Fredric News

Category: DevOps & AIOps

  • Apache HTTP Server Setup & VirtualHost

    💡 Apache HTTP Server Setup & VirtualHost — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Apache HTTP Server Setup & VirtualHost. RHEL bash Copy mkdir -p /var/www/html/packages yum install httpd yum install firewalld systemctl start httpd systemctl enable httpd systemctl start firewalld systemctl enable firewalld # 방화벽 세팅 firewall-cmd –zone=public…

  • Kubernetes kubeconfig Manifest: Clusters,

    💡 Kubernetes kubeconfig Manifest: Clusters, — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kubeconfig Manifest: Clusters,. shell bash Copy #!/bin/bash # `./generate_kubeconfig.sh dev 10.0.X.X mypasswd 2222 > .my.kubeconfig` contextName=$1 hostname=$2 ssh_port=${3:-22} dest_ip=$(dig $hostname +short) endpoint=”https://$dest_ip:6443″ ns=default sa=tester # ───────────────────────────────────────────── # 원격 스크립트 정의 # ───────────────────────────────────────────── remote_script=$(cat <<EOF # 1.…

  • Kubelet podPidsLimit Tuning: Container PID

    💡 Kubelet podPidsLimit Tuning: Container PID — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet podPidsLimit Tuning: Container PID. Shell Summary of usage based on Pod shell Copy #!/bin/bash LOG_FILE=”/var/log/pod_pids_usage.log” KUBECONFIG_PATH=”/etc/kubernetes/admin.conf” TIMESTAMP=$(date “+%Y-%m-%d %H:%M:%S”) TMP_FILE=$(mktemp) NODES=$(kubectl –kubeconfig=$KUBECONFIG_PATH get nodes -o jsonpath='{.items[*].metadata.name}’) for NODE in $NODES; do RAW_METRICS=$(kubectl –kubeconfig=$KUBECONFIG_PATH get –raw…

  • 1Password Connect Server On-Premises & K8s

    💡 1Password Connect Server On-Premises & K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for 1Password Connect Server On-Premises & K8s. Linked Installation Get started with a 1Password Connect server – 1Password Developer bash Copy helm repo add 1password https://1password.github.io/connect-helm-charts/ helm install connect 1password/connect \ –set-file connect.credentials=1password-credentials.json k8s-operator References and…

  • Cilium eBPF CNI Installation & NetworkPolicy

    💡 Cilium eBPF CNI Installation & NetworkPolicy — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Cilium eBPF CNI Installation & NetworkPolicy. Installation bash Copy # required helm helm repo add cilium https://helm.cilium.io/ helm repo update # Cilium CLI 설치 curl -L –remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz tar xzvf cilium-linux-amd64.tar.gz sudo mv cilium /usr/local/bin/…

  • k3s Lightweight Kubernetes: Archi & Resource

    💡 k3s Lightweight Kubernetes: Archi & Resource — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for k3s Lightweight Kubernetes: Archi & Resource. Installation & Uninstall Automated Upgrades (deploy to system-upgrade-controller) Documentation 🔗 https://github.com/rancher/system-upgrade-controller?tab=readme-ov-file Exec bash Copy k label nodes $mynode k3s-upgrade=”true” # Y.O.L.O. kubectl apply -k github.com/rancher/system-upgrade-controller Trouble shooting Resolved k3s…

  • OpenVPN CLI Client on Linux & ovpn Tunnel

    💡 OpenVPN CLI Client on Linux & ovpn Tunnel — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenVPN CLI Client on Linux & ovpn Tunnel. openvpn2 Installation bash Copy sudo apt-get install openvpn -y cd ~ mkdir -p /etc/openvpn mv $my_ovpnFile /etc/openvpn Exec bash Copy # 데몬 실행 sudo openvpn…

  • Grafana Dashboards & Prometheus Data Source

    💡 Grafana Dashboards & Prometheus Data Source — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Grafana Dashboards & Prometheus Data Source. Alert Create Alert Rule graphql Copy # A : prometheus Query: 10분동안 restart된 횟수 sum by(container,namespace,pod) (changes(kube_pod_container_status_restarts_total[10m])) # B : Expression: Reduce A # C : Expression: Math $B…

  • CKS Certified Kubernetes Security Specialist

    💡 CKS Certified Kubernetes Security Specialist — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for CKS Certified Kubernetes Security Specialist. 📑 Table of Contents Skills Map by CKS problem solving scope CKS Troubleshooting Flow CKS 시험은 문제에서 구체적으로 어떤 기술(AppArmor, Seccomp, RBAC 등)을 사용해야 하는지 명시하지 않고, 추상적인 보안 요구사항(예: “컨테이너의…

  • OpenStack Nova & Neutron Network

    💡 OpenStack Nova & Neutron Network — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenStack Nova & Neutron Network. Volume Sewing Machine Rationale k8s node notReady status: Check communication status between kubelet and vm Check vm console log openstack bash Copy #openstack ssh 접속 cat platfrom_openrc >>> export OS_USERNAME=admin export…