kelseyhightower

9 ms·

31.
by kelseyhightower 7y ago
All of the following assumes you plan on running more than a single instance of your monolithic application. If that's not the case, then ignore Kubernetes, and be glad you don't have the problems it was designed to solve. If you
32.
by kelseyhightower 7y ago
Kubernetes External Secrets essentially copies secrets from an external source, in this case AWS Secrets Manager, and creates a native Kubernetes secret in the same namespace where the ExternalSecret custom object was defined. Kubernetes is
33.
CloudEvents, Multi-Cloud, and the Gloo Between Them(medium.com)
1 points by kelseyhightower 8y ago|0 comments
34.
Show HN: How-to guide for testing the riff FaaS platform and Istio on Kubernetes
1 points by kelseyhightower 9y ago|0 comments
35.
by kelseyhightower 9y ago
No comment.
36.
Bootstrapping Kubernetes Google Cloud Platform without scripts(github.com)
153 points by kelseyhightower 9y ago|25 comments
37.
by kelseyhightower 9y ago
Any load balancer can be configured or modified to target routable Pod IP addresses and skip node ports altogether. You'll have to integrate with the Kubernetes Endpoints API[1] and support dynamic backends. Another option would be to
38.
Show HN: Tutorial for building and deploying Kubernetes Initializers(github.com)
1 points by kelseyhightower 9y ago|0 comments
39.
Optimizing impact: why I will not start an Envoy platform company(medium.com)
2 points by kelseyhightower 9y ago|0 comments
40.
by kelseyhightower 10y ago
It will as I continue to work on echo until it's "finished". This is the result of 4 hours of learning and writing my first assembly program.
41.
by kelseyhightower 10y ago
This is great feedback, which I plan to use to improve the echo program. I'm just learning (on my own), and I figured I would just post my progress and I would get some feedback; it worked! echo is far from finished, and it's safe
42.
by kelseyhightower 10y ago
Yes, this is my first assembly program. I had to look up every instruction and it took me hours to understand even the basics, but it was worth it. I have a much better understanding of x86 assembly and plan to write larger programs to cont
43.
by kelseyhightower 10y ago
ConfigMaps offer everything I need for a tool like konfd, and ConfigMaps work with the majority of clusters deployed today. While I could have used a ThirdPartyResource, that would require me to design a custom scheme and write a little mor
44.
by kelseyhightower 10y ago
We all want a strong foundation and will continue to work to create one. In parallel, many of us like building and sharing things, and given that most things in Kubernetes are just abstractions, the things we are building today will continu
45.
by kelseyhightower 10y ago
First, thanks for taking the time to offer feedback regarding what we call "secrets" in Kubernetes. As you've rightfully pointed out the current implementation of "secrets" are stored unencrypted in etcd; something
46.
by kelseyhightower 10y ago
This is great feedback. I'm still on the fence about a watch mode for the following reasons: 1. The template configmap will not change as often as the secrets and configmap key/value pairs they reference. This means you'll al
47.
Show HN: konfd – Manage Kubernetes secrets and configmaps with Go templates(github.com)
115 points by kelseyhightower 10y ago|40 comments
48.
by kelseyhightower 10y ago
I think sidecars accomplish similar goals by moving the LB logic closer to the application. So now the question is: Why would you want to move this kind of thing closer to the application? Control. Client-side load balancing enables you to
49.
Show HN: Endpoints - client-side load balancer library for Kubernetes(github.com)
4 points by kelseyhightower 10y ago|2 comments
50.
Show HN: Automate the creation of unique Vault tokens for Kubernetes Pods(github.com)
10 points by kelseyhightower 10y ago|0 comments
51.
by kelseyhightower 10y ago
Short answer is no. I'm a Google employee, so I'm biased. The Container-VM is just a Linux distro optimized for the Google Cloud Platform (GCP). As a former CoreOS employee, I can tell you first hand that a lot of effort goes into
52.
by kelseyhightower 10y ago
I was able to contact GitHub support and reported the issue. Looks like relative links from the main page are working again. Thanks for the heads up.
53.
by kelseyhightower 10y ago
Thanks for the feedback. My goal is to augment those tools with step-by-step documentation so people get an opportunity to learn how things work. Yes, I will attempt to "support" people as they attempt to learn things the hard way
54.
by kelseyhightower 10y ago
Happy to improve the tutorial to incorporate the production approach that should be taken for each task. The main goal is allow people to run through a cluster bootstrap step by step so they learn how things work. If you don't mind fil
55.
by kelseyhightower 10y ago
I've updated the tutorial to include AWS a few days. Based on your feedback I've added a note regarding AWS support toward the top of the project README and in the project description field. In some cases you'll find side-by-
56.
by kelseyhightower 10y ago
Thanks for mentioning this. It looks like there is something wrong on GitHub's end. The current, temporary, workaround is to visit the README directly and the relative links should work.
57.
by kelseyhightower 10y ago
I've updated the Kubernetes Certificate Manager based on the dns01 exec plugins proposal. I've also pulled out all native support for DNS providers and now the Google DNS provider requires the googledns exec plugin. For ease of us
58.
by kelseyhightower 10y ago
I'm proposing an exec based plugin system for the Kubernetes Certificate Manager. Ideally this will make it easy to support any DNS provider written in any language. The goal is to push all DNS providers, including the Google DNS provi
59.
by kelseyhightower 10y ago
Based on user feedback, this is going to happen. I'll need a few days to clean up and refactor things, but it should be pretty easy to add support for any DNS provider with an API.
60.
by kelseyhightower 10y ago
User feedback and clear demand for other DNS providers. Once I have that I'll consider refactoring the DNS backend to support anything with an API or some sort of plugin system. Current goals are to vet the idea of using DNS-01 challen

More ›