• 1 Post
  • 33 Comments
Joined 9 days ago
cake
Cake day: March 19th, 2025

help-circle



















  • Considering I am the operations team, just goes to show how much I have left to learn. I didn’t know about the external-dns operator.

    Unfortunately, my company is a bit strange with certs and won’t let me handle them myself. Something to check out at home I guess.

    I agree with you about the LVM. I have been meaning to set up Rook forever but never got around to it. It might still take a while but thanks for the reminder.

    Wow. That must have been some work. I don’t have these certs myself but I’m looking at the CKA and CKS (or whatever that’s called). For sure, I loved our discussion. Thanks for your help.


  • I am using a reverse proxy in production. I just didn’t mention it here.

    I’d have to set up a DNS record for both. I’d also have to create and rotate certs for both.

    We use LVM, I simply mounted a volume for /usr/share/elasticsearch. The VMWare team will handle the underlying storage.

    I agree with manually dealing with the repo. I dont think I’d set up unattended upgrades for my k8s cluster either so that’s moot. Downtime is not a big deal: this is not external and I’ve got 5 nodes. I guess if I didn’t use Ansible it would be a bit more legwork but that’s about it.

    Overall I think we missed each other here.