Skip to content

Instantly share code, notes, and snippets.

View todd-dsm's full-sized avatar
🏗️
Just trying stuff...

Todd Thomas todd-dsm

🏗️
Just trying stuff...
  • smpl-cloud
  • SoCal
View GitHub Profile
@todd-dsm
todd-dsm / tf-diff.tf
Last active February 10, 2022 22:30
IPv6 EKS Cluster
# NETWORKING
resource "aws_vpc" "vpc_network" {
cidr_block = var.host_cidr
enable_dns_hostnames = true
enable_dns_support = true
assign_generated_ipv6_cidr_block = true # REQd
tags = {
"Name" = var.project
"kubernetes.io/cluster/${var.cluster_apps}" = "shared"
@todd-dsm
todd-dsm / list.txt
Created January 19, 2022 19:00
example gist with index
A1 - foo
B2 - bar
C3 - baz
@todd-dsm
todd-dsm / programs.txt
Created January 13, 2022 23:48
Required Programs for DevOps Work
# Some of these programs are target installs; others are installed as dependencies.
# If the purpose of the program is not obvious, it's probably a dependency.
# ---------------------------------------------------------------------------------
autoconf
automake
aws-iam-authenticator
awscli
bash
bazel
bdw-gc
@todd-dsm
todd-dsm / override-values-all.yaml
Created December 13, 2021 21:15
vault values DEFAULT
---
csi:
daemonSet:
annotations: {}
kubeletRootDir: /var/lib/kubelet
providersDir: /etc/kubernetes/secrets-store-csi-providers
updateStrategy:
maxUnavailable: ""
type: RollingUpdate
debug: false
@todd-dsm
todd-dsm / override-values-ref.yaml
Created December 13, 2021 21:13
vault values REFERENCE
---
global:
enabled: true
psp:
annotations: |
seccomp.security.alpha.kubernetes.io/allowedProfileNames: docker/default,runtime/default
apparmor.security.beta.kubernetes.io/allowedProfileNames: runtime/default
seccomp.security.alpha.kubernetes.io/defaultProfileName: runtime/default
apparmor.security.beta.kubernetes.io/defaultProfileName: runtime/default
enable: false
@todd-dsm
todd-dsm / encode-cert.sh
Last active September 13, 2021 20:18
base64 encode certificate; looking for a single line of output, not a block
#!/usr/bin/env bash
{ IFS= read -rd '' secretMaterial <'foo-api.pem';} 2>/dev/null
myEncodedCert="$(echo -n "$secretMaterial" | base64)"
echo "$myEncodedCert"
myEncodedCert is displayed in a text block. I need it in a flat line as the "Target" at the bottom.
---
OUTPUT: Actual
@todd-dsm
todd-dsm / tfenv.sh
Last active February 16, 2024 20:24
tfenv quick setup
# If EXISTING install start here
# Dump the current Terraform binary
brew unlink terraform
brew uninstall terraform
# If NEW install start here
# Install tfenv
brew install tfenv
---
@todd-dsm
todd-dsm / get-pipeline-info.sh
Created July 30, 2021 20:58
retrieves service account details from kubernetes for the GitLab pipeline
#!/usr/bin/env bash
#set -x
###----------------------------------------------------------------------------
### FUNCTIONS
###----------------------------------------------------------------------------
function pMsg() {
theMessage="$1"
printf '%s\n' "$theMessage"
}
@todd-dsm
todd-dsm / hosts
Created July 23, 2021 00:34
download this raw and drop into: ~/.ansible/hosts
# This is the default ansible 'hosts' file.
#
# It should live in /etc/ansible/hosts
#
# - Comments begin with the '#' character
# - Blank lines are ignored
# - Groups of hosts are delimited by [header] elements
# - You can enter hostnames or ip addresses
# - A hostname/ip can be a member of multiple groups
@todd-dsm
todd-dsm / ansible.cfg
Created July 23, 2021 00:32
Ansible Config File; download raw to: ~/.ansible/ansible.cfg
# config file for ansible -- http://ansible.com/
# ==============================================
# nearly all parameters can be overridden in ansible-playbook
# or with command line flags. ansible will read ANSIBLE_CONFIG,
# ansible.cfg in the current working directory, .ansible.cfg in
# the home directory or /etc/ansible/ansible.cfg, whichever it
# finds first
[defaults]