Seems more and more people are waking up to the fact that docker and k8s are broken by design:
https://thenewstack.io/unfixable-kubernetes-security-hole-me...
It’s Time to Embrace Kubernetes Really?
31–40 of 63 posts
Re: It’s Time to Embrace Kubernetes Really?
#32I kind of don't understand why people don't use managed K8's and avoid needing to pay ops people to manage their setup. One can learn the developer side of K8's in a week or so enough to be deploying apps and setting up services and pods without the overhead of managing etcd and distributed clusters.
When your site or app goes offline it can be handy if you have ops people who understand your setup.
Setup = a k8s service? You should have support from the vendor, period.
Setup = rep groups, internal services, etc? You need k8s-savvy ops people, or really good devs who like ops stuff.
Re: It’s Time to Embrace Kubernetes Really?
#33Unfortunately, the hoopla is loud enough that developers could reasonably be expected to push for it just so they could have real experience to put on their resumes.
Re: It’s Time to Embrace Kubernetes Really?
#34One thing I've found about k8s is running a cluster can be very costly, and using a managed cluster on one of the big three clouds is even more so. Also, when rolling your own cluster it requires a lot of elbow grease to get things in a working state, and even more to keep things working. It feels awesome from a developer standpoint once you work out all the kinks. It's very natural describing your service with a bit…
That's the exact same feeling I get too. If I'm a mom/pop shop online, why can't I get a k8s cluster w/just 1 machine for $5/month? I mean the big three (4 w DO) can all get you a bare machine for $5/mo that can run Docker. Why not give the k8s management side for free for those people?
Get the zonal cluster on GKE. Free control plane stuff. Then you can put as many or as few nodes as you want on it.
Make sure to use metal LB or all your ingresses will be served with Google LBs that are hecka expensive.
Re: It’s Time to Embrace Kubernetes Really?
#35I kind of don't understand why people don't use managed K8's and avoid needing to pay ops people to manage their setup. One can learn the developer side of K8's in a week or so enough to be deploying apps and setting up services and pods without the overhead of managing etcd and distributed clusters.
For prod? You’ll know when your gke control plane goes down and support is twiddling their thumbs for two days
Does that actually happen with GKE? If so: do not use GKE. Other vendors surely have better-supported k8s services.
Re: It’s Time to Embrace Kubernetes Really?
#36I kind of don't understand why people don't use managed K8's and avoid needing to pay ops people to manage their setup. One can learn the developer side of K8's in a week or so enough to be deploying apps and setting up services and pods without the overhead of managing etcd and distributed clusters.
For prod? You’ll know when your gke control plane goes down and support is twiddling their thumbs for two days
2 days of downtime from a GCP service? I didn't know the outages with these cloud services were ever that bad.
Re: It’s Time to Embrace Kubernetes Really?
#37There should be more of a boilerplate very stable version for smaller companies but I think in general Kubernetes makes it really easy to automate away a lot of the ops and security stuff and get app pipelines running pretty quickly which is really nice.
Managed K8's right?
Not only managed options.
Openshift is big in on-prem enterprise setups because as flawed as the install process is or as ridiculous licensing is, you get a remarkably complete system pretty easily out of a bunch of servers that integrates with things like your corporate LDAP.
Re: It’s Time to Embrace Kubernetes Really?
#38Seems more and more people are waking up to the fact that docker and k8s are broken by design: https://thenewstack.io/unfixable-kubernetes-security-hole-me...
Just because you have to trust your roommates a little doesn't mean that the idea of roommates is broken by design. It just means that you should be careful who you sign a lease with.
Re: It’s Time to Embrace Kubernetes Really?
#39Earlier quoted context omitted.
For prod? You’ll know when your gke control plane goes down and support is twiddling their thumbs for two days
Does that actually happen with GKE? If so: do not use GKE. Other vendors surely have better-supported k8s services.
Yes at previous gig someone took down gke control plane by creating many crd objects (kubeflow) and it took multiple escalations to fix.
Re: It’s Time to Embrace Kubernetes Really?
#40Earlier quoted context omitted.
That's the exact same feeling I get too. If I'm a mom/pop shop online, why can't I get a k8s cluster w/just 1 machine for $5/month? I mean the big three (4 w DO) can all get you a bare machine for $5/mo that can run Docker. Why not give the k8s management side for free for those people?
You can get a small cluster from Digital Ocean pretty cheaply. It's more than $5 (I forget the exact price) but they'll provide a free master node and then you just pay for one additional kubelet (and you can add more as you need them). I have used it for one hobby project and have been pretty happy with it.
Same with Linode, the management machines are not massive scale HA control planes like you get with the expensive hosts (It seems like Linode may run a single 2GB droplet), but for most of my clusters I don't need it.