Fredric News

Category: DevOps & AIOps

  • Kubespray kube-vip Virtual IP Load Balancer

    💡 Kubespray kube-vip Virtual IP Load Balancer — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubespray kube-vip Virtual IP Load Balancer. VIP on LAN. Network ARP Pre-operation bash Copy apt install -y nmap #VIP 선정 ## host down IP 확인 ### 아래 결과중 x.x.x.0, x.x.x.1, x.x.x.255 (예약 주소) 제외하고 사용…

  • Kubernetes CoreDNS Corefile Customization

    💡 Kubernetes CoreDNS Corefile Customization — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS Corefile Customization. Docs About resolv.conf References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined in /etc/systemd/resolved.conf is /var/run/systemd/resolve/resolv.conf. Kubelet: Default…

  • Kubernetes TLS Certificates & kubeadm certs

    💡 Kubernetes TLS Certificates & kubeadm certs — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes TLS Certificates & kubeadm certs. Automated script – When renewing after expiration Attempt to bootstrap We will summarize the recovery sequence assuming the worst case scenario where bootstrapping is not set and both the…

  • OPNsense Unbound DNS: Ad-blocking

    💡 OPNsense Unbound DNS: Ad-blocking — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Unbound DNS: Ad-blocking. References and Guidelines (NOTE) System Required: DNS Port forwarding Private domain registration References and Guidelines (NOTE) List instructing to allow the response even if the DNS query result includes a private IP address…

  • OPNsense Firewall XML Config Automated Git

    💡 OPNsense Firewall XML Config Automated Git — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall XML Config Automated Git. 🔗 https://docs.opnsense.org/manual/git-backup.html Step0. Preparation (Github) Create SSH Keypair bash Copy mkdir opnsense ssh-keygen -f ~/opnsense/opnsense # 공개키 클립보드에 복사 cat ~/opnsense/opnsense.pub | pbcopy # 개인키 클립보드에 복사 cat ~/opnsense/opnsense…

  • MicroK8s Single-Node Kubernetes Setup & Addon

    💡 MicroK8s Single-Node Kubernetes Setup & Addon — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Single-Node Kubernetes Setup & Addon. Installation bash Copy sudo snap install microk8s –classic microk8s status microk8s enable community #확장 애드온 microk8s enable $addons Completion With Alias bash Copy sudo bash -c “cat << EOF…

  • Bitbucket Pipelines Self-Hosted Runner on

    💡 Bitbucket Pipelines Self-Hosted Runner on — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Bitbucket Pipelines Self-Hosted Runner on. References and Guidelines (NOTE) Assume that docker is used as the Kubernetes CRI. Depending on the CRI version, docker-in-docker image issues exist. More details: Job based (for Autoscaler) References and Guidelines…

  • NGINX Ingress Controller Archi & SSL

    💡 NGINX Ingress Controller Archi & SSL — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for NGINX Ingress Controller Archi & SSL. Setups 🔗 https://github.com/bitnami/charts/tree/main/bitnami/nginx-ingress-controller bash Copy repo=bitnami sdiff -s <(helm show values ${repo}/$(cat Chart.yaml | yq ‘.name’) –version=$(cat Chart.yaml | yq ‘.version’) | yq -oprops) <(cat ./values.yaml | yq -oprops)…

  • Cloud Monitoring Compare: Prometheus,

    💡 Cloud Monitoring Compare: Prometheus, — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Cloud Monitoring Compare: Prometheus,. Stack Prometheus+Grafana VS Telegraf+InfluxDB+Chronograf VS StatsD+Graphite+Grafana VS VictoriaMetrics+Grafana combination Metric collection method Advantages Cons Prometheus + Grafana Server Pull method High performance, scalability, flexibility, strong community support, and rich visualization options. Default data…

  • Adobe Creative Cloud Tuning on macOS

    💡 Adobe Creative Cloud Tuning on macOS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Adobe Creative Cloud Tuning on macOS. 🔗 https://helmfile.readthedocs.io/en/latest/ Installation required kube-proxy:8080 yaml Copy k proxy –port=8080 & macOS bash Copy brew install helmfile amd64 bash Copy LATEST=$(curl -sL https://github.com/helmfile/helmfile/releases/latest \ | grep -oP ‘tag/\K[v0-9\.]+’ |…