Тени секретов в etcd: удалил ≠ уничтожил
Привет, Хабр! Сегодня мы рассмотрим ту историю, когда удалённый секрет вдруг оказазывается вовсе не уничтоженным. Разберёмся, что происходит с вашими конфиденциальными данными внутри etcd, и почему простого удаления секрета недостаточно, чтобы навсегда вычеркнуть его из истории. Узнать, куда исчезают секреты
https://habr.com/ru/companies/otus/articles/955290/
#kubernets #безопасность #etcd #secrets #Kubernetes_Secrets #безопасность_Kubernetes
KIS-S: A GPU-Aware Kubernetes Inference Simulator with RL-Based Auto-Scaling
Before I started my #kubernets journey, I saw a meme that said as much "a #k8s cluster, needs a k8s cluster to manage it". I thought that was just a funny joke. But now that I started thinking about things like SSO with #authentic, maybe #powerdns, secret management, potentially add a PAM solution like #teleport ... I think it would be nice if these are available even if the prod. #cluster is down. And the easiest way to do that is... a Kubernetes cluster 😂 #selfhosting #homelab
I want to build a new side project but let me first spin up a #kubernets cluster across multiple regions and make sure my db has an instance on the edge across the globe so my non existent users get sub milliseconds latency.
TIL: There is an easy way in ArgoCD UI how to create #Kubernets Job from Cronjob.
This is an easy way how to restart failed CronJobs.
Wer kann einen managed kubernetes Anbieter empfehlen?
Der (einzige?) riesige Vorteil der aktuellen #KI Debatten?!
Man hört weniger von #Kubernets 😜
Can someone who's good with computers tell me why only one #docker image inside a #kubernets node can use an #nvidia graphics card at a time? If I have a #linux desktop I can run many hardware accelerated apps at a time? Boosts appreciated.
My blog runs on Kubernetes and I like it.
https://vyskocil.me/blog/vme-kubernetes/
#blog #kubernets #terraform #helm #microos #opensuse #hetzner
1) Good to have securityContext in #kubernets
2) Nice, Secrets and ConfigMaps are mounted read-only
But how the hell is it supposed to mount a secret with permission 600 as a non-root user?
In the end, I mounted the secret file with fsGroup and defaultMode=0640 just to use an init container to copy the secret file to the desired location and change the permissions to 600.
Please tell me I am doing something wrong and there is a better solution :mastorofl:
I've been working on a sort of portal for work and have been down a rather large rabbit hole of "how hard can it be to get some user-uploaded code into a Kubernetes cluster", turns out it is possible.
There are like a million and one things I want to improve and add but I just reached a vertical slice where you can create an "applet", drop in some code, hit deploy and have it run on one of our servers behind SSL! 🎉 #devops #kubernets #deno #nodejs
DevPod - Codespaces but #OpenSource
"Developers can write code in any language, and run it anywhere. For example, they can test on virtual machines, or code in #Python with #VSCode running on #Docker Desktop, or in Go running in EKS. If the provider they need doesn’t exist, they can build it."
https://loft.sh/blog/introducing-devpod-codespaces-but-open-source/
#foss #codespaces #containers #kubernets #devstandard #jetbrains #googlecloud
Ah yes, just another day getting this error. Yet again. Dear god.
GPG error: https://packages.cloud.google.com/apt kubernetes-xenial InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY B53DC80D13EDEF05
Want to meet me at #KubeConEU ? I'll be in Amsterdam for the next week and would love to peer with some people. :)
Wow, what a year of self-hosting! After showing off my Home Lab hardware in my late 2022 tour, many of you asked what services are self-hosted in this stack. This is always a moving target so I decided it was time to share which services I am running here at home.
https://www.youtube.com/watch?v=yrMRZVvkxeA
#homelab #selfhosting #selfhosted #opensource #network #networking #homeserver #hypervisor #dns #containers #docker #kubernets #k8s #rancher #2023 #traefik #ci #cd #homenetwork
I just updated my #Ceph Quick Install guide, to run #Ceph Quincy in a public network used as a distributed storage for a #Kubernets cluster:
https://imixs.github.io/imixs-cloud/doc/CEPH.html
Just found two #kubernets playgrounds https://www.katacoda.com/courses/kubernetes/playground http://labs.play-with-k8s.com/
