add newlines to end of every file

erikdw · erikdw · commit 7fb28586f10e · 2019-08-29T16:49:23.000-07:00
Done with this command:

find . -not $ -name .svn -prune -o -name .git -prune -o -name link-unshorten -prune $ -type f | xargs -I{} sed -i '$a\' {}

NOTE: this is using GNU sed, not the built-in sed that comes with OS X.
diff --git a/001-Lab-Setup/README.md b/001-Lab-Setup/README.md
@@ -49,4 +49,4 @@ gcloud container clusters get-credentials <YOUR-CLUSTER-NAME> --zone us-west1-a
 You can ensure you are connected to your cluster by running the following command. This will display all of the default pods running in the cluster.
 ```
 kubectl get pods --all-namespaces
-```
+```
diff --git a/002-Containerizing-An-Application/README.md b/002-Containerizing-An-Application/README.md
@@ -96,4 +96,4 @@ Hint 4: You will need to run `docker stop` on the first running container before
 
 Install `dive` in Cloud Shell and inspect the unshorten image that was created.
 
-Hint 1: Install using the instructions for Ubuntu/Debian.
+Hint 1: Install using the instructions for Ubuntu/Debian.
diff --git a/003-Cluster-Setup/manifests/link-unshorten-deployment.yaml b/003-Cluster-Setup/manifests/link-unshorten-deployment.yaml
@@ -34,4 +34,4 @@ spec:
       #   ports:
       #   - containerPort: 6379
       #     name: redis
-      #     protocol: TCP
+      #     protocol: TCP
diff --git a/003-Cluster-Setup/manifests/link-unshorten-service.yaml b/003-Cluster-Setup/manifests/link-unshorten-service.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/004-Cluster-Authentication/README.md b/004-Cluster-Authentication/README.md
@@ -167,4 +167,4 @@ Our intern just got promoted to Jr. DevSecOpsSysAdminNinja! Change the permissio
 Don't forget to delete the `development` and `production` namespace when you are done with the Bonuses.
 ```
 kubectl delete ns development production
-```
+```
diff --git a/004-Cluster-Authentication/manifests/development/link-unshorten-deployment.yaml b/004-Cluster-Authentication/manifests/development/link-unshorten-deployment.yaml
@@ -35,4 +35,4 @@ spec:
         ports:
         - containerPort: 6379
           name: redis
-          protocol: TCP
+          protocol: TCP
diff --git a/004-Cluster-Authentication/manifests/development/link-unshorten-ns.yaml b/004-Cluster-Authentication/manifests/development/link-unshorten-ns.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: development
+  name: development
diff --git a/004-Cluster-Authentication/manifests/development/link-unshorten-service.yaml b/004-Cluster-Authentication/manifests/development/link-unshorten-service.yaml
@@ -10,4 +10,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/004-Cluster-Authentication/manifests/production/link-unshorten-deployment.yaml b/004-Cluster-Authentication/manifests/production/link-unshorten-deployment.yaml
@@ -35,4 +35,4 @@ spec:
         ports:
         - containerPort: 6379
           name: redis
-          protocol: TCP
+          protocol: TCP
diff --git a/004-Cluster-Authentication/manifests/production/link-unshorten-ns.yaml b/004-Cluster-Authentication/manifests/production/link-unshorten-ns.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: production
+  name: production
diff --git a/004-Cluster-Authentication/manifests/production/link-unshorten-service.yaml b/004-Cluster-Authentication/manifests/production/link-unshorten-service.yaml
