DevOps Daily with Fexingo: CI/CD, Kubernetes, and Modern Software Operations

In this episode, Lucas and Luna dig into a frustrating Kubernetes mystery: a service mesh that quietly added latency to every request without triggering any alarms. They walk through a real-world incident where mTLS handshakes and sidecar proxies doubled p99 response times, yet dashboards showed everything green. The conversation covers how to spot the hidden cost of service meshes, why metrics like CPU and memory miss it, and the concrete debugging steps that finally exposed the culprit: an Envoy proxy with an oversized connection pool and a misconfigured retry policy. If you run Istio, Linkerd, or any sidecar-based mesh, this episode gives you a checklist to avoid the same silent performance trap. They also touch on when a mesh is worth the overhead and when it might be simpler to step back to plain Kubernetes networking.

#Kubernetes #ServiceMesh #Istio #Linkerd #Envoy #SidecarProxy #mTLS #Latency #DevOps #SRE #Observability #Performance #Troubleshooting #TechPodcast #FexingoBusiness #BusinessPodcast #CloudNative #K8s

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dig into a surprisingly common Kubernetes failure: the PersistentVolumeReclaimPolicy. When a PersistentVolumeClaim is deleted, the default 'Delete' policy can erase the underlying storage — and your data — before you realize what happened. Lucas walks through a real incident where a single accidental PVC deletion nuked three production databases because the reclaim policy was set to 'Delete' instead of 'Retain'. They break down how PersistentVolumes and Claims actually interact, why the default policy is so dangerous for stateful workloads, and how you can protect yourself with namespaces, RBAC, and backup strategies. Plus, they share why StorageClass reclaim policies often override your PV settings, and how a simple pre-delete hook or manual PV retention can save your team from a nightmare. Tune in for a practical guide to making sure your persistent data survives deletions.

#Kubernetes #DevOps #PersistentVolume #DataLoss #StorageClass #ReclaimPolicy #StatefulSets #Backup #RBAC #CloudNative #Technology #DevOpsDaily #FexingoBusiness #BusinessPodcast #K8s #Infrastructure #IncidentResponse #Storage

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dissect the Kubernetes controller manager's flags that often go overlooked, leading to subtle stability issues. They explore how misconfigured flags like --concurrent-syncs and --node-monitor-period can cause cascading failures in large clusters, drawing from real-world operational incidents. The discussion highlights the importance of understanding these flags for maintaining cluster health, with a focus on practical tuning and observability. By the end, you'll know exactly which flags to audit in your own clusters to prevent silent degradation and improve overall resilience.

#Kubernetes #ControllerManager #ClusterStability #DevOps #CloudNative #Infrastructure #SRE #Tech #Podcast #FexingoBusiness #BusinessPodcast #Operations #FlagTuning #Resilience #Observability #K8s #ContainerOrchestration #PlatformEngineering

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dig into a surprisingly common Kubernetes misstep: setting CPU and memory requests too high. Using a real-world example from a mid-sized fintech that saw its cloud bill jump 40 percent after a migration, they explain how requests and limits work, why overprovisioning sneaks in, and the hidden costs that follow. They walk through the mechanics of the scheduler, the role of Quality of Service classes, and why the Kubernetes vertical pod autoscaler isn't a cure-all. Lucas shares a practical approach to right-sizing requests using metrics like the 99th percentile and the concept of the request-to-limit ratio. Luna brings up the tension between performance risk and cost, and they close with a forward-looking question about whether the industry will ever settle on standard right-sizing tools. If you've ever wondered why your cluster feels overprovisioned or why your FinOps dashboard looks scary, this episode gives you a clear framework to fix it.

#Kubernetes #DevOps #CloudCost #FinOps #Overprovisioning #RequestsAndLimits #VerticalPodAutoscaler #Scheduler #QualityOfService #InfrastructureAsCode #RightSizing #CloudNative #TechPodcast #BusinessPodcast #SoftwareEngineering #FexingoBusiness #FexingoPodcast #DevOpsDaily

Keep every episode free: buymeacoffee.com/fexingo

In Episode 164 of DevOps Daily, Lucas and Luna dig into a subtle Kubernetes security gap: ServiceAccount tokens that silently travel across namespace boundaries. They walk through a real incident where a CI/CD pipeline mounting a token in one namespace accidentally exposed it to workloads in another, and explain how token volume projection and RBAC misconfigurations can turn a simple deploy into a cross-tenant leak. They cover how attackers can abuse leaked tokens, what to check in your own clusters, and why default automounting is riskier than it looks. Plus, they wrap with a pragmatic checklist for locking down ServiceAccount tokens without breaking your existing workloads. If you run Kubernetes in production, this episode gives you a concrete audit you can run today.

#Kubernetes #DevOps #Security #ServiceAccount #RBAC #TokenLeak #CI/CD #CloudNative #PodSecurity #ContainerSecurity #TechPodcast #BusinessPodcast #FexingoBusiness #SoftwareEngineering #InfrastructureAsCode #CloudComputing #DevSecOps #ClusterSecurity

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dive deep into a common yet often overlooked failure mode in Kubernetes: leader election. When the kube-controller-manager's leader election fails, it can lead to split-brain scenarios where multiple controllers act simultaneously, causing race conditions and cascading errors. We explore a real incident where a misconfigured lease duration and renew deadline led to duplicated work and API server overload. We break down how leader election works with etcd and leases, why the default settings may not suit every cluster, and how to diagnose and mitigate these issues using metrics, logs, and proper configuration. Tune in to learn how to prevent your own Kubernetes cluster from tearing itself apart.

