saschagrunert

#!/usr/bin/env bash
set -euox pipefail

TAG=v1.26.0-rc.1
URL=https://dl.k8s.io/release/$TAG/bin/linux/amd64
BIN=kubectl

for EXT in "" .sig .cert; do
    FILE=$BIN$EXT
    curl -sSfL --retry 3 --retry-delay 3 $URL/$FILE -o $FILE

jimangel

Enable auditing on KinD

TODO

• Use a webhook vs. file backend (maybe cloudrun?)
• This might only be possible if Docker is running as root - need to test

Config

Make a temporary directory to host files to be mounted in KinD.

saschagrunert

FROM debian:10

RUN apt-get update && apt-get install -y wget gnupg
RUN echo 'deb http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/Debian_10/ /' \
    > /etc/apt/sources.list.d/devel:kubic:libcontainers:stable.list
RUN wget -nv https://download.opensuse.org/repositories/devel:kubic:libcontainers:stable/Debian_10/Release.key -O- |\
    apt-key add -

RUN apt-get update && apt-get install -y podman
RUN sed -i 's/driver = ""/driver = "vfs"/' /etc/containers/storage.conf

hoegaarden

Running

# using defaults:
#   BOARDS: sig-release-master-blocking sig-release-master-upgrade
#   STATES: FAILING
./shot.sh

unguiculus

#!/usr/bin/env bash

set -e
set -o pipefail

kubectl proxy &
proxy_pid="$!"
trap 'kill "$proxy_pid"' EXIT

for ns in $(kubectl get namespace --field-selector=status.phase=Terminating --output=jsonpath="{.items[*].metadata.name}"); do

gserrano

echo -n $'\E[31m'
echo '                                 -hNNNNNNNNNNNNNNNNNNNNNNNNmdo`                                     '
echo '                               .hNNNNNNNNNNNNNNNNNNNNNNNNNNNNNms..                                  '
echo '                              `mNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNmm-                                 '
echo '                             /dNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNms`                               '
echo '                           .hNNNNNNmmdmmNmmmmdNdyo+sdmNNNNNNNNNNNNNNh.                              '
echo '                          `hNNNNdo:--...-....::.....--:/sdNNNNNNNNNNmo.                             '
echo '                         `hNNNNs----.````````````````..---yNNNNNNNNNNNy`                            '
echo '                         yNNmm+-----.`````````````````..---/ymNNNNNNNNNh`                           '
echo '                        :NNNN+----..``````````````````....--:hmNNNNNNNNN+                           '

dims

export IMAGE=gcr.io/k8s-testimages/kubekins-e2e:latest-master
docker run --privileged -it --rm -v /mydata/docker-graph:/docker-graph -v $(pwd):/workspace/scripts --entrypoint=/bin/bash $IMAGE -c /workspace/scripts/run-test.sh

caruccio

#!/bin/bash

if [ $# -lt 6 ]; then
    echo "Usage: $0 [source-namespace] [source-pvc-name] [target-namespace] [target-pvc-name] [target-aws-zone] [target-pv-name] [kind/workload=None]"
    echo "Clone EBS, PV and PVC from source to target. Will stop kind/workload if defined."
    exit
fi

set -eu

benjamincharity

> Thank you for reaching out to Autonomous! I am sorry to hear that you are having some trouble with your SmartDesk
> but I will be glad to assist. It sounds like your system needs a "hard reset" can I please have you follow these
> steps thoroughly.

Reset Steps:
1. Unplug the desk for 20 seconds. Plug it back in. Wait a full 20 seconds.
2. Press the up and down buttons until the desk lowers all the way and beeps or 20 seconds pass.
3. Release both buttons.
4. Press the down buttons until the desk beeps one more time or 20 seconds pass.

danieldreier

#!/usr/bin/env ruby
require 'certificate_authority'

# Generate root_cert CA using example code at https://github.com/cchandler/certificate_authority
root_cert = CertificateAuthority::Certificate.new
root_cert.subject.common_name= "Dummy CA Root Certificate"
root_cert.serial_number.number=1
root_cert.key_material.generate_key
root_cert.signing_entity = true
signing_profile = {"extensions" => {"keyUsage" => {"usage" => ["critical", "keyCertSign"] }} }