Fredric News

Tag: Kubernetes

  • Rook-Ceph Distributed Storage Cluster Helm

    💡 Rook-Ceph Distributed Storage Cluster Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Rook-Ceph Distributed Storage Cluster Helm. References and Guidelines (NOTE) Important note: You must customize the ‘CephCluster’ resource in the sample manifest for your cluster. Each CephCluster must be deployed in its own namespace, the sample uses…

  • Talos Linux: Immutable & Secure K8s Cluster

    💡 Talos Linux: Immutable & Secure K8s Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Talos Linux: Immutable & Secure K8s Cluster. Binary Installation mac bash Copy brew install siderolabs/tap/talosctl echo ‘source <(talosctl completion zsh)’ | tee -a ~/.zshrc #if using colima sudo ln -s “$HOME/.colima/default/docker.sock” /var/run/docker.sock #if using…

  • AppArmor Security Profiles for Kubernetes

    💡 AppArmor Security Profiles for Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for AppArmor Security Profiles for Kubernetes. 📑 Table of Contents Understanding AppArmor behavior Why AppArmor? (DAC vs MAC) AppArmor’s core mode and profile controls AppArmor integration in Kubernetes (K8s) environments Key summary References Summary of Kubernetes usage…

  • Helmfile Declarative CD Archi: Multi-Env

    💡 Helmfile Declarative CD Archi: Multi-Env — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Helmfile Declarative CD Archi: Multi-Env. Information References gitops repository Enterprise Cloudlab/cmp-helm Cluster Version Development environment information | Cluster Version Architectures Cluster Installation Global Setting bash Copy vi /etc/systemd/resolved.conf >>> [Resolve] DNS=<management_node_ip> 8.8.8.8 <<< systemctl restart systemd-resolved.service…

  • istioctl CLI Sheet: Istio Proxy Diagnosis

    💡 istioctl CLI Sheet: Istio Proxy Diagnosis — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for istioctl CLI Sheet: Istio Proxy Diagnosis. Linked Page Cluster Control install Apply the Istio manifest to install or reconfigure Istio on your cluster. uninstall Remove Istio from the cluster upgrade Upgrade your Istio control plane…

  • Kubernetes Helm 3 Sheet: Release & Rollback

    💡 Kubernetes Helm 3 Sheet: Release & Rollback — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Helm 3 Sheet: Release & Rollback. Installation bash Copy curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash Exec completion html Copy echo “source <(helm completion bash)” >> ~/.bashrc source ~/.bashrc search bash Copy # artifacthub.io에서 차트 검색…

  • KubeVirt Virtualization on K8s: Containers

    💡 KubeVirt Virtualization on K8s: Containers — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for KubeVirt Virtualization on K8s: Containers.

  • Kubernetes kube-apiserver CA Certificates

    💡 Kubernetes kube-apiserver CA Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-apiserver CA Certificates. Related documents Setups 3rdParty Setups cluster cmd CNI cmd gitOps cmd SubDocs 3rd Party SubDocs Swagger Git OpenApi bash Copy https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json SSL/PKI path kubectl describe pods -n kube-system kube-apiserver* ?: /etc/kubernetes/pki/* k8s-certs: /etc/kubernetes/ssl/*…

  • Kubernetes CoreDNS & systemd-resolved Config

    💡 Kubernetes CoreDNS & systemd-resolved Config — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS & systemd-resolved Config. ReferenceGlossary DB: Siyoung’s Notion: troubleshooting: cmd: , References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined…

  • Infisical Secret Mgmt: Machine Identity & K8s

    💡 Infisical Secret Mgmt: Machine Identity & K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt: Machine Identity & K8s. API Reference