Advertisement
sandervanvugt

CKA day2 December 23

Dec 19th, 2023
64
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 16.84 KB | None | 0 0
  1. student@control:/etc/kubernetes/manifests$ history
  2. 1 sudo apt install vim git -y
  3. 2 git clone https://github.com/sandervanvugt/cka
  4. 3 cd cka
  5. 4 ls *sh
  6. 5 ./setup-container.sh
  7. 6 ls *sh
  8. 7 sudo ./setup-kubetools-specific-version.sh
  9. 8 sudo kubeadm init
  10. 9 mkdir -p $HOME/.kube
  11. 10 sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
  12. 11 sudo chown $(id -u):$(id -g) $HOME/.kube/config
  13. 12 kubectl get all
  14. 13 kubectl apply -f https://docs.projectcalico.org/manifests/calico.yaml
  15. 14 kubectl get ns
  16. 15 kubectl get pods -n kube-system
  17. 16 kubectl get nodes
  18. 17 history
  19. 18 ufw status
  20. 19 sudo ufw status
  21. 20 sudo systemctl disable --now ufw
  22. 21 kubectl create deploy testdeploy --image=nginx --replicas=3
  23. 22 kubectl get pods -o wide
  24. 23 kubectl edit node control
  25. 24 kubectl get pods -n kube-system
  26. 25 kubectl -n kube-system daemonset,deploy
  27. 26 kubectl -n kube-system get daemonset,deploy
  28. 27 kubectl edit daemonset -n kube-sytem kube-proxy
  29. 28 kubectl edit daemonset -n kube-system kube-proxy
  30. 29 kubectl edit daemonset -n kube-system calico-node
  31. 30 kubectl edit node control
  32. 31 source <(kubectl completion bash)
  33. 32 kubectl taint worker1 example-key=value1:NoSchedule
  34. 33 kubectl taint nodes worker1 example-key=value1:NoSchedule
  35. 34 kubectl describe nodes worker1
  36. 35 kubectl create deployment nginx-taint --image=nginx
  37. 36 kubectl scale deployment nginx-taint --replicas=3
  38. 37 kubectl get pods -o wide
  39. 38 vim taint-toleration.yaml
  40. 39 kubectl get pods -o wide
  41. 40 kubectl apply -f taint-toleration.yaml
  42. 41 kubectl get pods -o wide
  43. 42 vim taint-toleration.yaml
  44. 43 kubectl apply -f taint-toleration.yaml
  45. 44 kubectl get pods
  46. 45 kubectl get pods -o wide
  47. 46 kubectl edit node worker1
  48. 47 history
  49. 48 kubectl taint -h | less
  50. 49 #kubectl taint nodes foo dedicated=special-user:NoSchedule
  51. 50 kubectl taint nodes worker1 key=value:NoSchedule
  52. 51 kubectl create deploy nos --image=nginx --replicas=5
  53. 52 kubectl get pods -o wide
  54. 53 kubectl delete deploy nos
  55. 54 vim bd.yaml
  56. 55 kubectl create deploy nos --image=nginx --replicas=5
  57. 56 kubectl apply -f bd.yaml
  58. 57 vim bd.yaml
  59. 58 kubectl apply -f bd.yaml
  60. 59 kubectl get pods
  61. 60 kubectl get pods -o wide
  62. 61 history
  63. 62 kubectl get storageclass
  64. 63 ls
  65. 64 vim pv.yaml
  66. 65 kubectl apply -f pv.yaml
  67. 66 kubectl get pv,pvc
  68. 67 vim pvc.yaml
  69. 68 kubectl apply -f pvc.yaml
  70. 69 kubectl get pv,pvc
  71. 70 vim pv-pod.yaml
  72. 71 kubectl apply -f pv-pod.yaml
  73. 72 vim pv-pod.yaml
  74. 73 kubectl get pods
  75. 74 kubectl exec -it pv-pod -- touch /usr/share/nginx/html/storage.txt
  76. 75 kubectl describe pv pv-volume
  77. 76 kubectl get pods -o wide