@@ -10,4 +10,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/004-Cluster-Authentication/manifests/role/user-role-binding.yaml b/004-Cluster-Authentication/manifests/role/user-role-binding.yaml
@@ -11,4 +11,4 @@ subjects:
 roleRef:
   kind: Role
   name: pod-reader
-  apiGroup: ""
+  apiGroup: ""
diff --git a/004-Cluster-Authentication/manifests/role/user-role.yaml b/004-Cluster-Authentication/manifests/role/user-role.yaml
@@ -6,4 +6,4 @@ metadata:
 rules:
 - apiGroups: [""] # "" indicates the core API group
   resources: ["pods"]
-  verbs: ["get", "watch", "list"]
+  verbs: ["get", "watch", "list"]
diff --git a/005-Dashboard/manifests/dashboard.yaml b/005-Dashboard/manifests/dashboard.yaml
@@ -183,4 +183,4 @@ spec:
     - port: 443
       targetPort: 8443
   selector:
-    k8s-app: kubernetes-dashboard
+    k8s-app: kubernetes-dashboard
diff --git a/006-Pod-Security-Policy/manifests/non-root-pod/link-unshorten-deployment-non-root.yaml b/006-Pod-Security-Policy/manifests/non-root-pod/link-unshorten-deployment-non-root.yaml
@@ -31,4 +31,4 @@ spec:
         ports:
         - containerPort: 8080
           name: http
-          protocol: TCP
+          protocol: TCP
diff --git a/006-Pod-Security-Policy/manifests/non-root-pod/link-unshorten-service-non-root.yaml b/006-Pod-Security-Policy/manifests/non-root-pod/link-unshorten-service-non-root.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/006-Pod-Security-Policy/manifests/psp/pod-security-policy.yaml b/006-Pod-Security-Policy/manifests/psp/pod-security-policy.yaml
@@ -14,4 +14,4 @@ spec:
   supplementalGroups:
     rule: RunAsAny
   volumes:
-  - '*'
+  - '*'
diff --git a/006-Pod-Security-Policy/manifests/role/link-unshorten-cluster-role.yaml b/006-Pod-Security-Policy/manifests/role/link-unshorten-cluster-role.yaml
@@ -10,4 +10,4 @@ rules:
   resourceNames:
   - restrict-root
   verbs:
-  - use
+  - use
diff --git a/006-Pod-Security-Policy/manifests/role/link-unshorten-rolebinding.yaml b/006-Pod-Security-Policy/manifests/role/link-unshorten-rolebinding.yaml
@@ -13,4 +13,4 @@ subjects:
 # All service accounts in the default namespace
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
-  name: system:serviceaccounts
+  name: system:serviceaccounts
diff --git a/006-Pod-Security-Policy/manifests/root-pod/link-unshorten-deployment.yaml b/006-Pod-Security-Policy/manifests/root-pod/link-unshorten-deployment.yaml
@@ -24,4 +24,4 @@ spec:
         ports:
         - containerPort: 8080
           name: http
-          protocol: TCP
+          protocol: TCP
diff --git a/006-Pod-Security-Policy/manifests/root-pod/link-unshorten-service.yaml b/006-Pod-Security-Policy/manifests/root-pod/link-unshorten-service.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/007-Network-Policies/manifests/api/link-unshorten-deployment.yaml b/007-Network-Policies/manifests/api/link-unshorten-deployment.yaml
@@ -21,4 +21,4 @@ spec:
         ports:
         - containerPort: 8080
           name: http
-          protocol: TCP
+          protocol: TCP
diff --git a/007-Network-Policies/manifests/api/link-unshorten-service.yaml b/007-Network-Policies/manifests/api/link-unshorten-service.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/007-Network-Policies/manifests/network-policies/hello-unshorten.yaml b/007-Network-Policies/manifests/network-policies/hello-unshorten.yaml
@@ -12,4 +12,4 @@ spec:
   - from:
     - podSelector:
         matchLabels:
-          app: unshorten-fe
