Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
q3k
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
86 ms
·
841.
▲
by
q3k
6y ago
Git mirror: https://code.hackerspace.pl/q3k/youtube-dl This is master on 4eda10499e8db831167062b0e0dbc7d10d34c1f9, retrieved from gitee.com, and is the last known hash from Google Webcache [1]. Clone, verify and rehost
842.
▲
by
q3k
6y ago
I have my reasons to _despise_ hosting PHP from an operational perspective. These mostly come from having to host ready-made PHP applications like Nextcloud, Wordpress, Dokuwiki, etc. 1) 'Language configuration' kept in a php.ini
843.
▲
by
q3k
6y ago
Answer for Jsonnet: layering/overrides from multiple sources: yes, as you define it (it's a programming language, the logic is yours to define, based on your particular usecase). But no access from environment variables, as that&#
844.
▲
by
q3k
6y ago
Text protos are decent (although a lack of a public spec limits their adoption outside of Google). But that's just a serialization format, only a piece of the configuration puzzle. You may argue that all configuration should be fully s
845.
▲
by
q3k
6y ago
Jsonnet, Nix and CUE are lazily evaluated. Starlark is not IIRC. Dhall I don't know, but I would presume it is? Nix as an example: nix-repl> { foo = 5 / 0; bar = 5; } error: division by zero, at (string):1:9 nix-re
846.
▲
by
q3k
6y ago
It's a fork-ish. Mostly the same codebase, some things ripped out, some things simplified, others just rearranged. One of the most notable changes is the API server being made backend-agnostic, so you can run it against anything from a
847.
▲
by
q3k
6y ago
Three things to address: 1) This doesn't have to be a two-step process. Specialized tools like kubecfg for Jsonnet will directly take a Jsonnet top-level config and instantiate it, traverse the tree, and apply the configuration intelli
848.
▲
by
q3k
6y ago
Conversely, I've been using quite a bit of Jsonnet in different projects for a few years now, and it's a life changer. Here's a public example - using Jsonnet to parametrize all core resources of a bare metal Kubernetes clust
849.
▲
by
q3k
6y ago
You're right, this does seem to work [1]. I wasn't aware that serde would attempt to deserialize multiple enum variants until something matches. [1] - https://serde.rs/enum-representations.html#untagged
850.
▲
by
q3k
6y ago
Most of the time when you 'get started on K8s', you get started by using a cluster that's setup by a provider of some sort - be it a cloud provider, a platform team in your company, or some prebundled bare metal Kubernetes di
851.
▲
by
q3k
6y ago
How would you express deserializing these 'polymorphic JSON' objects using serde/Rust?
852.
▲
by
q3k
6y ago
I think you're confusing Ingresses and Ingress Controllers? Traefik/HAProxy/Nginx act as Ingress Controllers, not Ingresses. Ingresses are the objects created by users to define an intent of L7 traffic forwarding/ingress
853.
▲
by
q3k
6y ago
GKE (K8s on GCP) does come with an ingress controller that is backed by GCP/GCE load balancers.
854.
▲
by
q3k
6y ago
The server doesn't need to store the certificate, or even a mapping from certificate to identity. Just retrieving information encoded in the DN or SANs of a certificate presented by a client is enough to tie the connection originator&#
855.
▲
by
q3k
6y ago
Same with protobuf JSON serialization (oneof, enforcing exactly one field of many is set). But I think the authors were focused on using the shorted possible serialized JSON, no matter the implementation difficulty cost and the inability to
856.
▲
by
q3k
6y ago
I agree with your points :). IIUC the 'JSON polymorphism' exists _to_ support handles - so that a field `foo` may either contain directly an object as data, or a string as a handle to that data.
857.
▲
by
q3k
6y ago
Doesn't that issue come from the fact that OAuth2 state mostly lives in GET URL data (redirects/callbacks) and request headers (bearer tokens), vs. POST body (which is something OAuth3 does seem to get right)?
858.
▲
by
q3k
6y ago
But with the current spec, IIUC, it's up to the AS to provide handles for future client reference - so the burden of allowing for smaller requests in the future falls on identity provider software, not the client. And when a side '
859.
▲
by
q3k
6y ago
It means sometimes you'll get: { foo: { bar: "baz" }} and other times you'll get { foo: "something else" } Good luck!
860.
▲
by
q3k
6y ago
This is exactly how TLS client certificates work - except that instead of the server storing the public keys of clients, the clients present a cryptographic proof generated by the server/CA that they represent some identity (ie., a cer
861.
▲
by
q3k
6y ago
Yeah, I really don't get the Handle concept - what is this attempting to solve? Dooes anyone know where can I read up on the design decisions that lead to this? This seems to introduce tons of implementation pains (statefulness, cache
862.
▲
by
q3k
6y ago
This is a good observation. Some of the best codebases I’ve worked with are the ones whose authors insisted on keeping things easy to modify or remove (not by introducing unnecessary abstraction, but by simplifying things as much as possibl
863.
▲
by
q3k
6y ago
Yet, Go’s net/http client/servers are fully production ready. This can be done right. Being able to just use them without having to follow the newest trends in a language’s ecosystem is a huge cognitive burden off my mind.
864.
▲
by
q3k
6y ago
As coined by Google engineers: software engineering is programming integrated over time. Languages that are paragons of cutting edge PL research unfortunately tend to forget that. Go’s simplicity tends to be brought up as a negative trait (
865.
▲
by
q3k
6y ago
Wire: open source (AGPL server/clients), can self-host, available as a public cloud service (free for user-to-user comms, paid for orga comms). Disclosure: worked for them.
866.
▲
by
q3k
6y ago
State mandated filtering will affect you regardless of physical medium. Running radio will not make it especially harder. If they want to get you, they'll either impose laws, or send people knocking down your door. They don't need
867.
▲
by
q3k
6y ago
Who physically cuts provider fiber as a way to intentionally censor or sabotage the Internet?
868.
▲
by
q3k
6y ago
I know. I've never advocated for using VPN providers as a valid way to get Internet privacy.
869.
▲
by
q3k
6y ago
How would these people using (HAM) radio links to provide Internet access be, in the long term, different from existing ISPs?
870.
▲
by
q3k
6y ago
China doesn't have to control/centralize all of the internet - just enough that the vast majority of people cannot access content that cannot be policed. VPNs still very much work and are used by tech savvy there - but they are ef
More ›