madorn

apiVersion: v1
kind: List
items:
- apiVersion: extensions/v1beta1
  kind: PodSecurityPolicy
  metadata:
    name: psp.flannel.unprivileged
    annotations:
      seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default
      seccomp.security.alpha.kubernetes.io/defaultProfileName: docker/default

madorn

apiVersion: operators.coreos.com/v1alpha1
kind: InstallPlan
metadata:
  namespace: myproject
  name: ohyeah
spec:
  clusterServiceVersionNames:
  - mongodboperator.v0.3.2
  approval: Automatic
  source: certified-operators

madorn

 install:
    strategy: deployment
    spec:
      permissions:
      - serviceAccountName: controller
        rules:
        - apiGroups:
          - serving.knative.dev
          resources:
          - configurations

madorn

package stub

import (
	"fmt"
	"reflect"
	"context"

	v1alpha1 "github.com/madorn/plex-operator/pkg/apis/plex/v1alpha1"

	"github.com/operator-framework/operator-sdk/pkg/sdk"

madorn

package stub

import (
	"fmt"
	"reflect"

	v1alpha1 "github.com/memcached-operator/memcached-operator/pkg/apis/cache/v1alpha1"

	"github.com/operator-framework/operator-sdk/pkg/sdk/action"
	"github.com/operator-framework/operator-sdk/pkg/sdk/handler"

madorn

Install Docker

Install Go

MacOS

brew install go
export GOPATH=$HOME/go
export PATH=$PATH:/usr/local/bin:$GOPATH/bin

madorn

module "kube_certs" {
  source = "../../modules/tls/kube/user-provided"

  ca_cert_pem_path              = "/path/to/ca.pem"
  kubelet_cert_pem_path         = "/path/to/kubelet.pem"
  kubelet_key_pem_path          = "/path/to/kubelet.key"
  apiserver_cert_pem_path       = "/path/to/apiserver.pem"
  apiserver_key_pem_path        = "/path/to/apiserver.key"
}

madorn

Setup cfssl

Download cfssl binary

wget https://pkg.cfssl.org/R1.2/cfssl_linux-amd64

Set execute permissions on cfssl

madorn

apiVersion: v1
kind: Pod
metadata:
  name: aws-cli
  namespace: kiam-example
  labels:
    app: aws-cli
  annotations:
    iam.amazonaws.com/role: arn:aws:iam::XXXXXXXXXXXX:role/my-s3-role
spec:

madorn

These are my notes testing:

• Calico on Tectonic
• New (and undocumented) SystemNetworkPolicy TPR introduced in calico-lib

1. Clone the repo containing the Calico additions and switch to the appropriate branch.

$ git clone abhinavdahiya git@github.com:abhinavdahiya/tectonic-installer.git &&\
   cd tectonic-installer &&\
 git checkout calico_policy_support