- Видео 22
- Просмотров 10 501
Rohan Rustagi
Добавлен 15 мар 2021
Just Random Scheduled uploads. Trying to cover open source tools for the devops community.
Manage & Secure Kubernetes Cluster Policies via OPA Gatekeeper. #opa #devops #gatekeeper
Manage & Secure Kubernetes Cluster Policies via OPA Gatekeeper. #opa #devops #gatekeepers
Timestamps:
Theory/Concepts : 00:00
Hands on/Practical : 09:00
github repo : github.com/RohanRusta21/opa-gatekeeper.git
Concepts :
OPA Gatekeeper: Policy and Governance for Kubernetes
What is OPA:
The Open Policy Agent (OPA) is an open-source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets us specify policies as code and simple APIs to offload policy decision-making from our software. We can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
In kubernetes, OPA uses admiss...
Timestamps:
Theory/Concepts : 00:00
Hands on/Practical : 09:00
github repo : github.com/RohanRusta21/opa-gatekeeper.git
Concepts :
OPA Gatekeeper: Policy and Governance for Kubernetes
What is OPA:
The Open Policy Agent (OPA) is an open-source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets us specify policies as code and simple APIs to offload policy decision-making from our software. We can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
In kubernetes, OPA uses admiss...
Просмотров: 148
Видео
[Interview Question] How to Create Self Hosted or Private Container Registry #docker #devops
Просмотров 173Месяц назад
[Interview Question] How to Create Self Hosted or Private Container Registry #docker #devops Timestamps: Theory/Concepts : 00:00 Hands on/Practical : 09:00 github repo : github.com/RohanRusta21/private-docker-registry Concepts : A container registry is a storage catalog from where you can push and pull container images. There are many public and private registries available to developers such a...
[Interview Question] How to take backup & restore it using etcdctl. #k8s #devops #kubernetes #etcd
Просмотров 3442 месяца назад
What is etcd and How to take backup & restore it using etcdctl. #k8s #devops #kubernetes #etcd Timestamps: Theory/Concepts : 00:00 Hands on/Practical : 07:00 Concepts : What is etcd etcd is a distributed key-value store that provides a reliable way to store data across a cluster of machines. It is designed to be highly available, consistent, and secure, making it suitable for storing configurat...
[Interview Question] How to Increase/Decrease Pod capacity on each Node inside Kubernetes Cluster.
Просмотров 4002 месяца назад
How to Increase/Decrease Pod capacity on each Node inside Kubernetes Cluster #devops #kubernetes Github Repo used : github.com/RohanRusta21/nodelimit-k8s Official Kubernetes Documentation : kubernetes.io/docs/setup/best-practices/cluster-large/ 1. Node Allocatable Resources Each node in a Kubernetes cluster has a certain amount of CPU, memory, and storage resources. The maximum number of pods a...
Mastering Kubernetes with Kustomize: A Beginner's Guide to Customizing Your Deployments #k8s #devops
Просмотров 3593 месяца назад
Mastering Kubernetes with Kustomize: A Beginner's Guide to Customizing Your Deployments #k8s #devops Github Repo used : github.com/RohanRusta21/kustomize-demo Timestamps: Theory : 00:00 Practical : Kustomize in Kubernetes: Understanding Bases and Overlays Kustomize is a configuration management tool that allows you to customize Kubernetes resources without modifying the underlying YAML files. I...
Kubernetes Deployment Strategies with Theory & Hands-on #devops #k8s #deployment
Просмотров 3473 месяца назад
Kubernetes Deployment Strategies with Theory & Practical Demo #devops #k8s #deployment Github Repo used : github.com/RohanRusta21/k8s-deployment-strategy Timestamps: Theory : 00:00 Practical : 16:25 For Automated Rollouts Argo Rollouts Videos : 1. Canary Deployment : ruclips.net/video/QqUxbZ_dUNA/видео.html 2. Blue/Green Deployment : ruclips.net/video/Ifv0vPjuwkA/видео.html Kubernetes (K8s) off...
Kubernetes RBAC : Practical Creation of User,ClusterRole,ClusterRoleBinding (Part 2) #devops #rbac
Просмотров 1,1 тыс.3 месяца назад
Kubernetes RBAC : Practical Creation of User, ClusterRole, ClusterRoleBinding (Part 2) Github Repo used : github.com/RohanRusta21/k8s-rbac-demo 1. What is RBAC? Role-Based Access Control (RBAC) is a method of regulating access to computer or network resources based on the roles of individual users within an organization. In Kubernetes, RBAC is a mechanism for controlling who can perform what ac...
Kubernetes RBAC : Practical Creation of User,Serviceaccount,Role,RoleBinding (Part 1) #devops #k8s
Просмотров 8083 месяца назад
Kubernetes RBAC Tutorial: Practical Creation of User, Serviceaccount, Role, RoleBinding (Part 1) Timestamp : Theory : 0:00 Hands-on/Demo : 9:46 Github Repo used : github.com/RohanRusta21/k8s-rbac-demo 1. What is RBAC? Role-Based Access Control (RBAC) is a method of regulating access to computer or network resources based on the roles of individual users within an organization. In Kubernetes, RB...
Manage Secrets Using HashiCorp Vault in Kubernetes Cluster #hashicorp #vault #secrets
Просмотров 2,4 тыс.4 месяца назад
Manage Secrets Using HashiCorp Vault in Kubernetes Cluster #hashicorp #vault #secrets Github Repo Used : github.com/RohanRusta21/hashicorp-kv-demo Timestamp : Concept & Theory : 00:00 Practical Demo : 10:40 What is HashiCorp Vault ? HashiCorp Vault is a tool designed to secure, store, and tightly control access to tokens, passwords, certificates, API keys, and other sensitive data in modern com...
Monitor Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Prometheus & Grafana #keda
Просмотров 2714 месяца назад
Monitor Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Prometheus & Grafana #keda #grafana #monitoring Official Website & Documentation : keda.sh/ Timestamp : 00:00 : Theory 04:15 : Practical Demo Video for the architecture part of KEDA : ruclips.net/video/hzwKOtY9kAU/видео.html Repo Used in the video : github.com/RohanRusta21/keda_trigger_event_demo What is KEDA? KEDA is a Kuber...
Easily Deploy Application using Portainer GUI inside Kubernetes Cluster #k8s
Просмотров 944 месяца назад
Easily Deploy Application using Portainer GUI inside Kubernetes Cluster #k8s Official Website : www.portainer.io/ Official Documentation : docs.portainer.io/start/install-ce/server/kubernetes/baremetal Simplify Container Management Across Kubernetes and Docker Follow my mentors too : @PavanElthepu @MPrashant @GouravSharma @cloudwithraj @AntonPutra @AbhishekVeeramalla @kubesimplify @kshindi @Dev...
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Prometheus Scaler #keda
Просмотров 4445 месяцев назад
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Prometheus Scaler #keda Official Website & Documentation : keda.sh/ Timestamp : 00:00 : Theory 17:30 : Practical Demo Video for the architecture part of KEDA : ruclips.net/video/hzwKOtY9kAU/видео.html Repo Used in the video : github.com/RohanRusta21/keda_trigger_event_demo What is KEDA? KEDA is a Kubernetes-based Event D...
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - HTTP-addon #keda
Просмотров 4215 месяцев назад
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - HTTP-addon #keda Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Event Scaler Official Website & Documentation : keda.sh/ Timestamp : 00:00 : Theory 17:30 : Demo Repo Used in the video : github.com/RohanRusta21/keda_trigger_event_demo What is KEDA? KEDA is a Kubernetes-based Event Driven Autosc...
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Event Scaler #keda
Просмотров 3175 месяцев назад
Auto Scaling Applications with Kubernetes Event-Driven Autoscaler (KEDA) - Event Scaler Official Website & Documentation : keda.sh/ Repo Used in the video : github.com/RohanRusta21/keda_trigger_event_demo What is KEDA? KEDA is a Kubernetes-based Event Driven Autoscaler. With KEDA, we can drive the scaling of any container in Kubernetes based on the number of events needing to be processed. KEDA...
Easily Setup Keycloak on Kubernetes Cluster with Persistence Volume & PostgreSql
Просмотров 1,8 тыс.5 месяцев назад
Easily Setup Keycloak on Kubernetes Cluster with Persistence Volume & PostgreSql My Github Repo used in demo :github.com/RohanRusta21/keycloak-demo.git Theory : Keycloak Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authen...
Use Free LoadBalancer in your Bare-Metal/On-Prem kubernetes Cluster using MetalLB #devops
Просмотров 2266 месяцев назад
Use Free LoadBalancer in your Bare-Metal/On-Prem kubernetes Cluster using MetalLB #devops
Boost Workflow with TTL.sh: Anonymous & Ephemeral Docker Image Registry #docker #k8s
Просмотров 456 месяцев назад
Boost Workflow with TTL.sh: Anonymous & Ephemeral Docker Image Registry #docker #k8s
Helm Charts to deploy Applications in Kubernetes Cluster for Beginners #k8s #kubernetes #devops
Просмотров 1466 месяцев назад
Helm Charts to deploy Applications in Kubernetes Cluster for Beginners #k8s #kubernetes #devops
Deploy Applications using Canary Deployment Strategy in Kubernetes ( Argo Rollouts UI )
Просмотров 1566 месяцев назад
Deploy Applications using Canary Deployment Strategy in Kubernetes ( Argo Rollouts UI )
Easily Add Custom Template in Cyclops UI and Kubernetes Cluster
Просмотров 1366 месяцев назад
Easily Add Custom Template in Cyclops UI and Kubernetes Cluster
Deploy Applications using BlueGreen Deployment Strategy in Kubernetes ( Argo Rollouts UI )
Просмотров 2107 месяцев назад
Deploy Applications using BlueGreen Deployment Strategy in Kubernetes ( Argo Rollouts UI )
Deploy Applications on Kubernetes Cluster using Cyclops ( Without Writing Any YAML! )
Просмотров 2487 месяцев назад
Deploy Applications on Kubernetes Cluster using Cyclops ( Without Writing Any YAML! )
Very informative
Glad you liked it
How our microservice deployment will fetch the secret value ,how to configure secret inside the microservice deployment ?? can you please explain
Rohan, thank you so much for this video. I have found useful information and you saved me lots of time.
Glad it was helpful!
Nice - good job.
Thank you - This video is very helpful for those taking CKA certification.
Glad it was helpful!
The best video on Kubernetes I was looking for. Rohan, your are a good teacher. Thank you.
Thank you sir for your kind words.
Thanks, very informative.. please start sessions earlier that we have discussed in previous video
Yes I remember to cover elk stack, prom-grafana Or monitoring tools right :)
@@rohanrustagi7857 yes, elk stack, and how to increase pod capacity above 500 on one node. Some real time scenarios based...
In this tutorial etcd pod scheduled on worker node in my kubeadm environment which is not ideal ? Is there any way during restoring etcd we make sure that etcd pod will always schedule on control plane node ? And you can continue with elk or EFK, which is a more convenient approach for kubernetes
@@SandeepDash-sv6ql ELK and EFK are heavy on resources - try k9s instead
@@Fayaz-Rehman sure.. thanks
Thank you so much for this informative session
Glad it was helpful!
Please make a video for the mentioned concerns as It's a very important and real time use case ..
Great point! Thanks for sharing your thoughts!
Yes, thanks .... that's very simple and we know that, thanks.. by using maxPod we can increase or decrease pods, but if we have enough resources on node and we can schedule pods above 500 how we can, and how you manage IP POOL for manaing pod network based on custom CNI like calico or Cilium, which would be convenient and how to configure, that is what asking about.. How to configure CNI IP BLOCK for pod cidr and network so that we can deploy above 500 pods on one node ? Please make session on this ....🙏
Great point! Thanks for sharing your thoughts!
Please make a session on vpa installation on kubeadm, efk setup for log consolidation and also for how to increase pod capacity on each node which is default 110. Please create videos like this based on realtime scenarios and requirements...
If you want to increase the pods limit, then you can do it by passing the required pod limit by passing it to the field max-pods in the Kubernetes configuration file. $KUBELET_EXTRA_ARGS - max-pods=245
@@softwareengineer5764 yes, thanks... I know that, but how to do the same if your requirement is more ? Something like if you have sufficient resources on On-Premises server and you want to increase pod limit even above 500. How to do that ? Which CNI will be perfect here (Cilium or Calico) to configure IP POOL management for without confliction on Pod creation or deletions if you are creating above 500 pods on same node ?
Thanks Rohan for the wonderful video, can you please suggest if we have a application which needed some username and passwrod in kubernetes so do we have to create configmap and secret in kubernetes, or if we use same username andpassword which required by application via vault then can we directly use in our pods?
Hi, i am using the gateway and httproute for my own domain and my app is up and running in prod but i want to use keda so there a way i can do that without the portfoward by which means i simply just hit the domain from the browser and the app will scale up?
@@vaibhavverma2579 yes you can do that port forward is just for demo here in real applications are deployed properly using loadbalancer/ingress in k8s cluster.
@@rohanrustagi7857 i am not using ingress i have creates the wildcard domain in the gateway and setup a httproute which connects to my app's svc and svc to pods so how can i scale from 0 to 2 or vice versa? Can u guide me on that pls because rightnow without portfowarding my app is not scaling up to 1 again.
@@rohanrustagi7857 ia there any way to do without portforwarding because right now its not scaling up to 1 again with prot forward i have my http route and gateways configured so i have my domain as well
Plz do cover all production based kubernetes tools so that we can understand which tool should use where n when
@@shamstabrez2986 yes that's my aim too. Thank you 🙏
Good explanation
@@manjari35 thank you
Sir, Here how you are increasing the pods like what are the metrics you are using. Or setting a target value to compare with the currentvalue. I mean to make the scaling up and down based on some targetvalue if the request rate is increased than the targetvalue then the scaling up or else scale down.
Yes if currentvale > target value then : scale up Else scale down. Also to mention max replica and min replica in the keda yaml manifest file.
Please start one session for VPA setup for vertical pod autoscalling in kubeadm cluster with practical usecase
Definitely sir
Please start a session for how to install vpa object in kubeadm environment for vertical pod autoscalling
Hi, Thank you for this information. I tried the argo-rollout extension in ArgoCD UI but its not working in spite of installation is correct. Would be great if you could help on that side configuration.
If you dont mind , could you please share the timestamp where you started getting errors.
Thankyou very much for your efforts... 🙏
So nice of you 😀
Thanks, but how to give access to user as user also can change the current-context
We have to create role which can deny the access of context
@@rohanrustagi7857 but user can modify the role, how we isolate user from the file being change. That's what I want to know. I have created an user test by useradd command, how i send the kubeconfig file to that user directory so that I can give access
How to share access to user, as user can change the context file ?
Please start with one session for to create an user and rbac policy in Kubernetes.
Yup
Warning Unhealthy 12m (x4 over 12m) kubelet Startup probe failed: Get "10.244.1.48:8080/auth/": dial tcp 10.244.1.48:8080: connect: connection refused pods are unhealty
Is it possible if you can give me the timestamp of the video on which you get this error.
@@rohanrustagi7857 first postgesql pods is up and running. and keycloak is failed due to liveness and readness probe failed. after update Helm chart with persistent volume attach and reinstall helm
If possible please upgrade your helm chart with the new yaml file where you updated the values for postgres
Thanks for this tutorial. Please continue for grafana session for creating dashboards
@@SandeepDash-sv6ql yes it's in progress.
Thank you, sir . Sir for Prometheus datasource url, this is not necessarily to be add Prometheus pod node ip. Nodeport act like loadbalancer across the cluster and you can use any node ip. Please create sessions for grafana how to create dashboard for workload to check network, cpu, memory utilisation for pod , node etc...
@@SandeepDash-sv6ql ohh thanks for updating me. Actually I also have to learn more on grafana dashboard.
@@rohanrustagi7857 no problem. Please create session for dashboard for mentioned, i will update if any improvement needed
Thank you for your support 💪, just give me some time. Will make the video ASAP.
Sir, I have Java application. Please update me necessary change in code. It will be a great help for your and my efforts..
