https://trinidadmarroquin.com/posts/ Recent content in Blog on Trinidad Marroquin Hugo en Trinidad Marroquin Tue, 21 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rke2-node-reboots-longhorn-degraded-risk/ Tue, 21 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rke2-node-reboots-longhorn-degraded-risk/ A practical RKE2 maintenance pattern for rebooting control-plane and worker nodes while Longhorn storage is already degraded, including batching, drain rules, boot-ID checks, and stop criteria. https://trinidadmarroquin.com/posts/ubuntu-unattended-upgrades-kubernetes-node-risk/ Mon, 20 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/ubuntu-unattended-upgrades-kubernetes-node-risk/ A Kubernetes operations article on why Ubuntu unattended upgrades should be disabled on production nodes and replaced with controlled patch windows, especially when systemd, udev, iSCSI, multipath, and CSI storage are involved. https://trinidadmarroquin.com/posts/rancher-rke2-minor-hop-gitops-suc/ Thu, 16 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rancher-rke2-minor-hop-gitops-suc/ A practical Rancher and RKE2 upgrade article covering supported minor hops, Rancher UI version metadata, GitOps-managed system-upgrade-controller plans, stale runtime shims, and post-upgrade cleanup gates. https://trinidadmarroquin.com/posts/rancher-management-cluster-upgrade-preflight/ Wed, 15 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rancher-management-cluster-upgrade-preflight/ A practical Rancher and RKE2 upgrade runbook pattern covering stabilization, worker replacement, backups, stale RKE1 artifacts, Helm upgrade recovery, and post-upgrade validation. https://trinidadmarroquin.com/posts/concourse-packer-template-builds-network-secrets/ Tue, 14 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/concourse-packer-template-builds-network-secrets/ A practical SRE article on moving multi-site Packer template builds into Concourse while handling secrets, worker placement, network reachability, ISO behavior, and log hygiene. https://trinidadmarroquin.com/posts/installing-configuring-calico-rke2-ground-up/ Thu, 02 Jul 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/installing-configuring-calico-rke2-ground-up/ A practical Calico installation and configuration guide for RKE2: CNI ownership, Tigera operator setup, IP pools, node address autodetection, validation, and related operations notes. https://trinidadmarroquin.com/posts/rancher-system-upgrade-controller-latent-worker-risk/ Wed, 24 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rancher-system-upgrade-controller-latent-worker-risk/ A Rancher and RKE2 incident pattern where a continuously reconciled system-upgrade-controller Plan stayed pending until worker capacity collapsed, then cordoned the last healthy worker. https://trinidadmarroquin.com/posts/netbox-virtualization-migration-operational-pattern/ Thu, 18 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/netbox-virtualization-migration-operational-pattern/ A practical operating pattern for migrating NetBox VM inventory from DCIM devices to virtualization VMs while keeping Terraform state, tags, IPs, and audit boundaries under control. https://trinidadmarroquin.com/posts/netbox-terraform-drift-audit-existing-kubernetes-vms/ Wed, 17 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/netbox-terraform-drift-audit-existing-kubernetes-vms/ A drift audit report for converting VM inventory from NetBox DCIM devices to virtualization objects, importing existing vSphere and NetBox resources into Terraform state, and deciding not to apply unsafe legacy VM drift. https://trinidadmarroquin.com/posts/managing-vsphere-vm-lifecycle-state-terraform-netbox/ Tue, 16 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/managing-vsphere-vm-lifecycle-state-terraform-netbox/ A lifecycle runbook for managing vSphere VM CPU, memory, disk sizing, NetBox metadata, idempotency, and teardown hygiene after initial Terraform provisioning. https://trinidadmarroquin.com/posts/terraform-vsphere-vm-guardrails-netbox/ Mon, 15 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/terraform-vsphere-vm-guardrails-netbox/ A practical walkthrough of using Terraform validation, NetBox ownership, vCenter checks, DNS checks, network liveness tests, and teardown verification around the vSphere VM lifecycle. https://trinidadmarroquin.com/posts/ai-assisted-netbox-inventory-guardrails/ Fri, 12 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/ai-assisted-netbox-inventory-guardrails/ A practical reflection on using AI assistance for NetBox inventory work, where tool access helped but evidence, validation, and import discipline mattered more than confident answers. https://trinidadmarroquin.com/posts/rancher-network-saturation-symptoms/ Thu, 11 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/rancher-network-saturation-symptoms/ An incident-style walkthrough of a Rancher traffic anomaly where control-plane symptoms pointed at remotedialer instability, but the likely trigger was backup-window network saturation. https://trinidadmarroquin.com/posts/local-iac-labs-to-production-patterns/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/local-iac-labs-to-production-patterns/ A practical SRE view of how local Terraform, Docker, Helm, Kafka, and observability labs can become production-ready infrastructure patterns without pretending the lab is production. https://trinidadmarroquin.com/posts/multi-site-rke2-lessons/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/multi-site-rke2-lessons/ Operational lessons from running RKE2 clusters across multiple data centers: inventory design, node naming conventions, upgrade sequencing across sites, and the patterns that break first at scale. https://trinidadmarroquin.com/posts/operating-in-gitops/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/operating-in-gitops/ Opinionated practices for infrastructure teams working in a GitOps model: commit messages, semver for infrastructure, CI-triggered CD tradeoffs, and deployment automation patterns that survive production use. https://trinidadmarroquin.com/posts/dns-search-domain-remediation/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/dns-search-domain-remediation/ A production walkthrough of auditing, diagnosing, and remediating DNS search domain drift across five RKE2 cluster sites, including netplan staging, systemd-resolved link-level debugging, and a Subiquity YAML indentation trap. https://trinidadmarroquin.com/posts/sre-dirty-dozen/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/sre-dirty-dozen/ Twelve common anti-patterns in SRE practice: alert fatigue disguised as paging, dashboards without decisions, SLI collection without SLO targets, incident reviews without action items, and other traps that SRE teams fall into. https://trinidadmarroquin.com/posts/kubernetes-vsphere-csi-troubleshooting/ Wed, 10 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/kubernetes-vsphere-csi-troubleshooting/ A practical incident walkthrough for Kubernetes monitoring PVC failures, stale CSI storage, vSphere CSI attach and mount validation, and the disk.EnableUUID requirement. https://trinidadmarroquin.com/posts/first-boot-ownership-packer-terraform-cloud-init/ Tue, 09 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/first-boot-ownership-packer-terraform-cloud-init/ A systems note on assigning clear ownership between Packer templates, Terraform vSphere clones, guest customization, cloud-init, bootstrap scripts, and CSI storage. https://trinidadmarroquin.com/posts/terraform-refactor-hidden-infrastructure-coupling/ Tue, 09 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/terraform-refactor-hidden-infrastructure-coupling/ A practical SRE note on how refactoring a vSphere Terraform repo exposed coupling between Terraform, Packer, cloud-init, vSphere customization, netplan, bootstrap scripts, and iSCSI. https://trinidadmarroquin.com/posts/llm-assisted-infrastructure-troubleshooting/ Tue, 09 Jun 2026 00:00:00 -0500 https://trinidadmarroquin.com/posts/llm-assisted-infrastructure-troubleshooting/ Practical lessons for using LLMs during infrastructure troubleshooting while preserving operator judgment, validation, and evidence-based debugging.