on kubernetes version < v1.24.x
- Create files for the needed resources
-
a kustomize
---
--- | |
# Source: cilium/templates/cilium-secrets-namespace.yaml | |
apiVersion: v1 | |
kind: Namespace | |
metadata: | |
name: "cilium-secrets" | |
labels: | |
app.kubernetes.io/part-of: cilium | |
annotations: | |
--- |
#!/usr/bin/env bash | |
## desc: create sops key for fluxcd and more | |
## author: Thorsten Schifferdecker https://github.com/curx | |
## license: Apache 2.0 | |
## variables | |
HASH="$(xxd -l5 -ps /dev/urandom)" | |
# the keyname and comment |
## desc: create application for soft-serve | |
## author: Thorsten Schifferdecker <https://github.com/curx> | |
## license: Apache 2.0 | |
apiVersion: v1 | |
kind: Namespace | |
metadata: | |
name: soft-serve | |
labels: | |
app: soft-serve |
#!/usr/bin/env bash | |
## desc: create k3s/rke2 crd helmChart for neuvector | |
## author: Thorsten Schifferdecker https://github.com/curx | |
## license: Apache 2.0 | |
## vars | |
le_acme_email="${1:?ERR | no lets encypt email for acme is given, abort.}" | |
neuvector_admin_password="${2:?ERR | no neuvector admin password is given, abort.}" | |
neuvector_ingress_hostname="${3:?ERR | no neuvector ingress hostname is given, abort.}" |
#!/usr/bin/env bash | |
## desc: create k3s/rke2 crd helmChart from a default helmChart | |
## author: Thorsten Schifferdecker https://github.com/curx | |
## license: Apache 2.0 | |
## vars | |
helmrepo="${1:?error no helm repository given, abort.}" | |
helmchart_name="${2:?error no helm name given, abort.}" | |
helmchart_namespace="${3:-${helmchart_name}-system}" |
#!/usr/bin/env bash | |
## desc: hibernate a gardener shoot cluster | |
## author: Thorsten Schifferdecker https://github.com/curx | |
## license: ASL-2.0 | |
kubectl patch shoot ${1:?shootcluster name not given} \ | |
-p '{"spec": { "hibernation": { "enabled": '${2:?hibernate true or false}'}}}' |
config { | |
module = true | |
} | |
rule "terraform_deprecated_index" { | |
enabled = true | |
} | |
rule "terraform_unused_declarations" { | |
enabled = true |
# a simple dockerized nginx webserver | |
version: '3' | |
services: | |
webserver: | |
container_name: webserver | |
image: docker.io/library/nginx:1.21-alpine | |
ports: | |
- 80:80 | |
volumes: |
-----BEGIN PUBLIC KEY----- | |
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv2Ynap1t0laT6cMDMv4rPN5Rvpo3 | |
pU+IGUULCuB/L1Ae1R/hmr0Bq85vpu57mwHEEyNzqqc1SKuRdMOT4u7ZFg== | |
-----END PUBLIC KEY----- |