Component Deep Dive

[t-desmond]

Description:
Study the codebase structure and understand the role of each major component: certificate manager, OAuth2 validation, Wazuh API integration, and configuration layer.

Definition of Ready

• Codebase is cloned and dependencies resolved
• Components are located and runnable in test mode

Acceptance Criteria

• Able to explain what each module does
• Able to follow the request lifecycle across components
• Configuration logic (YAML/ENV) is understood

Definition of Done

• Component-level documentation or map created
• Verbal or written walkthrough presented

[t-desmond]

• Reviewed JWT, signing, encoding, decoding and verification

• Done with agent client

[t-desmond]

Reviewed the server. It:

• Functions as an OAuth2-aware certificate issuance service.

• Acts as an intermediate CA, generating and signing TLS certificates for authenticated agents based on validated JWT tokens.

Studying k8s

[t-desmond]

• Studied docker architecture: docker client, docker Rest API, dockerd, containerd, containerd-shim, runc.

• Studied how to manipulate containers without client

• Moving to k8s

[t-desmond]

• Began with introduction from kubernetes.io
• Studying Kubernetes with pdf: Kubernetes up and running

Chapters:

• Introduction
• Creating and Running Containers
• Deploying a Kubernetes Cluster
• Common kubectl Commands
• Pods
• Labels and Annotations
• Service Discovery
• HTTP Load Balancing with Ingress
• ReplicaSets
• Deployments
• DaemonSets
• Jobs
• ConfigMaps and Secrets
• Role-Based Access Control for Kubernetes
• Integrating Storage Solutions and Kubernetes
• Extending Kubernetes
• Deploying Real-World Applications
• Organizing Your Application

To be studied separately (not covered in PDF):

• Kubernetes Architecture (high level overview)
• Kubernetes Networking
• Helm
• Horizontal and Vertical Pod Autoscalers (HPA/VPA)
• Custom Resources and Operators
• CI/CD and GitOps Integrations(Started ArgoCD with @marcjazz)

[t-desmond]

Deployed wazuh helm chart, troubleshooted issues related indexer failure.

[t-desmond]

Investigation from sync:

Helm

1. How to use helm
2. How to remove a helm repo
3. How to uninstall a helm chart
4. How values work

Kubernetes

1. Kubernetes distributions
2. Security context
3. Structure of a Kubernetes volume

Wazuh

1. vm.max_map_count

[t-desmond]

Helm

• Chart structure
• Template
• Built-in Objects
• Values Files
• Template Functions
• Pipelines
• Flow Control
• Variables
• Named Templates
• Accessing Files Inside Templates
• Creating a NOTES.txt File
• Subcharts and Global Values
• Debugging Templates

[t-desmond]

Debugging issues related to helm project(temperature converter)

[t-desmond]

Documenting the role of agent registration binaries

[t-desmond]

Documentation available here