+          app: unshorten-fe
diff --git a/008-Istio/README.md b/008-Istio/README.md
@@ -108,4 +108,4 @@ kubectl delete -f api -f istio-rules
 Now, disable Istio:
 ```
 gcloud beta container clusters update $(gcloud container clusters list --format json | jq -r '.[].name') --update-addons=Istio=DISABLED --region=us-west1-a
-```
+```
diff --git a/008-Istio/manifests/api/link-unshorten-deployment.yaml b/008-Istio/manifests/api/link-unshorten-deployment.yaml
@@ -27,4 +27,4 @@ spec:
         ports:
         - containerPort: 8080
           name: http
-          protocol: TCP
+          protocol: TCP
diff --git a/008-Istio/manifests/api/link-unshorten-service.yaml b/008-Istio/manifests/api/link-unshorten-service.yaml
@@ -7,4 +7,4 @@ spec:
    - port: 8080
      name: http
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/008-Istio/manifests/istio-rules/link-unshorten-egress.yaml b/008-Istio/manifests/istio-rules/link-unshorten-egress.yaml
@@ -45,4 +45,4 @@ spec:
         host: www.bit.ly
         port:
           number: 443
-      weight: 100
+      weight: 100
diff --git a/009-Secrets/README.md b/009-Secrets/README.md
@@ -171,4 +171,4 @@ echo "Default Namespace Switched:" $(kubectl get sa default -o jsonpath='{.metad
 ```
 
 ### Discussion Question
-What secrets management systems are you using in-house? How could they better plug into DevOps pipelines?
+What secrets management systems are you using in-house? How could they better plug into DevOps pipelines?
diff --git a/009-Secrets/manifests/api/link-unshorten-deployment.yaml b/009-Secrets/manifests/api/link-unshorten-deployment.yaml
@@ -29,4 +29,4 @@ spec:
         ports:
         - containerPort: 8080
           name: http
-          protocol: TCP
+          protocol: TCP
diff --git a/009-Secrets/manifests/api/link-unshorten-service.yaml b/009-Secrets/manifests/api/link-unshorten-service.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/009-Secrets/manifests/mysql/mysql-deployment.yaml b/009-Secrets/manifests/mysql/mysql-deployment.yaml
@@ -28,4 +28,4 @@ spec:
               key: password
         ports:
         - containerPort: 3306
-          name: mysql
+          name: mysql
diff --git a/009-Secrets/manifests/mysql/mysql-service.yaml b/009-Secrets/manifests/mysql/mysql-service.yaml
@@ -10,4 +10,4 @@ spec:
   selector:
     app: unshorten
     tier: mysql
-  clusterIP: None
+  clusterIP: None
diff --git a/009-Secrets/manifests/secrets/mysql-secrets.yaml b/009-Secrets/manifests/secrets/mysql-secrets.yaml
@@ -4,4 +4,4 @@ metadata:
   name: mysql-secrets
 type: Opaque
 data:
-  password: $$MYSQL_PASSWORD
+  password: $$MYSQL_PASSWORD
diff --git a/009-Secrets/manifests/vault/vault-service.yaml b/009-Secrets/manifests/vault/vault-service.yaml
@@ -11,4 +11,4 @@ spec:
       protocol: TCP
       targetPort: 8200
   selector:
-    app: vault
+    app: vault
diff --git a/009-Secrets/manifests/vault/vault-statefulset.yaml b/009-Secrets/manifests/vault/vault-statefulset.yaml
@@ -23,4 +23,4 @@ spec:
           securityContext:
             capabilities:
               add:
-                - IPC_LOCK
+                - IPC_LOCK
diff --git a/010-Security-Pipeline/README.md b/010-Security-Pipeline/README.md
@@ -111,4 +111,4 @@ echo "Default Namespace Switched:" $(kubectl get sa default -o jsonpath='{.metad
 ```
 
 ### Further Reading
-Check out the popular build workflow tool called [Skaffold](https://github.com/GoogleContainerTools/skaffold).
