Skip to content

Instantly share code, notes, and snippets.

View onelittlenightmusic's full-sized avatar

Roy Hiroyuki Osaki onelittlenightmusic

34 followers · 11 following
  • Hitachi America Ltd,
  • Santa Clara
View GitHub Profile
@onelittlenightmusic
onelittlenightmusic / 0-opa-json-cheatsheet.md
Last active August 20, 2021 20:30
Document for `jr`, `jb` or `jp`

jr, jp, jb (alias to opa eval): Cheatsheet

jr, jp and jb are commands for JSON modification.

Basic usages

$ data='{"name":"chris", "friends":["alice", "bob"]}'
# jr
$ echo $data | jr 'i.name'
@onelittlenightmusic
onelittlenightmusic / table.md
Created March 23, 2020 03:29
Resource Amount
CPU 4 Cores
Memory 12 GB
Disk 50 GB
@onelittlenightmusic
onelittlenightmusic / main-clipped.rego
Last active March 22, 2020 20:43
main = { #Start of value
"apiVersion": "admission.k8s.io/v1beta1",
"kind": "AdmissionReview",
"response": {
"allowed": true,
"patchType": "JSONPatch",
"patch": patch_bytes,
}
} #End of value
{ #Start of condition
@onelittlenightmusic
onelittlenightmusic / main.rego
Created March 22, 2020 19:39
Simple OPA mutation policy by Mr. Torin Sandall
package system
main = {
"apiVersion": "admission.k8s.io/v1beta1",
"kind": "AdmissionReview",
"response": {
"allowed": true,
"patchType": "JSONPatch",
"patch": patch_bytes,
}
@onelittlenightmusic
onelittlenightmusic / install.sh
Created March 22, 2020 19:37
OPA install.sh
kubectl create namespace opa
helm repo add stable https://kubernetes-charts.storage.googleapis.com
helm repo up
helm install opa stable/opa -f helm-values.yaml --namespace opa
@onelittlenightmusic
onelittlenightmusic / values.yaml
Created March 22, 2020 19:36
OPA helm chart values file
admissionControllerKind: MutatingWebhookConfiguration
opa: null
mgmt:
configmapPolicies:
enabled: true
namespaces: [opa, opa-example]
requireLabel: true
replicate:
cluster:
- v1/namespaces
@onelittlenightmusic
onelittlenightmusic / ingress-bad.yaml
Last active February 19, 2020 08:43
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ingress-ok
namespace: opa-example
spec:
rules:
- host: signin.ng.com
http:
paths:
@onelittlenightmusic
onelittlenightmusic / ingress-ok2.yaml
Created February 19, 2020 08:43
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ingress-ok-2
namespace: opa-example
spec:
rules:
- host: test2.secondok.com
http:
paths:
@onelittlenightmusic
onelittlenightmusic / ingress-ok.yaml
Created February 19, 2020 08:42
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ingress-ok
namespace: opa-example
spec:
rules:
- host: test.ok.com
http:
paths:
@onelittlenightmusic
onelittlenightmusic / namespace.yaml
Created February 19, 2020 08:40
apiVersion: v1
kind: Namespace
metadata:
annotations:
ingress-whitelist: "*.ok.com,*.secondok.com"
name: opa-example