Notes from 20230503

nicholasdille · May 3, 2023 · 9926c1b · 9926c1b
1 parent 6280e1a
commit 9926c1b
Show file tree

Hide file tree

Showing 3 changed files with 56 additions and 0 deletions.
diff --git a/120_kubernetes/dns/headless.demo b/120_kubernetes/dns/headless.demo
@@ -28,8 +28,24 @@ apiVersion: v1
 kind: Service
 metadata:
   name: web
+spec:
+  type: ClusterIP
+  selector:
+    app: web
+  ports:
+  - name: http
+    port: 80
+    protocol: TCP
+    targetPort: 80
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: web-headless
 spec:
   clusterIP: None
+  selector:
+    app: web
   ports:
   - name: http
     port: 80

diff --git a/120_kubernetes/network_policy/network_policy.demo b/120_kubernetes/network_policy/network_policy.demo
@@ -22,6 +22,18 @@ spec:
     image: nginx:stable
 ---
 apiVersion: v1
+kind: Pod
+metadata:
+  name: web2
+  namespace: test1
+  labels:
+    app: web2
+spec:
+  containers:
+  - name: nginx
+    image: nginx:stable
+---
+apiVersion: v1
 kind: Service
 metadata:
   name: web
@@ -49,6 +61,18 @@ spec:
     image: nginx:stable
 ---
 apiVersion: v1
+kind: Pod
+metadata:
+  name: web2
+  namespace: test1
+  labels:
+    app: web2
+spec:
+  containers:
+  - name: nginx
+    image: nginx:stable
+---
+apiVersion: v1
 kind: Service
 metadata:
   name: web

diff --git a/2023-05-03_heise-Webinar-KubernetesNetworkPolicies.md b/2023-05-03_heise-Webinar-KubernetesNetworkPolicies.md
@@ -0,0 +1,16 @@
+Rainer 01797768716
+Lisa 015773743489
+
+- Verschlüsselte DNS-Anfragen im Cluster
+- Pod IP klarer machen
+- https://www.knowledgehut.com/blog/devops/kubernetes-load-balancing
+- Headless service: StatefulSet
+- dig!
+- Gegenüberstellung hinzufügen/korrigieren
+- Namespaced NetworkPolicy
+- Pods in demselben Namespace
+- Namespace ohne Policy -> keine Beschränkung
+- Priority
+- Portability vs. Functionality
+- Separate ingress and egress
+- Hubble slide overflow