Nurlan199206

https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/
https://www.cisecurity.org/cis-benchmarks
https://training.linuxfoundation.org/certification/certified-kubernetes-security-specialist/
https://kubernetes.io/docs/tutorials/security/seccomp/
https://kubernetes.io/docs/tutorials/security/seccomp/#create-a-pod-with-a-seccomp-profile-for-syscall-auditing
https://kubernetes.io/docs/tasks/inject-data-application/distribute-credentials-secure/#define-container-environment-variables-using-secret-data
https://kubernetes.io/docs/concepts/containers/runtime-class/

seccomp - ПОВТОРИТЬ!
AppArmor - ПОВТОРИТЬ!

Nurlan199206

sudo sh -c 'echo "deb http://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main" > /etc/apt/sources.list.d/pgdg.list'

wget -qO- https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo tee /etc/apt/trusted.gpg.d/pgdg.asc &>/dev/null

sudo apt update -y


apt install postgresql-15

service postgresql stop 

Nurlan199206

helm install redis . --namespace=test
helm get values redis --namespace=test
helm ls --namespace=test
helm repo search redis
helm get manifest mongo


helm repo add camunda https://helm.camunda.io
helm repo update
helm pull camunda/camunda-platform - скачать из репозитория на локальный сервер.

Nurlan199206

created >= "2022-01-01 09:00" AND created <= "2022-09-30 09:00" AND updated >= "2022-01-01 09:00" AND updated <= "2022-09-30 09:00" 

Nurlan199206

useful resources: https://github.com/ascode-com/wiki/tree/main/certified-kubernetes-administrator

alias ll='ls -l'
alias kcr='kubectl create'
alias ka='kubectl apply -f'
alias k=kubectl
alias kg='kubectl get'
alias ke='kubectl edit'
alias kd='kubectl describe'
alias kdd='kubectl delete'

Nurlan199206

1. файловая система ext4 не поддерживается, необходимо использовать например xfs
2. корневой раздел не поддерживается, необходимо использовать например раздел /mnt
========================================================================================
192.168.0.155 minio1.nurlan.kz
192.168.0.156 minio2.nurlan.kz
192.168.0.157 minio3.nurlan.kz
192.168.0.158 minio4.nurlan.kz

mkdir -p /mnt/disk{1..4}/minio

Nurlan199206

root@backup:/home/nizimbetov# fdisk /dev/sdb

Welcome to fdisk (util-linux 2.34).
Changes will remain in memory only, until you decide to write them.
Be careful before using the write command.

The old LVM2_member signature will be removed by a write command.

Device does not contain a recognized partition table.
Created a new DOS disklabel with disk identifier 0x73e02a73.

Nurlan199206

-----------------------/etc/sysctl.conf---------------------------
net.ipv4.ip_forward = 1
net.ipv6.conf.default.forwarding = 1
net.ipv6.conf.all.forwarding = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.all.send_redirects = 0
-------------------------------------------------------------------
then sysctl -p

Nurlan199206

1. Install Kafka

   cd /opt
   curl -O http://www.gtlib.gatech.edu/pub/apache/kafka/0.11.0.0/kafka_2.11-0.11.0.0.tgz
   tar xvzf kafka_2.11-0.11.0.0.tgz
   ln -s kafka_2.11-0.11.0.0/ kafka

2. Edit /usr/lib/systemd/system/kafka-zookeeper.service

Nurlan199206

[Unit]
Description=Zookeeper Daemon
Documentation=http://zookeeper.apache.org
Requires=network.target
After=network.target

[Service]    
Type=forking
WorkingDirectory=/opt/zookeeper
User=root