Create a TPM backed certificate request (on windows) Members Public

Certificates are everywhere - sometimes you want to keep them even more secure than just on the filesystem (or operating system store). This guide shows how to create TPM backed certificates on windows.

Daniel Nachtrub
Daniel Nachtrub
Windows

Windows 11 22H2 - stuck RDP session establishment when using UDP transport Members Public

Windows 11 22H2 currently has an issue when connecting using the Remote Desktop gateway or Remote Desktop Connection Broker. This article gives some information and possible workarounds.

Daniel Nachtrub
Daniel Nachtrub
Windows

"Identity not found" when using Azure pod-managed identities Members Public

One type of incident that arised on several customer environments within the last weeks has been the result of an issue with Azure pod-managed identities. What is managed podidentity? The idea behind podidentity is that you can assign an identity (mostly a managed service identity [MSI]) to a pod running

Daniel Nachtrub
Daniel Nachtrub

What happens if you ask kubernetes for 1254051 replicas Members Public

One of our playgrounds recently had an incident which caused control-plane to go out-of-memory. This article shows how to diagnose and especially how to fix or event prevent this.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

Kubernetes Cluster & self-hosted Registry: Trusting the CA Members Public

You build your OnPremise Kubernetes Cluster and set up your self-hosted private registry. To make it pretty you used your own CA to sign the certificate for the registry. Everything is fine and now you are ready to deploy your own services to your Kubernetes Cluster and develop some awesome

Sebastian Augustin
Sebastian Augustin
Kubernetes

Running postgres in kubernetes with hugepages Members Public

To run postgres in a container on nodes with huge pages enabled requires you to configure the container accordingly. This post shows how to do this on kubernetes/openshift.

Daniel Nachtrub
Daniel Nachtrub
Container

Fixing WinSXS manually, when DISM resigns Members Public

WinSXS corruption (the component store is repairable) is often a tedious task to repair, especially when working on Windows Server 2016 where builtin commands might not be able to fix this out of the box. This guide shows a way that worked in most circumstances to get WinSXS consistent again.

Daniel Nachtrub
Daniel Nachtrub
Windows

microk8s - change location of hostpath storage Members Public

Adjusting the hostpath storage location on microk8s requires you to adjust parameters in the associated deployment. This easy change is shown in this post.

Daniel Nachtrub
Daniel Nachtrub
Container