Tag Archives: Kubernetes

Prometheus: Kubernetes endpoints monitoring with blackbox-exporter
0 (0)

11 December 2022

The blackbox-exporter is an exporter that can monitor various endpoints – URLs on the Internet, your LoadBalancers in AWS, or Services in a Kubernetes cluster, such as MySQL or PostgreSQL databases. Blackbox Exporter can give you HTTP response time statistics, response codes, information on SSL certificates, etc. What are we going to do in this… Read More: Prometheus: Kubernetes endpoints monitoring with blackbox-exporter0 (0) »

Kubernetes: ServiceAccount from AWS IAM Role for Kubernetes Pod
0 (0)

11 December 2022

We have Grafana Loki for logs and need to connect an AWS IAM Role with AWS IAM Policy, which gives access to an AWS S3 bucket where Loki’s chunks and indexes will be stored. IAM roles for Kubernetes Pods will work in the same way as IAM roles to EC2 instances: a process inside a… Read More: Kubernetes: ServiceAccount from AWS IAM Role for Kubernetes Pod0 (0) »

Pritunl: running VPN in Kubernetes
0 (0)

5 October 2022

Pritunl is a VPN server with a bunch of advanced security and access control features. In fact, it is just a wrapper over OpenVPN, adding such Access Control Lists to it in the form of Organizations, users, and routes. The task is to deploy a Pritunl test instance in Kubernetesб so we can take a closer… Read More: Pritunl: running VPN in Kubernetes0 (0) »

Apache Druid: PostgreSQL as Metadata storage, and replace ZooKeeper with Kubernetes Extensions
0 (0)

5 October 2022

We continue with a series of posts about Apache Druid. In the first part, we took a look at the Apache Druid itself – its architecture and monitoring, in the second part – we ran a PostgreSQL cluster and set up its monitoring. Next tasks: switch Druid to PostgreSQL as metadata storage instead of Apache Derby get… Read More: Apache Druid: PostgreSQL as Metadata storage, and replace ZooKeeper with… »

Kubernetes: Minikube, and a LoadBalancer in the Pending status
0 (0)

5 October 2022

After running Pritunl in Minikube, it is not possible to connect to the VPN: … 2022-10-03 13:50:32 TCP/UDP: Preserving recently used remote address: [AF_INET]194.168.3.100:1194 2022-10-03 13:50:32 UDP link local: (not bound) 2022-10-03 13:50:32 UDP link remote: [AF_INET]194.168.3.100:1194 … Check its Kubernetes Service: [simterm] $ kubectl -n pritunl-local get svc NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE… Read More: Kubernetes: Minikube, and a LoadBalancer in the Pending status0 (0) »

Apache Druid: overview, running in Kubernetes and monitoring with Prometheus
0 (0)

18 September 2022

Apache Druid is a columnar database, focused on working with large amounts of data, combining the features and benefits of Time-Series Database, Data Warehouse, and a search engine. The general task is to set up monitoring of the Druid cluster in Kubernetes, so at first, we will see what it is in general and how… Read More: Apache Druid: overview, running in Kubernetes and monitoring with Prometheus0… »

Kubernetes: Krew plugins manager, and useful kubectl plugins list
0 (0)

1 October 2021

One of the most valuable features of the kubectl utility is its plugins. Of course, there are things like Lens, widely used by developers who don’t like working in the terminal, or tools like k9s, but kubectl‘s plugins worth for a dedicated post. So, in this post, we will install Krew – kubectl‘s plugins manager,… Read More: Kubernetes: Krew plugins manager, and useful kubectl plugins list0 (0) »

Kubernetes: Helm – “x509: certificate signed by unknown authority”, and ServiceAccount for Pod
0 (0)

29 September 2021

We have Github runners in our AWS Elastic Kubernetes service cluster, that are used to build Docker images and deploy them with Helm or ArgoCD. On the first helm install run in a Github runner’s Pod, we are getting the “x509: certificate signed by unknown authority” error: [simterm] # helm –kube-apiserver=https://kubernetes.default.svc.cluster.local list Error: Kubernetes cluster unreachable:… Read More: Kubernetes: Helm – “x509: certificate signed by unknown authority”, and… »

AWS: Web Application Firewall overview, configuration, and its monitoring
0 (0)

19 July 2021

AWS WAF (Web Application Firewall) is an AWS service for monitoring incoming traffic to secure a web application for suspicious activity like SQL injections. Can be attached to an AWS Application LoadBalancer, AWS CloudFront distribution, Amazon API Gateway, and AWS AppSync GraphQL API. In case of finding any request that sits WAF’s rules, it will… Read More: AWS: Web Application Firewall overview, configuration, and its monitoring0 (0) »

Kubernetes: Deployment Strategies types, and Argo Rollouts
0 (0)

12 July 2021

One of the goals of the ArgoCD implementation in our project is to use new Deployment Strategies for our applications. In this post, we will observe deployment types in Kubernetes, how Deployment is working in Kubernetes and a quick example of the Argo Rollouts. Deployment Strategies and Kubernetes Let’s take a short overview of the… Read More: Kubernetes: Deployment Strategies types, and Argo Rollouts0 (0) »