lizrice

Accessing Kubelet API

curl -sk https://localhost:10250/pods/

• If --anonymous-auth is turned off, you will see a 401 Unauthorized response.
• If --anonymous-auth is true and --authorization-mode is Webhook you'll see 403 Forbidden response with message Forbidden (user=system:anonymous, verb=get, resource=nodes, subresource=proxy)
• If --anonymous-auth is true and --authorization-mode is AlwaysAllow you'll see a list of pods.

lizrice

# -*- mode: ruby -*-
# vi: set ft=ruby :

# This script to install Kubernetes will get executed after we have provisioned the box 
$script = <<-SCRIPT

# Install kubernetes
apt-get update && apt-get install -y apt-transport-https
curl -s https://packages.cloud.google.com/apt/doc/apt-key.gpg | apt-key add -
cat <<EOF >/etc/apt/sources.list.d/kubernetes.list

lizrice

    # Usage:
    #   aws cloudformation --region <region> create-stack --stack-name <stack name> --template-body file://vpc-fargate.yaml
    
    # This template will:
    #   Create a VPC with:
    #       2 Public Subnets
    #       2 Private Subnets
    #   An Internet Gateway (with routes to it for Public Subnets)
    #   A NAT Gateway for outbound access (with routes from Private Subnets set to use it)
    #     

lizrice

{
  "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "parameters": {
  },
  "resources": [
    {
      "name": "helloContainerGroup",
      "type": "Microsoft.ContainerInstance/containerGroups",
      "apiVersion": "2017-08-01-preview",

lizrice

Keybase proof

I hereby claim:

• I am lizrice on github.
• I am lizrice (https://keybase.io/lizrice) on keybase.
• I have a public key whose fingerprint is 09C3 9806 D4C5 31E7 2215 D9C9 19C1 59ED 9DBA D993

To claim this, I am signing this object:

lizrice

package main

// @lizrice, mostly copied from @doctor_julz: https://gist.github.com/julz/c0017fa7a40de0543001

import (
	"fmt"
	"os"
	"os/exec"
	"syscall"
)

lizrice

from __future__ import with_statement
from fabric.api import local, lcd

# Usage:
# fab connect - mounts /home/pi/<pi_dir> so it's available locally at <workspace><remote>
# fab disconnect - unmount
#
# Note this is Mac specific - Linux distributions use fusermount -u instead of umount
# Requires OSXFUSE and SSHFS from http://osxfuse.github.io/