seulseul

Security 1) View Certificate Details 2) Certificates API 3) KubeConfig 4) Role Based Access Controls 5) Cluster Roles 6) Service Accounts 7) Image Security 8) Security Contexts 9) Network Policies 01. Where is the default kubeconfig file located in the current environment? Find the current home directory by looking at the HOME environment variable. 1) /root/.kube/config 2) /root/,kube/kubeconfig..

LABS – CERTIFIED KUBERNETES ADMINISTRATOR WITH PRACTICE TESTS > STORAGE Storage 01. Persistent Volume Claims 02. Storage 01. How many StorageClasses exist in the cluster right now? ask : 1 controlplane ~ ➜ k get StorageClass NAME PROVISIONER RECLAIMPOLICY VOLUMEBINDINGMODE ALLOWVOLUMEEXPANSION AGE local-path (default) rancher.io/local-path Delete WaitForFirstConsumer false 5m15s 02. How about no..

LABS – CERTIFIED KUBERNETES ADMINISTRATOR WITH PRACTICE TESTS > STORAGE Storage 01. Persistent Volume Claims 02. Storage Class # kubectl cheat sheet alias k=kubectl complete -F __start_kubectl k 01. info We have deployed a POD. Inspect the POD and wait for it to start running. In the current(default) namespace. 02. The application stores logs at location /log/app.log. View the logs. You can exec..

https://kubernetes.io/docs/reference/kubectl/cheatsheet/

다중 컨테이너 포드 (multi-container pods) pod 내의 컨테이너는 수명주기가 같고, 같은 네트워크에 존재하기 때문에 서로를 localhost 로 참조 할수 있으며, 같은 볼륨에 접근할수 있다. pod 정의 파일의 spec 섹션에서 containers 섹션이 배열인 이유가 바로, 멀티컨테이너 pod 를 사용할 수 있게끔 하기 위해서이다. - 아래 YAML 파일은 kode kloud 예제이다. https://seulseul.tistory.com/22 4.Application Lifecycle Management - Multi Container PODs Application Lifecycle Management 1) Rolling Updates and Rollbacks 2) Commands ..

1) kubectl run command kubectl run nginx --image nginx 개발환경에서 사용하는것을 추천한다. 장점 - 클러스터에 특정 오브젝트를 한번에 실행하거나 시작할수 있는 가장 쉬운 방법. (실제 이미지 바로 실행 시킴) 단점 - 기존 설정에 대한 히스토리를 제공하지 않음. - 변경사항이나 audit 내역, 템플릿등을 제공하지 않음. 2) kubectl create command kubectl create -f nginx.yaml 최소한 1개 이상의 YAML file 이나 JSON format file 을 이용해서 Object 를 생성한다. 장점 - 설정파일 내용을 git 같은곳에 저장이 가능하기 때문에 설정에대한 변경 히스토리가 확인 가능한다. - 새로운 object 를 ..

Security 1) View Certificate Details 2) Certificates API 3) KubeConfig 4) Role Based Access Controls 5) Cluster Roles 6) Service Accounts 7) Image Security 8) Security Contexts 9) Network Policies 01. A new member akshay joined our team. He requires access to our cluster. The Certificate Signing Request is at the /root location. Inspect it 02. Create a CertificateSigningRequest object with the n..

Security 1) View Certificate Details 2) Certificates API 3) KubeConfig 4) Role Based Access Controls 5) Cluster Roles 6) Service Accounts 7) Image Security 8) Security Contexts 9) Network Policies 01. Identify the certificate file used for the kube-api server ask : /etc/kubernetes/pki/apiserver.crt - --tls-cert-file=/etc/kubernetes/pki/apiserver.crt root@controlplane:~# cat /etc/kubernetes/manif..

Cluster Maintenance 1) OS Upgrades 2) Cluster Upgrade Process 3) Backup and Restore Methods 01. We have a working kubernetes cluster with a set of applications running. Let us first explore the setup. How many deployments exist in the cluster? ask : 2 root@controlplane:~# kubectl get deployments NAME READY UP-TO-DATE AVAILABLE AGE blue 3/3 3 3 105s red 2/2 2 2 105s 02. What is the version of ETC..

Cluster Maintenance 1) OS Upgrades 2) Cluster Upgrade Process 3) Backup and Restore Methods 01. This lab tests your skills on upgrading a kubernetes cluster. We have a production cluster with applications running on it. Let us explore the setup first. What is the current version of the cluster? ask : v1.19.0 root@controlplane:~# kubectl get nodes NAME STATUS ROLES AGE VERSION controlplane Ready ..