Will Medlar wmedlar

👋 Hi, I'm Geoff. I stole off all your NFTs.

I respectfully ask that you don't quote me as “$company person Geoffrey Huntley said” – if I speak for a company, I will publish on its channels. My full name is "Geoffrey Huntley" please use that and not "Geoff Huntley".

website: https://ghuntley.com/
newsletter: https://ghuntley.com/newsletter
twitter: https://www.twitter.com/geoffreyhuntley.com
linkedin: https://www.linkedin.com/in/geoffreyhuntley

kube2iam your security partner

Introduction
Setup kube2iam in your cluster
Setting up the Role in AWS
- The Role
Trust Relationship

Normally, when you diff an [Ansible vault][], all you see is gibberish.

$ git diff -- group_vars/all/vault.yml
diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml
index 245ccf4..90bf9ee 100644
--- a/group_vars/all/vault.yml
+++ b/group_vars/all/vault.yml
@@ -1,111 +1,111 @@
 $ANSIBLE_VAULT;1.1;AES256

	// For all the confusing Prometheus configuration and
	// regular expressions,
	// explained in examples.


	// Remember, there are default values for each item if it's missing.
	// regex is (.*),
	// replacement is $1,
	// separator is ;
	// ,and action is replace

	CREATE OR REPLACE FUNCTION table_update_notify() RETURNS trigger AS $$
	DECLARE
	id bigint;
	BEGIN
	IF TG_OP = 'INSERT' OR TG_OP = 'UPDATE' THEN
	id = NEW.id;
	ELSE
	id = OLD.id;
	END IF;
	PERFORM pg_notify('table_update', json_build_object('table', TG_TABLE_NAME, 'id', id, 'type', TG_OP)::text);

	$ gsutil ls -R gs://kubernetes-release/release/v0.5.4 \| sed 's\|gs://kubernetes-release\|https://storage.googleapis.com/kubernetes-release\|; /^.*:$/d; /^$/d'
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-client-darwin-386.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-client-darwin-amd64.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-client-linux-386.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-client-linux-amd64.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-client-linux-arm.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-salt.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes-server-linux-amd64.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/kubernetes.tar.gz
	https://storage.googleapis.com/kubernetes-release/release/v0.5.4/bin/darwin/386/kubecfg

	package main

	import (
	"fmt"
	"os"
	"os/signal"
	"syscall"
	)

	func main() {

	FROM alpine

	COPY configure-node.sh configure-node.sh

	CMD ["/bin/sh", "configure-node.sh"]