HackerTrans
TopNewTrendsCommentsPastAskShowJobs

fhke

no profile record

comments

fhke
·2년 전·discuss
> Why did it regress into Kubernetes

The “KISS solution” didn’t scale to the requirements of modern business. I remember running chef - essentially a complicated ruby script - on 100ks of servers, each of which with their own local daemon & a central management plane orchestrating it. The problem was that if a server failed… it failed, alongside everything on it.

Compared to that setup, k8s is a godsend - auto healing, immutable deployments, scaling, etc - and ultimately, you were already running a node agent, API, and state store, so the complexity lift wasn’t noticeable.

The problem came about when companies who need to run 5 containers ended up deploying a k8s cluster :-)
fhke
·2년 전·discuss
>The high cost arises from needing to provision a bare-bones cluster with redundant management nodes.

?!

How else are you managing your infrastructure besides having redundancy in the control plane? Even if it’s a chef or puppet server, or even sysadmin Dave running scripts on his laptop, you should still have redundancy.

> Moreover, Kubernetes’s slow autoscaling meant I had to over-provision services to ensure availability, paying for unused resources rather than scaling based on demand.

??????

Slow compared to what exactly? Anecdotally, k8s with karpenter is significantly faster to scale than auto scaling groups.
fhke
·2년 전·discuss
Exactly this. If they didn’t do this, us-east-1a would be the biggest single point of failure the world has ever seen.
fhke
·2년 전·discuss
Notwithstanding the fact that this was a user misconfiguration, S3 allows you to configure public access blocks to prevent this sort of thing.
fhke
·2년 전·discuss
I’m no k3s expert, but this surprised me:

> I noticed that there is only one k3s node that has the control-plane,master role. If that node fails you can no longer manager the cluster.

This feels like a failing of k3s that should be addressed within k3s, rather than adding duct tape elsewhere. Kubernetes has built-in mechanisms (Leases) for handling these kinds of problems.
fhke
·2년 전·discuss
[dead]
fhke
·2년 전·discuss
All cloud providers provide public APIs for managing infrastructure, how is kubernetes any different?

Your viewpoint operates on the assumption that a private network provides additional security in comparison to the public internet, which is a very dangerous assumption to make.