zealvora / certified-kubernetes-security-specialist Goto Github PK

The instructions on domain-1-cluster-setup/kubeadm.md will need to be updated as the below commands are failing

Failing commands :

apt-get update && apt-get -y install docker-ce docker-ce-cli

Error:

root@server1:~# apt-get update && apt-get -y install docker-ce docker-ce-cli
Get:1 http://mirrors.digitalocean.com/ubuntu focal InRelease [265 kB]
Hit:2 http://mirrors.digitalocean.com/ubuntu focal-updates InRelease
Hit:3 http://mirrors.digitalocean.com/ubuntu focal-backports InRelease
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Fetched 265 kB in 1s (262 kB/s)
Reading package lists... Done
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package docker-ce is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

E: Package 'docker-ce' has no installation candidate
E: Unable to locate package docker-ce-cli

Fix:

Add instructions from https://docs.docker.com/engine/install/ubuntu/

Specifically setting up the stable repo steps

The etcd pods keep restarting due to which kube-api server keeps restarting. can you please me here.

Rule 1: Deny Ingress
nano netpol.yaml

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: default-deny-ingress
spec:
podSelector: {}
ingress:

• {}
  policyTypes:
• Ingress

There are multiple issues for setting up minikube when using Ubuntu 22.04 LTS

1. There is no ubuntu user - Need to add an ubuntu user and then add it to docker group

useradd -m ubuntu -s /bin/bash
chown -R ubuntu.ubuntu /home/ubuntu
sudo usermod -aG docker ubuntu

2. While running minikube start - minikube fails at

[wait-control-plane] Waiting for the kubelet to boot up the control plane as static Pods from directory "/etc/kubernetes/manifests". This can take up to 4m0s
[kubelet-check] Initial timeout of 40s passed.

	Unfortunately, an error has occurred:
		timed out waiting for the condition

	This error is likely caused by:
		- The kubelet is not running
		- The kubelet is unhealthy due to a misconfiguration of the node in some way (required cgroups disabled)

There is no mention of setting up kubelet in the video or document ?

Overview of Service Account link is taking to ingress security link and not to serviceaccount.md file

Network plugin URLs are not working.

kubectl create -f https://docs.projectcalico.org/manifests/tigera-operator.yaml
kubectl create -f https://docs.projectcalico.org/manifests/custom-resources.yaml

Please replace it with below

kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/v3.26.4/manifests/tigera-operator.yaml
kubectl create -f https://raw.githubusercontent.com/projectcalico/calico/v3.26.4/manifests/custom-resources.yaml