Kubernetes

Change statefulset spec without downtime Members Public

Altering statefulsets on kubernetes can be tricky - as statefulsets are very common used for persistent applications like databases recreation is no option. This guide shows a path around some of these limitations.

Daniel Nachtrub
Daniel Nachtrub
Cloud

Linux kernel keyrings, container isolation and maybe some kerberos Members Public

On a recent project I've been stumbling on the case that kerberos tickets have been inadvertently shared across containers on a node - which obviously caught my attention as I'm not keen on sharing such secrets across workloads. This post describes why this happens and what to do to prevent this.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

What happens if you ask kubernetes for 1254051 replicas Members Public

One of our playgrounds recently had an incident which caused control-plane to go out-of-memory. This article shows how to diagnose and especially how to fix or event prevent this.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

Kubernetes Cluster & self-hosted Registry: Trusting the CA Members Public

You build your OnPremise Kubernetes Cluster and set up your self-hosted private registry. To make it pretty you used your own CA to sign the certificate for the registry. Everything is fine and now you are ready to deploy your own services to your Kubernetes Cluster and develop some awesome

Sebastian Augustin
Sebastian Augustin
Kubernetes

Running postgres in kubernetes with hugepages Members Public

To run postgres in a container on nodes with huge pages enabled requires you to configure the container accordingly. This post shows how to do this on kubernetes/openshift.

Daniel Nachtrub
Daniel Nachtrub
Container

microk8s - change location of hostpath storage Members Public

Adjusting the hostpath storage location on microk8s requires you to adjust parameters in the associated deployment. This easy change is shown in this post.

Daniel Nachtrub
Daniel Nachtrub
Container

nginx ingress controller cannot load default-ssl-certificate Members Public

nginx ingress controller supports scoping to namespaces. This can be an issue with the default-tls-certificate in case this is not part of the scoped namespaces.

Daniel Nachtrub
Daniel Nachtrub
Container

Terraform - transform values of a map Members Public

If you're developer, you might wonder about control structures in terraforms declarative language. Some things need to think about the corner, some things are more straight forward than expected. Second applies to using for loops to map values.

Daniel Nachtrub
Daniel Nachtrub
Cloud