Fredric News

Tag: SystemOps

  • OAuth 2.0 & OIDC Token Analysis: ID vs Access

    💡 OAuth 2.0 & OIDC Token Analysis: ID vs Access — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for OAuth 2.0 & OIDC Token Analysis: ID vs Access. References and Guidelines (NOTE) ID Token and Access Token are the two main tokens used in the OAuth 2.0 and OpenID Connect (OIDC)…

  • Infisical Secret Mgmt: Machine Identity & K8s

    💡 Infisical Secret Mgmt: Machine Identity & K8s — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Infisical Secret Mgmt: Machine Identity & K8s. API Reference

  • Kubernetes kube-apiserver CA Certificates

    💡 Kubernetes kube-apiserver CA Certificates — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes kube-apiserver CA Certificates. Related documents Setups 3rdParty Setups cluster cmd CNI cmd gitOps cmd SubDocs 3rd Party SubDocs Swagger Git OpenApi bash Copy https://raw.githubusercontent.com/kubernetes/kubernetes/master/api/openapi-spec/swagger.json SSL/PKI path kubectl describe pods -n kube-system kube-apiserver* ?: /etc/kubernetes/pki/* k8s-certs: /etc/kubernetes/ssl/*…

  • Kubernetes CoreDNS & systemd-resolved Config

    💡 Kubernetes CoreDNS & systemd-resolved Config — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS & systemd-resolved Config. ReferenceGlossary DB: Siyoung’s Notion: troubleshooting: cmd: , References and Guidelines (NOTE) CoreDNS operation when using systemd-resolved on host HostNode: systemd-resolved is fixed as /etc/resolv.conf = 127.0.0.53loopback address. The actual resolve defined…

  • Kubernetes CoreDNS Nameserver T-Shoot

    💡 Kubernetes CoreDNS Nameserver T-Shoot — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes CoreDNS Nameserver T-Shoot. TLDR@1qzxcThere is still version 1.27… . Tried a lot. The only thing that worked was to revert to the version you suggested. Here’s everything I tried for future reference. I installed kubernetes following…

  • Bitbucket Pipelines CI/CD: DinD & Private

    💡 Bitbucket Pipelines CI/CD: DinD & Private — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Bitbucket Pipelines CI/CD: DinD & Private. 🔗 https://support.atlassian.com/bitbucket-cloud/docs/bitbucket-pipelines-configuration-reference/ yaml Copy image: #Docker image options page options: #Global options page clone: #Git clone behavior page definitions: #Cache and service container definitions page pipeline: #Pipeline start options…

  • Node.js npm Sheet: Dependency Mgmt & Audit

    💡 Node.js npm Sheet: Dependency Mgmt & Audit — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Node.js npm Sheet: Dependency Mgmt & Audit. Related pages Sub-item Install Command Global / regional classification bash Copy # 현재 프로젝트 (package.yaml) 기준으로 패키지 인스톨 npm i -y $package npm install -y $package #…

  • CKS 2026 Exam Prep: Certified K8s Security

    💡 CKS 2026 Exam Prep: Certified K8s Security — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for CKS 2026 Exam Prep: Certified K8s Security. Study In-house technology club – [Add subtitle](https://www.canva.com/design/DAHKE-QYkIE/nrLyzRbAXLpCVsiSLsVy_w/edit) – Activity method: – Preparation before each meeting: After taking Udemy, organize what you have learned under your name in…

  • Service Mesh Archi: Istio & Linkerd Data

    💡 Service Mesh Archi: Istio & Linkerd Data — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Service Mesh Archi: Istio & Linkerd Data. Service Mesh Overview Summary of reasons to use service mesh API gateway focuses on requests from the outside to services, while service mesh focuses on communication between…

  • Kubernetes Node Communication & Kubelet

    💡 Kubernetes Node Communication & Kubelet — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubernetes Node Communication & Kubelet. Infinite reboot issue of controlplanes such as etcd and kube-apiserver when using the latest version of containerd Action Change to use CRI-O Nameserver limit (3) exceeded when installing latest version k8s…