k8s

Tutorials

Meetings with Michal Jakubowicz

Explore

  • Explore ability to scan for logs faster

Operators

Notes

  • lifecycles - run commands after and before
  • find controller and you will find debug info

Generating certificates

https://kubernetes.io/docs/tasks/administer-cluster/certificates/

generate ca

./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass

generate keys

./easyrsa --subject-alt-name="IP:192.168.88.88,"\
"IP:192.168.88.88,"\
"IP:31.179.161.6,"\
"DNS:kubernetes,"\
"DNS:k8s.at.hsp.sh"\
--days=10000 \
build-server-full server nopass

Log

kubectl get all -A
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces
kubectl describe certificate.cert-manager.io/tls-rancher-ingress -n cattle-system
kubectl delete -f outline.k8s.yaml
kubectl delete Secrets outline-cert-kh97h
kubectl logs replicaset.apps/cert-manager-cert-manager-5b8995bdc6 -n cert-manager --follow
kubens                                                                                                          # namespace
kubectx                                                                                                         # cluster
kubectl get rc --all-namespaces
kubectl explain Deployment.spec.template.spec.containers
kubectl apply -f outline.k8s.yaml

k9s

export PGMASTER=$(kubectl get pods -o jsonpath={.items..metadata.name} -l application=spilo,cluster-name=acid-minimal-cluster,spilo-role=master -n default)
export PGPASSWORD=$(kubectl get secret postgres.acid-minimal-cluster.credentials.postgresql.acid.zalan.do -o 'jsonpath={.data.password}' | base64 -d)
-o: output format
-l: selector

#adding Secret
echo -n "51K8dxKBW7TJYNdbUsimlojLw7AQqLwB" | base64 -w 0
b6251043-145d-4731-bc65-258252a24558