K8s

End to end workflow to build, sign, and deploy a distroless image using apko/cosign/kyverno

A simple setup to troubleshoot pod level performance issue

notes on k8s observability (kubernetes dashboard)

exploring NetworkPolicy in KIND cluster

I am learning to implement NetworkPolicy in k8s clusters and I learnt something new today.

in a k3d cluster, there is a default CNI which supports NetworkPolicy, see…

explore the CNI option used by k3d

k3d clusters use the Flannel CNI plugin by default (like most clusters)

$ k3d cluster create tkb --servers 1 --agents 3 --image rancher/k3s:latest

$ k3d node list
NAME               ROLE           CLUSTER   STATUS
k3d-tkb-agent-0    agent…

How to modify kube-apiserver in KIND environment?

Method 1:

— login to the KIND container

# docker ps
CONTAINER ID   IMAGE                  COMMAND                  CREATED      STATUS          PORTS                       NAMES
d8da3dc84264…

CKAD study environment

minikube, kind, k9s, k3d, AKS, EKS, kops

I have been using k8s for few years and currently study to prepare for CKAD certification.

Here is some notes I captured for the various k8s tools that I have tried or trying.

create a private RDS from EKS using ACK (AWS controller for Kubernetes)

To cut long story short, I need to create a private RDS instance for EKS to access; and to do that, I need to create RDS in the same subnet as EKS; and, because my hands are itchy, I decided to do that via…

use velero to backup EKS cluster (2022)

I am starting from a freshly install WSL2 environment, so my first step is to download my…

Internal error occurred: failed calling webhook “validate.nginx.ingress.kubernetes.io”: failed to call webhook

When I was trying to deploy nginx ingress on KIND in windows subsystem Linux (WSL2) environment,

kubectl apply…