Sometimes hyper-specific technical musings Zola 2093-02-16T00:00:00+00:00 https://blog.alwyn.io/atom.xml 2093-02-16T00:00:00+00:00 2093-02-16T00:00:00+00:00 alveel https://blog.alwyn.io/blog/hello/

<p>This is your first blog post!&hellip; </p>

2093-02-16T00:00:00+00:00 2093-02-16T00:00:00+00:00 alveel https://blog.alwyn.io/blog/webrtc/ <h1 id="context">Context</h1> <p>I had this weird issue with Teams where, if I was connected to the work VPN and joined a call, my entire network stack would stop working. Whenever joining a call, I had to disable the VPN, join it, then re-enable the VPN and it would work fine.</p> <p>If I had the problem, the only fix was to disconnect any and all network connections (not just the VPN!) and then re-enable.</p> <p>After a bit I found out it only happens at the office. A bit later I figured out it only happens when connected over WiFi. Wired this problem did not occur.</p> <p>Troubleshooting was difficult at first, as networking isn't my strongest suite.</p> <p>I had my VPN configured to only tunnel traffic that was actually directed at work networks; other traffic would go outside of it.</p> <h1 id="fixes">Fixes</h1> <h1 id="for-all-applications">For all applications:</h1> <pre class="giallo" style="color: #CDD6F4; background-color: #1E1E2E;"><code data-lang="plain"><span class="giallo-l"><span>sudo firewall-cmd --permanent --direct --add-rule ipv4 filter OUTPUT 0 -s 10.8.0.0/16 ! -o tun0 -p udp -j DROP</span></span></code></pre><h1 id="for-teams-only-edit-add-config-teams-for-linux-config-json">For Teams only, edit/add <code>~/.config/teams-for-linux/config.json</code></h1> <pre class="giallo" style="color: #CDD6F4; background-color: #1E1E2E;"><code data-lang="json"><span class="giallo-l"><span style="color: #9399B2;">{</span></span> <span class="giallo-l"><span style="color: #9399B2;"> &quot;</span><span style="color: #89B4FA;">network</span><span style="color: #9399B2;">&quot;: {</span></span> <span class="giallo-l"><span style="color: #9399B2;"> &quot;</span><span style="color: #89B4FA;">WebRtcIPHandlingPolicy</span><span style="color: #9399B2;">&quot;:</span><span style="color: #A6E3A1;"> &quot;disable_non_proxied_udp&quot;</span></span> <span class="giallo-l"><span style="color: #9399B2;"> }</span></span> <span class="giallo-l"><span style="color: #9399B2;">}</span></span></code></pre> 2026-07-16T00:00:00+00:00 2026-07-16T00:00:00+00:00 alveel https://blog.alwyn.io/blog/kubernetes-secret-mounts/ <p>Useful one-liner to find all workloads that mount a specific secret:</p> <pre class="giallo" style="color: #CDD6F4; background-color: #1E1E2E;"><code data-lang="plain"><span class="giallo-l"><span>export secret_name=foo kubectl get deploy,statefulset,daemonset,job,cronjob -A -o json | jq -r --arg s $secret_name &#39;.items[] | select([.. | objects | .secretName?, .secretKeyRef?.name, .secretRef?.name, .secret?.name] | any(. == $s)) | &quot;\(.metadata.namespace) \(.kind)/\(.metadata.name)&quot;&#39;</span></span></code></pre> <p>This recursively searches for all <code>secretName</code>, <code>secretKeyRef</code>, <code>secretRef</code> and <code>secret</code> keys, taking into account all forms of referencing a secret (<code>(deploy|sts|ds,job).spec.(job)template</code> assumed):</p> <ul> <li><code>.spec.volumes.secret.secretName</code> - "classic" secret volume</li> <li><code>.spec.volumes.projected.sources.secret.name</code> - projected source</li> <li><code>.spec.containers.env.valueFrom.secretKeyRef.name</code> - for a specific environment variable</li> <li><code>.spec.containers.envFrom.secretRef.name</code> - for populating environment variables from a secret</li> </ul>