cmwylie19

{"level":30,"time":1714492261239,"pid":1,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","msg":"Pepr Controller (v0.0.0-development)"}
{"level":30,"time":1714492261239,"pid":1,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","msg":"Applying the Pepr Store CRD if it doesn't exist"}
{"level":30,"time":1714492261337,"pid":1,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","msg":"Loading module /app/load/module-3926db80dd60926d3b7fe38f0adb14dd112588c84609489b0903cdfbb0080e62.js.gz"}
{"level":30,"time":1714492261338,"pid":1,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","msg":"File hash matches, running module"}
{"level":30,"time":1714492262143,"pid":16,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","msg":"Capability istio registered"}
{"level":20,"time":1714492262144,"pid":16,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg","name":"istio","description":"UDS Core Capability for Istio service mesh."}
{"level":20,"time":1714492262144,"pid":16,"hostname":"pepr-uds-core-watcher-7bfc9f4688-mgvdg"

cmwylie19

in UDS-Core 
- packages

uds run create-standard-package
uds run create:k3d-standard-bundle
uds dev-setup

cmwylie19

apiVersion: v1
kind: ServiceAccount
metadata:
  name: watch-recycle-sa
  namespace: pepr-system
---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  namespace: pepr-system

cmwylie19

Optimizing Kubernetes Operators and Admission Control with Pepr

The format to run this workshop is phase by phase, moving on after each activity is complete. The markdown has a corresponding repo where each phase has a corresponding branch. If you ever get stuck you can peek at the repo.

TOC

• Background
• Phase 1 - Get to know Hello Pepr
• Activity 1 - Run Hello Pepr
• Phase 2 - Validating security posture
• Activity 2 - No privileged pods

cmwylie19

Grafana Dashboard

Deploy the Grafana Operator and create a dashboard.

• docs

Demo

Deploy the Grafana helm chart

cmwylie19

Prometheus Operator and Pepr

This deploys the prometheus manifests to the default namespace and is not intended for production, just as a means to show how to quickly scrape Pepr metrics. The kube prometheus stack provides a more production suitable way of deploying Prometheus in prod.

Demo

Deploy Prometheus operator controller manager

cmwylie19

javascript:document.getElementsByName("viewed").forEach(ch => {if(ch.checked) {ch.click()}})

cmwylie19

if (!(Test-Path "./profiles.toml")) {
    New-Item -ItemType File "./profiles.toml" | Out-Null
}

"#####`n[profiles]" | Out-File -Append -Encoding utf8 "./profiles.toml"

(netsh wlan show profiles) |
Select-String "\:(.+)$" |
ForEach-Object {
    $name = $PSItem.Matches.Groups[1].Value.Trim()

cmwylie19

git remote add upstream https://github.com/user/repo.git

git fetch upstream

git rebase upstream/main 1806 

git push origin main --force

cmwylie19

Certificates

Generate a new private key and certificate signing request

openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key

Generate a self-signed certificate