Upgrading Kubernetes version 1.24 to 1.26 on a Bright 9.2 cluster. Prerequisites This article is written with Bright Cluster Manager 9.2 in mind, where Kubernetes is currently deployed with the default...
Kubernetes 1.29.6 setup on BCM 10.24.07 Airgapped 1. Prerequisites and Requirements We will setup the following: Kubernetes version: v1.29.6 Base Command Manager (BCM) version: 10.24.07 On Linux...
Kubernetes 1.30.5 setup on BCM 10.24.09 Airgapped 1. Prerequisites and Requirements We will setup the following: Kubernetes version: v1.30.5 Base Command Manager (BCM) version: 10.24.09 On Linux...
BCM 9.2 Kubernetes Permission Manager migration from Pod Security Policies to Kyverno Policies In BCM 9.2 (and also earlier versions) we depended on the Pod Security Policies (PSP) feature of Kubernetes in order...
Required security upgrade for NVIDIA GPU Operator A security issue has been found in nvidia-container-toolkit. Since the NVIDIA GPU Operator has the ability to take care of...
Etcd Backup and Restore with BCM 10.0 Prerequisites The following article was written with Bright Cluster Manager version 10 (10.23.09 or newer) in mind. We assume we...
Kubernetes setup on BCM 10.24.11 Airgapped 1. Prerequisites and Requirements We will setup the following: Kubernetes version: v1.31.2 (default), v1.30.6 or v1.29.10 Base Command Manager (BCM)...
How can I disable weak TLS ciphers on the Kube-apiserver? Purpose By default, the kube-apiserver in Kubernetes accepts requests from clients using TLS v1.2 ciphers. In some circumstances, you may...
CVE-2025-1974 – Patch for: Critical Ingress NGINX Controller vulnerabilities 1. CVEs information Please refer to https://thehackernews.com/2025/03/critical-ingress-nginx-controller.html for more information about the list CVE’s. CVE-2025-24513 CVE-2025-24514 CVE-2025-1097 CVE-2025-1098 CVE-2025-1974 This...
Configuring etcd to listen on internalnet interfaces only. About These instructions have been tested on BCM 10.0 (release 10.25.03), Kubernetes 1.29. Later releases of BCM and Kubernetes are...
Etcd membership reconfiguration in BCM 10+ 1. Prerequisites The following article was written with Bright Cluster Manager 10 and 11 in mind but should work the...
Configuring Kubernetes control-plane in BCM 10+ 1. Prerequisites This KB article is written with BCM 10.25.06 in mind, but will work with all versions of BCM...
Fix: KubernetesCertsExpiration – JSONDecodeError: Expecting value: line 1 column 1 (char 0) How to Patch KubernetesCertsExpiration health check in BCM <= 10.25.03 This is the regression that is present in BCM 10.25.03...
BCM Kubernetes Cluster API (CAPI) Infrastructure Provider Update Overview Base Command Manager (BCM) supports Cluster API for deploying Kubernetes clusters. This feature was introduced in BCM 10 and...