OpenShift

Can't delete kubernetes namespace (NamespaceDeletionDiscoveryFailure) Members Public

While trying to delete a namespace on a kubernetes cluster I learned that there is a resource type apiservice :-) This post shows how to unblock deletions due orphaned apiservice definitions.

Daniel Nachtrub
Daniel Nachtrub
Linux

Why you should use rook ceph on kubernetes (onprem) Members Public

If you run kubernetes on your own, you need to provide a storage solution with it. We are using ceph (operated through rook). This article gives some short overview about it's benefits and some pro's and con's of it.

Daniel Nachtrub
Daniel Nachtrub
Cloud

Change statefulset spec without downtime Members Public

Altering statefulsets on kubernetes can be tricky - as statefulsets are very common used for persistent applications like databases recreation is no option. This guide shows a path around some of these limitations.

Daniel Nachtrub
Daniel Nachtrub
Cloud

Linux kernel keyrings, container isolation and maybe some kerberos Members Public

On a recent project I've been stumbling on the case that kerberos tickets have been inadvertently shared across containers on a node - which obviously caught my attention as I'm not keen on sharing such secrets across workloads. This post describes why this happens and what to do to prevent this.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

What happens if you ask kubernetes for 1254051 replicas Members Public

One of our playgrounds recently had an incident which caused control-plane to go out-of-memory. This article shows how to diagnose and especially how to fix or event prevent this.

Daniel Nachtrub
Daniel Nachtrub
Kubernetes

Running postgres in kubernetes with hugepages Members Public

To run postgres in a container on nodes with huge pages enabled requires you to configure the container accordingly. This post shows how to do this on kubernetes/openshift.

Daniel Nachtrub
Daniel Nachtrub
Container