dlipovetsky

Notes:

• The report was not accepted. I intend to file a public issue, but haven't yet.
• Kubernetes asks for reports to be submitted through https://hackerone.com. That's where I submitted the report. This is an export of the report

Title: Concurrent list requests of many, large Kubernetes resources cause etcd members to exhaust almost all available memory Scope: https://github.com/kubernetes/kubernetes Weakness: Denial of Service Severity: Medium (6.5) Link: /reports/1058775 Date: 2020-12-14 21:20:50 +0000

dlipovetsky

from typing import List, Optional
from kitty.boss import Boss
from kitty.tabs import Tab
from kitty.window import Window
from kittens.tui.handler import result_handler
import json

def main(args):
    pass

dlipovetsky

CFSSL as an external CA for non-ha kubeadm intialized clusters

Using cfssl to Create an External CA Infrastructure

Install cfssl

# This requires an existing Go environment with GOPATH set
go get -u github.com/cloudflare/cfssl/cmd/...

dlipovetsky

package timeafterleak_test

import (
        "log"
        "testing"
        "time"

        "github.com/fortytw2/leaktest"
)

dlipovetsky

package main

import (
	"log"
	"net"
	"github.com/apparentlymart/go-cidr/cidr"
)

func main() {
	_, ipNet, err := net.ParseCIDR("192.168.0.0/24")

dlipovetsky

$ gsutil ls -R gs://kubernetes-release/release/v1.4.1 | sed 's|gs://kubernetes-release|https://storage.googleapis.com/kubernetes-release|; /^.*:$/d; /^$/d'
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-386.tar.gz
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-386.tar.gz.md5
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-386.tar.gz.sha1
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-amd64.tar.gz
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-amd64.tar.gz.md5
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-darwin-amd64.tar.gz.sha1
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-linux-386.tar.gz
https://storage.googleapis.com/kubernetes-release/release/v1.4.1/kubernetes-client-linux-386.tar.gz.md5
https://storage.googleapis.com/kub

dlipovetsky

These are my notes for connecting to a meraki client vpn from ubuntu 16.04. This configuration assumes you are using a psk for the ipsec auth.

Install the following packages:

apt-get install -y strongswan xl2tpd

Configure strong swan

dlipovetsky

#! /bin/bash
source=$1
target=$2

sqlite3 $source ".dump moz_hosts" | sed -e 's/moz_hosts/moz_hosts_src/g' | sqlite3 $target

printf "hosts already in target, not merged:\n"
sqlite3 $target "select host
    from moz_hosts_src
    where type='cookie'