2022/12/22

 How to restart a pod without a deployment in K8S?

https://stackoverflow.com/questions/65156414/how-to-restart-a-pod-without-a-deployment-in-k8s

Full-cluster restart and rolling restart

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/restart-cluster.html#restart-cluster-rolling

我如何為 elasticsearch 生成註冊令牌以連接 kibana？

https://elasticstack.blog.csdn.net/article/details/125989411

Elasticsearch：使用不同的 CA 更新安全证书 （二）

https://blog.csdn.net/UbuntuTouch/article/details/125993452

Cannot run elasticsearch with security best practice readOnlyRootFilesystem: true

https://github.com/elastic/cloud-on-k8s/issues/6126

Set up basic security for the Elastic Stack

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/security-basic-setup.html

Problem with configuring https x-pack

https://discuss.elastic.co/t/problem-with-configuring-https-x-pack/292509

elasticSearch（三）window报错：org.elasticsearch.ElasticsearchSecurityException:

https://huaweicloud.csdn.net/search?q=elasticSearch%EF%BC%88%E4%B8%89%EF%BC%89window%E6%8A%A5%E9%94%99%EF%BC%9Aorg.elasticsearch.ElasticsearchSecurityException%3A

Running Elasticsearch, Logstash, and Kibana on Kubernetes with Helm

https://coralogix.com/blog/elasticsearch-logstash-kibana-on-kubernetes/

Cluster health API

https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-health.html#

Deploy a secure instance of Elasticsearch on Kubernetes

在 Kubernetes 上部署 Elasticsearch 的安全實例

https://pimwiddershoven.nl/entry/deploy-a-secure-instance-of-elasticsearch-on-kubernetes

Update security certificates with a different CA

https://www.elastic.co/guide/en/elasticsearch/reference/current/update-node-certs-different.html

接下來呢？

https://docs.netapp.com/zh-tw/trident/trident-get-started/kubernetes-postdeployment.html#%E6%AD%A5%E9%A9%9F1%E5%BB%BA%E7%AB%8B%E5%BE%8C%E7%AB%AF

與營運者一起升級

https://docs.netapp.com/zh-tw/trident/trident-managing-k8s/upgrade-operator.html#%E5%8D%87%E7%B4%9A%E5%8F%A2%E9%9B%86%E7%AF%84%E5%9C%8D%E5%85%A7%E7%9A%84%E6%93%8D%E4%BD%9C%E5%93%A1%E5%AE%89%E8%A3%9D

與Trident營運者一起部署

https://docs.netapp.com/zh-tw/trident/trident-get-started/kubernetes-deploy-operator.html#%E6%9C%89%E9%97%9Castra-trident%E7%9A%84%E9%87%8D%E8%A6%81%E8%B3%87%E8%A8%8A22-10

Connecting Applications with Services

https://kubernetes.io/docs/tutorials/services/connect-applications-service/

Day 23: 使用 VS Code 來開發 PHP & Laravel

https://ithelp.ithome.com.tw/articles/10226612

Elasticsearch Helm Chart

https://github.com/elastic/helm-charts/tree/main/elasticsearch

The cluster-info ConfigMap does not yet contain a JWS signature for token ID "cjxj26"

https://stackoverflow.com/questions/68387634/the-cluster-info-configmap-does-not-yet-contain-a-jws-signature-for-token-id-cj

kubernetes报错笔记 （一） calico报错 原创

https://blog.51cto.com/u_14205795/4560662

kubernetes Releases

https://kubernetes.io/releases/

Elastic StackのSSL、TLS、HTTPS設定

https://qiita.com/hamingcode/items/3585053ab8b81fe6532c

污点和容忍度

https://kubernetes.io/zh-cn/docs/concepts/scheduling-eviction/taint-and-toleration/

Missing taint: node.kubernetes.io/unreachable:NoExecute when nodes enter NotReady state

https://github.com/kubernetes/kubernetes/issues/101674

Taints and Tolerations

https://kubernetes.io/docs/concepts/scheduling-eviction/taint-and-toleration/#taint-based-evictions

pod calico-node on worker nodes with 'CrashLoopBackOff'

https://github.com/projectcalico/calico/issues/2720

A lot of kubelet errors : Failed to update stats for container

https://stackoverflow.com/questions/32435859/a-lot-of-kubelet-errors-failed-to-update-stats-for-container

