5 min read
Closing a critical hole in end-of-life PHP 7.4 / 8.1 apps with a patched base image, no code changes: the stopgap measures and the lasting fix.
cat ~/notes/*.md
Notes
The long form of the case files: problems from the field, diagnosis steps and lasting fixes. Environment details removed, examples generalised.
4 min read
Three-layer Kubernetes backups with Velero, Longhorn volume backups and etcd snapshots, plus the step that really matters: the restore drill.
2 min read
Controlled access to local admin passwords without Domain Admin: delegating Windows LAPS read permission to a dedicated group and auditing it.
2 min read
When PostgreSQL CPU spikes, find the source with query stats instead of server graphs: setting up pg_stat_statements and finding the costliest queries.
3 min read
When kubectl in GitLab CI fails with x509 or expired certificate errors, separate the issue from the code and narrow it to kubeconfig, CA and credentials.
3 min read
A common reason Caddy returns 503 while the app is healthy: the health check expects a status code the backend no longer returns. Diagnosis and fix.
2 min read
Designing a Kubernetes RBAC role that lets teams see their pods and logs but can't read Secrets, exec into containers or change anything.
Got an infrastructure question, a project or a route tip?
Email is the fastest way. If I'm on the road, I'll reply from the next Wi-Fi.