Jirka Kremser jkremser

Create kubeconfig w/ limited rights

k create sa guest
# create RBAC for it
k create clusterrolebinding guest-reads --clusterrole view --serviceaccount default:guest
k create clusterrole so-reader --verb=get,list,watch --resource=scaledobjects.keda.sh
k create clusterrolebinding guest-reads-so --clusterrole so-reader --serviceaccount default:guest
k create clusterrole otelcol-reader --verb=get,list,watch --resource=opentelemetrycollectors.opentelemetry.io
k create clusterrolebinding guest-reads-otelcol --clusterrole otelcol-reader --serviceaccount default:guest

cluster setup

Spawn the cluster or just use existing kubeconfig

git clone https://github.com/jkremser/kubecon-2025-eu && cd kubecon-2025-eu/infra/gcp
source .env .secret
./setup-gcp.sh bootstrap
k kc use demo
cd so && setup-llama.sh

pre-fetch images on nodes:

kubelet param: If you would like to enable parallel image pulls, you can set the field serializeImagePulls to false in the kubelet configuration. With serializeImagePulls set to false, image pull requests will be sent to the image service immediately, and multiple images will be pulled at the same time.

# two clusters
k config get-contexts -oname

# eu@aws
k --context cluster-eu@aws get no
k --context cluster-eu@aws describe node | grep -A5 "System Info"
k --context cluster-eu@aws get svc -n ingress-nginx
dig +short a1f9cb3961e1a4d11af80365d0c5fa28-31f9021cb00929cd.elb.eu-west-2.amazonaws.com
curl -s http://ip-api.com/json/18.132.100.90  | jq

	// ==UserScript==
	// @name to ical (fresh)
	// @namespace http://tampermonkey.net/
	// @version 2025-07-17
	// @description Make ical
	// @author jkremser
	// @match https://www.freshbox.cz/muj/vyber/*
	// @icon https://www.freshbox.cz/apple-touch-icon.png
	// @require https://raw.githubusercontent.com/matthiasanderer/icsFormatter/refs/heads/master/icsFormatter.js
	// @grant none

	apiVersion: keda.sh/v1alpha1
	kind: ScaledObject
	metadata:
	name: model-dcgm
	annotations:
	autoscaling.keda.sh/paused: "false"
	spec:
	scaleTargetRef:
	apiVersion: apps/v1
	kind: Deployment

	# helm upgrade -i kserve community-charts/kserve --version 1.0.1 --set kserve.controller.deploymentMode=RawDeployment

	# kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.17.0/cert-manager.yaml
	# kubectl rollout status -ncert-manager deploy/cert-manager-webhook
	# helm upgrade -i kserve-crd oci://ghcr.io/kserve/charts/kserve-crd --version v0.15.0-rc1
	# helm upgrade -i kserve oci://ghcr.io/kserve/charts/kserve --version v0.15.0-rc1 --set kserve.controller.deploymentMode=RawDeployment
	# kubectl rollout status deploy/kserve-controller-manager
	apiVersion: v1
	kind: Secret
	metadata:

	// polygon
	linear_extrude(20, twist=140,slices=500,scale=0)
	translate([-1,0,0])
	polygon([[-5,-5],[10,0],[6,4],[5,10],[3,6],[-5,2]]);




	// svg
	linear_extrude(800, scale=.4, twist=120, slices=11)

	// ==UserScript==
	// @name to ical
	// @namespace http://tampermonkey.net/
	// @version 2025-01-20
	// @description Make ical
	// @author jkremser
	// @match https://objednavky.obedyvbrne.cz/faces/secured/objednavky.jsp
	// @icon https://www.google.com/s2/favicons?sz=64&domain=obedyvbrne.cz
	// @require https://raw.githubusercontent.com/matthiasanderer/icsFormatter/refs/heads/master/icsFormatter.js
	// @grant none


	1*
	curl -s https://raw.githubusercontent.com/zroubalik/test-data/main/resources/create_resources.sh \| \
	OTHER_DEPLOYMENTS=9 \
	OTHER_STATEFUL_SETS=1 \
	bash -s -- 6 1 0 t



	zaple vsechno to neleakovalo, dokad sem neudelal SOs (1*) - monitoring (1,1,1)