[Kubernetes] k8s security management details [detailed configuration description of role empowerment and clusterrole empowerment]

Environmental preparation First, you need to have a complete set of clusters [root@master ~]# kubectl get nodes -o wide NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME master Ready master 114d v1.21.0 192.168.59.142 <none> ...

Added by nodster on Sat, 06 Nov 2021 18:49:24 +0200

Kubernetes Pod horizontal automatic expansion and contraction

Horizontal Pod Autoscaler (HPA) can automatically scale the number of pods in ReplicationController, Deployment, ReplicaSet and StatefulSet based on CPU utilization. In addition to CPU utilization, automatic scaling can also be performed based on custom metrics provided by other applications. Pod auto scaling is not applicable to objects that c ...

Added by IcedEarth on Thu, 04 Nov 2021 21:36:54 +0200

Canary release

Exit after modification takes effect immediately Which type is used for cluster external access: nodeport nodeip+nodeport external access Internal access clusterip What is used to set the port number of clusterip Canary release k8s defaults to rolling update. The deployment controller can control the rolling update rhythm by itself, s ...

Added by tomjung09 on Thu, 04 Nov 2021 08:24:58 +0200

GitOps Application Practice Series Argo CD practice

Hello, I'm Zhang Jintao. In the first two articles, I will give you This paper introduces the concept of GitOps , and Argo CD tool for implementing GitOps . In this article, we will introduce the practice of Argo CD with an example project. Create cluster We use the KIND (Kubernetes in Docker) tool to create a ...

Added by DimeDropper on Thu, 04 Nov 2021 05:53:49 +0200

Kubernetes learning notes: building kubernetes cluster (ubuntu)

kubernetes experiment Add root user zzs@master:~$ sudo passwd root Change mirror source root@master:/etc/apt# vim sources.list #Clear all contents ggdG deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted deb http://mirrors.aliyun.com/ubuntu/ xenial universe deb ht ...

Added by alexville on Sat, 30 Oct 2021 07:33:28 +0300

k8s cluster deployment - Pod management and resource list

1, Pod management Pod is the smallest deployable unit that can create and manage Kubernetes computing. A pod represents a process running in the cluster, and each pod has a unique ip. A pod is similar to a pea pod and contains one or more containers (usually docker s). IPC, Network and UTC namespace are shared among multiple containers. ...

Added by bajer on Fri, 29 Oct 2021 14:05:56 +0300

k8s disk mounted to container volume

1, Data volume type 1 emptyDir emptyDir: simple empty directory Data is not stored permanently, but can only be stored temporarily. It is often used to exchange and share data between multiple Docker containers in a pod Create a pod containing two containers that share the same volume cat <<EOF > fortune-pod.yml apiVersion: v1 kin ...

Added by milind24 on Mon, 25 Oct 2021 12:41:12 +0300

Container orchestration - kubedm builds kubernetes high availability clusters online or offline

catalogue 1. Architecture introduction: 2. Cluster architecture diagram: 3. Cluster server: 4. Modify host name: 5. Modify the hosts configuration file: 6. Close selinux: 7. Turn off the firewall: 8. Close swap: 9. Set iptables bridge: 10. Software k8s/docker/dashboard version: 11. Install docker environment: (1) To install docker o ...

Added by ryza_ on Mon, 25 Oct 2021 05:00:26 +0300

[kubernetes] build Promethus+grafana monitoring platform

1, Introduction 1. Prometheus (Chinese Name: Prometheus) It is an open source monitoring and alarm system and time series database (TSDB) developed by SoundCloud. Prometheus is developed in Go language and is an open source version of Google BorgMon monitoring system. The basic principle of Prometheus is to periodically capture the status of ...

Added by jchemie on Mon, 25 Oct 2021 03:20:03 +0300

Introduction and Example of k8s DaemonSet

We previously said that k8s uses deployment and statefulset workload resources to maintain stateless and stateful applications, respectively. In this short article we will learn how to use DaemonSet to maintain a daemon process (application). 1. What is a DaemonSet? DaemonSet is a workload resource (daemon) that ensures that a Pod must be r ...

Added by etrooper on Thu, 21 Oct 2021 20:23:34 +0300