Skip to content

Instantly share code, notes, and snippets.

@josecastillolema

josecastillolema/tricks.md

Last active September 7, 2024 10:07
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save josecastillolema/25367ae014b09c2773fa1a9d3aeef89f to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save josecastillolema/25367ae014b09c2773fa1a9d3aeef89f to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. josecastillolema revised this gist Sep 7, 2024. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -205,7 +205,7 @@ spec:
    ```
    - Find bandwidth usage from oc debug pod:
    ```
    # watch 'ifstat | egrep "ens2f1|br-ex"'
    # watch 'ifstat | egrep "Interface|ens2f1|br-ex"'
    Interface RX Pkts/Rate TX Pkts/Rate RX Data/Rate TX Data/Rate
    ens2f1 207410 0 302468 0 198718K 0 373721K 0
    br-ex 87834 0 73934 0 186289K 0 358096K 0
  2. josecastillolema revised this gist Sep 7, 2024. 1 changed file with 26 additions and 19 deletions.
    45 changes: 26 additions & 19 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -178,28 +178,35 @@ spec:
    ## Network
    Limit bandwidth:
    - Limit bandwidth:
    ```
    nsenter -n -t 1740238 tc qdisc add dev net1 root tbf rate 10Gbit latency 9999ms burst 2G
    ```
    ```
    nsenter -n -t 1740238 tc qdisc add dev net1 root tbf rate 10Gbit latency 9999ms burst 2G
    ```
    tcpdump:
    ```
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
    - [What and how length is determined in tcpdump](https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump)
    - When generating TCP packets gith a given size (i.e.: with uperf) you won't see the specific packet size in the dumps because the TCP stack aggregates TCP packets up to the MTU size (without TCP segmentation offload) and even bigger than the MTU size (with TCP segmentation offload)
    - UDP generated packets will show the appropiate size in the dumps:
    - tcpdump:
    ```
    11:27:56.800634 IP 192.168.216.1.57293 > 10.129.2.125.33735: UDP, length 1500
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
    - [What and how length is determined in tcpdump](https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump)
    - When generating TCP packets gith a given size (i.e.: with uperf) you won't see the specific packet size in the dumps because the TCP stack aggregates TCP packets up to the MTU size (without TCP segmentation offload) and even bigger than the MTU size (with TCP segmentation offload)
    - UDP generated packets will show the appropiate size in the dumps:
    ```
    11:27:56.800634 IP 192.168.216.1.57293 > 10.129.2.125.33735: UDP, length 1500
    ```
    Find NIC model:
    ```
    # realpath /sys/class/net/ens2f0
    /sys/devices/pci0000:97/0000:97:02.0/0000:98:00.0/net/ens2f0
    - Find NIC model:
    ```
    # realpath /sys/class/net/ens2f0
    /sys/devices/pci0000:97/0000:97:02.0/0000:98:00.0/net/ens2f0
    # lspci | grep 98:00.0
    98:00.0 Ethernet controller: Mellanox Technologies MT2892 Family [ConnectX-6 Dx]
    ```
    # lspci | grep 98:00.0
    98:00.0 Ethernet controller: Mellanox Technologies MT2892 Family [ConnectX-6 Dx]
    ```
    - Find bandwidth usage from oc debug pod:
    ```
    # watch 'ifstat | egrep "ens2f1|br-ex"'
    Interface RX Pkts/Rate TX Pkts/Rate RX Data/Rate TX Data/Rate
    ens2f1 207410 0 302468 0 198718K 0 373721K 0
    br-ex 87834 0 73934 0 186289K 0 358096K 0
    ```
  3. josecastillolema revised this gist May 30, 2024. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -25,7 +25,7 @@ oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson
    ### Admin service account
    ```
    $ oc create sa clusteradmin
    $ oc adm policy add-cluster-role-to-user -z clusteradmin cluster-admin
    $ oc adm policy add-cluster-role-to-user -z clusteradmin cluster-admin
    ```

    ### Nginx
  4. josecastillolema revised this gist May 2, 2024. 1 changed file with 8 additions and 3 deletions.
    11 changes: 8 additions & 3 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -2,21 +2,26 @@

