Skip to main content

Posts

Showing posts with the label Azure & Cloud Infrastructure

Azure Files at scale: 100 TiB shares, Premium IOPS formulas, burst credits, per-file limits, and metadata IOPS ceilings most capacity planning misses entirely.

Azure Files Scale Limits Performance How Azure Files Handles Large-Scale Enterprise Data "How big can a share get" and "how fast can a share go" are two genuinely different questions with two genuinely different sets of limits — and a third question, "how fast can one file go," has its own separate ceiling entirely, one that stays fixed no matter how large or well-provisioned the share around it is. The two scale dimensions this guide separates precisely Every pay-as-you-go Azure file share can grow to 100 TiB today — this used to require explicitly opting into a "large file share" feature; it's now the default for current storage accounts, though a real trade-off still exists for legacy accounts still on the older setting. A single file inside a share is capped at 1 TiB, 1,000 IOPS, and 60 MiB/s, regardless of how large or fast the share itself is provisioned. Share-level scale and file-level scale are genuinely separate ceilings — hitting...

Advanced AKS troubleshooting: Workload Identity federation errors, Azure CNI IP exhaustion, stuck upgrades, autoscaler failures, and two urgent 2025/2026 support deadlines.

AKS Advanced Troubleshooting Guide: Workload Identity, CNI IP Exhaustion, and Stuck Upgrades Advanced Troubleshooting AKS Workload Identity CNI Networking AKS Advanced Troubleshooting Guide: Workload Identity, CNI IP Exhaustion, and Stuck Upgrades CrashLoopBackOff and Pending pods are the failure modes every AKS tutorial covers. The problems that actually stall a mature, production cluster live one layer deeper — a federated identity token that fails validation on a single mismatched character, a subnet that runs out of IP addresses specifically during the upgrade meant to keep the cluster healthy, and a support deadline for pod identity that has already passed. Two error signatures this guide resolves # Workload Identity federation failure (pod logs / Entra ID sign-in logs): AADSTS70021: No matching federated identity record found for presented assertion. Please check your federated identity cred...