Fredric News

Tag: Orchestration

  • Karmada Multi-Cluster Kubernetes: Scheduling

    💡 Karmada Multi-Cluster Kubernetes: Scheduling — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Karmada Multi-Cluster Kubernetes: Scheduling. Related pages Operation karmada-apiserver This is a control-plane running as a pod, and the deploy of the apiserver does not deploy the pod, but deploys the member cluster. txt Copy kubectl config use-context…

  • Infisical CRD Manifest & Kubernetes Secret

    💡 Infisical CRD Manifest & Kubernetes Secret — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical CRD Manifest & Kubernetes Secret. Secret: infisical-secrets References and Guidelines (NOTE) Environmental information such as secret key used during infisical installation env bash Copy AUTH_SECRET=$(openssl rand -base64 32) ENCRYPTION_KEY=$(openssl rand -hex 16) REDIS_URL=redis://default:[email protected]:6379 DB_CONNECTION_URI=postgresql://infisical:[email protected]:5432/infisical…

  • Infisical Secret Mgmt Helm Deployment on K8s

    💡 Infisical Secret Mgmt Helm Deployment on K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt Helm Deployment on K8s. References Install Helm 🔗 https://infisical.com/docs/self-hosting/deployment-options/kubernetes-helm ENV 🔗 https://infisical.com/docs/integrations/platforms/kubernetes shell Copy #helm install –generate-name infisical-helm-charts/secrets-operator –version=<PLACE-CHART-VERSION-HERE> –set controllerManager.manager.image.tag=<PLACE-APP-VERSION-HERE> #helm install –generate-name infisical-helm-charts/secrets-operator –version=0.1.4 –set controllerManager.manager.image.tag=v0.2.0 helm pull infisical/secrets-operator…

  • Kubernetes Labels & Annotations

    💡 Kubernetes Labels & Annotations — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Labels & Annotations. Label namespace bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 istio-injection=enabled or disabled pod bash Copy #istio 카나리 배포 istio.io/rev=canary #istio 프록시 주입 허용 or 불허 sidecar.istio.io/inject=”true” or “false”…

  • TACO 2.0 Infra: K8s, Ceph & OpenStack

    💡 TACO 2.0 Infra: K8s, Ceph & OpenStack — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for TACO 2.0 Infra: K8s, Ceph & OpenStack. This manual was written based on the EC2 environment created by AWS, and is an AIO (All-In-One) guide that installs Kubernetes, Ceph, and OpenStack all in one…

  • Kubernetes ReadOnly ServiceAccount & Limited

    💡 Kubernetes ReadOnly ServiceAccount & Limited — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes ReadOnly ServiceAccount & Limited. readonly SA, Secrets, Kubeconfig Create permission env bash Copy export prefix=read-only export ns=default Create SA, token, CRB bash Copy kubectl create serviceaccount ${prefix}-sa -n ${ns} kubectl apply -f – << EOF…

  • Rook-Ceph Distributed Storage Cluster Helm

    💡 Rook-Ceph Distributed Storage Cluster Helm — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Rook-Ceph Distributed Storage Cluster Helm. References and Guidelines (NOTE) Important note: You must customize the ‘CephCluster’ resource in the sample manifest for your cluster. Each CephCluster must be deployed in its own namespace, the sample uses…

  • Talos Linux: Immutable & Secure K8s Cluster

    💡 Talos Linux: Immutable & Secure K8s Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Talos Linux: Immutable & Secure K8s Cluster. Binary Installation mac bash Copy brew install siderolabs/tap/talosctl echo ‘source <(talosctl completion zsh)’ | tee -a ~/.zshrc #if using colima sudo ln -s “$HOME/.colima/default/docker.sock” /var/run/docker.sock #if using…

  • istioctl CLI Sheet: Istio Proxy Diagnosis

    💡 istioctl CLI Sheet: Istio Proxy Diagnosis — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for istioctl CLI Sheet: Istio Proxy Diagnosis. Linked Page Cluster Control install Apply the Istio manifest to install or reconfigure Istio on your cluster. uninstall Remove Istio from the cluster upgrade Upgrade your Istio control plane…

  • Helmfile Declarative CD Archi: Multi-Env

    💡 Helmfile Declarative CD Archi: Multi-Env — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Helmfile Declarative CD Archi: Multi-Env. Information References gitops repository Enterprise Cloudlab/cmp-helm Cluster Version Development environment information | Cluster Version Architectures Cluster Installation Global Setting bash Copy vi /etc/systemd/resolved.conf >>> [Resolve] DNS=<management_node_ip> 8.8.8.8 <<< systemctl restart systemd-resolved.service…