René Heijnen

Troubleshooting Log

Short, punchy solutions to real-world cloud engineering problems. Optimized for 3 AM debugging.

Ansible: Failed to connect to the host via ssh

Ansible: Failed to connect to the host via ssh

Problem

Azure DevOps pipeline fails with 'Failed to connect to the host via ssh' when running baseline against Ansible host.

Solution

Comment out the FQDN override for ansible_host in your inventory/compose file; it breaks DNS resolution.

Azure App Service: 403 Forbidden on Internal VNET

Azure App Service: 403 Forbidden on Internal VNET

Problem

App Service returns 403 Forbidden even when accessed via Private Endpoint from the same VNET.

Solution

Ensure 'Access Restrictions' in the Networking blade allows traffic from the specific VNET subnet or disable 'Allow Public Access'.

Kubernetes: ImagePullBackOff (Secret Missing)

Kubernetes: ImagePullBackOff (Secret Missing)

Problem

Pod stuck in ImagePullBackOff when pulling from a private ACR/Registry.

Solution

Create and link an imagePullSecret to the Deployment or ServiceAccount.

Terraform: State Lock (Manual Release)

Terraform: State Lock (Manual Release)

Problem

Terraform plan/apply fails because the state is locked by another process (or a crashed CI run).

Solution

Verify no active runs exist, then use `terraform force-unlock <LOCK_ID>`.

Template: Troubleshooting Entry

Problem

Describe the exact error message or weird behavior here.

Solution

Provide the punchy, actionable fix or command here.

Azure Private DNS resolution failure in Hub-Spoke

Problem

Spoke VNets unable to resolve records in a Private DNS Zone linked only to the Hub VNet.

Solution

Ensure the Private DNS Zone is linked to all Spoke VNets, or implement a centralized DNS resolver in the Hub.