After a recent installation of a Multi-master Istio mesh on two clusters, I decided to add the third cluster in the mesh, one completely based on RaspberryPIs. All worked well until I added the MetalLB (L2 mode) for the LoadBalancers, that, unlike the first two clusters, wasn’t working properly: all was there – the IPs were issued straight from the …

Installing Flagger via Helm should be straightforward:https://docs.flagger.app/install/flagger-install-on-kubernetes A problem, however, appears after installing the CRDs: and then moving on to install yields a problem: If you try to deinstall the CRD’s, and install it as part of the Helm installation, as: the issue then becomes the following: Also, the Helm Chart page for Flagger explains that crd.create should be set …

If you’ve done a on an Apple silicon machine recently, you might have ended up with a messed-up keyring completion in /opt/homebrew/etc/bash_completion.d that gives you: Comment it out to prevent this spamming of the terminal’s line every time you start it.

I keep my ssh keys locked with passwords in a KeePassXC, that are in turn locked with a YubiKey with fingerprint as a 2FA – pretty decent, I’d say 🙂 Once KeePassXC is unlocked, it automatically feeds all the keys to the ssh-agent. That means that when you try to use ssh-agent (and you most probably want to) to connect …

MinIO works apparently properly, the mc tool lists everything well, but WebGUI shows no objects in the buckets, having the “Loading” bar just spinning at the bottom? The WebScokets proxying is probably not properly set in the upstream NginXs! This works, though: for console: and for data:

Istio would not inject the side-car into a namespace labeled for the injection, for example: a redeployment would fail when forced: the istio-init would fail, as seen in the logs of the pod: with a really sparse Error output: Fortunately, the very container info is a bit more verbose: So, an IPTables-related issue, after all? Yes, RockyLinux, used for this …

I’ve moved a Jenkins instance from a dedicated node into a Nomad cluster ran as a docker, and had a very strange issue with redirections: most of the locations worked, but clicking on “/manage” would lead to “https://jenkins/manage” instead of “https://jenkins.fqdn/manage”, breaking the URL of course. I could not find a root cause in either Internet-facing load-balancer, nor in internal …

I’ve silenced the noise coming from SEDNA with Noctua fans:The A4x10 are silent, and more than enough to keep this HD rack enclosure finally cool, yet quiet in the rack:The fans that came with SEDNA (the black one in the following picture) could be used for things that do not need to be quiet, while the Noctua’s (beige) are perfectly …