Live data from Hacker News

GitLab is now running on GCP

twitter.com

101–110 of 163 posts

Re: GitLab is now running on GCP

#101
post #100
post #99

I missed watching their livestream as it was 3am, and my YouTube search-fu isn't good enough to find the archive link. Is there an archive link, or is it just gone because I didn't watch right then?

We didn't do a livestream since we were concerned about showing credentials in the terminal in case things didn't go according to plan. We did record it and plan to publish it since it went according to plan.

Great, thank you for clarifying that. I haven't yet had to carry out such a massively involved migration plan, and so I'm always interested in learning from the process of others.

And congratulations to the whole team on the move. I know it must be a relief now that it's behind you.

Re: GitLab is now running on GCP

#102
post #100
post #99

I missed watching their livestream as it was 3am, and my YouTube search-fu isn't good enough to find the archive link. Is there an archive link, or is it just gone because I didn't watch right then?

We didn't do a livestream since we were concerned about showing credentials in the terminal in case things didn't go according to plan. We did record it and plan to publish it since it went according to plan.

GitLab VPE here. This instinct proved correct. We'll look into editing the video this week after the team gets a breather.

Re: GitLab is now running on GCP

#103
post #9
post #4

Earlier quoted context omitted.

Real backstory: https://news.microsoft.com/2018/06/04/microsoft-to-acquire-g...

The GCP move was decided upon months before Microsoft acquired GitHub[1]. [1]: https://venturebeat.com/2018/04/06/why-and-how-gitlab-abando...

No doubt, but the Microsoft acquisition must have pushed the priority of the move through the roof.

Re: GitLab is now running on GCP

#104
post #100

Earlier quoted context omitted.

We didn't do a livestream since we were concerned about showing credentials in the terminal in case things didn't go according to plan. We did record it and plan to publish it since it went according to plan.

Great, thank you for clarifying that. I haven't yet had to carry out such a massively involved migration plan, and so I'm always interested in learning from the process of others. And congratulations to the whole team on the move. I know it must be a relief now that it's behind you.

Thank you.

It's not quite over though. Monday traffic will be far higher than the weekend. People will need to login, which will put unusual stress on those endpoints.

Also, there is a small chance someone experiences malformed or missing data. There was only a single repo that we know experienced this, which we're already working on. So I'm only talking about unknown unknowns. So we will be on high alert to respond to any such requests and retrieve data from the archives in the previous infrastructure.

Re: GitLab is now running on GCP

#105
post #67
post #15

Earlier quoted context omitted.

Google is very pro-government, pro-censorship, pro-regulations, pro-military. It's better to just accept that it will never be a decent infrastructure provider because of that.

They voluntarily withdrew from China to avoid censorship even though they are now backtracking that decision. Amazon was the one providing facial recognition to law enforcement. I don't see any of them as clear "good guys" or "bad guys".

More context on the "backtracking" remark: https://theintercept.com/2018/08/08/google-censorship-china-...

They bought a Chinese directory with a "search engine" that just redirects to Baidu, but kept all the juicy search terms to seed the future product.

Re: GitLab is now running on GCP

#106
post #51
post #8

Earlier quoted context omitted.

You can have it both ways by leveraging the free / hobby tier of Heroku with bringing your own data store. Nothing binds you to their resource providers. Just add an environment variable for your own database or Redis provider.

Then you lose some security though, because I think Heroku uses large IPs ranges [1]. There seems to be no way to allow database access from a private IP address, other than using expensive proxying addons. That means you probably have to open up your database to 0.0.0.0/0, which is not good at all. [1] https://stackoverflow.com/questions/15512360/get-a-finite-li...

Redis has authentication.

Re: GitLab is now running on GCP

#107

Has anybody tried GKE and EKS from Amazon? What's your opinion on the later?

I've used it for the last month+ now and it's not quiet there yet. Setup via terraform was mostly fine although the default subnet sizes were too small (since the networking layer seems to over-allocate IPs you only get 30% of the IPs usable for pods). The metrics backend is broken so metrics based auto-scaling of pods doesn't work. Also, r5 nodes aren't supported by the networking plugin since someone forgot to add them into it. User authentication for access to EKS is somewhat awkward. Also, the user role that creates the EKS cluster has magic admin access which I can't find a way to control.

Re: GitLab is now running on GCP

#108
post #59
post #56

Earlier quoted context omitted.

You can get better firewall control than just open/shut

Would you mind sharing what you have in mind please? I'm genuinely interested in how that would work.

Sure, I have a PG database on the internet. It's firewall allows only traffic from my whitelist IPs. Additionally these PG servers require SSL[0] from only my CA so even if firewall is open, no access.

[0] https://www.postgresql.org/docs/current/static/ssl-tcp.html

Re: GitLab is now running on GCP

#109

Earlier quoted context omitted.

If "Sandy Hook is not fake" is an echo chamber to you, either your definition of echo chamber is wrong, or I'd rather not have you in my "chamber".

Even if they are wrong they should not be censored. Clearly state what is allowed and what is not. Do not pick sides and change rules on a case by case basis. Do what you say you are going to do. That's how businesses used to earn trust. Now integrity in business is a thing of the past. I'd rather have a bunch of crazy people expressing themselves on the web than being selectively removed due to a couple's persons op…

Google is doing what the social contract allows.

Not to get all John Stuart Mill, but the town idiot is not above social censure.

The government isn’t doing it. And right-wing speech, IMO nonsense, is all over the web itself.

Stop believing “Big Corp should be fair.” That’s a complete fabrication on your part.

Re: GitLab is now running on GCP

#110
post #68
post #15

Earlier quoted context omitted.

Google is very pro-government, pro-censorship, pro-regulations, pro-military. It's better to just accept that it will never be a decent infrastructure provider because of that.

I work at Google. Google can be very conservative and risk-averse in following regulations, but ask far as I can tell Google is one of the least pro-government, pro-censorship, pro-regulations, pro-military corporations in the world.

What's the actual legal argument here? What's the text of the regulation? Why does Google interpret it to mean this whereas Amazon and Microsoft don't?
Post reply on HN