"A bootloader is a special program that is executed each time a bootable device is initialized by the computer during its power on or reset that will load the kernel image into the memory. This application is very close to hardware and to the architecture of the CPU. All x86 PCs boot in Real Mode. In this mode you have only 16-bit instructions. Our bootloader runs in Real Mode and our bootloader is a 16-bit program."
PXC / MariaDB Clusters really works better with writes on single ode than multi node writes.
proxySQL setup for a cluster in Single-writer mode, Which is the most recommended for Cluster to avoid of conflicts of writes and split-Brain scenarios.
listening on ports 6032 for proxysql admin interface and 6033 for MySQL interface by default
Keycloak is an “Open source identity and access management” solution.
setup a central Identity Provider (IdP) that applications acting as Service Providers (SP) use to authenticate or authorize user access.
FreeIPA does a LOT more than just provide user info though. It can manage user groups, service lists, hosts, DNS, certificates, and much, much, more.
when a Node gets down, the pods of the broken node are still running for some time and they still get requests, and those requests, will fail.
1- The Kubelet posts its status to the masters using –node-status-update-frequency=10s
2- A node dies
3- The kube controller manager is the one monitoring the nodes, using –-node-monitor-period=5s it checks, in the masters, the node status reported by the Kubelet.
4- Kube controller manager will see the node is unresponsive, and has this grace period –node-monitor-grace-period=40s until it considers the node unhealthy.
node-status-update-frequency x (N-1) != node-monitor-grace-period
5- Once the node is marked as unhealthy, the kube controller manager will remove its pods based on –pod-eviction-timeout=5m0s
6- Kube proxy has a watcher over the API, so the very first moment the pods are evicted the proxy will notice and update the iptables of the node, removing the endpoints from the services so the failing pods won’t be accessible anymore.