4 ms·
The biggest foot gun and most complicated part IMHO is networking. It is a blackbox with many competing implementations and each implementation even differing
by wg0 3y ago
The biggest foot gun and most complicated part IMHO is networking.
It is a blackbox with many competing implementations and each implementation even differing in implementation details within it's own versions.
In theory, it seems reasonable to say that K8s networking is an implemention detail which you shouldn't bother about but in practice, it's going to bite you because of some misconfigured component somewhere someday and you would have no idea what to make of thousands of iptable rules or BGP routes or even least inspectable eBPF mini programs.
Paid support, consulting.
- Too 3y agoThis. Most application developers don’t give a rats ass about how 2 nodes are connected as long as the pods can speak to each other. Throw these guys in a devops team and give them the task to setup a 2 node k8s cluster and guess how much consideration they will pay to networking. Correct, zero. Except you can’t, because you have to choose a CNI plugin or choose a distribution that has made an opinionated choice for you. To lower the barrier of entry. A default installation must become a lot more opinionated with much less options and more sane and safe default.