| type patchOperation struct { | |
| Op string `json:"op"` | |
| Path string `json:"path"` | |
| Value interface{} `json:"value,omitempty"` | |
| } |
| func (p *patches) addContainers(pod *corev1.Pod, containers []corev1.Container) { | |
| first := len(pod.Spec.Containers) == 0 | |
| path := "/spec/containers" | |
| var value interface{} | |
| for _, c := range containers { | |
| value = c | |
| tempPath := path | |
| if first { | |
| first = false | |
| value = []corev1.Container{c} |
| package main | |
| import ( | |
| "context" | |
| "encoding/json" | |
| "fmt" | |
| "log" | |
| "os" | |
| "github.com/open-policy-agent/opa/rego" |
| # example.rego | |
| package authz | |
| allow { | |
| input.path == ["users"] | |
| input.method == "POST" | |
| } | |
| # example_test.rego | |
| test_post_allowed { | |
| allow with input as {"path": ["users"], "method": "POST"} |
| package myapi.policy | |
| import data.myapi.acl | |
| import input | |
| default allow = false | |
| allow { | |
| access = acl[input.user] | |
| access[_] == input.access |
| { | |
| "alice": [ | |
| "read", | |
| "write" | |
| ], | |
| "bob": [ | |
| "read" | |
| ] | |
| } |
| # The command finds the most recent tag that is reachable from a commit. | |
| # If the tag points to the commit, then only the tag is shown. | |
| # Otherwise, it suffixes the tag name with the number of additional commits on top of the tagged object | |
| # and the abbreviated object name of the most recent commit. | |
| git describe | |
| # With --abbrev set to 0, the command can be used to find the closest tagname without any suffix: | |
| git describe --abbrev=0 | |
| # other examples |
| # -*- mode: ruby -*- | |
| # vi: set ft=ruby : | |
| Vagrant.configure("2") do |config| | |
| config.vm.box = "bento/ubuntu-18.04" | |
| config.vm.define "buildah" do |buildah| | |
| buildah.vm.network "private_network", ip: "192.168.33.10" | |
| buildah.vm.provider "virtualbox" do |vb| | |
| vb.name = "buildah" |
brew cask install podman$ export PATH=$(pwd):$PATH
$ podman-machine create box
Podman machine "box" already exists
$ podman-machine start box
Starting "box"...
brew cask install podman$ export PATH=$(pwd):$PATH
$ podman-machine create box
Podman machine "box" already exists
$ podman-machine start box
Starting "box"...