Topic · 6 articles

Cloud.

6 articles on Cloud. Practical notes on infrastructure, security, and engineering leadership by Indra Gusti Prasetya.

CloudSeptember 4, 20268 min read

Fix kubelet "not run on a host using cgroup v1" on v2

Run stat -fc %T /sys/fs/cgroup to see what the kubelet sees: hybrid mounts and unapplied GRUB edits both read as cgroup v1 on a v2 host.

CloudAugust 28, 20269 min read

Fix conflicting SELinux labels of volume in K8s 1.37

Kubernetes 1.37 mounts PVCs with -o context=, so pods with different SELinux labels stall in ContainerCreating. Run one kubectl check to find them first.

CloudAugust 25, 20269 min read

Stop Kubernetes DRA Giving One GPU to a VM and a Pod

GPU Operator 26.7 advertises each GPU twice under DRA. Run one kubectl query to spot it, then split the node pool before enabling VFIO.

CloudAugust 25, 20269 min read

Fix "a mirror pod may not reference secrets" in K8s 1.37

Kubernetes 1.37 removes the PreventStaticPodAPIReferences gate. Grep your static pod manifests and kubelet config before a node refuses to start.

CloudJuly 3, 20268 min read

Kubernetes Default-Deny Egress Stops Pod Exfiltration

Run a default-deny egress NetworkPolicy to stop a compromised pod from phoning home. Two manifests, one DNS gotcha that breaks it, and the CNI fix.

CloudMay 28, 20265 min read

Principles for Building Secure and Scalable Infrastructure

A decade of lessons on balancing security, reliability, and the room to grow, with the specific habits that actually hold up at 3 a.m.

Browse other topics

AI 5 DevOps 20 Hardware 1 Mobility 1 Robotics 1 Security 21 Tips & Tricks 20 Tutorial 21

All writing

Subscribe to the Technical Journal

Deep dives into infrastructure, security, and technical leadership. No noise, just engineering rigor. Subscribe and grab the infrastructure security checklist I work from.