Kubernetes Labels & Annotations

๐Ÿ’ก Kubernetes Labels & Annotations โ€” Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations.

Label
namespace
bash
#istio ์นด๋‚˜๋ฆฌ ๋ฐฐํฌ
istio.io/rev=canary
#istio ํ”„๋ก์‹œ ์ฃผ์ž… ํ—ˆ์šฉ or ๋ถˆํ—ˆ
istio-injection=enabled or disabled
pod
bash
#istio ์นด๋‚˜๋ฆฌ ๋ฐฐํฌ
istio.io/rev=canary
#istio ํ”„๋ก์‹œ ์ฃผ์ž… ํ—ˆ์šฉ or ๋ถˆํ—ˆ
sidecar.istio.io/inject="true" or "false"
Annotation
namespace Annotation
pod Annotation
bash
#linkerd ํ”„๋ก์‹œ ์ฃผ์ž… ํ—ˆ์šฉ
linkerd.io/inject: enabled
secret Annotation
bash
#sa์ธ์ฆํ† ํฐ ๋ฐœํ–‰
kubernetes.io/service-account.name: $sa
ingress Annotation
bash
#cert-manager certification ์ƒ์„ฑ์š”์ฒญ
cert-manager.io/cluster-issuer: $clusterissuer
cert-manager.io/issuer: $issuer

# nginx
## ์„ธ์…˜ ์œ ์ง€ ๋ฐ ์›น์†Œ์ผ“ ๊ณ ์ • (Sticky Session)
#nginx.ingress.kubernetes.io/affinity: "cookie"
#nginx.ingress.kubernetes.io/session-cookie-name: "route"
#nginx.ingress.kubernetes.io/session-cookie-change-on-failure: "true"
## Client IP Hash ๊ธฐ๋ฐ˜ Sticky Session
nginx.ingress.kubernetes.io/upstream-hash-by: "$remote_addr"
# ํƒ€์ž„์•„์›ƒ ์„ค์ • (์—ฐ๊ฒฐ ์œ ์ง€)
nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
## ๋ฐ์ดํ„ฐ ์ฒ˜๋ฆฌ
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
nginx.ingress.kubernetes.io/proxy-body-size: "50m"
nginx.ingress.kubernetes.io/proxy-buffer-size: "128k"
## custom header
nginx.ingress.kubernetes.io/custom-headers: "portal/no-cache-headers"
gateway Annotation
bash
#cert-manager certification ์ƒ์„ฑ์š”์ฒญ
cert-manager.io/cluster-issuer: $clusterissuer
cert-manager.io/issuer: $issuer
storageclass Annotation
bash
storageclass.kubernetes.io/is-default-class: "true" or "false"
pvc Annotation
yaml
pv.kubernetes.io/bind-completed: "yes"
pv.kubernetes.io/bound-by-controller: "yes"
volume.beta.kubernetes.io/storage-provisioner: cmp
volume.kubernetes.io/storage-provisioner: cmp

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *