kubectl apply --dry-run is very useful to test manifests.
There are differences of RBAC requirement with kubectl apply --dry-run=client and server.
Both need a role in fetching CRD to go through the validation admission chain and the mutating admission chain.
We need READ ONLY role for kubectl apply --dry-run=client and READ WRITE role for kubectl apply --dry-run=server
On Thursday, I passed the CKA exam with a 93 score mark and get the certificate. I share some tips on how I achieve that.
list=($(kubectl get --raw / | jq -r '.paths[] | select(. | startswith("/api"))')); for tgt in ${list[@]}; do aruyo=$(kubectl get --raw ${tgt} | jq .resources); if [ "x${aruyo}" != "xnull" ]; then echo; echo "===${tgt}==="; kubectl get --raw ${tgt} | jq -r ".resources[] | .name,.verbs"; fi; done
$kubectl version
Could not find platform independent libraries <prefix>
Could not find platform dependent libraries <exec_prefix>
Consider setting $PYTHONHOME to <prefix>[:<exec_prefix>]
Fatal Python error: initfsencoding: Unable to get the locale encoding
ModuleNotFoundError: No module named 'encodings'
Current thread 0x00007f2d902e0740 (most recent call first):
Client Version: version.Info{Major:"1", Minor:"16", GitVersion:"v1.16.0", GitCommit:"2bd9643cee5b3b3a5ecbd3af49d09018f0773c77", GitTreeState:"clean", BuildDate:"2019-09-18T14:36:53Z", GoVersion:"go1.12.9", Compiler:"gc", Platform:"linux/amd64"}
Unable to connect to the server: getting credentials: exec: signal: aborted (core dumped)
kubectl run -i --tty busybox --image=busybox --restart=Never -- cat /etc/resolv.conf
while true;do nc -vz 10.96.5.5 53;sleep 3; done
