Kubernetes - Revision history

Pio2pio at 08:12, 18 July 2023

2023-07-18T08:12:34Z

← Older revision		Revision as of 10:12, 18 July 2023
Line 40:		Line 40:
	\| Inbound		\| Inbound
	\| 10250		\| 10250
	\| Kubelet TLS secure API, accepts connections from the API server (master)		\| EKS - Kubelet TLS secure API, accepts connections from the API server (master)<br>GKE - unauthenticated API served on the read-only port - disabled on 31-01-2024
			\| Self, Control plane
			\|-
			\| TCP
			\| Inbound
			\| 10255
			\| EKS, GKE - Authenticated Kubelet TLS secure API, accepts connections from the API server (master). Disabled in GKE 1.29.
	\| Self, Control plane		\| Self, Control plane
	\|-		\|-

2022-02-22T14:24:33Z

Containers runtime

← Older revision		Revision as of 16:24, 22 February 2022
Line 123:		Line 123:
	</source>		</source>

	= Containers runtime =		= Kubernetes components =
			== Core components ==
			;kube-proxy: it's responsible for forwarding traffic from an overlay network to backend pods. The name is misleading as it's not a real proxy, it programs iptables to intercept traffic and ask the Linux Kernel to do its job. Iptables randomly select one of the backend pods when forwarding the traffic, perform NAT and PAT before sending a packet to the destination pod.
			== Containers runtime ==
	Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.		Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.
	<source lang=bash>		<source lang=bash>

2021-11-30T13:34:26Z

Kubernetes Entrypoint and Cmd

← Older revision		Revision as of 15:34, 30 November 2021
Line 145:		Line 145:
	;References		;References
	* [https://www.ianlewis.org/en/container-runtimes-part-1-introduction-container-r container runtimes] Fascinating reading, published in 2017		* [https://www.ianlewis.org/en/container-runtimes-part-1-introduction-container-r container runtimes] Fascinating reading, published in 2017

			= Annotations for humans =
			* [https://kubernetes.io/blog/2021/04/20/annotating-k8s-for-humans/ Annotations for humans]

	[[Category:kubernetes]]		[[Category:kubernetes]]

2021-01-28T15:37:35Z

Kubernetes Entrypoint and Cmd

← Older revision		Revision as of 17:37, 28 January 2021
Line 141:		Line 141:
	Arguments passed to the command cmd args:		Arguments passed to the command cmd args:


			K8s overrides: <code>tail -f /dev/null</code> or <code>sleep infinity</code>
	;References		;References
	* [https://www.ianlewis.org/en/container-runtimes-part-1-introduction-container-r container runtimes] Fascinating reading, published in 2017		* [https://www.ianlewis.org/en/container-runtimes-part-1-introduction-container-r container runtimes] Fascinating reading, published in 2017

	[[Category:kubernetes]]		[[Category:kubernetes]]

2021-01-28T15:36:16Z

Containers runtime

@@ Line 130: / Line 130: @@
 containerd /run/containerd/containerd.sock
 </source>
 ;References

2020-07-15T22:36:12Z

Containers runtime

← Older revision		Revision as of 00:36, 16 July 2020
Line 130:		Line 130:
	containerd /run/containerd/containerd.sock		containerd /run/containerd/containerd.sock
	</source>		</source>

			;References
			* [https://www.ianlewis.org/en/container-runtimes-part-1-introduction-container-r container runtimes] Fascinating reading, published in 2017

	[[Category:kubernetes]]		[[Category:kubernetes]]

2019-10-05T09:28:12Z

Common ports

← Older revision		Revision as of 11:28, 5 October 2019
Line 59:		Line 59:
	\| 10255		\| 10255
	\| Read-Only (non-secure) Kubelet API, *disabled on EKS		\| Read-Only (non-secure) Kubelet API, *disabled on EKS
	\|
	\|-
	~~\| TCP~~
	~~\| Inbound~~
	~~\| 2379-2380~~
	~~\| etcd server client API~~
	\|		\|
	\|}		\|}
Line 128:		Line 122:
	/api		/api
	</source>		</source>

	= Containers runtime =		= Containers runtime =
	Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.		Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.

2019-10-05T09:24:52Z

@@ Line 18: / Line 18: @@
 ! Purpose
 ! UsedBy
 |-
 | TCP
@@ Line 53: / Line 59: @@
 | 10255
 | Read-Only (non-secure) Kubelet API, *disabled on EKS
+|
 |}
@@ Line 76: / Line 88: @@
 | NodePort Services (defaults)
 | All
 |}

2019-10-05T09:16:31Z

Common ports

← Older revision		Revision as of 11:16, 5 October 2019
Line 92:		Line 92:
	/api		/api
	</source>		</source>
			= Containers runtime =
			Since v1.6.0, Kubernetes has enabled the use of CRI, Container Runtime Interface, by default.
			<source lang=bash>
			Docker /var/run/docker.sock
			CRI-O /var/run/crio/crio.sock
			containerd /run/containerd/containerd.sock
			</source>
	[[Category:kubernetes]]		[[Category:kubernetes]]

2019-10-05T09:13:40Z

Common ports

@@ Line 3: / Line 3: @@
 = Common ports =
-Docker:
+;Docker
-<source>
+<source lang=bash>
-:2375 - docker.d http
+TCP :2375 - docker.d http
-:2376 - docker.d https
+TCP :2376 - docker.d https
 </source>
-Kubernetes:
-<source>
+;Kubernetes
-netstat -tupln | grep kubelet
+Control-plane node(s)
-.0.0.1:10248 -
+{| class="wikitable"
-.0.0.1:10250 - secure TLS kubelet
+! Protocol
-.0.0.1:10255 - non-secure kubelet
+! Direction
 .0.0.1:45039 - CRI (Container Runtime Interface)streaming server port, used by kubectl exec/attach/port-forward
                    shim is build in into kublet
 </source>