https://focaaby.com/趨勢不可擋，流行不可跟，探索與思考技術的本質HugoenTue, 20 Sep 2022 18:12:07 +0800https://focaaby.com/why-eks-cluster-recognize-amazon-vpc-cni-k8s-as-default-cni/Tue, 20 Sep 2022 18:12:07 +0800https://focaaby.com/why-eks-cluster-recognize-amazon-vpc-cni-k8s-as-default-cni/預設 EKS cluster 使用 VPC CNI Plugin 作為 CNI。本文將探討「為什麼 EKS cluster 知道預設 CNI Plugin 為 VPC CNI plugin」，希望理解 EKS CNI plugin 設定過程。https://focaaby.com/why-eks-node-can-join-cluster-automatically-2/Mon, 19 Sep 2022 22:55:28 +0800https://focaaby.com/why-eks-node-can-join-cluster-automatically-2/接續前一篇，我們了解了 EKS node group 定義，並知道了 EKS worker node 使用了 EKS optimized Amazon Linux AMI 內預先設置好的 bootstrap 設定 container runtime、kubelet 等設定。 Kubernetes 為確保 Control Plane 及 worker node 溝通安全性，於 Kubernetes 1.4 導入了 certificate request 及 signing API 機制 [https://github.com/kubernetes/kubernetes/pull/20439/files]https://focaaby.com/why-eks-node-can-join-cluster-automatically-1/Sun, 18 Sep 2022 23:40:43 +0800https://focaaby.com/why-eks-node-can-join-cluster-automatically-1/如果是一個自建的 Kubernetes cluster，我們會需要使用 Certificate Authority 憑證給予 Kubernetes Components [https://kubernetes.io/docs/concepts/overview/components/#node-components] [1] 所使用，如 Kubernetes The Hard Way [https://github.com/kelseyhightower/kubernetes-the-hard-way/blob/master/docs/04-certificate-authority.md] [2] 或是以下 kubeadm join [https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-join/] [3] 命令則可以使 Kubernetes nodehttps://focaaby.com/why-kubectl-can-access-eks-cluster-with-iam/Sat, 17 Sep 2022 00:55:00 +0800https://focaaby.com/why-kubectl-can-access-eks-cluster-with-iam/本文將探討這兩個問題「為什麼原生的 kubectl 可以直接訪問 EKS cluster」以及「為什麼 AWS CLI 權限與訪問 EKS cluster」，希望理解在 kubectl 如何與 IAM 權限整合允許訪問 EKS cluster。https://focaaby.com/ironman2022-create-eks-cluster/Fri, 16 Sep 2022 00:55:00 +0800https://focaaby.com/ironman2022-create-eks-cluster/故本系列文章希望研究在 AWS 平台上 EKS 一些有趣的功能是如何實現，並且了解 EKS 如何整合上游 Kubernetes 功能與 AWS 服務整合。https://focaaby.com/how-to-control-your-external-display-brightness-on-macos-and-arch-linux/Mon, 14 Mar 2022 22:05:33 +0800https://focaaby.com/how-to-control-your-external-display-brightness-on-macos-and-arch-linux/本文將介紹如何在 macOS 及 Arch Linux 系統上調整外接螢幕亮度。https://focaaby.com/why-logging-system-collects-container-logs-from-specific-directory/Sat, 05 Mar 2022 00:00:02 +0800https://focaaby.com/why-logging-system-collects-container-logs-from-specific-directory/本文章介紹了常見 Kubernetes Logging 架構，並解探討了為了使用 Node Agent 架構模式上為何收集 /var/log/containers/ 目錄內的 log 而非其他目錄。https://focaaby.com/why-linux-os-takes-over-5-minutes-during-boot-up-process/Tue, 15 Feb 2022 06:28:56 +0800https://focaaby.com/why-linux-os-takes-over-5-minutes-during-boot-up-process/In this article, I would show you how to find which systemd unit might lead the boot-up times through `systemd-analyze`[1] command.https://focaaby.com/aws-vpc-cni-plugin-random-livenessprobe-failures-after-upgrading-to-kubernetes-1-20/Mon, 24 Jan 2022 04:42:07 +0800https://focaaby.com/aws-vpc-cni-plugin-random-livenessprobe-failures-after-upgrading-to-kubernetes-1-20/In this article, I will show you Kubelet fixed Exec Probe Timeouts issue, whose timeout of 1s is respected and triggers probes failures and pods restart.https://focaaby.com/why-my-cdk-vpc-constructor-does-not-repct-availability-zones/Sat, 15 Jan 2022 19:30:00 +0800https://focaaby.com/why-my-cdk-vpc-constructor-does-not-repct-availability-zones/In this article, we'll know the environment variable account and region are requirements for the production CDK stack. Also, StacksPros need to be inherited as well.https://focaaby.com/how-opsworks-mount-ebs-volume-automatically/Sat, 08 Jan 2022 19:30:00 +0800https://focaaby.com/how-opsworks-mount-ebs-volume-automatically/The ephemeral device mount points are mounted by the cloud-init module and the EBS volumes are mounted by the default OpsWorks recipe aws_opsworks_ebs. In this article, we will know how OpsWorks mount the EBS volumes.https://focaaby.com/automatically-validating-the-multiple-san-through-dns-validation-within-multiple-hosted-zone-by-using-cloudformation-template/Tue, 18 May 2021 08:00:00 +0800https://focaaby.com/automatically-validating-the-multiple-san-through-dns-validation-within-multiple-hosted-zone-by-using-cloudformation-template/ACM support automatically renews DNS-validated certificates. This article will go through how to request a public certificate with multiple SAN, which included the domain name in a public hosted zone and a private hosted zone.https://focaaby.com/push-a-helm-chart-to-aws-ecr/Tue, 04 May 2021 08:00:00 +0800https://focaaby.com/push-a-helm-chart-to-aws-ecr/This article will go through how to push a Helm chart to ECR. Also, I try to use the Helm Dependency on ECR. The ECR supported the Helm template written in Helm Dependency, but ECR repositories are still not can not add as Helm repo currently.https://focaaby.com/eks-service-with-internal-nlb-but-gets-timeouts-randomly/Fri, 23 Apr 2021 08:00:00 +0800https://focaaby.com/eks-service-with-internal-nlb-but-gets-timeouts-randomly/While deploying both client and server on the EKS cluster and connecting through internal NLB, however, the communication gets timeout randomly.https://focaaby.com/wordpress-tuning/Mon, 04 Mar 2019 06:38:00 +0800https://focaaby.com/wordpress-tuning/前言 以前在兼差幫忙管理系所網站時，那時候學校主流 CMS [https://en.wikipedia.org/wiki/Content_management_system] 使用的是 Joomla，當年也從 apache2 移轉使用 NGINX 做了些微的調教，但是也沒有認真做個筆記。剛好公司的官網也要從 windows 移轉到 linux 伺服器上，不過使用的是 WordPress，也稍微 survey 了相關調教，本篇為移轉過程及相關調教筆記。 安裝與移轉 使用伺服器架構為基本的 LNMP，可以參考 DigitalOcean - How To Install Linux, Nginx, MySQL, PHP (LEMP stack) in Ubuntu 16.04