When using a TimeBasedRollingPolicy in Logback, it seems to be fairly common that it doesn’t operate as expected. One setting in particular seems to be a bit misleading — maxHistory. For example, consider the following policy: <rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy"> <fileNamePattern>/logs/api-%d{yyyy-MM-dd}.%i.log.json.gz </fileNamePattern> <timeBasedFileNamingAndTriggeringPolicy class="ch.qos.logback.core.rolling.SizeAndTimeBasedFNATP"> …

The day-to-day demands of your job might be causing you to miss seeing opportunities or risks that would otherwise be obvious. Take a look at this short video. Can a gorilla be invisible? Maybe. Or perhaps more accurately, under certain circumstances it might be invisible to you. When you focus…

Oracle describes their License Management Services (LMS) as being “designed to help customers ensure they are making the most of their Oracle investments in an effective and compliant manner”. I suspect that many who have been unfortunate enough to have had first-hand experience with an Oracle LMS audit would not…

Most Kubernetes objects, including Deployments, can have names that are ≤ 253 characters in length. You should, however, consider restricting your Deployment names to ≤ 47 characters because of the implications that exceeding this threshold will have on your Pod names. Pod and ReplicaSet naming As you likely know, Deployments create ReplicaSets — and…

What to do when nodes don’t match the Pod’s node affinity If your Pod is stuck in pending, the very first thing that you should do is describe the Pod. You can do that with a command like the following: kubectl -n <namespace> describe pod <podname> When you do that…

Recently I’ve seen a number of Pods in CrashLoopBackoff state for extended periods of time, especially in pre-production environments. In one case, the developer deployed a number of invalid Deployments and immediately thereafter went on vacation. Operations teams detected this and ultimately resolved the issue, but among many developers, it…

Generally speaking, in my experience most container images are using UTC, which seems like a reasonable default. It is consistent all around the world, and doesn’t change for daylight savings time, which helps to avoid ambiguous log entries… you should definitely consider using UTC. However, either the image or the…

Part 1 of this series can be found here. Overlays can be a base for other overlays Imagine that you have multiple instances of an application… for example, a green/blue deployment. In such a scenario, you may have some settings that are dev-specific, but common to both green and blue instances — and similarly for prod. As stated…

TL;DR When Service’s targetPort is specified, and is set to a different value than the port field, use the value of targetPort in your Ingress NetworkPolicy. You would continue to use the port field value, however, from the source Pod to actually connect. Details A Service can map any incoming port to…