Remove finalizer with patch operation

The kubebuilder documentation on finalizers has the following example code for removing a finalizer from an object. c i } o f n r t e e r r r m o r e o l t v l : u e e = r r n o u r u t . c r i U t l p r f . d l i R a . n e t R a m e e l o ( s i v c u z e t l e F x t r i , { n } f a c , r l r o i o e m z n r e J r t r o h ( b e c ) r ; l o i n e s J r t o r b a , ! n = d m y n u F i p i l d n a a { t l e i z i e t r . N a m e ) I found when doing this, if the operation running above this in the Reconcile() function (typically to remove a remote resource from an API) this r.Update() call would return an error like this: ...

November 30, 2023

Securing Drupal on Kubernetes

Video Slides

March 20, 2020

Supplemental Groups with Gitlab Runner on OpenShift

Recently I configured gitlab-runner to operate on an openshift cluster. One quirk of this setup is the containers running as random uids, having the side-effect of the build container being unable to clone the project or fetch dependencies. To overcome this issue, we needed to run the build container with a supplemental group which had write access to the $CI_BUILDS_DIR path. Security Context Constraint The cluster administrators set up a securityContextConstraint which allowed the build service account to use supplemental group 80001. ...

September 18, 2019

K8s Autoscaling Custom Metrics

Lightning talk on autoscaling Kubernetes deployments with custom metrics. Links: Slides PHP-FPM Prometheus Exporter End-to-end tutorial for github.com/directxman12/k8s-prometheus-adapter End-to-end tutorial for github.com/stefanprodan/k8s-prom-hpa PreviousNext custom metric adapter for php-fpm

August 15, 2019