Fredric News

Tag: Engineering

  • MicroK8s Lightweight K8s: Cert Renewal

    💡 MicroK8s Lightweight K8s: Cert Renewal — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Lightweight K8s: Cert Renewal. DIRs certs (cluster certificates) /var/snap/microk8s/current/certs/ config (kubeconfig, etc.) /var/snap/microk8s/current/credentials/ Features Apply after adding SAN to CA certificate bash Copy # 인증서 템플릿 오픈 후 도메인 또는 IP 추가 sudo vi /var/snap/microk8s/current/certs/csr.conf.template…

  • Open Policy Agent (OPA/Gatekeeper) K8s

    💡 Open Policy Agent (OPA/Gatekeeper) K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Open Policy Agent (OPA/Gatekeeper) K8s. Language Rego Kubernetes Setup Installation Check Gatekeeper resource bash Copy export factor=gatekeeper kubectl get $(kubectl api-resources -o name | grep $factor | sed -z ‘s/[\n\r]/,/g’ | sed ‘s/.$//g’) -A

  • Terminal Text Effects (TTE): CLI Animation

    💡 Terminal Text Effects (TTE): CLI Animation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Terminal Text Effects (TTE): CLI Animation. Installation bash Copy pip install terminaltexteffects Exec bash Copy cat $textfile | tte $theme themes txt Copy Available Effects beams Create beams which travel over the canvas illuminating the…

  • Single Page Applications (SPA): SSR vs CSR

    💡 Single Page Applications (SPA): SSR vs CSR — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Single Page Applications (SPA): SSR vs CSR. Virtual DOM References and Guidelines (NOTE) Virtual DOM is a virtual DOM structure implemented as a JavaScript object. It has a structure similar to the actual DOM…

  • Istio Service Mesh Installation & Ingress

    💡 Istio Service Mesh Installation & Ingress — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Istio Service Mesh Installation & Ingress.

  • nerdctl CLI Sheet: containerd & Namespaces

    💡 nerdctl CLI Sheet: containerd & Namespaces — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for nerdctl CLI Sheet: containerd & Namespaces. Same as docker Differences from docker bash Copy #로그인시 insecure-registry 사용 nerdctl login –insecure-registry=true $image_registry #push할 때 isecure-registry 사용 nerdctl push –insecure-registry=true $image_registry/$project/$image:$tag Feature If the following error occurs…

  • Linux Timezone & timedatectl NTP

    💡 Linux Timezone & timedatectl NTP — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux Timezone & timedatectl NTP. Check the current time (current time zone) bash Copy date >>> Wed Oct 21 05:03:15 UTC 2020 <<< Check current time zone bash Copy ls -al /etc/localtime >>> /etc/localtime -> /usr/share/zoneinfo/Etc/UTC…

  • Force Deleting Terminating Kubernetes

    💡 Force Deleting Terminating Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Force Deleting Terminating Kubernetes. References and Guidelines (NOTE) Verify differences from existing test results in v1.33.5+k3s1 version. Existing .spec.finalizers = [] is not useful Confirm normal deletion using the corresponding method .metadata.finalizers = [] Delete namespace with…

  • cert-manager Automated TLS Certificate

    💡 cert-manager Automated TLS Certificate — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for cert-manager Automated TLS Certificate. ca-certs.yaml yaml Copy apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: my-ca-cert namespace: cert-manager spec: isCA: true # CA 인증서임을 명시 commonName: my-ca secretName: my-ca-secret issuerRef: name: my-selfsigned-ca kind: ClusterIssuer application-certs.yaml yaml Copy apiVersion: cert-manager.io/v1…

  • Kubernetes Multi-Cluster Access: kubeconfig

    💡 Kubernetes Multi-Cluster Access: kubeconfig — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Multi-Cluster Access: kubeconfig. Related documents Body 🔗 https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/ bash Copy #[Target Cluster] ## ServiceAccount 생성 export KUBE_SA=jenkins export KUBE_NS=jenkins-Enterprise Cloud kubectl create sa -n ${KUBE_NS} ${KUBE_SA} ## SA ClusterRoleBinding 생성 – ## 인증토큰 얻기 kubectl get…