on kubernetes version < v1.24.x
- Create files for the needed resources
-
a kustomize
---
| --- | |
| # Source: cilium/templates/cilium-secrets-namespace.yaml | |
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| name: "cilium-secrets" | |
| labels: | |
| app.kubernetes.io/part-of: cilium | |
| annotations: | |
| --- |
| #!/usr/bin/env bash | |
| ## desc: create sops key for fluxcd and more | |
| ## author: Thorsten Schifferdecker https://github.com/curx | |
| ## license: Apache 2.0 | |
| ## variables | |
| HASH="$(xxd -l5 -ps /dev/urandom)" | |
| # the keyname and comment |
| ## desc: create application for soft-serve | |
| ## author: Thorsten Schifferdecker <https://github.com/curx> | |
| ## license: Apache 2.0 | |
| apiVersion: v1 | |
| kind: Namespace | |
| metadata: | |
| name: soft-serve | |
| labels: | |
| app: soft-serve |
| #!/usr/bin/env bash | |
| ## desc: create k3s/rke2 crd helmChart for neuvector | |
| ## author: Thorsten Schifferdecker https://github.com/curx | |
| ## license: Apache 2.0 | |
| ## vars | |
| le_acme_email="${1:?ERR | no lets encypt email for acme is given, abort.}" | |
| neuvector_admin_password="${2:?ERR | no neuvector admin password is given, abort.}" | |
| neuvector_ingress_hostname="${3:?ERR | no neuvector ingress hostname is given, abort.}" |
| #!/usr/bin/env bash | |
| ## desc: create k3s/rke2 crd helmChart from a default helmChart | |
| ## author: Thorsten Schifferdecker https://github.com/curx | |
| ## license: Apache 2.0 | |
| ## vars | |
| helmrepo="${1:?error no helm repository given, abort.}" | |
| helmchart_name="${2:?error no helm name given, abort.}" | |
| helmchart_namespace="${3:-${helmchart_name}-system}" |
| #!/usr/bin/env bash | |
| ## desc: hibernate a gardener shoot cluster | |
| ## author: Thorsten Schifferdecker https://github.com/curx | |
| ## license: ASL-2.0 | |
| kubectl patch shoot ${1:?shootcluster name not given} \ | |
| -p '{"spec": { "hibernation": { "enabled": '${2:?hibernate true or false}'}}}' |
| config { | |
| module = true | |
| } | |
| rule "terraform_deprecated_index" { | |
| enabled = true | |
| } | |
| rule "terraform_unused_declarations" { | |
| enabled = true |
| # a simple dockerized nginx webserver | |
| version: '3' | |
| services: | |
| webserver: | |
| container_name: webserver | |
| image: docker.io/library/nginx:1.21-alpine | |
| ports: | |
| - 80:80 | |
| volumes: |
| -----BEGIN PUBLIC KEY----- | |
| MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv2Ynap1t0laT6cMDMv4rPN5Rvpo3 | |
| pU+IGUULCuB/L1Ae1R/hmr0Bq85vpu57mwHEEyNzqqc1SKuRdMOT4u7ZFg== | |
| -----END PUBLIC KEY----- |