Skip to content

Instantly share code, notes, and snippets.

View keskad's full-sized avatar

Damian Kęska keskad

  • Poland
View GitHub Profile
@keskad
keskad / tf-cdk-boostrap.py
Last active October 7, 2025 09:16
AWS CDK code to bootstrap Terraform state with IAM policy limited to only access this S3 bucket
from aws_cdk import (
Stack,
RemovalPolicy,
aws_s3 as s3,
aws_iam as iam,
CfnOutput, Duration,
)
from constructs import Construct
---
apiVersion: tekton.dev/v1
kind: Task
metadata:
name: my-task
annotations:
hello: test-task
# ...
#!/bin/bash
# filter by annotation
helm template ./ --values some-test-app.yaml --debug | yq e '. | select(.metadata.annotations["hello"] == "world")' | kubectl apply -f -
# filter by label
helm template ./ --values some-test-app.yaml --debug | yq e '. | select(.metadata.labels["hello"] == "world")' | kubectl apply -f -
# filter by kind
helm template ./ --values some-test-app.yaml --debug | yq e '. | select(.kind == "Task")' | kubectl apply -f -
---
apiVersion: tekton.dev/v1beta1
kind: Task
metadata:
name: rsync
# (...)
spec:
description: >-
This task can be used to synchronize local and remote files.
workspaces:
---
apiVersion: tekton.dev/v1beta1
kind: Pipeline
metadata:
name: release-pipeline
spec:
workspaces:
- name: workspace
- name: dockerconfig
params:
---
apiVersion: tekton.dev/v1beta1
kind: PipelineRun
metadata:
generateName: my-pipeline-
spec:
pipelineRef:
name: release-pipeline # reference to kind: Pipeline resource
params:
- name: git-ref
@keskad
keskad / tekton-triggers.yaml
Last active November 25, 2022 13:42
Tekton's Triggers
# Event Listener is creating a Pod + Service that will LISTEN for incoming webhooks, it's a WEBHOOKS ROUTER
# When WEBHOOK passes validation (interceptors = validators), THEN a TriggerTemplate will apply PipelineRuns
# PipelineRuns = single execution of a Pipeline
---
apiVersion: triggers.tekton.dev/v1alpha1
kind: EventListener
metadata:
name: pipeline-listener
spec:
triggers:
package main
import (
"embed"
)
//go:embed folder/single_file.txt
var fileString string
//go:embed folder/single_file.txt
@keskad
keskad / php.ini.j2
Last active November 4, 2022 08:07
// (...)
{% for extension in ENABLED_EXTENSIONS.split(',') %}
extension={{ extension }}.so
{% endfor %}
// (...)
[my_app]
user = www-data
group = www-data
listen = /var/run/php.sock
listen.owner = www-data
listen.group = www-data
php_admin_value[disable_functions] = exec,passthru,shell_exec,system
php_admin_flag[allow_url_fopen] = off
pm = dynamic