Fredric News

Tag: K8s

  • Kubernetes kubeconfig Manifest: Clusters,

    💡 Kubernetes kubeconfig Manifest: Clusters, — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kubeconfig Manifest: Clusters,. shell bash Copy #!/bin/bash # `./generate_kubeconfig.sh dev 10.0.X.X mypasswd 2222 > .my.kubeconfig` contextName=$1 hostname=$2 ssh_port=${3:-22} dest_ip=$(dig $hostname +short) endpoint=”https://$dest_ip:6443″ ns=default sa=tester # ───────────────────────────────────────────── # 원격 스크립트 정의 # ───────────────────────────────────────────── remote_script=$(cat <<EOF # 1.…

  • k3s Lightweight Kubernetes: Archi & Resource

    💡 k3s Lightweight Kubernetes: Archi & Resource — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for k3s Lightweight Kubernetes: Archi & Resource. Installation & Uninstall Automated Upgrades (deploy to system-upgrade-controller) Documentation 🔗 https://github.com/rancher/system-upgrade-controller?tab=readme-ov-file Exec bash Copy k label nodes $mynode k3s-upgrade=”true” # Y.O.L.O. kubectl apply -k github.com/rancher/system-upgrade-controller Trouble shooting Resolved k3s…

  • CKS Certified Kubernetes Security Specialist

    💡 CKS Certified Kubernetes Security Specialist — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for CKS Certified Kubernetes Security Specialist. 📑 Table of Contents Skills Map by CKS problem solving scope CKS Troubleshooting Flow CKS 시험은 문제에서 구체적으로 어떤 기술(AppArmor, Seccomp, RBAC 등)을 사용해야 하는지 명시하지 않고, 추상적인 보안 요구사항(예: “컨테이너의…

  • Force Deleting Terminating Kubernetes

    💡 Force Deleting Terminating Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Force Deleting Terminating Kubernetes. References and Guidelines (NOTE) Verify differences from existing test results in v1.33.5+k3s1 version. Existing .spec.finalizers = [] is not useful Confirm normal deletion using the corresponding method .metadata.finalizers = [] Delete namespace with…

  • Kubernetes Multi-Cluster Access: kubeconfig

    💡 Kubernetes Multi-Cluster Access: kubeconfig — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Multi-Cluster Access: kubeconfig. Related documents Body 🔗 https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/ bash Copy #[Target Cluster] ## ServiceAccount 생성 export KUBE_SA=jenkins export KUBE_NS=jenkins-Enterprise Cloud kubectl create sa -n ${KUBE_NS} ${KUBE_SA} ## SA ClusterRoleBinding 생성 – ## 인증토큰 얻기 kubectl get…

  • Kubernetes kube-proxy Metric Binding

    💡 Kubernetes kube-proxy Metric Binding — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-proxy Metric Binding. Monitoring kube-proxy kube-proxy also provides a metrics endpoint called /metrics. However, because the default setting is 127.0.0.1:10249, it cannot be accessed from outside. So, if you try to collect it from prometheus, a…

  • Kubernetes Helm 3 Package Manager Setup

    💡 Kubernetes Helm 3 Package Manager Setup — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Helm 3 Package Manager Setup. References and Guidelines (NOTE) Reference CLI DB: Glossary DB: included inthis: Install Helm Offline bash Copy wget https://get.helm.sh/helm-v3.8.2-linux-amd64.tar.gz # scp tar xvf helm-v3.8.2-linux-amd64.tar.gz cd linux-amd64 cp helm /usr/local/bin Official…

  • Kubernetes API Resources: Group, Version

    💡 Kubernetes API Resources: Group, Version — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes API Resources: Group, Version. API Resources Listed bash Copy NAME SHORTNAMES APIVERSION NAMESPACED KIND bindings v1 true Binding componentstatuses cs v1 false ComponentStatus configmaps cm v1 true ConfigMap endpoints ep v1 true Endpoints events ev…

  • Kubernetes Control Plane TLS Certificates

    💡 Kubernetes Control Plane TLS Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Control Plane TLS Certificates. Renewing certificates on your Kubernetes (k8s) cluster is important to maintain security. Certificates are often used to secure communication between various components in a cluster. Below is a step-by-step guide on…

  • Kubernetes NetworkPolicy Manifest: Traffic

    💡 Kubernetes NetworkPolicy Manifest: Traffic — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes NetworkPolicy Manifest: Traffic. The Notion API rate limit was reached. Wait at least 7 seconds before retrying this tool call. Do not retry immediately or in parallel. {“error”:{“code”:”rate_limited”,”classification”:”rate_limit”,”operation”:”fetch”,”message”:”The Notion API rate limit was reached.”,”impact”:”The requested tool…