Freaks City

When deploying Istio on manually provisioned Kubernetes clusters, control plane components frequently fail to initialize due to DNS resolution timeouts and webhook connectivity issues. These problems typically stem from control plane nodes being unable to reach CoreDNS or cluster services from host network contexts. Prerequisites: DNS and Contr ...

The ListWatcher component provides core functionality for the Reflector pattern in Kubernetes controllers. This mechenism enables efficient resource synchronization by combining initial list operations with subsequent watch events. Constructing ListWatcher Instances ListWatcher objects are created using factory functions that configure their li ...

Kubectl Deploymant Workflow The process for deploying applications using Kubectl involves several key steps: Verify cluster readiness (Minikube or kubeadm) Create Deployment configuration Apply the configuration Verify deployment status Deploying a Sample Web Application 1. Creating the Deployment Configuration A Deployment object manages app ...

Implementing Istio Architecture Components Introduction Istio consists of two main parts: the data plane and the control plane. The data plane handles traffic management, while the control plane manages configuration and policy. This article guides you through implementing Istio's architecture components, helping beginners understand the entire ...

Store the cluster CA materials in a working directory: mkdir -p /root/pki/ cp /opt/kubernetes/ssl/ca-key.pem /root/pki/ cp /opt/kubernetes/ssl/ca.pem /root/pki/ cp /root/k8s/cert/k8s/ca-config.json /root/pki/ The ca-config.json profile defines permitted key usages and an expiration window: { "signing": { "default&quo ...

This command displays the expiration and remaining validity time for all certificates, including client certificates in the /etc/kubernetes/pki directory and client certificates embedded in KUBECONFIG files (admin.conf, controller-manager.conf, scheduler.conf). ### Manual Certificate Renewal The kubeadm certs renew command allows manual certif ...

Infrastructure Setup Prerequisites Ensure the cluster infrastructure is active on CentOS 7 hosts. The node toploogy includes: Role IP Address Master Node 192.168.138.110 Slave Node 1 192.168.138.111 Slave Node 2 192.138.138.112 1. Database Provisioning 1.1 Resource Isolation Define a dedicated namespace to isolate database resourc ...

Installing the Container RuntimeDocker serves as the underlying container runtime for Kubernetes. Update the package index and install Docker using the following commands:sudo apt-get update sudo apt-get install -y docker.ioOnce installed, ensure the Docker service is running:sudo systemctl start docker sudo systemctl enable dockerDeploying Kub ...

A Job in Kubernetes is designed to execute short-lived, one-time tasks that are meant to run until completion. It ensures that one or more Pods associated with it finish successfully. A Job can be considered a specialized type of Pod that runs a task once and then releases its resources. Kubernetes supports several types of Jobs: Non-parallel ...

Public cloud virtual machines typically route traffic through NAT gateways, which disrupts Kubernetes control plane and etcd peer communication that expects direct layer-3 connectivity. Deploying a cluster on low-spec instances requires explicit runtime configuration, network address translation rules, and careful component selection. Container ...