K8s-users - Revision history

Tcepo at 20:45, 26 March 2026

2026-03-26T20:45:40Z

← Older revision		Revision as of 22:45, 26 March 2026
Line 28:		Line 28:
	grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )		grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )
	nameSpace=${userLogin}		nameSpace=${userLogin}
	apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )		#apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )
			apiUrl=$(kubectl config view --raw \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )
	userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )		userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )
	#https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user		#https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/#normal-user

Tcepo at 05:37, 24 April 2024

2024-04-24T05:37:16Z

@@ Line 73: / Line 73: @@
          matchLabels:
            kubernetes.io/metadata.name: ingress
    podSelector: {}
    policyTypes:

Tcepo at 10:04, 22 April 2024

2024-04-22T10:04:30Z

← Older revision		Revision as of 12:04, 22 April 2024
Line 27:		Line 27:
	fi \|while read userLogin ;do		fi \|while read userLogin ;do
	grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )		grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )
	nameSpace=~~home-~~${userLogin}		nameSpace=${userLogin}
	apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )		apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )
	userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )		userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )

Tcepo: /* code */

2024-01-16T14:34:43Z

code

← Older revision		Revision as of 16:34, 16 January 2024
Line 18:		Line 18:
	mkdir -p old		mkdir -p old
	cd old		cd old
	bashRc=$(find /etc -type f -name "*bashrc" \|grep -vw /etc/skel/ \|head -1 )		#bashRc=$(find /etc -type f -name "*bashrc" \|grep -vw /etc/skel/ \|head -1 )
	sed -i '/kube/d' /home/*/.bashrc ${bashRc}		#sed -i '/kube/d' /home/*/.bashrc ${bashRc}
	echo 'export KUBECONFIG=${HOME}/.kube/config' >>${bashRc}		#echo 'export KUBECONFIG=${HOME}/.kube/config' >>${bashRc}
	if [ -z "${usersList}" ] ;then		if [ -z "${usersList}" ] ;then
	cat /etc/passwd \|grep :/home/ \|cut -d':' -f1		cat /etc/passwd \|grep :/home/ \|cut -d':' -f1
Line 26:		Line 26:
	echo "${usersList}"		echo "${usersList}"
	fi \|while read userLogin ;do		fi \|while read userLogin ;do
			grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )
	nameSpace=home-${userLogin}		nameSpace=home-${userLogin}
	apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )		apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )

Tcepo: /* code */

2023-03-18T11:04:39Z

code

← Older revision		Revision as of 13:04, 18 March 2023
Line 26:		Line 26:
	echo "${usersList}"		echo "${usersList}"
	fi \|while read userLogin ;do		fi \|while read userLogin ;do
	nameSpace=~~infra~~-${userLogin}		nameSpace=home-${userLogin}
	apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )		apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )
	userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )		userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )

Tcepo: /* OPENAI resume */

2023-03-10T18:00:47Z

OPENAI resume

← Older revision		Revision as of 20:00, 10 March 2023
Line 137:		Line 137:
	</syntaxhighlight>		</syntaxhighlight>

	==OPENAI ~~resume~~==		==OPENAI summary==
	This script creates a new directory "old" in the home directory and changes to that directory. It then downloads the content of a URL (https://infocepo.com/wiki/index.php/Special:Export/K8s-users) and saves it to a file. The file is then executed by the command bash $$ (where $$ is the process id of the current shell). The script then changes back to the original directory and removes any reference to kube in the .bashrc file of all users in the system.		This script creates a new directory "old" in the home directory and changes to that directory. It then downloads the content of a URL (https://infocepo.com/wiki/index.php/Special:Export/K8s-users) and saves it to a file. The file is then executed by the command bash $$ (where $$ is the process id of the current shell). The script then changes back to the original directory and removes any reference to kube in the .bashrc file of all users in the system.

