Kubernetes

ceph 20.2.0 (tentacle) released Members Public

Ceph 20 is out - and you should get your hands on it!

Daniel Nachtrub
Daniel Nachtrub
Container

Using kyverno to generate secrets Members Public

Sometimes it's the little helpers that make the difference. Here's some kyverno policy you can use to generate secret values in Kubernetes through a mutating webhook.

Daniel Nachtrub
Daniel Nachtrub
Container

Helm & variable scopes Members Public

When using variables to track state across loop iterations in Helm templates, declare them outside the loop scope or they'll reset on each iteration.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

Zabbix Server not running after upgrading to 7.4.0 Members Public

Upgrading a self-hosted Zabbix instance in Kubernetes sounds like a straightforward task, right? That’s what I thought - until I upgraded our Zabbix deployment to version 7.4.0 and was greeted by an all-too-familiar frontend error: “Zabbix server is not running” This post walks through the upgrade process,

Lorenz Maier
Lorenz Maier
Monitoring

k8s resource limits and their edge cases Members Public

In a kubernetes podspec, ressource limts can be quite suprising...

Felix Zimmermann
Kubernetes

ingress-nginx 1.12 & allow-snippet-annotations Members Public

If you need to use snippet annotations (why?) on ingress-nginx - you'll also need to adjust the annotation filtering.

Daniel Nachtrub
Daniel Nachtrub
Azure

multus - deadlock state on thick plugin Members Public

Using Multus CNI's 'thick plugin' in Kubernetes can cause pod startup deadlocks due to circular dependencies between pods and the Multus daemon. Switching to the daemonless 'thin plugin' mode effectively resolves this initialization issue.

Daniel Nachtrub
Daniel Nachtrub
Cloud

kubernetes, cgroups v2 and failing health probes Members Public

Running Kubernetes on a systemd-based OS can lead to pods restarting endlessly due to health probe failures, caused by the systemd cgroup driver. Previously, this was fixed by modifying boot options, but a simpler approach is to switch the kubelet to use cgroupfs instead.

Daniel Nachtrub
Daniel Nachtrub
Cloud