Fredric News

Tag: SystemOps

  • Harbor REST API Scripting: Tag Cleanup

    💡 Harbor REST API Scripting: Tag Cleanup — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Harbor REST API Scripting: Tag Cleanup. Creating Create Project bash Copy #!/bin/bash ns=$1 SCRIPT_DIR=”$(cd “$(dirname “${BASH_SOURCE[0]}”)” && pwd)” curl -u “admin:Cloud000@” \ –cacert $SCRIPT_DIR/../ca.crt \ -XPOST “https://harbor.Enterprise Cloud.hanacloudia.com/api/v2.0/projects” \ -H “Content-Type: application/json” \ -d ‘{…

  • Linux resolv.conf DNS & systemd-resolved

    💡 Linux resolv.conf DNS & systemd-resolved — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linux resolv.conf DNS & systemd-resolved. ubuntu defaults bash Copy nameserver 127.0.0.53 #로컬 DNS리졸버 사용 options edns0 trust-ad search . coredns defaults bash Copy search default.svc.cluster.local svc.cluster.local cluster.local nameserver 10.152.183.10 #coredns serviceIP options ndots:5 Manage only with…

  • Linkerd Ultralight Service Mesh: mTLS

    💡 Linkerd Ultralight Service Mesh: mTLS — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Linkerd Ultralight Service Mesh: mTLS. Proxy 주입 방법 Automatic Proxy Injection inject Adding your services to Linkerd Injection (regeneration) through automatic generation of yaml txt Copy kubectl get -n $namespace deploy -o yaml | linkerd inject…

  • Colima Container Runtime on macOS: Docker

    💡 Colima Container Runtime on macOS: Docker — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Colima Container Runtime on macOS: Docker. Exec bash Copy #템플릿 지정 colima template #기존 vm 삭제 (템플릿내 insecure변경 적용) colima delete #정지 colima stop #시작 colima start #vm 접근 colima ssh Features TLS Trust required:…

  • openfortivpn CLI: Fortinet SSL-VPN Tunnel

    💡 openfortivpn CLI: Fortinet SSL-VPN Tunnel — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for openfortivpn CLI: Fortinet SSL-VPN Tunnel. 🔗 https://github.com/adrienverge/openfortivpn bash Copy # 패키지 설치 brew install openfortivpn # 계정정보를 이용하여 실행 sudo openfortivpn {{ 원격 게이트웨이 }}:{{ 포트 }} \ –username={{ 아이디 }} \ –password={{ 패스워드 }} #…

  • Spring Data JPA Specification: Dynamic

    💡 Spring Data JPA Specification: Dynamic — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Spring Data JPA Specification: Dynamic. References and Guidelines (NOTE) To prepare for maintenance difficulties when using JPA Creteria, frequently used syntax was prepared as a static method. (static method defined as generic grammar) java Copy /**…

  • Kubelet Daemon Ops: Resource Reservation

    💡 Kubelet Daemon Ops: Resource Reservation — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Kubelet Daemon Ops: Resource Reservation. Configurations Apply max-pod-pids, podPidsLimit Simultaneous operation of 3 worker nodes Recommended method: Modify config.yaml (based on Kubeadm) /etc/kubernetes/kubelet-config.yaml (if not present, then) /var/lib/kubelet/config.yaml How to edit: 1. Make sure the file…

  • Ubuntu Package Lock (dpkg/apt lock) Release

    💡 Ubuntu Package Lock (dpkg/apt lock) Release — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for Ubuntu Package Lock (dpkg/apt lock) Release. If ssh login is not possible as root vi /etc/ssh/sshd_config bash Copy … PermitRootLogin yes #if no … Or passwd may not be set. Internet connection problem References and…

  • MicroK8s Lightweight K8s: Cert Renewal

    💡 MicroK8s Lightweight K8s: Cert Renewal — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for MicroK8s Lightweight K8s: Cert Renewal. DIRs certs (cluster certificates) /var/snap/microk8s/current/certs/ config (kubeconfig, etc.) /var/snap/microk8s/current/credentials/ Features Apply after adding SAN to CA certificate bash Copy # 인증서 템플릿 오픈 후 도메인 또는 IP 추가 sudo vi /var/snap/microk8s/current/certs/csr.conf.template…

  • HashiCorp Vault Helm Setup & Secret Injector

    💡 HashiCorp Vault Helm Setup & Secret Injector — Executive Summary Technical architectural analysis, practical configuration manifests, and deployment instructions for HashiCorp Vault Helm Setup & Secret Injector. Installation bash Copy helm repo add hashicorp https://helm.releases.hashicorp.com helm install -n vault hashicorp/vault Unseal bash Copy k exec -it -n vault vault-0 — vault operator init >>>…