Hacker News Reader

sylron Encrypting Postgres Data at Rest in Kubernetes

No it does not. I don't run database in kubernetes because I don't trust myself to be able to recover from disasters.

How database-as-a-service vendor run their services is none of my business as long as they deliver the performances I need and working backup/recovery procedures.

sylron Encrypting Postgres Data at Rest in Kubernetes

I consider anything in kubernetes disposable. I want to be able to lift and shift anything in a new cluster without any migration in a matter of minutes.

Anything "stateful" like a database breaks this paradigm.

I have nothing against databases used as cache that can be "re-filled" upon re-creation, but I believe anything holding business critical data shall be held outside of a kubernetes cluster. Why, because being one command away deleting your StatefulSet, Helm Release ... etc scares the shit out of me.

You can of course minimize the risk with correct RBAC, ensure proper backup/restore migrations but that require lots of staff and efforts I can't spare.

So until I can be reassured that I have all the tooling that can recover rapidly any catastrophic failure/mishap, and that all this tooling is tested monthly, I enforce using managed databases services.

sylron Encrypting Postgres Data at Rest in Kubernetes

Am I the only one enforcing a strict no database in kubernetes policy ?

sylron Why can’t I go faster than the speed of light?

With gifs: https://imgur.com/gallery/BT2mG

sylron Crush: A command line shell that is also a powerful modern programming language

Nope, error: aborting due to 3 previous errors; 31 warnings emitted