jrudolph

meshcloud | Frankfurt, Germany | Onsite & Remote | https://meshcloud.io

meshcloud helps some of the largest enterprises in the world manage thousands of AWS Accounts, Azure Subscriptions and GCP Projects using our multi-cloud management platform. We automate IAM, administrative processes & security policies so that DevOps Teams can enjoy private & public clouds without obstructions.

Our open positions and tech stacks:

* Fullstack Engineers: any of Kotlin, Spring, Angular, TypeScript, RavenDB

* Frontend Engineers: Angular, TypeScript, SCSS, ngrx

* Cloud Engineers: AWS, GCP, Azure, Kubernetes, dhall, ansible, terraform, SRE experience welcome

* Solution Engineers: help implement meshcloud multi-cloud management at our enterprise customers, consulting experience welcome

Careers page: https://www.meshcloud.io/jobs/

My team is 11 full-time engineers right now and growing fast, so our positions come with great growth opportunities. Remote candidates should have previous remote work experience. I'm hiring for my team, so get in touch directly at jrudolph@meshcloud.io.

The article links to https://portal.msrc.microsoft.com/en-US/security-guidance/ad... and https://portal.msrc.microsoft.com/en-US/security-guidance/ad...

These CVEs only mention Azure Stack, while the Article suggests Microsoft acknowledged the flaws had also affected Azure public cloud:

> Check Point did not attack the cloud itself, but used the offline Azure Stack, a near perfect replica of the cloud environment. With the vulnerabilities detected, they then confirmed with Microsoft that the same ones would apply to the cloud itself. Yes, said Microsoft, patching the holes and paying Check Point a bounty.

My team is using Loki + Grafana and we're pretty happy with it. It's pretty basic but it does what you expect it to do just fine.

We ditched Elastic as it was a super massive PITA to operate (& a resource hog at that). I'll admit I'm not an expert at ELK at all, but tbh I was absolutely surprised just how bad Elastic + Kibana was for our basic log uses when they tout it as one of their mainstays. Or we were just exceptionally stupid, who knows. In any case, the experience we had with it didn't motivate us to become ELK experts at all. Our pet peeves:

- The Kibana UI needlessly wastes tons screen for whitespace

- makes it hard to dig down into logs

- never seems to find exact string matches when we wanted it to and instead returns "helpful" fuzzy matches

- Kibana has no qualms sending requests to Elastic that will happily kill your node instead of applying sensible paging / query timeouts. I mean that's why I'm using Kibana and not writing my own elastic frontend...

Kudos for a refreshing take on software project management. This hits a nerve with me - taming JIRA is a royal PITA (couldn't help the 4 letter acronyms, sorry). Especially if you don't have time to combing your backlog all day.

Nonetheless, we have found that JIRA can scale nicely from simple to more complex workflows if you take the time to set it up/customize the workflows. But a "Feature Oriented" view that allows me to easily track progress on concurrently progressing streams of work (larger than a single epic) is sorely missing. We tried to come by with Portfolio and Structure for JIRA (both are plugins) but they feel somewhat awkward to use as they require tons of clicks for simple things.

Zepel looks like a great idea. However, JIRA is already so embedded in our workflow (thanks to bitbucket integration, ticket bots/plugins etc.)... I'd love to have something like "Github Projects" which sits on top of my normal GH issues but allows me to roll them up. Concourse for example is a nice example of using this effectively: https://github.com/concourse/concourse/projects

Anyone have a recommendation for a tool/plugin that can do this?

meshcloud | Frankfurt, Germany | Onsite & Remote | https://meshcloud.io

Meshcloud helps some of the largest enterprises in the world manage thousands of AWS Accounts, Azure Subscriptions and GCP Projects using our multi-cloud management platform. We automate IAM, administrative processes & security policies so that DevOps Teams can enjoy private & public clouds without obstructions.

Our open positions and tech stacks:

* Junior/Senior Fullstack Engineer: any of Kotlin, Spring, Angular, TypeScript, RavenDB, dhall, ansible, terraform

* Cloud Architect: AWS, GCP, Azure, Kubernetes, OpenShift, OpenStack, Cloud Foundry

Company page on Stackoverflow Careers: https://stackoverflow.com/jobs/companies/meshcloud-gmbh

We're a bootstrapped team of 6 full-time engineers and growing fast, so our positions come with great growth opportunities. Remote candidates should have previous remote work experience. I'm hiring for my team, so get in touch directly at jrudolph@meshcloud.io.