    ### One liners

    Create a debug pod:
    Create a **debug pod**:
    ```
    $ kubectl run -it --tty --rm debug --image=alpine --restart=Never -- sh -n <namespace>
    ```

    Create a pod:
    Create a **pod**:
    ```
    $ kubectl run nginx --image=nginx --port=80 --restart=Never
    ```

    Create a deployment:
    Create a **deployment**:
    ```
    $ kubectl create deployment kubernetes-bootcamp --image=gcr.io/google-samples/kubernetes-bootcamp:v1
    ```

    Change **pull secret** of a running cluster:
    ```
    oc set data secret/pull-secret -n openshift-config --from-file=.dockerconfigjson=pull-secret.txt
    ```

    ### Admin service account
    ```
    $ oc create sa clusteradmin
  5. josecastillolema revised this gist Apr 19, 2024. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -118,6 +118,12 @@ oc get machinesets
    oc delete bmh <host_name> -n openshift-machine-api
    ```

    ### Define a % of nodes to be rebooted at the same time

    - mcp
    - under spec
    - maxUnavailable: 50%

    ### Enter container network namespace:
    ```
    [root@openshift-worker-1 /]# NAME=nginx-web-app-5dbd5f5cb5-rz7l4
  6. josecastillolema revised this gist Mar 19, 2024. 1 changed file with 16 additions and 0 deletions.
    16 changes: 16 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -102,6 +102,22 @@ $ oc get po -o yaml ovnkube-master-b96q7 -n openshift-ovn-kubernetes | grep imag
    image: quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    ```

    ### Scale down baremetal nodes
    ```
    oc get nodes
    oc adm cordon <node_name>
    oc adm drain <node_name> --force=true
    oc get machinesets -n openshift-machine-api
    oc scale --replicas=1 machineset <machineset> -n openshift-machine-api
    # Check active worker nodes, it would have been reduced to 1
    oc get nodes
    oc get machinesets
    oc delete bmh <host_name> -n openshift-machine-api
    ```

    ### Enter container network namespace:
    ```
    [root@openshift-worker-1 /]# NAME=nginx-web-app-5dbd5f5cb5-rz7l4
  7. josecastillolema revised this gist Jan 31, 2024. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -17,6 +17,12 @@ Create a deployment:
    $ kubectl create deployment kubernetes-bootcamp --image=gcr.io/google-samples/kubernetes-bootcamp:v1
    ```

    ### Admin service account
    ```
    $ oc create sa clusteradmin
    $ oc adm policy add-cluster-role-to-user -z clusteradmin cluster-admin
    ```

    ### Nginx

    Nginx pod with customizable HTTP object length:
  8. josecastillolema revised this gist Jan 16, 2024. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -9,7 +9,7 @@ $ kubectl run -it --tty --rm debug --image=alpine --restart=Never -- sh -n <name

    Create a pod:
    ```
    kubectl run nginx --image=nginx --port=80 --restart=Never
    $ kubectl run nginx --image=nginx --port=80 --restart=Never
    ```

    Create a deployment:
  9. josecastillolema revised this gist Jan 16, 2024. 1 changed file with 5 additions and 0 deletions.
    5 changes: 5 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -7,6 +7,11 @@ Create a debug pod:
    $ kubectl run -it --tty --rm debug --image=alpine --restart=Never -- sh -n <namespace>
    ```

    Create a pod:
    ```
    kubectl run nginx --image=nginx --port=80 --restart=Never
    ```

    Create a deployment:
    ```
    $ kubectl create deployment kubernetes-bootcamp --image=gcr.io/google-samples/kubernetes-bootcamp:v1
  10. josecastillolema revised this gist Jan 15, 2024. 1 changed file with 19 additions and 10 deletions.
    29 changes: 19 additions & 10 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,7 +1,20 @@
    ## K8s / OpenShift

    Nginx pod with customizable HTTP object length:
    ### One liners

    Create a debug pod:
    ```
    $ kubectl run -it --tty --rm debug --image=alpine --restart=Never -- sh -n <namespace>
    ```

    Create a deployment:
    ```
    $ kubectl create deployment kubernetes-bootcamp --image=gcr.io/google-samples/kubernetes-bootcamp:v1
    ```

