Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
shakedown.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A community for live music fans with roots in the jam scene. Shakedown Social is run by a team of volunteers (led by @clifff and @sethadam1) and funded by donations.

Administered by:

Server stats:

292
active users

shakedown.social: AboutStatusProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#k8s

3 posts2 participants0 posts today
drmorr<p>This is relevant because it means you cannot put an RFC3339-formatted timestamp in a label.</p><p><a href="https://hachyderm.io/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a> <a href="https://hachyderm.io/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
drmorr<p>I learn new and annoying things about Kubernetes every single day.</p><p>For example, you cannot put a colon in a label.</p><p><a href="https://hachyderm.io/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a> <a href="https://hachyderm.io/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>This morning's *absolute* WTF moment:</p><p>Pod network traffic 100% packet loss outbound UNTIL I `tcpdump` it on the node, then it starts working fine.</p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/Cilium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cilium</span></a> <a href="https://eigenmagic.net/tags/kh8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kh8s</span></a> <a href="https://eigenmagic.net/tags/Networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Networking</span></a> <a href="https://eigenmagic.net/tags/HomeLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>HomeLab</span></a></p>
Mad A. Argon :qurio:<p>Me 2 years ago: <a href="https://is-a.cat/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> is software with biggest regeneration ability.</p><p>Me 6 months ago: Wow, Longhorn has even better regeneration ability!</p><p>Me now: What the hell, Patroni has the best regeneration ability I have ever seen!</p><p>:neofox_laugh_256: </p><p>Welcome to our brave new world of self-fixing things...</p><p><a href="https://is-a.cat/tags/admin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>admin</span></a> <a href="https://is-a.cat/tags/sysadmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sysadmin</span></a> <a href="https://is-a.cat/tags/devops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>devops</span></a> <a href="https://is-a.cat/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>IT</span></a> <a href="https://is-a.cat/tags/postgres" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>postgres</span></a> <a href="https://is-a.cat/tags/postgresql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>postgresql</span></a> <a href="https://is-a.cat/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>Spoke too soon. Damn context object has no cache initialized so can't run a reconcile. How in the heck am I supposed to write a controller that can't check all the custom resources it's managing? This seems basic?</p><p><a href="https://eigenmagic.net/tags/KubernetesDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KubernetesDev</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a></p>
Ariel (🐿 arc)<p>&gt; After receiving a discovery response, the Kubernetes API server automatically registers all available types for this API group. Although this isn't considered common practice, you can implement logic that dynamically registers the resource types you need in your Kubernetes cluster.</p><p>Woa, this could be huge for the CRD management problem with operators and Helm</p><p>I didn't even know the API aggregation layer existed</p><p><a href="https://kubernetes.io/blog/2024/11/21/dynamic-kubernetes-api-server-for-cozystack/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">kubernetes.io/blog/2024/11/21/</span><span class="invisible">dynamic-kubernetes-api-server-for-cozystack/</span></a></p><p><a href="https://eigenmagic.net/tags/KubernetesDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KubernetesDev</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>Man this kube-builder thing is a LOT of machinery for something pretty simple I'm trying to make. Can't even get it to run a reconciliation loop on startup cause it's all buried. Will check the docs more thoroughly tomorrow.</p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a> <a href="https://eigenmagic.net/tags/KubernetesDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KubernetesDev</span></a></p>
Ariel (🐿 arc)<p>Interesting piece on the details of actual scale and shifting from Helm to CueLang with ArgoCD. Includes the why's as well as lessons learned.</p><p><a href="https://medium.com/safetycultureengineering/our-journey-to-gitops-migrating-to-argocd-with-zero-downtime-932d0eefbe0d" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">medium.com/safetycultureengine</span><span class="invisible">ering/our-journey-to-gitops-migrating-to-argocd-with-zero-downtime-932d0eefbe0d</span></a></p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/ArgoCD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ArgoCD</span></a> <a href="https://eigenmagic.net/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a> <a href="https://eigenmagic.net/tags/PlatformEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PlatformEngineering</span></a> <a href="https://eigenmagic.net/tags/GitOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GitOps</span></a></p>
Jan Bartosik<p>Středeční <a href="https://witter.cz/tags/hiring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hiring</span></a> update:</p><p>Do interního <a href="https://witter.cz/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a> týmu hledám borce na pozici, které říkáme <br>INFRASTRUCTURE AND DEVOPS SPECIALIST</p><p>HPP, nebo IČO, jak chceš.<br>Hybridní forma práce, kancl <a href="https://witter.cz/tags/Praha" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Praha</span></a> Nusle.<br>Nezávazná pokec s DevOps Leadem není problém, online/onsite.<br>Nespěcháme, hledáme oboustranný "match."</p><p><a href="https://witter.cz/tags/infra" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infra</span></a> <a href="https://witter.cz/tags/devsecops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>devsecops</span></a> <a href="https://witter.cz/tags/iac" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iac</span></a> <a href="https://witter.cz/tags/cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cloud</span></a> <a href="https://witter.cz/tags/aws" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>aws</span></a> <a href="https://witter.cz/tags/azure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>azure</span></a> <a href="https://witter.cz/tags/gcp" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>gcp</span></a> <a href="https://witter.cz/tags/cicd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cicd</span></a> <a href="https://witter.cz/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>Man Prometheus is a pain to recover once its data store is in any way out of shape. Did NOT help that it was buried inside Kubernetes inside a PVC.</p><p>Thankfully it was only Dev environment today but if this ever pages on Prod we're losing data as it stands.</p><p>I'll write something up for a run book but eesh.</p><p><a href="https://eigenmagic.net/tags/Prometheus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Prometheus</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/kh8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kh8s</span></a> <a href="https://eigenmagic.net/tags/Observability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Observability</span></a> <a href="https://eigenmagic.net/tags/o11y" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>o11y</span></a></p>
