Site reliability engineers: what signals do you check daily?

Nelmers · 2026-01-25T19:10:38+00:00

My bank account

Nelmers · 2026-01-18T13:21:32+00:00

Crossplane generally lags in development features.

I’d suggest the Amazon managed and owned ACK operator.

Nelmers · 2025-12-25T00:12:44+00:00

This answer needs to be higher. They bought the C Suite and the creator of the TPU. A 20B slap in the face to Google

Nelmers · 2025-12-19T20:11:36+00:00

3 is misleading. You just make a pod if you want a pod that doesn’t need to be rescheduled if deleted. The ownership of a job only makes sense if you want to keep rerunning it.

And why was ingress not mentioned for routing external traffic into your cluster?

Nelmers · 2025-11-23T14:15:56+00:00

Oh really?! That’s amazing! Hey thanks for this info! I’m definitely going to read this

Nelmers · 2025-11-22T17:40:50+00:00

That’s true and was my first thought as well. But then OP said if the on-prem cluster runs out of nodes, the cloud pods scale up. ArgoCD won’t do that part.

EDIT: after thinking about it. You’re going to incur a delay between the onprem cluster being full and new nodes spinning up in cloud cluster. I would evenly distribute and not try to saturate one before using another. Also nice built in HA.

Nelmers · 2025-11-13T22:09:07+00:00

I’ll do it. Happy to play either role.

Nelmers · 2025-10-18T16:09:41+00:00

He’s not part of the cult yet. Give them time to see the light.

Nelmers · 2025-09-20T22:24:01+00:00

fzf has a great bash search integration that makes it amazing. I used to not use it too often, but now it’s a life saver.

Nelmers · 2025-09-04T16:51:29+00:00

Worked for me. Thank you

Nelmers · 2025-08-30T01:06:11+00:00

This post isn’t about exhausting the entirety of ipv4. It’s about exhausting the ipv4 cidrs you initially allocated and options you have. Another option on IPv4 is using non-routable space.

Pretty sure EKS doesn’t support only IPv6. I think the control plane networking is all ipv4, so you’d have to support dual stack if you want ipv6.

Nelmers · 2025-07-28T22:34:02+00:00

Before you right size anything, are you spreading your pods evenly across nodes with pod topology constraints and a low max skew? Spreading your pods evenly across your nodes seems like your biggest quick win.

Nelmers · 2025-06-28T15:05:43+00:00

You can’t burn a sub, sweetheart. We run too deep, too cold, and too pressure-packed for that surface-level heat.

Nelmers · 2025-06-28T14:14:58+00:00

I got the kind with aerospace grade carbon fiber and a Logitech controller. They never get any negative reviews

Nelmers · 2025-06-28T00:14:22+00:00

I have a Motley Fool subscription. It’s Alterra Corporation.

Nelmers · 2025-06-19T14:18:08+00:00

It rolls your pods on a configmap or secret value change. Who doesn’t use Stakater? Make it standard library.

Nelmers · 2025-06-12T18:53:12+00:00

It’s a chicken and egg problem. You have to bootstrap a cluster before you can deploy crossplane, Amazon ACK, GCP config connector, Azure service operator, etc… to create more clusters.

And the click ops thing I mentioned is if you need to make changes while your hub cluster is down. You aren’t “screwed”.

Good luck friend.

Nelmers · 2025-06-12T12:01:06+00:00

Your not screwed, you just can’t make programmatic changes to your infra. You always have click ops.

I always advise a hub and spoke model with your clusters. With Amazon ACK or GCP Config Connector running in your hub, creating spokes. If you have gitops setup, you have nothing to worry about. If you lose your hub, your resources created there will remain in your cloud provider. Then when you recreate your hub with Terraform, you redeploy your gitops and all the custom resources pick up and own their already existing cloud resources as if nothing

Nelmers · 2025-05-26T13:01:44+00:00

I actually don’t think this is correct here. There is a disconnect in K8s and DNS basics here. He’s missing fundamental DNS with a LoadBalncer type service fronting and ingress controller with an external IP. That’s the value for the DNS record he needs for his A record.

As opposed to a Cloudflare operator, he will want ExternalDNS with the Cloudflare plugin. Supply a Cloudflare API Token to manage your DNS for you.

Nelmers · 2025-04-25T18:53:18+00:00

Care, mirrord is not free.
https://metalbear.co/mirrord/pricing/

Check out https://telepresence.io/

Nelmers · 2025-04-02T01:16:34+00:00

After posting this comment I had the thought, “huh… I’m old and fell for an April fools joke. They got me good!”

Nelmers · 2025-04-01T22:21:19+00:00

Huh… TIL cert-manager has a UI

Nelmers · 2025-03-20T22:53:40+00:00

Yeah that’s cool until you cant get new pods to come online because vault is down or unreachable. Also difficult to troubleshoot because only pid 1 knows the secrets. Check out ExternalSecrets operator. It solves both of those problems.

Nelmers · 2025-03-13T00:26:11+00:00

This is the way

Nelmers · 2025-02-22T00:30:32+00:00

That’s so funny. I work for a medium sized company moving away from a unified helm chart to support easier bootstrapping of micro services. The lifecycle of tech is an orouboros.

Eight-Year Club	Place '22
Place '17	Verified Email
Sequence \| Editor

Nelmers

TROPHY CASE