The simplest k8s User JWT token manager in the whole network
Three-step installation of kubernetes cluster
Summary
The token of the kubernetes server account is easy to obtain, but the token of the User is very troublesome. This paper presents a minimal way to generate the User token, which can be obtained by the User with an http request.
What is token mainly used for?
The official dashboard login is re ...
Posted by Deltran on Thu, 21 Feb 2019 07:18:20 -0800
Add privilege control for Kubernetes dashboard access users
Add privilege control for Kubernetes dashboard access users
Article directory
Add privilege control for Kubernetes dashboard access users
1. demand
2. plan
3. implementation
3.1 Assign dashboard permissions
3.2 Allocate kubeapps permissions
3.3 Generating kubeconfig
4. Test Verification
1. demand
To create applicat ...
Posted by phprocket on Fri, 01 Feb 2019 09:00:15 -0800
kubernetes Authoritative Guide Reading Notes (1) -- Building Basic Services, Pod and Visiting
Close the firewall
systemctl status firewalld
systemctl disable firewalld
systemctl stop firewalld
Systemctl is a system D tool, which is mainly responsible for controlling system D system and service manager.
Systemd is a collection of system management daemons, tools, and libraries to replace the initial process of System ...
Posted by Supernovas on Sat, 26 Jan 2019 12:21:14 -0800
Install dashboard v1.10 + Heapster for kubernetes 1.12.1
Dashboard is the official WEB UI of kubernetes.
Heapster adds usage statistics and monitoring functions for clusters and dashboards for Dashboard. Use InfluxDB as the back-end storage for Heapster.
Dashboard Installation
kubernetes dashboard official Resource Definition Document: https://raw.githubusercontent.com/kubernetes/dashboard/master/s ...
Posted by CoderDan on Sat, 26 Jan 2019 04:03:14 -0800
Creating K8S Single Machine Environment-Pit Filling Guide with minikube
Reminder
This blog post mainly records how to install minikube using CentOS system in the local environment. It fills in the hole for the problem of mirror download failure in the process of installation. It mainly uses kubernete version 1.12.1. For other different versions, the method is the same.
1. Download the Deployment Installation Packa ...
Posted by faheemhameed on Thu, 24 Jan 2019 01:42:12 -0800
Analysis of Spark in Action on Kubernetes-Playground Construction and Architecture
Preface
Spark is a very popular big data processing engine. Data scientists use Spark and the related ecological big data suite to complete a large number of rich scene data analysis and mining. Spark has gradually become the industry standard in the field of data processing. However, Spark itself is designed to use static resource management. ...
Posted by stallingjohn on Tue, 22 Jan 2019 08:18:13 -0800
Build and use K8s cluster <k8s dashboard pod deployment >
k8s dashboard pod deployment
Write yaml file
Create pod
Browser opens webui
Write yaml file
# cat dashboard.yaml
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
# Keep the name in sync with image version and
# gce/coreos/kube-manifests/addons/dashboard counterparts
name: kubernetes-dashboard-latest
namespace: kube-system
...
Posted by lookee on Wed, 09 Jan 2019 20:39:10 -0800
Istio: Google, IBM and Lyft Joint Open Source Microsoft Service Mesh Framework
Istio is an open-source micro-service Service Mesh framework that combines Google, IBM and Lyft. It aims to solve the problems of discovery, connection, management, monitoring and security of a large number of micro-services.
The main characteristics of Istio include:
Automatic Load Balancing of HTTP, gRPC and TCP Netw ...
Posted by Butthead on Mon, 07 Jan 2019 01:00:10 -0800
Kubernetes Service & LB & Networking :Ingress
Dead work
1. Enabling the ingress plug-in of minikube
minikube addons enable ingress
2. Complete the mirroring required by the ingress plug-in
minikube ssh
export image=nginx-ingress-controller:0.14.0
docker pull registry.cn-hangzhou.aliyuncs.com/anoy/${image}
docker tag registry.cn-hangzhou.aliyuncs.com/anoy/${image} qua ...
Posted by daf_cr on Thu, 03 Jan 2019 16:36:11 -0800
Accessing API Server with Service Account in Kubernetes Pod
Kubernetes API Server Is the whole Kubernetes Cluster At the core, we not only need to access API Server from outside the cluster, but sometimes we also need to access API Server from inside Pod.
However, in the production environment, Kubernetes API Server is "fortified". In " Security Configuration of K ...
Posted by skalooky on Thu, 03 Jan 2019 00:03:08 -0800