Posts tagged: infrastructure

💭 Cross Account AWS Security Group ID Reference

2025-06-16T20:56:57Z

Here’s my thought on Cross Account AWS Security Group ID Reference

I needed to update some ingress rules across several AWS accounts and ran into an issue when I had to reference a security group id in another account - turns out / is the money maker

EDIT: this requires VPC Peering…

Note

This is one of [[ my-thoughts ]]. I picked this up from Waylon Walker(https://thoughts.waylonwalker.com). It’s a short note that I make about someone else’s content online. Learn more about the process Thoughts

💭 Failed to load state: unsupported checkable object kind var - …

2025-06-16T20:27:07Z

Here’s my thought on Failed to load state: unsupported checkable object kind var - #2 by apparentlymart - Terraform - HashiCorp Discuss

I have spacelift stacks managed with open tofu and stacks managed with terraform… Due to this very issue I think, I ran into a problem where a terraform-managed spacelift stack couldn’t use the terraform_remote_state data resource to load the state of the open-tofu managed stacks because of state file differences

Note

Aurora U-Blue ZRAM Config

2025-05-27T13:51:27Z

I keep running out of space with my swap getting maxxed out… I don’t know why but U-Blue uses Zram already and apparently I can easily override the defaults:

in usr/lib/systemd/zram-generator.conf


# This config file enables a /dev/zram0 device with the default settings:
# — size — same as available RAM or 8GB, whichever is less
# — compression — most likely lzo-rle
#
# To disable, uninstall zram-generator-defaults or create empty
# /etc/systemd/zram-generator.conf file.
[zram0]
zram-size = min(ram, 8192)

And so I just made my own file in /etc/systemd/zram-generator.conf:


[zram0]
zram-size = min(ram, 16384)

Grafana + Gotify for push notifications

2025-04-07T10:12:51Z

It’s easy to configure push notifications through Gotify from Grafana by setting up a generic Webhook Alerting Contact Point…

The parameters are:

HTTP Method: POST
URL: http:///message
Authentication is done with an app token generated from Gotify, and you put it in Authorization Header: Credentials in the Grafana configuration

See image

Recovering from zpool corruption when you’re short a drive

2025-02-03T21:08:56Z

can only mount tank RO

so can’t rename
also can’t detach which is what I’d want

Could import pool witn -N to not mount any datasets
detach and attach
resilver…

Deployments are not StatefulSets

2025-01-15T18:07:57Z

I was debugging some ArgoCD stuff earlier today and I love using k9s to explore my k8s resources.

The TLDR is that I put some bad env vars in the global values for my ArgoCD pods, this caused the webUI to hang. An easy way to push things through is to open k9s, view the Deployments, and edit the env vars there so the pods can be in the right state to restart and pickup the changes (you’ve obviously fixed the values file already right?)

Well the Notification Controller was the pod hanging, and I couldn’t find it in the Deployments view! This blew my mind… until I realized that it was a Stateful Set.

So, this is not a comparison of the 2 - this is just a note to say that all I had to do was find the StatefulSets in k9s and do the same workflow for editing what I needed to edit to get the pods into workable state while working on the values file…

statically.io to help me out

2024-12-14T13:35:31Z

statically.io offers a CDN that I’m going to try to lean into for images in my blog. My hope is that the builds get and stay fast, and that page loads are fast too.

Example:


<img src="https://cdn.statically.io/gh/pypeaday/images.pype.dev/main/blog-media/skimpy-zsh.png" alt="Skimpy ZSH" title="A fancy data summary in the shell" />

OPNSense Bootstrap Recovery

2024-11-07T08:40:19Z

enabling DHCP WAN port (dhclient <iface>)- running the bootstrap script - sh /usr/local/sbin/opnsense-bootstrap