Latest News
Read all latest blog posts
Learn AWS EKS Kubernetes cluster and devops in AWS (Part 1)
Learn AWS EKS Kubernetes cluster and devops in AWS (Part 1) Starting AWS EKS cluster manually in AWS web console
Read More
CKS serviceaccount
SesrviceAccount (SA) are namespaces SA “default” in every namespace automatically mounted to a pod can be used to talk to Kubernetes API k create sa accessor k run accessor --image=nginx:alpine -o yaml --dry-run=client > accessor.
Read More
Kubernetes RBAC
There are namespaced and non namespaced resources in Kubernetes. Role (namespaced) -> RoleBinding ClusterRole (non namespaced) -> ClusterRoleBinding Be extra careful with ClusterRole and ClusterRoleBinding because these are not only assigned to currently existing namespaces but also to namespaces created in future.
Read More
Verify binaries
One has to compare the binary version which is currently running at the Kubernetes master and later on find out the PID of kubelet process.
Read More
cks-benchmakring.md
CSI Kubernetes Benchmark 1.6.0 (at the time) Make sure to check CSI vs.
Read More
Protect Kubernetes node metadata
Deny all traffic to google’s metadata server Study this rule carefully - it takes time to understand it :)
Read More
Kubernetes dashboard
Kubectl proxy creates a proxy server between localhost and the Kubernetes API Server uses connection as configured in the kubeconfig Run kubectl proxy command at your master node cks-master Kubectl port-forward Install kubenretes dashboard kubectl apply -f https://raw.
Read More