jnardiello

Mate, I've been working in this space for long enough to know exactly what I'm talking about.

Podman, Buildah, Skopeo and Crun are ALL redhat projects. OSS = Open code (ok) + Open Governance (not ok). In the "containers" org there are currently 23 maintainers, 99% RedHat employees (with a few indies - you always want students contributing for free). This is a great example of enterprise OSS shitshow, whereas a large org register a fake org on github with an intended "open" name - but keep close control on the governance of projects and tries to push (implicitly) its technological stack as a standard.

Disclaimer: I fucking hate enterprise vendors.

As an opensource lover, you gotta appreciate redhat registering a "containers" organisation with rh-only maintained projects. True OSS philosophy at work here!

don't! I happen to know them in person: they are super nice and super knowledgable!

No worries, this is a simple web-based UI - maybe you want to check out a more complete solution like Styra?

Not related to OPA. This is not an admission webhook, nor deals with gatekeeper and such, it does not enforce policies. It's a simple abstraction on the certs creation mechanisms and native Kubernetes RBAC.

Entirely different use-case. This is a simplified way to create new users, templates and distribute certificates to access a cluster. It does NOT integrate with external ldaps/ad/etc..

You are entirely correct, we started this project as an internal tool to be used in any environment where no integration with IAM/OIDC/LDAP/AD/etc.. was available (we handle LOTS of clusters and many of them are in this situation).

So, this is mostly recommended (as you said) for smaller projects/teams/orgs but we figured out this would still be useful to many so we just open sourced it.

It's also entirely true that you can use it in any cluster, as Kubernetes under the hood does NOT have any concept of "user" it's just a bunch of certificates with some roles attached, so you can actually deploy it anywhere and you can use to release certs on the fly for your users.

As for gitops, that's a great questions we got asked a few times today. It's just no there right now, this is a nice web ui wrapping RBAC primitives. We'll surely be working on it soon.

Hopefully, this was clear. Let me know if you have more questions.

My biggest problem with Slack is: how do we make it fit with tickets and the normal workflow? Also, if you don't reply real-time to customers you actually frustrate them.

State-sponsored universal coverage: "that's for commies! Not acceptable!"

Silicon Valley VC-based universal coverage sponsored with crowdfunding: "wooooho that's super great! I love technology"

I would laugh if It wasn't for the milions not being able to afford basic healthcare.

Right of using facebook, Right of selling your data to Silicon Valley VCs. Market is getting saturated, emerging markets are new targets.

"Container orchestration":

1. Kubernetes, me: uhm, ok

2. Terraform, me: WTF

Agree, garbage article.

Very very very strange. CS is exploding and everyone is hiring. Where are you based? Can you be more specific on what you would like to do? We are hiring - interns/junior too :)

I don't think Breivik is by anyhow a good base line for analogies.

Empathy in what sense? Not taking someone who is "suicidal" in such a direct way?

And surprisingly I completely agree on this.

I don't even know honestly where to start.

1. "as someone who is atheist/nihilist/suicidal". Describing yourself as suicidal is not a great introduction, go and see a doctor. Self-termination is not a "normal" feeling.

2. "I see no reason not to put down humans who have malfunctioned" - See point 1. Also, non third-world countries should have a justice system which would aim to recover individuals instead of "putting them down" or "making them pay/suffer". You might be stuck during middle-age if you think otherwise.

3. "There's enough effort to focus on progressing those who do buy into constructivism; those who don't wish to participate should exile themselves from society rather than lash out in deconstructivism" - again I don't even know where to start. Like if life was not difficult. Such a superficial view on life.

Or in Italy. As you start to go solo, expect to spend 30-50% of your time dealing with paperwork and kafkian bureaucracy

Please do, I would really love to know the details.

They don't seem to have any sort of status page nor direct contact with their ops team.

This is both crazy and frightening. What bothers me the most is that all these situations seems to happen randomly, with no way of knowing in advance if you are going to pass the custom or held in custody. As a european I have an open question to everyone in the US: what the hell is happening over there? Is everyone going crazy? This is going well beyond the whole "trump situation", It feels americans are scared by anyone getting into the country. Such a shame.

WHAT IF they did it on purpose? Knowing they were running out of time and didn't have a convincing ad they went for airing a completely meaningless one so that later one they could write this post-mortem gaining traction on communities that are far more relevant for their audience such as HN?

I know it sounds a bit pretentious but that would be a pretty smart move to reduce the damage while preserving the brand overall identity.

As a EU citizen living where guns are essentially banned (in 30yrs I've seen a gun only once - excluding law enforcement) I'm equally scared by both guns and terrorism. Just to outline that the feeling mentioned in the title can be different given your background and social environment.

I'm very heavily working with k8s and while what you say is definitely true, I'm not too bothered by what I have to configure (aka stuff I can control directly). What I really dislike is stuff on which I have no direct control and that's the main problem with k8s. Lot of stuff "just works", with little-to-no documentation on what are the pieces concurring to make it work nor how it is configured.

The 'it just works' approach might be great with simple scenarios, but it's horrible for complex use cases where you need to have detailed control over the pieces that will run in production and - once they are properly setup -, you would anyway automate accordingly your specific usecase.

Hence my: "Additional hidden complexity doesn't seem to be a good thing in this case".

Beside that, I really have no idea about what they specifically mean with "Kubernetes-based PaaS". What is it? Abstracting kubernetes cluster setup? If this is the case, i remark that I need more fine-grained access on the internals rather than additional abstractions that internally do "god-knows-what".

I literally have no idea what this does. It doesn't make any sense. Even guessing, adding hidden complexity on top of k8s doesn't seem a good idea.

Transfer 1% to their personal accounts in Bahamas and puf - disappeared.

But the idea that catching a bug in production is a huge problem is a myth

You clearly have never worked in fintech, banks or payments. I personally witnessed the moment we catched a race condition which costed the company n-k euros in missed transactions.

And this isn't even considering mission critical software where bugs can (literally) kill.

Insane. In your case, I'm glad your dad was misdiagnosed for the good. I can't imagine how this misdiagnose impacted your life and your family during the last few years.

Same situation in Italy. Unfortunately. Anyone wanting a be euthanised has to travel Switzerland, which is not always feasible at end-of-life (also considering that the whole procedure costs ~20k$).

I spent my civil service as an EMT and only once I saw a doctor giving the daughter of a terminally ill woman a piece of advice I will never forget (this woman was in such bad conditions, she simply wasn't there anymore and spent 100% of her time with morphin-induced allucinations): after giving her the morphin prescription he told her that "nobody is going to go behind you if you give her an overdose" - implying that she could end her suffering but she had to be the one killing her.

It was by far one of the hardest moment of my life, and I was just a passive witness. It was just brutal.

I might be wrong here, but using brew will NOT remove git shipped with xcode, so you are still vulnerable.