denvrede

> Recently I had to set up a zero-downtime system for my app, I spent a week seriously considering a move to k3s, but the entire kubernetes ecosystem of churn frustrated me so much I simply wrote a custom script based on Caddy, regular container health checks and container cloning. Easier to understand, 20 lines of code and I don't have to sell my soul to the k8s devil just yet.

I'd say it depends where you're coming from. For me, setting up a Kubernetes cluster (no matter which flavor) with external-dns and cert-manager will most likely take 30m-1h and that is the basic stuff that you need for running an app with the topics you mentioned. To navigate through k8s just use k9s and you're golden.

I never get where all the "k8s is the devil" comments come from. There is nothing really complex about it. It's a well defined API with some controllers, that's it. As soon as I need to have more than one server running my workloads I would always default to k8s.

> There are examples like https://github.com/terraform-google-modules/terraform-exampl... of more advanced IaC architectures, but you can start as small or as complex as you want and evolve if done properly.

Is there something like this for AWS?

Fair enough. I "go" shopping because of all the interesting and distracting stuff. If I want a clean / focused shopping experience I order from home, even if it's a little bit more expensive.

I live almost exactly on the "Aldi Äquator" (Aldi equator - this is a real thing), near to where the Albrecht brothers lived. People here go purposefully to Aldi South instead of Aldi North even if they happen to live just north of the equator. The whole shopping experience is much worse.

At least for Germany this launched last year: https://www.mein-aldi.de/

But I've heard that it has not the whole collection of items available as the physical stores.

Working remote showed me how much I value direct interaction with people. For me, and I spoke to a lot of people for whom it's the same, the sweet spot is a hybrid model. Three days remote, two days on-site. Sometimes the other way round, depends on the tasks for the week.

If I need to do 100% remote, because I may have a light cold and don't want to spread it, I feel miserable after two weeks. That being said, I also will never work 100% on-site again, only if I can walk to work, which given my location, will not happen in the near future.

I now have more time that I can spend with daughter, so I guess I may improved my parenting skill?

IMO it's also totally fine to use that freed up time to just get a break from... anything. No need to be after self-improvement all the time.

We also just adopted Tailscale for our org and I can answer that one:

SSO for Auth: before we had to go through the key exchange process for every employee and then manually update the Gateways wg conf. Now it’s just: login here with your work account and you’re done.

Authorization config: I like the ACL abstractions on top of Wireguard. It’s a part is completely missing and building it yourself would be a nightmare. I also don’t want to manage iptables for every device.

All of the nice little feature that they provide:

Funnel Kubernetes operator Magic DNS

Yup. 18€ already was a hard sell. But for 24€ it’s a no no. Especially because I don’t care about YouTube Music at all.

Did they? Do you have an example at hand? We ran into "weird" issues a lot of times with AWS services just to discover afterwards that almost all of them were covered by their documentation.

It was totally our fault and these were also no "hidden" docs.

It's around ~15 SWEs

Support for the Grafana stack (especially Loki & Tempo) would be great.

Most of them do the first two: integration with Kubernetes and AWS. Unfortunately short lived DB creds is not in any of those listed.

The guys at Pulumi must be having a field day right now. It's exactly how you describe it for us. We're long overdue with an upgrade of our Terraform config from pre v1.0. We have to most likely re-write a big part of our HCL code, so why not try a competitor?

With Vault however that's another story, I've yet to find another secrets management system that has a tight integration with Kubernetes, AWS and supports providers for things like Postgresql to have ephemeral database credentials.

That looks pretty nice but I guess the HW required or the time you have to wait to iterate on these things (if you don't use external services) is quite high. Is there an estimation / idea when a "normal" person can play around with these things with a lot of operational or capital investment?

You answered it yourself, no? The people who could vet them were not involved. And the reason doesn’t have to be malicious, it’s just that not everybody can be involved with every interview.

I would say you can generally (from my experience >95% of the time) identify a bad hire in roughly a month, mostly in two weeks and then give yourself / them additional two to be very sure.

