micahhausler

# Go to https://developer.github.com/v4/explorer/ and enter the graphql query with the query veriable:
# {"queryString": "your-githubuser-name"}

cat results.json | 
  jq '.data.user.repositories.edges[] | { Count: .node.collaborators.totalCount, Repo: .node.name} | select(.Count > 2)'

micahhausler

apiVersion: v1
kind: ConfigMap
metadata:
  name: aws-config
data:
  credential-process: |
    #!/usr/bin/env bash
    aws sts assume-role-with-web-identity \
      --duration-seconds 43200 \ 
      --web-identity-token file:///var/run/secrets/eks.amazonaws.com/serviceaccount/token \

micahhausler

[default]

region                  = us-west-2
role_arn                = arn:aws:iam::123456789012:role/role-name
web_identity_token_file = /var/run/secrets/eks.amazonaws.com/serviceaccount/token
duration_seconds        = 43200 # 12 hours, maximum
# role_session_name      = pod_name

micahhausler

package tests

import (
	"reflect"
	"strings"
	"testing"
)

type TestRunner struct{}

micahhausler

{
    "default": [
        {
            "type": "insecureAcceptAnything"
        }
    ],
    "transports":
        {
            "docker-daemon":
                {

micahhausler

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "sts:AssumeRole",
            "Resource": "arn:aws:iam::444455556666:role/account-n-role"
        }
    ]
}

micahhausler

diff --git a/Makefile b/Makefile
index 253d32b..7329f04 100644
--- a/Makefile
+++ b/Makefile
@@ -22,11 +22,11 @@ export DOCKER_CLI_EXPERIMENTAL := enabled
 
 image-amd64:
        mkdir -p out
-       linuxkit build -docker -disable-content-trust -pull -format kernel+initrd -name hook-x86_64 -dir out $(LINUXKIT_CONFIG)
+       linuxkit build -docker -format kernel+initrd -name hook-x86_64 -dir out $(LINUXKIT_CONFIG)

micahhausler

syntax = "proto3";

import "github.com/gogo/protobuf/gogoproto/gogo.proto";
import "google/protobuf/any.proto";

package v1alpha1;

service TokenGeneratorService {
  // Generate a token with the provided claims
  rpc GenerateToken(GenerateTokenRequest) returns (GenerateTokenResponse) {}

micahhausler

syntax = "proto3";

import "github.com/gogo/protobuf/gogoproto/gogo.proto";

package v1alpha1;

service TokenGeneratorService {
  // Generate a token with the provided claims
  rpc GenerateToken(GenerateTokenRequest) returns (GenerateTokenResponse) {}
  // List all active public keys

micahhausler

NORMAL="\[\033[00m\]"
BLUE="\[\033[01;34m\]"
RED="\[\e[1;31m\]"
YELLOW="\[\e[1;33m\]"
GREEN="\[\e[1;32m\]"
PS1_WORKDIR="\w"
PS1_HOSTNAME="\h"
PS1_USER="\u"

__kube_ps1()