James Sturtevant jsturtevant

General kubernetes networking info

https://medium.com/@tao_66792/how-does-the-kubernetes-networking-work-part-1-5e2da2696701

Docker Cidr

In GKE this is overridden as that network is not used in kubernetes: set docker0 cidr to private ip address range to avoid conflict with cbr0 cidr range

Links to the Kubenet where CBR0 configured:

Default Connection limit

Default connection limit has a long history. The Default connection limit has been much higher since asp.net 4.0 in where it was updated to 12*number of threads. In 4.6.1 and higher it is auto configuration for you to MaxInt (https://referencesource.microsoft.com/#System.Web/HttpRuntime.cs,1200). Given the long history of the value changing from one framework to another (and if you on different platform you will get the default value of 2) it is recommended to manually set it so you have have control, even if you set it to MaxInt.

If you want to modify it to something that is different there are some articles here on what changes it affects: https://docs.microsoft.com/en-us/dotnet/framework/network-programming/managing-connections A good article for grasping the implications of modifing that value is: https://docs.microsoft.com/en-us/archive/blogs/jpsanders/understanding-maxservicepointidletime-and-defaultconnectionlimit

other settings

In addition, it is suggested to l

General Info

https://kubernetes.io/docs/tasks/configure-pod-container/configure-pod-configmap/#understanding-configmaps-and-pods https://kubernetes.io/docs/concepts/configuration/secret/#using-secrets

Rolling updates for configs and secrets

overview of options - https://sanderknape.com/2019/03/kubernetes-helm-configmaps-changes-deployments/ kustomize - https://kubectl.docs.kubernetes.io/pages/app_management/secrets_and_configmaps.html#configmaps-from-files helm - https://helm.sh/docs/howto/charts_tips_and_tricks/#automatically-roll-deployments

Getting started:

Docker files:

	apiVersion: cluster.x-k8s.io/v1alpha3
	kind: Cluster
	metadata:
	name: ${CLUSTER_NAME}
	namespace: default
	spec:
	clusterNetwork:
	pods:
	cidrBlocks:
	- 2001:1234:5678:9abd::/64

	worker_processes 1;
	events {
	worker_connections 1024;
	}
	http {
	include mime.types;
	default_type application/octet-stream;
	sendfile on;
	#keepalive_timeout 0;
	keepalive_timeout 65;

	#https://stackoverflow.com/a/47769755/697126

	$spn = Get-AzureADServicePrincipal -SearchString "yourSpName"
	$group = Get-AzureADGroup -SearchString "yourGroupName"
	Add-AzureADGroupMember -ObjectId $($group.ObjectId) -RefObjectId $($spn.ObjectId)

	$dt = (Get-Date).ToString("MM-dd-yyyy HH:mm:ss")


	$events=(.\kubectl.exe --kubeconfig='config' get events -o json \| ConvertFrom-Json).items

	Write-output "processing events"
	ForEach ($event in $events) {
	Write-output $event.reason
	if ($event.reason -eq "Killing"){
	#$message="found event at $dt"

	ssh -L 8888:localhost:10350 <remote-ip>

	# now browse to localhost:8888