  78. 77 history
  79. 78 kubectl explain pod.spec | less
  80. 79 kubectl explain pv.spec | less
  81. 80 vim resize_pvc.yaml
  82. 81 kubectl apply -f resize_pvc.yaml
  83. 82 kubectl get pv,pvc
  84. 83 kubectl get -n pvc
  85. 84 kubectl get -n myvol
  86. 85 kubectl get pvc -n myvol
  87. 86 kubectl edit pv mypv
  88. 87 kubectl get pvc -n myvol
  89. 88 kubectl get pv,pvc
  90. 89 kubectl edit -n pv-volume pvc pv-claim
  91. 90 kubectl edit -n myvol pvc pv-claim
  92. 91 kubectl get ns
  93. 92 kubectl get pvc -n myvol
  94. 93 kubectl edit -n myvol pvc mypvc
  95. 94 kubectl get pvc -n myvol
  96. 95 history
  97. 96 kubectl create deploy lab9 --image=nginx:1.14 --replicas=4 --dry-run=client -o yaml > lab9.yaml
  98. 97 kubectl explain deploy.specs
  99. 98 kubectl explain deploy.spec
  100. 99 kubectl explain deploy.spec.strategy
  101. 100 kubectl explain deploy.spec.strategy.rollingUpdate
  102. 101 vim lab9.yaml
  103. 102 kubectl apply -f lab9.yaml
  104. 103 kubectl get deploy lab9 -o yaml | less
  105. 104 kubectl set image -h
  106. 105 kubectl set image -h | less
  107. 106 kubectl get lab9
  108. 107 kubectl get deploy lab9
  109. 108 kubectl set image deploy/lab9 nginx=nginx:latest
  110. 109 kubectl get all
  111. 110 kubectl get all --selector app=lab9
  112. 111 kubectl rollout -h | less
  113. 112 kubectl rollout status deploy lab9
  114. 113 kubectl rollout history deploy lab9
  115. 114 kubectl rollout undo deploy lab9
  116. 115 kubectl get all --selector app=lab9
  117. 116 history
  118. 117 vim nwpolicy-complete-example.yaml
  119. 118 kubectl apply -f nwpolicy-complete-example.yaml
  120. 119 kubectl expose pod nginx --port=80
  121. 120 kubectl exec -it busybox -- wget --spider --timeout=1 nginx
  122. 121 kubectl label pod busybox access=true
  123. 122 kubectl exec -it busybox -- wget --spider --timeout=1 nginx
  124. 123 kubectl create ns nwp-namespace
  125. 124 vim nwp-lab91-1.yaml
  126. 125 vim nwp-lab9-1.yaml
  127. 126 kubectl apply -f nwp-lab9-1.yaml
  128. 127 kubectl expose pod nwp-nginx --port=80
  129. 128 kubectl exec -it nwp-busybox -n nwp-namespace -- wget --spider --timeout=1 nwp-nginx
  130. 129 kubectl exec -it nwp-busybox -n nwp-namespace -- nslookup nwp-nginx
  131. 130 kubectl exec -it nwp-busybox -n nwp-namespace -- nslookup nwp-nginx.default.svc.cluster.local
  132. 131 kubectl exec -it nwp-busybox -n nwp-namespace -- wget --spider --timeout=1 nwp-nginx.default.svc.cluster.local
  133. 132 vim nwp-lab9-2.yaml
  134. 133 kubectl apply -f nwp-lab9-2.yaml
  135. 134 kubectl exec -it nwp-busybox -n nwp-namespace -- wget --spider --timeout=1 nwp-nginx.default.svc.cluster.local
  136. 135 kubectl create deployment busybox --image=busybox -- sleep 3600
  137. 136 kubectl exec -it busybox-c95495658-2mvvt -- wget --spider --timeout=1 nwp-nginx
  138. 137 history
  139. 138 ls
  140. 139 sudo poweroff
  141. 140 cd cka
  142. 141 ./counter.sh 5
  143. 142 vim task4pod.yaml
  144. 143 kubectl apply -f task4pod.yaml
  145. 144 kubectl get pods
  146. 145 cat task4pod.yaml
  147. 146 vim acnp.yaml
