The simplest k8s User JWT token manager in the whole network

Three-step installation of kubernetes cluster Summary The token of the kubernetes server account is easy to obtain, but the token of the User is very troublesome. This paper presents a minimal way to generate the User token, which can be obtained by the User with an http request. What is token mainly used for? The official dashboard login is re ...

Posted by Deltran on Thu, 21 Feb 2019 07:18:20 -0800

Add privilege control for Kubernetes dashboard access users

Add privilege control for Kubernetes dashboard access users Article directory Add privilege control for Kubernetes dashboard access users 1. demand 2. plan 3. implementation 3.1 Assign dashboard permissions 3.2 Allocate kubeapps permissions 3.3 Generating kubeconfig 4. Test Verification 1. demand To create applicat ...

Posted by phprocket on Fri, 01 Feb 2019 09:00:15 -0800

kubernetes Authoritative Guide Reading Notes (1) -- Building Basic Services, Pod and Visiting

Close the firewall systemctl status firewalld systemctl disable firewalld systemctl stop firewalld Systemctl is a system D tool, which is mainly responsible for controlling system D system and service manager. Systemd is a collection of system management daemons, tools, and libraries to replace the initial process of System ...

Posted by Supernovas on Sat, 26 Jan 2019 12:21:14 -0800

Install dashboard v1.10 + Heapster for kubernetes 1.12.1

Dashboard is the official WEB UI of kubernetes. Heapster adds usage statistics and monitoring functions for clusters and dashboards for Dashboard. Use InfluxDB as the back-end storage for Heapster. Dashboard Installation kubernetes dashboard official Resource Definition Document: https://raw.githubusercontent.com/kubernetes/dashboard/master/s ...

Posted by CoderDan on Sat, 26 Jan 2019 04:03:14 -0800

Creating K8S Single Machine Environment-Pit Filling Guide with minikube

Reminder This blog post mainly records how to install minikube using CentOS system in the local environment. It fills in the hole for the problem of mirror download failure in the process of installation. It mainly uses kubernete version 1.12.1. For other different versions, the method is the same. 1. Download the Deployment Installation Packa ...

Posted by faheemhameed on Thu, 24 Jan 2019 01:42:12 -0800

Analysis of Spark in Action on Kubernetes-Playground Construction and Architecture

Preface Spark is a very popular big data processing engine. Data scientists use Spark and the related ecological big data suite to complete a large number of rich scene data analysis and mining. Spark has gradually become the industry standard in the field of data processing. However, Spark itself is designed to use static resource management. ...

Posted by stallingjohn on Tue, 22 Jan 2019 08:18:13 -0800

Build and use K8s cluster <k8s dashboard pod deployment >

k8s dashboard pod deployment Write yaml file Create pod Browser opens webui Write yaml file # cat dashboard.yaml apiVersion: extensions/v1beta1 kind: Deployment metadata: # Keep the name in sync with image version and # gce/coreos/kube-manifests/addons/dashboard counterparts name: kubernetes-dashboard-latest namespace: kube-system ...

Posted by lookee on Wed, 09 Jan 2019 20:39:10 -0800

Istio: Google, IBM and Lyft Joint Open Source Microsoft Service Mesh Framework

Istio is an open-source micro-service Service Mesh framework that combines Google, IBM and Lyft. It aims to solve the problems of discovery, connection, management, monitoring and security of a large number of micro-services. The main characteristics of Istio include: Automatic Load Balancing of HTTP, gRPC and TCP Netw ...

Posted by Butthead on Mon, 07 Jan 2019 01:00:10 -0800

Kubernetes Service & LB & Networking :Ingress

Dead work 1. Enabling the ingress plug-in of minikube minikube addons enable ingress 2. Complete the mirroring required by the ingress plug-in minikube ssh export image=nginx-ingress-controller:0.14.0 docker pull registry.cn-hangzhou.aliyuncs.com/anoy/${image} docker tag registry.cn-hangzhou.aliyuncs.com/anoy/${image} qua ...

Posted by daf_cr on Thu, 03 Jan 2019 16:36:11 -0800

Accessing API Server with Service Account in Kubernetes Pod

Kubernetes API Server Is the whole Kubernetes Cluster At the core, we not only need to access API Server from outside the cluster, but sometimes we also need to access API Server from inside Pod. However, in the production environment, Kubernetes API Server is "fortified". In " Security Configuration of K ...

Posted by skalooky on Thu, 03 Jan 2019 00:03:08 -0800