    ### Nginx

    Nginx pod with customizable HTTP object length:
    ```
    apiVersion: v1
    kind: Pod
    @@ -26,8 +39,7 @@ spec:
    privileged: true
    ```

    Uperf pod:

    ### Uperf
    ```
    kind: Pod
    apiVersion: v1
    @@ -48,8 +60,7 @@ spec:
    kubernetes.io/hostname: worker003-fc640
    ```

    Working nodePort service:

    ### nodePort service
    ```
    apiVersion: v1
    kind: Service
    @@ -70,8 +81,7 @@ spec:
    name: nginx
    ```

    Change OVN image:

    ### Change OVN image
    ```
    $ oc get po -o yaml ovnkube-master-45gw8 -n openshift-ovn-kubernetes | grep image | head -n1
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0254ef7bc2c26538a56f4f57f140aff0d101b896b0702d76653d6ec4ad7056dd
    @@ -81,8 +91,7 @@ $ oc get po -o yaml ovnkube-master-b96q7 -n openshift-ovn-kubernetes | grep imag
    image: quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    ```

    Enter container network namespace:

    ### Enter container network namespace:
    ```
    [root@openshift-worker-1 /]# NAME=nginx-web-app-5dbd5f5cb5-rz7l4
    [root@openshift-worker-1 /]# NAMESPACE=spk-app
    @@ -91,7 +100,7 @@ Enter container network namespace:
    [root@openshift-worker-1 /]# nsenter -n -t $pid -- ip a
    ```

    Sysctl tunnings:
    ### Sysctl tunnings
    ```
    apiVersion: tuned.openshift.io/v1
    kind: Tuned
  11. josecastillolema revised this gist Oct 31, 2023. 1 changed file with 10 additions and 1 deletion.
    11 changes: 10 additions & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -146,4 +146,13 @@ tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    - UDP generated packets will show the appropiate size in the dumps:
    ```
    11:27:56.800634 IP 192.168.216.1.57293 > 10.129.2.125.33735: UDP, length 1500
    ```
    ```
    Find NIC model:
    ```
    # realpath /sys/class/net/ens2f0
    /sys/devices/pci0000:97/0000:97:02.0/0000:98:00.0/net/ens2f0

    # lspci | grep 98:00.0
    98:00.0 Ethernet controller: Mellanox Technologies MT2892 Family [ConnectX-6 Dx]
    ```
  12. josecastillolema revised this gist Oct 23, 2023. 1 changed file with 6 additions and 1 deletion.
    7 changes: 6 additions & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -141,4 +141,9 @@ tcpdump:
    ```
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
    - [What and how length is determined in tcpdump](https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump)
    - [What and how length is determined in tcpdump](https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump)
    - When generating TCP packets gith a given size (i.e.: with uperf) you won't see the specific packet size in the dumps because the TCP stack aggregates TCP packets up to the MTU size (without TCP segmentation offload) and even bigger than the MTU size (with TCP segmentation offload)
    - UDP generated packets will show the appropiate size in the dumps:
    ```
    11:27:56.800634 IP 192.168.216.1.57293 > 10.129.2.125.33735: UDP, length 1500
    ```
  13. josecastillolema revised this gist Oct 23, 2023. 1 changed file with 14 additions and 0 deletions.
    14 changes: 14 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -114,6 +114,20 @@ spec:
    priority: 10
    profile: openshift-ingress
    ```
    - A number of sysctls are namespaced in today's Linux kernels
    - [Using sysctls in a Kubernetes Cluster](https://kubernetes.io/docs/tasks/administer-cluster/sysctl-cluster/#setting-sysctls-for-a-pod)
    - To confirm, rsh into the pod and list i.e.: `/proc/net`:
    ```
    sh-5.1# ls /proc/net/
    anycast6 icmp ip6_mr_vif mcfilter packet rpc sockstat6 udp6
    arp icmp6 ip_mr_cache mcfilter6 protocols rt6_stats softnet_stat udplite
    dev if_inet6 ip_mr_vif netfilter psched rt_acct stat udplite6
    dev_mcast igmp ip_tables_matches netlink ptype rt_cache tcp unix
    dev_snmp6 igmp6 ip_tables_names netstat raw snmp tcp6 xfrm_stat
    fib_trie ip6_flowlabel ip_tables_targets nf_conntrack raw6 snmp6 tls_stat
    fib_triestat ip6_mr_cache ipv6_route nf_conntrack_expect route sockstat udp
    ```
    Anything not in the directory, should be consider as namespaced.
    ## Network
  14. josecastillolema revised this gist Oct 23, 2023. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -127,4 +127,4 @@ tcpdump:
    ```
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
    - https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump
    - [What and how length is determined in tcpdump](https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump)
  15. josecastillolema revised this gist Oct 23, 2023. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -126,4 +126,5 @@ nsenter -n -t 1740238 tc qdisc add dev net1 root tbf rate 10Gbit latency 9999ms
    tcpdump:
    ```
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
    ```
    - https://unix.stackexchange.com/questions/473594/what-and-how-length-is-determined-in-tcpdump
  16. josecastillolema revised this gist Oct 23, 2023. 1 changed file with 33 additions and 0 deletions.
    33 changes: 33 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,5 @@
    ## K8s / OpenShift

