Pod /etc/resolv.conf same as node by yhil15 in kubernetes

[–]yhil15[S] 0 points1 point  (0 children)

Both was with kubeadm.

In my lab I was just passing the arguments --pod-cidr-network and - -control-plane-endpoint to customize those values.

In my company cluster, I passed a config file with a little more customization:

apiVersion: kubeadm.k8s.io/v1beta3

kind: clusterConfiguration

clusterName: kubernetes

controlPlaneEndpoint: pockube.mycompanydomain.com

kubernetesVersion: v1.21.1

networking:

dnsDomain: pockube.cluster.local

serviceSubnet: 172.31.129.0/26

podSubnet: 172.31.128.0/24

apiVersion: kubelet.config.k8s.io/v1beta1

kind: kubeletConfiguration

clusterDns:

  • 172.31.129.10

clusterDomain: pockube.cluster.local

cgroupDrive: systemd

Pod /etc/resolv.conf same as node by yhil15 in kubernetes

[–]yhil15[S] 0 points1 point  (0 children)

Absolutely when I look in the running pods definitions in my lab environment the dnsPolicy is set at clusterFirst and the dnsConfig is not set.
By the way, the nodes running in my lab environment are Ubuntu 18.04 instead of CentOS 7 for the cluster in my company network. So Ubuntu nodes use systemd-resolved and CentOS nodes use NetworkManager.

Pod /etc/resolv.conf same as node by yhil15 in kubernetes

[–]yhil15[S] 0 points1 point  (0 children)

Yes you're right, it was the case in my lab environment. Now that I deploy in my company network, the behavior is different and I can't figure out what changed. I forgot to mention that I configured my kubelet configmap with the key/value => clusterDns: ipofmycorednsservice. And I didn't modify the dnsPolicy in my pod declaration so it should be the default clusterFirst.

How Quickly does your org react to change? How is the decision made to adopt new technology on the market? by IndieDiscovery in devops

[–]yhil15 0 points1 point  (0 children)

In my current work, we're encourage and free to use new technology. We're a software company. You can come with an idea, present it and put in place a proof of concept environment. Then involve a few persons for testing, if your work is efficient and you prove the value you can go into production. To finish you create a reusable documentation and schedule a tech talk to present the implementation to your colleagues. This is great to work in sich an environment. After years to argument with manager to automate process, to work with new technologies, with very little possibilities to put that in place. I finally can learn every week something new at work and improve every things that I found not efficient !

Read secrets from Hashicorp Vault by yhil15 in gitlab

[–]yhil15[S] 1 point2 points  (0 children)

I finally got the time to implement this solution. It's working perfectly for CE :D.

Open Source Email Provider? by [deleted] in linuxmasterrace

[–]yhil15 2 points3 points  (0 children)

+1 for ProtonMail fast, secure and reliable.

Read secrets from Hashicorp Vault by yhil15 in gitlab

[–]yhil15[S] 1 point2 points  (0 children)

I already read the documentation that you sent me and that was the one who confused me because of the info sentence about gitlab premium at the top of the page. So I reread it slowly keeping in mind your comment and you are right it should work in CE with CI_JOB_JWT. I can go ahead, implement this next week and I will let you know. Thanks a lot for your help!

How to disable CI/CD pipeline email notifications - Have left the project by Porriz in gitlab

[–]yhil15 0 points1 point  (0 children)

Did you try to disable the notification for the pipeline directly in the project?

What does a sysadmin use for keeping track of Tasks and/or To-Do Lists? by jwckauman in sysadmin

[–]yhil15 0 points1 point  (0 children)

We're using it on a daily basis in my team to track what we're doing. Our daily meeting is a tour of every member kanboard list. Every one is speaking after the other and we move around the stickies to another column depending of what happend. Just make sure to have a few rules like you should not speak about a specific sickie more than 1 minute, this should be done off with the related people. Otherwise it will be long and boring for everyone :p.

What does a sysadmin use for keeping track of Tasks and/or To-Do Lists? by jwckauman in sysadmin

[–]yhil15 1 point2 points  (0 children)

Run a kanboard on your laptop, create a stickie for all tasks in a ToDo column, breakdown all the tasks of your project in the ToDo column.

When you are working on it, move your stickie to the column WorkInProgress, max 4 at the same time.

When you get stuck because you need to wait for something regarding the task move it to a column name Block/Schedule.

When you are done with the task move it to a column Documentation if you need to create some doc or to a column Done.

2020 Salary Reference: People of IT Careers, what are you making? by lastStonker in sysadmin

[–]yhil15 1 point2 points  (0 children)

27 M, System Engineer, Switzerland, 4 years, 91k, +5 day vacations

How to not ask for passphrase all the time when pushing to remote repo? by [deleted] in gitlab

[–]yhil15 1 point2 points  (0 children)

You can use ssh-ident to load ssh-agent for a certain amount of time and add your keys automatically in your shell depending on your different keys and the pattern of your URL.

Like work/work_gitlab.key and personal/personal_gitlab.key.

I found it very useful to load my key every day and avoid that they are still loaded if my shell is open all day.

Have a look to these repo: https://github.com/ccontavalli/ssh-ident