Fredric News

Category: DevOps & AIOps

  • Kubernetes kube-apiserver CA Certificates

    💡 Kubernetes kube-apiserver CA Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-apiserver CA Certificates. Related documents Setups 3rdParty Setups cluster cmd CNI cmd gitOps cmd SubDocs 3rd Party SubDocs Swagger Git OpenApi bash Copy https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json SSL/PKI path kubectl describe pods -n kube-system kube-apiserver* ?: /etc/kubernetes/pki/* k8s-certs: /etc/kubernetes/ssl/*…

  • Kubernetes CoreDNS & systemd-resolved Config

    💡 Kubernetes CoreDNS & systemd-resolved Config — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS & systemd-resolved Config. ReferenceGlossary DB: Siyoung’s Notion: troubleshooting: cmd: , References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined…

  • Infisical Secret Mgmt: Machine Identity & K8s

    💡 Infisical Secret Mgmt: Machine Identity & K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt: Machine Identity & K8s. API Reference

  • WireGuard VPN on OPNsense: Server & Peer

    💡 WireGuard VPN on OPNsense: Server & Peer — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for WireGuard VPN on OPNsense: Server & Peer. References and Guidelines (NOTE) System Required: Required to reliably request a VPN instance endpoint from an external network Server in OPNSense Create instance and enable WG Instance…

  • Kubernetes CoreDNS Nameserver T-Shoot

    💡 Kubernetes CoreDNS Nameserver T-Shoot — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS Nameserver T-Shoot. TLDR@1qzxcThere is still version 1.27… . Tried a lot. The only thing that worked was to revert to the version you suggested. Here’s everything I tried for future reference. I installed kubernetes following…

  • Bitbucket Pipelines CI/CD: DinD & Private

    💡 Bitbucket Pipelines CI/CD: DinD & Private — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Bitbucket Pipelines CI/CD: DinD & Private. 🔗 https://support.atlassian.com/bitbucket-cloud/docs/bitbucket-pipelines-configuration-reference/ yaml Copy image: #Docker image options page options: #Global options page clone: #Git clone behavior page definitions: #Cache and service container definitions page pipeline: #Pipeline start options…

  • CKS 2026 Exam Prep: Certified K8s Security

    💡 CKS 2026 Exam Prep: Certified K8s Security — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for CKS 2026 Exam Prep: Certified K8s Security. Study In-house technology club – [Add subtitle](https://www.canva.com/design/DAHKE-QYkIE/nrLyzRbAXLpCVsiSLsVy_w/edit) – Activity method: – Preparation before each meeting: After taking Udemy, organize what you have learned under your name in…

  • Kubernetes Node Communication & Kubelet

    💡 Kubernetes Node Communication & Kubelet — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Node Communication & Kubelet. Infinite reboot issue of controlplanes such as etcd and kube-apiserver when using the latest version of containerd Action Change to use CRI-O Nameserver limit (3) exceeded when installing latest version k8s…

  • Skopeo Container Image Utility: Daemonless

    💡 Skopeo Container Image Utility: Daemonless — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Skopeo Container Image Utility: Daemonless. Installation RHEL / Rocky Linux (8/9) bash Copy sudo dnf install -y skopeo skopeo –version Ubuntu / Debian (20.04/22.04/24.04) bash Copy sudo apt-get update && sudo apt-get install -y skopeo skopeo…

  • k3s Lightweight K8s Setup & Multi-Node

    💡 k3s Lightweight K8s Setup & Multi-Node — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for k3s Lightweight K8s Setup & Multi-Node. Server Default installation bash Copy curl -sfL https://get.k3s.io | sh – Use flag 1: Passed as an environment variable bash Copy curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=”$FLAGS” sh – 2:…