James Cole jamcole
jamcole
/ haproxy.cfg
Created
March 19, 2021 22:25
simple tcp example (only the frontend and backend sections are meaningful)
View haproxy.cfg
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| global | |
| log 127.0.0.1 local2 | |
| chroot /var/lib/haproxy | |
| pidfile /var/run/haproxy.pid | |
| maxconn 4000 | |
| user haproxy | |
| group haproxy | |
| daemon |
View files_keepalived_ping.te
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| module keepalived_ping 1.0; | |
| require { | |
| type ping_exec_t; | |
| type ifconfig_exec_t; | |
| type keepalived_t; | |
| class process setcap; | |
| class file { execute execute_no_trans getattr open read }; | |
| class capability { setuid net_raw }; | |
| class rawip_socket { getopt create setopt write read }; | |
| class netlink_socket create; |
View chk_masters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/bin/sh | |
| if [ $(ss -nlt4H '( sport = :8443 )'|wc -c) -eq 0 ]; then exit 1; fi |
View alertmanager-main
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| global: | |
| resolve_timeout: 5m | |
| route: | |
| group_wait: 30s | |
| group_interval: 5m | |
| repeat_interval: 12h | |
| receiver: default | |
| routes: | |
| - match: | |
| alertname: DeadMansSwitch |
jamcole
/ example-dc.yaml
Last active
July 30, 2020 14:16
Seamlessly Load CAs from ConfigMap into k8s Pods with InitContainer
View example-dc.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| initContainers: | |
| - args: | |
| - -c | |
| - cp | |
| /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt | |
| /usr/share/pki/ca-trust-source/anchors/k8s && mkdir -p | |
| /etc/pki/ca-trust/extracted/pem | |
| /etc/pki/ca-trust/extracted/openssl | |
| /etc/pki/ca-trust/extracted/java && update-ca-trust | |
| command: |
View configurations.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # https://github.com/kubernetes-sigs/kustomize/blob/master/examples/transformerconfigs/README.md | |
| commonLabels: | |
| # set labels at metadata.labels for all types | |
| - path: metadata/labels | |
| # create metadata.labels if it doesn't exist | |
| create: true | |
| - path: spec/template/metadata/labels | |
| kind: DeploymentConfig | |
| create: true |
jamcole
/ .sops.yaml
Created
February 25, 2020 21:58
SOPS POC - Run before and after 'kustomize' commands... Secret files are named *.secret.*, files are renamed to *.encrypted.*
View .sops.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Config file for Mozilla SOPS: https://github.com/mozilla/sops | |
| # | |
| # find files to decrypt with `find . -name '*.encrypted.*' | |
| # find files to encrypt with `find . -name '*.secret.*' | |
| # | |
| # creation rules are evaluated sequentially, the first match wins | |
| creation_rules: | |
| # all files that match pattern *.secret.* or *.encrypted.* | |
| - path_regex: \.(secret|encrypted)\. | |
| pgp: '166586CD6F1A906D0786BE50C26EFAE7B312A5D8' |
jamcole
/ OpenShiftCredentials.groovy
Created
February 25, 2020 21:17
OpenShift Token Credentials Creator Jenkins Library
View OpenShiftCredentials.groovy
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import jenkins.model.* | |
| import com.cloudbees.hudson.plugins.folder.*; | |
| import com.cloudbees.hudson.plugins.folder.properties.*; | |
| import com.cloudbees.hudson.plugins.folder.properties.FolderCredentialsProvider.FolderCredentialsProperty; | |
| import com.cloudbees.plugins.credentials.impl.*; | |
| import com.cloudbees.plugins.credentials.*; | |
| import com.cloudbees.plugins.credentials.domains.*; | |
| import com.openshift.jenkins.plugins.OpenShiftTokenCredentials; | |
| import hudson.util.Secret; |
jamcole
/ setup-router.yml
Created
February 25, 2020 18:20
OCP 3.11 Playbook to enable extended logging, disable tls 1.0, and enable modern ciphers
View setup-router.yml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| - name: Configure OpenShift Router | |
| hosts: bastion | |
| gather_facts: no | |
| any_errors_fatal: yes | |
| roles: | |
| - oc_host | |
| - ocp_login_master | |
| tasks: | |
| # Configure router | |
| - name: Pause router rollout |
jamcole
/ gist:6d2cf8578a0e695bf0f291112b528b4b
Created
February 27, 2017 07:55
View gist:6d2cf8578a0e695bf0f291112b528b4b
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ### Keybase proof | |
| I hereby claim: | |
| * I am jamcole on github. | |
| * I am ch4lox (https://keybase.io/ch4lox) on keybase. | |
| * I have a public key ASAhP_SmJGPJRcOfaybF6XOgvBa_L2Ri33BqZCUtEy22wQo | |
| To claim this, I am signing this object: |