ReSearchITEng

logging, externaldns,oauth2

7

see https://kubeprod.io/ for cli -> to evaluate: https://github.com/vmware-tanzu/pinniped/blob/main/doc/architecture.md

more cli commands

1

https://medium.com/free-code-camp/how-to-set-up-a-serious-kubernetes-terminal-dd07cab51cd4

https://github.com/vmware-tanzu/velero (Velero - aka Ark of Heptio) for backing up manifests. Maybe evaluate also solutions for additional full etcd backup

- [ ] 1. Adopt operator for setting the policies: https://github.com/nirmata/kyverno/blob/master/samples/README.md - [ ] 2. Add additional flags at kubeadm installation time/post install, based on https://www.stackrox.com/post/2019/09/12-kubernetes-configuration-best-practices/ - [ ] 3....

ntp is not good for vms, the right solution for both rh bases and debian bases: chrony review: https://github.com/influxdata/ansible-chrony/blob/master/tasks/install.yml

https://kubernetes.io/docs/tasks/administer-cluster/kubeadm/kubeadm-certs/#set-up-a-signer

https://vitobotta.com/2019/08/06/kubernetes-storage-openebs-rook-longhorn-storageos-robin-portworx/

https://kubernetes.io/docs/concepts/configuration/manage-compute-resources-container/#building-and-mounting-filesystems-with-project-quotas-enabled

move vpshere to out-of-tree

1

https://github.com/kubernetes/cloud-provider-vsphere

e.g. [ ] Kured [ ] contour https://corrosion.universe.tf/stack/