  148. 147 kubectl apply -f acnp.yaml
  149. 148 vim acnp.yaml
  150. 149 #kubectl exec -it busybox-c95495658-2mvvt -- wget --spider --timeout=1 nwp-nginx
  151. 150 kubectl get pods
  152. 151 kubectl get svc -n restricted
  153. 152 kubectl get pods -n restricted
  154. 153 source <(kubectl completion bash)
  155. 154 kubectl expose -n restricted pods frontend-77b4fdf86c-vbhwt
  156. 155 kubectl expose -n restricted pods frontend-77b4fdf86c-vbhwt --port=80
  157. 156 kubectl exec -it busybox-667f988d6c-986hr -- wget --spider --timeout=1 frontend-77b4fdf86c-vbhwt.restricted.svc.apps.local
  158. 157 history
  159. 158 kubectl exec -it busybox-667f988d6c-986hr -- wget --spider --timeout=1 frontend-77b4fdf86c-vbhwt.restricted.svc.cluster.local
  160. 159 kubectl get pods --show-labels
  161. 160 vim acnp.yaml
  162. 161 kubectl get pods -n restricted frontend-77b4fdf86c-vbhwt --show-labels
  163. 162 history
  164. 163 vim tcnp.yaml
  165. 164 kubectl -n restricted delete networkpolicies restricted-network-policy
  166. 165 kubectl apply -f tcnp.yaml
  167. 166 vim tcnp.yaml
  168. 167 kubectl get ns --show-labels
  169. 168 vim tcnp.yaml
  170. 169 kubectl apply -f tcnp.yaml
  171. 170 vim tcnp.yaml
  172. 171 kubectl apply -f tcnp.yaml
  173. 172 kubectl exec -it busybox-667f988d6c-986hr -- wget --spider --timeout=1 frontend-77b4fdf86c-vbhwt.restricted.svc.cluster.local
  174. 173 kubectl get pods
  175. 174 kubectl get pods --show-labels busybox
  176. 175 kubectl exec -it busybox -- wget --spider --timeout=1 frontend-77b4fdf86c-vbhwt.restricted.svc.cluster.local
  177. 176 history
  178. 177 cat tcnp.yaml
  179. 178 kubectl explain networkpolicy.spec.ingress.from.namespaceSelector
  180. 179 cat tcnp.yaml
  181. 180 vim acnp.yaml
  182. 181 cd ..
  183. 182 git clone https://github.com/sandervanvugt/ckad
  184. 183 cd ckad
  185. 184 cd labs
  186. 185 ls
  187. 186 ./ckad-lab14-grade.sh
  188. 187 cd ..
  189. 188 cd ../cka
  190. 189 history
  191. 190 cat tcnp.yaml
  192. 191 vim cbnet.yaml
  193. 192 kubectl run testpod --image=nginx --dry-run=client -o yaml
  194. 193 vim cbnet.yaml
  195. 194 kubectl explain pods.spec.containers | less
  196. 195 kubectl explain pods.spec.containers.volumeMounts | less
  197. 196 vim cbnet.yaml
  198. 197 kubectl apply -f cbnet.yaml
  199. 198 kubectl get pods task6pod
  200. 199 kubectl deploy pods task6pod
  201. 200 kubectl describe pods task6pod
  202. 201 kubectl delete -f cbnet.yaml
  203. 202 vim cbnet.yaml
  204. 203 kubectl apply -f cbnet.yaml
  205. 204 kubectl get pods task6pod
  206. 205 kubectl expose -h | less
  207. 206 kubectl expose pod task6pod --type=NodePort --port=80
  208. 207 kubectl delete -f cbnet.yaml
  209. 208 vim cbnet.yaml
  210. 209 kubectl apply -f cbnet.yaml
  211. 210 vim cbnet.yaml
  212. 211 kubectl run testpod --image=nginx --dry-run=client -o yaml | less
  213. 212 vim cbnet.yaml
  214. 213 kubectl run testpod --image=nginx --dry-run=client -o yaml | less
  215. 214 kubectl apply -f cbnet.yaml
  216. 215 kubectl expose pod task6pod --type=NodePort --port=80
  217. 216 kubectl get svc
