Fredric News

Tag: DeepDive

  • Istio Service Mesh: Envoy Sidecars

    💡 Istio Service Mesh: Envoy Sidecars — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Istio Service Mesh: Envoy Sidecars. Istiod Istiod Service Port 15010: grpc-xds 15012: https-dns 15014: http-monitoring 443: https-webhook Envoy-Proxy Proxy Description UID information runAsUser: 1337: Do not redirect to envoy Proxy port definition 15001: Proxy port listening…

  • Env Variables (.env) Mgmt & 12-Factor App

    💡 Env Variables (.env) Mgmt & 12-Factor App — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Env Variables (.env) Mgmt & 12-Factor App. Support Framework Based on Node.js: Express.js, NestJS, Next.js (using dotenv) PHP-based: Laravel Python-based: Django, Flask (using python-decouple, python-dotenv) Based on Ruby: Ruby on Rails (using dotenv-rails) Java-based:…

  • OpenStack Nova/Neutron API 1000-Limit

    💡 OpenStack Nova/Neutron API 1000-Limit — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OpenStack Nova/Neutron API 1000-Limit. Basis References and Guidelines (NOTE) In order to apply the config file, each daemon must be restarted, so there are many limitations in operating it in an operating cluster. Nova 🔗 https://docs.openstack.org/ocata/config-reference/compute/config-options.html max_limit…

  • Kubernetes API Resources: Group, Version

    💡 Kubernetes API Resources: Group, Version — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes API Resources: Group, Version. API Resources Listed bash Copy NAME SHORTNAMES APIVERSION NAMESPACED KIND bindings v1 true Binding componentstatuses cs v1 false ComponentStatus configmaps cm v1 true ConfigMap endpoints ep v1 true Endpoints events ev…

  • Docker & containerd Insecure Private Registry

    💡 Docker & containerd Insecure Private Registry — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Docker & containerd Insecure Private Registry. docker docker daemon vi /etc/docker/daemon.json json Copy { “insecure-registries” : [“harbor.Enterprise Cloud.cld”] } systemctl restart docker podman docker vi /etc/containers/registries.conf rb Copy [[registry]] location = “registry.mycluster.williamlieurance.com:5000” insecure = true…

  • etcd vs HashiCorp Vault: Distributed

    💡 etcd vs HashiCorp Vault: Distributed — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for etcd vs HashiCorp Vault: Distributed. References and Guidelines (NOTE) Both etcd and vault use the term raft. Do they mean the same thing? 💡 Both etcd and Vault use the term “Raft”, but they refer to…

  • Go text/template & html/template Syntax

    💡 Go text/template & html/template Syntax — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Go text/template & html/template Syntax. 🔗 https://gotemplate.io/ Grammar Conditional statement go Copy {{- if $Booleans }} {{- else if and $Booleans ( not $Booleans ) }} {{- else }} {{- end }} //$Booleans1 또는 $Booleans2 {{-…

  • Linux Filesystem Compare: ext4, XFS, ZFS and

    💡 Linux Filesystem Compare: ext4, XFS, ZFS and — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux Filesystem Compare: ext4, XFS, ZFS and. WebDav Filesystem Mount You can create WebDAV mounts from the Linux command line. This is useful if you want to access Nextcloud the same way you would…

  • RHEL Local YUM Repository in Air-Gapped Envs

    💡 RHEL Local YUM Repository in Air-Gapped Envs — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for RHEL Local YUM Repository in Air-Gapped Envs. References and Guidelines (NOTE) Environment: rhel 9.1 qcow2 vm on openstackImage used: rhel-baseos-9.1-x86_64-dvd.iso Build a local repository bash Copy #scp로 이미지 복사 #repository 경로 생성 후 이미지…

  • Kubernetes Control Plane TLS Certificates

    💡 Kubernetes Control Plane TLS Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Control Plane TLS Certificates. Renewing certificates on your Kubernetes (k8s) cluster is important to maintain security. Certificates are often used to secure communication between various components in a cluster. Below is a step-by-step guide on…