Skip to content

Instantly share code, notes, and snippets.

View timebertt's full-sized avatar

Tim Ebert timebertt

View GitHub Profile
@timebertt
timebertt / README.md
Last active September 14, 2021 10:01
Dump gardenlet profile

Dump gardenlet profile

Use the following manifest to dump the {heap,allocs,goroutine} profile of a running gardenlet every 10 minutes:

$ k apply -f profile-dump.yaml
deployment.apps/profile-dump created
persistentvolumeclaim/profile-dump created

$ kg get po,pvc -l app=profile-dump
@timebertt
timebertt / fix-kube-proxy-psp.sh
Last active May 27, 2020 12:54
[gardener/gardener@v1.5.0] fix failing clusters with allowPrivilegedContainers=false
#!/bin/bash
# create PSP and relating RBAC rules for kube-proxy containing the fix
# this will be chosen over the faulty `gardener.kube-system.kube-proxy`
# as the PSP admission plugin chooses the lexicographically first PSP.
kubectl apply -f - <<EOF
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
labels: