Fredric News

Tag: DevOps

  • Karmada Multi-Cluster Kubernetes: Scheduling

    💡 Karmada Multi-Cluster Kubernetes: Scheduling — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Karmada Multi-Cluster Kubernetes: Scheduling. Related pages Operation karmada-apiserver This is a control-plane running as a pod, and the deploy of the apiserver does not deploy the pod, but deploys the member cluster. txt Copy kubectl config use-context…

  • Infisical CRD Manifest & Kubernetes Secret

    💡 Infisical CRD Manifest & Kubernetes Secret — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical CRD Manifest & Kubernetes Secret. Secret: infisical-secrets References and Guidelines (NOTE) Environmental information such as secret key used during infisical installation env bash Copy AUTH_SECRET=$(openssl rand -base64 32) ENCRYPTION_KEY=$(openssl rand -hex 16) REDIS_URL=redis://default:[email protected]:6379 DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical…

  • Advanced Bash Shell Scripting: Signal Traps

    💡 Advanced Bash Shell Scripting: Signal Traps — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Advanced Bash Shell Scripting: Signal Traps. 🔗 https://minddoodle.tistory.com/m/10 🔗 https://jdm.kr/blog/4 Summary bash Copy # cmd결과를 변수로 사용하여 cmd 실행 command $({ command }) ENV BASH_SOURCE bash Copy # 현재 스크립트의 위치를 찾기 SCRIPT_DIR=”$(cd “$(dirname “${BASH_SOURCE[0]}”)”…

  • Terraform IaC Archi: S3 Backend & State

    💡 Terraform IaC Archi: S3 Backend & State — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Terraform IaC Archi: S3 Backend & State. Pages Concept Provider with RBAC Module composition main.tf variables.tf outputs.tf state-based comparison and update Example Directory rules recommended for multi-provider management bash Copy project-root/ │ ├── main.tf…

  • Wireshark Packet Capture & BPF Protocol

    💡 Wireshark Packet Capture & BPF Protocol — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Wireshark Packet Capture & BPF Protocol. Related documents installation bash Copy brew install –cask wireshark Filters Filter specification HTTP Filter http http.request http.request.method == “GET” http.request.method == “POST” http.response tls http2 http3 Filter by Source…

  • Infisical Secret Mgmt Helm Deployment on K8s

    💡 Infisical Secret Mgmt Helm Deployment on K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt Helm Deployment on K8s. References Install Helm 🔗 https://infisical.com/docs/self-hosting/deployment-options/kubernetes-helm ENV 🔗 https://infisical.com/docs/integrations/platforms/kubernetes shell Copy #helm install –generate-name infisical-helm-charts/secrets-operator –version=<PLACE-CHART-VERSION-HERE> –set controllerManager.manager.image.tag=<PLACE-APP-VERSION-HERE> #helm install –generate-name infisical-helm-charts/secrets-operator –version=0.1.4 –set controllerManager.manager.image.tag=v0.2.0 helm pull infisical/secrets-operator…

  • Kubernetes Labels & Annotations

    💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…

  • yq CLI Sheet: YAML Parsing, Querying

    💡 yq CLI Sheet: YAML Parsing, Querying — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for yq CLI Sheet: YAML Parsing, Querying. Installation Debian yaml Copy apt install golang-go # yq4 정상설치 go install github.com/mikefarah/yq/v4@latest export PATH=”$PATH:~/go/bin” snapd bash Copy # snap버그있으니 쓰지마셈 snap install yq apt yaml Copy # 이상한버전…

  • TACO 2.0 Infra: K8s, Ceph & OpenStack

    💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…