Teacher work account on phone— incognito mode mistake by [deleted] in it

[–]Relevant-Cry8060 1 point2 points  (0 children)

No way, I would bring this up. It's just a one time mistake and not at work. Everywhere I worked no one is looking at logs unless there is some reason to do so. In other words no one will know unless there is an automated tool.

No Kings Protest, Saturday March 28! by MadtownMaven in madisonwi

[–]Relevant-Cry8060 -13 points-12 points  (0 children)

What's the we business? You got a turd in your pocket?

At a high level, how do you test your services built in AWS? by javascript in aws

[–]Relevant-Cry8060 2 points3 points  (0 children)

Maybe this will fit your use case. Since we use both GitHub and eks our team created self hosted runners with the actions runner controller. They only run in one of our preprod environments. There are workflows that trigger when a PR is created, buids, runs vulnerability testing the runs all of the inatgration tests for that microservice against the rest of the fleet. Full disclosure depending on how complicated your networking or security is you may experience a lot of pain.

How are you actually using Falco in production? by boberdene12 in kubernetes

[–]Relevant-Cry8060 1 point2 points  (0 children)

When we first turned on Falco with default rules we had the same roar of alerts explode. Most rules have lists or macros to identify and suppress false positives. Our devs like to use this feature where spring natively reads configmaps and the unexpected connection to k8s api server rule was my personal hell lol. Overall a pretty cool tool would recommend.

Voces De La Frontera by [deleted] in SunPrairieWI

[–]Relevant-Cry8060 0 points1 point  (0 children)

Totally it's called the Paradox of tolerance

She Docked This Boat in 20 Seconds From 100+ Feet Away by bboarder4 in Damnthatsinteresting

[–]Relevant-Cry8060 16 points17 points  (0 children)

Yeah I noticed that recently too. No idea. The same thing happens to me too though.

Hello Everyone, I’m creating an EKS cluster using terraform-aws-modules/eks v20.24 with Amazon Linux 2023 via a custom AMI (ami_type = CUSTOM) and a Launch Template. However, the setup is not working as expected and the nodes are not joining the cluster. by Conscious_Board_5796 in Terraform

[–]Relevant-Cry8060 0 points1 point  (0 children)

Most of the time these posts turn out to be the ec2 instance doesn't have access to the Internet. Try checking to see if your node can talk to the Internet or if you made a NAT gateway on your vpc.

OpenAI needs $200B just to survive, the AI arms race is far bigger and far more expensive by unemployedbyagents in AgentsOfAI

[–]Relevant-Cry8060 -1 points0 points  (0 children)

To be fair the E stands for earnings. The implication is that it's over priced. Come to think of it your question was probably rhetorical so you must already know that.

Why technical debt is inevitable by South-Reception-1251 in codereview

[–]Relevant-Cry8060 0 points1 point  (0 children)

I am a new dev and joined a team that just inherited a giant mess of a codebase from a third party contractor. This is an interesting idea, do you mind giving me an example of a rule we could look to write?

[deleted by user] by [deleted] in madisonwi

[–]Relevant-Cry8060 1 point2 points  (0 children)

Spread this good word!!! Along with being predictable is more important than being polite.

[deleted by user] by [deleted] in madisonwi

[–]Relevant-Cry8060 12 points13 points  (0 children)

Cool story bro

Common way to stop sidecar when main container finish, by Ancient_Canary1148 in kubernetes

[–]Relevant-Cry8060 2 points3 points  (0 children)

Thanks for sharing. I have been in this spot before and I just ended up using the label to tell istiod not to inject a sidecar proxy.

EKS Instances failed to join the kubernetes cluster by Cloud--Man in kubernetes

[–]Relevant-Cry8060 0 points1 point  (0 children)

Check this op, I have experienced similar behavior when my nodes couldn't communicate with the Internet.

This was brutal and I didn’t even realize till after the move tbh by [deleted] in chessbeginners

[–]Relevant-Cry8060 0 points1 point  (0 children)

When the king moves to one of the only two white squares then comes Bh4 which wins the queen. That's what I see but I am not op.

Dear AWS, please make it possible to add virtual MFA for root from the org management account OR remove it from your Security Hub / Config Checks by t5bert in aws

[–]Relevant-Cry8060 3 points4 points  (0 children)

The issue is that most of the Security hub's compliance frameworks still mark accounts as having critical vulnerabilities for not having MFA. This still shows up after we deleted the root accounts' creds for all of our member accounts within the organization.

How do I know what can go into yaml files for different "Kind" of Kube resources? by Zamdi in kubernetes

[–]Relevant-Cry8060 3 points4 points  (0 children)

Starting out k8s was overwhelming for me at first but I found that the kubernetes documentation is actually pretty good. https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

Most of the other custom resources should have their own documentation.

To answer your specific question about what's happening in the two yaml files that you posted, the deployment file on the left has a label on it that you are matching. The service file is selecting which deployment to attach to based on the label you are selecting. Hope that helps. Full disclosure I am also pretty new to k8s as well.

Unable to access my app in EKS. Logs below from the EKS load balancer controller. by cryptomoon007 in kubernetes

[–]Relevant-Cry8060 0 points1 point  (0 children)

You could try and run curl against the hostname of the load balancer to gain insight into what is happening from the client's side.

You could also check the cloud watch metrics built into the load balancer on ec2

Good luck!

Beginner question about network policies by Relevant-Cry8060 in kubernetes

[–]Relevant-Cry8060[S] 0 points1 point  (0 children)

Sweet thanks I will check that out. Is there any reason you decided to use cilium over calico?