181 karma · joined June 3, 2023
(esp. for metrics and their attributes).
but OP isn't about metrics at all rather traces. or download on Mac
is not hyperlinked.does it still just say that it will then not actually do anything?
It will now say:
I can't directly create calendar events for you, but I can help you create a
calendar event description. Please provide me with the following information so
I can create a detailed description for you:
* Event title
* Event date and time
* Event location
* Event attendees (if applicable)
* Event description
* Any additional notes or reminders
Once I have this information, I can provide you with a calendar event
description that you can then add to your calendar.
And if you provide that information, it'll just format it, add a few tokens and just display it to you.There's also https://codepip.com/games/grid-garden/ by the same author that uses the same approach for CSS Grids.
Re: security, defining security contexts for containers and pods are quite important, the container should not run as root, you should drop all capabilities, ...etc. For example
securityContext:
runAsNonRoot: true
runAsGroup: 1000
runAsUser: 1000
privileged: false
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop:
- ALL
You should also use something like kubescape[1] to regularly scan your cluster (or helm files or yaml files). Furthermore, you should use an admission controller[2] like Gatekeeper[3] to enforce certain policies in your clusters e.g. containers should always have a securityContext.[0] https://cloud.google.com/artifact-registry/docs/analysis
[1] https://github.com/kubescape/kubescape
[2] https://kubernetes.io/docs/reference/access-authn-authz/admi...
> Me. It was me. I didn't commit the function
Haha. Yeah, modifying "live" systems without a strict mindsets tends to cause that, the worse is linux images running on production VMs which are partially specified by e.g. Ansible but there are little modifications here and there that are done by one person or the other and when that machine needs to be created you get a nice surprise.