Creating a cluster with kubeadm

https://v1-24.docs.kubernetes.io/docs/setup/production-environment/tools/kubeadm/create-cluster-kubeadm/

【從題目中學習k8s】-【Day8】K8s常用指令 (Cheat Sheet)&解題技巧

https://ithelp.ithome.com.tw/articles/10236404

kubectl 备忘单

https://kubernetes.io/zh-cn/docs/reference/kubectl/cheatsheet/

Node type

https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#node-roles

Start the Elastic Stack with security enabled automatically

https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-stack-security.html

HTTPS on elasticsearch helm chart

https://stackoverflow.com/questions/63339235/https-on-elasticsearch-helm-chart

https://github.com/elastic/helm-charts/blob/main/elasticsearch/examples/security/values.yaml

[Day12] 實作 Kubernetes 裸機 Load Balancer Part2

https://ithelp.ithome.com.tw/articles/10221722

How can I write and append using echo command to a file

https://stackoverflow.com/questions/17189237/how-can-i-write-and-append-using-echo-command-to-a-file

ELK Stack 2 - Secure ELK Stack

https://ithelp.ithome.com.tw/articles/10216666

Enable Elasticsearch security featuresedit

https://www.elastic.co/guide/en/elasticsearch/reference/8.5/get-started-enable-security.html

Internal DNS

https://cloud.google.com/compute/docs/internal-dns?hl=zh-tw

How to Setup Metal LB for Nginx Ingress Loadbalancer IP in Kubernetes 1.25.4

https://hackmd.io/X3I6IwWESzG0agAgsRpg6A?view#How-to-Setup-Metal-LB-for-Nginx-Ingress-Loadbalancer-IP-in-Kubernetes-1254

metallb troubleshooting

https://metallb.universe.tf/configuration/troubleshooting/

[Day12] 實作 Kubernetes 裸機 Load Balancer Part2

https://ithelp.ithome.com.tw/articles/10221722

[ Kube 33.1 ] How to deploy & use MetalLB in bare metal Kubernetes

https://www.youtube.com/watch?v=2SmYjj-GFnE&t=640s

Enforce Pod Security Standards with Namespace Labels

https://kubernetes.io/docs/tasks/configure-pod-container/enforce-standards-namespace-labels/

Bare-metal considerations¶

https://kubernetes.github.io/ingress-nginx/deploy/baremetal/

Pod Security Admission

https://kubernetes.io/docs/concepts/security/pod-security-admission/

metallb installation

https://metallb.universe.tf/installation/

Metallb LoadBalancer is stuck on pending

https://stackoverflow.com/questions/66124430/metallb-loadbalancer-is-stuck-on-pending

metallb external ip pending

https://github.com/metallb/metallb/issues?q=pending

How To Deploy Logstash and Filebeat On Kubernetes With ECK and SSL

https://raphaeldelio.com/deploy-logstash-and-filebeat-on-kubernetes-with-eck-ssl-and-filebeat-d9f616737390

Can change clusterip to nodeport command line without editor?

https://stackoverflow.com/questions/51113399/can-change-clusterip-to-nodeport-command-line-without-editor

我如何為 elasticsearch 生成註冊令牌以連接 kibana？

https://stackoverflow.com/questions/71204472/how-can-i-generate-enrollment-token-for-elasticsearch-to-connect-with-kibana

脅威ハンティング手順 (Threat Hunting Steps)

 Threat Hunting には次のようなステップが含まれます。

1. 目標を定義する：Threat Hunting の計画の目標を明確にする。

2. 検知ルールを設定する：異常な活動を検知するためのルールを設定する。

3. データを収集して分析する：関連するデータを収集して分析する。

4. 脅威を調査して識別する：潜在的な脅威を調査して識別する。

5. 結果を評価して報告する：Threat Hunting の活動の効果を評価し、結果を報告する。

これらのステップは人工知能や機械学習の技術、専門知識や経験を組み合わせる必要があります。有効な Threat Hunting の計画を作成するには、適切なツールやリソース、専門的なチームメンバーが必要です。

