Kubernetes

By adding specific privileges, you can execute kubectl within a container to operate on clusters. The standard Kubernetes way for managing container privileges is using Role resource. For the assurance of RBAC and scalability, directly assigning a Role to a Pod is not possible. Instead, you need both RoleBinding and ServiceAccount, creating the following references:……

NetworkPolicy is a Kubernetes resource that restricts packet transfer between pods. It can limit the connectivity topology among internal pods and may also allow the implementation of IP-ban through a deny list. While the interface of the NetworkPolicy is standardized, it’s crucial to be aware that interpretation and behavior can vary depending on implementations.……

k3s can create a compact kubernetes cluster for development. With extra tweaks, you can access its containers from the host plain network. Static route to service network via flannel k3s has default subnetwork of 10.43.0.0./16 for services, and default host of 10.42.0.1 for flannel DNS config including kube-dns k3s has default host of 10.……

k3s is a lightweight kubernetes distribution. It is also used as the runtime for Rancher Desktop. You can install it by running the script on its site. $ curl -sfL https://get.k3s.io | sh - In this process, the systemd setting is completed, and k3s will start automatically when the system starts.……