VirtualTam's bookmarks

1. Building a Kubernetes Home Lab on the Raspberry Pi 2024-05-28

   tags: cryptography/certificate-authority, distributed-system, linux/container, linux/container/kubernetes, network/dns, raspberry-pi, self-hosting

   [ permalink ]

   1. Architecture & Roadmap
   2. Setup Kubernetes Management Node and Private Certificate Authority
   3. Configuring a Multi-Architecture Build Process
   4. Local DNS Services
2. Kubectl Cheat Sheet 2023-07-12

   tags: command-line, linux/container/kubernetes, programming/json

   [ permalink ]

   • How to filter pods by partial name
   • Field Selectors
   • JSONPath support
   • How to Make Kubectl Jsonpath Output On Separate Lines
   • Use Port Forwarding to Access Applications in a Cluster
3. HAProxy Data Plane API 2021-11-01

   tags: consul, linux/container, linux/container/kubernetes, network/http, network/http-server/haproxy, programming/api

   [ permalink ]

   • https://www.haproxy.com/blog/new-haproxy-data-plane-api/
   • https://www.haproxy.com/blog/announcing-haproxy-data-plane-api-2-4/
   • https://www.haproxy.com/blog/consul-service-discovery-for-haproxy/
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/README.md
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/AWS.md
   • https://github.com/haproxytech/dataplaneapi/blob/master/discovery/CONSUL.md
4. K8s at Home | Helm charts for home Kubernetes usage 2021-05-25

   tags: linux/container/docker, linux/container/kubernetes, linux/container/kubernetes/helm

   [ permalink ]

   • https://github.com/k8s-at-home/charts
5. pixie-labs/pixie: Instant Kubernetes-Native Application Observability 2021-05-05

   tags: linux/container, linux/container/kubernetes, linux/kernel/ebpf, observability, observability/tracing

   [ permalink ]

   • https://pixielabs.ai/
6. Kubernetes basic authentication with Traefik - Stack Overflow 2020-12-21

   tags: linux/container/kubernetes, network, network/http, network/reverse-proxy, security/authentication

   [ permalink ]
7. Docker and Kubernetes userland proxies, versus exposing wide port ranges 2020-01-24

   tags: linux/container, linux/container/docker, linux/container/kubernetes, network, network/tcp, network/udp, performance

   [ permalink ]

   Docker:

   • https://github.com/moby/moby/issues/9021
   • https://github.com/moby/moby/issues/11185
   • https://github.com/moby/moby/issues/11185#issuecomment-245983651
   • https://github.com/moby/moby/issues/19017
   • https://github.com/docker/for-mac/issues/2670#issuecomment-372365274

   Kubernetes:

   • https://github.com/kubernetes/kubernetes/issues/1802
   • https://github.com/kubernetes/kubernetes/issues/23864
   • https://github.com/kubernetes/kubernetes/issues/23864#issuecomment-387070644

   Disabling userland proxy:

   • https://github.com/moby/moby/issues/5618
   • https://github.com/moby/moby/issues/14856
   • https://github.com/moby/moby/issues/11185#issuecomment-129085898

   Threads:

   • https://stackoverflow.com/questions/28717464/docker-expose-all-ports-or-range-of-ports-from-7000-to-8000
   • https://www.percona.com/blog/2016/02/05/measuring-docker-cpu-network-overhead/
   • https://forums.docker.com/t/exposing-large-range-of-ports-is-not-viable/20127/5
8. How To Create a Kubernetes Cluster Using Kubeadm on Ubuntu 18.04 | DigitalOcean 2019-09-03

   tags: distributed-system/cluster, linux, linux/container/docker, linux/container/kubernetes, linux/ubuntu

   [ permalink ]
9. All the Pretty Little Ponies - My Little Cluster | Carolyn Van Slyck 2019-09-02

   tags: distributed-system/cluster, intel, linux/container/docker, linux/container/kubernetes, pony, video

