Jérôme Petazzoni
95ce343fd0
✨ Proofpoint May session (20 hours over 4 days)
2022-05-08 18:40:07 +02:00
Jérôme Petazzoni
9ed00c5da1
⏫ Update DOKS version
2022-05-07 11:36:01 +02:00
Jérôme Petazzoni
b4b67536e9
⌚ ️Add retry logic for linode provisioning
...
It looks like Linode now enforces something like 10 requests / 10 seconds.
We need to add some retry logic when provisioning more than 10 VMs.
2022-05-03 11:33:12 +02:00
Jérôme Petazzoni
52ce402803
♻️ Switch to official FRR images; disable NHT
...
We're now using an official image for FRR.
Also, by default, BGPD will accept routes only if their
next-hop is reachable. This relies on a mechanism called
NHT (Next Hop Tracking). However, when we receive routes
from Kubernetes clusters, the peers usually advertise
addresses that we are not directly connected to. This
causes these addresses to be filtered out (unless the
route reflector is running on the same VPC or Layer 2
network as the Kubernetes nodes). To accept these routes
anyway, we basically disable NHT, by considering that
nodes are reachable if we can reach them through our
default route.
2022-04-12 22:17:27 +02:00
Jérôme Petazzoni
7076152bb9
♻️ Update sealed-secrets version and install instructions
2022-04-12 20:46:01 +02:00
Jérôme Petazzoni
39eebe320f
➕ Add CA injector content
2022-04-12 18:24:41 +02:00
Jérôme Petazzoni
97c563e76a
♻️ Don't use ngrok for Tilt
...
ngrok now requires an account to serve HTML content.
We won't use ngrok anymore for the Tilt UI
(and we'll suggest to use a NodePort service instead,
when running in a Pod).
2022-04-11 21:08:54 +02:00
Jérôme Petazzoni
4a7b04dd01
♻️ Add helm install command for metrics-server
...
Don't use it yet, but have it handy in case we want to switch.
2022-04-08 21:06:19 +02:00
Jérôme Petazzoni
8b3f7a9aba
♻️ Switch to SIG metrics-server chart
2022-04-08 20:36:07 +02:00
Jérôme Petazzoni
f9bb780f80
⏫ Bump up DOK version
2022-04-08 20:35:53 +02:00
Jérôme Petazzoni
94545f800a
📃 Add TOC item to nsplease
2022-04-06 22:01:22 +02:00
Jérôme Petazzoni
5896ad577b
⏫ Bump up k8s version on Linode
2022-03-31 10:59:09 +02:00
Denis Laxalde
030f3728f7
Update link to "Efficient Node Heartbeats" KEP
...
Previous file was moved in commit 7eef794bb5
2022-03-28 16:52:32 +02:00
Jérôme Petazzoni
913c934dbb
🔗 Add shortlinks to March 2022 training
2022-03-22 08:25:24 +01:00
Jérôme Petazzoni
b6b718635a
♻️ Switch diagram around
2022-03-21 08:20:02 +01:00
Jérôme Petazzoni
a830d51e5e
➕ Add a couple more Kyverno policies with fancy preconditions
2022-03-16 19:14:45 +01:00
Cyril Mizzi
7af1a4cfbc
fix(slides.k8s.hpa-v2): update prometheus-adapter mapping rule
2022-03-16 17:50:57 +01:00
Cyril Mizzi
4f6b4b0306
fix(slides.k8s.hpa-v2): update namespace for prometheus-adapter
2022-03-16 17:50:57 +01:00
Jérôme Petazzoni
888aad583e
♻️ Update YAML manifests for dashboard
...
Include namespace (to work around 'helm template' bug).
Enable metrics scraper (because metrics are fun).
2022-03-08 18:14:42 +01:00
Jérôme Petazzoni
f7c1e87a89
🐛 Add missing content-type header in livedns API call
2022-03-08 16:42:58 +01:00
Jérôme Petazzoni
2e4e6bc787
Merge pull request #608 from nchauvat/patch-1
...
fix typo in definition of access modes
2022-02-10 16:14:39 +01:00
nchauvat
1b704316c8
fix typo in definition of access modes
...
IIRC https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes it is the PVClaim that lists the access modes it requires and the PV that lists the access modes it supports.
2022-02-10 12:12:36 +01:00
Jérôme Petazzoni
2e6e5425d0
➕ Add platform check Dockerfile
2022-02-04 08:30:54 +01:00
Jérôme Petazzoni
5e2aac701e
♻️ Add cgroup v2 content
2022-02-03 18:58:21 +01:00
Jérôme Petazzoni
bb19d525e9
➕ Merge Buildkit content
2022-02-03 17:57:35 +01:00
Jérôme Petazzoni
8ca6c5ba40
🏭 ️ Support multiple Terraform configurations
...
