GeekyRyan

Introduction Link to heading Netcat is a versatile networking utility that can be used for a wide range of tasks.

Lab and test environments have a tendency to accumulate complexity over successive iterations of “just add one more special case.”

Despite being a great language, PowerShell is not impervious to errors.

For a long time, the standard way for a pod in AKS to authenticate to Azure resources (Key Vault, databases, service bus, etc.) was some flavor of managed identity binding via a sidecar (AAD Pod Identity), or worse, credentials baked into a secret.

Kubernetes’ built-in RBAC is powerful, but managing it purely inside the cluster (via kubeconfigs and static role bindings) doesn’t integrate well with how most organizations manage identity and access at the directory level.

Over time, infrastructure accumulates cruft - clusters stood up for a specific purpose that never got cleaned up, duplicate environments left over from a migration, that sort of thing.

AKS has a feature that automatically applies the latest node image to your node pools on a schedule.

This will be a quick and dirty post, so please forgive any spelling/grammar mistakes.

I was recently involved with troubleshooting some API’s hosted in Kubernetes throwing http/502’s.

I’m not really a fan of photography.

In this article, we’ll take a quick look at building a Golang app with Github actions.

In this article, we’ll take a quick look at chaining two pipelines together in Azure Devops, so that the completion of one pipeline, triggers the other to run.

If you need to update the secret for a service principal in Azure Devops, prior to it expiring, you may be surprised to find that this cannot be done via the Azure Portal.

If you want to the local version of a dependency in Go rather than one in a remote repository, use the replace keyword.

This will be a short post on querying REST APIs with Powershell.

JSON is a widely used format for representing structured data.

By default, scale-out operations performed manually or by cluster autoscale rules require the allocation and provisioning of new nodes, and scale-in operations delete nodes.

If you manage Linux nodes, you know how vital performing regular maintenance is.

I have somewhat of a niche issue, where I have no network connectivity while connecting to my work VPN inside of WSL v2.

This problem has bitten me more than once, and I can never remember how to fix it.

In this post, we will discuss how to remove a Kubernetes namespace that is stuck in the ‘terminating’ state.

We can inject configuration into containers using Kubernetes config maps and secrets.

In this blog post, we will attempt to explain the current storage options that exist in Kubernetes.

One of the recurring themes of running Kubernetes in production is that clusters age out of support fairly quickly.

This post will cover a secure method for accessing secrets in Azure DevOps pipelines.

In this article, we will dive into the process of pod eviction in a Kubernetes cluster, how you can pod prevent pod eviction, and how you can recover from such a situation.

In this post, we’ll take a look at deploying a highly available sFTP solution to Azure Kubernetes with user files stored in an Azure NFSv4 File Share.

This article will discuss an issue regarding WSUS failing to download updates from Microsoft Update servers.

When migrating computer objects using the Active Directory Migration Tool, you may encounter the following error: In addition, the Migration Log may show the following error: This is typically caused by a host-side firewall.

When deploying new software releases to servers or (insert -as-a-service> here), it’s a good idea to either deploy the releases in a controlled manner or to have a quick rollback plan.

This article assumes that you have already created a pipeline in Azure Devops and have it linked to an Azure Devops repo.

I setup a self hosted agent for Azure Devops this morning on Server 2012 R2 (legacy Visual Studio dependencies…) and found that I was unable to start the service.

This will be the first article in a series about maintaining Azure tenants and subscriptions.

I recently passed the AZ-303 exam.

I recently ran into a situation in my lab environment that required I resync all (2000+) user accounts to Azure AD.

If you are using VM Scale Sets in Azure, you know how important it can be to quickly obtain an instance IP address.

Azure Policy allows us to control what actions users can perform regarding creating and managing resources in Azure.

Let’s say you have a VM in Azure North Central.

In Redhat/Fedora/Cent, GRUB can be protected by running the grub-md5-crypt command and pasting the outputted password hash into the grub.conf file. vSphere 6.0 password protects grub by default.

Prerequisites: Change server name and IP address Configure time settings and NTP In this post we will be reviewing the basic installation of the Active Directory Domain Services role and setup of a new forest on Windows Server Core 2019.

Problem: Deploying a brand new vCSA 6.7 appliance results in the following error during the second stage of the deployment.

I ran into this issue this morning when attempting to setup a VPN on a Hyper-V virtual machine.

Today is just not my day!

When migrating computer objects using the Active Directory Migration Tool, you may encounter the following error: In addition, the Migration Log may show the following error: This is typically caused by a host-side firewall.

When replicating virtual machines from VMware to Azure using Site Recovery, you may encounter an issue where the Configuration server discovers the wrong IP address for a VM.

This morning, I ran into an issue with Azure AD Connect that I had never seen before.

I recently had to create a new Azure AD Connect server, and found that it was not able to report health status in the Azure Portal.

In an organization with multiple Active Directory forests, you may want to sync objects from trusted forests.

While attempting to decommission one of our vCenter sites, I ran into an issue removing one of the PSCs.

These days, it seems every Microsoft product comes with its own unique set of head scratchers.