
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/jbw976/mysql-operator
A Kubernetes custom resource and Operator that allows a user to describe a trivial single-instance of MySQL. The tasks for running a single-instance stateful application are done by this operator.
You can run Kubernetes locally with Minikube.
# From the root of repo, ensure all the libraries required are pulled down.
dep ensure
# build the sample operator binary
CGO_ENABLED=0 GOOS=linux go build
# Build the docker container.
docker build -t mysql-operator:0.1 .
docker save mysql-operator:0.1 | eval $(minikube docker-env) # Only needed for minikube.
# Start the operator.
kubectl create -f mysql-operator.yaml
# Create a MySQL resource (might take a few seconds).
kubectl create -f mysql-resource.yaml
# Verify the MySQL resource is created by creating a new pod in the cluster and
# running a MySQL client that connects to the newly created service.
kubectl run -it --rm --image=mysql:5.6 --restart=Never mysql-client -- mysql -h mysql -ppassword
There is no support for updating the resource because there is nothing in its spec that will allow for a non-disruptive change to the service. To make changes to the service, it's recommended to tear it down and redeploy.
kubectl delete -f mysql-resource.yaml
kubectl delete -f mysql-operator.yaml
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.