Fredric News

Category: DevOps & AIOps

  • Enterprise Cloud Mgmt Platform (CMP)

    💡 Enterprise Cloud Mgmt Platform (CMP) — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Enterprise Cloud Mgmt Platform (CMP). TLS Sample Show Get certificate information from specific TLS port bash Copy ip= port= openssl s_client -connect ${ip}:${port} -showcerts Main References and Guidelines (NOTE) Even if the CA certificate expires, the…

  • Cert-Manager Helm Setup & Let’s Encrypt

    💡 Cert-Manager Helm Setup & Let’s Encrypt — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Cert-Manager Helm Setup & Let’s Encrypt. Installation References and Guidelines (NOTE) You can easily add or update TLS for k8s applications using a CA key pair or an external DNS (cloud provider, etc.). In a…

  • Kubernetes etcd Distributed Key-Value Store

    💡 Kubernetes etcd Distributed Key-Value Store — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes etcd Distributed Key-Value Store. References and Guidelines (NOTE) When etcd (3 node) clustering, the argument to etcd1 is –initial-cluster=etcd1. etcd2 with –initial-cluster=etcd1,etcd2. If etcd3 is configured with –initial-cluster=etcd1,etcd2,etcd3, can it be considered normally clustered? 💡…

  • Advanced TypeScript Types: Generics, Unions

    💡 Advanced TypeScript Types: Generics, Unions — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Advanced TypeScript Types: Generics, Unions. Utility Type TypeScript’s **Utility Types** are powerful tools that help you transform already defined types or easily create new types. Frequently used utility types include Partial, Readonly, Pick, and Omit. Below…

  • Long-Term K8s Monitoring: Prometheus & Thanos

    💡 Long-Term K8s Monitoring: Prometheus & Thanos — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Long-Term K8s Monitoring: Prometheus & Thanos. 📑 Table of Contents Declarative Management Deployments Action Olds Samples TroubleShooting Setups Declarative Management Deployments thanos + kube-prometheus-stack Architecture & System Flow Diagram SVG 100% Pan & Zoom thanos…

  • Network Subnet Masking & CIDR Notation

    💡 Network Subnet Masking & CIDR Notation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Network Subnet Masking & CIDR Notation. References and Guidelines (NOTE) CIDR (Classless Inter-Domain Routing) and subnet mask are similar concepts, but they are not exactly the same thing. Subnet Mask is a 32-bit (IPv4) or…

  • Harbor Container Registry T-Shoot & Recovery

    💡 Harbor Container Registry T-Shoot & Recovery — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Harbor Container Registry T-Shoot & Recovery. When: docker push Issue: unknown blob () bash Copy docker push my-harbor/base/ubuntu:latest >>> The push refers to repository [my-harbor/base/ubuntu] a46a5fb872b5: Pushing [==================================================>] 80.62MB unknown blob Given Use Bitnami Helmchart…

  • OPNsense Internal CA & WebGUI SSL/TLS

    💡 OPNsense Internal CA & WebGUI SSL/TLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Internal CA & WebGUI SSL/TLS.

  • HashiCorp Vault Security: Transit Engine

    💡 HashiCorp Vault Security: Transit Engine — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HashiCorp Vault Security: Transit Engine. Installation Operation Authentication Management Policy registration bash Copy k exec -it -n portal-system sts/vault — sh ### START IN CONTAINER vault login policy_name=admin-policy cat > /tmp/${policy_name}.hcl <<EOF path “*” { capabilities…

  • Stubby DNS Daemon: DNS-over-TLS (DoT) Client

    💡 Stubby DNS Daemon: DNS-over-TLS (DoT) Client — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Stubby DNS Daemon: DNS-over-TLS (DoT) Client. 📑 Table of Contents Architecture Installation Exec Features Architecture Architecture & System Flow Diagram SVG 100% Pan & Zoom Installation Mac bash Copy brew install stubby jq yq Exec…