dlor

22 ms·

181.
by dlor 6y ago
In my experience the opposite is true - no one is doing CI. But that's only because the definition of CI is unrealistic/impossible for large teams, specifically this requirement: https://en.wikipedia.org/wiki/
182.
Zombie Dependencies(dlorenc.medium.com)
1 points by dlor 6y ago|0 comments
183.
by dlor 6y ago
I think the point is that certificates are built on top of DNS, not the other way around. Domain resolution does not require certificate authorities.
184.
Who's at the Helm?(dlorenc.medium.com)
111 points by dlor 6y ago|39 comments
185.
The Dependency Jungle(dlorenc.medium.com)
3 points by dlor 6y ago|0 comments
186.
by dlor 7y ago
It's difficult in one repo too, although for different reasons. To update a dependency you may have to fix every caller in one very large change. Basically the more users a single dependency has, the harder it gets to update.
187.
Open Source Software Is Under Attack(medium.com)
2 points by dlor 7y ago|0 comments
188.
by dlor 7y ago
This was my understanding on how these things worked as well. But again, not a lawyer. In Kubernetes-land, the code is all standard Apache 2 but the trademark is governed by a custom set of policies the community decided on. For example, co
189.
by dlor 7y ago
The new ephemeral container support in kubernetes lets you do essentially that. You bring the filesystem from another container image into the PID/network namespace of a running container in a pod.
190.
by dlor 7y ago
And, just to guess, he's also pointing out that security is not a feature that can be "bolted on" to a chat app later. Secure messaging is an incredible deep space, and any attempts to add security to a chat application will
191.
by dlor 7y ago
I think most things in software trade-off between general purpose and specialized. My 2c is that we'll see more and more things become source-based over time. We're already seeing it with infra as code, gitops, git-ml, etc. If the
192.
by dlor 7y ago
I'd love to hear more about how you're using them if you don't mind sharing. I work on Tekton at Google.
193.
by dlor 7y ago
I can't speak for projects in general, but I haven't noticed any changes on Tekton or the other things I work on.
194.
by dlor 7y ago
Different groups of people working on the two projects, though we communicate pretty frequently.
195.
by dlor 7y ago
A closer comparison would be to Argo Workflow. Tekton and Argo Workflow provide ways to declare workflow pipelines for execution on Kubernetes. Tekton focuses on source based workflows, while Argo is more general purpose. We've been wo
196.
by dlor 7y ago
Installing Docker for Mac/Windows has required users to login for awhile now.
197.
by dlor 7y ago
I think the op is saying that kustomize is integrated into kubectl, not helm.
198.
The Continuous Delivery Foundation(opensource.googleblog.com)
7 points by dlor 8y ago|1 comments
199.
by dlor 8y ago
My favorite way to think about this is to apply a reverse Conway's law. Architect your microservices like your org chart. One of the main benefits of decoupling a monolithic application is getting the freedom to release, scale and mana
200.
by dlor 8y ago
I'm not exactly sure what point you're trying to make here. k8s is not meant to be a paas, but no one is trying to make k8s harder to use. I work at Google on a large team of engineers dedicated to making it as easy as possible to
201.
by dlor 8y ago
Sidestepping the conspiracy questions, these images are built reproducibly, from sources available on GitHub. You can clone the repo, audit the build tools and inputs, and build the image yourself. You'll get the exact same sha256 as t
202.
by dlor 8y ago
Exactly! This work builds on top of the Debian team's work on reproducible package builds, providing a way to combine all of these packages into a reproducible container image. This is difficult with Docker directly today because times
203.
by dlor 8y ago
I'm a pretty big fan of the new build pack spec. I haven't gotten a chance to really try it out in depth yet, but the layer-aware caching is a pretty elegant way to make fast builds possible.
204.
by dlor 8y ago
Nothing is changing with FROM - not sure what gave you that impression. We're simply offering some new base images people can choose to use if they want to. These also happen to be the ones that have been in use by some of our "mo
205.
by dlor 8y ago
It's the same underlying image, just hosted somewhere else :)
206.
by dlor 8y ago
There are a few reasons you might want to use our version of these images: - If you're running on GCP, pulling images from GCR will likely be much faster than Dockerhub given network locality. - Content Trust. DockerHub images are main
207.
by dlor 8y ago
This was a mistake - we have it ready and just forgot to publish it. I'll get it out ASAP!
208.
by dlor 8y ago
Whoops, that looks like an oversight. 18.04 is definitely available as well.
209.
by dlor 8y ago
I'm Tech Lead/maintainer for these images. Happy to answer any questions!
210.
by dlor 8y ago
I think you might be missing the point. DannyBee says that requesting documents from Facebook in the UK would have been a fine option. But that's not what happened here! The documents were obtained from someone who was essentially a th

More ›