Velero Backup Bug: Kubernetes Tool Silently Omitted PVC Data for Weeks

·1 views

A homelab operator discovered on June 19, 2026, that Velero had been reporting successful daily backups while never actually capturing any PersistentVolumeClaim data. The tool defaulted to snapshot-based backups, which require a CSI snapshot provider — something NFS and local-path storage classes do not support. Without a snapshot provider, Velero silently backed up only Kubernetes manifests, omitting all application data including Postgres databases, Vaultwarden passwords, and Nextcloud files. The issue was fixed by adding a single line — defaultVolumesToFsBackup: true — to the backup schedule, switching Velero to filesystem-based backup via Kopia, after which backup size jumped from roughly 2 MB to 4 GB. The operator noted that running 'velero backup describe --details' and checking the 'Pod Volume Backups' field is the only reliable way to confirm actual PVC data was captured.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Developer Creates Pure CSS Art of Jharkhand Comfort Meal Daal Bhaath Chokha

A developer from Jharkhand submitted a CSS art piece depicting daal bhaath chokha — a traditional meal of steamed rice, turmeric lentils, and mashed potato — for DEV Community's Frontend Challenge Comfort Food Edition. The artwork is built entirely with vanilla HTML and CSS, using no images or JavaScript. Notable details include individually rendered rice grains built from layered gradient tiles, hand-placed cumin seeds, and subtle steam and mustard-oil shimmer animations that pause for users who prefer reduced motion. The developer reworked the composition from an initial concept to reflect authentic home-style plating, with rice and daal sharing a single base layer in a steel thali. The project is open-sourced under the MIT license and is available as a live demo on CodePen.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds AWS IAM tool that diagnoses access errors with live account checks

A developer built an open-source tool called Rosetta to diagnose AWS AccessDenied errors more precisely than AI chatbots can. The problem it addresses is that the same error message can stem from six different root causes, making AI-generated answers little more than educated guesses. In text-only mode, Rosetta lists all plausible causes at equal confidence, honestly reflecting the ambiguity. When supplied with a read-only AWS role ARN, it queries the account directly using IAM simulation APIs and narrows the diagnosis to a single cited cause with high confidence. The tool is designed to replace manual console investigation by replacing guesswork with authoritative, evidence-backed answers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Dev team builds offline study app generator to replace passive learning materials

A development team has created a tool that generates interactive study apps rather than static documents like PDFs or notes. Each generated app includes topic guides, quizzes, practice exams, instant feedback, and mistake tracking, with the learning logic built directly into the output. Progress data such as streaks, quiz history, and weak areas is stored locally using browser-side SQLite, allowing the app to function fully offline without requiring user accounts or a backend server. The offline-first approach avoids data sync complications but demands stricter design discipline, including structured storage over simple JSON. The team's core argument is that treating study material as software rather than a document makes learning more adaptive and portable.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds open-source guardrails to stop Claude Code from exposing secrets

A developer has released an open-source tool called claude-code-guardrails after repeatedly experiencing Claude Code accidentally printing sensitive credentials like API keys and database passwords during coding sessions. The tool adds two user-level hooks to Claude Code: a deny-secrets hook that intercepts Bash commands before execution and blocks attempts to read credential files or environment variables, and a session-heartbeat hook that monitors for context degradation in long sessions. The deny-secrets hook works by sitting between Claude Code and the Bash tool, rejecting commands that appear to target secret-containing files before they can run. The session-heartbeat injects a timestamp and turn counter into each prompt, acting as an early warning signal if Claude begins losing earlier instructions due to context compaction. The tool, licensed under MIT, is available on GitHub and is intended as a practical extra layer of protection rather than a replacement for dedicated secret managers or proper sandboxing.

0 comments Read more at DEV Community