Fredric News

Tag: Kubernetes

  • Kubernetes etcd Distributed Key-Value Store

    💡 Kubernetes etcd Distributed Key-Value Store — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes etcd Distributed Key-Value Store. References and Guidelines (NOTE) When etcd (3 node) clustering, the argument to etcd1 is –initial-cluster=etcd1. etcd2 with –initial-cluster=etcd1,etcd2. If etcd3 is configured with –initial-cluster=etcd1,etcd2,etcd3, can it be considered normally clustered? 💡…

  • All-in-One Cloud Lab: VM Provisioning to

    💡 All-in-One Cloud Lab: VM Provisioning to — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for All-in-One Cloud Lab: VM Provisioning to. All-in-one Archi Phase 1 – Setup VM References and Guidelines (NOTE) //Instance configuration Phase 2 – Setup K8s Phase 3 – Setup Middleware / / References and Guidelines (NOTE)…

  • Apache HTTP Server on Kubernetes: Helm

    💡 Apache HTTP Server on Kubernetes: Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Apache HTTP Server on Kubernetes: Helm. Informations Using Chart Information

  • Legacy Vault Helm Deployment on Kubernetes

    💡 Legacy Vault Helm Deployment on Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Legacy Vault Helm Deployment on Kubernetes. 1. vault Modify mdware-helm/scripts/vault/transit-vault-deploy.sh, service-vault-deploy.sh When node select is required shell Copy #nodeSelector 입력이 안 먹혀서 직접 chart에 들어가서 수정해야함 #node label kubectl edit node {{ worker-node }} label:…

  • Infisical CRD Manifest & Kubernetes Secret

    💡 Infisical CRD Manifest & Kubernetes Secret — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical CRD Manifest & Kubernetes Secret. Secret: infisical-secrets References and Guidelines (NOTE) Environmental information such as secret key used during infisical installation env bash Copy AUTH_SECRET=$(openssl rand -base64 32) ENCRYPTION_KEY=$(openssl rand -hex 16) REDIS_URL=redis://default:[email protected]:6379 DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical…

  • Karmada Multi-Cluster Kubernetes: Scheduling

    💡 Karmada Multi-Cluster Kubernetes: Scheduling — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Karmada Multi-Cluster Kubernetes: Scheduling. Related pages Operation karmada-apiserver This is a control-plane running as a pod, and the deploy of the apiserver does not deploy the pod, but deploys the member cluster. txt Copy kubectl config use-context…

  • Infisical Secret Mgmt Helm Deployment on K8s

    💡 Infisical Secret Mgmt Helm Deployment on K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt Helm Deployment on K8s. References Install Helm 🔗 https://infisical.com/docs/self-hosting/deployment-options/kubernetes-helm ENV 🔗 https://infisical.com/docs/integrations/platforms/kubernetes shell Copy #helm install –generate-name infisical-helm-charts/secrets-operator –version=<PLACE-CHART-VERSION-HERE> –set controllerManager.manager.image.tag=<PLACE-APP-VERSION-HERE> #helm install –generate-name infisical-helm-charts/secrets-operator –version=0.1.4 –set controllerManager.manager.image.tag=v0.2.0 helm pull infisical/secrets-operator…

  • Kubernetes Labels & Annotations

    💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…

  • TACO 2.0 Infra: K8s, Ceph & OpenStack

    💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…