identw

function cb(tag, timestamp, record)
  new_record = record
  
  -- for nginx ingress access log
  if record["kubernetes"]["labels"]["app.kubernetes.io/name"] == "ingress-nginx" and record["stream"] == "stdout" then
    new_record["tag"] = "kube_nginx_ingress_stdout"
    return 2, timestamp, new_record
  end

  if record["log"] == nil then

identw

[SERVICE]
    Daemon Off
    Flush 1
    Log_Level info
    Parsers_File /fluent-bit/etc/parsers.conf
    Parsers_File /fluent-bit/etc/conf/custom_parsers.conf
    HTTP_Server On
    HTTP_Listen 0.0.0.0
    HTTP_Port 2020
    Health_Check On

identw

[PARSER]
    Name docker_no_time
    Format json
    Time_Keep Off
    Time_Key time
    Time_Format %Y-%m-%dT%H:%M:%S.%L

[PARSER]
    Name json_nginx
    Format json

identw

# dex config:
# ...
# staticClients:
# - id: netbird-backend
#   name: netbird-backend
#   redirectURIs:
#   - https://netbird.example.com
#   - https://netbird.example.com/#callback
#   secret: <DEX_NETBIRD_BACKEND_SECRET>
# - id: netbird-client

identw

# An OIDC provider is required (e.g., Dex).
# OIDC must be configured for the kube-apiserver. For example:
#    - --oidc-client-id=kubernetes-oidc
#    - --oidc-groups-claim=groups
#    - --oidc-issuer-url=https://dex.example.com
#    - --oidc-username-claim=email
# For cloud setups, you can use kube-oidc-proxy (https://github.com/TremoloSecurity/kube-oidc-proxy)
#
# <secret_cookie_auth_key> - 32 bytes string (regex: a-z0-9, example: rpb7aos4rd0m32x9omcrcqacnia0xty2)
# <secret_cookie_enc_key> - 32 bytes string (regex: a-z0-9, example: gg1ejofgupoc19wyuywr2yflm75aeiwg)

identw

local h = import './helpers.jsonnet';

local object = {
  arr: [
    {
      containerPort: 53,
      name: 'dns',
      protocol: 'TCP',
    },
    {

identw

{
  mapArrayByField(f, mixinField):: {
    local m = super[mixinField],
    [mixinField]: std.prune(std.map(f, m))
  },

  mapArrayWithField(fieldValues, fieldName, mixinField, f):: (
    local fieldValuesSet = std.set(fieldValues);
    local inFieldValuesSet(value) = std.length(std.setInter(fieldValuesSet, std.set([value]))) > 0;

identw

apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: disallow-host-namespaces
spec:
  background: true
  failurePolicy: Fail
  rules:
  - match:
      any:

identw

apiVersion: templates.gatekeeper.sh/v1beta1
kind: ConstraintTemplate
metadata:
  name: k8spsphostnamespace
  annotations:
    description: Controls usage of host namespaces.
spec:
  crd:
    spec:
      names:

identw

apiVersion: apps/v1
kind: Deployment
metadata:
  name: pre-stop
  labels:
    app: pre-stop
spec:
  replicas: 1
  revisionHistoryLimit: 2
  selector: