smarterclayton

23 ms·

181.
by smarterclayton 10y ago
Kubernetes for instance bind mounts secrets by default on read only in memory filesystems (and on Red Hat systems, with unique SELInux labels) that disappear on reboot. You can of course use secrets in env vars if you want, since sometimes
182.
by smarterclayton 10y ago
There has been some work towards having a bare metal IP allocator for metal (you route a subnet to the cluster and when someone adds a Service with type loadbalancer you get handed a magic HA VIP). Not yet in Kube, just OpenShift, but I th
183.
by smarterclayton 10y ago
To add to Eric's point - the goal over the long term is to flesh this stuff out and have both flexibility and multi-tenancy in Kube. OpenShift could be opinionated about security (no compromise) while for Kube we wanted to make sure we
184.
by smarterclayton 10y ago
Yes. PetSets are intended to be step one of "some things need to be stable and replaceable at the same time". So that unit can then be composed into apps (i.e. Zookeeper + Kafka might be a PetSet for ZK and multiple scale groups
185.
by smarterclayton 10y ago
Agree - better doc is a focus for us. We've added providers so fast the doc has not caught up.
186.
by smarterclayton 10y ago
Yeah, there's a fair amount of stuff going in and we aren't always consistent about what we turn on / off. In OpenShift we tend to be much more conservative (i.e. 1.3 OpenShift defaults controller volume attach to off, but t
187.
by smarterclayton 10y ago
I can speak from the OpenShift perspective (which is just Kube as far as storage is concerned): OpenShift Online and Dedicated (both hosted Kube/OpenShift) use AWS and EBS persistent volumes for elasticsearch and Cassandra storage, whi
188.
by smarterclayton 10y ago
PetSet co-author here: Think of PetSet as a design pattern for running a cluster on Kubernetes. It should offer a convenient pattern that someone can use to Do-The-Right-Thing. The hard part of clustering software is configuration change m
189.
by smarterclayton 10y ago
Disclaimer: PetSet co-author PetSets will probably be beta in 1.5. The problem with rushing PetSets is that the worst thing that can happen would be that we say PetSets are beta and then it eats someone's DB for lunch. The goal is to
190.
by smarterclayton 10y ago
Regarding secrets in builds, I think a long term goal would be to grow the number of ways of building Docker images (beyond just Docker build), and to make image builds more composable and more flexible. One example is the work we've e
191.
by smarterclayton 10y ago
Not really Google driving this, but there is active work on integrating the OCI runtime (the "standard" evolution of libcontainer from Docker, used in Docker 1.12) as a container runtime to Kube. The desire is to reduce some of t
192.
by smarterclayton 10y ago
There is a log of emphasis going on in Kube right now in making sure that there is lots of room for experimentation around container formats, tools, and architectures - while at the same time, trying to keep Docker working well at scale and
193.
by smarterclayton 10y ago
That mindset - being able to build all types of application on top of the "platform" - is why OpenShift rehosted itself on top of Kubernetes. Being able to compose building blocks and run higher level services (batch, applica
194.
by smarterclayton 11y ago
Agree (Kubernetes and OpenShift dev here) - OpenShift is actually bundled as a monolithic Go binary that contains the full Kubernetes stack and client, the Openshift admin client, user client, and js web console for exactly that reason (eve
195.
by smarterclayton 12y ago
Yeah, that's something the Ceph and Gluster teams have been working on to integrate with Kubernetes seamlessly (or at least, easily). The gluster core drivers for volumes landed recently, and self service service on demand FS is a goa
196.
by smarterclayton 12y ago
Yup. It's all about communities and building out on top of things that everyone finds value in. And we don't mind doing some of the boring work (testing, reliability work) to make those communities even more successful.
197.
by smarterclayton 12y ago
As part of OpenShift and Kubernetes we're building stack integration for Gluster, Ceph, NFS, iSCSI, and others into the core runtime environment (so you can on-demand provision storage at a cluster level). Micro services may not care
198.
by smarterclayton 12y ago
One of the lead developers here - this is a ground up rewrite. In brief, we felt that the Kubernetes process (pods and the way containers were grouped) model "felt right" - it was the right fundamental bedrock concept for running