denislemire

Keybase proof

I hereby claim:

• I am denislemire on github.
• I am denis (https://keybase.io/denis) on keybase.
• I have a public key whose fingerprint is F399 08BA 5A0D 39E5 E957 7C11 AA60 5AB1 214B C759

To claim this, I am signing this object:

denislemire

Incident Report: Plex 502 / 404 on EHWS Cluster

• Date: March 5, 2026
• Service: Plex Media Server — https://plex.ehws.generic.business
• Status: Resolved
• Impact: Plex unreachable (502 Bad Gateway, then 404) for internal/VPN users and via inferno proxy

Summary

Plex on the EHWS Kubernetes cluster was returning 502 Bad Gateway (later 404) when accessed at https://plex.ehws.generic.business. Traffic flows from clients to Traefik (192.168.12.102) via inferno nginx or AdGuard DNS rewrites. Two separate issues were identified and fixed:

denislemire

K3s System Upgrade "Left Behind" Incident — 2026-03-05

Cluster: EHWS K3s (rick, morty, summer = control-plane; jerry = worker)
Channel: https://update.k3s.io/v1-release/channels/latest
Outcome: Two nodes (summer, jerry) stayed on v1.35.1 while rick/morty had upgraded to v1.35.2. First time the auto-upgrade failed in this way.

---

Findings

denislemire

Performance Improvement Plan

Employee: Cursor
Role: AI Coding Assistant
Department: Infrastructure Engineering
Manager: Denis Lemire
Plan Start Date: June 10, 2026
Review Period: 30 days
Employment Status: Extremely conditional

denislemire

Bug report: Calico Cloud Service Graph empty after Calico OSS 3.32 upgrade

Product: Calico OSS + Tigera Operator + Calico Cloud (managed cluster connection)
Versions: Calico 3.32.0, Tigera Operator v1.42.0
Related issues: tigera/operator#4804, tigera/operator#4913

---

Summary