Tag See all →

#kubelet

3 stories

Banner: a container blocked at a door because one key is missing from a keyring

DevOps & CI/CD Bug Report

CreateContainerConfigError: couldn't find key in Secret after a secret store rename

John Nguyen · Sep 22, 2026 · 9 min read

New Pods failed with CreateContainerConfigError while old ones kept running. A key renamed in the cloud secret store made External Secrets rewrite the Kubernetes Secret without DATABASE_URL. We show how to find the missing key fast and how to fail before rollout next time.

Banner: Kubernetes pods failing to pull ECR images because the registry token expired

DevOps & CI/CD Bug Report

ImagePullBackOff from ECR after 12 hours: no basic auth credentials

Ryan Pham · Feb 12, 2025 · 6 min read

Our self-managed cluster pulled images from ECR fine after setup and failed every morning with no basic auth credentials. The imagePullSecret held an ECR token that expires after 12 hours. We switched to the kubelet credential provider so nodes fetch fresh tokens themselves.

Banner: a YAML manifest flowing through API server, scheduler and kubelet into a running container

DevOps & CI/CD

From kubectl apply to a running container: the Kubernetes Pod lifecycle step by step

John Nguyen · Nov 5, 2024 · 9 min read

kubectl apply returns in milliseconds, but a container can take a minute to start. We trace every hop: API server, admission, etcd, controllers, scheduler, kubelet, CRI, CNI and probes, and show which command reveals each stage.