4 ms·

Using managed kubernetes solutions alleviates most of the hair pulling.

by pm90 7y ago

falcolas 7y ago
Speaking as someone using EKS: No, no it doesn't. The only thing we really handed over to someone else was the challenge of running a control plane. We still have to roll our own node images (for compliance reasons, the default images are insufficiently secure), still have to work directly with AWS to get larger etcd clusters, still have to manage the cluster itself... The trouble has barely been below the threshold of pain to just run our own control plane.
- otterley 7y ago
  Out of curiosity, have you considered using ECS instead? If not, why not? (Disclaimer: I work for AWS as a specialist solutions architect.)
  - blaser-waffle 7y ago
    Not that person, but I do a lot of docker at a big enterprise. Sell me.
    - otterley 7y ago
      Drop me a line - eff eye ess see emm eye at amazon dot com :)
busterarm 7y ago
Absolutely no it does not. I work with GKE and EKS almost exclusively and it compounds the headaches most of the time. There is varying support for Kubernetes resources in both and all kinds of vendor-specific ways you need to do things to keep you locked in. Every single managed Kubernetes solution available is a unique, special snowflake. Most folks in-house ones are the same. Saying that Kubernetes isn't some bespoke solution is a myth. Kubernetes is a collection of haphazardly-assembled components in varying states of maturity and that landscape changes dramatically with minor release versions (GKE's Stable release branch is still 1.13, for example). YMMV.
- pm90 7y ago
  Give specific problems you see and I will give you a reasoned reply. I will not engage with hyperbole devoid of facts.
  - busterarm 7y ago
    It's help I don't need and didn't ask for. I'm managing several million dollars worth of infrastructure in both. I gave enough detail that anyone familiar enough with both platforms should know some of the issues I'm talking about already.
    - pm90 7y ago
      You did not.
      - busterarm 7y ago
        > There is varying support for Kubernetes resources I dunno, EKS not having built-in support for Ingress objects is a pretty large and obvious elephant in the room. I'm not playing this game. I've stated my experiences and suggested the level of interaction I've had with the platforms in dollar figures enough to be comfortable with what I'm saying here.
        pm90 7y ago
        > I dunno, EKS not having built-in support for Ingress objects is a pretty large and obvious elephant in the room. Which is actually not a big deal. K8s ingress objects are not very flexible, and most users in my experience tend to use customized solutions (e.g. ambassador) where you use a Network Load Balancer. Ingress objects are fully supported in GKE. > I'm not playing this game. I've stated my experiences and suggested the level of interaction I've had with the platforms in dollar figures enough to be comfortable with what I'm saying here. You started playing this "game" by dropping numbers on how many $$s you've managed and asking that other believe you because of that. I was simply asking you to provide specific instances of the pain you're stating you see. The one instance you've provided isn't really that big of a deal.

Using managed kubernetes solutions alleviates most of the hair pulling.

by pm90 7y ago

Using managed kubernetes solutions alleviates most of the hair pulling.

Speaking as someone using EKS: No, no it doesn't. The only thing we really handed over to someone else was the challenge of running a control plane. We still have to roll our own node images (for compliance reasons, the default images are insufficiently secure), still have to work directly with AWS to get larger etcd clusters, still have to manage the cluster itself... The trouble has barely been below the threshold of pain to just run our own control plane.

otterley 7y ago
Out of curiosity, have you considered using ECS instead? If not, why not? (Disclaimer: I work for AWS as a specialist solutions architect.)
- blaser-waffle 7y ago
  Not that person, but I do a lot of docker at a big enterprise. Sell me.
  - otterley 7y ago
    Drop me a line - eff eye ess see emm eye at amazon dot com :)

busterarm 7y ago

Absolutely no it does not. I work with GKE and EKS almost exclusively and it compounds the headaches most of the time. There is varying support for Kubernetes resources in both and all kinds of vendor-specific ways you need to do things to keep you locked in. Every single managed Kubernetes solution available is a unique, special snowflake. Most folks in-house ones are the same. Saying that Kubernetes isn't some bespoke solution is a myth. Kubernetes is a collection of haphazardly-assembled components in varying states of maturity and that landscape changes dramatically with minor release versions (GKE's Stable release branch is still 1.13, for example). YMMV.

pm90 7y ago
Give specific problems you see and I will give you a reasoned reply. I will not engage with hyperbole devoid of facts.
- busterarm 7y ago
  It's help I don't need and didn't ask for. I'm managing several million dollars worth of infrastructure in both. I gave enough detail that anyone familiar enough with both platforms should know some of the issues I'm talking about already.
  - pm90 7y ago
    You did not.
    - busterarm 7y ago
      > There is varying support for Kubernetes resources I dunno, EKS not having built-in support for Ingress objects is a pretty large and obvious elephant in the room. I'm not playing this game. I've stated my experiences and suggested the level of interaction I've had with the platforms in dollar figures enough to be comfortable with what I'm saying here.
      - pm90 7y ago
        > I dunno, EKS not having built-in support for Ingress objects is a pretty large and obvious elephant in the room. Which is actually not a big deal. K8s ingress objects are not very flexible, and most users in my experience tend to use customized solutions (e.g. ambassador) where you use a Network Load Balancer. Ingress objects are fully supported in GKE. > I'm not playing this game. I've stated my experiences and suggested the level of interaction I've had with the platforms in dollar figures enough to be comfortable with what I'm saying here. You started playing this "game" by dropping numbers on how many $$s you've managed and asking that other believe you because of that. I was simply asking you to provide specific instances of the pain you're stating you see. The one instance you've provided isn't really that big of a deal.