Skip to content

Instantly share code, notes, and snippets.

@oke-py
oke-py / itamae-local-log
Last active November 25, 2015 13:16
itamae local execution log
$ bundle exec itamae local roles/local.rb -y nodes/local.yml -l debug
INFO : Starting Itamae...
INFO : Loading node data from /Users/naoki/src/github.com/oke-py/setup-osx/nodes/local.yml...
DEBUG : Executing `mkdir -p /tmp/itamae_tmp`...
DEBUG : exited with 0
DEBUG : Executing `chmod 777 /tmp/itamae_tmp`...
DEBUG : exited with 0
DEBUG : Recipe, /Users/naoki/src/github.com/oke-py/setup-osx/vendor/bundle/ruby/2.0.0/gems/itamae-plugin-recipe-homebrew-0.0.3/lib/itamae/plugin/recipe/homebrew/common.rb, is skipped because it is already included
INFO : Recipe: /Users/naoki/src/github.com/oke-py/setup-osx/roles/local.rb
INFO : Recipe: /Users/naoki/src/github.com/oke-py/setup-osx/vendor/bundle/ruby/2.0.0/gems/itamae-plugin-recipe-homebrew-0.0.3/lib/itamae/plugin/recipe/homebrew/package.rb
@oke-py
oke-py / kube-hunter-output.txt
Created January 15, 2019 10:12
Kubernetes on Docker for Macに対するkube-hunter実行結果
$ docker run --rm aquasec/kube-hunter --internal
~ Started
~ Discovering Open Kubernetes Services...
|
| Kubelet API (readonly):
| type: open service
| service: Kubelet API (readonly)
|_ host: 192.168.65.3:10255
|
| Kubelet API:
@oke-py
oke-py / istio-on-gke.md
Last active January 23, 2019 11:27
Istio on GKE tutorial
@oke-py
oke-py / sidecar-auto-injection.yaml
Created January 24, 2019 09:35
Istio sidecar auto-injection
apiVersion: v1
kind: Pod
metadata:
annotations:
kubernetes.io/limit-ranger: 'LimitRanger plugin set: cpu request for container
nginx'
sidecar.istio.io/status: '{"version":"0ea0fcd95943913de1b43ee92a4e6788a1637ff6e8469cef8ba3a5ca1ad96d51","initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-envoy","istio-certs"],"imagePullSecrets":null}'
creationTimestamp: "2019-01-24T09:27:30Z"
generateName: nginx-78f5d695bd-
labels:
@oke-py
oke-py / falco.sh
Last active May 23, 2019 23:53
color slack message from falco
#/bin/sh
cat warn.json | jq 'if .priority == "Emergency" or .priority == "Critical" or .priority == "Error" then
{ attachments: [{ text: .output, color: "danger" }]}
elif .priority == "Warning" or .priority == "Notice" then
{ attachments: [{ text: .output, color: "warning" }]}
elif .priority == "Informational" then
{ attachments: [{ text: .output, color: "good" }]}
else
{ attachments: [{ text: .output }]}
end' | curl -d @- -X POST https://hooks.slack.com/services/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
@oke-py
oke-py / RequestNewMembership.md
Last active July 8, 2019 04:41
REQUEST: New membership for oke-py
@oke-py
oke-py / 1.14-ja.1.md
Last active November 20, 2019 05:20
k8s-doc-ja 1.14-ja.1
@oke-py
oke-py / output.txt
Created May 17, 2020 02:37
Terraform Resource: aws_config_config_rule
$ terraform validate
Warning: Quoted references are deprecated
on config_config_rule.tf line 9, in resource "aws_config_config_rule" "r":
9: depends_on = ["aws_config_configuration_recorder.foo"]
In this context, references are expected literally rather than in quotes.
Terraform 0.11 and earlier required quotes, but quoted references are now
deprecated and will be removed in a future version of Terraform. Remove the
@oke-py
oke-py / names.diff
Created May 18, 2020 02:01
git diff upstream/release-1.15 master content/en/docs/concepts/overview/working-with-objects/names.md
diff --git a/content/en/docs/concepts/overview/working-with-objects/names.md b/content/en/docs/concepts/overview/working-with-objects/names.md
index dffff2d1a..01bb53b56 100644
--- a/content/en/docs/concepts/overview/working-with-objects/names.md
+++ b/content/en/docs/concepts/overview/working-with-objects/names.md
@@ -2,31 +2,59 @@
reviewers:
- mikedanese
- thockin
-title: Names
+title: Object Names and IDs
@oke-py
oke-py / annotations.diff
Created May 20, 2020 00:22
git diff upstream/release-1.13 upstream/release-1.17 content/en/docs/concepts/overview/working-with-objects/annotations.md
diff --git a/content/en/docs/concepts/overview/working-with-objects/annotations.md b/content/en/docs/concepts/overview/working-with-objects/annotations.md
index cfd08be91..f88c6a000 100644
--- a/content/en/docs/concepts/overview/working-with-objects/annotations.md
+++ b/content/en/docs/concepts/overview/working-with-objects/annotations.md
@@ -69,6 +69,25 @@ If the prefix is omitted, the annotation Key is presumed to be private to the us
The `kubernetes.io/` and `k8s.io/` prefixes are reserved for Kubernetes core components.
+For example, here’s the configuration file for a Pod that has the annotation `imageregistry: https://hub.docker.com/` :
+