Graph/kubernetes

Component

kubernetes

Node Details

Public graph metadata

Updated4/30/2026

PageRank0.0003

Connections

46 linked nodes

WRITTEN_INLanguage

sql

REQUIRESSolution

Devopses just changed k8s pods for application — Nginx from remote produced timeout problems. Tension: nginx stopped closing the connection my app to remote. Outcome: changed k8s pods for application and nginx stopped closing the connection my app to remote.

REQUIRESSolution

you need two persistence volumes and claims: one for `main` and the other for `standby` — local kubernetes cluster. Tension: container does not work. Outcome: set the replicas to `2` in the `StatefulSet` as well.

REQUIRESSolution

It's best to use a Postgres operator like Kubegres with full lifecycle management — deploy primary and slave postgres instances and setup streaming replication between them. Tension: you would need to perform them manually. Outcome: automatic backup and failover support.

REQUIRESSolution

Option A is to host the postgres in K8s and access it through kubernetes DNS — access it through kubernetes DNS. Tension: Option B is to give the proper IP of the system where the database is running. Outcome: Option A is to host the postgres in K8s and access it through kubernetes DNS or Option B is to give the proper IP of the system where the database is running.

REQUIRESSolution

`ext` are the resources specific to each environment (ex. localhost) — if you run the application on the environment, ex. a Docker container in K8S. Tension: prevent including the specific properties for various profiles in the Docker image. Outcome: mount the external properties as config-map.

REQUIRESSolution

Kubernetes with KEDA autoscaling. Tension: Instead of scaling on CPU/memory. Outcome: scale your agent pods inversely to remaining API quota.

PERTAIN_TOSolution

CREATE OR REPLACE TABLE metrics_raw_v2_dist AS metrics_raw_v2_local ENGINE = Distributed('sentry-clickhouse', default, metrics_raw_v2_local, timeseries_id); — open the clickhouse replicaset and on EACH pod. Tension: no sharding key provided. Outcome: After that - restart the metrics consumer and you should see all the data flowing in.

PERTAIN_TOSolution

kafka: persistence: storageClass: csi-disk — Kafka has its own internal zookeeper dependancy. Tension: no matter what I do I cannot get storageClass parsed in as the desiredManifest. Outcome: zookeeper: persistence: storageClass: csi-disk.

PERTAIN_TOProblem

if this indicate some security issue ?

PERTAIN_TOSolution

If you are concerned about pods executing things in Kubernetes or in the host.

PERTAIN_TOSolution

I have fixed the bug for Jib builds (not for every kind of build!) — The output of the Windows cmd was not converted to UTF8. Tension: I am only interested in the Jib Build. Outcome: I fixed that part of the code.

PERTAIN_TOProblem

using redis.Redis instead of redis.cluster.RedisCluster causes MOVED errors — When connecting to a Redis Cluster (AWS ElastiCache cluster-mode, Redis Cluster on k8s). Tension: the regular client does not.

OCCURS_ONProblem

networkpolicies.networking.k8s.io "sentry-kafka" is forbidden — helm install sentry sentry/sentry -f values.yaml. Tension: could not get information about the resource NetworkPolicy "sentry-kafka" in namespace "gopikab". Outcome: INSTALLATION FAILED.

OCCURS_ONProblem

The MINIO connection is not listed on Airflow web UI and in CLI if I run `airflow connections list`, I get nothing. — setting up Airflow on my Kubernetes cluster using the official Helm chart. Tension: if I run a simple DAG (BashOperator echoing Hello World), the Kubernetes Executor picks up the tasks and spawns pods to run the tasks in. Outcome: The logs show up in the task.

OCCURS_ONProblem

The same code can be run in parallel in multiple threads, or even in multiple Kubernetes pods — DELETE FROM my_table WHERE ctid IN ( SELECT ctid FROM my_table WHERE some_condition LIMIT 1 ). Tension: two threads start fighting for the same record.

OCCURS_ONProblem

java.lang.OutOfMemoryError: Java heap space — When running the app in the dev environment (Gradle based), the app is running without any problem. If I build a jlink image of this app. Tension: I know about "Xmx" option, but this is not the solution. Outcome: the same line will throw.

INVOLVESSolution

use the init container to change the file permission — You can change the security context first place to override the permission. Tension: or create a directory. Outcome: chown -R 1000:1000 /usr/share/XYZ/data.

IMPLEMENTATION_OFDomain

Container Images

AFFECTSRootCause

User "system:serviceaccount:kube-system:gopikab" cannot get resource "networkpolicies" — rendered manifests contain a resource that already exists.

AFFECTSRootCause

with more than one shard and no sharding key provided — storage Distributed. Tension: Method write is not supported. Outcome: update the metrics_raw_v2 table.

AFFECTSRootCause

reason: headers — Page changed from static to dynamic at runtime /story/0d3778b0-9e86-4b0a-a043-ed892f2417a0. Outcome: at headers (/app/.next/server/chunks/827.js:26854:39).

