First, this looks amazing, congrats! The primary reason I've held off on buying an eink tablet (remarkable/kindle scribe) is because much of the non-leisure reading I do for work requires enterprise-friendly features like MDM and encryption, and even with that plugging into a laptop to sync every document is a major UX hurdle.
Are you thinking about this primarily as a consumer device with, or do you want to go after those business applications sooner than later?
Disclosure: I work at AWS, own a Kindle Oasis, but have nothing to do with Kindle or devices.
Amazon EKS | Sr Software Engineer | Remote (US/Canada) | Full Time
As a Senior Software Engineer in the Elastic Kubernetes Service (EKS) team you will help us deliver the mission of making AWS the best place to run containers. You will be part of an exceptional team that is moving the needle towards making containers as the next generation compute platform. This is an opportunity to engineer systems on a massive scale, and to gain top-notch experience in distributed systems and cloud computing.
(Disclosure: I work on Kubernetes/EKS Security at AWS)
I'm curious why they didn't look into using Kubernetes ProjectedVolumeTokens for authenticating to Vault? The tokens Kubernetes issues are not stored in etcd, and they contain pod-specific metadata so they are invalidated as soon as the pod dies (when using TokenReview). Alternatively, they can be used to directly authenticate with Vault since they're OIDC-valid tokens [1].
The semantics around secrets in Kubernetes aren't nearly as robust as Vault, so I was surprised to not see this more clearly called out (ex: list secrets == get all keys and values). Even if you use KMS/AES encryption (which they reference) that doesn't help with access control.
You are correct that the API server is only aware of the VPC network, and not any overlays. One solution to the metrics-server or other webhooks is to use host-networking mode so the API server can have connectivity.
Service IP configurability is a very common ask, and as you’ve linked, is on our roadmap along with a slew of other control plane configuration options.
You can delete the AWS VPC CNI DaemonSet and install any CNI plugin you’d like.
EKS regularly backs up etcd and has automatic restore in the case of a failure. Manually restoring to an old snapshot would be quite disruptive. What is your use case, and what would be the interface you’d like to see?
One of the things about blender that was frustrating for me when I last tried it ~3 years ago was the inability to use a different python REPL (ex: iPython) or easily import the blender python libraries in a non-blender python process. Can anyone say if this has gotten better?
A year ago I moved from Chattanooga, TN (mentioned in the article) to Bellevue, Wa to work in “Cloud City” Seattle to take a job at AWS. It used to cost me a total $59/mo for 100MB fiber up and down, no contract, with _amazing_ customer service (I seriously have stories to tell about how great EPB is).
My only real option at my new residence is Comcast at $79/mo which went up to $94/mo after 1 year for a hypothetical 100down/5up, with frequent network drops.
It was quite disappointing to find zero options for fiber, and this convinces me that this kind of corruption by ISPs and legislators needs to be severely curbed.
Amazon Web Services (AWS) EKS | Frontend & Software Development Engineer | ONSITE (US relocation) | Seattle, WA | Full Time
Amazon Web Services is looking for Systems Development Engineers (SysDE) and Software Development Engineers (SDE) to join our growing Amazon Elastic Container Services for Kubernetes (EKS) team. Amazon EKS is our managed Kubernetes service that makes it easy for customers to use Kubernetes without needing to become experts in provisioning and operating Kubernetes. EKS manages time-consuming administrative tasks like setting up, operating, scaling and updating Kubernetes freeing customers up to focus on their applications.
Please note that these are not entry level positions. Kubernetes and/or AWS experience preferred.
Please feel free to reach out to the hiring manager for this position with any questions, [email protected]
I know a family friend who works in internal investigations at $PACKAGE_DELIVERY_CORP, and this kind of sting is nothing new. You just don’t hear about it.
Disclosure: I work at AWS but know nothing about Amazon delivery