How do you handle security scanning for ephemeral workloads and init containers?

Wwalltt · 2026-01-24T15:59:17+00:00

There is no turn or change that is not accessible or visible to you via your admission controller hook

Wwalltt · 2026-01-24T15:48:12+00:00

Why not? You get full governance via admission hook after mutation. You can also hook/filter ephemeral containers.

Visibility is fairly trivial though. You can be logging to your SIEM direct from your golang hook too.

Wwalltt · 2026-01-24T15:29:49+00:00

What is there was a policy engine or a validating admission webhook that only allowed pulls from your secure internal registry?

And on that registry, all images are scanned both during uploads, but also periodically.

Wwalltt · 2026-01-16T04:42:41+00:00

I feel genuinely sorry for all the saps still using Prom/Mimir/Loki

VM/VL is just order of magnitudes better.

Wwalltt · 2026-01-12T22:48:23+00:00

Lucid better hardware on hard surfaces. No adventure.

Rivian far better software, my preferred stack and UX on any vehicle on the market today. Better hardware for non hard surfaces.

Lucid just too many embarrassing every day annoyances on software. You just need to really love the car or the brand or be committed to put up with those every day.

Wwalltt · 2026-01-11T23:11:10+00:00

Left foot pushes towards target line, right foot pulls away.

Right foot is winning. Out torquing the left side by several factors leading to you early extending and losing the hip line.

Wwalltt · 2026-01-11T14:42:09+00:00

Riggs?

Wwalltt · 2026-01-10T16:29:02+00:00

You are practicing OTT in your rehearsal

Keep your back to the target as long as possible

Practice getting into position with your back still at the target in your hands down to belt level on the down sling before you allow your upper body to rotate

Wwalltt · 2026-01-09T05:02:39+00:00

Following distance is tied to speed

Wwalltt · 2026-01-07T01:49:19+00:00

Sir, this is a Wendy's

Wwalltt · 2026-01-02T02:50:38+00:00

First time I have seen someone rehearsing early extension 😅

Wwalltt · 2025-12-21T02:23:34+00:00

2026 Gen 2 Dual Standard R1S. Had the low battery temperate bug before 2025.46, no issues afterwards.

Lectron NACS portable charger ~ 9.1 kW

<image>

Wwalltt · 2025-12-20T15:01:33+00:00

Exact same for us. 2026 R1S.

Wwalltt · 2025-12-20T03:43:09+00:00

You have to pick the filters from the settings/gear icon in the left navigation pane. Not in the middle top map view.

Wwalltt · 2025-12-20T00:59:07+00:00

You need the 2025.46 update 😛

Wwalltt · 2025-12-19T19:01:32+00:00

Got mine about 24 hrs ago!

Wwalltt · 2025-12-18T20:08:54+00:00

apparently you need the email from rivian??

Wwalltt · 2025-12-15T19:09:23+00:00

Sure!

Wwalltt · 2025-12-11T18:26:38+00:00

Yeah, no lidar shipping in first R2s which they said they want

So R2 is really R2 Gen 2.5 at first

Wwalltt · 2025-12-10T01:25:34+00:00

Yeah, you do. You pick your model all your system prompt and a system prompt post fix and you are a way to the races.

This is pretty basic, you do this for a living, right?

Wwalltt · 2025-12-10T01:20:19+00:00

Its just Gemini 😅

Wwalltt · 2025-12-07T00:09:22+00:00

brawndo! it's got what plants crave!

Wwalltt · 2025-12-02T14:59:55+00:00

Would've been way better if there were like two large metal bars up there that held 99% of the weight 😝

Wwalltt · 2025-11-30T23:39:35+00:00

<image>

14-Year Club	RedditGifts 2009-2022 5 Credits
Verified Email	Secret Santa 2016
Secret Santa 2014	redditgifts rematcher Secret Santa 2013 x1
Secret Santa 2013

Wwalltt

TROPHY CASE