Daniel Nachtrub

Kind of likes computers. Linux foundation certified: LFCS / CKA / CKAD / CKS. Microsoft certified: Cybersecurity Architect Expert & Azure Solutions Architect Expert.

SAS Drives Showing 0B in lsblk and Missing from Multipath: The 520-Byte Sector Problem Members Public

Enterprise SAS SSDs repurposed from storage arrays often arrive formatted with 520-byte sectors — a T10 DIF/PI integrity field used by array controllers that Linux cannot handle. The kernel rejects the drive entirely, reporting 0B in lsblk and leaving multipathd with nothing to work with.

Daniel Nachtrub
Daniel Nachtrub
Linux

rook ceph - unmap stuck rbd Members Public

You might find yourself in a situation where you need to push rook ceph a little to unmount RBDs in order to unblock PV operations.

Daniel Nachtrub
Daniel Nachtrub
Cloud

Prepending Environment Variables with Kyverno: Finding the Right Approach Members Public

Injecting environment variables into Kubernetes pods with Kyverno requires careful strategy. While `patchStrategicMerge` only appends to arrays, `patchesJson6902` with `add` operation at index `0` successfully prepends variables, preserving existing configurations.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

ceph 20.2.0 (tentacle) released Members Public

Ceph 20 is out - and you should get your hands on it!

Daniel Nachtrub
Daniel Nachtrub
Container

terraform actions - I like hooks and I cannot lie Members Public

Terraform 1.14 beta brings actions - a decent approach to run one shot events on state transitions. Check out this post to see an example and how it can be done already today.

Daniel Nachtrub
Daniel Nachtrub
Cloud

Using kyverno to generate secrets Members Public

Sometimes it's the little helpers that make the difference. Here's some kyverno policy you can use to generate secret values in Kubernetes through a mutating webhook.

Daniel Nachtrub
Daniel Nachtrub
Container

Helm & variable scopes Members Public

When using variables to track state across loop iterations in Helm templates, declare them outside the loop scope or they'll reset on each iteration.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

OpenVPN DCO part of linux kernel Members Public

openvpn dco will be part of linux kernel 6.16 - that's huge and you should have this on your radar to benefit from huge performance gains!

Daniel Nachtrub
Daniel Nachtrub
VPN