Code1x1 Wiki - kubernetes
https://wiki.code1x1.de/
2026-04-14T06:47:44+00:00Code1x1 Wiki
https://wiki.code1x1.de/
https://wiki.code1x1.de/lib/exe/fetch.php?media=wiki:dokuwiki.svgtext/html2025-09-14T13:53:49+00:00Anonymous (anonymous@undisclosed.example.com)config
https://wiki.code1x1.de/doku.php?id=kubernetes:config&rev=1757858029&do=diff
Kubernetes Config
How to get a kubeconfig for an existing cluster?
Cluster API server URL
CA certificate (or confirm it’s OK to skip TLS verification)
Auth method: service account token, client cert/key, or OIDC
Desired context name and default namespacetext/html2025-08-02T19:06:35+00:00Anonymous (anonymous@undisclosed.example.com)docker_registry
https://wiki.code1x1.de/doku.php?id=kubernetes:docker_registry&rev=1754161595&do=diff
Docker Registrytext/html2025-08-02T19:06:20+00:00Anonymous (anonymous@undisclosed.example.com)ingress
https://wiki.code1x1.de/doku.php?id=kubernetes:ingress&rev=1754161580&do=diff
ingresstext/html2025-08-02T19:06:03+00:00Anonymous (anonymous@undisclosed.example.com)kubespray
https://wiki.code1x1.de/doku.php?id=kubernetes:kubespray&rev=1754161563&do=diff
kubespraytext/html2025-08-02T19:06:49+00:00Anonymous (anonymous@undisclosed.example.com)metallb
https://wiki.code1x1.de/doku.php?id=kubernetes:metallb&rev=1754161609&do=diff
Metal LBtext/html2025-08-05T20:10:30+00:00Anonymous (anonymous@undisclosed.example.com)nftables
https://wiki.code1x1.de/doku.php?id=kubernetes:nftables&rev=1754424630&do=diff
nftables
root@matellb:~# cat /etc/nftables.d/proxy.conf
#!/sbin/nft -f
flush ruleset
table ip filter {
# allow all packets sent by the firewall machine itself
chain output {
type filter hook output priority 100; policy accept;
}
# allow LAN to firewall, disallow WAN to firewall
chain input {
type filter hook input priority 0; policy accept;
iifname "wg0" accept
iifname "eth0" accept
}
# allow packets from WG to WAN, and WAN to WG
…text/html2025-08-05T20:14:27+00:00Anonymous (anonymous@undisclosed.example.com)wireguard
https://wiki.code1x1.de/doku.php?id=kubernetes:wireguard&rev=1754424867&do=diff
wireguard
::::::::::::::
/etc/wireguard/privatekey
::::::::::::::
kIVN6Oz8w+Xom15/8IDi/pFvR3tdWVyWUt4gVK6Iil4=
::::::::::::::
/etc/wireguard/publickey
::::::::::::::
rApLO/kTVte/DJQZn5WzeGJXyopuEl+vNSKIle4LAHQ=
::::::::::::::
/etc/wireguard/wg0.conf
::::::::::::::
[Interface]
PrivateKey=kIVN6Oz8w+Xom15/8IDi/pFvR3tdWVyWUt4gVK6Iil4=
ListenPort=51820
Address=10.0.0.1/24
MTU=1300
# Laptop
[Peer]
PublicKey=jJlpnPDf91EqRov0SwizuoKMKwvEOw2nlNsSxSnFIVM=
PresharedKey=UpEtRoLHLC/kiVO2eo4zACObjU/LpuuxO…