
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@risingstack/anchor
Advanced tools
Backups Kubernetes resources as a Helm chart.
Extract configurations from resources and save them as values and templates in a reproducible Helm chart.
>= v6
npm install @risingstack/anchor
For more detailed examples like sub-charts check out the ./example
folder.
const anchor = require('@risingstack/anchor')
anchor.snapshot({
resources: [
'deployment/my-app',
'deployment/my-worker'
]
})
.then(() => console.log('Snapshot finished'))
.catch((err) => console.error('Snapshot error', err))
Backup Kubernetes resources as a Helm chart and returns a Promise
.
options.resources
: Kubernetes resources to snapshot
['deployment/my-app', 'deployment/my-worker']
options.namespace
: Kubernetes namespace for kubectl
default
options.name
: name of the Helm chart
my-chart
options.description
: description of the Helm chart
''
options.version
: version of the Helm chart
0.0.1
options.overwrite
: overwrite output directory
false
options.outputPath
: defines chart path, throws error when exist but overwrite is false
./output
kubectl
values.yaml
TODO:
The ./output
directory will contains the templates under the ./output/templates
folder.
Your Values.yaml
file will look like the following:
deploymentMyApp:
image: my-company/my-app
imageTag: 1f40c1f
envLogLevel: info
resourcesLimitsCPU: 150m
resourcesLimitsMemory: 1536Mi
resourcesRequestsCPU: 10m
resourcesRequestsMemory: 128Mi
replicas: 2
deploymentMyWorker:
containers:
myWorker:
image: my-company/my-worker
imageTag: 295a9c2
envLogLevel: warning
envTraceServiceName: my-worker
resourcesLimitsCPU: 200m
resourcesLimitsMemory: 1536Mi
resourcesRequestsCPU: 20m
resourcesRequestsMemory: 128Mi
mySidecar:
image: my-company/metrics-exporter
imageTag: aa1c434
replicas: 2
FAQs
Creates Helm charts from Kubernetes resources.
The npm package @risingstack/anchor receives a total of 4 weekly downloads. As such, @risingstack/anchor popularity was classified as not popular.
We found that @risingstack/anchor demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.