Fredric News

Tag: Infrastructure

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…

  • Rook-Ceph Distributed Storage Cluster Helm

    💡 Rook-Ceph Distributed Storage Cluster Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Rook-Ceph Distributed Storage Cluster Helm. References and Guidelines (NOTE) Important note: You must customize the ‘CephCluster’ resource in the sample manifest for your cluster. Each CephCluster must be deployed in its own namespace, the sample uses…

  • Talos Linux: Immutable & Secure K8s Cluster

    💡 Talos Linux: Immutable & Secure K8s Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Talos Linux: Immutable & Secure K8s Cluster. Binary Installation mac bash Copy brew install siderolabs/tap/talosctl echo ‘source <(talosctl completion zsh)’ | tee -a ~/.zshrc #if using colima sudo ln -s “$HOME/.colima/default/docker.sock” /var/run/docker.sock #if using…

  • Harvester HCI in HomeLab: KubeVirt VMs

    💡 Harvester HCI in HomeLab: KubeVirt VMs — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Harvester HCI in HomeLab: KubeVirt VMs. Installation HCI: Host References and Guidelines (NOTE) Hosts → \ → Click Edit Config Mount Disk and Join Longhorn Storage → Click Add Disk → Select Disk → Save…

  • istioctl CLI Sheet: Istio Proxy Diagnosis

    💡 istioctl CLI Sheet: Istio Proxy Diagnosis — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for istioctl CLI Sheet: Istio Proxy Diagnosis. Linked Page Cluster Control install Apply the Istio manifest to install or reconfigure Istio on your cluster. uninstall Remove Istio from the cluster upgrade Upgrade your Istio control plane…

  • Helmfile Declarative CD Archi: Multi-Env

    💡 Helmfile Declarative CD Archi: Multi-Env — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Helmfile Declarative CD Archi: Multi-Env. Information References gitops repository Enterprise Cloudlab/cmp-helm Cluster Version Development environment information | Cluster Version Architectures Cluster Installation Global Setting bash Copy vi /etc/systemd/resolved.conf >>> [Resolve] DNS=<management_node_ip> 8.8.8.8 <<< systemctl restart systemd-resolved.service…

  • Kubernetes Helm 3 Sheet: Release & Rollback

    💡 Kubernetes Helm 3 Sheet: Release & Rollback — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Helm 3 Sheet: Release & Rollback. Installation bash Copy curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash Exec completion html Copy echo “source <(helm completion bash)” >> ~/.bashrc source ~/.bashrc search bash Copy # artifacthub.io에서 차트 검색…

  • KubeVirt Virtualization on K8s: Containers

    💡 KubeVirt Virtualization on K8s: Containers — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for KubeVirt Virtualization on K8s: Containers.

  • Kubernetes CoreDNS & systemd-resolved Config

    💡 Kubernetes CoreDNS & systemd-resolved Config — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS & systemd-resolved Config. ReferenceGlossary DB: Siyoung’s Notion: troubleshooting: cmd: , References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined…

  • Infisical Secret Mgmt: Machine Identity & K8s

    💡 Infisical Secret Mgmt: Machine Identity & K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt: Machine Identity & K8s. API Reference