CORS is a minefield. It doesn't help that the RFC is incredibly dense. I may be totally missing something, but I've repeatedly wondered though if CORS still has its place in times of SPAs that exclusively use xhr + javascript + some sort of auth token talking to a REST API?

Consider this argument: CORS basically ensures that browser and servers cooperate to protect end users from a "smart" user agent that happily throws around cookies and/or auth tokens. Remove cookies and basic auth headers, what's the point of CORS?

Happy to hear thoughts from folks more knowledgeable in web security than me. If not, let's please get together to propose an RFC for the CORS-GTFO header (a server header indicating that a browser does not have to do wasteful preflights etc.)

thanks! turns out it wasn't working for https, should be fixed now.

Dhall is an awesome tool to have in your DevOps tool belt - we're heavy dhall users at meshcloud [0] and couldn't be happier about it. We picked it after evaluating a long list of contenders (yaml madness with anchors, jsonnet, ksonnet, j2/jinja, a hacked ejs compiler [1] and some more I forgot). It's so good we're looking into how we can give back/donate to the project.

Dhall elegantly solves a major challenge: configuration management at scale. We build a multi-cloud management platform, which serves DevOps teams, IT Governance, Controlling and IT Management in large enterprises. That means we're an integration solution for a lot of things, so we need to be highly configurable. Because we also manage private clouds (a la OpenStack, Cloud Foundry, OpenShift etc.), we often run on-premises and operate our software as a managed service. Using dhall allows us to _compile and type check_ all our configuration for all our customers before rolling things out. We use dhall to compile everything from terraform/ansible, kubernetes templates, spring config, to concourse ci pipelines and customer-specific reference data to load into our product. Since adopting dhall earlier this year, we measurably reduced our deployment defect rate and re-gained the ability to safely refactor configuration.

It takes a little time to get used to, but we appreciate that it's highly opinionated around formatting and "how to do things" - somewhat in the same way as golang is. It has certainly helped that we had a member with haskell experience on the team, as dhall is built in haskell and the syntax feels familiar.

Plug: if you're looking for a job working with dhall, reach out :-)

- 0: https://meshcloud.io - 1: https://github.com/Meshcloud/ejs-compiler

This is a bit embarrassing, but I c/p the wrong link for our senior fullstack position, proper link goes to: https://stackoverflow.com/jobs/156677/senior-fullstack-engin...

meshcloud | Frankfurt, Germany | Onsite & Remote | https://meshcloud.io

Meshcloud helps some of the largest enterprises in the world manage thousands of AWS Accounts, Azure Subscriptions and GCP Projects using our multi-cloud management platform. We automate IAM, administrative processes & security policies so that DevOps Teams can enjoy private & public clouds without obstructions.

Our open positions:

* Senior Fullstack Engineer: https://talent.stackoverflow.com/employer/jobs/221483/listin...

* Senior Cloud Architect: Deep hands-on experience setting up AWS, GCP, Azure, Kubernetes for large teams? -> apply

Tech Stack: Kotlin, Spring, Angular, TypeSscript, RavenDB, dhall, ansible, terraform, Kubernets, AWS, GCP, Azure

We're a bootstrapped team of 6 full-time engineers and growing fast, so our positions come with great growth opportunities. Remote candidates should have previous remote work experience.

Get in touch at jobs@meshcloud.io.

So you're running VIO / vmWare integrated OpenStack?

> EKS (like all AWS services) is heavily integrated with AWS IAM. As most people know, IAM is the true source of AWS lock-in

This one thousand times over. Lots of companies have multi-cloud on their strategy but when it's time to actually implement it they find that the cost to adopt hyperscaler #2 is just the same or even more as they spent on integrating hyperscaler #1. While Kubernetes makes workloads portable between vendors, organizational processes for "boring" chores like IAM, tenant provisioning and billing/chargeback aren't. Integration of these processes can get really expensive if you need to re-implement basic "enterprise" process like e.g. four-eyes-principle/seperation of duty on role assignments for each of your cloud vendors and technologies. The IAM systems differ ever so slightly across vendors and that brings a ton of complexity.

The larger the company, the more likely it is that the real bottleneck to cloud adoption is on these processes, not the technology. I know it's hard to imagine if you're coming from a startup background where you can just take the company credit card and get an account on AWS, GCP or Azure in a second. But for developers in big co., acquiring a public cloud account may take months and forms over forms of paperwork, getting roles put into the central corporate directory etc. The investment into these (often atrocious) processes for hyperscaler #1 create a big lock-in.

