Fredric News

Tag: Containers

  • Kubelet podPidsLimit Tuning: Container PID

    💡 Kubelet podPidsLimit Tuning: Container PID — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet podPidsLimit Tuning: Container PID. Shell Summary of usage based on Pod shell Copy #!/bin/bash LOG_FILE=”/var/log/pod_pids_usage.log” KUBECONFIG_PATH=”/etc/kubernetes/admin.conf” TIMESTAMP=$(date “+%Y-%m-%d %H:%M:%S”) TMP_FILE=$(mktemp) NODES=$(kubectl –kubeconfig=$KUBECONFIG_PATH get nodes -o jsonpath='{.items[*].metadata.name}’) for NODE in $NODES; do RAW_METRICS=$(kubectl –kubeconfig=$KUBECONFIG_PATH get –raw…

  • Harbor Container Registry on Docker with

    💡 Harbor Container Registry on Docker with — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Harbor Container Registry on Docker with. Closed network Ready ubuntu 20.04 > 💡 docker– containerd.io/now 1.6.6-1 amd64 \[installed,local\]– docker-ce-cli/now 5:19.03.15\~3-0\~ubuntu-focal amd64 \[installed,local\]– docker-ce/now 5:19.03.15\~3-0\~ubuntu-focal amd64 \[installed,local\]– docker-compose-plugin/now 2.6.0\~ubuntu-focal amd64 \[installed,local\]– libseccomp2/now 2.5.1-1ubuntu1\~20.04.2 amd64 \[installed,local\] docker-compose–…

  • Kubernetes kubeconfig Manifest: Clusters,

    💡 Kubernetes kubeconfig Manifest: Clusters, — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kubeconfig Manifest: Clusters,. shell bash Copy #!/bin/bash # `./generate_kubeconfig.sh dev 10.0.X.X mypasswd 2222 > .my.kubeconfig` contextName=$1 hostname=$2 ssh_port=${3:-22} dest_ip=$(dig $hostname +short) endpoint=”https://$dest_ip:6443″ ns=default sa=tester # ───────────────────────────────────────────── # 원격 스크립트 정의 # ───────────────────────────────────────────── remote_script=$(cat <<EOF # 1.…

  • Cilium eBPF CNI Installation & NetworkPolicy

    💡 Cilium eBPF CNI Installation & NetworkPolicy — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Cilium eBPF CNI Installation & NetworkPolicy. Installation bash Copy # required helm helm repo add cilium https://helm.cilium.io/ helm repo update # Cilium CLI 설치 curl -L –remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz tar xzvf cilium-linux-amd64.tar.gz sudo mv cilium /usr/local/bin/…

  • k3s Lightweight Kubernetes: Archi & Resource

    💡 k3s Lightweight Kubernetes: Archi & Resource — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for k3s Lightweight Kubernetes: Archi & Resource. Installation & Uninstall Automated Upgrades (deploy to system-upgrade-controller) Documentation 🔗 https://github.com/rancher/system-upgrade-controller?tab=readme-ov-file Exec bash Copy k label nodes $mynode k3s-upgrade=”true” # Y.O.L.O. kubectl apply -k github.com/rancher/system-upgrade-controller Trouble shooting Resolved k3s…

  • Linkerd Ultralight Service Mesh: mTLS

    💡 Linkerd Ultralight Service Mesh: mTLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linkerd Ultralight Service Mesh: mTLS. Proxy 주입 방법 Automatic Proxy Injection inject Adding your services to Linkerd Injection (regeneration) through automatic generation of yaml txt Copy kubectl get -n $namespace deploy -o yaml | linkerd inject…

  • Colima Container Runtime on macOS: Docker

    💡 Colima Container Runtime on macOS: Docker — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Colima Container Runtime on macOS: Docker. Exec bash Copy #템플릿 지정 colima template #기존 vm 삭제 (템플릿내 insecure변경 적용) colima delete #정지 colima stop #시작 colima start #vm 접근 colima ssh Features TLS Trust required:…

  • Kubelet Daemon Ops: Resource Reservation

    💡 Kubelet Daemon Ops: Resource Reservation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet Daemon Ops: Resource Reservation. Configurations Apply max-pod-pids, podPidsLimit Simultaneous operation of 3 worker nodes Recommended method: Modify config.yaml (based on Kubeadm) /etc/kubernetes/kubelet-config.yaml (if not present, then) /var/lib/kubelet/config.yaml How to edit: 1. Make sure the file…

  • MicroK8s Lightweight K8s: Cert Renewal

    💡 MicroK8s Lightweight K8s: Cert Renewal — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Lightweight K8s: Cert Renewal. DIRs certs (cluster certificates) /var/snap/microk8s/current/certs/ config (kubeconfig, etc.) /var/snap/microk8s/current/credentials/ Features Apply after adding SAN to CA certificate bash Copy # 인증서 템플릿 오픈 후 도메인 또는 IP 추가 sudo vi /var/snap/microk8s/current/certs/csr.conf.template…

  • Prometheus ServiceMonitor (smon.yaml)

    💡 Prometheus ServiceMonitor (smon.yaml) — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Prometheus ServiceMonitor (smon.yaml). bash Copy apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: name: jaeger-operator namespace: istio-system labels: prometheus: kube-prometheus-stack-prometheus spec: endpoints: – honorLabels: false path: /metrics port: metrics namespaceSelector: matchNames: – istio-system selector: matchLabels: app.kubernetes.io/name: jaeger-operator Prometheus ← Monitor resource…