  218. 217 curl 192.168.29.211:30056
  219. 218 curl 192.168.29.212:30056
  220. 219 curl 192.168.29.213:30056
  221. 220 kubectl describe svc task6pod
  222. 221 curl 172.16.189.125
  223. 222 curl 172.16.189.125:80
  224. 223 vim cbnet.yaml
  225. 224 kubectl exec -it task6pod -c nginx -- sh
  226. 225 curl 172.16.189.125/hello.txt
  227. 226 kubectl get pods -o wide
  228. 227 kubectl svc
  229. 228 kubectl get svc
  230. 229 kubectl create quota qtest --hard pods=3,cpu=100m,memory=500Mi --namespace limited
  231. 230 kubectl create ns limited
  232. 231 kubectl create quota qtest --hard pods=3,cpu=100m,memory=500Mi --namespace limited
  233. 232 kubectl create quota -h | less
  234. 233 kubectl describe quota -n limited
  235. 234 kubectl describe ns limited
  236. 235 kubectl create deploy nginx --image=nginx --replicas=3 -n limited
  237. 236 kubectl get all -n limited
  238. 237 kubectl -n limited describe rs/nginx-77b4fdf86c
  239. 238 kubectl set resources -h | less
  240. 239 kubectl set resources -n limited deploy nginx --requests cpu=100m,memory=5Mi --limits cpu=200m,memory=20Mi
  241. 240 kubectl get pods -n limits
  242. 241 kubectl get pods -n limited
  243. 242 kubectl describe ns limited
  244. 243 kubectl edit -n limited quota qtest
  245. 244 kubectl get pods -n limited
  246. 245 history
  247. 246 vim acquota.yaml
  248. 247 kubectl apply -f acquota.yaml
  249. 248 kubectl describe ns restricted
  250. 249 kubectl get pods -n restricted
  251. 250 kubectl get deploy -n restricted
  252. 251 kubectl create daemonx --image=nginx --dry-run=client -o yaml > daemonx.yaml
  253. 252 kubectl create deploy daemonx --image=nginx --dry-run=client -o yaml > daemonx.yaml
  254. 253 cim daemonx.yaml
  255. 254 vim daemonx.yaml
  256. 255 kubectl apply -f daemonx.yaml
  257. 256 kubectl get ds
  258. 257 kubectl get pods -o wide
  259. 258 kubectl edit node worker1
  260. 259 kubectl get ds
  261. 260 history
  262. 261 cat daemonx.yaml
  263. 262 kubectl top
  264. 263 kubectl top pod
  265. 264 kubectl apply -f https://github.com/kubernetes-sigs/metrics-server/releases/latest/download/components.yaml
  266. 265 kubectl get pods -n kube-system
  267. 266 kubectl edit -n kube-system deploy metrics-server
  268. 267 kubectl get pods -n kube-system
  269. 268 kubectl top pods
  270. 269 kubectl top pods --help | less
  271. 270 kubectl top pods --sort-by="memory"
  272. 271 history
  273. 272 kubectl top pods --sort-by="memory"
  274. 273 mkdir /var/exam/
  275. 274 mkdir /tmp/exam
  276. 275 kubectl top pods --sort-by="memory" > /tmp/exam/cpu-pods.txt
  277. 276 vim /tmp/exam/cpu-pods.txt
  278. 277 kubectl get roles -A
  279. 278 kubectl get clusterroles
  280. 279 kubectl describe clusterrole view
  281. 280 kubectl get clusterroles | grep calico
  282. 281 kubectl describe clusterrole calico-node
  283. 282 kubectl get pods -n kube-system
  284. 283 kubectl get pods -n kube-system calico-node-hkhdp - o yaml | less
  285. 284 kubectl get pods -n kube-system calico-node-hkhdp -o yaml | less
  286. 285 kubectl get clusterrolebinding | get calico
