Kubernetes
Multus - pod stuck in terminating state Paid Members Public
Having multus in place, pods might be stuck in starting or terminating state if you made a mistake in the config.
Get filesystem access using an ephemeral container in kubernetes Paid Members Public
Sometimes you need to access a containers filesystem but the container itself is eventually distroless or does not offer any shell. Here's how to access the filesystem anyway using ephemeral containers!
Using AKS kubectl (kubelogin) on headless systems or pipelines Paid Members Public
Running kubectl on pipelines with interactive authentication is somewhat non-optimal :-) Let's make it better without using long-living tokens.
Choosing a postgres operator Paid Members Public
This post describes my journey on the selection of the postgres operator that matches our demand.
Why you should use rook ceph on kubernetes (onprem) Paid Members Public
If you run kubernetes on your own, you need to provide a storage solution with it. We are using ceph (operated through rook). This article gives some short overview about it's benefits and some pro's and con's of it.
Change statefulset spec without downtime Paid Members Public
Altering statefulsets on kubernetes can be tricky - as statefulsets are very common used for persistent applications like databases recreation is no option. This guide shows a path around some of these limitations.
Linux kernel keyrings, container isolation and maybe some kerberos Paid Members Public
On a recent project I've been stumbling on the case that kerberos tickets have been inadvertently shared across containers on a node - which obviously caught my attention as I'm not keen on sharing such secrets across workloads. This post describes why this happens and what to do to prevent this.
What happens if you ask kubernetes for 1254051 replicas Paid Members Public
One of our playgrounds recently had an incident which caused control-plane to go out-of-memory. This article shows how to diagnose and especially how to fix or event prevent this.