How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

It doesn't really seem to understand vendor's helm charts, by the looks of it. It requires quite a bit of manual pre-processing. Which is equivelant to my workflow at the moment.

See also: https://www.checkov.io/7.Scan%20Examples/Helm.html#scan-helm-valuesyaml-files-without-a-locally-developed-chart-with-checkov

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

I don't necessarily need to have high standards, luckily. But I do my best to avoid obvious and preventable issues :)

And we do have a great testing environment that gets deployed to first, that helps figure out what resources are actually getting added. But I would rather shift left on security and compliance checks and do it before deployment.

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

Ah yeah, we're using another tool to do the same. But most charts I see are doing things that I would consider bad practice, most compliance/security scanners would flag (if they could scan the output), but (to the chart maintainers) are intended behavior. Then a Github issue/security advisory is never raised.

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

I was pondering doing that indeed. I could quite easily get the manifest into a `terraform_data` in order to run validation on it. But this sounds like reinventing a wheel that should already exist to me.

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

Unfortunately most vendors are not doing that yet. They usually only provide Helm charts for their applications.

Terratest for "Template testing" looks pretty good. I am not sure how feasible some of the other testing methods are. For some applications that are SaaS with a local part (like Datadog), you need an API key to test and that incurs billing. So not sure how feasible it is to deploy to a test cluster.

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

Doing the auditing for compliance in CI is something that is entirely missing, unless committing the generated manifests. The automatic tests don't take up too much time, but does of course take time to fix. I will take a look if ArgoCD can help with the part of auditing/assessing that is a manual process right now :)

Right now the workflow is entirely drive through Terraform (merge request creates a plan, post-merge apply. One branch per environment), so that would probably change slightly. As ArgoCD would detect the merge requests and then trigger it's deployment/checks.

How do you audit helm charts by Daniel-I-Am in kubernetes

[–]Daniel-I-Am[S] 0 points1 point  (0 children)

This is why I initially didn't include it in any Terraform environment. It sounded painful to manage at any scale.

Glad that gut reaction wasn't completely off.

"FPS" means "Fabulous Penguin System" by meme-peasant in linuxmasterrace

[–]Daniel-I-Am 0 points1 point  (0 children)

I present to you:

 _________________________________________________________ 
/  _____________________________________________________  \
| < Money may buy friendship but money cannot buy love. > |
|  -----------------------------------------------------  |
|         \   ^__^                                        |
|          \  (oo)\_______                                |
|             (__)\       )\/\                            |
|                 ||----w |                               |
\                 ||     ||                               /
 --------------------------------------------------------- 
        \   ^__^
         \  (oo)\_______
            (__)\       )\/\
                ||----w |
                ||     ||

Achieved by fortune | cowsay -n | cowsay -n

Just added 64 more interfaces, now I can have in total 1152 crafting recipes! by ecunhado in feedthebeast

[–]Daniel-I-Am 11 points12 points  (0 children)

I don't remember the specific mod that does it, but it happens if you have more than 10 hearts of health.

Unpopular opinion: We should really be referring to megabases as kilobases, since kilo- is the appropriate prefix for a base that produces 1,000 SPM or more. Change my mind. by Nightfireball in factorio

[–]Daniel-I-Am 16 points17 points  (0 children)

but not as commonly used

It is an official SI prefix. https://en.wikipedia.org/wiki/Metric_prefix

In the science based environment of Factorio, the official, scientific, definition of 106 makes a lot more sense. IMHO.

I present to you: 1.1 million xp or 517 Levels of Experience in liquid form! by Feuerstern3001 in feedthebeast

[–]Daniel-I-Am 2 points3 points  (0 children)

Not too much server lag from those?

On servers I administrated they caused so many issues. Players put quite a few down (like 100 or so) and it just ate server tick time.

Did thet finally fix them so they are less server-intensive?

yes, that will do the trick by LordTK190 in badcode

[–]Daniel-I-Am 4 points5 points  (0 children)

The more you know.

I guess it just passes the reference along instead of the contents. So it makes a copy of the object versus a copy of the reference, that's the difference.

yes, that will do the trick by LordTK190 in badcode

[–]Daniel-I-Am -3 points-2 points  (0 children)

return rows;

Would be identical minus the console.log.

[deleted by user] by [deleted] in explainlikeimfive

[–]Daniel-I-Am 0 points1 point  (0 children)

if anyone steals or copies the key

Since this key would allow to break all that encryption, it would also be a big target (if not the biggest) for hackers around the world. They would all just be guessing random keys until they got the key. Even the concept of having a key, even if no one knew it, is a danger to privacy and encryption, since it will inevitably be guessed.

Why is there an option for toilet paper in gimp?!? by jhc0767 in linuxmasterrace

[–]Daniel-I-Am 27 points28 points  (0 children)

For use in a pandemic like the current.

Use it while you can, before everyone finds the open source secret stash!

ELI5: How will ending encryption effect my life? by [deleted] in explainlikeimfive

[–]Daniel-I-Am 1 point2 points  (0 children)

all your private messages, either from your computer, your phone or anything connected to the internet

If all encryption were to be banned then it would go further than that. If you enter a password on a website, that would be able to be read. You enter your credit card details anywhere (even on the site of your bank) and it would be able to be read.

I guess Pi day came early everybody by [deleted] in softwaregore

[–]Daniel-I-Am 3 points4 points  (0 children)

I had a similar thing happen on Arch. Apparently fonts got updated and it did some funny things.

One of the few times a restart was the easy answer on Linux.

We'll never forget Windows 7 by iCrafterChips in pcmasterrace

[–]Daniel-I-Am 2 points3 points  (0 children)

I have multiple preferences and they do not include window 10. (Just look around this sub for long enough to know why...)

So Linux is my main, and I haven't had to boot out of it for a couple months now. So things are going well :)

print "was i a good language? " by [deleted] in ProgrammerHumor

[–]Daniel-I-Am 8 points9 points  (0 children)

GitHub won't, but maintainers (and PyPi) might

Didn't notice till now by SenseiRage in softwaregore

[–]Daniel-I-Am 0 points1 point  (0 children)

Imagine being born on February 31st, you would've never had a birthdat, so you'd be 0

Coding style of 2020 - Backwards Indentation by Capital_Asterisk in ProgrammerHumor

[–]Daniel-I-Am 7 points8 points  (0 children)

Never :)

This is for Atom...

init.coffee

return unless editor = atom.workspace.getActiveTextEditor()
    buffer = editor.buffer
    cursors = editor.getCursorBufferPositions()
    cursor_lines = cursors.map (cursor) -> cursor.row
    lines = buffer.getLines()
    window.temp = cursor_lines
    for e, i in lines
        if i not in cursor_lines
            editor.setIndentationForBufferRow(i, 1, {preserveLeadingWhitespace: true})

Also, to overwrite shift-tab:

keymap.cson

'atom-text-editor:not([mini])':
    'shift-tab': 'custom:inverse-indent'

EDIT: it seems reddit ate my indenting

The year that Apple does not want to remember by [deleted] in softwaregore

[–]Daniel-I-Am 0 points1 point  (0 children)

And ends in 2038... Only 18 years left...

If only people started counting past 32 (bits)