Henry Xie 's blog
Wednesday, February 09, 2022
Tip: kubectl apply --dry-run=client server RBAC role
›
kubectl apply --dry-run is very useful to test manifests. There are differences of RBAC requirement with kubectl apply --dry-run=client and...
Wednesday, December 01, 2021
How to expose kube api server via nginx proxy
›
Requirement: Kubernetes API (Control Plane) are often sitting behind the firewall. To provide more security and load balancing, we need...
Wednesday, November 17, 2021
Tip: kube-apiserver can't start after adding a parameter
›
Symptom: We add a new oidc parameter for kube-apiserver to integrate with openID Dex. The parameter is --oidc-groups-prefix=oidc: After t...
Sunday, October 24, 2021
Tip: Error: vault kv get invalid character - in numeric literal
›
Symptom: When we use vault kv get to fetch CA from pki endpoint, we hit error $ vault kv get pki/ca/pem Error reading pki/ca/pem: invalid c...
Wednesday, September 22, 2021
Error: invalid bearer token, oidc: verify token: oidc: expected audience
›
Symptom: After we implemented dex + github via link . With example-app,we are able to get ID-token via http://127.0.0.1:5555/ With ID-tok...
‹
›
Home
View web version