https://k8s-school.fr/labs/k8s/en/tags/control-plane/index.htmlHugoenCopyright (c) 2025 Fabrice Jammes - Licensed under CC BY-SA 4.0Sun, 23 Mar 2025 14:15:26 +1000https://k8s-school.fr/labs/k8s/en/1_labs/controller/index.htmlSun, 23 Mar 2025 14:15:26 +1000https://k8s-school.fr/labs/k8s/en/1_labs/controller/index.htmlObjective This lab will help you understand the role of Kubernetes controllers in managing the desired/actual state of cluster resources. Prerequisites A Kubernetes cluster (Minikube, Kind, or a cloud-based Kubernetes cluster) kubectl installed and configured Step 1: Understand Controllers Kubernetes controllers are control loops that monitor the state of the cluster and make or request changes where needed. The key controllers include:https://k8s-school.fr/labs/k8s/en/1_labs/audit-logs/index.htmlThu, 06 Jun 2024 15:00:00 +1000https://k8s-school.fr/labs/k8s/en/1_labs/audit-logs/index.htmlObjectives Configure audit policies to trace modifications on critical resources and secure the API Server in a Kubernetes cluster. Prerequisites Define your cluster name: $CLUSTER_NAME="my-cluster" Q1: How to modify the API Server configuration? Answer The API Server in Kubernetes runs as a static pod managed by the kubelet. Static pods are defined by YAML manifests in the /etc/kubernetes/manifests/ directory. When you modify a static pod manifest:https://k8s-school.fr/labs/k8s/en/1_labs/openshift-staticpod/index.htmlSun, 30 Jun 2024 14:15:26 +1000https://k8s-school.fr/labs/k8s/en/1_labs/openshift-staticpod/index.htmlExercice 1: retrieve static pod specifications in Kubernetes (kind-based) Switch to Kubernetes cluster using kubectx kind-kind and then access the control plane Node using docker exec -t -- <my-master-node> sh and then access Kubelet configuration. Answer MASTER_NODE=$(kubectl get nodes '--selector=node-role.kubernetes.io/control-plane' -o jsonpath='{.items[0].metadata.name}') # Exit the ktbx-toolbox to run docker docker exec -t -- kind-control-plane sh -c 'ps -ef | grep "/usr/bin/kubelet"' docker exec -t -- kind-control-plane sh -c 'cat /var/lib/kubelet/config.yaml | grep -i staticPodPath' docker exec -t -- kind-control-plane sh -c 'ls /etc/kubernetes/manifests' Exercice 1: retrieve static pod specifications in Openshift Switch to Kubernetes cluster using kubectx <my-openshift-context> and then access the control plane Node using oc debug node/<my-master-node> and then access Kubelet configuration.https://k8s-school.fr/labs/k8s/en/1_labs/openshift-etcd/index.htmlSun, 30 Jun 2024 14:15:26 +1000https://k8s-school.fr/labs/k8s/en/1_labs/openshift-etcd/index.htmlAuteur: Fabrice JAMMES (LinkedIn). Exercice 1: display Kubernetes and Openshift resources Retrieve etcd pod name Answer # Wait for etcd pod to be u kubectl wait --timeout=240s --for=condition=Ready -n "openshift-etcd" pods -l "app=etcd,etcd=true,k8s-app=etcd" etcd_pod=$(kubectl get pods -n "openshift-etcd" -l "app=etcd,etcd=true,k8s-app=etcd" -o jsonpath='{.items[0].metadata.name}') Launch etcdctl --help inside etcd pod Answer # Display Kubernetes keys kubectl exec -t -n "openshift-etcd" "$etcd_pod" -- etcdctl --help