Shehu Awwal

Renewing Expired K3S Certificate

Tue, 13 Jan 2026 10:30:24 +0000

By default TLS certificates in kubernetes has expiration of 1 year for the client/server, And once the certificate has expired the API server cant authenticate request.

Verify The Certificate Expiration

In other to verify the k3s is down because of the certificate, you can check the on the master-node/control-node.

sudo systemctl status k3s

Example of the Error Log:

Jan 13 10:15:19 sa-k8s-prod-master k3s[1788901]: E0113 10:15:19.774025 1788901 authentication.go:73] "Unable to authenticate the request" err="[x509: certificate has expired or is not yet valid: current time 2026-01-13T10:15:19+01:00 is after 2025-12-26T20:10:10Z, verifying certificate SN=2680174939717522757, SKID=, AKID=EF:0F:A4:61:2D:2D:2D:68:49:70:D0:46:17:E3:C5:40:55:C6:23:5C failed: x509: certificate has expired or is not yet valid: current time 2026-01-13T10:15:19+01:00 is after 2025-12-26T20:10:10Z]"

Steps To Renew k3s Certificate

Stop K3s Service

Stop the k3s service on the master node.

How To Setup LXC Container In Proxmox Server

Sat, 04 Oct 2025 18:25:09 +0000

One of the reasons you might want to run LXC (Linux Containers) is their lightweight virtualization approach. LXC containers use the same host kernel and consume fewer resources like memory compared to running a full guest VM. This means they boot faster and offer higher performance.

You can download LXC container templates from different sources and extract them manually, but in this guide we’ll be using Proxmox’s pveam command, which is used to create, manage, download, and delete LXC containers.

VMware Snapshot to Memory Dump: A Step-by-Step Guide

Sat, 08 Feb 2025 16:11:33 +0000

In this guide, we will explore how to convert a VMware snapshot into a memory dump. You might wonder why this conversion is necessary. One major reason is forensic or malware analysis.

Some malware resides in memory and leaves no traces on disk. Malware analysts often use memory dumps to identify malicious code or processes present in memory at the time of the snapshot.

Taking a VMware Snapshot

In VMware ESXi/vSphere:

How To Assign A Static IP Address To A VMware Workstation VM

Sun, 29 Dec 2024 18:56:56 +0000

I really enjoy working with virtualization both type 1 and 2, But came to a time that I need to assign a static IP Address to my virtual machines in any network connection mode, NAT, Bridged or Host-Only.

Before I came across this, I tried setting up Mikrotic Router OS in other to achieve this options, and looking for other alternative ways, But didn’t know the option is already available.

Fix VMware Workstation Module Disk Power On Failed

Sun, 29 Dec 2024 18:17:05 +0000

My server shutdown unexpectedly, when I tried to start the VM, I started getting error like this:

The process cannot access the file because another process has locked a portion of the file. Cannot open the dis: disk directory.vmdk or one of the snapshots disks it depends on. Module ‘Disk’ power on failed. Failed to start the virtual machine.

The file inside .lck directory got corrupted, Just right click on the Virtual Machine and Open VM Directory.

Running x86/AMD64 Docker Container Images On Apple Mac ARM With Colima

Tue, 10 Dec 2024 22:39:26 +0000

I’ve really encountered issues most especially switching from Apple Intel processor to Apple Silicon with docker images built specifically for x86/AMD64 but unable to run on the mac.

Likely you might have encountered this issues if the image was built for x86/AMD64, but with docker buildx that allows you to build container images for multi architecture processor becomes easy. How about when the images is old for like 5years or so. Or you specifically need to use an intel x86/AMD64 images.

Setting Up Linkerd Service Mesh With Helm Charts In Kubernetes

Sat, 09 Nov 2024 13:40:02 +0000

I’ve been looking more into service mesh most especially with Linkerd, Looking more into what service mesh is all about with it’s core values which are:

Observability
Security
Reliability

The linkerd having the control plane and the data plane, The control plane which is responsible for managing the configuration and policy while the data plane handles the traffic between each service.

The reason, I would prefer to set it up via helm chart over the linkerd cli command is because, it’s easy to manage and advisably for production environments, so when things goes wrong, it can easily be debugged and fixed.

Setting Up Metrics Server With Helm Charts In Kubernetes

Tue, 06 Aug 2024 21:53:47 +0000

On one of my personal cluster and I am trying to setup a metrics-server in other to gather metrics for a resource usage within the node or pods. the kubernetes cluster is setup with kubeadm, I cant recall if K3d or Minikube comes pre-installed with metrics-server, but this should work for any kubernetes distributions.

Install Metrics Server Via Helm Charts

We need to add the helm charts repo.

helm repo add metrics-server https://kubernetes-sigs.github.io/metrics-server/

After adding the helm charts repo, we need to add an override file, if you proceed installing the helm charts, you might be getting error relating to tls certificate error

Setting Up Argo CD With Helm Charts In Kubernetes

Sat, 30 Dec 2023 16:19:50 +0000

I am just playing around with Argo CD, To’ve more idea about GitOps with Argo CD, But I was having some challenges around the Ingress with ERR_TOO_MANY_REDIRECTS, I have to look at the Helm Values from the Github Repository - https://github.com/argoproj/argo-helm and then look more into some issues raised on Github - https://github.com/argoproj/argo-cd/issues/2953 and then I was able to successfully set it up.

How To Install Argo CD With Helm Charts

Add the Argo CD Helm charts repo

helm repo add argo https://argoproj.github.io/argo-helm

Then install argocd, You can make use of this custom-override file by only changing the domain url and then the annotations to march your cluster config.

server:
  ingress:
    enabled: true
    annotations:
      kubernetes.io/ingress.class: nginx
      kubernetes.io/tls-acme: "true"
      cert-manager.io/cluster-issuer: letsencrypt
      cert-manager.io/acme-challenge-type: dns01
      cert-manager.io/acme-dns01-provider: cloudflare
    ingressClassName: ""
    hosts:
    - "argo.shehuawwal.one"
    paths:
    - /
    pathType: Prefix
    tls:
    - secretName: argo.shehuawwal.one
      hosts:
      - argo.shehuawwal.one
configs:
  params:
    server.insecure: "true"

You can save the above file as argo-custom-override.yaml. Install argo with the override file

Building A Kubernetes Cluster From Scratch With KubeAdm

Tue, 22 Feb 2022 16:21:09 +0000

This guide walks you through building a Kubernetes cluster from scratch using kubeadm. You can set up the master node on one cloud provider, such as AWS, and have worker nodes on Azure, GCP, DigitalOcean, or on-premises. This tutorial uses Ubuntu as the example Linux distribution, but the steps apply to other Debian-based systems.

Prerequisites

Before starting, ensure each node meets the following minimum requirements:

At least 2 GB RAM per machine
At least 2 CPU cores per machine
Network connectivity between all nodes (private or public)
Sufficient storage for your workloads

Server Specifications Example:

How To Add Bash Completion For Kubectl Command

Thu, 02 Dec 2021 13:50:27 +0000

The kubectl comes in a single binary package that you can run in your current directory or move it over to /bin/ or any other directory, But we still want that auto-completion instead of having to type the whole command.

Adding Kubectl To Bashrc

vim $HOME/.bashrc

This will open the bashrc file on the current user, and add the following down below:

source <(kubectl completion bash)

This will read the kubectl command with completion, Then we will need to source the .bashrc file to take effect as well.