Historically, we only support one Terraform configuration,
through the "openstack-tf" infraclass. With these changes,
we support multiple Terraform configurations, including
(at this point) "openstack" and "oci" (Oracle Cloud).
Existing infra files that use INFRACLASS=openstack-tf
should be changed as follows:
INFRACLASS=terraform
TERRAFORM=openstack
2022-02-03 07:59:56 +01:00
Jérôme Petazzoni
e1290c5b84
➕ Add some info about profiles and .env
2022-01-31 19:48:12 +01:00
Jérôme Petazzoni
2c2574fece
♻️ Improve PriorityClass slides
2022-01-27 13:14:26 +01:00
Jérôme Petazzoni
5c96b40bbd
🐞 Fix kustomize completion
2022-01-27 13:14:16 +01:00
Jérôme Petazzoni
5aa20362eb
♻️ Update healthcheck content
2022-01-27 11:23:43 +01:00
Jérôme Petazzoni
a01fecf679
♻️ Bump Consul version and move SA at the beginning of the YAML
...
It's a tiny bit easier to run through the YAML when it starts with
the ServiceAccount, I find.
2022-01-27 10:40:37 +01:00
Jérôme Petazzoni
b75d6562b5
🏭 ️ Rewrite kubectl-run chapter
2022-01-27 10:36:52 +01:00
Jérôme Petazzoni
7f5944b157
📍 Correctly pin+hold package versions with APT preferences
2022-01-27 08:59:12 +01:00
Jérôme Petazzoni
21287d16bf
♻️ Switch to containerd
2022-01-26 21:05:01 +01:00
Jérôme Petazzoni
9434b40b58
🐞 Fix a couple of search-and-replace mistakes
2022-01-23 10:39:54 +01:00
Jérôme Petazzoni
b59f5dd00d
Merge pull request #606 from sebgl/fix-pvc-link
...
Update link to the PersistentVolumeClaimBinder design doc
2022-01-23 09:08:11 +01:00
sebgl
d8ad0021cc
Update link to the PersistentVolumeClaimBinder design doc
...
It looks like that doc has been moved elsewhere. This commit updates the link to (what I think is) the intended page.
2022-01-21 10:34:35 +01:00
Jérôme Petazzoni
8dbd6d54a0
🐞 Add warning about initial_node_count
2022-01-20 11:49:28 +01:00
Jérôme Petazzoni
b454749e92
🐞 Add info about Terraform provider version pinning
2022-01-20 09:29:11 +01:00
Jérôme Petazzoni
9a71d0e260
📃 Add gcloud auth application-default login
2022-01-19 11:24:00 +01:00
Jérôme Petazzoni
25e844fdf4
⏫ Bump up version numbers in upgrade labs
2022-01-18 12:16:46 +01:00
Jérôme Petazzoni
c40f4f5f2a
📝 Update ingress chapter
...
Replace cheese images with jpetazz/color.
Add details on GKE Ingress and clarify cost for cloud ingress.
Mention that Traefik canary v1 is obsolete.
2022-01-18 12:09:33 +01:00
Jérôme Petazzoni
cfa89b3ab5
📃 Update AJ's affiliation
2022-01-17 19:18:09 +01:00
Jérôme Petazzoni
a10cf8d9c3
➕ Add GKE networking; kubernetes resource creation in TF
2022-01-17 18:18:49 +01:00
Jérôme Petazzoni
749e5da20b
➕ Add command to remove a DNS record
2022-01-17 11:08:11 +01:00
Jérôme Petazzoni
69c7ac2371
➕ Add Terraform workshop with GKE and node pools
2022-01-17 00:00:49 +01:00
Jérôme Petazzoni
de0ad83686
➕ Add quick intro to demo apps
2022-01-16 16:01:58 +01:00
Jérôme Petazzoni
f630f08713
🔧 Uniformize labels in rainbow demo app
2022-01-16 16:01:03 +01:00
Jérôme Petazzoni
920a075afe
🔧 Pin old cluster to an even older version
2022-01-15 18:36:16 +01:00
Jérôme Petazzoni
a47c51618b
🔧 Improve GKE config to spread across multiple locations
...
GCP quotas are fairly limited (on my account, I can only
use 8 public IP addresses per zone, which means that I cannot
deploy many public clusters in a single zone). I tried to
use private clusters, but that causes other problems.
This refactoring makes it possible to spread clusters
across multiple zones. Since I have access to 20+ zones
in Europe and 20+ zones in the US, this lets me create a
lot of public clusters and simplifies the module quite a bit.
2022-01-14 12:30:55 +01:00