5 ms·

Phippy Goes to the Zoo

44 points by pplonski86 8y ago

jacobush 8y ago
Still too complicated. :)
tshanmu 8y ago
This actually achieves neither of the 2 objectives I think it's meant to achieve: Kids will go, "what on earth are you talking about", or enjoy it as a pointless story and Adults who try to understand kubernetes will go, why is this talking down to me? How do the meerkats keep the pods up, how do the fish talk to the pods, how does the vultures talk to the fish?
- meddlepal 8y ago
  Agree not sure what the target of this or the point. I guess it's cute and it's art, but I think it misses the mark badly.
- nicolast 8y ago
  You assume it's meant to explain K8s to kids, or teach adults about it. I don't believe it's either, more of a gimmick for the existing Kubernetes community. If an adult (or a kid, for that matter) wants to really learn about Kubernetes, its inner workings etc, there's plenty of documentation and literature available which does explain how Pods are scheduled, what Services are and how they're implemented, etc.
- sciurus 8y ago
  I think the objective (at least of the printed version) is for Microsoft to have something unusual to hand out at their conference booths that will drive traffic to them.
  - dharmab 8y ago
    Yeah, they ran out of the books very quickly. All of my married-with-young-kids coworkers picked up some stuffed animals and pins for their kids.
ajaxaddicted 8y ago
Internalizing and normalizing animal abuse and exploitation with Kubernetes.
jfindley 8y ago
"secrets are base64 encoded at rest" Umm. I hope this is because the author of the slides doesn't understand even the basics of encryption and used the wrong words. If they are actually using base64 encoding in place of crypto that would not be good. Even if it is a mistake and secrets genuinely are encrypted this sort of thing can be harmful, as others may look at this and get the (very wrong) idea that somehow base64 encoding is sufficient to store sensitive data.
- voor 8y ago
  You need to encrypt the backing etcd store for truly encrypted secrets.
- nicolast 8y ago
  'secrets are base64 encoded at rest' means exactly what it says: a secret value is encoded using base64 in the Secret object 'document' that's stored in etcd. It doesn't say anything about at-rest encryption, and the Kubernetes community is well aware base64 doesn't provide any such guarantees. However, if you want at-rest encryption (of data stored in etcd), we got you covered, if wanted way beyond only encrypting Secret objects! Some pointers: - https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/ https://kubernetes.io/docs/tasks/administer-cluster/encrypt-... - https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/ https://kubernetes.io/docs/tasks/administer-cluster/kms-prov...
  - jfindley 8y ago
    Thanks! I'm not sure if you're involved in the Phippy project at all, but the way it's worded sounds to me a lot like the author believes that encoding == encryption, and I'd maybe consider just dropping that line entirely. I suspect that it doesn't really matter to users at all what form of encoding you use to store data.
    - nicolast 8y ago
      I'm not involved in the Phippy 'project' in any way (only got a copy of the books and some plastic version of the animals as a speaker here at KubeCon :-D). I agree the wording may be a bit 'off' and providing a detail which doesn't necessarily add value or can cause confusion, so that would've been good feedback before the whole thing went to 'print' :) As for the end user who shouldn't know about encoding: that's not entirely true. Thing is, when sending a Secret object into the API (as YAML or JSON), you need to pre-encode the secret value using base64 in this document (so it's not K8s doing this for you, indeed another source of confusion given the current wording). The reason being that the API being YAML/JSON-based could otherwise not be used to store non-UTF8 secret values (e.g. binary ones). However, if you use 'kubectl create secret' instead of interacting with the API directly (or using 'kubectl create -f ...' with a YAML document as input, which is also 'interacting with the API directly' with some extras) then I believe the CLI will take care of this encoding for you, where required. See https://kubernetes.io/docs/concepts/configuration/secret/ https://kubernetes.io/docs/concepts/configuration/secret/
BobBagwill 8y ago
Images not loading for me on Chromebook.
- dankohn1 8y ago
  Please try the PDF available from phippy.io.
sciurus 8y ago
For those not in the know, this appears to be a sequel of sorts to https://kubernetes.io/blog/2016/06/illustrated-childrens-guide-to-kubernetes/ https://kubernetes.io/blog/2016/06/illustrated-childrens-gui...
- dankohn1 8y ago
  Yes, and Microsoft donated the characters and both books to CNCF, which relicensed them all CC-BY. More info and links to HTML, PDF, and source of the books at https://phippy.io https://phippy.io. (Disclosure: I'm executive director of CNCF and helped arrange the donation and relicensing.)
AzzieElbab 8y ago
How young are DevOps ppl nowadays?
wincy 8y ago
I really loved the first one of these. Unfortunately, this is really annoying to read on mobile as the unhideable “share” widget fixed to the right side obscures the text, so I have to either have the text at the top or the bottom of the screen. This is on an iPhone X in portrait mode.

