Fredric News

Tag: Kubernetes

  • Kubelet podPidsLimit Tuning: Container PID

    💡 Kubelet podPidsLimit Tuning: Container PID — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet podPidsLimit Tuning: Container PID. Shell Summary of usage based on Pod shell Copy #!/bin/bash LOG_FILE=”/var/log/pod_pids_usage.log” KUBECONFIG_PATH=”/etc/kubernetes/admin.conf” TIMESTAMP=$(date “+%Y-%m-%d %H:%M:%S”) TMP_FILE=$(mktemp) NODES=$(kubectl –kubeconfig=$KUBECONFIG_PATH get nodes -o jsonpath='{.items[*].metadata.name}’) for NODE in $NODES; do RAW_METRICS=$(kubectl –kubeconfig=$KUBECONFIG_PATH get –raw…

  • Kubernetes kubeconfig Manifest: Clusters,

    💡 Kubernetes kubeconfig Manifest: Clusters, — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kubeconfig Manifest: Clusters,. shell bash Copy #!/bin/bash # `./generate_kubeconfig.sh dev 10.0.X.X mypasswd 2222 > .my.kubeconfig` contextName=$1 hostname=$2 ssh_port=${3:-22} dest_ip=$(dig $hostname +short) endpoint=”https://$dest_ip:6443″ ns=default sa=tester # ───────────────────────────────────────────── # 원격 스크립트 정의 # ───────────────────────────────────────────── remote_script=$(cat <<EOF # 1.…

  • Cilium eBPF CNI Installation & NetworkPolicy

    💡 Cilium eBPF CNI Installation & NetworkPolicy — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Cilium eBPF CNI Installation & NetworkPolicy. Installation bash Copy # required helm helm repo add cilium https://helm.cilium.io/ helm repo update # Cilium CLI 설치 curl -L –remote-name-all https://github.com/cilium/cilium-cli/releases/latest/download/cilium-linux-amd64.tar.gz tar xzvf cilium-linux-amd64.tar.gz sudo mv cilium /usr/local/bin/…

  • k3s Lightweight Kubernetes: Archi & Resource

    💡 k3s Lightweight Kubernetes: Archi & Resource — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for k3s Lightweight Kubernetes: Archi & Resource. Installation & Uninstall Automated Upgrades (deploy to system-upgrade-controller) Documentation 🔗 https://github.com/rancher/system-upgrade-controller?tab=readme-ov-file Exec bash Copy k label nodes $mynode k3s-upgrade=”true” # Y.O.L.O. kubectl apply -k github.com/rancher/system-upgrade-controller Trouble shooting Resolved k3s…

  • CKS Certified Kubernetes Security Specialist

    💡 CKS Certified Kubernetes Security Specialist — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for CKS Certified Kubernetes Security Specialist. 📑 Table of Contents Skills Map by CKS problem solving scope CKS Troubleshooting Flow CKS 시험은 문제에서 구체적으로 어떤 기술(AppArmor, Seccomp, RBAC 등)을 사용해야 하는지 명시하지 않고, 추상적인 보안 요구사항(예: “컨테이너의…

  • Linkerd Ultralight Service Mesh: mTLS

    💡 Linkerd Ultralight Service Mesh: mTLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linkerd Ultralight Service Mesh: mTLS. Proxy 주입 방법 Automatic Proxy Injection inject Adding your services to Linkerd Injection (regeneration) through automatic generation of yaml txt Copy kubectl get -n $namespace deploy -o yaml | linkerd inject…

  • Kubelet Daemon Ops: Resource Reservation

    💡 Kubelet Daemon Ops: Resource Reservation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet Daemon Ops: Resource Reservation. Configurations Apply max-pod-pids, podPidsLimit Simultaneous operation of 3 worker nodes Recommended method: Modify config.yaml (based on Kubeadm) /etc/kubernetes/kubelet-config.yaml (if not present, then) /var/lib/kubelet/config.yaml How to edit: 1. Make sure the file…

  • MicroK8s Lightweight K8s: Cert Renewal

    💡 MicroK8s Lightweight K8s: Cert Renewal — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Lightweight K8s: Cert Renewal. DIRs certs (cluster certificates) /var/snap/microk8s/current/certs/ config (kubeconfig, etc.) /var/snap/microk8s/current/credentials/ Features Apply after adding SAN to CA certificate bash Copy # 인증서 템플릿 오픈 후 도메인 또는 IP 추가 sudo vi /var/snap/microk8s/current/certs/csr.conf.template…

  • Prometheus ServiceMonitor (smon.yaml)

    💡 Prometheus ServiceMonitor (smon.yaml) — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Prometheus ServiceMonitor (smon.yaml). bash Copy apiVersion: monitoring.coreos.com/v1 kind: ServiceMonitor metadata: name: jaeger-operator namespace: istio-system labels: prometheus: kube-prometheus-stack-prometheus spec: endpoints: – honorLabels: false path: /metrics port: metrics namespaceSelector: matchNames: – istio-system selector: matchLabels: app.kubernetes.io/name: jaeger-operator Prometheus ← Monitor resource…

  • Istio Service Mesh Installation & Ingress

    💡 Istio Service Mesh Installation & Ingress — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Istio Service Mesh Installation & Ingress.