Category: DevOps & AIOps

  • Kubespray High Availability (HA) Kubernetes

    💡 Kubespray High Availability (HA) Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubespray High Availability (HA) Kubernetes. References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined in /etc/systemd/resolved.conf is /var/run/systemd/resolve/resolv.conf. Kubelet: Default mounts…

  • Istio Service Mesh Helm Deployment: istiod

    💡 Istio Service Mesh Helm Deployment: istiod — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Istio Service Mesh Helm Deployment: istiod. 🔗 https://istio.io/latest/docs/setup/install/helm/ Install bash Copy helm repo add istio https://istio-release.storage.googleapis.com/charts helm repo update kubectl create namespace istio-system helm pull istio/base –untar helm pull istio/istiod –untar cd base helm install…

  • Gardener Multi-Cloud Kubernetes Cluster

    💡 Gardener Multi-Cloud Kubernetes Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Gardener Multi-Cloud Kubernetes Cluster. The Notion API rate limit was reached. Wait at least 3 seconds before retrying this tool call. Do not retry immediately or in parallel. {“error”:{“code”:”rate_limited”,”classification”:”rate_limit”,”operation”:”fetch”,”message”:”The Notion API rate limit was reached.”,”impact”:”The requested tool…

  • Docker Compose Port Conflict & Networking

    💡 Docker Compose Port Conflict & Networking — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker Compose Port Conflict & Networking. Overview If the following error occurs when running after installation txt Copy Traceback (most recent call last): File “/usr/bin/docker-compose”, line 6, in <module> from pkg_resources import load_entry_point File “/usr/lib/python3/dist-packages/pkg_resources/__init__.py”,…

  • Web Portal CORS Policy & API Reverse Proxy

    💡 Web Portal CORS Policy & API Reverse Proxy — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Web Portal CORS Policy & API Reverse Proxy. Local Login Failed References and Guidelines (NOTE) Login is the holy trinity of DB-Keycloak-Vault (Why vault?) localhost keycloakClient authentication failed for development, AdminAPi/LoginServiceImple.java:568 Rationale A…

  • Argo Workflows Helm Deployment: Cloud-Native

    💡 Argo Workflows Helm Deployment: Cloud-Native — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Argo Workflows Helm Deployment: Cloud-Native. Repository bash Copy helm repo add argo https://argoproj.github.io/argo-helm Pipelines RBAC Kubernetes if Troubles bash Copy wait: Error (exit code 64): workflowtaskresults.argoproj.io is forbidden: User “system:serviceaccount:deploy-system:default” cannot create resource “workflowtaskresults” in API…

  • WireGuard wg-quick CLI Sheet: Interface

    💡 WireGuard wg-quick CLI Sheet: Interface — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for WireGuard wg-quick CLI Sheet: Interface. Exec Create a client tunneling interface (Mac OS) bash Copy my_interface=fredric18 # config 생성 my_config=””” “”” cat <<EOF > /opt/homebrew/etc/wireguard/$my_interface.conf $my_config EOF wg-quick up $my_interface # 무슨소용인질 모르겠음 wg-quick save $my_interface…

  • HomeLab Infra : Hardware & Network Design

    💡 HomeLab Infra : Hardware & Network Design — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HomeLab Infra : Hardware & Network Design. Private Net Bare-metal Resources Management (with Security) Firewall AP HCI Virtual Resources Management HCI Container Platform Automation IaC Application Management GitOps Public Net Public DNS Hosting Cloudflare

  • dnsmasq Lightweight DNS & DHCP Server Setup

    💡 dnsmasq Lightweight DNS & DHCP Server Setup — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for dnsmasq Lightweight DNS & DHCP Server Setup. Mac: Local DNS settings References and Guidelines (NOTE) If used like this, /etc/hosts may not be touched Setup bash Copy brew install dnsmasq Restart after setting local…

  • Sonatype Nexus OSS Helm Setup: Private

    💡 Sonatype Nexus OSS Helm Setup: Private — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Sonatype Nexus OSS Helm Setup: Private. AWS Single Instance Resilient Nexus Repository Manager Chart This chart deploys a Nexus Repository Manager instance to an AWS EKS cluster. The current release has been tested on AWS…