44 points by pplonski86 8y ago

Still too complicated. :)

This actually achieves neither of the 2 objectives I think it's meant to achieve: Kids will go, "what on earth are you talking about", or enjoy it as a pointless story and Adults who try to understand kubernetes will go, why is this talking down to me? How do the meerkats keep the pods up, how do the fish talk to the pods, how does the vultures talk to the fish?

meddlepal 8y ago
Agree not sure what the target of this or the point. I guess it's cute and it's art, but I think it misses the mark badly.
nicolast 8y ago
You assume it's meant to explain K8s to kids, or teach adults about it. I don't believe it's either, more of a gimmick for the existing Kubernetes community. If an adult (or a kid, for that matter) wants to really learn about Kubernetes, its inner workings etc, there's plenty of documentation and literature available which does explain how Pods are scheduled, what Services are and how they're implemented, etc.
sciurus 8y ago
I think the objective (at least of the printed version) is for Microsoft to have something unusual to hand out at their conference booths that will drive traffic to them.
- dharmab 8y ago
  Yeah, they ran out of the books very quickly. All of my married-with-young-kids coworkers picked up some stuffed animals and pins for their kids.

ajaxaddicted 8y ago

Internalizing and normalizing animal abuse and exploitation with Kubernetes.

jfindley 8y ago

"secrets are base64 encoded at rest" Umm. I hope this is because the author of the slides doesn't understand even the basics of encryption and used the wrong words. If they are actually using base64 encoding in place of crypto that would not be good. Even if it is a mistake and secrets genuinely are encrypted this sort of thing can be harmful, as others may look at this and get the (very wrong) idea that somehow base64 encoding is sufficient to store sensitive data.

voor 8y ago
You need to encrypt the backing etcd store for truly encrypted secrets.
nicolast 8y ago
'secrets are base64 encoded at rest' means exactly what it says: a secret value is encoded using base64 in the Secret object 'document' that's stored in etcd. It doesn't say anything about at-rest encryption, and the Kubernetes community is well aware base64 doesn't provide any such guarantees. However, if you want at-rest encryption (of data stored in etcd), we got you covered, if wanted way beyond only encrypting Secret objects! Some pointers: - https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/ https://kubernetes.io/docs/tasks/administer-cluster/encrypt-... - https://kubernetes.io/docs/tasks/administer-cluster/kms-provider/ https://kubernetes.io/docs/tasks/administer-cluster/kms-prov...
- jfindley 8y ago
  Thanks! I'm not sure if you're involved in the Phippy project at all, but the way it's worded sounds to me a lot like the author believes that encoding == encryption, and I'd maybe consider just dropping that line entirely. I suspect that it doesn't really matter to users at all what form of encoding you use to store data.
  - nicolast 8y ago
    I'm not involved in the Phippy 'project' in any way (only got a copy of the books and some plastic version of the animals as a speaker here at KubeCon :-D). I agree the wording may be a bit 'off' and providing a detail which doesn't necessarily add value or can cause confusion, so that would've been good feedback before the whole thing went to 'print' :) As for the end user who shouldn't know about encoding: that's not entirely true. Thing is, when sending a Secret object into the API (as YAML or JSON), you need to pre-encode the secret value using base64 in this document (so it's not K8s doing this for you, indeed another source of confusion given the current wording). The reason being that the API being YAML/JSON-based could otherwise not be used to store non-UTF8 secret values (e.g. binary ones). However, if you use 'kubectl create secret' instead of interacting with the API directly (or using 'kubectl create -f ...' with a YAML document as input, which is also 'interacting with the API directly' with some extras) then I believe the CLI will take care of this encoding for you, where required. See https://kubernetes.io/docs/concepts/configuration/secret/ https://kubernetes.io/docs/concepts/configuration/secret/

BobBagwill 8y ago

Images not loading for me on Chromebook.

dankohn1 8y ago
Please try the PDF available from phippy.io.

sciurus 8y ago

For those not in the know, this appears to be a sequel of sorts to https://kubernetes.io/blog/2016/06/illustrated-childrens-guide-to-kubernetes/ https://kubernetes.io/blog/2016/06/illustrated-childrens-gui...

dankohn1 8y ago
Yes, and Microsoft donated the characters and both books to CNCF, which relicensed them all CC-BY. More info and links to HTML, PDF, and source of the books at https://phippy.io https://phippy.io. (Disclosure: I'm executive director of CNCF and helped arrange the donation and relicensing.)

AzzieElbab 8y ago

How young are DevOps ppl nowadays?

wincy 8y ago

I really loved the first one of these. Unfortunately, this is really annoying to read on mobile as the unhideable “share” widget fixed to the right side obscures the text, so I have to either have the text at the top or the bottom of the screen. This is on an iPhone X in portrait mode.