This is a quick notes and summary from office doc. this is a quick look at log audit. more detail about the log audit, pls refer to the official doc about audit and also can check my previous article: kubernets related logs & configurations which ...
Here just a quick present of basic workflow of how to upgrade on the work node.More details can refer to the official doc, upgrading Linux work node. Notice: The official doc shows is the completed procedural which we will stop the jobs, and drain t...
TLS # generate TLS cert and key openssl command [ options ... ] [ parameters ... ] 1. TLS config files About TLS we will mainly focus on 3 levels/types encryption in this article. inside cluster communication (/etc/kubernetes/pki/*) client (kubect...
ImagePolicyWebhook Like NodeRestriction, ImagePolicyWebhook is also a “Admission Controller” plugin. As we said before, the “Admission Controller” works after authentication and authorization (RBAC). Authentication → Authorization → Admission ( NodeR...
1. Basic CMD These basic cmd are same structure for both docker and podman. # build image $ docker build -t <NAME> -f /PATH/TO/Dockerfile <BUILD_CONTEXT> $ docker image ls # run docker container -d detached $ docker run --name <NAME> -d <BASE_IMAGE...
For Pod Security, there are basically two layers/types: Pod security settings for each pod namespace labels for Pod Security Admission (PSA) Layer A: Pod security settings Defined in: spec.containers[*].securityContext spec.securityContext This ...
Previous Notes about the Apiserver request security we have shown two identities (node identity /etc/kubernetes/kubelet.conf and admin cluster identity ~/.kube/config ). Now we will talk about another identity, it is used for the Pods — ServiceAccoun...
1. Identity = kubeconfig Here the identity equals kubeconfig file Every kubeconfig file specifies: the certificate the client key the username (CN) the group (O) the cluster endpoint This determines: Who you are (identity) What you can do (R...
With the experience shared by people on the internet, I summarized some key aspects as a series of articles for preparing the CKS exam. Each aspects should be in short concise points, so this is not a detailed tutorial, just some practical reminders....