人工知能や機械学習は、データの収集と分析を自動化し、異常な活動を検知するのに役立ちます。専門知識や経験は、脅威を特定し、目的や動機を推測し、脅威を阻止するための有効な行動をとるのに役立ちます。

有効な Threat Hunting の計画を作成するには、専門的なチームメンバーと適切なツールやリソースが必要です。これらのツールやリソースには、情報収集プラットフォーム、データ分析ソフトウェア、脅威検知システムなどが含まれます。これらのツールやリソースは、大量のデータを収集し分析し、潜在的な脅威を検知するのに役立ちます。

84 , 15 , 91 , 89 , 36

driving across the border of Idaho and Utah in middle of nowhere but cell signal is incredibly good

 

Fish in the pool 鯉魚 in 鯉魚池

黃色的在右邊的鯉魚池

紅色在左邊的鯉魚池 

20221128

 # traefik github 

  https://github.com/traefik/traefik

# 安裝 traefik

  https://jimmysong.io/kubernetes-handbook/practice/traefik-ingress-installation.html

  https://github.com/rootsongjc/kubernetes-handbook/tree/master/manifests/traefik-ingress

  https://github.com/yiyu0x/k8s-traefik-example

# kubernetes二： kubernetes 重要组件安装和集群管理

  https://blog.51cto.com/u_14183032/4903615

# [Kubernetes] 設定 Ingress Controller (以 Traefik 為例)

  https://godleon.github.io/blog/Kubernetes/k8s-Install-traefik-as-Ingress-Controller/

# k8s Deployment

  https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

# [Day16] k8s之PV小整合：Pod、Deployment、Service、Job與PersistentVolume

  https://ithelp.ithome.com.tw/articles/10223217

# [Day 8] 還在用Replication Controller嗎？不妨考慮Deployment

  https://ithelp.ithome.com.tw/articles/10194152

# Elastic Docs› Elastic Cloud on Kubernetes [2.5]

  https://www.elastic.co/guide/en/cloud-on-k8s/2.5/k8s-overview.html

# Ingress Controllers

  https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/

# 第 3 堂課 - LACP 與 bonding/team 及 IPv6 簡易設定

  https://dic.vbird.tw/linux_server/unit03.php

# NPIV

  https://www.google.com/search?q=NPIV&oq=NPIV&aqs=chrome..69i57j0i512l9.824j0j7&sourceid=chrome&ie=UTF-8

# Rancher 新用户指南

  https://docs.ranchermanager.rancher.io/zh/pages-for-subheaders/new-user-guides

  https://docs.ranchermanager.rancher.io/v2.6/getting-started/quick-start-guides/deploy-rancher-manager/helm-cli

# Kubernetes Cluster in Minutes in VMware vSphere using Rancher

  https://www.youtube.com/watch?v=lKzkgmR6A2A

# Rancher 安裝 trident  

  https://docs.netapp.com/zh-tw/hci/docs/task_rancher_trident.html

# Install Traefik

  https://doc.traefik.io/traefik/getting-started/install-traefik/#use-the-official-docker-image

# Kubernetes StatefulSet - Examples & Best Practices

  https://loft.sh/blog/kubernetes-statefulset-examples-and-best-practices/

# Kubernetes PVC Guide: Basics, Tutorials and Troubleshooting Tips

  https://komodor.com/learn/kubernetes-pvc-guide-basic-tutorial-and-troubleshooting-tips/

# Persistent Volumes

  https://kubernetes.io/docs/concepts/storage/persistent-volumes/

# How to Create kubernetes Role for Service Account

  https://devopscube.com/create-kubernetes-role/

# Kubernetes StatefulSet - Examples & Best Practices

  https://loft.sh/blog/kubernetes-statefulset-examples-and-best-practices/

# 在 K8S 中使用 Traefik 作為 Ingress Controllers

  https://github.com/yiyu0x/k8s-traefik-example

# Deploy a Production Ready Kubernetes Cluster

  https://github.com/kubernetes-sigs/kubespray/blob/master/README.md

# 以 eBPF 構建一個更為堅韌的 Kubernetes 叢集

  https://www.slideshare.net/hongweiqiu/ebpf-kubernetes?from_action=save

# “源来如此”开源技术公开课第八期：CKA考前重点实战讲解

  https://training.linuxfoundation.cn/videos/11

  https://www.bilibili.com/video/BV1Mq4y1s7JW/?zw

# Storage Classes

  https://kubernetes.io/docs/concepts/storage/storage-classes/

# Deploy Elasticsearch and Kibana Cluster on Kubernetes with Elasticsearch Operator

  https://medium.com/rahasak/deploy-elasticsearch-and-kibana-cluster-on-kubernetes-with-elasticsearch-operator-79f205170f40

