Requirement I have full access kubeconfig and I want to provide a limited kubeconfig to another user, which only has access to resources in one specific namespace. Steps Create the namespace. 1 kubectl create namespace example Create a ServiceAccount in previous namespace. 1 2 3 4 5 apiVersion:v1kind:ServiceAccountmetadata:name:example-usernamespace:example 1 kubectl create -f service_account.yaml Create Role and RoleBinding for the ServiceAccount in previous namespace.

Preface When I was using AWS as Kubernetes cloud provider, I have two choices for persistent volume, EBS and EFS. However, EBS can only mount to one EC2 instance, which is not appropriate to my scenario, so I can only choose EFS. My requirement is that when I need a persistent volume, I only create PVC and the related PV should be created automatically. So I summary the steps to reach my purpose in below words.

Preface These are some tips or something should be considered when you want to deploy your service on Kubernetes. About Pod How to decide what things should be put in one Pod? When designing a Pod, you should consider below 4 types container. Function container Init container Monitor container Operator container Function container is the service. Init container is responsible for initializing the service. For example, the configuration.

Reference GopherCon 2016: Francesc Campoy - Understanding nil 理解Go语言的nil Is it a bug? 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 package main import ( "fmt" ) type doError struct{} func (e *doError) Error() string { return "" } func do() error { var err *doError return err