Disclaimer: I'm a founder at Meshcloud, we build a multi-cloud platform that helps organizations consistently implement organizational processes like IAM, SSO, landing zone configurations etc. across cloud vendors and platforms.

The point made by OP is not so much about the technology but about drawing parallels between the history of and hopes held for both projects. Both OpenStack and K8s were/are hyped as solutions to reduce vendor lock-in, although they do so in different ways.

The parallels between the two are startling, i.e. at the beginning of OpenStack vendors tried to differentiate themselves by solving distribution/installation and plug-ins/integrations. How many K8s distros/installers are out there right now? Countless... [0] provides an interesting angle to the discussion that vendors trying their best to differentiate themselves is what ultimately led to the demise of OpenStack. I'm so far optimistic the same won't happen to K8s. Google is investing into K8s as a vehicle to gravitate workloads to GCP, but in order to do so it has to maintain some level of compatibility to other cloud vendors.

0: https://aeva.online/2019/03/what-happened-to-openstack/

I think AGPL is a fairly good choice for anything that's potentially used as a hosted service. All the big enterprises I've worked with so far have a policy that forbids AGPL'd software and rather purchase commercial licenses. SMEs & Startups may make different choices but depending on your product they may not represent the relevant majority of the market anyway.

Ayende from RavenDB (which is a great no-nonsense document DB) has written an interesting blog series [0] on how they approach OSS while still making money from it and keeping their interests aligned with users and customers. TL;DR they license the full server and all modules as AGPL, offer free community (commercial) license that don't skimp on core features (clustering, authn/z), treat support as a cost-center.

Appears to work well for them and I personally find their mode of operation sympathetic.

[0] https://ayende.com/blog/posts/series/186113-A/making-money-f...

> I think there is a strong use case for a Arch-like Linux distro that has an open architecture for building the entire distro from source into container images automatically.

That's what Fedora Silverblue is all about https://silverblue.fedoraproject.org/

I'm not sure what will happen after IBM's acquisition of RedHat but as far as I remember the last announcement was that Silverblue will get the best bits of CoreOS (in turn acquired by RedHat) and Atomic Workstation.

Yes, and it's used all over the place in EU corporate law. In most cases I've seen it applied (as a EU-based founder) to money laundering, taxation etc.

I'd be curious to see how this construction pans out. I bet it's been a good deal for the lawyers involved. They surely got paid well for figuring this out initially and will get paid again for testing it in the courts. So much for growing future revenue potential.

This looks really exciting and congratulations on launching! We will definitely be taking a look at this as it looks like a great fit to recommend to our customers.

My startup Meshcloud [0] is helping companies manage the "organizational" side of multi-cloud like integrating account provisioning, SSO, policies, chargeback, quotas etc. using a declarative orchestration approach we call "org as code" (basically infrastructure as code but for org stuff). Our product is e.g. used by a large german car manufacturer to orchestrate hundreds of tenants across AWS, Azure and a mix of private Clouds based on OpenStack, Kubernetes and Cloud Foundry. Workload orchestration is obviously the next challenge down the road for these customers, so we're currently looking at providing good integration to tools like Open Service Broker API, Terraform, Bosh, Spinnaker etc. Each of those solves a slightly different set of problems but at the scale our customers are operating at they all have their place.

0. https://www.meshcloud.io/en/meshcloud/

Very interesting read, can't emphasise enough how important _practicing_ for security is as opposed to mere education. A couple of folks I went to Uni with launched a startup that helps companies conduct automated phishing awareness training and continuous employee sensibilisation by sending "white-hat" phishing emails: IT-Seal https://www.it-seal.de/en.html

I can highly recommend giving it a try. The first few levels of difficulty are easy to spot, but it's been eye opening for me how sophisticated phishing emails can get.

This. I've seen container builds for Java applications broken in the described ways fail in production over and over again. Just because Docker makes building an image very easy doesn't mean that you will end up with a production ready image using three lines of code in a Dockerfile. Most of the time people don't even bother to use a non-root user to execute the jvm in their container...

That's why I feel platforms like Cloud Foundry are a much better fit for teams that don't have tons of container experience but want to get the benefits of a containerized runtime. The CF java buildpack[1] for example automatically handles OOM and heap settings calculation while building your application container.

disclaimer: co-founder at meshcloud, we offer a public cloud service for Cloud Foundry and K8s hosted in german datacenters.

    [1] https://github.com/cloudfoundry/java-buildpack

both: JVM Target -> Java bytecode, Browser Target -> Javascript

Yes, it's called Kotlin Native: https://github.com/JetBrains/kotlin-native

Kotlin right now is a serious competitor for a full stack, any device language. An alternative may be F# which has Fable for Browser, Xamarin (mobile) and .net core for server. But Kotlin looks more integrated to me.

