lalyos

#!/usr/bin/env bash

VERSION=4.0.1
SCRIPT=`basename "$0"`
APPNAME="My App"
APPICONS="/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/GenericApplicationIcon.icns"
OSX_VERSION=`sw_vers -productVersion`
PWD=`pwd`

function usage {

lalyos

## containerd prereq
modprobe br_netfilter
modprobe overlay

cat <<EOF | sudo tee /etc/modules-load.d/containerd.conf
overlay
br_netfilter
EOF

cat <<EOF | sudo tee /etc/sysctl.d/99-kubernetes-cri.conf

lalyos

apiVersion: bitnami.com/v1alpha1
kind: SealedSecret
metadata:
  annotations:
    sealedsecrets.bitnami.com/cluster-wide: "true"
  creationTimestamp: null
  name: friday
spec:
  encryptedData:
    COLOR: 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

lalyos

---
apiVersion: krew.googlecontainertools.github.com/v1alpha2
kind: Plugin
metadata:
  name: ing
spec:
  version: "v0.0.6"
  homepage: https://github.com/lalyos/kubectl-ing
  shortDescription: "Generates an Ingress for a svc"
  description: |

lalyos

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: kube-explorer
  namespace: kube-system
  labels:
    app: kube-explorer
---
kind: ClusterRoleBinding

lalyos

In kubernetes 1.22 PSP (Pod Security Policies) is depricated. Here are the relevant docs extracted from kubernetes/website#28903

• Pod Security Standards
• Pod Security Admission
• Enforcing Pod Security Standards
• Enforce Pod Security Standards with Namespace Labels
• Enforce Pod Security Standards by Configuring the Built-in Admission Controller

lalyos

This is the k8s training shared files for Grape

kube context

curl -LO https://gist.githubusercontent.com/lalyos/8f8883056f6b880cf233a954cf9d2523/raw/8df9863fec650781c5b61eccaddde0d229c8f1de/config-prod

merge

lalyos

namespace: fleet-helm-example
helm:
  releaseName: kyverno-test
  chart: "https://github.com/lalyos/kyverno-chart/archive/master.zip"

lalyos

Generate svg diagrams from k8s manifest files

Tools needed

• https://github.com/wwmoraes/kubegraph
• docker

Usage

generate dot file from manifest

lalyos

Usage

This is what I can remember:

curl -L j.mp/bash-completion-docker | sh 

or if you dont like curl-pipe, do it by hand:

ln -s /Applications/Docker.app/Contents/Resources/etc/docker.bash-completion /usr/local/etc/bash_completion.d/docker