uds-core

DEBUGGING.md

npm i --no-save pepr-0.0.0-development.tgz 
PEPR_CUSTOM_IMAGE="pepr:dev" uds run slim-dev
uds run slim-dev && k3d image import pepr:dev -c uds;
k label ns pepr-system zarf.dev/agent=ignore && \
k set image deploy/pepr-uds-core-watcher -n pepr-system watcher=pepr:dev && \
k set image deploy/pepr-uds-core -n pepr-system server=pepr:dev && \
uds run test:single-layer --set=layer=metrics-server && \
uds run test:single-layer --set=layer=monitoring 

# k set image deploy/pepr-uds-core-watcher -n pepr-system watcher=ghcr.io/defenseunicorns/pepr/controller:v0.38.3
# k set image deploy/pepr-uds-core -n pepr-system server=ghcr.io/defenseunicorns/pepr/controller:v0.38.3

k set image deploy/pepr-uds-core-watcher -n pepr-system watcher=pepr:dev
k set image deploy/pepr-uds-core -n pepr-system server=pepr:dev

k set env deploy/pepr-uds-core-watcher -n pepr-system PEPR_LAST_SEEN_LIMIT_SECONDS=300
k set env deploy/pepr-uds-core-watcher -n pepr-system PEPR_LOG_LEVEL=debug
k set env deploy/pepr-uds-core -n pepr-system PEPR_LAST_SEEN_LIMIT_SECONDS=300

kubectl patch deployment pepr-uds-core-watcher -n pepr-system \
  --patch '{"spec": {"template": {"spec": {"containers": [{"name": "watcher", "resources": {"requests": {"cpu": "500m", "memory": "512Mi"}, "limits": {"cpu": "1", "memory": "768Mi"}}}]}}}}'
kubectl patch deployment pepr-uds-core -n pepr-system \
  --patch '{"spec": {"template": {"spec": {"containers": [{"name": "server", "resources": {"requests": {"cpu": "500m", "memory": "512Mi"}, "limits": {"cpu": "1", "memory": "768Mi"}}}]}}}}'


kubectl apply -f -<<EOF
apiVersion: v1
kind: Pod
metadata:
  creationTimestamp: null
  labels:
    zarf.dev/agent: ignore
    run: sleeper
    batch.kubernetes.io/job-name: sleeper
  name: sleeper
  namespace: keycloak
spec:
  containers:
  - image: busybox
    name: sleeper
    command: ["sh", "-c","sleep 5 && exit 0"]
    resources: {}
  dnsPolicy: ClusterFirst
  restartPolicy: Never
status: {}
EOF

# 16 GB Memory / 4 AMD vCPUs / 200 GB Disk / NYC1 
apt install -y nodejs
apt install -y docker.io
apt install -y npm
wget https://github.com/defenseunicorns/uds-cli/releases/download/v0.18.0/uds-cli_v0.18.0_Linux_amd64
mv uds-cli_v0.18.0_Linux_amd64 uds
mv uds /usr/bin/uds
chmod 711 /usr/bin/uds
wget -q -O - https://raw.githubusercontent.com/k3d-io/k3d/main/install.sh | bash
curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
alias k=kubectl

Many Packages kubectl apply -f https://gist.githubusercontent.com/rjferguson21/7510b9116e7e635487c15cb1b0a37d84/raw/d640492ff4130d5e9eae50cf79aa3240dea2bd87/many-packages.yaml

kubectl delete -f https://gist.githubusercontent.com/rjferguson21/7510b9116e7e635487c15cb1b0a37d84/raw/d640492ff4130d5e9eae50cf79aa3240dea2bd87/many-packages.yaml

kubectl delete -f -<<EOF
apiVersion: uds.dev/v1alpha1
kind: Exemption
metadata:
  name: nvidia-gpu-operator
  namespace: uds-policy-exemptions
spec:
  exemptions:
    - policies:
        - DisallowHostNamespaces
        - DisallowPrivileged
        - RequireNonRootUser
        - DropAllCapabilities
        - RestrictHostPathWrite
        - RestrictVolumeTypes
        - RestrictCapabilities
      matcher:
        namespace: uds-policy-exemptions
        name: ".*"
      title: "All Pods"
      description: "Exempt NVIDIA GPU Operator from policy enforcement"
EOF