#Kubernetes #LeaderElection #SplitBrain #etcd #ControllerManager #DevOps #CloudNative #Tech #FexingoBusiness #BusinessPodcast #Technology #Infrastructure #SiteReliability #SRE #Microservices #Containers #KubernetesFailure #Ops

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dig into the surprisingly common but often misunderstood world of Kubernetes Pod Security Contexts. They use a real-world case of a microservice that kept failing with permission errors after an update to show how securityContext settings interact with container images, volumes, and admission controllers. You'll learn why setting the right user ID and file system group matters, the difference between fsGroup and supplementalGroups, and how to debug these issues using ephemeral containers and securityContext validation. They also touch on the shift to Pod Security Standards and how to audit your cluster for risky configurations. If you're tired of guessing why Pods start but can't write to volumes or read from ConfigMaps, this episode gives you a clear mental model and practical tips to fix it fast.

#PodSecurityContexts #KubernetesSecurity #KubernetesPermissions #DevOps #CI/CD #Containers #Microservices #InfrastructureAsCode #CloudNative #KubernetesTroubleshooting #SecurityContext #fsGroup #PodSecurityStandards #KubernetesAdmissionControl #Technology #FexingoBusiness #BusinessPodcast #DevOpsPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dig into a deceptively simple failure mode: the Kubernetes Metrics Server takes a few extra seconds to return pod metrics, and the Horizontal Pod Autoscaler overreacts. They walk through a real incident where a 45-second metrics delay caused wild replica swings, wasted cloud spend, and a brief outage. Lucas explains how the HPA's default tolerance window interacts with the Metrics Server's 15-second scrape interval and why a simple misconfiguration can turn a steady workload into a yo-yo. They discuss how to monitor metrics-server latency, the role of the --horizontal-pod-autoscaler-sync-period flag, and why tuning your autoscaler's behavior to actual metrics freshness is more important than chasing the latest feature. Along the way, they tie the lesson to the broader principle: in Kubernetes, the control plane's speed dictates your application's stability. A short, honest word about listener support keeps the show ad-free, then it's back to the metrics trench.

#Kubernetes #HorizontalPodAutoscaler #MetricsServer #DevOps #SRE #CloudNative #Scaling #Observability #Prometheus #ContainerOrchestration #Infrastructure #Performance #IncidentManagement #TechPodcast #FexingoBusiness #BusinessPodcast #Technology #DevOpsDaily

Keep every episode free: buymeacoffee.com/fexingo

In Episode 160 of DevOps Daily, Lucas and Luna drill into a deceptively simple Kubernetes footgun: object finalizers and namespace deletion. When a team at a mid-sized fintech tried to clean up a failed release, a single finalizer on a custom resource (CRD) silently held the namespace in 'Terminating' for three weeks. The episode walks through exactly how finalizers work under the hood, why the namespace didn't just vanish, how they finally traced it via kubectl and the API server logs, and the three guardrails they now enforce: auditing finalizers before deletion, using kubectl patch to remove them only when safe, and linting CRDs to block finalizers that don't self-heal. Lucas and Luna also discuss when a finalizer is worth keeping (like for cleanup jobs) versus when it becomes a footgun, and they stress-test a couple of common workarounds. No fluff, just a real ops story with concrete commands you can use today.

#Kubernetes #Finalizers #Namespaces #CRD #DevOps #CloudNative #Troubleshooting #kubectl #APIServer #ClusterOps #SRE #Fintech #ProductionIssue #TechOps #CloudInfrastructure #DevOpsDaily #FexingoBusiness #BusinessPodcast

Keep every episode free: buymeacoffee.com/fexingo

In this episode of DevOps Daily, Lucas and Luna dig into a surprisingly common Kubernetes headache: namespaces stuck in the Terminating state because of object finalizers. They walk through a real incident where a single stuck custom resource with a finalizer held up an entire namespace deletion, blocking a whole environment teardown and causing pipeline failures. You'll learn what finalizers actually do, how they can silently break cluster cleanup, and the step-by-step debugging approach — from checking finalizers with kubectl to patching or force-deleting when needed. They also discuss safe alternatives and when it's better to fix the controller instead of bypassing the safety mechanism. This episode gives you a concrete mental model and a few kubectl commands you'll actually use in production.

#KubernetesFinalizers #NamespaceDeletion #K8sOperators #CloudNative #DevOps #KubectlTips #ClusterCleanup #KubernetesTroubleshooting #ControllerDesign #CustomResourceDefinitions #TechPodcast #FexingoBusiness #BusinessPodcast #Technology #SoftwareEngineering #InfrastructureAsCode #SiteReliabilityEngineering #CloudInfrastructure

Keep every episode free: buymeacoffee.com/fexingo