Skip to content

Instantly share code, notes, and snippets.

View liggitt's full-sized avatar

Jordan Liggitt liggitt

1.1k followers · 0 following
  • Google
  • United States
View GitHub Profile
@liggitt
liggitt / csr.json
Last active February 20, 2024 15:23
{
"apiVersion": "certificates.k8s.io/v1",
"kind": "CertificateSigningRequest",
"metadata": { "name": "test" },
"spec": {
"signerName": "example.com/signer",
"usages": ["any"],
"request": "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
@liggitt
liggitt / example.sh
Last active August 3, 2023 19:29
govulncheck results
# run on k8s.io/kubernetes checkout at 99190634ab252604a4496882912ac328542d649d
# go version 1.20.6
govulncheck -scan module -json -test ./... > module_test.json
govulncheck -scan module -json ./... > module.json
govulncheck -scan package -json -test ./... > package_test.json
govulncheck -scan package -json ./... > package.json
govulncheck -scan symbol -json -test ./... > symbol_test.json
govulncheck -scan symbol -json ./... > symbol.json
@liggitt
liggitt / cel-type-mismatch.yaml
Last active November 15, 2021 22:07
# Apply like this to bypass client-side validation and exercise server-side validation:
#
# kubectl apply -f cel-type-mismatch.yaml --validate=false
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
name: mismatches.example.com
spec:
group: example.com
@liggitt
liggitt / 2021-06-25-leads.md
Created June 25, 2021 15:56

API Changes

What APIs?

  • REST APIs
    • built-in go-based APIs
    • custom resources
      • x-k8s.io - experimental, fast prototyping
      • k8s.io - "official", get API reviewed
    • most difficult to change over time
  • all (non-alpha) versions have to round-trip to each other losslessly
@liggitt
liggitt / pod-baseline.yaml
Last active February 3, 2024 14:23
pod security proof-of-concept
kind: Pod
apiVersion: v1
metadata:
name: baseline-pod
spec:
containers:
- name: default
image: k8s.gcr.io/pause:3.2
@liggitt
liggitt / quantize.go
Created January 6, 2021 16:57
package main
import (
"fmt"
"runtime"
"sync"
"time"
)
func main() {
@liggitt
liggitt / deflaking.md
Last active April 7, 2024 01:49
@liggitt
liggitt / scaler-cr.yaml
Created December 20, 2019 16:12
crd status patch
apiVersion: example.com/v1
kind: Scaler
metadata:
name: foo
spec:
replicas: 1
@liggitt
liggitt / github-review.user.js
Last active March 29, 2021 13:48
{
"manifest_version": 2,
"content_scripts": [ {
"exclude_globs": [ ],
"include_globs": [ ],
"js": [ "github-review.user.js" ],
"matches": [ "https://*.github.com/*",
"https://github.com/*"
],
"run_at": "document_end"
@liggitt
liggitt / resource_builder_example.go
Last active October 13, 2019 08:51
package main
import (
"fmt"
"os"
"github.com/spf13/pflag"
"k8s.io/apimachinery/pkg/api/meta"
"k8s.io/cli-runtime/pkg/genericclioptions"