geggam

94 ms·

901.
by geggam 8y ago
Let's say for discussion that we allow this curl| bash process because it is from a "safe" source. How do we come back next week and ensure some other process hasn't changed the files ? Package your files with a signed
902.
by geggam 8y ago
When do you run into rate limiting for scaling up ? We all call it serverless but somewhere there are servers you are using and they dont magically appear from nowhere.
903.
by geggam 8y ago
Emotions and feelings being a chemical imbalance of the brain causing irrational thought or actions. Yet this irrational thought is expressed, protected, and considered valid reason to justify actions in society. Wouldn't it be wonderf
904.
by geggam 8y ago
Every time I am about to upgrade this happens. cpu0: Intel(R) Pentium(R) D CPU 3.00GHz, 2993.01 MHz
905.
by geggam 8y ago
AWS is an API
906.
by geggam 8y ago
Our DBAs loved the DAL. There is a trend today to let developers run all over production doing what they want and it has direct impact on systems. The complexity of the modern stack is ridiculous. You run java containers inside docker conta
907.
by geggam 8y ago
the nice way to do this is to pass the chef role to the user data template in the autoscale group vars { ROLE = "bastion" Then append this to the user_data.tpl file chef-client --audit-mode enabled -R -E ${chef_environment} -r
908.
by geggam 8y ago
from my understanding you get the ability to put the DAL into a "pause" mode where it queues all the api requests allowing you do to updates / upgrades to the database with no downtime. It also gives you a way of controlling
909.
by geggam 8y ago
No database access layer ?
910.
by geggam 8y ago
Because editing yaml or json sucks.
911.
by geggam 8y ago
Would have been nice to see what scale these people were running. Also, if they are only polling developers are these actually production loads ? Are the developers now doing operational tasks ?
912.
by geggam 8y ago
Yet it is the one solution proven scalable with every distro release that uses it.
913.
by geggam 8y ago
You can either be innocent or guilty in court. So yes. It is.
914.
by geggam 8y ago
Pretty sure you can say that about most folks. We tend to run on the selfish side as a species.
915.
by geggam 8y ago
Proof of guilt is required in criminal case however, so absence of evidence is evidence of innocence.
916.
by geggam 8y ago
The less your co workers know about you the less they have to use against you when its dog eat dog time.
917.
by geggam 8y ago
Interesting... so you create a network and isolate it from the rest of the network ? How do your applications serve traffic ? Or... you create a network with namespaces and use iptables aka the firewall to network that to the other network
918.
by geggam 8y ago
Last year we had a $NAME come for an audit. Well known company and they did not know how to audit inside containers. Still not sure how a corporation who runs RHEL contractually is able to use alpine and ubuntu based containers but it happe
919.
by geggam 8y ago
Curious... What is your setup ? AWS ? GCP ? ... managed k8s or you running it ? Outsourcing your operations and pretending the problem is cured by docker is just a bit silly.
920.
by geggam 8y ago
No they haven't. They are lurking around the corner waiting to hit you when you least expect it. The mugging you are about to get is what your ops team has had and are trying to prevent. Enjoy the learnings...
921.
by geggam 8y ago
until you realize the firewall is the same iptables that you use to isolate the network in docker containers
922.
by geggam 8y ago
It empowers developers to side step many of the best practices learned in SDLC over the last 20 years and ship code they shouldn't The code is then running on a fault tolerant platform which masks the bugs and makes ops life hell when
923.
by geggam 8y ago
And you think k8s is simple to run on bare metal ? To care and maintain ? Do you understand the kernel tuning and routing Google does to avoid the NAT hell you are going to run into when you manage k8s on your own ?
924.
by geggam 8y ago
Whereas my AWS autoscale group does it for me while I go get me a foo foo drink at $ESTABLISHMENT
925.
by geggam 8y ago
Legalized Bribery
926.
by geggam 8y ago
Is that not tax deductible ? They get a write off and your support as well as the marketing bits.
927.
by geggam 8y ago
Except k8s doesnt federate
928.
by geggam 8y ago
Hacky is not production ready.
929.
by geggam 8y ago
Any unmaintained infrastructure as code piece will quit working. Success I have had with chef has been generating my own cookbooks that dont try to do everything for every OS
930.
by geggam 8y ago
Not to mention when folks talk HA and you ask about federation they just give you a blank stare. k8s is HA in the same region if you are using GKE. Not really what you can call HA

More ›