleRef:
	kind: Role
	apiVersion: v1
	kind: Config
	clusters:
	- cluster:
	insecure-skip-tls-verify: true
	server: https://10.0.0.1:8443
	name: cluster-lab
	contexts:
	- context:
	cluster: cluster-lab
	language: go
	os: linux
	sudo: required
	services:
	- docker

	go:
	- 1.9.x
	install:
	- curl -LO "https://storage.googleapis.com/kubernetes-release/release/$(curl -s https://storage.googleapis.com/kubernetes-release/release/stable.txt)/bin/linux/amd64/kubectl"