This is a quick notes and summary from office doc. this is a quick look at log audit. more detail...
Here just a quick present of basic workflow of how to upgrade on the work node.More details can refer...
TLS # generate TLS cert and key openssl command [ options ... ] [ parameters ... ] ...
ImagePolicyWebhook Like NodeRestriction, ImagePolicyWebhook is also a “Admission...
1. Basic CMD These basic cmd are same structure for both docker and podman. # build...
For Pod Security, there are basically two layers/types: Pod security settings for each...
Previous Notes about the Apiserver request security we have shown two identities (node identity...
1. Identity = kubeconfig Here the identity equals kubeconfig file Every kubeconfig file...
With the experience shared by people on the internet, I summarized some key aspects as a series of...
Recently I am migrate my previous website for “Lieben in Deutschland” test frontend to another...
only show the basic steps, as for the other part, version control, CICD, Unit Test, just let it...
It’s a renovated note. Nowadays many of us will enjoy the cloud cluster rather than build a self...
Overview workflow In previous article we have discussed about the difference and usage of...
How to realize these strategies in AWS, we can classify them into 3 categories: Using...
In this article we will use a simple C# code to present how CICD pipeline build by using AWS...
Here we will use a simple CI pipeline to build a workflow for illustrating the procedure of how AWS...
In this note, I picked up some examples for each catogry. And the resource are list in Reference...
This is a quick recap for RBAC, more details can check the official doc or click the tiltle...
Check following two networkpolicy yaml file, np1.yaml and np2.yaml: # np1.yaml apiVersion:...
Quick recap for network. Details can click the title link or check the official doc. ...
Quick recap for logs & configs. Details can click the title link or check the official doc. ...
1. Logs Components level logs kubelet, kube-apiserver, kube-scheduler,...
1. Node 1.1 Node NotReady A Kubernetes cluster node being in the NotReady state...
A sidecar container is commonly used in real-world applications to augment the functionality of the...
This is a quick recap for the points of pod schedual, details can click each title link or the final...
RBAC 1. Metaphor Service Account (SA): "Cheedge" is a worker (identity...
Deployment Basic CMD # Create kubectl create deploy NAME --image=IMAGE...
ClusterIP kubectl expose deployment nginx --name nginx-svc --port 8080 --target-port 80 ...
Ingress ingress to make external to access:...
Last article we talk about the two main traffic control in Kubernetes: Ingress and the NetworkPolicy....