Coming from a C#/F# background, Kotlin is really a joy to use.

Heroku is awesome for this use case, but there are also great alternatives based on Cloud Foundry. Cloud Foundry is an open source PaaS with support for Heroku buildpacks + docker containers. At a median of ~5€/GB RAM per month they will also be a bit cheaper than Heroku.

Some providers that offer Cloud Foundry including a free tier for small Apps:

- Meshcloud (hosted in Germany, 2 Locations) https://panel.meshcloud.io/#/register (Disclaimer: I'm a founder there)

- Pivotal Web Services (hosted on AWS US): https://run.pivotal.io/

- IBM Bluemix https://www.ibm.com/cloud-computing/bluemix/ (various locations, a bit more expensive than the other two though)

Meshcloud| Frankfurt am Main, Germany | Full-time | ONSITE | www.meshcloud.io

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in an exciting start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth. If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles:

- Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap 4, SCSS)

- Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs)

- Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

Meshcloud| Frankfurt am Main, Germany | Full-time | ONSITE, Senior positions available Remote | www.meshcloud.io

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in a start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth. If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles:

- Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap 4, SCSS)

- Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs)

- Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

Meshcloud| Frankfurt am Main, Germany | Full-time | ONSITE, Senior positions available Remote | www.meshcloud.io

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in an exciting start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth. If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles:

- Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap 4, SCSS)

- Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs)

- Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

Meshcloud| Frankfurt am Main, Germany | Full-time | ONSITE, Senior positions available Remote | www.meshcloud.io

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in an exciting start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth. If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles:

- Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap 4, SCSS)

- Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs)

- Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

Meshcloud| Frankfurt am Main, Germany | Full-time | ONSITE | www.meshcloud.io

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in an exciting start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth.

If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles:

- Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap 4, SCSS)

- Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs)

- Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

Meshcloud| Frankfurt am Main, Germany | Full-time | Onsite, Remote Possible

Meshcloud provides public IaaS, CaaS and PaaS cloud services based on open-source technology. This enables our customers to avoid vendor lock-in, execute an effective hybrid cloud strategy and save cost. In cooperation with data-centers, we offer multiple cloud locations in Europe and Germany. Our federation technology enables customers to seamlessly switch between different providers and integrates different cloud platforms (currently OpenStack and Cloud Foundry).

At Meshcloud you will be working in an exciting start-up atmosphere with a passionate and talented team. We use a wide array of technologies and offer lots of room for creativity and professional growth.

If you're excited about freeing developers from proprietary cloud technologies, shoot me a mail because we are hiring for multiple roles: * Junior and Senior Front-End Engineers (TypeScript, Angular 2, Bootstrap) * Junior and Senior Backend-End Engineers (Java, Spring Boot, Mongo + MariaDB, HATEOAS APIs) * Integration Expert (Go, Python, Java, ... we're looking for a true Polyglot Engineer)

You can view our open positions at https://www.meshcloud.io/en/careers/, or feel free to email me directly at jrudolph at meshcloud dot io. Please include Stackoverflow and Github Profile if available.

> the reality is that no one -- absolutely no one -- has built a business on AGPL software and it seems vanishingly unlikely that anyone ever will.

I strongly disagree with that. Take RavenDB, which is very much comparable to RethinkDB in terms of a business is dual licensed as AGPL and has a commercial license available [1]. This forces any business doing non-OSI approved OSS work to purchase a commercial license. I don't know too much about RethinkDB but I think they must have used a very similar licensing strategy?

From an outsiders' perspective, RavenDB appears to be going strong and doing well commercially. They are hiring and expanding and have invested a lot into v.4.0, which I'm really excited about.

Interestingly, on the spectrum between MongoDB and RethinkDB in terms of "Wrong metrics of goodness" (Correctness, Simplicity of the Interface) they appear to me much closer to RethinkDB than MongoDB. In terms of stability, they may have been somewhat in the middle (e.g. not as bad as MongoDB, but probably not as good as RethinkDB). And they have moved very fast to add features and fix bugs in the product. It's a really nice DB to work with as a dev, I suppose the #1 reason they are not as successful as Mongo is that they're coming from the .NET niche...

[1] https://ayende.com/blog/4508/comments-on-ravendb-licensing

I don't get why it would be that way? It's built to be deployed in a DMZ on a private network and that's how 99% of users (typically professionals) use it.