Skip to content

Instantly share code, notes, and snippets.

View radikaled's full-sized avatar

radikaled

7 followers · 8 following
  • WA
  • 18:41 (UTC -08:00)
View GitHub Profile
@radikaled
radikaled / 99-worker-load-nvme-tcp-modules.yaml
Created May 23, 2025 01:29
MachineConfig to load in-tree nvme_tcp kernel module
# Generated by Butane; do not edit
apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
metadata:
labels:
machineconfiguration.openshift.io/role: worker
name: 99-worker-load-nvme-tcp-modules
spec:
config:
ignition:
@radikaled
radikaled / keybase.md
Created November 11, 2024 08:32

Keybase proof

I hereby claim:

  • I am radikaled on github.
  • I am nkim (https://keybase.io/nkim) on keybase.
  • I have a public key whose fingerprint is 3591 1E48 935C F499 BAD3 B3E8 A1F5 CC29 F13F DF74

To claim this, I am signing this object:

@radikaled
radikaled / aap-ac-example.yaml
Created February 13, 2024 19:40
AutomationController with custom rhsm.conf
apiVersion: automationcontroller.ansible.com/v1beta1
kind: AutomationController
metadata:
name: example
namespace: aap
spec:
postgres_keepalives_count: 5
postgres_keepalives_idle: 5
create_preload_data: true
route_tls_termination_mechanism: Edge
@radikaled
radikaled / kc.java.security
Last active January 17, 2024 16:23
Sample custom java.security for strict FIPS Keycloak
# BountyCastle will not start without this
securerandom.strongAlgorithms=PKCS11:SunPKCS11-NSS-FIPS
# https://www.keycloak.org/server/fips#_other_restrictions
fips.provider.8=SunJGSS
@radikaled
radikaled / keycloak.yaml
Created January 17, 2024 15:40
Example Keycloak CR utilizing strict FIPS custom image
apiVersion: k8s.keycloak.org/v2alpha1
kind: Keycloak
metadata:
name: example-keycloak
namespace: $(NAMESPACE)
spec:
additionalOptions:
- name: spi-truststore-file-file
value: /opt/keycloak/conf/server.keystore
- name: spi-truststore-file-password
@radikaled
radikaled / Containerfile
Last active January 17, 2024 15:12
Containerfile for Keycloak server in strict FIPS mode (OCP4)
FROM registry.redhat.io/rhbk/keycloak-rhel9:22-6 as builder
# What these environment variables mean:
# https://www.keycloak.org/server/all-config?f=build
# Set to appropriate database provider
ENV KC_DB=postgres
ENV KC_CACHE_STACK=kubernetes
ENV KC_FEATURES=fips,kerberos
@radikaled
radikaled / pod.yaml
Created May 13, 2022 04:46
Azure Files NFS Pod Volume
apiVersion: v1
kind: Pod
metadata:
name: example
labels:
app: httpd
namespace: nfs
spec:
volumes:
- name: nfs
@radikaled
radikaled / pvc.yaml
Created May 13, 2022 04:44
Azure Files NFS PVC
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: nfs-claim
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: 100Gi
@radikaled
radikaled / pv.yaml
Created May 13, 2022 04:43
Azure Files NFS PV
apiVersion: v1
kind: PersistentVolume
metadata:
name: pv0001
spec:
capacity:
storage: 100Gi
accessModes:
- ReadWriteOnce
nfs:
@radikaled
radikaled / Dockerfile
Last active May 10, 2022 05:53
Simple azcopy container build
FROM registry.redhat.io/openshift4/ose-cli AS builder
WORKDIR /tmp
RUN wget -O azcopy_v10.tar.gz "https://aka.ms/downloadazcopy-v10-linux" && tar -xf azcopy_v10.tar.gz --strip-components=1
FROM registry.redhat.io/openshift4/ose-cli
COPY --from=builder --chown=root:root --chmod=755 /tmp/azcopy /usr/bin