Fredric News

Tag: Setup

  • Kubespray High Availability (HA) Kubernetes

    💡 Kubespray High Availability (HA) Kubernetes — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubespray High Availability (HA) Kubernetes. References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined in /etc/systemd/resolved.conf is /var/run/systemd/resolve/resolv.conf. Kubelet: Default mounts…

  • Istio Service Mesh Helm Deployment: istiod

    💡 Istio Service Mesh Helm Deployment: istiod — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Istio Service Mesh Helm Deployment: istiod. 🔗 https://istio.io/latest/docs/setup/install/helm/ Install bash Copy helm repo add istio https://istio-release.storage.googleapis.com/charts helm repo update kubectl create namespace istio-system helm pull istio/base –untar helm pull istio/istiod –untar cd base helm install…

  • Gardener Multi-Cloud Kubernetes Cluster

    💡 Gardener Multi-Cloud Kubernetes Cluster — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Gardener Multi-Cloud Kubernetes Cluster. The Notion API rate limit was reached. Wait at least 3 seconds before retrying this tool call. Do not retry immediately or in parallel. {“error”:{“code”:”rate_limited”,”classification”:”rate_limit”,”operation”:”fetch”,”message”:”The Notion API rate limit was reached.”,”impact”:”The requested tool…

  • Argo Workflows Helm Deployment: Cloud-Native

    💡 Argo Workflows Helm Deployment: Cloud-Native — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Argo Workflows Helm Deployment: Cloud-Native. Repository bash Copy helm repo add argo https://argoproj.github.io/argo-helm Pipelines RBAC Kubernetes if Troubles bash Copy wait: Error (exit code 64): workflowtaskresults.argoproj.io is forbidden: User “system:serviceaccount:deploy-system:default” cannot create resource “workflowtaskresults” in API…

  • Sendmail MTA Setup on Linux & SMTP Relay

    💡 Sendmail MTA Setup on Linux & SMTP Relay — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Sendmail MTA Setup on Linux & SMTP Relay. bash Copy #!/bin/sh sudo apt-get update && sudo apt-get -y upgrade sudo apt-get install -y libsasl2-modules sasl2-bin sudo apt-get install -y libsasl2-2 sudo apt-get install…

  • jekyll-notion on macOS: Automated Notion to

    💡 jekyll-notion on macOS: Automated Notion to — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for jekyll-notion on macOS: Automated Notion to. bash Copy bundle add notion-ruby-client bundle install bundle add jekyll-notion gem install jekyll-notion vi _config.yml — plugins: – jekyll-notion … notion: databases: – id: ‘5cfed4de3bdc4f43ae8ba653a7a2219b’ — #노션 통합키 확인…

  • Sonatype Nexus OSS Helm Setup: Private

    💡 Sonatype Nexus OSS Helm Setup: Private — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Sonatype Nexus OSS Helm Setup: Private. AWS Single Instance Resilient Nexus Repository Manager Chart This chart deploys a Nexus Repository Manager instance to an AWS EKS cluster. The current release has been tested on AWS…

  • Kubespray kube-vip Virtual IP Load Balancer

    💡 Kubespray kube-vip Virtual IP Load Balancer — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubespray kube-vip Virtual IP Load Balancer. VIP on LAN. Network ARP Pre-operation bash Copy apt install -y nmap #VIP 선정 ## host down IP 확인 ### 아래 결과중 x.x.x.0, x.x.x.1, x.x.x.255 (예약 주소) 제외하고 사용…

  • OPNsense Unbound DNS: Ad-blocking

    💡 OPNsense Unbound DNS: Ad-blocking — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Unbound DNS: Ad-blocking. References and Guidelines (NOTE) System Required: DNS Port forwarding Private domain registration References and Guidelines (NOTE) List instructing to allow the response even if the DNS query result includes a private IP address…

  • OPNsense Firewall XML Config Automated Git

    💡 OPNsense Firewall XML Config Automated Git — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OPNsense Firewall XML Config Automated Git. 🔗 https://docs.opnsense.org/manual/git-backup.html Step0. Preparation (Github) Create SSH Keypair bash Copy mkdir opnsense ssh-keygen -f ~/opnsense/opnsense # 공개키 클립보드에 복사 cat ~/opnsense/opnsense.pub | pbcopy # 개인키 클립보드에 복사 cat ~/opnsense/opnsense…