We just hired for a management position a couple of month ago and I could tell from the very first meeting that it was a bad hire. I made sure with my team that I’m not totally wrong and then communicated my doubts to the C-Level. It took some time because they wanted to give them a real chance but just before the probation ended there was an evaluation meeting and the feedback was, without exception, negative. Took two days and they were gone.

Of course there will be hires that can uphold their charade for six month but I would say that’s an exception.

How do you deploy your Apps? We exclusively use EKS and having one account per env and app seems like quite an overhead when I think about managing / updating EKS clusters for each one. It also comes with an overhead of base applications that need to run in each cluster by default (like cert-manager, externaldns etc).

Right now we’re using one account per env but also see downsides and thought of going the next step to do one account per env and tribe/team.

And that's what I don't get. Especially with the developers I know, you're mostly having a desktop setup with a power supply. Or is the stereotype of most of the developers sitting in a Starbucks all day, every day, true?

For me it's even worse. Being in a Google Meet with "level 1" blurring activated puts my battery life between 60-90 minutes. I don't know if it's Google Meets fault or bad battery management of the Frame.work or even the browser :/

AFAIK D4 does that in some capacity. There are zones that scale from 50-100 for example and if you are below 50 you'll have a bad time. It's correct that once you visit a former zone the monster scale with your level but as soon as you have the mount you don't have to put up with them. And because of the game design (a lot of dungeons, world bosses, legion events etc.) it's a welcome thing that they happen all over the zones and are not restricted to some high level area.

That's looking great! We're already experimenting with DevSpaces as our primary goal for the development process. What would you say are the main differences between devpod and DevSpace. Do they compliment each other? Should devpod at one time in the future displace DevSpace? Would love to get your view on that.

At this point, if you want to be part of the discussion, please do your own research on the topic and try to understand the situation. It's explained multiple times in every news that comes up regarding Reddit (also in this one).

Apple tried to do (kind of) the same stupid stuff a couple of years ago with a german company. They lost [0].

[0] https://www.sueddeutsche.de/wirtschaft/markenstreit-cafe-apf...

But why should I do that? I don't get that argument. I've never went back to a low level zone in any game just for the purpose of "obliterating everything". If there is a quest I missed, sure. But what's the point doing that?

These are the ones that announced they're going dark.

If true I don't know how that happened but two of my friends + me got their account suspended and were asked to provide identifying information to get it reinstated - at the same time.

I'm also only one datapoint but I won't use Reddit from 30th on. I guess all these big cooperation and some users are overestimating the power of their platform. I (and I know some other people from my inner circle that are not "in tech") left these platforms before and never looked back.

It was the same with Facebook: You want me to use my real name? I'm gone. Never used Facebook again. Specifically in Germany (where I would argue the population values privacy more than in other nations) that was a deal breaker for a lot of them when they started enforcing that policy.

(This example is not about a platform but more of an example of quitting a product because of "bad" behavior) Mobile games getting more and more P2W and have a half-life of ~1 year? Yeah, count me out. Especially with that example I know a lot more people that said "fuck that" and won't touch mobile games with a ten foot pole anymore.

And honestly it will be the same with Reddit. It's not like it's essential. I'll be good without it and I would guess many more people too. The two examples I gave made my life better (less screen time) and the Reddit move will do the same.

As for how it'll play out for the majority of people: I guess we'll see. But looking at Reddits latest track record of bad decisions I would argue it won't be the last one and there is a lot of potential to create a new Digg moment.

The funny thing is: even if we had the infrastructure, right now it costs ~0.50€/kwh to charge on public chargers. Apposed to ~0.30€/kwh which I pay at home. Unfortunately I don't own a home and can't have my own charger. This + that I don't want to sit at a charger for 45m once a week is, for me personally, the strongest argument against buying an electric car right now. And I don't see that changing or plans to change that.

APIs are not ubiquitous. Maybe they become because of this.