jchauncey

2020-05-12T12:46:16.544-0400	INFO	Detecting Debian vulnerabilities...

k8s.gcr.io/debian-base:v1.0.0 (debian 9.8)
==========================================
Total: 129 (UNKNOWN: 0, LOW: 86, MEDIUM: 27, HIGH: 16, CRITICAL: 0)

+-------------------+---------------------+----------+-----------------------+-----------------+---------------------------------------------+
|      LIBRARY      |  VULNERABILITY ID   | SEVERITY |   INSTALLED VERSION   |  FIXED VERSION  |                    TITLE                    |
+-------------------+---------------------+----------+-----------------------+-----------------+---------------------------------------------+
| apt               | CVE-2011-3374       | LOW      | 1.4.9                 |                 | It was found that apt-key                   |

jchauncey

stages:
- stage: build_and_push
  jobs: 
  - job: build_component_a
    steps:
    ...
  - job: build_component_b
    steps:
    ...
  - job: build_component_c

jchauncey

{
  "apiVersion": "vlabs",
  "properties": {
    "orchestratorProfile": {
      "orchestratorType": "Kubernetes"
    },
    "masterProfile": {
      "count": 1,
      "dnsPrefix": "",
      "vmSize": "Standard_D2_v2"

jchauncey

package kubernetes

import (
	"encoding/json"
	"fmt"
	"io/ioutil"
	"net/http"
	"net/url"
	"sync"
	"time"

jchauncey

#! /bin/sh
apt-get update
apt-get install -y apt-transport-https ca-certificates
apt-key adv --keyserver hkp://p80.pool.sks-keyservers.net:80 --recv-keys 58118E89F3A912897C070
echo "deb https://apt.dockerproject.org/repo ubuntu-trusty main" >> /etc/apt/sources.list.d/docker.list
apt-get update
apt-get purge lxc-docker
apt-cache policy docker-engine
apt-get install -y linux-image-extra-$(uname -r) linux-image-extra-virtual
apt-get install -y docker-engine

jchauncey

{
  "dashboard": {
    "id": null,
    "title": "NSQ Health",
    "tags": ["deis"],
    "style": "dark",
    "timezone": "browser",
    "editable": true,
    "hideControls": false,
    "sharedCrosshair": false,

jchauncey

  export GET_PODS_URL=https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT/api/v1/namespaces/$POD_NAMESPACE/pods
  pod_names=$(curl -s $GET_PODS_URL --header "Authorization: Bearer $TOKEN" --insecure  | jq --raw-output '.items[].metadata.name' | grep deis-nsqlookupd)
  while read -r pod; do
    GET_POD_URL=https://$KUBERNETES_SERVICE_HOST:$KUBERNETES_SERVICE_PORT/api/v1/namespaces/$POD_NAMESPACE/pods/${pod}
    pod_ip=$(curl -s $GET_POD_URL --header "Authorization: Bearer $TOKEN" --insecure | jq --raw-output '.status.podIP')
    export LOOKUP_COMMAND="$LOOKUP_COMMAND -lookupd-tcp-address ${pod_ip}:4161"
  done <<< "$pod_names"
  exec nsqd -broadcast-address ${NODE_NAME} ${LOOKUP_COMMAND}

jchauncey

require 'fluent/mixin/config_placeholders'
require 'fluent/mixin/plaintextformatter'
require 'fluent/mixin/rewrite_tag_name'
require 'fluent/output'

module Fluent
  class DeisOutput < Output
    Fluent::Plugin.register_output("deis_output", self)

    include Fluent::Mixin::PlainTextFormatter

jchauncey

<source>
  type tail
  path /var/log/containers/*.log
  pos_file /var/log/containers.log.pos
  time_format %Y-%m-%dT%H:%M:%S.%NZ
  tag kubernetes.*
  format json
  read_from_head true
</source>

jchauncey

(require '[clojure.string :as str])
(require '[riemann.common :as common])

(logging/init)
(info "loading" *config-file*)


(tcp-server :host "0.0.0.0"   :port 5555)
(udp-server :host "0.0.0.0"   :port 5556)