devx

# Copyright (c) 2021, NVIDIA CORPORATION.  All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,

devx

disableKubeDnsScraping: true
logs:
  enabled: true
logzio-fluentd:
  env_id:  <ENVIRONMENT ID>
  secrets:
    logzioListener: listener.logz.io
    logzioShippingToken: <SECRET TOKEN>
logzio-k8s-telemetry:
  enableMetricsFilter:

devx

{
    "Statement": [
        {
            "Action": [
                "ec2:DescribeTags",
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ],

devx

logs:
  enabled: true
logzio-fluentd:
  env_id: ${ENV_ID}
  secrets:
    logzioListener: listener.logz.io
    logzioShippingToken: ${LOGZIO_LOGS_TOKEN}
logzio-k8s-telemetry:
  enableMetricsFilter:
    eks: true

devx

[SERVICE]
    # Flush
    # =====
    # set an interval of seconds before to flush records to a destination
    flush        1

    # Daemon
    # ======
    # instruct Fluent Bit to run in foreground or background mode.
    daemon       Off

devx

add entry to existing htpasswd

User: MyUser, Password: Secrete

printf "MyUser:$(openssl passwd -apr1 Secrete)\n" >> htpasswd

Create a bunch of users with the same password

for i in john jose josh joe ; do
  printf "$i:$(openssl passwd -apr1 Secrete)\n" >> htpasswd
done

devx

# Create the config and edit necesary fields
openshift-install create install-config --dir $HOME/cluster-${GUID}

# create the cluster
openshift-install create cluster --dir $HOME/cluster-${GUID}


#Create a httpassword file

#apply identity provider via web ui

devx

# @see https://github.com/uken/fluent-plugin-elasticsearch#generate-hash-id
<filter **>
  @type elasticsearch_genid
  hash_id_key _hash
</filter>
# Apply value from filter to id_key field
# Elasticsearch also doesn't like field names with `_` so remove it.
<match **>
  @type elasticsearch
  hosts elasticsearch.local:9200

devx

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
 name: psp:istio-system:privileged
 namespace: istio-system
roleRef:
 apiGroup: rbac.authorization.k8s.io
 kind: ClusterRole
 name: psp:privileged
subjects:

devx

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: istio-remote-clusterrole
rules:
- apiGroups: ["extensions"]
  resources: ["podsecuritypolicies"]
  resourceNames: ["psp:privileged"]
  verbs: ["use"]
---