'kubernetes' 검색 결과

Expert knowledge for Azure Kubernetes Service Edge Essentials development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when deploying AKS Edge/Hybrid with Arc, Azure Local, GitOps, IoT/OPC/ONVIF, or Key Vault-integrated workloads, and other Azure Kubernetes Service Edge Essentials related development tasks. Not for Azure Kubernetes Service (AKS) (use azure-kubernetes-service), Azure IoT Edge (use azure-iot-edge), Azure Stack Edge (use azure-stack-edge), Azure Container Apps (use azure-container-apps).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Prevent Kubernetes hallucinations by diagnosing and fixing failure modes: insecure workload defaults, resource starvation, network exposure, privilege sprawl, fragile rollouts, and API drift. Use when generating, reviewing, refactoring, or migrating manifests, Helm charts, Kustomize overlays, cluster policies, and platform-specific Kubernetes work for EKS, GKE, AKS, OpenShift, GitOps controllers, or observability stacks.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Kubernetes is the operating system for the cloud. It schedules containers, handles networking, manages storage, and keeps your apps running. But K8s has a steep learning curve - abstractions on abstractions on abstractions. This skill covers the core concepts (Pods, Deployments, Services), production patterns (health checks, resource limits, HPA), and the gotchas that catch everyone (namespace confusion, service discovery, secret management). 2025 reality: You probably don't need to run your own cluster. Use managed K8s (EKS, GKE, AKS) unless you have a very good reason not to. Focus on writing good manifests, not managing etcd. Use when "kubernetes, k8s, kubectl, deployment manifest, helm chart, kustomize, pod, service yaml, ingress, horizontal pod autoscaler, hpa, kubernetes, k8s, containers, orchestration, devops, cloud-native, helm, kustomize" mentioned.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

World-class Kubernetes operations - deployments, debugging, Helm charts, and the battle scars from managing clusters that serve millions of requestsUse when "kubernetes, k8s, kubectl, helm, pod, deployment, service, ingress, configmap, secret, statefulset, daemonset, hpa, pvc, crashloopbackoff, imagepullbackoff, oomkilled, liveness probe, readiness probe, kubernetes, k8s, containers, docker, helm, deployment, devops, cloud-native" mentioned.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement secure secrets management in Kubernetes using SealedSecrets for GitOps, External Secrets Operator for cloud secret managers, and rotation strategies. Handle TLS certificates, API keys, and credentials with encryption at rest and RBAC controls. Use when storing sensitive configuration for Kubernetes applications, implementing GitOps where secrets must be version-controlled, integrating with AWS Secrets Manager or Azure Key Vault, rotating credentials without downtime, or migrating from plaintext Secrets to encrypted solutions.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules from audit event patterns. Use when investigating Kubernetes cluster compromise or building k8s-specific SIEM detection rules.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

再利用可能な構成でKubernetesアプリケーションをテンプレート化およびパッケージ化するためのHelmチャートの設計、整理、管理。Helmチャートの作成、Kubernetesアプリケーションのパッケージング、テンプレート化されたデプロイメントの実装に使用します。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

本番グレードのセキュリティのためのNetworkPolicy、PodSecurityPolicy、RBACを含むKubernetesセキュリティポリシーの実装。Kubernetesクラスタのセキュリティ確保、ネットワーク分離の実装、Podセキュリティ標準の強制に使用します。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

継続的な調整を伴う自動化された宣言的Kubernetesデプロイメント用のArgoCDとFluxを使用したGitOpsワークフローの実装。GitOps実践の実装、Kubernetesデプロイメントの自動化、宣言的インフラストラクチャ管理のセットアップに使用します。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parses Kubernetes API server audit logs (JSON lines) to tespit etme
exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat Tespit rules from audit event patterns. Use investigating yaparken Kubernetes cluster compromise or building k8s-specific SIEM Tespit rules.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules from audit event patterns. Use when investigating Kubernetes cluster compromise or building k8s-specific SIEM detection rules.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API access. Builds threat detection rules from audit event patterns. Use when investigating Kubernetes cluster compromise or building k8s-specific SIEM detection rules.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Generates Kubernetes manifests including Deployments, Services, ConfigMaps, Secrets, Ingress, and HPA with best practices. Use when users request "Kubernetes setup", "K8s manifests", "deploy to Kubernetes", "container orchestration", or "K8s configuration".

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Deploy container applications on AWS using ECS and Fargate, which runs containers without managing servers. Covers image publishing, task configuration, load balancing, automatic scaling, deployment updates, and troubleshooting failed or unhealthy containers.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Deploy Docker applications on Fargate
• Configure load balancing and automatic scaling
• Investigate failed tasks and health checks

Manage API keys, passwords, and certificates used in CI/CD, the automated process for testing and deploying software. Connect secret stores, plan credential rotation, restrict access, and prevent sensitive values from appearing in logs.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Moving API keys and passwords out of source code
• Connecting CI/CD pipelines to secret stores
• Planning automated or manual credential rotation

Assess whether a container can escape its isolation and reach the host during an authorized security test. Review privileges, shared mounts, Docker socket exposure, and runC vulnerabilities, then document demonstrated impact and remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing container escape within an approved scope
• Assessing the impact of privileged or hostPath workloads
• Validating controls that block container escape

Detect unexpected changes in running containers by comparing them with their original images and monitoring execution and file activity. Use Falco or Microsoft Defender for Containers to investigate changes and guide isolation, replacement, and preventive configuration.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding unexpected binaries executed inside running containers
• Investigating package installations and file changes at runtime
• Checking whether containers still match their approved images

Design and operate shared secret storage with HashiCorp Vault or cloud services. The skill guides access policies, automated credential rotation, temporary credentials, audit analysis, and secret delivery to applications and deployment pipelines.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up Vault or a cloud secret store
• Automating database password and API key rotation
• Auditing access to secrets

Diagnoses applications that fail to start or repeatedly crash on GKE, Google's managed Kubernetes service. It examines logs, events, memory use, image pulls, and connectivity, then proposes configuration patches or commands without applying live changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigate repeated container restarts
• Diagnose memory exhaustion
• Find causes of image pull or scheduling failures

Review GKE reliability settings for applications running in Kubernetes. Configure availability safeguards during maintenance, health checks, replica counts, graceful shutdown, and distribution across zones and nodes to help workloads handle disruptions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing GKE high availability
• Maintaining Pod availability during upgrades
• Configuring application health checks

Helps configure an iii engine for Compose management or direct supervision by tools such as systemd. Covers configuration file structure, ports, storage, and role-based access control through rbac-proxy, including requirements for public connections.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Configuring an engine managed by Compose
• Configuring an engine supervised by systemd or Kubernetes
• Setting authentication and access rules for public connections

Manage FrontendExtension resources in frontend-forge, from creation and package generation to downloading, publishing, and unpublishing. Inspect generated files, Kubernetes jobs, and status information to diagnose packaging or publishing failures.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Create or update a FrontendExtension
• Rebuild and download an extension package
• Publish, unpublish, or remove an extension

Set up and troubleshoot automated build, test, and deployment workflows in KubeSphere DevOps. Covers Jenkins integration, project management, multi-cluster installation, and ArgoCD integration for deployments managed through Git.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up build, test, and deployment pipelines
• Configure Jenkins integration
• Install DevOps across multiple clusters

Understand KubeSphere architecture and call its APIs with a script that handles authentication. This skill also directs cluster, user, workspace, and extension management requests to the relevant specialist skills.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Understand KubeSphere core components
• Choose API paths for Kubernetes and KubeSphere operations
• Send API requests to a specific member cluster