+Check out the popular build workflow tool called [Skaffold](https://github.com/GoogleContainerTools/skaffold).
diff --git a/010-Security-Pipeline/manifests/jenkins/jenkins-deployment.yaml b/010-Security-Pipeline/manifests/jenkins/jenkins-deployment.yaml
@@ -28,4 +28,4 @@ spec:
         hostPath:
           path: /var/run/docker.sock
       - name: jenkins-home
-        emptyDir: {}
+        emptyDir: {}
diff --git a/010-Security-Pipeline/manifests/jenkins/jenkins-service.yaml b/010-Security-Pipeline/manifests/jenkins/jenkins-service.yaml
@@ -8,4 +8,4 @@ spec:
     - port: 8080
       targetPort: 8080
   selector:
-    app: jenkins
+    app: jenkins
diff --git a/010-Security-Pipeline/manifests/registry/registry.yaml b/010-Security-Pipeline/manifests/registry/registry.yaml
@@ -101,4 +101,4 @@ spec:
           path: /var/run/docker.sock
       - name: registry-persistent-storage
         persistentVolumeClaim:
-          claimName: registry-claim
+          claimName: registry-claim
diff --git a/Admission-Control/deny-ingress/ingress.yaml b/Admission-Control/deny-ingress/ingress.yaml
@@ -9,4 +9,4 @@ spec:
           - path: /*
             backend:
               serviceName: hello-service
-              servicePort: 8000
+              servicePort: 8000
diff --git a/Admission-Control/deny-ingress/webhook-config.yaml b/Admission-Control/deny-ingress/webhook-config.yaml
@@ -18,4 +18,4 @@ webhooks:
           - "ingresses"
     failurePolicy: Fail
     clientConfig:
-      url: "https://deny-it-sflxj773na-uc.a.run.app/admission-control/deny-ingresses"
+      url: "https://deny-it-sflxj773na-uc.a.run.app/admission-control/deny-ingresses"
diff --git a/Admission-Control/deny-public-lb/public-lb.yaml b/Admission-Control/deny-public-lb/public-lb.yaml
@@ -9,4 +9,4 @@ spec:
   ports:
     - port: 8000 # Service's port
       protocol: TCP
-      targetPort: 8080
+      targetPort: 8080
diff --git a/Admission-Control/webhook/CloudRun.Dockerfile b/Admission-Control/webhook/CloudRun.Dockerfile
@@ -22,4 +22,4 @@ COPY --from=build /go/bin/admissiond /
 # https://cloud.google.com/run/docs/reference/container-contract
 EXPOSE 8080
 
-CMD ["/admissiond", "-port=8080", "-http-only"]
+CMD ["/admissiond", "-port=8080", "-http-only"]
diff --git a/Attacking-Kubelet/manifests/link-unshorten-service.yaml b/Attacking-Kubelet/manifests/link-unshorten-service.yaml
@@ -9,4 +9,4 @@ spec:
      targetPort: 8080
      protocol: TCP
  selector:
-   app: unshorten-api
+   app: unshorten-api
diff --git a/Audit-Logs/manifests/GKE-Default-Policy.yaml b/Audit-Logs/manifests/GKE-Default-Policy.yaml
@@ -111,4 +111,4 @@ rules:
   # Default level for all other requests.
   - level: Metadata
     omitStages:
-      - "RequestReceived"
+      - "RequestReceived"
diff --git a/Finale/lab.md b/Finale/lab.md
@@ -24,4 +24,4 @@ Use the manifests located in `8-K8S-Cluster-Secrets/manifests/api` and `8-K8S-Cl
 
 5. The kubelet API should be properly authenticated
 6. Create an audit log policy that generates logs when secrets are read/written and pods a created
-7. Enable [Prometheus](https://github.com/giantswarm/kubernetes-prometheus/) in the cluster to gain deeper insight into cluster health and metrics
+7. Enable [Prometheus](https://github.com/giantswarm/kubernetes-prometheus/) in the cluster to gain deeper insight into cluster health and metrics
diff --git a/images/gke-connect.png b/images/gke-connect.png
