Posts
Prometheus Deployment Using Manifest
Get the Prometheus Kubernetes Manifests git clone https://github.com/techiescamp/kubernetes-prometheus Create a Namespace monitoring kubectl create namespace monitoring This namespace is set in the manifests
Create a ClusterRole nano clusterRole.yaml put this into the file
apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: prometheus rules: - apiGroups: [""] resources: - nodes - nodes/proxy - services - endpoints - pods verbs: ["get", "list", "watch"] - apiGroups: - extensions resources: - ingresses verbs: ["get", "list", "watch"] - nonResourceURLs: ["/metrics"] verbs: ["get"] --- apiVersion: rbac.
Posts
Zookeeper Deployment Using Manifest
We need to use a PodDisruptionBudget with an API version : policy/v1 apiVersion: policy/v1 kind: PodDisruptionBudget create multi document manifest : zookeeper.yaml
nano zookeeper.yaml put this modified content in file
apiVersion: v1 kind: Service metadata: name: zookeeper-headless labels: app: zookeeper spec: ports: - port: 2888 name: server - port: 3888 name: leader-election clusterIP: None selector: app: zookeeper --- apiVersion: v1 kind: Service metadata: name: zookeeper-service labels: app: zookeeper spec: ports: - port: 2181 name: client selector: app: zookeeper --- apiVersion: policy/v1 kind: PodDisruptionBudget metadata: name: zookeeper-pdb spec: selector: matchLabels: app: zookeeper maxUnavailable: 1 --- apiVersion: apps/v1 kind: StatefulSet metadata: name: zookeeper spec: selector: matchLabels: app: zookeeper serviceName: zookeeper-headless replicas: 3 updateStrategy: type: RollingUpdate podManagementPolicy: OrderedReady template: metadata: labels: app: zookeeper spec: affinity: podAntiAffinity: requiredDuringSchedulingIgnoredDuringExecution: - labelSelector: matchExpressions: - key: "app" operator: In values: - zookeeper topologyKey: "kubernetes.
Posts
Artemis Deployment Using Manifest
Create Multi Document Manifest nano deployment.yaml Please note image: docker.io/vromero/activemq-artemis:2.15.0 #### this version is no longer supported CHANGE THIS
put this in file
--- apiVersion: v1 kind: Secret metadata: name: artemis-activemq namespace: artemis labels: app: activemq-artemis type: Opaque data: artemis-password: "YXJ0ZW1pcw==" --- apiVersion: v1 kind: Service metadata: name: artemis-activemq namespace: artemis labels: app: activemq-artemis spec: ports: - name: http port: 8161 targetPort: http - name: core port: 61616 targetPort: core - name: amqp port: 5672 targetPort: amqp - name: jmx port: 9494 targetPort: jmxexporter - name: grpc port: 5050 targetPort: grpc selector: app: activemq-artemis --- apiVersion: v1 kind: ConfigMap metadata: name: artemis-activemq-cm namespace: artemis data: broker-00.
Posts
Research Artemis
Bibliography Deploying Apache Artemis as container Deploying Active-MQ in a Kubernetes cluster balchua artemis-ext-scaler ActiveMQ Artemis with Spring Boot on Kubernetes Deploying Apache Artemis as container
Helm Charts Activemq Artemis Helm activemq-artemis-helm activemq-artemis-helm
Posts
Research Grafana
Bibliography Tempo documentation Configuration Manifest Provision Grafana Provision dashboards and data sources utilitywarehouse grafana-manifests How To Set Up a Kubernetes Monitoring Stack with Prometheus, Grafana and Alertmanager on DigitalOcean Grafana configuration Install Grafana in Kubernetes Gerit Charts grafana prometueus How To Setup Grafana On Kubernetes Helm Charts DEPLOY GRAFANA How to setup Grafana on Kubernetes cluster using helm chart How to Setup Prometheus & Grafana on Kubernetes
Posts
Research Prometheus
Bibliography giantswarm prometheus prometheus-operator kube-prometheus How to Setup Prometheus Monitoring On Kubernetes Cluster Install Prometheus Operator with Grafana Cloud for Kubernetes Monitoring Your Apps in Kubernetes Environment with Prometheus A Beginner’s Guide to Using the Prometheus Operator prometheus-operator kube-prometheus Setup and Configure Prometheus Get started with Grafana and Prometheus Prometheus Setup Configure and Start Prometheus
Helm Charts How to Set Up Prometheus on Kubernetes with Helm Charts?
