kubernetes deployment strategy notes

2026-10-30 17:18:18 -07:00
parent 504f81de76
commit 35c9d9fd36
57 changed files with 1677 additions and 0 deletions
@@ -0,0 +1,3 @@
+I did rely on AI to kludge my way through this process, because I've never had to do it before.  Thus far my experience managing RBAC on kuberneties has been leveraging OIDC with some form of SSO, like LDAP (Active Directory/FreeIPA).
+
+This was a learning experience for me.
@@ -0,0 +1,12 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: rcuda-cluster-admin-binding
+subjects:
+- kind: User
+  name: rcuda  # Must match the CN from the certificate
+  apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: cluster-admin
+  apiGroup: rbac.authorization.k8s.io
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICVTCCAT0CAQAwEDEOMAwGA1UEAwwFcmN1ZGEwggEiMA0GCSqGSIb3DQEBAQUA
+A4IBDwAwggEKAoIBAQCTVTfCRu4v4LgHXsFem0KfkoSAxy498g2qCSsgDegDUUYU
+C7ptXNLGY8McyZRlmiCGhfRKygq3zm/3da5w806/ldPZikiUuXIi2brc+2es6ey7
+tKQUXTtU/R8NmtyXVIErBwbQeHKXIH65+tJtmWhzvmvbzCIGisaldKnSQDoy3bXP
+UaawJm0Wwnzsv9YWJ9JIr7RU15N9ngG3RAF+eYgxarJOZHHJK0qmPeSB6Ux9kIGl
+fSTNndAWdG0CB81kxV4FnlYQdw+/nBfoluhLAzL+VUzLUeE2ujin3o2Yy6v3Xiqy
+zg6Sa9y41WcjtP78KuFiQOudiZlUS83bjmAcpBzbAgMBAAGgADANBgkqhkiG9w0B
+AQsFAAOCAQEAhPbV9ue8FWhX+rlW7qT+4qruzYKFSn5OVZ6qMOAJr4vQwJjQhQbT
+MWLxh2nBH1Q56iW1lUVU/FjvyGsHsoPEvNKWxYtBeGeICjllpkcDyCtB0UAHhj0X
+efFghXM5kzh6YhgjDiKIajx4m7C0GFZBYvyxo8gYfpp+PBgaWsSztp7dzxQdU74k
+sGQ69R/4yQY7uVYgHNCB7shN6jT/XUWGBypOtYejP8cdKf0ZecO1PL8DvsS4jVzL
+fVNVEvWf0DlaEJdIJEvFwZNxfqf7UdXARCReZBKs5rYPFBsyjiL4y3v43WzTzZKy
+ECLNLgDMicf00nTZ2+ob4q8vJ4kK1cqnXg==
+-----END CERTIFICATE REQUEST-----
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----