#azure - October 2020

Anything like cloud posse for azure?

Hi all - I use AKS and have several deployments that use azureFile volumes to mount storage accounts into pods. One of the recommendations from Microsoft and CIS is to rotate storage account access keys periodically. One of these keys is stored in a k8s secret object to allow the pod to mount the share, however when the key that is being used is regenerated, the mount breaks (this would be expected; I see Host is down when I execute ls in the pod in the mounted directory). When I update the secret value, it doesn't cause the mount to fix itself and I am forced to restart the pod to have it remount using the new secret value. Is this the expected behavior? Is there anyway to have it "hot remount" when the secret value changes?

anyone got some good reading around how to best manage keys/secrets/vault with a terraform setup in Azure? looking for some best practices, and strategies to manage secrets that need to be rotated (yes I see its discussed above, bit more of a beginner question here 🙂)

Hi all, we're trying to use omsagent but the pods are giving the following error

td-agent-bit 1.4.2
2020-10-20T06:14:42Z I! Starting Telegraf 
2020-10-20T06:14:42Z E! [agent] Failed to connect to output socket_writer, retrying in 15s, error was 'dial tcp 0.0.0.0:25226: getsockopt: connection refused'

any suggestions? the pod is marked as running but nothing is being collected to our workspace

fixed after full restart 🤷

Do you use AKS?

Yes - we just restarted the daemonset running and the errors went away