Live data from Hacker News

It’s Time to Embrace Kubernetes Really?

pulumi.com

41–50 of 63 posts

Re: It’s Time to Embrace Kubernetes Really?

#41
post #36

Earlier quoted context omitted.

For prod? You’ll know when your gke control plane goes down and support is twiddling their thumbs for two days

2 days of downtime from a GCP service? I didn't know the outages with these cloud services were ever that bad.

Two days is nothing. I had their fabric black holing packets for weeks before it got fixed

Re: It’s Time to Embrace Kubernetes Really?

#42

Earlier quoted context omitted.

For prod? You’ll know when your gke control plane goes down and support is twiddling their thumbs for two days

Does that actually happen with GKE? If so: do not use GKE. Other vendors surely have better-supported k8s services.

Also fwiw i heard similar stories about aks and eks as well as do

Re: It’s Time to Embrace Kubernetes Really?

#43

There should be more of a boilerplate very stable version for smaller companies but I think in general Kubernetes makes it really easy to automate away a lot of the ops and security stuff and get app pipelines running pretty quickly which is really nice.

There are companies trying to provide this - I don't know if anyone is doing it very successfully yet, but Microk8s, k3s, etc are all basically "distros" of kubernetes for different targets.

I think part of the issue is that many of the bigger players want you to use their managed k8s solution and not just give you their setup - I think that's a temporary thing. A few of the big boons of k8s is the ability to be multi-cloud, and vendors are losing out on a revenue stream by not embracing that (though, AWS has a new multi-cloud k8s thing, so maybe they get it).

Re: It’s Time to Embrace Kubernetes Really?

#44

I kind of don't understand why people don't use managed K8's and avoid needing to pay ops people to manage their setup. One can learn the developer side of K8's in a week or so enough to be deploying apps and setting up services and pods without the overhead of managing etcd and distributed clusters.

Managed k8s doesn't mean you don't need ops people. You still need ops people - you are still running a complex and customized multi-node kubernetes cluster. You just need fewer ops people by following a vendors optimistic path.

Re: It’s Time to Embrace Kubernetes Really?

#45

Hi everyone! Article author here! My friend and colleague, Paul Stack: https://twitter.com/stack72 are at very opposite ends of the spectrum when it comes to Kubernetes. We put our heads together and tried to create a balanced take on Kubernetes where our opinions didn't cloud the article. It's obviously very polarizing, but I think we managed to ask some good questions before you started the adoption process. Would…

Thx for writing that. To me it seems mind-boggling that in the 21st century you still have to point out to people that you shouldn't just adopt a technology because it seems cool. Of course you should ask yourself what problem you're trying to solve. Apparently people still don't get this. I'm not sure I agree about templating YAML files–why is templating JSON any better, really?–but YMMV.

I agree that technology shouldn't be adopted just because it is new unfortunately the job market makes it so many early engineers (and already established engineers that will want to move at some point) end up practicing RDD as a matter of self interest.

Re: It’s Time to Embrace Kubernetes Really?

#46
post #31

Seems more and more people are waking up to the fact that docker and k8s are broken by design: https://thenewstack.io/unfixable-kubernetes-security-hole-me...

Just because you have to trust your roommates a little doesn't mean that the idea of roommates is broken by design. It just means that you should be careful who you sign a lease with.

How do you be careful?

You can't trust the cloud provider:

https://unit42.paloaltonetworks.com/windows-server-container...

https://media-exp1.licdn.com/dms/image/C5622AQH70okwLkMlNg/f...

What about the concept of not having roommates? Plenty of infrastructure alternatives exist besides "containers".

Re: It’s Time to Embrace Kubernetes Really?

#47

Earlier quoted context omitted.

If you're mom/pop online shop and just need 1 machine you don't need k8s. KISS principle applies.

A ton of the value from k8s is in the programmatic and replicable configuration. 1 computer pets are still bad in a mom and pop shop. 1 computer livestock is still better.

Is “1 computer livestock” even possible?

After your single cattle is murdered, the next one has to be raised right?

State has to come from somewhere. Downtime has a cost for most businesses.

Re: It’s Time to Embrace Kubernetes Really?

#48

I found this to be actually quite a well balanced take. There are quite a lot of useful considerations in here which I don't often see in HN discussions about k8s, as it's usually from people well invested in that ecosystem now. Some of our teams have been drifting naturally towards ECS Fargate and found it to be a great fit. Almost invariably the k8s question comes up, and it's usually a reaction to the popularity o…

You can also get EKS Fargate so best of both worlds.

ECS is definitely more suited for small use cases however.

Re: It’s Time to Embrace Kubernetes Really?

#49
post #31

Seems more and more people are waking up to the fact that docker and k8s are broken by design: https://thenewstack.io/unfixable-kubernetes-security-hole-me...

You have given the ability for a normal user to modify load balancers and then are surprised they can do things like intercept traffic.

It's a bug but a very minor one. Especially if you are securing traffic inside the cluster.

Re: It’s Time to Embrace Kubernetes Really?

#50
post #46

Earlier quoted context omitted.

Just because you have to trust your roommates a little doesn't mean that the idea of roommates is broken by design. It just means that you should be careful who you sign a lease with.

How do you be careful? You can't trust the cloud provider: https://unit42.paloaltonetworks.com/windows-server-container... https://media-exp1.licdn.com/dms/image/C5622AQH70okwLkMlNg/f... What about the concept of not having roommates? Plenty of infrastructure alternatives exist besides "containers".

You understand how VPS/EC2 etc work. They are also multi-tenant architectures i.e. having roommates.

So in your world you have to only use bare metal ? Sounds fun.

Post reply on HN