Contents

Kubernetes Limit Node Access

Rules

  • Create Cluster in Private Network
  • The Cluster(Private Network) is NOT ALLOWED public network.
  • The Cluster(Private Network) can ACCESS VPN.
  • The Cluster(Private Network) can ACCESS specific IP ranges.
  • The Cluster(Private Network) can ACCESS who is needed.

Server Account Types

User Accounts

User Accounts
This is for normal user for ftp, ssh, etc.

Superuser Account

Superuser
This is mean, typically root user.
It’s UID = 0.

System Accounts

System
This is for system programs.
sys, mail

Service Accounts

Service
This is for services.
nginx, http

Check Points for Server Accounts

Current User

1
id
1
who
1
last

Check Account Files

1
cat /etc/passwd
1
cat /etc/shadow
1
cat /etc/group

Configure User

User Mode

1
usermod –s /bin/nologin michael

User Delete

1
userdel bob

Exclude the User from a Group

1
id michael
1
uid=1001(michael) gid=1001(michael) groups=1001(michael),1000(admin)
1
 deluser michael admin 
1
2
Removing user `michael` from group `admin` ...
Done.
1
id michael
1
uid=1001(michael) gid=1001(michael) groups=1001(michael)