K8S TokenRequest and TokenReview

Links to various docs on using K8S as an identity provider for JWT tokens - TokenReview and TokenRequest APIs.

https://jpweber.io/blog/a-look-at-tokenrequest-api/

https://github.com/mikedanese/community/blob/2bf41bd80a9a50b544731c74c7d956c041ec71eb/contributors/design-proposals/storage/svcacct-token-volume-source.md

https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.18/#tokenreview-v1-authentication-k8s-io 

https://github.com/kubernetes/community/blob/master/contributors/design-proposals/auth/bound-service-account-tokens.md

Istiod CRDs in IntelliJ

Quick post to remember the link:

https://raw.githubusercontent.com/istio/api/master/kubernetes/customresourcedefinitions.gen.yaml

This needs to be added to Languages&Frameworks / Kubernetes, and refresh when the API changes.

Istio injection

https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/

Recovering .ecryptfs files

I have some old backups, including the .ecryptfs directories.

After several searches, what worked is:

1.  Check the key signatures: cat .ecryptfs/Private.sig 
2. Try to remember the password, and

   ecryptfs-unwrap-passphrase .ecryptfs/wrapped-passphrase

3. With the result, do

   echo $UNWRAPPED |ecryptfs-add-passphrase --fnek - 

If the result of ecryptfs-add matches the Private.sig, mount the disk with the magic command:

mount -i -t ecryptfs   -o ecryptfs_sig=$FIRST_ID,ecryptfs_fnek_sig=$SECOND_ID,ecryptfs_cipher=aes,ecryptfs_key_bytes=16   .Private/ $DEST

Read: low level kernel networking

In particular the UDP sections are very useful.

'via Blog this'

docs/manifest-format.txt - git-repo - Git at Google

Reference for Android repo format.


docs/manifest-format.txt - git-repo - Git at Google:

'via Blog this'

KSubedi/gomove: gomove is a utility to help you move golang packages by automatically changing the import paths from the old one to new one.

KSubedi/gomove: gomove is a utility to help you move golang packages by automatically changing the import paths from the old one to new one.:

'via Blog this'

Golang Concurrency Tricks

Golang Concurrency Tricks:

'via Blog this'

Debugging Go core dumps · Go, the unwritten parts

Debugging Go core dumps · Go, the unwritten parts:

'via Blog this'