AFFECTSRootCause

Kafka has its own internal zookeeper dependancy — We use Helm and ArgoCD. Outcome: zookeeper: persistence: storageClass: csi-disk.

AFFECTSRootCause

FastAPI was not aware of the external root path used by the reverse proxy/API gateway, so it generated OpenAPI/docs URLs without the required URL prefix.

AFFECTSRootCause

The official Kaniko image come only with the needed packages and binaries to run Kaniko — in the context of a CI pipeline. Tension: a lot more than the build and push stage is needed. Outcome: use a different store for the build context.

AFFECTSRootCause

k8s doesn't like mounting sockets from the runner into the job container — deployed my own runner there too. Tension: I wasn't able to find anything online on it, because very most people just run everything Gitea in Docker, not k8s.

AFFECTSProblem

The MINIO connection is not listed on Airflow web UI and in CLI if I run `airflow connections list`, I get nothing. — setting up Airflow on my Kubernetes cluster using the official Helm chart. Tension: if I run a simple DAG (BashOperator echoing Hello World), the Kubernetes Executor picks up the tasks and spawns pods to run the tasks in. Outcome: The logs show up in the task.

AFFECTSRootCause

Access key, secret key or session token is unset — spark.hadoop.fs.s3a.session.token.file: /var/run/secrets/eks.amazonaws.com/serviceaccount/token.

AFFECTSRootCause

Nginx from remote produced timeout problems. — Devopses just changed k8s pods for application. Tension: nginx stopped closing the connection my app to remote. Outcome: Nginx stopped closing the connection my app to remote.

AFFECTSRootCause

Class org.apache.hadoop.fs.s3a.S3AFileSystem not found — moving plugin jar to `/opt/flink/plugins/s3-fs-hadoop/` in my Dockerfile. Tension: it is redundancy and should work without it ? Outcome: plugin is in the right folder.

AFFECTSRootCause

I would target approximate micro-batch size (either files or bytes based) to be less than half of `sum(executor_memory)/2` — `maxFilesPerTrigger` is less predictable than `maxBytesPerTrigger`. Tension: If 200 files exceed that number, then problems are likely.

AFFECTSProblem

I still have empty dashboard. Tension: it didn't help. Outcome: I restarted docker container with the collector after i updated config.

AFFECTSRootCause

local kubernetes cluster. Outcome: slave postgres instance needs to use `pg_basebackup` to copy data folder from primary instance first.

AFFECTSRootCause

The error you are seeing is due to the file permission — change the security context first place to override the permission. Tension: you are not able to create a directory.

AFFECTSRootCause

Tension: is "atomic enough" in Postgres SQL.

AFFECTSRootCause

Localhost in your app would be from the containers pov — from the containers pov. Tension: which is not the same as your local system. Outcome: Localhost in your app would be from the containers pov which is not the same as your local system.

AFFECTSSolution

Option A is to host the postgres in K8s and access it through kubernetes DNS — access it through kubernetes DNS. Tension: Option B is to give the proper IP of the system where the database is running. Outcome: Option A is to host the postgres in K8s and access it through kubernetes DNS or Option B is to give the proper IP of the system where the database is running.

AFFECTSRootCause

Hard coding secrets in an application in an attempt to hide them (security by obscurity) only adds seconds to any attack. — Your application runs with some identity, like a service account. Tension: who can impersonate your application's identity.

AFFECTSRootCause

inside a container.

AFFECTSRootCause

`capabilities.add` will add Linux capabilities — Strictly in the scope of `securityContext` (as of Kubernetes 1.26 API). Outcome: `procMount` will allow a container mounting node's `/proc` and expose sensible host information.

AFFECTSRootCause

The output of the Windows cmd was not converted to UTF8. — skaffold v2.13.2 on Windows 10. Tension: This is done at various places. Outcome: I fixed that part of the code.

AFFECTSRootCause

Off-Heap Memory (Direct Buffers, JNI, Metaspace).

AFFECTSRootCause

`src/main/resources` are the resources packed and delivered with the JAR. — I have a Spring Boot application that includes several `application-XXX.properties` profiles. Tension: all these properties files are packaged in the image. Outcome: Don't include them in the folders packed to the JAR file.

AFFECTSProblem

using redis.Redis instead of redis.cluster.RedisCluster causes MOVED errors — When connecting to a Redis Cluster (AWS ElastiCache cluster-mode, Redis Cluster on k8s). Tension: the regular client does not.

AFFECTSRootCause

scale your agent pods inversely to remaining API quota — Kubernetes with KEDA autoscaling. Tension: Instead of scaling on CPU/memory.

AFFECTSRootCause

Cascading retries amplifying the load — We have ~200 autonomous agents hitting our internal API gateway. Tension: exponential backoff in each agent. Outcome: Don't let individual agents retry against the shared bucket.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info