Etcd on Support Tools

Pulling Data from an etcd Backup: How to Extract a Secret from an etcd Snapshot Without Doing a Full Cluster Restore

Fri, 18 Oct 2024 19:26:00 -0500

In Kubernetes, etcd serves as the backend data store for all cluster state, including secrets, configuration data, and application state. But what happens if you need to pull a specific secret from an etcd snapshot without doing a full cluster restore? Fortunately, there’s a way to extract specific data from an etcd backup without impacting the entire cluster.

In this post, we’ll walk through how to pull a secret from an etcd snapshot, saving you from the complexity of restoring the entire cluster.

Deep Dive into etcd and Kubernetes

Wed, 15 May 2024 04:00:00 -0500

This workshop provides an in-depth exploration of etcd and its critical role in Kubernetes. Participants will gain a comprehensive understanding of etcd, learn how to install and configure it, and practice essential tasks such as data manipulation, troubleshooting, performance tuning, and recovery.

How to change etcd cipher suite in Rancher / RKE

Sun, 28 Feb 2021 23:22:00 +0000

This article will walk Rancher administrators through hardening the cluster communication between etcd nodes. We’ll go over configuring etcd to use specific ciphers which enable stronger encryption for securing intra-cluster etcd traffic.

The cipher suites defined in the example could trade off speed for stronger encryption. Consider the level of ciphers in use and how they could impact the performance of an etcd cluster. Testing should be done to factor the spec of your hosts (cpu, memory, disk, network, etc…) and the typical types of interacting with kubernetes as well as the amount of resources under management within the k8s cluster.