  287. 286 kubectl get clusterrolebinding | grep calico
  288. 287 kubectl desribe clusterrolebinding calico-node
  289. 288 kubectl describe clusterrolebinding calico-node
  290. 289 kubectl get clusterroles
  291. 290 kubectl create sa viewer
  292. 291 kubectl create clusterrolebinding -h | less
  293. 292 kubectl create clusterrolebinding viewer --clusterrole=view --serviceaccount=viewer
  294. 293 kubectl create clusterrolebinding viewer --clusterrole=view --serviceaccount=default:viewer
  295. 294 kubectl get deploy
  296. 295 kubectl set sa deploy/lab9 viewer
  297. 296 kubectl get deploy lab9 -o yaml | grep -i servicea
  298. 297 history
  299. 298 kubectl create role -h | less
  300. 299 kubectl create role viewers --verb=get --verb=list --verb=watch --resource=pods -n roles
  301. 300 kubectl create ns roles
  302. 301 kubectl create role viewers --verb=get --verb=list --verb=watch --resource=pods -n roles
  303. 302 kubectl run -n roles viewpod --image=nginx --dry-run=client -o yaml > viewpod.yaml
  304. 303 kubectl explain pods.spec | less
  305. 304 vim viewpod.yaml
  306. 305 kubectl create rolebinding -h | less
  307. 306 kubectl create rolebinding viewers --role=viewers --serviceaccount=roles:viewers -n roles
  308. 307 kubectl -n roles roles,rolebindings,serviceaccount
  309. 308 kubectl get -n roles roles,rolebindings,serviceaccount
  310. 309 kubectl describe rolebindings.rbac.authorization.k8s.io -n roles viewers
  311. 310 history
  312. 311 sudo ls /etc/kubelet/manifests
  313. 312 sudo -i
  314. 313 ps aux | grep etcd
  315. 314 sudo ls /etc/kubernetes/pki/etcd/
  316. 315 sudo apt install etcd-client -y
  317. 316 sudo etcdctl --help | less
  318. 317 sudo ETCDCTL_API=3 etcdctl --help | less
  319. 318 sudo ETCDCTL_API=3 etcdctl --endpoint=localhost:2379 --cacert /etc/kubernetes/pki/etcd/ca.crt --cert /etc/kubernetes/pki/etcd/server.crt --key /etc/kubernetes/pki/etcd/server.key get / --prefix --keys-only
  320. 319 sudo ETCDCTL_API=3 etcdctl --endpoints=localhost:2379 --cacert /etc/kubernetes/pki/etcd/ca.crt --cert /etc/kubernetes/pki/etcd/server.crt --key /etc/kubernetes/pki/etcd/server.key get / --prefix --keys-only
  321. 320 sudo ETCDCTL_API=3 etcdctl --endpoints=localhost:2379 --cacert /etc/kubernetes/pki/etcd/ca.crt --cert /etc/kubernetes/pki/etcd/server.crt --key /etc/kubernetes/pki/etcd/server.key snapshot save /tmp/etcdbackup.db
  322. 321 ls -l /tmp/etcdbackup.db
  323. 322 sudo ETCDCTL_API=3 etcdctl --write-out=table snapsho status /tmp/etcdbackup.db
  324. 323 cp /tmp/etcdbackup.db /tmp/etcdbackup.db.2
  325. 324 history
  326. 325 kubectl delete deploy busybox lab9 nginx-taint nos testdeploy
  327. 326 cd /etc/kubernetes/manifests/
  328. 327 sudo crictl ps
  329. 328 sudo mv * ..
  330. 329 sudo crictl ps
  331. 330 sudo ETCDCTL_API=3 etcdctl snapshot restore /tmp/etcdbackup.db --data-dir /var/lib/etcd-backup
  332. 331 sudo ls -l /var/lib/etcd-backup/
  333. 332 sudo vim /etc/kubernetes/etcd.yaml
  334. 333 sudo mv ../*.yaml .
  335. 334 sudo crictl ps
  336. 335 kubectl get deploy -A
  337. 336 sudo mv * ..