Ariel (🐿 arc)<p>YAML.</p><p>No I do not count anchors.</p><p><a href="https://eigenmagic.net/tags/YAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>YAML</span></a> <a href="https://eigenmagic.net/tags/yaml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>yaml</span></a> <a href="https://eigenmagic.net/tags/yamlCult" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>yamlCult</span></a> <a href="https://eigenmagic.net/tags/kh8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kh8s</span></a> <a href="https://eigenmagic.net/tags/shitpost" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>shitpost</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a></p>
Ariel (🐿 arc)<p>Sometimes I find my odd humour in old code and comments and have a chuckle.</p><p>Today it was that I had aliased the Prometheus Community Helm repository to "prom-com" locally.</p><p><a href="https://eigenmagic.net/tags/Prometheus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Prometheus</span></a> <a href="https://eigenmagic.net/tags/Helm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Helm</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>cAdvisor's `container_oom_events_total` metric has been known broken since late 2021.</p><p>Just FYI. Not like we were relying on that or anything...</p><p><a href="https://github.com/google/cadvisor/issues/3015" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.com/google/cadvisor/iss</span><span class="invisible">ues/3015</span></a></p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/kh8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kh8s</span></a></p>
Ariel (🐿 arc)<p>oh lol they're trying to make Ansible "a thing" with the operator framework.</p><p>At this point it's not even Ansible it's just Jinja2 with Ansible opinions about templating</p><p><a href="https://sdk.operatorframework.io/docs/building-operators/ansible/tutorial/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">sdk.operatorframework.io/docs/</span><span class="invisible">building-operators/ansible/tutorial/</span></a></p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/k8sDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8sDev</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/PlatformEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PlatformEngineering</span></a> <a href="https://eigenmagic.net/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DevOps</span></a></p>
Ariel (🐿 arc)<p>If you're writing a controller, and you want to essentially shell out to arbitrary code and get the return/output.</p><p>Does it make sense to run a Kubernetes `Job` resource?<br>Can you even retrieve the output of that?</p><p>Does it make sense to embed a WASM interpreter and pull OCI WASM artifacts to run? That's a lot of extra responsibility...</p><p>I suppose I could shell out and rely on whatever's in the container/pod context of the controller.</p><p>Perhaps I should narrow the scope of things it can do instead of trying to hack it like this in the first place?</p><p><a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/KubernetesDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KubernetesDev</span></a></p>
Ariel (🐿 arc)<p>Is this vCluster thing good?</p><p>I'm concerned it'll be all the difficulty of Kubernetes but buried another layer deeper. Or that we'll hit hard limits cresting a fully production-like environment in the virtual clusters.</p><p><a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
Ariel (🐿 arc)<p>is Cilium native routing mode supposed to publish pod IPs on the interfaces in the host network namespace?</p><p>That would make sense to me as using the native network layer 2/3 routing.</p><p>Or am I required to turn on SNAT using the IP masquerading feature?</p><p>Pods are getting valid IPv6 GUAs in the LAN/host subnet, but of course nothing can return to them...</p><p><a href="https://eigenmagic.net/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Cilium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cilium</span></a> <a href="https://eigenmagic.net/tags/CNI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CNI</span></a> <a href="https://eigenmagic.net/tags/Networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Networking</span></a></p>
Ariel (🐿 arc)<p>CoreDNS + Kubernetes question:</p><p>CoreDNS, in its stock configuration, assumes/uses the default service created for the Kubernetes API.</p><p>However, this gets a ClusterIP from the cluster's Service IP range as part of normal IPAM.</p><p>This IP is not known to the operating system or during cluster setup, so isn't in the IP SANs for the TLS certificate. This causes CoreDNS to error out trusting the Kubernetes API when trying to watch services.</p><p>The the default Kubernetes service is roughly well-known as it's the bottom of the service IP range + 1 but that still feels... odd.</p><p>I looked into automatic in-cluster certificate management and rotation but that seems more about Kubelet client certificates for the API server, and none of the actual TLS certificates. Which kinda makes sense cause otherwise cyclic dependencies.</p><p><a href="https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/#coredns-configmap-options" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">kubernetes.io/docs/tasks/admin</span><span class="invisible">ister-cluster/dns-custom-nameservers/#coredns-configmap-options</span></a></p><p><a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/CoreDNS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CoreDNS</span></a></p>
Ariel (🐿 arc)<p>Kubernetes DNS question:</p><p>Couldn't the CNI actually manage DNS instead of CoreDNS?</p><p>I mean it'd be potentially a lot of data to throw at eBPF for in-cluster records. It's already distributing information for routing.</p><p>It could also enforce all-pods upstreams by using DNAT - assuming DNSSEC remains a niche concern.</p><p>...in my defence, I never said my ideas were good...</p><p><a href="https://eigenmagic.net/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> <a href="https://eigenmagic.net/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a> <a href="https://eigenmagic.net/tags/Cilium" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cilium</span></a></p>
The Late Night Linux Family<p>What the new Docker pull limits really mean and how to deal with them, and whether paying for 12 years of support for Kubernetes is a good idea.</p><p><a href="https://hybridcloudshow.com/hcs25/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">hybridcloudshow.com/hcs25/</span><span class="invisible"></span></a></p><p><a href="https://fosstodon.org/tags/podcast" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>podcast</span></a> <a href="https://fosstodon.org/tags/cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cloud</span></a> <a href="https://fosstodon.org/tags/PlatformEngineering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PlatformEngineering</span></a> <a href="https://fosstodon.org/tags/k8s" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>k8s</span></a></p>
ExploreLive feeds
About