mhausenblas

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "",
      "Effect": "Allow",
      "Action": [
        "glue:GetTableVersions"
      ],
      "Resource": "*"

mhausenblas

Description: >
    This template deploys a Fluent Bit Daemonset to an ECS Cluster
Parameters:
    EnvironmentName:
        Description: An environment name that will be prefixed to resource names
        Type: String

    DockerImage:
        Description: The Fluent Bit Docker image.
        Type: String

mhausenblas

FROM ubuntu:16.04
MAINTAINER Michael Hausenblas, mhausenblas.info

USER 1001
WORKDIR /app
RUN chown -R 1001:1 /app

# install ttyd and kubed-sh
RUN curl -s -L https://github.com/tsl0922/ttyd/releases/download/1.4.2/ttyd_linux.x86_64 -o ttyd && \
    chmod +x ttyd && \

mhausenblas

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  labels:
    run: hello-world
  name: hello-world
  namespace: default
spec:
  selector:
    matchLabels:

mhausenblas

• Kubernetes RBAC --> largely based on OpenShift RBAC
• Kubernetes Pod Security Policy --> largely based on OpenShift Security Context Constraints
• Kubernetes Ingress --> preceded by OpenShift Routes
• Kubernetes Deployments --> preceded by OpenShift Deployment Config
• Network Policy --> preceded by OpenShift Multi-tenant SDN

mhausenblas

VPA demo

Based on the official docs and the Banzai Cloud blog post by Toader Sebastian.

Prerequisites

Environment:

$ minishift version

mhausenblas

apiVersion: v1
kind: Pod
metadata:
  name: envfromsecret
spec:
  containers:
  - name: shell
    image: centos:7
    command:
    - "bin/bash"

mhausenblas

See also:

• commandlinefu.com
• bashoneliners.com

Basics

File descriptors

The bash has three default file descriptors for each process:

mhausenblas

An Introduction to Kubernetes

• Basics
• End-to-end example app

Also, check out this kubectl cheatsheet.

Basics

Using Katacoda online or install Minikube locally.

mhausenblas