Category Archives: Troubleshooting

Various problems solutions

Terraform: using import, and some hidden pitfalls
0 (0)

15 June 2025

Terraform has two ways to bring existing resources under Terraform management – using the Terraform CLI and the terraform import command, or using the import resource. Why might we need to import resources? if we already have a manually configured (the “clickops”) service that we want to bring under Terraform management (for example, the common… Read More: Terraform: using import, and some hidden pitfalls0 (0) »

Terraform: data types, loops, indexes, and the “resource must be replaced” issue
0 (0)

4 June 2025

We have an automation for AWS IAM that creates EKS Access Entries to give AWS IAM Users access to an EKS cluster. I don’t remember if I wrote it myself or if some LLM generated it (although judging by the code, I did 🙂 ), but later I discovered an unpleasant feature of how this… Read More: Terraform: data types, loops, indexes, and the “resource must be… »

Python: introduction to the Celery, and its monitoring configurations
0 (0)

20 May 2025

To put it very simply, Celery is something we can use to perform tasks outside of our main service. For example, there is a Backend API that has some kind of endpoint to which mobile devices send information that the user has created a new whatever in the application. The task of the Backend is… Read More: Python: introduction to the Celery, and its monitoring configurations0 (0) »

Nexus: Configuring Docker proxy repository, and ContainerD in Kubernetes
0 (0)

17 May 2025

I wrote about launching Nexus in the Nexus: launch in Kubernetes, and PyPI caching repository configuration post, now I want to add Docker image caching to PyPI, especially since Docker Hub introduces new limits from April 1, 2025 – see Docker Hub usage and limits. We’ll do it as usual: first run manually locally on… Read More: Nexus: Configuring Docker proxy repository, and ContainerD in Kubernetes0 (0) »

Arch Linux: mount LVM partitions and run mkinitcpio
0 (0)

15 April 2025

It’s not often, but sometimes I need to boot the system from a USB and rebuild initramfs-linux.img. This post is more of a quick note to myself on how, what, and where to mount on my laptop to run mkinitcpio, as I have LVM partitions, separate disk partitions for /boot, and swap. iwctl and WiFi… Read More: Arch Linux: mount LVM partitions and run mkinitcpio0 (0) »

PostgreSQL: AWS RDS Performance and monitoring
0 (0)

10 February 2025

We are migrating our Backend API from DynamoDB to AWS RDS PostgreSQL, and several times RDS crashed. Actually, given that we took db.t3.small with two vCPUs and two gigabytes of memory to save money, it was quite expected, but I wondered why everything was crashing. A few days later, I started to debug the issue,… Read More: PostgreSQL: AWS RDS Performance and monitoring0 (0) »

GitHub Actions: running the Actions Runner Controller in Kubernetes
0 (0)

16 October 2024

We use GitHub Actions for deployments, and eventually came to the point where we wanted to run its Runners on our own Kubernetes cluster because: self-hosted GitHub Runners are cheaper – in fact, you pay only for the servers that run the jobs we need to run SQL migrations on AWS RDS in AWS VPC… Read More: GitHub Actions: running the Actions Runner Controller in Kubernetes0 (0) »

AWS: Kubernetes and External Secrets Operator for AWS Secrets Manager
0 (0)

24 August 2024

We have a new EKS cluster 1.30 on our project, where we want to completely remove the old IRSA with OIDC and start using EKS Pod Identities – see AWS: EKS Pod Identities – a replacement for IRSA? Simplifying IAM access management. And everything seems to work fine, but when I started deploying our Backend… Read More: AWS: Kubernetes and External Secrets Operator for AWS Secrets Manager0… »

Terraform: EKS and Karpenter version upgrade 19.21 to 20.0
0 (0)

13 July 2024

It seems like a common task to update a version of a Terraform module, but terraform-aws-modules/eks version 20.0 had some pretty big changes with breaking changes. The changes relate to authentication and authorization in AWS IAM and AWS EKS, which I analyzed in the post AWS: Kubernetes and Access Management API, the new authentication in… Read More: Terraform: EKS and Karpenter version upgrade 19.21 to 20.00 (0) »

AWS: RDS IAM database authentication, EKS Pod Identities, and Terraform
0 (0)

7 July 2024

We’re preparing to migrate our Backend API database from DynamoDB to AWS RDS with PostgreSQL, and finally decided to try out AWS RDS IAM database authentication, which appeared in 2021. IAM database authentication, as the name implies, allows us to authenticate to RDS using AWS IAM instead of the login-password from the database server itself.… Read More: AWS: RDS IAM database authentication, EKS Pod Identities, and Terraform0… »