rverchere

Envoy Gateway patch, to disable multipart on httproute, waiting php fix.

$ kubectl apply -f deny-multipart.yaml
$ kubectl patch httproute <route-name> --type=json --patch-file patch-route.json

rverchere

$ uname -a
Darwin mbp-remi.local 25.2.0 Darwin Kernel Version 25.2.0: Tue Nov 18 21:09:56 PST 2025; root:xnu-12377.61.12~1/RELEASE_ARM64_T6041 arm64

$ ./docker2svc.sh dockerfiles/Dockerfile.clawd
ℹ️ clawd already exists, recreating
✅ clawd service files generated
➡️ press enter to build clawd image or ^C to exit
✅ netbsd-GENERIC64.img.gz is fresh
✅ base.tar.xz is fresh
✅ etc.tar.xz is fresh

rverchere

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: mutate-rancher-secrets-webhookconfiguration
  annotations:
    policies.kyverno.io/title: Filter Rancher secrets WebhookConfiguration
    policies.kyverno.io/description: >-
      Filter Rancher WebhookConfiguration to match secrets not in the `kube-system` namespace
spec:
  mutateExistingOnPolicyUpdate: true

rverchere

# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,

rverchere

2025-04-28T16:50:31.716+0200 [DEBUG] ReferenceTransformer: "module.kubernetes-ovh-cluster.ovh_cloud_project_kube.k8s_cluster" references: []
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: 2025/04/28 16:50:31 [DEBUG] OVH API Request Details:
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: ---[ REQUEST ]---------------------------------------
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: Host: eu.api.ovh.com
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: User-Agent: github.com/ovh/go-ovh (Terraform//)
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: Accept: application/json
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0: Accept-Encoding: gzip
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0
2025-04-28T16:50:31.732+0200 [DEBUG] provider.terraform-provider-ovh_v2.1.0
2025-04-28T16:50:31.732+0200 [DEBUG] provider.

rverchere

#!/usr/bin/env bash
set -eu

# This script change the rancher manager URL (same rancher server) for downstream clusters.
# You need to access to the downstream cluster outside of rancher manager server, as you need to stop the cattle-agent deployment.
RANCHER_URL=https://rancher.mycompany.com

context=$(kubectl config current-context | cut -d'@' -f 2) # My context name is user@cluster
mkdir -p $context
secretName=$(kubectl get deploy cattle-cluster-agent -n cattle-system -o jsonpath="{.spec.template.spec.volumes[0].secret.secretName}")

rverchere

## Kube State Metrics to get VPA metrics
# Old vs New metrics:
# - kube_verticalpodautoscaler_labels -> kube_customresource_verticalpodautoscaler_labels
# - kube_verticalpodautoscaler_status_recommendation_containerrecommendations_target -> kube_customresource_verticalpodautoscaler_status_recommendation_containerrecommendations_target
# - kube_verticalpodautoscaler_status_recommendation_containerrecommendations_lowerbound -> kube_customresource_verticalpodautoscaler_status_recommendation_containerrecommendations_lowerbound
# - kube_verticalpodautoscaler_status_recommendation_containerrecommendations_upperbound -> kube_customresource_verticalpodautoscaler_status_recommendation_containerrecommendations_upperbound
# - kube_verticalpodautoscaler_status_recommendation_containerrecommendations_uncappedtarget -> kube_customresource_verticalpodautoscaler_status_recommendation_containerrecommendations_uncappedtarget
# Resources:
# - https://github.com/kubernetes/kube-state-metrics/blob/main/docs/customresourcestate-me

rverchere

# Allow environment variables usage
extraArgs:
  - -config.expand-env=true

# Scrape config to read syslog file from node
config:
  snippets:
    extraScrapeConfigs: |
      # Add an additional scrape config for syslog
      - job_name: node-syslog

rverchere

# Scrape config to read syslog file from node
config:
  snippets:
    extraScrapeConfigs: |
      # Add an additional scrape config for syslog
      - job_name: node-syslog
        static_configs:
        - targets:
          - localhost
          labels:

rverchere

# Set fsGroup to allow syslog file reading
podSecurityContext:
  fsGroup: 4