    Nginx pod with customizable HTTP object length:

    ```
    @@ -89,8 +91,39 @@ Enter container network namespace:
    [root@openshift-worker-1 /]# nsenter -n -t $pid -- ip a
    ```

    Sysctl tunnings:
    ```
    apiVersion: tuned.openshift.io/v1
    kind: Tuned
    metadata:
    name: ingress
    namespace: openshift-cluster-node-tuning-operator
    spec:
    profile:
    - data: |
    [main]
    summary=A custom OpenShift ingress profile
    include=openshift-control-plane
    [sysctl]
    net.netfilter.nf_conntrack_tcp_timeout_close=10
    net.netfilter.nf_conntrack_tcp_timeout_close_wait=10
    name: openshift-ingress
    recommend:
    - match:
    - label: node-role.kubernetes.io/worker
    priority: 10
    profile: openshift-ingress
    ```

    ## Network

    Limit bandwidth:

    ```
    nsenter -n -t 1740238 tc qdisc add dev net1 root tbf rate 10Gbit latency 9999ms burst 2G
    ```

    tcpdump:
    ```
    tcpdump -i net1 -c 40 "tcp and src 192.168.216.1"
    ```
  17. josecastillolema revised this gist Oct 5, 2023. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -71,7 +71,7 @@ spec:
    Change OVN image:

    ```
    $ oc get -o yaml ovnkube-master-45gw8 -n openshift-ovn-kubernetes | grep image | head -n1
    $ oc get po -o yaml ovnkube-master-45gw8 -n openshift-ovn-kubernetes | grep image | head -n1
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0254ef7bc2c26538a56f4f57f140aff0d101b896b0702d76653d6ec4ad7056dd
    $ oc scale -n openshift-cluster-version deployment.apps/cluster-version-operator --replicas=0
    $ oc -n openshift-network-operator set env deployment.apps/network-operator OVN_IMAGE=quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
  18. josecastillolema revised this gist Sep 18, 2023. 1 changed file with 6 additions and 7 deletions.
    13 changes: 6 additions & 7 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -5,9 +5,8 @@ apiVersion: v1
    kind: Pod
    metadata:
    name: nginxw42
    namespace: served-ns-0
    #namespace: nodeport
    label: # labels?
    namespace: nodeport
    labels:
    name: nginx
    spec:
    containers:
    @@ -60,10 +59,10 @@ metadata:
    spec:
    type: NodePort
    ports:
    - port: 80
    targetPort: 80
    protocol: TCP
    nodePort: 30081
    - port: 80
    targetPort: 80
    protocol: TCP
    nodePort: 30081
    externalTrafficPolicy: Local
    selector:
    name: nginx
  19. josecastillolema revised this gist Sep 18, 2023. 1 changed file with 22 additions and 0 deletions.
    22 changes: 22 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -25,6 +25,28 @@ spec:
    privileged: true
    ```

    Uperf pod:

    ```
    kind: Pod
    apiVersion: v1
    metadata:
    name: uperf
    namespace: served-ns-0
    spec:
    containers:
    - name: uperf
    image: quay.io/cloud-bulldozer/uperf:latest
    command: ["/bin/sh","-c"]
    args: ["uperf -s -v -P 20000"]
    ports:
    - containerPort: 20000
    securityContext:
    privileged: true
    nodeSelector:
    kubernetes.io/hostname: worker003-fc640
    ```