Tcepo: /* code */

2023-02-17T19:18:35Z

code

← Older revision		Revision as of 21:18, 17 February 2023
Line 41:		Line 41:
	request: $(cat ${userLogin}.csr \|base64 \|tr -d '\n' )		request: $(cat ${userLogin}.csr \|base64 \|tr -d '\n' )
	signerName: kubernetes.io/kube-apiserver-client		signerName: kubernetes.io/kube-apiserver-client
	expirationSeconds: 86400 # one day		expirationSeconds: 31536000 #86400 # one day
	usages:		usages:
	- client auth		- client auth

Tcepo: /* code */

2023-02-16T20:12:23Z

code

← Older revision		Revision as of 22:12, 16 February 2023
Line 18:		Line 18:
	mkdir -p old		mkdir -p old
	cd old		cd old
	bashRc=$(find /etc -type f -name "*bashrc" \|grep -vw /etc/skel/ )		bashRc=$(find /etc -type f -name "*bashrc" \|grep -vw /etc/skel/ \|head -1 )
	sed -i '/kube/d' /home/*/.bashrc ${bashRc}		sed -i '/kube/d' /home/*/.bashrc ${bashRc}
	echo 'export KUBECONFIG=${HOME}/.kube/config' >>${bashRc}		echo 'export KUBECONFIG=${HOME}/.kube/config' >>${bashRc}

Tcepo at 20:45, 14 February 2023

2023-02-14T20:45:50Z

← Older revision		Revision as of 22:45, 14 February 2023
Line 10:		Line 10:
	curl https://infocepo.com/wiki/index.php/Special:Export/K8s-users 2>/dev/null \|tac \|sed -r '0,/'"#"'24cc42#/d' \|tac \|sed -r '0,/'"#"'24cc42#/d' \|sed 's/'"&"'amp;/\&/g;s/'"&"'gt;/>/g;s/'"&"'lt;/</g' >$$ &&\		curl https://infocepo.com/wiki/index.php/Special:Export/K8s-users 2>/dev/null \|tac \|sed -r '0,/'"#"'24cc42#/d' \|tac \|sed -r '0,/'"#"'24cc42#/d' \|sed 's/'"&"'amp;/\&/g;s/'"&"'gt;/>/g;s/'"&"'lt;/</g' >$$ &&\
	bash $$ &&\		bash $$ &&\
	cd -		cd - >/dev/null
	</syntaxhighlight>		</syntaxhighlight>
	====code====		====code====
Line 47:		Line 47:
	kubectl certificate approve ${userLogin} &&sleep 2 &&\		kubectl certificate approve ${userLogin} &&sleep 2 &&\
	kubectl get csr ${userLogin} -o jsonpath='{.status.certificate}'\|base64 -d >${userLogin}.crt		kubectl get csr ${userLogin} -o jsonpath='{.status.certificate}'\|base64 -d >${userLogin}.crt
	kubectl create namespace ${nameSpace}		kubectl create namespace ${nameSpace} 2>/dev/null
	kubectl create rolebinding ${userLogin} --clusterrole=admin --user=${userLogin} --namespace=${nameSpace}		kubectl create rolebinding ${userLogin} --clusterrole=admin --user=${userLogin} --namespace=${nameSpace}
	#NAMESPACE NETWORK ISOLATION		#NAMESPACE NETWORK ISOLATION

Tcepo: /* code */

2023-02-14T18:21:06Z

code

← Older revision		Revision as of 20:21, 14 February 2023
Line 32:		Line 32:
	openssl req -new -nodes -subj "/CN=${userLogin}" \		openssl req -new -nodes -subj "/CN=${userLogin}" \
	-keyout ${userLogin}.key -out ${userLogin}.csr		-keyout ${userLogin}.key -out ${userLogin}.csr
	kubectl delete csr ${userLogin}		kubectl delete csr ${userLogin} 2>/dev/null
	cat <<EOF \|kubectl apply -f -		cat <<EOF \|kubectl apply -f -
	apiVersion: certificates.k8s.io/v1		apiVersion: certificates.k8s.io/v1

← Older revision		Revision as of 12:04, 22 April 2024
Line 27:		Line 27:
	fi \|while read userLogin ;do		fi \|while read userLogin ;do
	grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )		grep 'export KUBECONFIG=${HOME}/.kube/config' /home/${userLogin}/.bashrc >/dev/null 2>&1 \|\|(echo 'export KUBECONFIG=${HOME}/.kube/config' >>/home/${userLogin}/.bashrc )
	nameSpace=~~home-~~${userLogin}		nameSpace=${userLogin}
	apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )		apiUrl=$(cat ${KUBECONFIG} \|sed -rn 's#^[[:space:]]server:[[:space:]]([[:graph:]]+)[[:space:]]*$#\1#p' \|tail -1 )
	userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )		userHome=$(cat /etc/passwd \|grep ^${userLogin}: \|cut -d: -f6 )