Fredric News

Tag: Containers

  • Karmada Multi-Cluster Kubernetes: Scheduling

    💡 Karmada Multi-Cluster Kubernetes: Scheduling — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Karmada Multi-Cluster Kubernetes: Scheduling. Related pages Operation karmada-apiserver This is a control-plane running as a pod, and the deploy of the apiserver does not deploy the pod, but deploys the member cluster. txt Copy kubectl config use-context…

  • Infisical CRD Manifest & Kubernetes Secret

    💡 Infisical CRD Manifest & Kubernetes Secret — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical CRD Manifest & Kubernetes Secret. Secret: infisical-secrets References and Guidelines (NOTE) Environmental information such as secret key used during infisical installation env bash Copy AUTH_SECRET=$(openssl rand -base64 32) ENCRYPTION_KEY=$(openssl rand -hex 16) REDIS_URL=redis://default:[email protected]:6379 DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical…

  • Infisical Secret Mgmt Helm Deployment on K8s

    💡 Infisical Secret Mgmt Helm Deployment on K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt Helm Deployment on K8s. References Install Helm 🔗 https://infisical.com/docs/self-hosting/deployment-options/kubernetes-helm ENV 🔗 https://infisical.com/docs/integrations/platforms/kubernetes shell Copy #helm install –generate-name infisical-helm-charts/secrets-operator –version=<PLACE-CHART-VERSION-HERE> –set controllerManager.manager.image.tag=<PLACE-APP-VERSION-HERE> #helm install –generate-name infisical-helm-charts/secrets-operator –version=0.1.4 –set controllerManager.manager.image.tag=v0.2.0 helm pull infisical/secrets-operator…

  • Docker Desktop Setup & WSL2 Resource Tuning

    💡 Docker Desktop Setup & WSL2 Resource Tuning — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker Desktop Setup & WSL2 Resource Tuning. References and Guidelines (NOTE) docker desktop for Ubuntu Linux I wanted to use the docker init command, but the command is implemented based on Docker Desktop. In…

  • Kubernetes Labels & Annotations

    💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…

  • TACO 2.0 Infra: K8s, Ceph & OpenStack

    💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…

  • Rook-Ceph Distributed Storage Cluster Helm

    💡 Rook-Ceph Distributed Storage Cluster Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Rook-Ceph Distributed Storage Cluster Helm. References and Guidelines (NOTE) Important note: You must customize the ‘CephCluster’ resource in the sample manifest for your cluster. Each CephCluster must be deployed in its own namespace, the sample uses…

  • Talos Linux: Immutable & Secure K8s Cluster

    💡 Talos Linux: Immutable & Secure K8s Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Talos Linux: Immutable & Secure K8s Cluster. Binary Installation mac bash Copy brew install siderolabs/tap/talosctl echo ‘source <(talosctl completion zsh)’ | tee -a ~/.zshrc #if using colima sudo ln -s “$HOME/.colima/default/docker.sock” /var/run/docker.sock #if using…

  • Dockerfile : Multi-stage Builds & Caching

    💡 Dockerfile : Multi-stage Builds & Caching — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Dockerfile : Multi-stage Builds & Caching. Samples Syntax 1. Basic command FROM Create a new image based on the image. Format: FROM : Example: FROM node:16 RUN Specifies the command to be executed during Docker image…