platform · inferred from evidence
Kubernetes
A container orchestration platform where CockroachDB is deployed as a StatefulSet.
- Deprecated flowcontrol API warning still appears on newer Lacework agent versions
Deprecated flowcontrol API warning still appears on newer Lacework agent versions. The warning is wrong on newer clusters.
- CockroachDB on Kubernetes with Istio: "connection refused" - how to run insecure statefulset with istio mTLS
Rename the 26257 port from grpc to tcp in the CockroachDB Service and StatefulSet manifests so the Istio sidecar treats the traffic as plain TCP instead of trying gRPC protocol sniffing. That is the fix multiple users confirmed (one via mik
- How to run Dagger inside a container, for example on Kubernetes
Teaches the verified fix from a real dagger support thread: how to run Dagger inside a container, for example on Kubernetes
- Flipt 1.9.0 Postgres dial tcp lookup postgres device or resource busy
This was a Flipt regression fixed in v1.9.1 and v1.10.1, upgrade to either of those patch releases and the Postgres connection works again. The reporter confirmed v1.9.1 fixed it in both local Rancher Desktop and GCP clusters.
- Datadog Agent does not start with read-only root filesystem
What this covers: Running the Datadog Agent container with a read-only root filesystem: the agent dies on startup with `ln: failed to create symbolic link '/etc/datadog-agent/datadog.yaml': Read-only file system` and `rm: cannot remove ...
- Flipt v2 high memory consumption (800MB) with git storage in Kubernetes
Flipt v2.0.1 holds hundreds of MB with only a few flags when backed by git storage, because it keeps too much git history in memory. Fixed in Flipt 2.6.0; upgrade.
- Azure Key Vault CSI driver driver name secrets-store.csi.k8s.io not found after AKS node upgrade
Teaches the verified fix from a real azure-key-vault support thread: azure Key Vault CSI driver driver name secrets-store.csi.k8s.io not found after AKS node upgrade
- Chainguard nginx image fails with read-only file system s6-svscan unable to mkdir
What this covers: Running the Chainguard nginx image with a read-only filesystem fails: docker run -it -p 8080:8080 --read-only --tmpfs /tmp cgr.dev/chainguard/nginx:latest gives s6-svscan: fatal: unable to mkdir .s6-svscan: Read-only file
- 1Password Connect JWT token is invalid base64 LoadLocalAuthV2 failed to credentialsDataFromBase64
The credentials JSON must be base64-encoded exactly once into the Kubernetes secret, with no trailing newline. Two common mistakes cause this error: mounting the raw 1password-credentials.json as text without encoding it at all, and double-