    Working nodePort service:

    ```
  20. josecastillolema revised this gist Sep 16, 2023. 1 changed file with 10 additions and 0 deletions.
    10 changes: 10 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -58,6 +58,16 @@ $ oc get po -o yaml ovnkube-master-b96q7 -n openshift-ovn-kubernetes | grep imag
    image: quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    ```

    Enter container network namespace:

    ```
    [root@openshift-worker-1 /]# NAME=nginx-web-app-5dbd5f5cb5-rz7l4
    [root@openshift-worker-1 /]# NAMESPACE=spk-app
    [root@openshift-worker-1 /]# pod_id=$(chroot /host crictl pods --namespace ${NAMESPACE} --name ${NAME} -q)
    [root@openshift-worker-1 /]# pid=$(chroot /host bash -c "runc state $pod_id | jq .pid")
    [root@openshift-worker-1 /]# nsenter -n -t $pid -- ip a
    ```

    Limit bandwidth:

    ```
  21. josecastillolema revised this gist Sep 15, 2023. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -56,4 +56,10 @@ $ oc scale -n openshift-cluster-version deployment.apps/cluster-version-operator
    $ oc -n openshift-network-operator set env deployment.apps/network-operator OVN_IMAGE=quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    $ oc get po -o yaml ovnkube-master-b96q7 -n openshift-ovn-kubernetes | grep image | head -n 1
    image: quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    ```

    Limit bandwidth:

    ```
    nsenter -n -t 1740238 tc qdisc add dev net1 root tbf rate 10Gbit latency 9999ms burst 2G
    ```
  22. josecastillolema revised this gist Sep 15, 2023. 1 changed file with 11 additions and 0 deletions.
    11 changes: 11 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -45,4 +45,15 @@ spec:
    externalTrafficPolicy: Local
    selector:
    name: nginx
    ```

    Change OVN image:

    ```
    $ oc get -o yaml ovnkube-master-45gw8 -n openshift-ovn-kubernetes | grep image | head -n1
    image: quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0254ef7bc2c26538a56f4f57f140aff0d101b896b0702d76653d6ec4ad7056dd
    $ oc scale -n openshift-cluster-version deployment.apps/cluster-version-operator --replicas=0
    $ oc -n openshift-network-operator set env deployment.apps/network-operator OVN_IMAGE=quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    $ oc get po -o yaml ovnkube-master-b96q7 -n openshift-ovn-kubernetes | grep image | head -n 1
    image: quay.io/trozet/ovn-kubernetes:dceara-ecmp-symmetric-fix
    ```
  23. josecastillolema revised this gist Sep 15, 2023. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -7,7 +7,7 @@ metadata:
    name: nginxw42
    namespace: served-ns-0
    #namespace: nodeport
    label:
    label: # labels?
    name: nginx
    spec:
    containers:
  24. josecastillolema created this gist Sep 15, 2023.
    48 changes: 48 additions & 0 deletions tricks.md
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,48 @@
    Nginx pod with customizable HTTP object length:

    ```
    apiVersion: v1
    kind: Pod
    metadata:
    name: nginxw42
    namespace: served-ns-0
    #namespace: nodeport
    label:
    name: nginx
    spec:
    containers:
    - name: nginx
    image: quay.io/jcastillolema/nginx
    ports:
    - containerPort: 80
    lifecycle:
    postStart:
    exec:
    command: ["/bin/sh", "-c", "tr -dc A-Za-z0-9 </dev/urandom | head -c 512k > /usr/share/nginx/html/index.html"]
    nodeSelector:
    kubernetes.io/hostname: worker004-fc640
    securityContext:
    privileged: true
    ```

    Working nodePort service:

    ```
    apiVersion: v1
    kind: Service
    metadata:
    name: nginx-np
    namespace: nodeport
    labels:
    name: nginx-np
    spec:
    type: NodePort
    ports:
    - port: 80
    targetPort: 80
    protocol: TCP
    nodePort: 30081
    externalTrafficPolicy: Local
    selector:
    name: nginx
    ```