k8s
Tutorials
Meetings with Michal Jakubowicz
Explore
- Explore ability to scan for logs faster
Links
Notes
- lifecycles - run commands after and before
- find controller and you will find debug info
Generating certificates
https://kubernetes.io/docs/tasks/administer-cluster/certificates/
generate ca
./easyrsa --batch "--req-cn=${MASTER_IP}@`date +%s`" build-ca nopass
generate keys
./easyrsa --subject-alt-name="IP:192.168.88.88,"\
"IP:192.168.88.88,"\
"IP:31.179.161.6,"\
"DNS:kubernetes,"\
"DNS:k8s.at.hsp.sh"\
--days=10000 \
build-server-full server nopass
Log
kubectl get all -A
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces
kubectl describe certificate.cert-manager.io/tls-rancher-ingress -n cattle-system
kubectl delete -f outline.k8s.yaml
kubectl delete Secrets outline-cert-kh97h
kubectl logs replicaset.apps/cert-manager-cert-manager-5b8995bdc6 -n cert-manager --follow
kubens # namespace
kubectx # cluster
kubectl get rc --all-namespaces
kubectl explain Deployment.spec.template.spec.containers
kubectl apply -f outline.k8s.yaml
k9s
export PGMASTER=$(kubectl get pods -o jsonpath={.items..metadata.name} -l application=spilo,cluster-name=acid-minimal-cluster,spilo-role=master -n default)
export PGPASSWORD=$(kubectl get secret postgres.acid-minimal-cluster.credentials.postgresql.acid.zalan.do -o 'jsonpath={.data.password}' | base64 -d)
-o: output format
-l: selector
#adding Secret
echo -n "51K8dxKBW7TJYNdbUsimlojLw7AQqLwB" | base64 -w 0
a102cd28-e3a2-462a-a0b5-861e3d0620a8