3 ms·
I quite like this defense-in-depth approach, but it's disappointing that it will only be available as part of the probably expensive GKE Advanced. I would have
by metta2uall 7y ago
I quite like this defense-in-depth approach, but it's disappointing that it will only be available as part of the probably expensive GKE Advanced. I would have thought safety features should be standard..
- dilyevsky 7y agoI think either way control plane is free now?
- metta2uall 7y agoWell gVisor doesn't use the control plane. It is free, but I wouldn't think it has a high cpu or memory load, and Google would make a lot of profit on the nodes.
- dilyevsky 7y agoI know but they may conceivably just charge fixed fee for enabling that option on the nodepool. > it has a high cpu or memory load, and Google would make a lot of profit on the nodes. They currently solve that problem by having their node VMs melt down at like 50% utilization so you have to run everything with huge padding.