- Allow port input on 443 fo the azure instance
- Grab the cluster conf (.kube/config) to the local machine
- Install kubectl on the local machine
- Make sure you can access the cluster
- On local, run kubectl proxy (this is specific to do port forwarding for the dashboard itself)
- Connect to URL:
- Get the token to use for logging in: kubectl -n kube-system describe secret $(kubectl -n kube-system get secret | grep admin-user | awk '{print $1}')
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| apiVersion: apps/v1 | |
| kind: DaemonSet | |
| metadata: | |
| name: kubelet-cri-o-kata-cleanup | |
| namespace: kube-system | |
| spec: | |
| selector: | |
| matchLabels: | |
| name: kubelet-cri-o-kata-cleanup |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: Pod | |
| metadata: | |
| annotations: | |
| io.kubernetes.cri-o.TrustedSandbox: "false" | |
| name: ubuntu-pod-untrusted | |
| spec: | |
| containers: | |
| - name: ubuntu | |
| image: "ubuntu:14.04" |
sudo journalctl --rotate && sudo journalctl --vacuum-time=1seconds
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Title: Kata Flow | |
| participant CRI | |
| participant CRIO | |
| participant Kata Runtime | |
| participant virtcontainers | |
| participant hypervisor | |
| participant agent | |
| participant shim | |
| participant proxy | |
| # |
161c161
< CONFIG_CGROUP_RDMA=y
---
> # CONFIG_CGROUP_RDMA is not set
356d355
< CONFIG_BLK_MQ_RDMA=y
736d734
< # CONFIG_SMC is not set
root@eernstworkstation:/var/run/docker/netns# iptables-save
*nat :PREROUTING ACCEPT [1:60] :INPUT ACCEPT [1:60] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :DOCKER_OUTPUT - [0:0] :DOCKER_POSTROUTING - [0:0] -A OUTPUT -d 127.0.0.11/32 -j DOCKER_OUTPUT
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| sudo crictl runs ./sandbox_config.json | |
| sudo crictl create db1409f8ef944cd2a2cb07 container_bad.json sandbox_config.json | |
| sudo crictl sandboxes | |
| sudo crictl ps |
The directions below are specific to an Ubuntu 16.04 host system equipped with a GeForce GTX 550 Ti graphics card. While the process should be the same, YMMV.
- Make sure your system supports IOMMU groups
todo -- get directions from SRIOV page