Category: DevOps & AIOps
-
Linux top Command Sheet: CPU & Memory
💡 Linux top Command Sheet: CPU & Memory — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux top Command Sheet: CPU & Memory. bash Copy top CPU Usage us (user): Time used by processes running in user space. sy (system): Time used by processes running in kernel space. ni (nice):…
-
Kubernetes Labels & Annotations
💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…
-
Kube-apiserver Hardening: RBAC & Admission
💡 Kube-apiserver Hardening: RBAC & Admission — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kube-apiserver Hardening: RBAC & Admission. Common Log analysis to resolve Manifests errors bash Copy # 컨테이너 재시작여부 확인 crictl ps # Manifest 문법오류 탐색 (컨테이너가 안뜨므로 치명적임) journalctl -u kubelet | grep manifest # 종료된 컨테이너…
-
Kubernetes ReadOnly ServiceAccount & Limited
💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…
-
TACO 2.0 Infra: K8s, Ceph & OpenStack
💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…
-
JavaScript Core: Event Loop & Async
💡 JavaScript Core: Event Loop & Async — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for JavaScript Core: Event Loop & Async. Grammar Type 1. Primitive Types A primitive type represents a single value, and is a data type in which the value itself is stored. Primitive types are immutable, and…
-
Rook-Ceph Distributed Storage Cluster Helm
💡 Rook-Ceph Distributed Storage Cluster Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Rook-Ceph Distributed Storage Cluster Helm. References and Guidelines (NOTE) Important note: You must customize the ‘CephCluster’ resource in the sample manifest for your cluster. Each CephCluster must be deployed in its own namespace, the sample uses…
-
Talos Linux: Immutable & Secure K8s Cluster
💡 Talos Linux: Immutable & Secure K8s Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Talos Linux: Immutable & Secure K8s Cluster. Binary Installation mac bash Copy brew install siderolabs/tap/talosctl echo ‘source <(talosctl completion zsh)’ | tee -a ~/.zshrc #if using colima sudo ln -s “$HOME/.colima/default/docker.sock” /var/run/docker.sock #if using…