Micah Hausler micahhausler
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| namespace io::k8s::admissionregistration { | |
| type V1AuditAnnotation = { | |
| "key": __cedar::String, | |
| "valueExpression": __cedar::String | |
| }; | |
| type V1ExpressionWarning = { | |
| "fieldRef": __cedar::String, | |
| "warning": __cedar::String | |
| }; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <link rel="stylesheet" href="https://unpkg.com/[email protected]/dist/bluesky-comments.css"> | |
| <style> | |
| /* Override default font sizes */ | |
| .bsky-comments-container { | |
| font-size: 16px !important; | |
| } | |
| ._commentContainer_1pvtk_72 { | |
| font-size: 16px !important; | |
| } |
micahhausler
/ custom-duration-seconds-example.yaml
Last active
August 9, 2023 21:20
Example ConfigMap, ServiceAccount, and Pod with a custom duration_seconds
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: ConfigMap | |
| metadata: | |
| name: aws-config | |
| data: | |
| credential-process: | | |
| #!/usr/bin/env bash | |
| aws sts assume-role-with-web-identity \ | |
| --duration-seconds 43200 \ | |
| --web-identity-token file:///var/run/secrets/eks.amazonaws.com/serviceaccount/token \ |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [default] | |
| region = us-west-2 | |
| role_arn = arn:aws:iam::123456789012:role/role-name | |
| web_identity_token_file = /var/run/secrets/eks.amazonaws.com/serviceaccount/token | |
| duration_seconds = 43200 # 12 hours, maximum | |
| # role_session_name = pod_name |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| package tests | |
| import ( | |
| "reflect" | |
| "strings" | |
| "testing" | |
| ) | |
| type TestRunner struct{} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "default": [ | |
| { | |
| "type": "insecureAcceptAnything" | |
| } | |
| ], | |
| "transports": | |
| { | |
| "docker-daemon": | |
| { |
micahhausler
/ account-m-role-iam-policy.json
Last active
June 16, 2022 17:49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Effect": "Allow", | |
| "Action": "sts:AssumeRole", | |
| "Resource": "arn:aws:iam::444455556666:role/account-n-role" | |
| } | |
| ] | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git a/Makefile b/Makefile | |
| index 253d32b..7329f04 100644 | |
| --- a/Makefile | |
| +++ b/Makefile | |
| @@ -22,11 +22,11 @@ export DOCKER_CLI_EXPERIMENTAL := enabled | |
| image-amd64: | |
| mkdir -p out | |
| - linuxkit build -docker -disable-content-trust -pull -format kernel+initrd -name hook-x86_64 -dir out $(LINUXKIT_CONFIG) | |
| + linuxkit build -docker -format kernel+initrd -name hook-x86_64 -dir out $(LINUXKIT_CONFIG) |
micahhausler
/ service.proto
Created
February 5, 2021 18:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| syntax = "proto3"; | |
| import "github.com/gogo/protobuf/gogoproto/gogo.proto"; | |
| import "google/protobuf/any.proto"; | |
| package v1alpha1; | |
| service TokenGeneratorService { | |
| // Generate a token with the provided claims | |
| rpc GenerateToken(GenerateTokenRequest) returns (GenerateTokenResponse) {} |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| syntax = "proto3"; | |
| import "github.com/gogo/protobuf/gogoproto/gogo.proto"; | |
| package v1alpha1; | |
| service TokenGeneratorService { | |
| // Generate a token with the provided claims | |
| rpc GenerateToken(GenerateTokenRequest) returns (GenerateTokenResponse) {} | |
| // List all active public keys |
NewerOlder