Posts
Research Zookeeper
Bibliography Kubernetes ZooKeeper Manifests Running ZooKeeper, A Distributed System Coordinator Docs » Tutorials » Stateful application » Zookeeper KUBERNETES STATEFULSET WITH ZOOKEEPER Running ZooKeeper, A Distributed System Coordinator kubernetes-zookeeper/manifests/zookeeper.yaml KUBERNETES STATEFULSET WITH ZOOKEEPER Kubernetes Zookeeper Cluster Setup/Configuration YAML no page First steps k8s deployment zookeeper cluster CAMEL ZOOKEEPER MASTER cppforlife zookeeper-release Public helm charts kubernetes-zookeeper Apache ZooKeeper packaged by Bitnami Sample/default values.yaml file for Zookeeper (v3.5 or v3.6) on Kubernetes Apache ZooKeeper packaged by Bitnami Apache ZooKeeper packaged by Bitnami
Posts
Research ElasticSearch With Manifests
elasticsearch02 | Working | https://github.com/scriptcamp/kubernetes-efk mkdir /using-manifests/ mkdir /using-manifests/elasticsearch02 Part1 Elsticsearch | https://github.com/scriptcamp/kubernetes-efk/tree/main/elasticsearch nano es-sts.yaml apiVersion: apps/v1 kind: StatefulSet metadata: name: es-cluster spec: serviceName: elasticsearch replicas: 3 selector: matchLabels: app: elasticsearch template: metadata: labels: app: elasticsearch spec: containers: - name: elasticsearch image: docker.elastic.co/elasticsearch/elasticsearch:7.5.0 resources: limits: cpu: 1000m requests: cpu: 100m ports: - containerPort: 9200 name: rest protocol: TCP - containerPort: 9300 name: inter-node protocol: TCP volumeMounts: - name: data mountPath: /usr/share/elasticsearch/data env: - name: cluster.
Posts
Research ElasticSearch Kibana Helm Install
https://spot.io/resources/kubernetes-architecture/kubernetes-tutorial-successful-deployment-of-elasticsearch/
Deploy ElasticSearch with Helm add Elastic Helm repository: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml helm repo add elastic https://helm.elastic.co Install Elastic by using the command: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml export ES_CLUSTER_NAME=MyElastic helm install ${ES_CLUSTER_NAME} elastic/elasticsearch Check the pod deployment: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl get pods --namespace=default -l app=elasticsearch-master -w By default, the ES Helm Package creates three master nodes that act as client, master, and data nodes. Each replica will thus have its persistent volume claim:
Posts
Research Elasticsearch TLS
Verified Failed Does not meet requirement Unverified Create & sign SSL/TLS certificates with openssl
How to create a valid self signed SSL Certificate?
https://www.elastic.co/guide/en/cloud-on-k8s/master/k8s-tls-certificates.html
https://blog.searce.com/deploying-a-secure-elasticsearch-environment-on-kubernetes-deb0f981ddf5 https://thomasdecaux.medium.com/configure-transport-layer-security-tls-ssl-for-an-elasticsearch-cluster-deployed-with-helm-on-fbbac2325a00 https://www.lisenet.com/2022/deploy-elasticsearch-and-kibana-on-kubernetes-with-helm/ https://blog.pythian.com/how-to-secure-your-elastic-stack-plus-kibana-logstash-and-beats/
https://www.gooksu.com/2022/07/mounting-certificates-cas-for-elasticsearch-pods-in-k8s-for-custom-configurations-eck/
https://opendistro.github.io/for-elasticsearch-docs/old/0.9.0/docs/security/generate-certificates/
https://www.pimwiddershoven.nl/entry/deploy-a-secure-instance-of-elasticsearch-on-kubernetes
https://docs.search-guard.com/latest/search-guard-kubernetes-helm
http://man.hubwiz.com/docset/ElasticSearch.docset/Contents/Resources/Documents/www.elastic.co/guide/en/elasticsearch/reference/current/configuring-tls.html
https://www.sobyte.net/post/2022-07/k8s-elk/
kubectl get sc // get storage class
https://opster.com/guides/elasticsearch/security/elasticsearch-cluster-security/
https://www.golinuxcloud.com/enable-https-ssl-secure-elasticsearch-linux/
https://docs.search-guard.com/7.x-47/generating-tls-certificates
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/dx-platform-on-premise/21-3/installing/reference-information/Update-the-tls-certs-for-dx-platform-ingresses.html
https://documentation.sas.com/doc/en/sasadmincdc/v_034/callogging/p1lpu39g0ynczrn1jmcz4p49x1w6.htm
https://unofficial-kubernetes.readthedocs.io/en/latest/tasks/tls/managing-tls-in-a-cluster/
https://devm.io/kubernetes/kubernetes-container-elasticsearch
https://blog.opstree.com/2022/09/27/securing-k8s-traffic-with-cert-manager-amp-lets-encrypt/
https://alexmarquardt.com/2018/11/05/security-tls-ssl-pki-authentication-in-elasticsearch/
https://www.velotio.com/engineering-blog/managing-tls-certificate-for-kubernetes-admission-webhook
https://enterprise-k8s.arcgis.com/en/latest/deploy/system-requirements.htm
https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-22-04
https://cloud.google.com/architecture/deploying-migrating-elastic-cloud-kubernetes-to-google-cloud
https://itnext.io/automated-tls-with-cert-manager-and-letsencrypt-for-kubernetes-7daaa5e0cae4
https://docs.gitlab.com/runner/configuration/tls-self-signed.html
https://dok.community/blog/how-to-deploy-elasticsearch-on-kubernetes/
https://blog.clairvoyantsoft.com/secure-elasticsearch-communication-bdee1bbe37e
https://ep.gnt.md/index.php/how-to-install-graphhopper-with-nginx-ingress-controller-and-tls-custom-certificate-in-kubernetes/
https://www.sobyte.net/post/2022-07/k8s-elk/
https://www.setsolutions.com/elastic-cloud-on-kubernetes-part-2/
https://verrazzano.io/v1.1/docs/setup/customizing/certificates/
https://docs.portworx.com/operations/operate-kubernetes/other-operations/certs/
=================================== https://www.sobyte.net/post/2022-07/k8s-elk/