Didn’t realize consul had that. Seems like the right approach - though I wonder why Roblox wasn’t using it. Fwiw I believe kubernetes did this right - if you s

Didn’t realize consul had that. Seems like the right approach - though I wonder why Roblox wasn’t using it. Fwiw I believe kubernetes did this right - if you shoot the entire set of leaders, nothing really happens. Yes if containers die they aren’t restarted and things that create new pods (eg cron jobs) won’t run, but you don’t immediately lose cluster connectivity or the (built-in) service discovery. Not to say you can survive az failures or the like - or that kubernetes upgrades are easy/fun. And don’t run dev stuff in your prod kube cluster. Just…don’t.