til
Small things I learned, mostly so I don’t forget them. A few sentences each.
- TIL: Library Helm charts share templates, not workloads
- TIL: Argo CD AppProjects have a namespace resource whitelist
- TIL: GOTOOLCHAIN=local stops Go from auto-upgrading toolchains
- TIL: a Helm release's namespace is part of its identity
- TIL: a Terminating namespace is a stuck finalizer
- TIL: informers just subscribe to the API server's event stream
- TIL: a DNS zone delegation is just NS records (plus glue when you need them)
- TIL: argo cd helm release name defaults to the Application name
- TIL: deleting a CRD deletes every instance of that kind across the cluster
- TIL: flux dependsOn can order HelmReleases and Kustomizations across namespaces
- TIL: a status condition is stale if observedGeneration doesn't match generation
- TIL: crossplane Observe means it does not update the cloud resource
- TIL: crossplane's external-name annotation is the cloud resource id
- TIL: generateName lets the API server pick a unique name for you
- TIL: a Terminating pod can still get traffic for a bit
- TIL: generation and resourceVersion answer different questions
- TIL: a finalizer doesn't mean 'important' — it means 'don't delete me yet'
- TIL: Go's GC has no idea it's running inside a container — unless you tell it
- TIL: the ingress-nginx 404 page is just another Service
- TIL: matchPolicy: Equivalent means your webhook still runs on versions you never listed
- TIL: why containers need a real init process
- TIL: Kubernetes doesn't restart pods when a Secret changes — sometimes it doesn't even need to
- TIL: Argo CD's dry-run can fail before your manifests even get a chance
- TIL: a Service doesn't know what a Deployment is
- TIL: making CRD lists behave like maps under server-side apply