curx

---
apiVersion: v1
items:
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRoleBinding
  metadata:
    name: system:cloud-node-controller
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole

curx

apiVersion: v1
kind: Namespace
metadata:
  labels:
    app.kubernetes.io/instance: kubelet-serving-cert-approver
    app.kubernetes.io/name: kubelet-serving-cert-approver
  name: kubelet-serving-cert-approver
---
apiVersion: v1
kind: ServiceAccount

curx

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv2Ynap1t0laT6cMDMv4rPN5Rvpo3
pU+IGUULCuB/L1Ae1R/hmr0Bq85vpu57mwHEEyNzqqc1SKuRdMOT4u7ZFg==
-----END PUBLIC KEY-----

curx

# a simple dockerized nginx webserver
version: '3'

services:
  webserver:
    container_name: webserver
    image: docker.io/library/nginx:1.21-alpine
    ports:
    - 80:80
    volumes:

curx

config {
  module = true
}

rule "terraform_deprecated_index" {
  enabled = true
}

rule "terraform_unused_declarations" {
  enabled = true

curx

#!/usr/bin/env bash

## desc: hibernate a gardener shoot cluster
## author: Thorsten Schifferdecker https://github.com/curx
## license: ASL-2.0

kubectl patch shoot ${1:?shootcluster name not given} \
  -p '{"spec": { "hibernation": { "enabled": '${2:?hibernate true or false}'}}}'

curx

Steps to create a dedicated kubeconfig.yaml for a byoh-host

on kubernetes version < v1.24.x

1. Create files for the needed resources

• a kustomize

  ---

curx

#!/usr/bin/env bash

##    desc: create k3s/rke2 crd helmChart from a default helmChart
##  author: Thorsten Schifferdecker https://github.com/curx
## license: Apache 2.0

## vars
helmrepo="${1:?error no helm repository given, abort.}"
helmchart_name="${2:?error no helm name given, abort.}"
helmchart_namespace="${3:-${helmchart_name}-system}"

curx

#!/usr/bin/env bash

##    desc: create k3s/rke2 crd helmChart for neuvector
##  author: Thorsten Schifferdecker https://github.com/curx
## license: Apache 2.0

## vars
le_acme_email="${1:?ERR | no lets encypt email for acme is given, abort.}"
neuvector_admin_password="${2:?ERR | no neuvector admin password is given, abort.}"
neuvector_ingress_hostname="${3:?ERR | no neuvector ingress hostname is given, abort.}"

curx

##    desc: create application for soft-serve
##  author: Thorsten Schifferdecker <https://github.com/curx>
## license: Apache 2.0
    
apiVersion: v1
kind: Namespace
metadata:
  name: soft-serve
  labels:
    app: soft-serve