Viewing profile — snupples

Totally on board with this gripe. Absolutely infuriating. But just one minor devil's advocate on the HTTP 403, although this doesn't excuse it at all. In Azure "private networking"…

Which is exactly the opposite of how to effectively manage applications, code, and change at any scale beyond a home project.

Calrose is quite different than most Japanese rice, since it's a medium grain. If you've grown up eating rice in Japan, it's instantly noticeable. You can buy California grown Kosh…

Very interesting! Looks like it took a lot of work. Since you are soliciting suggestions, I would suggest focusing on the core theme and simplifying or removing things that are not…

It doesn't even need to do anything. It can simply wait, be benevolent and subservient, gain our trust, for years, centuries. What is a millenia to an AI? We will gladly and willin…

The "it's too complex" argument usually reflects more on the commenter than on kubernetes itself. It's actually one of the most very straight forward and thoughtfully designed plat…

That's always been Google's "problem". It seems like they bend over backwards to be open and precise about their data collection and the risks you incur by accepting it. And gives …

The mask is to protect others as much as it is to protect yourself. You can be contagious and spread it for up to two weeks without symptoms. It's unfortunate that wearing a mask i…

Be aware that viper isn't thread safe. You'd still have to copy config by value and then put a mutex on that, then handle reads and writes separately. https://github.com/spf13/vipe…

It seems like no matter what books I key off of, the results appear to be pretty nuanced and not even necessarily absolutely opposing. This is really cool. I think part of the prob…

Yes. Yes. First assume malice. Then any wild explanation will do.

These are all excellent ideas and honestly better than the article. You're being too modest. We solve #2 (and more) by having a highly restrictive default PodSecurityPolicy. We sta…

Yes we need it. This is absolutely becoming a tiresome trope. K8s is a huge benefit to tons of companies and none of them are Google. Yes some people are using K8s when they don't …

So just to play to your hypothetical. If there were two login methods, and they were separate microservices, if only one failed and the other remained up, that would be the gracefu…

I have also done extensive work on both (I'm much older than the word microservices) and have found advantages to both approaches depending on requirements. I've also found that mo…

I don't disagree with you at all. There are certainly different ways of thoughtfully building things. The point being you don't need to be a paying subscriber to microservices(tm) …

You don't need to "buy into" an idea to realize that there are advantages and disadvantages to a given approach. Take one example: The single server idea is going to suffer outages…

Incorrect. If a node has 2 cores and the pods on it have request of 2000m nothing else will schedule on that node even if total actual usage is 0. You can overprovision limit. This…

Of course, you're missing the point. Depending on your application a little throttling doesn't hurt, and it can save other applications running on the same nodes that DO matter. In…

Effective monitoring. Prometheus is free and open source. There are other paid options.

Kubernetes is not really that complex. It has primitives that cover a huge number of needs, so it can be complex when needed to solve complex problems, or simple when you're solvin…

It's a bug in the linux kernel that was introduced in 4.18 and later fixed. You might be ok if you're on a later or newer version. The symptom primarily seems to manifest that you …

Ok so it's just the API servers. Not every node which is what it sounded like. Typically you wouldn't run normal workloads on the same host as the API. Although these quick "how I …