# Elastic Cloud on Kubernetes

  https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-check-samples.html

  https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-install-yaml-manifests.html#k8s-install-yaml-manifests

# EtherChannel

  https://www.jannet.hk/etherchannel-pagp-lacp-zh-hant/

# Persistent Volumes

  https://kubernetes.io/docs/concepts/storage/persistent-volumes/

  https://learning.edx.org/course/course-v1:LinuxFoundationX+LFS158x+1T2022/block-v1:LinuxFoundationX+LFS158x+1T2022+type@sequential+block@c62bc66c97f24fa490cf42b58abc455b/block-v1:LinuxFoundationX+LFS158x+1T2022+type@vertical+block@a5d8e4c381e549de95762f5abe314ba6

  

  

# 雲端現代化的商業價值

https://hktw-resources.awscloud.com/whitepapers/business-value-of-cloud-modernization-whitepaper-tc?trk=9bbff2ce-cad2-4816-8c15-2f30d784b934&sc_channel=psm&fbclid=IwAR3h-qesiPcy0rLYnt9Fac-CFQXSey50_pvclVX8iwQlDKUyyPoqGJvJY5Y

# Setting up Azure Classroom Labs for your students with Azure Lab Services

https://techcommunity.microsoft.com/t5/educator-developer-blog/setting-up-azure-classroom-labs-for-your-students-with-azure-lab/ba-p/381181

# BAS那点事儿

https://xz.aliyun.com/t/11880#toc-6

# OpenRan

  https://opennetworking.org/open-ran/

# Aether-in-a-Box for Developers

  https://docs.aetherproject.org/master/developer/aiab.html#proxy-settings-conditional

# Setting Up Aether-in-a-Box

  https://docs.aetherproject.org/aether-1.5/developer/aiab.html

# Aether Documentation

  https://docs.aetherproject.org/master/index.html

# Aether

  https://opennetworking.org/aether/

# Community

  https://wiki.opennetworking.org/display/COM/Aether

# SD-Core Public

  https://drive.google.com/drive/u/0/folders/1dM5b0B65LkQQ0dGK1m-iIceRJfAASEm1  

# 遠傳首發！成功測試高空無人載具延伸 5G 信號涵蓋

  https://technews.tw/2019/09/23/fetnet-test-air-extension-5g-coverage/

[Trouble Shooting]

# Kubernetes stuck on ContainerCreating

  https://serverfault.com/questions/728727/kubernetes-stuck-on-containercreating

# Docker installation

  https://docs.docker.com/engine/install/centos/

# Run a Stateless Application Using a Deployment

  https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/

# What is the proper way to uninstall and clean up the Traefik Helm Charts?

  https://community.traefik.io/t/what-is-the-proper-way-to-uninstall-and-clean-up-the-traefik-helm-charts/11343

零信任ABCDE原則 (ABCDE Principles)

* Assume nothing(不做任何假定) 

* Believe nobody(不相信任何人) 

* Check everything(隨時檢查一切)

* Defeat dynamic risks(防範動態威脅)

* Expect for the worst(做最壞打算)

Readiness probe failed: HTTP probe failed with statuscode: 500 [metrics server on k8s]

 

Deploy metrics server

kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml




Edit metrics server deployment by adding command

kubectl -n kube-system edit deploy metrics-server




kubernetes-metrics-server.yaml







      containers:
      - args:
        - --cert-dir=/tmp
        - --secure-port=4443
        - --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname
        - --kubelet-use-node-status-port
        - --metric-resolution=15s
        command:
        - /metrics-server
        - --kubelet-insecure-tls
        - --kubelet-preferred-address-types=InternalIP

Add red parts, then ....