There are plenty of useful blog posts on how to write a GitHub Action, but while writing my own Action, I didn’t find much material out there on how to help me properly test it. In this blog post, I want to talk about how I implemented automated testing of my Action, hoping that you can benefit from this as well.
Read More
Fetching secrets with Vault Agent on Kubernetes is only half of the solution. Here’s a simple architecture to auto-refresh Spring’s connection pool when credentials are rotated.
Read More
This is Part 2 of “Reducing Helm Chart Boilerplate with Named Templates and Library Charts”. In this post, you’ll learn how to write library charts to reduce boilerplate across multiple different Helm charts.
Read More
This is Part 1 of “Reducing Helm Chart Boilerplate with Named Templates and Library Charts”. In this post, you’ll learn how to write named templates to reduce boilerplate and simplify Helm chart development.
Read More
Helm 3.1 introduced the ability to use post-renderers, which allow you to patch any resource that a Helm chart manages before they are sent off to the API server. There are a few different types of post-renderers, but in this post, we’ll take a look at the Kustomize post-renderer …
Read More
Today, I want to talk about how you can get back on your feet if your Kubernetes pods fail to start due to other errors or non-ready statuses, such as ErrImagePull, Pending, and 0/1 Ready. To do this, you can use the kubectl describe command …
Read More
When developing Helm charts, you may encounter a use case where you need to create a specific Kubernetes resource only if that particular resource is registered with the API. For example, imagine you maintain a Helm chart that should be made deployable to different Kubernetes …
Read More
Everyone who has worked with Kubernetes has seen that awful status before – CrashLoopBackoff. A CrashLoopBackoff indicates that the process running in your container is failing. Your container’s process could fail for a variety of reasons. Perhaps you are trying to run a …
Read More
When you build a Docker image, a series of layers get cached to speed up subsequent builds. However, this caching can have adverse effects if an image layer contains secrets, such as credentials. A malicious person or process could find the layer containing your secrets …
Read More
How many times have you forgotten the name of a Kubernetes API resource you intended to create, view, or modify? Maybe you knew the name of the resource but forgot what the proper schema should be? Both of these scenarios happen to me all the time, especially for resources with longer names or for those I may not interact with daily.
Read More