justinsb

9 ms·

31.
by justinsb 9y ago
kops is an open source project that is part of the kubernetes project, we're all working to solve these things as best we can. Some of these issues are not best solved in kops; for example we don't try to force a particular monit
32.
by justinsb 9y ago
kops isn't actually tied to AWS; there's early support for GCE and very early support for VMWare, with more on the way.
33.
by justinsb 9y ago
Definitely some great feedback there - I think most of those are known issues, and not all of them are technically kops issues, but we'll be figuring out how to work around them for kops users. (Switching Docker versions is tricky b
34.
by justinsb 9y ago
There's no need to choose: kops uses kubeadm (not a lot of it, but more with each release), so choose kops and get kubeadm for free! kubeadm is intended to be a building block that any installation tool can leverage, rather than each b
35.
by justinsb 9y ago
Thanks for the heads up - looks like we'll be adding support very soon then :-)
36.
by justinsb 9y ago
I'm one of the kops authors, and I will say that a lot of people run k8s clusters created by kops in production - I don't want to name others, but feel free to join sig-aws or kops channels in the kubernetes slack and ask there
37.
by justinsb 9y ago
kops doesn't necessarily prefer debian - we support Ubuntu, Debian, CentOS/RHEL, CoreOS and Google's Container OS. One of the outputs of the Kubernetes-on-AWS efforts is an AMI that is "Kubernetes Optimized" - a 4.
38.
by justinsb 10y ago
So first, sorry about the problem. Please come hang out in the sig-aws or kops channels - we're a bit smaller and more focused than kubernetes-users, and can typically get these problems solved pretty quickly together. IIRC we improve
39.
by justinsb 10y ago
It's the same proxy_protocol keyword for both, which is why this is so confusing. In the listen line it means "remove proxy protocol from the inbound connection", as a top level directive "proxy_protocol on" on the
40.
by justinsb 10y ago
nginx can inject proxy_protocol - I know because I've enabled it by mistake! The kubernetes nginx ingress controller doesn't support it though. I think that is because most people use HTTP headers (X-Forwarded-For) instead. Bu
41.
by justinsb 10y ago
I think this was true around kubernetes 1.2, but is no longer the case. etcd is natively HA. kube-apiserver is effectively stateless by virtue of storing state in etcd, so you can run multiple copies for HA. kube-scheduler & kube-con
42.
by justinsb 10y ago
FYI, Kubernetes can do HA: the issues you pointed to are both about client connectivity to multiple API servers, which is typically solved today either using a load-balancer, or by using DNS with multiple A records (which actually works sur
43.
by justinsb 10y ago
Simply that the proposal is complex and involves subtleties of behaviour, and I worry that there may be further unexpected consequences found later (like the equality surprises). I do think that the proposal nicely works around the problem
44.
by justinsb 10y ago
I had hoped the underlying monotonic clock would have been exposed directly.
45.
by justinsb 10y ago
And plenty of low-hanging fruit on the documentation :-)
46.
by justinsb 10y ago
If you're deploying kubernetes to AWS, you should probably be using kops (but then I would say that, because I started the project. But OTOH I started it because nothing else fit the bill!) Also, if you aren't already a member, c
47.
by justinsb 10y ago
We've definitely had our share of issues in this area, but we also take them seriously as you can see by the volume of patches that have gone in and continue to go in! With the very latest releases (1.4.7 and 1.5.1) I think we're
48.
by justinsb 10y ago
Well I can't answer for other projects, but libcloud specifically is in Python, and kops is in golang. But you raise a valid question: why not use a cloud abstraction library like libcloud - for example embedding terraform. It would
49.
by justinsb 10y ago
So right from the start I wanted to make sure it wasn't locked to AWS. We used to have GCE support enabled (and continue to have it on a branch, though obviously it has bit-rotted as we've added more AWS feature support) But we
50.
by justinsb 10y ago
Kops actually isn't tied to AWS, though we only support AWS right now. We'll likely be adding GCE support next; user requested features on AWS have taken priority so far though...
51.
by justinsb 10y ago
I also want GRPC for my own stuff; ELB will work fine (in TCP mode), but I also want it to work through ingress. My understanding is HTTP2/GRPC support is coming to ingress - that aledbf has already implemented it, and it will be comi
52.
by justinsb 10y ago
Hi - I do a lot of work on Kubernetes on AWS. We definitely have room for improvement - and not just in the glib "there's always room for improvement" way. But: We don't support ALB yet because we haven't actually
53.
by justinsb 10y ago
It also seems to be automatically run automatically by bazel when building Java code, which was a pleasant surprise.
54.
by justinsb 10y ago
Thank you - excited to see this! I do think there is a lack of a C++ library for Raft that stands alone (and you have two projects just within baidu that could share code). I'd be excited to help with a standalone project! And I&#x2
55.
by justinsb 10y ago
Looks nice. I know Raft better than most of the other pieces, so that's where I started; I didn't see code for dynamic membership changes nor log truncation. I can understand getting by with a fixed membership, but log truncatio
56.
by justinsb 10y ago
I wasn't thinking about outright rejecting any charge, but rather that you would price some charges more expensively than others. As a seller of insurance, you're going to price above your estimated percentage, to give you some p
57.
by justinsb 10y ago
I've posted this idea before on HN, but: if you believe you have a better way to detect fraud, put your money where you mouth is, and price and sell insurance on a per-charge basis. If a chargeback is made for for fraud, you would cov
58.
by justinsb 10y ago
Yes, it does, where the guarantee exists: e.g. https://golang.org/pkg/bytes/#Buffer.Write Looking at the implementation is no guarantee that the implementation won't be changed in future.
59.
by justinsb 10y ago
This is turning into a major tangent, but where is the guarantee documented?
60.
by justinsb 10y ago
Yes - just my quirky sense of humor! It isn't being documented as being safe (that I could find), so it should be checked IMO.

More ›