[Kubernetes] k8s security management details [detailed configuration description of role empowerment and clusterrole empowerment]
Environmental preparation
First, you need to have a complete set of clusters
[root@master ~]# kubectl get nodes -o wide
NAME STATUS ROLES AGE VERSION INTERNAL-IP EXTERNAL-IP OS-IMAGE KERNEL-VERSION CONTAINER-RUNTIME
master Ready master 114d v1.21.0 192.168.59.142 <none> ...
Added by nodster on Sat, 06 Nov 2021 18:49:24 +0200
Kubernetes Pod horizontal automatic expansion and contraction
Horizontal Pod Autoscaler (HPA) can automatically scale the number of pods in ReplicationController, Deployment, ReplicaSet and StatefulSet based on CPU utilization. In addition to CPU utilization, automatic scaling can also be performed based on custom metrics provided by other applications. Pod auto scaling is not applicable to objects that c ...
Added by IcedEarth on Thu, 04 Nov 2021 21:36:54 +0200
Canary release
Exit after modification takes effect immediately
Which type is used for cluster external access: nodeport
nodeip+nodeport external access
Internal access clusterip
What is used to set the port number of clusterip
Canary release
k8s defaults to rolling update. The deployment controller can control the rolling update rhythm by itself, s ...
Added by tomjung09 on Thu, 04 Nov 2021 08:24:58 +0200
GitOps Application Practice Series Argo CD practice
Hello, I'm Zhang Jintao.
In the first two articles, I will give you This paper introduces the concept of GitOps , and Argo CD tool for implementing GitOps . In this article, we will introduce the practice of Argo CD with an example project.
Create cluster
We use the KIND (Kubernetes in Docker) tool to create a ...
Added by DimeDropper on Thu, 04 Nov 2021 05:53:49 +0200
Kubernetes learning notes: building kubernetes cluster (ubuntu)
kubernetes experiment Add root user
zzs@master:~$ sudo passwd root
Change mirror source
root@master:/etc/apt# vim sources.list
#Clear all contents ggdG
deb http://mirrors.aliyun.com/ubuntu/ xenial main restricted
deb http://mirrors.aliyun.com/ubuntu/ xenial-updates main restricted
deb http://mirrors.aliyun.com/ubuntu/ xenial universe
deb ht ...
Added by alexville on Sat, 30 Oct 2021 07:33:28 +0300
k8s cluster deployment - Pod management and resource list
1, Pod management
Pod is the smallest deployable unit that can create and manage Kubernetes computing. A pod represents a process running in the cluster, and each pod has a unique ip.
A pod is similar to a pea pod and contains one or more containers (usually docker s). IPC, Network and UTC namespace are shared among multiple containers.
...
Added by bajer on Fri, 29 Oct 2021 14:05:56 +0300
k8s disk mounted to container volume
1, Data volume type
1 emptyDir
emptyDir: simple empty directory
Data is not stored permanently, but can only be stored temporarily. It is often used to exchange and share data between multiple Docker containers in a pod Create a pod containing two containers that share the same volume
cat <<EOF > fortune-pod.yml
apiVersion: v1
kin ...
Added by milind24 on Mon, 25 Oct 2021 12:41:12 +0300
Container orchestration - kubedm builds kubernetes high availability clusters online or offline
catalogue
1. Architecture introduction:
2. Cluster architecture diagram:
3. Cluster server:
4. Modify host name:
5. Modify the hosts configuration file:
6. Close selinux:
7. Turn off the firewall:
8. Close swap:
9. Set iptables bridge:
10. Software k8s/docker/dashboard version:
11. Install docker environment:
(1) To install docker o ...
Added by ryza_ on Mon, 25 Oct 2021 05:00:26 +0300
[kubernetes] build Promethus+grafana monitoring platform
1, Introduction
1. Prometheus (Chinese Name: Prometheus)
It is an open source monitoring and alarm system and time series database (TSDB) developed by SoundCloud. Prometheus is developed in Go language and is an open source version of Google BorgMon monitoring system.
The basic principle of Prometheus is to periodically capture the status of ...
Added by jchemie on Mon, 25 Oct 2021 03:20:03 +0300
Introduction and Example of k8s DaemonSet
We previously said that k8s uses deployment and statefulset workload resources to maintain stateless and stateful applications, respectively. In this short article we will learn how to use DaemonSet to maintain a daemon process (application).
1. What is a DaemonSet?
DaemonSet is a workload resource (daemon) that ensures that a Pod must be r ...
Added by etrooper on Thu, 21 Oct 2021 20:23:34 +0300