ktsakalozos’s gists

ktsakalozos / gist:2090e63f052d32b18b7605f1c4b36c2f

Created February 20, 2018 11:22

I do not see it....

	root@ip-172-31-12-201:/home/ubuntu# /snap/kubelet/340/kubelet --help
	Usage of /snap/kubelet/340/kubelet:
	--address 0.0.0.0 The IP address for the Kubelet to serve on (set to 0.0.0.0 for all IPv4 interfaces and `::` for all IPv6 interfaces) (default 0.0.0.0)
	--allow-privileged If true, allow containers to request privileged mode.
	--alsologtostderr log to standard error as well as files
	--anonymous-auth Enables anonymous requests to the Kubelet server. Requests that are not rejected by another authentication method are treated as anonymous requests. Anonymous requests have a username of system:anonymous, and a group name of system:una

ktsakalozos / gist:415518c873c721b85749e92b8b1ef822

Created April 20, 2018 07:32

Scripts for ASP.NET delivery to K8s

	mkdir -p ~/workspace/dotnet
	cd ~/workspace/dotnet
	dotnet new razor -o HelloWorldAspNetCore
	cd HelloWorldAspNetCore
	dotnet run


	dotnet publish -c Release
	cd ~/workspace/dotnet/HelloWorldAspNetCore/
	cat ./Dockerfile

ktsakalozos / ports.csv

Last active February 15, 2019 12:44

Table with Ports

Por	Service	Access Restrictions
16443	API server	SSL encrypted. Clients need to present a valid password from a Static Password File.
10250	kubelet	Anonymous authentication is disabled. X509 client certificate is required.
10255	kubelet	Read only port for the Kubelet.
random	kube-proxy	One random port per hosted service is opened as we use --proxy-mode=userspace for compatibility reasons.

ktsakalozos / gist:d9a9dbac0401baf32795c3d21938d6ff

Created March 30, 2019 11:31

	HTTPS_PROXY=http://squid.internal:3128
	NO_PROXY="registry.jujucharms.com, .xip.io"

ktsakalozos / nfs-provisioner.yaml

Created April 22, 2019 14:55

	apiVersion: v1
	kind: ServiceAccount
	metadata:
	name: nfs-provisioner-dev
	---
	apiVersion: v1
	kind: Service
	metadata:
	labels:
	test.service: slow-file-storage-nfs-dev

ktsakalozos / traefik-ds.yaml

Created May 22, 2019 18:32

traefik deployment for MicroK8s

	---
	apiVersion: v1
	kind: ServiceAccount
	metadata:
	name: traefik-ingress-controller
	namespace: kube-system
	---
	kind: DaemonSet
	apiVersion: extensions/v1beta1
	metadata:

ktsakalozos / refresh-certs.sh

Last active October 9, 2023 01:47

Refresh MicroK8s Certs

	#!/bin/bash

	set -eu

	export SNAP_NAME="microk8s"
	export SNAP_DATA="/var/snap/microk8s/current/"
	export SNAP="/snap/microk8s/current/"

	export PATH="$SNAP/usr/sbin:$SNAP/usr/bin:$SNAP/sbin:$SNAP/bin:$PATH"
	source $SNAP/actions/common/utils.sh

ktsakalozos / gist:0791a68baec91970cb32fb90422599d1

Created April 4, 2022 08:43

MicroK8s status with core addons

	$ sudo microk8s.status --wait-ready
	microk8s is running
	high-availability: no
	datastore master nodes: 127.0.0.1:19001
	datastore standby nodes: none
	addons:
	enabled:
	ha-cluster # (core) Configure high availability on the current node
	disabled:
	community # (core) The community addons repository

ktsakalozos / gist:3a55097fc68503d5306db0effe396871

Created April 4, 2022 09:01

Enable community addons

	$ sudo microk8s.enable community
	Infer repository core for addon community
	Cloning into '/var/snap/microk8s/common/addons/community'...
	done.
	Community repository is now enabled
	$ sudo microk8s.status
	microk8s is running
	high-availability: no
	datastore master nodes: 127.0.0.1:19001
	datastore standby nodes: none

ktsakalozos / gist:6a665d7253bf41ce74ceb4185d2563ce

Last active April 4, 2022 09:26

Tree structure of the addons repository

	$ tree /var/snap/microk8s/common/addons/core
	/var/snap/microk8s/common/addons/core
	├── addons
	│ ├── community
	│ │ ├── disable
	│ │ └── enable
	│ ├── dashboard
	│ │ ├── dashboard.yaml
	│ │ ├── disable
	│ │ └── enable

Konstantinos Tsakalozos ktsakalozos