jbnorth

Honestly I felt the same way for a while but the more I'm exposed to both Fortune 500 companies and ones who have a handful of employees I see Kubernetes as just a good starting point rather than adopting it later.

It removes the overhead of a lot of what sysadmins and devs of yesteryear did by hand or had to have a career's worth of experience to do quickly.

That's not to say that people don't need to know what they're getting into when they adopt kubernetes but especially when you're using a managed offering and not on the bleeding edge of what it supports it's pretty easy in terms of overhead and maintenance.

You’re better off wiping and reinstalling the OS than trying to clean the system.

The hexagon is the best-agon

While I can’t speak for the others, AWS doesn’t replace all of etcd. Only the raft consensus layer which is replaced with Journal which is an internal AWS service.

What is deceleration but acceleration in the opposite direction? /s

Honestly that’s been half the fun of it to me. Trying to out prompt the other players.

All the pressure in the world at work could not make me consider any level of prompt engineering or use of Gen AI.

This got me hooked in 5 minutes. I updated my “word” so many times trying to consider edge cases and other tricks people try.

Looks like it’s run out of credits to use for prompts now but I would gladly throw money at getting this working again.

The latest deep dive on S3 at reinvent sheds some light on how it’s done.

https://youtu.be/NXehLy7IiPM

This is already a thing. AWS instance store volumes are directly attached to the host. I’m pretty sure GCP and Azure also have an equivalent local storage option.

No, that’s AWS.

Your problem here is waiting until 1.28 to be released before starting your upgrades from 1.24. A version or two is one thing but 4 versions and you’re just asking to be constantly struggling to keep your head above water.

The idea with Bottlerocket is that the host itself does not have a direct shell nor a way to access it via SSH or any other method. Instead this responsibility is delegated to the admin container which is where you would actually connect to via SSM/SSH. From here if you needed a root shell you would use the `sheltie` utility to do so.

Well, more or less. The pod IPs are assigned to the host ENIs and not to pods directly. The VPC CNI manages the virtual Ethernet devices in the host and pod network namespaces and sets up routes on the host such that inbound traffic using a pod IP will get routed to the correct virtual Ethernet device for the corresponding pod.

Why even use kubernetes then? You’d be better off just deploying the applications with docker compose on the host.

Well neither of those fall under technology so they have no place on the list.

Yes, that’s the current state of affairs. My bank receives the money in my account from my employer’s bank but it takes a couple days to clear. Right now many banks will make this money available to you right away rather than waiting for it to clear.

That’s spot on. I work at a large cloud provider and one of our larger eCommerce customers had an outage in a kubernetes cluster which handled the front end traffic routed through a large CDN provider. Well sure enough “just turn it back on” wasn’t an option since the surge of traffic was too rapid for the services and the cluster to scale out. They ended up having to turn the traffic back on incrementally to let things scale up to the point where they could handle the load.

“I saw people moving from ‘the following tools have these benefits and drawbacks’ to ‘it is trendy so lets do it’.”

I’m with you on this. I’d love to be able to replace the thumb cluster on one side with a trackball.

I recently began working for AWS and I love my job. I get a lot of satisfaction in soloing customer issues even when they’re not really AWS related.

Isn’t the downside to this then that although you’re using the native browser you’re losing the whole point of Electron which is to have a consistent environment regardless of where it’s run?

Disclaimer: I work for AWS

I think Outpost is a great hybrid-ish solution for those companies with workloads in AWS that want to supplement that with on-premise workloads using the same APIs and tools they are already used to.

The use cases I see for Oxide are, like other have said, are for hyperscalers or hosting providers who want to have their own on-premise infrastructure that isn’t tied to another entity like AWS. Whether that’s because you have the in-house talent to manage it or for compliance reasons it’s required it does have a niche.

Isn’t the whole idea to just use DNS?

Unless you’re a woman. Or minority. Or go to school. Or go shopping. Or go to the movies.

I’ve seen some companies using development clusters and assigning namespaces per user. With MSSQL being able to run in containers they’re able to spin it up quickly and point it to a sanitized version of their production data. If they update MSSQL it’s just a matter of killing and spinning up a new container. Or you want to test an update just spin up the new version, point it to the same data, and run your tests.

I could see this eventually being built into 1Password's Secrets Automation product which can sync to each user's 1Password client. It allows the use of Vault for a backend so now that SSH Keys in 1Password are a thing it wouldn't be out of the realm of possibility to have Vault generate short-lived per-user SSH certificates that are automatically rotated into the user's 1Password vault.

Just because I happened to be dealing with this today (on Windows with WSL2 but same rules apply) I'll make a comment.

The issue I ran into was due to Docker for Desktop binding the local filesystem into the devcontainer running in a WSL2 VM.

The solution to this is to instead use a named volume in your docker-compose.yml and in your Dockerfile copy the files from your working directory into your devcontainer.

This provided an incredible improvement in the performance of using devcontainers in vscode. The one big drawback to this approach that I've run into is needing to make sure I commit and push my code to a git repo when I'm done working as there's not a copy stored on my local machine.

I may be wrong, but I believe South Korea has a centralized identity system that game companies use so this kind of thing can be tracked and enforced. I wouldn't be against a similar system being used in the USA.

I see where they're coming from and in a lot of ways agree with them. However, I can also see some benefits to this. For the average user, if they can have a government-issued ID tied to their Apple ID that should, in theory, prevent them from ever losing access to that account. The number of times I've had to work with new parents or elderly who just want the account back for pictures of children, grandchildren, etc but ultimately had no recourse is more than I'd like to think about. If, however, I could guide them to the nearest Apple store and say "show them your drivers license, they'll match it to your Apple ID and unlock it for you" that would make most people happy beyond belief. Is that ideal for the privacy-centric among us? No, absolutely not. But for the majority of people who just want to be able to get back into an account with all of their stuff in it it's a potentially great solution.

That's not an option for most games. That means I now either need to be online-only with a good enough internet connection and latency to stream this game (a la Stadia but worse since it's not just video) or I need to download it into an offline cache which now brings us back to the same spot.