  338. 337 sudo crictl ps
  339. 338 sudo vim /etc/kubernetes/etcd.yaml
  340. 339 su mv ../*.yaml .
  341. 340 sudo mv ../*.yaml .
  342. 341 sudo crictl ps
  343. 342 kubectl get deploy
  344. 343 history
  345. 344 kubectl delete deploy --all
  346. 345 sudo mv * ..
  347. 346 sudo mv /var/lib/etcd /var/lib/etcd-backup.new
  348. 347 sudo mkdir /var/lib/etcd
  349. 348 sudo ETCDCTL_API=3 etdctl snapshot restore /tmp/etcdbackup.db --data-dir /var/lib/etcd
  350. 349 sudo ETCDCTL_API=3 etcdctl snapshot restore /tmp/etcdbackup.db --data-dir /var/lib/etcd
  351. 350 sudo ETCDCTL_API=3 etcdctl snapshot restore /tmp/etcdbackup.db
  352. 351 sudo vim /etc/kubernetes/etcd.yaml
  353. 352 sudo mv ../*.yaml .
  354. 353 sudo crictl ps
  355. 354 kubectl get deploy
  356. 355 history
  357. 356 kubectl version
  358. 357 sudo apt update
  359. 358 sudo apt-cache madison kubeadm
  360. 359 sudo apt-mark unhold kubeadm && sudo apt-get update && sudo apt-get install -y kubeadm='1.28.2-00' && sudo apt-mark hold kubeadm
  361. 360 sudo kubeadm version
  362. 361 sudo kubeadm upgrade plan
  363. 362 kubectl -n kube-system get cm
  364. 363 kubectl -A get cm
  365. 364 kubectl get cm -A
  366. 365 sudo kubeadm config upload from-flags
  367. 366 kubectl get pods
  368. 367 sudo crictl ps
  369. 368 sudo mv * ..
  370. 369 sudo vim ../etcd.yaml
  371. 370 sudo mv ../* .
  372. 371 ls
  373. 372 sudo mv * ..
  374. 373 ls ..
  375. 374 sudo mv ../*.yaml .
  376. 375 ls
  377. 376 sudo crictl ps
  378. 377 ls
  379. 378 ls pki/
  380. 379 ls ../pki/
  381. 380 sudo mv /pki/* ../pki/
  382. 381 ls
  383. 382 ls pki/
  384. 383 cd pki/
  385. 384 sudo mv * ../../pki/
  386. 385 ls
  387. 386 cd ../..
  388. 387 ls pki/
  389. 388 sudo crictl ps
  390. 389 sudo reboot
  391. 390 sudo crictl ps
  392. 391 kubectl get deploy
  393. 392 kubectl get deploy -A
  394. 393 kubectl get cm -n kube-system
  395. 394 sudo kubeadm upgrade plan
  396. 395 sudo kubeadm upgrade apply v1.28.4
  397. 396 sudo kubeadm upgrade apply v1.28.2
  398. 397 kubectl get all
  399. 398 sudo apt-mark unhold kubelet kubectl
  400. 399 sudo apt-get update
  401. 400 sudo apt-get install -y kubelet='1.28.2-00' kubectl='1.28.2-00'
  402. 401 sudo apt-mark hold kubelet kubectl
  403. 402 sudo -i
  404. 403 sudo crictl ps
  405. 404 sudo -i
  406. 405 sudo crictl ps
  407. 406 kubectl get all
  408. 407 kubectl version
  409. 408 cd /etc/kubernetes/
  410. 409 ls
  411. 410 cd manifests
  412. 411 cp *.yaml ..
  413. 412 sudo cp *.yaml ..
  414. 413 sudo vim ../etcd.yaml
  415. 414 sudo mv ../*.yaml .
  416. 415 sudo crictl ps
  417. 416 sudo ls -l /var/lib/etcd-backup/
  418. 417 sudo ls -l /var/lib/etcd-backup/member
  419. 418 kubectl get all
  420. 419 sudo crictl ps
  421. 420 kubectl get all
  422. 421 kubectl version
  423. 422 history
  424.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement