This message, related to the development of the theme, only displays on the
localhost homepage to notify you of any important theme changes.
With this version, the theme has fully implemented static search using
lunr.js. That being said, a few modifications were necessary to implement this
feature.
To utilize this, or future version of Hugo Future Imperfect Slim, please make the following changes:
config.toml before [params]:...
disableLanguages = [""]
[outputs]
home = ["html", "json"]
[params]
...
Remove the underscore from all about and contact page file names:
_index.md --> index.md
Add layout = "about" or layout = "contact" to all of the files you just
just adjusted the file names for.
While I realize this is inconvenient, I hope that it is worth it to you in the long run. Thanks for using the theme, and feel free to submit issues as needed.
containers, packaging, programming, hacks, kubernetes, openshift, fedora, centos
Event Report for Kubernetes Bangalore Meetup
The Kubernetes Bangalore Meetup was organized at Arvind Internet on Feb 16th 2019. The agenda for the meetup was to teach Kubernetes to the beginners.
Dealing with apiserver in minikube can be tricky
If you want to provide extra flags to the kube-apiserver that runs inside minikube how do you do it? You can use the minikube’s --extra-config flag with apiserver.<apiserver flag>=<value>, for e.g. if you want to enable RBAC authorization mode you do it as follows:
Subpath Volume Mount could give you access to node
A volume mount CVE was discovered in Kubernetes 1.9 and older which allowed access to node file system using emptyDir volume mount using subpath. The official description goes as follows:
How wrong usage of persistent flags can burn you
If you are using cobra cmd line library for golang applications and it’s PersistentFlags and if you have a use case where you are adding same kind of flag in multiple places. You might burn your fingers in that case, if you keep adding it in multiple sub-commands without giving it a second thought. To understand what is really happening and why it is happening follow along.
Links and things to do while setting up older Dell Inspiron 1525
I have this old PC Dell Inspiron 1525 with 2GB RAM and 32 bit dual core processor and I wanted to install fedora on it, but I cam accross few problems which I am documenting for further reference.
Use this technique to add new node to the cluster without providing any certificates and without having to restart the kube-apiserver
Few days back I wrote a blog about adding new node to the cluster using the static token file. The problem with that approach is that you need to restart kube-apiserver providing it the path to the token file. Here we will see how to use the bootstrap token, which is very dynamic in nature and can be controlled by using Kubernetes resources like secrets.
Burnt by enabling PSPs on existing Kubernetes and wondering why everything still works
I enabled PodSecurityPolicy on a minikube cluster by appending PodSecurityPolicy to the apiserver flag in minikube like this:
My experience with CKA exam preparation
I passed CKA exam with 92% marks on 19th October 2018.
Learn how to disable the shortcut Ctrl + W altogether on your GNOME
I am about to attempt the CKA exam and it has a browser based terminal. And I am used to this terminal shortcut Ctrl + W which deletes a word. But the same shortcut in browser can close a tab. Since this exam is combination of both I am afraid I might close my exam tab while deleting a word in terminal. Now the only solution to this is disabling the shortcut in chrome. But turns out that the shortcut is hard coded in chrome.
Use this technique to add node to the cluster without providing any certificates
The setup here is created by following Kubernetes the Hard Way by Kelsey Hightower. So if you are following along in this then do all the setup till the step Bootstrapping the Kubernetes Worker Nodes. In this just don’t start the kubelet, start other services like containerd and kube-proxy.