jimangel

https://www.windmill.dev/docs/advanced/self_host#update

---

Here are simple one-liners for backing up and restoring your Windmill PostgreSQL database:

Backup & Restore

jimangel

What?

This submits 1,000 "sleep" workloads to kueue into 2 local queues.

Pre Reqs / helpers

• KinD cluster

cat <<'EOF' > kind-config.yaml
kind: Cluster

jimangel

blueprint:
  name: Party Lights (Label Support)
  author: AntonH (Modified for labels)
  homeassistant:
    min_version: "2024.10.0"
  description: |
    **Version 3.2L (Label Support)**
    Lights go to party mode (color loops or fade-in-and-out)
    ⚠️ **NOTE:** ⚠️
    *This automation is triggered by the status of a switch or an input_boolean entity.*

jimangel

GitHub → Gmail Labels (Minimal + Robust, Allow-List)

Automatically create/add labels to emails using GitHub's X-GitHub-Labels header.

This Apps Script scans recent GitHub notification emails and applies only the labels you allow as Gmail labels (e.g., gh/kind/bug, gh/sig/docs).

---

What it does

jimangel

Home Assistant with ecowitt: HTTP to HTTPS nginx reverse proxy secure DIY solution

Shoutout @del13r for posting a great tutorial on the community forum and indepth feedback on GitHub issues.

Problem

Ecowitt can only send stats to HTTP API endpoints and we want to keep our Home Assistant secure via HTTP/s access only.

Resolution

jimangel

Enable auditing on KinD

TODO

• Use a webhook vs. file backend (maybe cloudrun?)
• This might only be possible if Docker is running as root - need to test

Config

Make a temporary directory to host files to be mounted in KinD.

jimangel

#cloud-config
autoinstall:
  version: 1

  ssh:
    install-server: true
    # option "allow-pw" defaults to `true` if authorized_keys is empty, `false` otherwise.
    allow-pw: false

  # "[late-commands] are run in the installer environment with the installed system mounted at /target."

jimangel

Upload staging images to Google Artifact Registry

This is specifically for testing unreleased k8s components. Most of this is from https://cloud.google.com/artifact-registry/docs/docker/quickstart

Pre Reqs

• https://cloud.google.com/sdk/docs/install

Setup

jimangel

Fixes errors in Kubernetes v1.22+:

• kubelet cgroup driver: \"cgroupfs\" is different from docker cgroup driver: \"systemd\""
• kubelet cgroup driver: \"systemd\" is different from docker cgroup driver: \"cgroupfs\""

By setting both to use systemd as preferred by kubeadm.

Kubeadm: remove the automatic detection and matching of cgroup drivers for Docker. For new clusters if you have not configured the cgroup driver explicitly you might get a failure in the kubelet on driver mismatch (kubeadm clusters should be using the systemd driver). Also remove the IsDockerSystemdCheck preflight check (warning) that checks if the Docker cgroup driver is set to systemd. Ideally such detection / coordination should be on the side of CRI implementers and the kubelet. Please see the page on [how to configure cgroup drivers](https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/

jimangel

Kubernetes v1.16 API deprecation testing

Examples of how to test the impact of the v1.16 API deprecations and ways to debug early!

If this is the first time you're hearing of these deprecations STOP and read this blog post (thanks @vllry!).

Common misunderstandings

1. The exact apiVersion: value that I use in my manifest is stored on disk (etcd).