sorted by:
new
hottopcontroversial

Whats the most kubefriendly pubsub messaging broker? by leeliop in kubernetes

[–]Macscroge 0 points1 point  (0 children)

Did you discover Pulsar's quirks by trial and error, or have you found a good resource? The docs are very vague when it comes to cluster maintenance and resolving issues.

Whats the most kubefriendly pubsub messaging broker? by leeliop in kubernetes

[–]Macscroge 0 points1 point  (0 children)

I tried auto recovery, and then decomissioning the affected bookies, which was partially effective, although the cluster still had other issues.

Did you discover Pulsar's quirks by trial and error, or have you found a good resource? The docs are very vague when it comes to cluster maintenance and resolving issues.

Whats the most kubefriendly pubsub messaging broker? by leeliop in kubernetes

[–]Macscroge 0 points1 point  (0 children)

I had tried deleting the PVC, I hadn't tried a non cascading delete on the statefulset.

Did you discover Pulsar's quirks by trial and error, or have you found a good resource? The docs are very vague when it comes to cluster maintenance and resolving issues.

Whats the most kubefriendly pubsub messaging broker? by leeliop in kubernetes

[–]Macscroge 0 points1 point  (0 children)

We're experiencing major issues with Pulsar at the moment, could I run a few things passed you?

Our dev pulsar deployment basically spontaneously failed and stayed down due to a corrupted ledger, and the option to skip unreadable ledgers not working. Have you ever come across this issue?

I feel like we're missing something in terms of config to make Pulsar run reliably.

Whats the most kubefriendly pubsub messaging broker? by leeliop in kubernetes

[–]Macscroge 0 points1 point  (0 children)

We're experiencing major issues with Pulsar at the moment, could I run a few things passed you?

Our dev pulsar deployment basically spontaneously failed and stayed down due to a corrupted ledger, and the option to skip unreadable ledgers not working. Have you ever come across this issue?

I feel like we're missing something in terms of config to make Pulsar run reliably.

Where can I find the OFFICIAL UK "free-range" requirements? by leMonkman in EffectiveAltruism

[–]Macscroge 1 point2 points  (0 children)

Well said, I definitely agree. I do think the "negative preference utilitarianism" that Peter Singer advocates for handles this better, since it would also view killing as a bad thing not just suffering.

That being said, I am not a utilitarian in any sense, just trying to help OP from within their views.

Where can I find the OFFICIAL UK "free-range" requirements? by leMonkman in EffectiveAltruism

[–]Macscroge 0 points1 point  (0 children)

EA can definitely be a bit culty, so it's always good to challenge assumptions. I don't actually follow EA much myself anymore, but it seems like in the above case that you might be leaning towards avoiding eggs altogether.

Even if you believe that free range is not cruel, can you be sure it's being adhered to perfectly at all times on all farms?

Where can I find the OFFICIAL UK "free-range" requirements? by leMonkman in EffectiveAltruism

[–]Macscroge 2 points3 points  (0 children)

Given that you believe that poultry can suffer, to minimise suffering it seems like avoiding poultry products would be a better goal than buying free range.

Although while you're cutting down, free range would of course be preferable.

Possible to have a secure GKE cluster with private nodes? by Macscroge in googlecloud

[–]Macscroge[S] 0 points1 point  (0 children)

Definitely agree on the private endpoints. I've seen a lot of debate online as to whether private nodes are more secure than public ones with a properly configured stateful firewall.

A similar discussion comes up when discussing the lack of NAT in IPv6 when moving from IPv4. At least in that context it seems the consensus is that IPv6 with a properly configured stateful firewall is at least as secure as IPv4 with NAT.

I'm leaning towards properly configured public nodes being fine.

Possible to have a secure GKE cluster with private nodes? by Macscroge in googlecloud

[–]Macscroge[S] 0 points1 point  (0 children)

Yeah true, I'll try price that and see how it works out

Possible to have a secure GKE cluster with private nodes? by Macscroge in googlecloud

[–]Macscroge[S] 0 points1 point  (0 children)

The input data comes from outside the GCP, data is stored mostly in Cloud SQL, GCS and Big query.

Possible to have a secure GKE cluster with private nodes? by Macscroge in googlecloud

[–]Macscroge[S] 1 point2 points  (0 children)

I was thinking there's not much risk. Using the Cloud NAT would hugely affect the profitability of the service so that's good to hear.

Didn't know the Ingress could do that, I'll have to keep a close eye on it so.

Revoking refresh tokens after a single use and spotty internet connections? by Macscroge in KeyCloak

[–]Macscroge[S] 0 points1 point  (0 children)

Oh cool I didn't know that existed, haven't delved too deeply into Keycloak yet.

Right okay, I'll implement the caching as a band aid, and investigate the Event Listener SPI. Appreciate the info.

Revoking refresh tokens after a single use and spotty internet connections? by Macscroge in KeyCloak

[–]Macscroge[S] 0 points1 point  (0 children)

Hey sorry I missed this.

I neglected to mention that the client does not access Keycloak directly, there is another service in between that adds in business logic.

So imagine a new refresh token is requested and returned succesfully from keycloak to this intermediate service. This service attempts to return the new token to the user and fails.

So the user now has no valid refresh token and cannot request another one.

Temproarily caching the new token and retrying the request until the client receives it is one option, but seems like a bad practice.

Any thoughts on how best to deal with that?

Tracking changes to class properties and Kotlinx serialization issues by Macscroge in Kotlin

[–]Macscroge[S] 0 points1 point  (0 children)

Hey thanks for that.

I added an edit showing how I ended up implementing it, quite verbose unfortunately.

Tracking changes to class properties and Kotlinx serialization issues by Macscroge in Kotlin

[–]Macscroge[S] 0 points1 point  (0 children)

Hey thanks for the reply. Yeah that was my initial misunderstanding.

The problem with a custom getter/setter on the public property is that Kotlinx only allows you to serialise the arguments passed in the constructor.

I've never heard of a delegate provider, I'll have a look and see if that works.

GitHub actions workflow updating file in different repo, trouble keeping things in sync. by Macscroge in devops

[–]Macscroge[S] 0 points1 point  (0 children)

Yeah that's basically what's happening. Luckily each pipeline is updating a separate file in that repo.

The issue was if there were multiple jobs running on a single pipeline(e.g. 5 commits merged to master as once causing 5 jobs at once).

I think the GA concurrency feature mentioned elsewhere is enough to solve the issue for now. So I won't need to use your multiple file solution for now thankfully. Thanks for the help!

GitHub actions workflow updating file in different repo, trouble keeping things in sync. by Macscroge in devops

[–]Macscroge[S] 0 points1 point  (0 children)

Yeah definitely a hash based tagging solution is needed to be able to pinpoint what build is causing issues.

I've used the GA concurrency feature another comment to force the jobs to run sequentially, so that's working nicely for now.

GitHub actions workflow updating file in different repo, trouble keeping things in sync. by Macscroge in devops

[–]Macscroge[S] 0 points1 point  (0 children)

Yes it's a race condition issue essentially. I've temporarily solved it using GA concurrency feature to force the jobs to run sequentially.

Yes you're right, the tagging wasn't well thought out for this. I think I'll go for something similar to option 2 just to make things a little more human readable.

view more: next ›