   [ permalink ]
10. API Gateways and Service Meshes: Opening the Door to Application Modernisation 2019-07-15

    tags: consul, envoy, linux/container/docker, linux/container/kubernetes, network/http, network/proxy, programming/api

    [ permalink ]
11. Kubernetes-native microservices API gateway: Ambassador 2019-07-15

    tags: envoy, linux/container/docker, linux/container/kubernetes, network, network/http, network/proxy, network/transport-layer-security

    [ permalink ]

    • https://blog.getambassador.io/envoy-vs-nginx-vs-haproxy-why-the-open-source-ambassador-api-gateway-chose-envoy-23826aed79ef
    • https://docs.microsoft.com/en-us/azure/architecture/patterns/sidecar
    • https://www.getambassador.io/docs
12. helm-secrets: a helm plugin that helps managing secrets with Git workflow 2019-06-18

    tags: cryptography/pgp, linux/container/kubernetes, linux/container/kubernetes/helm, programming/yaml, secret, security, security/password

    [ permalink ]

    • https://github.com/helm/helm/issues/2196
    • https://github.com/mozilla/sops
    • https://medium.com/faun/helm-charts-for-more-complex-projects-and-how-to-secure-them-a1dfde804226
    • https://developer.epages.com/blog/tech-stories/kubernetes-deployments-with-helm-secrets/
    • https://lab.getbase.com/helm-secrets-a-missing-piece-in-kubernetes/
13. sops: Secrets management stinks, use some sops! 2019-06-18

    tags: cryptography/encryption, cryptography/pgp, gpg, linux/container/kubernetes, programming/json, programming/yaml, secret, security

    [ permalink ]

    • https://godoc.org/go.mozilla.org/sops
    • https://jve.linuxwall.info/blog/index.php?post/2015/10/01/Introducing-Sops%3A-an-editor-of-encrypted-file-that-uses-AWS-KMS-and-PGP
14. Kubernetes the Not So Hard Way With Ansible - Ingress with Traefik 2019-04-19

    tags: configuration-management/ansible, distributed-system/cluster, linux/container/kubernetes, network, network/firewall, network/http, network/http-server/traefik, network/transport-layer-security

    [ permalink ]

    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-network-policies/
    • https://www.tauceti.blog/post/kubernetes-the-not-so-hard-way-with-ansible-the-basics/
15. The Horrors of Upgrading Etcd Beneath Kubernetes 2019-04-16

    tags: cloud, data, distributed-system/cluster, etcd, linux/container, linux/container/kubernetes

    [ permalink ]
16. Prometheus Operator: create/configure/manage Prometheus clusters atop Kubernetes 2019-04-03

    tags: cloud, linux/container/kubernetes, observability, observability/time-series/prometheus

    [ permalink ]

    • https://coreos.com/operators/prometheus/docs/latest/
17. k3s - Lightweight Kubernetes | k3s 2019-03-05

    tags: arm, linux/container, linux/container/docker, linux/container/kubernetes

    [ permalink ]

    • https://github.com/rancher/k3s
18. Pimp my Kubernetes Shell – ITNEXT 2019-02-19

    tags: linux/container/docker, linux/container/kubernetes, programming/shell, programming/shell/zsh, prompt

    [ permalink ]

    • https://ahmet.im/blog/kubectl-aliases/
    • https://github.com/ahmetb/kubectx
    • https://github.com/jonmosco/kube-ps1
    • https://github.com/GoogleContainerTools/krew
19. Using Compose to go from Docker to Kubernetes (1/2) 2019-02-19

    tags: linux/container/docker, linux/container/docker-compose, linux/container/kubernetes

    [ permalink ]

    • http://kompose.io/
20. Talos - a modern Linux distribution designed to be secure, immutable, and minimal. 2019-02-18

    tags: linux, linux/container/docker, linux/container/kubernetes

    [ permalink ]

    • https://github.com/autonomy/talos