Sorry brother I don't know java, I have taken the code from someone and just created image for my dockerhub repo
@@rohanrustagi7857 sir, Ok no problem, just have to use prom-client for Prometheus to integrate custom matrix, we have used spring boot framework for java application. Need to add prom-client in pom.xml file. If we get this then there is no problem. If you are able to arrange then please help me out, otherwise leave it. It's ok.. 🙃
Sorry brother can't help much on the coding part but I can give the repo url from where I dockerized the image I used in the demo.
repo : github.com/dopevs/keda-prometheus-demo
@@rohanrustagi7857 no problem sir, please create a video for how to deploy grafana and create dashboard for this..
Hi Rohan, how hello_world_requests will be stored in the prometheus. do we need to write http request logic in the application itself
Yes correct
@@rohanrustagi7857 what if i dont have logic in the application but i want to scale the app based on the http_request. do i need to use keda http-add-on
Yes then for that you can use that. KEDA supports many scalers you can select whatever is easy to use within your project.
Sir, can we use with different image like nginx in scale object deployment file ?
yes you can use any image just configure the app or image so that it generates some metrics which prometheus can detect.
Ok.. Where to update cooldown period?
In scaledObject.yml file inside scaletargetref section. Please follow keda documentation for that, you will learn a lot
@@rohanrustagi7857 checking docs sir, thankyou
Sir, query is not been updated in Prometheus. Hello world request. I am using nginx image. Is it mandatory to update logic for the query in application code ? Now in your given image also query is not updating in Prometheus
Hi, you videos are really informative, request you to improve the Audio quality
Yes even I agree with you on the same. Currently just using my airpods for recording the video. I will solve this issue asap.
Hi Sir,.. thanks for the session. I have some doubts, for testing purpose do we need to purchase a domain for this request based scaling activity ? Can't we use ip with nodePort for testing with request based scaling ? And how to make sure that at what point my scaling process will be started, is it not necessarily to be there to configure a set request and to confirm if it reached more than defined request then pods will be created or else go down just like we set utilisation for cpu/memory. Once pod receive signal to go down then what about existing request, will those request going to be complete before pod move to termination or directly it will go down. And what about upcoming request will those http request will be go to other pod or simply it goes to the same pod that going to be terminated?
Please give a solution to this, if possible using KEDA or else if any other process is there to achieve the above using the Prometheus adapter
1. No need to purchase domain because even in the official github repo of keda they even use a dummy domain name. 2. Yes you can use nodeport for testing 3. In http addon , everything is based on http request , cant say about cpu/mem. Request here we can use such as cooldownperiod , fallbackoption,etc. 4. Yes the external scaler always make sure that every request is fulfilled , even if last request is not completed the pods will be up. No termination will happen till the last. 5. For handling request by pods that is dependable upto you as projects use loadbalancer with ingress.
I am trying to make video for prometheus scaler as well in which based autoscaling can start on basis of http_requests
thankyou very much sir for your support. We will always be grateful for you. We are using kubeadm environment with one Master 2node, If you are planning for a session or anywhere like comment section please update us what would be the format if we use ip with nodeport in host section instead of domain.
@@rohanrustagi7857sir, please create a session for number of http request based autoscalling to deployment service with Prometheus, Prometheus adapter using helm for kubeadm environment. I am eagerly waiting for it..
Please create video for http based triggering autos calling
Thank you for your feedback, I will try to make video asap.
@@rohanrustagi7857 i followed your video right now, it's very impressive and easy to understand for the one who have no Idea on this. Requesting you to create one more session for the same with KEDA for http based autoscalling, it's very important for me right now..
Thank you for your words, I will definitely try to cover this topic too.
@@rohanrustagi7857 if we can do http no of request based autoscalling using Prometheus and Prometheus adapter then pls make a session also for the same.
Hey @SandeepDash-sv6qI, you can watch this video for http autoscaling ruclips.net/video/EwEn2MKjB6k/видео.html
inaudible
Yes, sorry for that. My airpods was facing some issue with mic. I have tried that in my later videos I don't have the audio quality issue.
Fantastic walktrough 🙌
Glad you enjoyed it
Awesome tutorial!
Thank you so much ❤, it means a lot to me.