mauilion

apiVersion: v1
kind: Namespace
metadata:
  labels:
    admission.gatekeeper.sh/ignore: no-self-managing
    control-plane: controller-manager
    gatekeeper.sh/system: "yes"
  name: gatekeeper-system
---
apiVersion: apiextensions.k8s.io/v1beta1

mauilion

kind: Cluster
apiVersion: kind.sigs.k8s.io/v1alpha3
kubeadmConfigPatches:
- |
  apiVersion: kubeadm.k8s.io/v1beta2
  kind: ClusterConfiguration
  apiServer:
    extraArgs:
      etcd-servers-overrides: "/events#http://10.10.10.10:2379"
nodes:

mauilion

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: system:aggregated-metrics-reader
  labels:
    rbac.authorization.k8s.io/aggregate-to-view: "true"
    rbac.authorization.k8s.io/aggregate-to-edit: "true"
    rbac.authorization.k8s.io/aggregate-to-admin: "true"
rules:

mauilion

# Generated by iptables-save v1.8.4 on Wed Sep  2 12:04:55 2020
*mangle
:PREROUTING ACCEPT [203961:202662193]
:INPUT ACCEPT [107095:83508318]
:FORWARD ACCEPT [96866:119153875]
:OUTPUT ACCEPT [126202:88855983]
:POSTROUTING ACCEPT [223130:208015275]
:LIBVIRT_PRT - [0:0]
-A POSTROUTING -j LIBVIRT_PRT
-A LIBVIRT_PRT -o virbr1 -p udp -m udp --dport 68 -j CHECKSUM --checksum-fill

mauilion

#!/bin/bash
kubectl apply -f https://docs.projectcalico.org/manifests/tigera-operator.yaml
curl -LO https://docs.projectcalico.org/manifests/custom-resources.yaml
echo "view and edit custom-reources.yaml for your clusters pod cidr and then apply."

mauilion

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
networking:
  disableDefaultCNI: true
nodes:
- role: control-plane
- role: worker
- role: worker
- role: worker

mauilion

{
    "AuxAudioDevice1": {
        "balance": 0.5,
        "deinterlace_field_order": 0,
        "deinterlace_mode": 0,
        "enabled": true,
        "flags": 0,
        "hotkeys": {
            "libobs.mute": [],
            "libobs.push-to-mute": [],

mauilion

export KIND_CLUSTER_NAME=$(whoami)
export INSTALL_K3S_VERSION=v1.19.5+k3s2
export INSTALL_K3S_EXEC="--node-label cluster=${KIND_CLUSTER_NAME} --kubelet-arg=port=10260"
export K3S_TOKEN=K100eb593c7b4dcba3df04ffc638c7133bf66677599e3c5be1daca4bb7a7dedb27d::server:0b3300e83314273d0a4ffb08d4cb0144
export K3S_URL=https://honk.jeefy.dev:6443
cat <<EOF | kind create cluster --config=-
kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
nodes:
- role: control-plane

mauilion

---
# Source: cilium/templates/cilium-agent-serviceaccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
  name: "cilium"
  namespace: kube-system
---
# Source: cilium/templates/cilium-operator-serviceaccount.yaml
apiVersion: v1

mauilion

* 
* ==> Audit <==
* |----------|-----------------------------------|---------|---------|---------|-------------------------------|-------------------------------|
| Command  |               Args                | Profile |  User   | Version |          Start Time           |           End Time            |
|----------|-----------------------------------|---------|---------|---------|-------------------------------|-------------------------------|
| ssh      | -- cat                            | calium  | dcooley | v1.21.0 | Tue, 06 Jul 2021 12:00:38 PDT | Tue, 06 Jul 2021 12:00:39 PDT |
|          | /etc/cni/net.d/10-calico.conflist |         |         |         |                               |                               |
| ssh      | -- cat                            | calium  | dcooley | v1.21.0 | Tue, 06 Jul 2021 12:01:57 PDT | Tue, 06 Jul 2021 12:01:57 PDT |
|          | /etc/cni/net.d/10-calico.conflist |         |         |         |                               |                               |
|