Fredric News

Tag: K8s

  • Apache HTTP Server on Kubernetes: Helm

    💡 Apache HTTP Server on Kubernetes: Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Apache HTTP Server on Kubernetes: Helm. Informations Using Chart Information

  • Legacy Vault Helm Deployment on Kubernetes

    💡 Legacy Vault Helm Deployment on Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Legacy Vault Helm Deployment on Kubernetes. 1. vault Modify mdware-helm/scripts/vault/transit-vault-deploy.sh, service-vault-deploy.sh When node select is required shell Copy #nodeSelector 입력이 안 먹혀서 직접 chart에 들어가서 수정해야함 #node label kubectl edit node {{ worker-node }} label:…

  • Karmada Multi-Cluster Kubernetes: Scheduling

    💡 Karmada Multi-Cluster Kubernetes: Scheduling — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Karmada Multi-Cluster Kubernetes: Scheduling. Related pages Operation karmada-apiserver This is a control-plane running as a pod, and the deploy of the apiserver does not deploy the pod, but deploys the member cluster. txt Copy kubectl config use-context…

  • Infisical CRD Manifest & Kubernetes Secret

    💡 Infisical CRD Manifest & Kubernetes Secret — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical CRD Manifest & Kubernetes Secret. Secret: infisical-secrets References and Guidelines (NOTE) Environmental information such as secret key used during infisical installation env bash Copy AUTH_SECRET=$(openssl rand -base64 32) ENCRYPTION_KEY=$(openssl rand -hex 16) REDIS_URL=redis://default:[email protected]:6379 DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical…

  • Kubernetes Labels & Annotations

    💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…

  • TACO 2.0 Infra: K8s, Ceph & OpenStack

    💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…

  • AppArmor Security Profiles for Kubernetes

    💡 AppArmor Security Profiles for Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for AppArmor Security Profiles for Kubernetes. 📑 Table of Contents Understanding AppArmor behavior Why AppArmor? (DAC vs MAC) AppArmor’s core mode and profile controls AppArmor integration in Kubernetes (K8s) environments Key summary References Summary of Kubernetes usage…

  • Kubernetes Helm 3 Sheet: Release & Rollback

    💡 Kubernetes Helm 3 Sheet: Release & Rollback — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Helm 3 Sheet: Release & Rollback. Installation bash Copy curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash Exec completion html Copy echo “source <(helm completion bash)” >> ~/.bashrc source ~/.bashrc search bash Copy # artifacthub.io에서 차트 검색…

  • Kubernetes kube-apiserver CA Certificates

    💡 Kubernetes kube-apiserver CA Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-apiserver CA Certificates. Related documents Setups 3rdParty Setups cluster cmd CNI cmd gitOps cmd SubDocs 3rd Party SubDocs Swagger Git OpenApi bash Copy https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json SSL/PKI path kubectl describe pods -n kube-system kube-apiserver* ?: /etc/kubernetes/pki/* k8s-certs: /etc/kubernetes/ssl/*…