wget https://repo1.maven.org/maven2/com/madgag/bfg/1.14.0/bfg-1.14.0.jar

git clone git@github.com:kruchkov-alexandr/qlib.git

>gitleaks detect --source qlib --log-opts="--all" --report-path findings.json

    ○
    │╲
    │ ○
    ○ ░
    ░    gitleaks

12:23PM INF 1790 commits scanned.
12:23PM INF scan completed in 696ms
12:23PM WRN leaks found: 1

cat findings.json | jq -r '.[].Secret' > passwords.txt

cd qlib

>java -jar ../bfg-1.14.0.jar --replace-text ../passwords.txt

Commit Tree-Dirt History
------------------------
        Earliest                                              Latest
        |                                                          |
        .........................................................DDm
        D = dirty commits (file tree fixed)
        m = modified commits (commit message or parents changed)
        . = clean commits (no changes to file tree)

                                Before     After
        -------------------------------------------
        First modified commit | 21f0b394 | b3d34764
        Last dirty commit     | 63021018 | abf5a1bf
Changed files
-------------
        Filename   Before & After
        ---------------------------------------------------
        data.py  | 8de32f3f ⇒ 82298fe3, f6bd7809 ⇒ 8bd16038
In total, 159 object ids were changed. Full details are logged here:
        /home/***/GIT/INTERNET/qlib.bfg-report/2025-06-12/12-24-52

cat /home/***/GIT/INTERNET/qlib.bfg-report/202*-0*-**/12-24-52/changed-files.txt
8de32f3f6c0373ca1b41fe6d3f4dbd4c23685d71 82298fe3811f0c36aa982a1ff23ee92289cc9346 data.py
f6bd780905649d8d004c13bd98a91044958b9573 8bd160386147b2007172e618dbe049b02cd4bcc3 data.py

helm unittest ./helm-chart

helm lint helm-chart

helm package helm-chart

git clone git@github.com:cloudnative-pg/charts.git

wget https://github.com/dadav/helm-schema/releases/download/0.18.1/helm-schema_0.18.1_Linux_x86_64.tar.gz
tar -xvf helm-schema_0.18.1_Linux_x86_64.tar.gz
chmod +x helm-schema
sudo cp helm-schema /usr/local/bin/

cd ~/GIT/INTERNET/cnpg/  #(у вас путь другой будет само собой)

helm-schema

helm template alexk-test charts/cluster/

  endpointCA:
    create: false

  endpointCA:
    create: "false"

helm template alexk-test charts/cluster/
Error: values don't meet the specifications of the schema(s) in the following chart(s):
cluster:
- recovery.endpointCA.create: Invalid type. Expected: boolean, given: string

kubectl get mutatingwebhookconfigurations | grep pod-identity-webhook
pod-identity-webhook                   

kubectl get mutatingwebhookconfigurations | grep pod-identity-webhook
pod-identity-webhook                   

kubectl get mutatingwebhookconfigurations | grep pod-identity-webhook
hui

AWS_WEB_IDENTITY_TOKEN_FILE=/var/run/secrets/eks.amazonaws.com/serviceaccount
AWS_ROLE_ARN (значение берётся из аннотации к SA)

- name: aws-iam-token
  projected:
    defaultMode: 420
    sources:
    - serviceAccountToken:
        audience: sts.amazonaws.com
        expirationSeconds: 86400
        path: token
...
- mountPath: /var/run/secrets/eks.amazonaws.com/serviceaccount
  name: aws-iam-token
  readOnly: true

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.18.2/cert-manager.yaml

git clone https://github.com/aws/amazon-eks-pod-identity-webhook
cd amazon-eks-pod-identity-webhook
make cluster-up IMAGE=amazon/amazon-eks-pod-identity-webhook:latest

kubectl logs -n default -l app=pod-identity-webhook

kubectl run irsa-test --image=amazon/aws-cli -n production --overrides='{"spec":{"serviceAccountName":"new-sa"}}' --command -- sh -c "aws sts get-caller-identity && sleep 3600"

{
    "UserId": "54252523:botocore-session-2345452354",
    "Account": "2345452345",
    "Arn": "arn:aws:sts::234534524:assumed-role/expected-new-role/botocore-session-345235"
}