Skip to content

Instantly share code, notes, and snippets.

View tgraf's full-sized avatar

Thomas Graf tgraf

View GitHub Profile
apiVersion: cilium.io/v1alpha1
kind: TracingPolicy
metadata:
name: "capability-change"
spec:
kprobes:
- call: "__close_fd"
syscall: false
args:
Vagrant.configure("2") do |config|
config.vm.box = "ubuntu/focal64"
config.vm.provision :docker
config.vm.network "private_network", ip: "192.168.56.11"
config.vm.synced_folder ".", "/home/vagrant/demo", create: true
config.ssh.extra_args = ["-t", "cd /home/vagrant/demo; bash --login"]
config.vm.provider "virtualbox" do |v|
v.memory = 8192
v.cpus = 2
end
static __always_inline void *xdp_data(const struct xdp_md *xdp)
{
return (void *)(unsigned long)xdp->data;
}
static __always_inline void *xdp_data_end(const struct xdp_md *xdp)
{
return (void *)(unsigned long)xdp->data_end;
}
@tgraf
tgraf / interface.go
Created October 20, 2018 11:48
envoy_golang
type ParserFactory interface {
Create(connection *Connection) Parser
}
// A parser instance is used for each connection. OnData will be called from a single thread only.
type Parser interface {
// OnData() is called when input is available on the underlying connection. The Parser
// instance is only ever used for processing data of a single connection, which allows
// the parser instance to keep connection specific state. All OnData() calls for a
// single connection (both directions) are made from a single thread, so that
kind: ConfigMap
apiVersion: v1
metadata:
name: cilium-config
namespace: kube-system
data:
# This etcd-config contains the etcd endpoints of your cluster. If you use
# TLS please make sure you uncomment the ca-file line and add the respective
# certificate has a k8s secret, see explanation bellow in the comment labeled
# "ETCD-CERT"
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: cilium
rules:
- apiGroups:
- ""
resources:
- pods
- namespaces
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1beta1
metadata:
name: cilium
rules:
- apiGroups:
- ""
resources:
- pods
- namespaces

Keybase proof

I hereby claim:

  • I am tgraf on github.
  • I am tgraf (https://keybase.io/tgraf) on keybase.
  • I have a public key ASC27THKioSfbngtAnV9FFY2pcMzAvvwtpKHBqnWR6CZ9Qo

To claim this, I am signing this object: