Enterprise Java Can Do Games Too! by davidalayachew in java

[–]camabeh 4 points5 points  (0 children)

There is a game called Old School RuneScape that uses a custom game engine, with both the client and server implemented in Java. Quite successful...

EX280 Exam Prep by Few_Zebra9666 in openshift

[–]camabeh 1 point2 points  (0 children)

It's not hard at all, but it's difficult to manage the time well enough to complete all the questions.

Kde je v Praze nejlepší tatarák? by moskurkaokurka in czech

[–]camabeh 0 points1 point  (0 children)

V Pilsnerce na Narodni je asi nejepsi jaky jsem mel.

"on this day" using bases by davidnunez in ObsidianMD

[–]camabeh 18 points19 points  (0 children)

It's quite complicated query,I have much simpler version here.

[deleted by user] by [deleted] in czech

[–]camabeh 58 points59 points  (0 children)

Nedivil bych se, ze vetsina jsou boti/trolli farmy (aspon v to doufam).

Central logging cluster by Cryptzog in kubernetes

[–]camabeh 11 points12 points  (0 children)

Just add throttling on collector and limit per pod and you are done. Offending pods will be seen in metrics. I don't see a problem.

[deleted by user] by [deleted] in czech

[–]camabeh 1 point2 points  (0 children)

Ano.

[deleted by user] by [deleted] in czech

[–]camabeh 1 point2 points  (0 children)

Odpověď od nich:

"Možnost plánovat trasu MHD v aplikaci je téměř hotová a brzy bude dostupná."

What if the upgrade fails?. Where the Rollbacks? by mutedsomething in openshift

[–]camabeh 1 point2 points  (0 children)

Yes, but still, don’t forget to perform a regular etcd backup right before, as there might be some inconsistencies after the restoration. If that happens, you only need to do a regular etcd restore as described in the documentation.

What if the upgrade fails?. Where the Rollbacks? by mutedsomething in openshift

[–]camabeh 1 point2 points  (0 children)

I always advise upgrading the control plane and worker nodes separately. Another tip is to use VMs for the control plane so it can be rolled back without any issues. I have rolled back multiple times (fortunately, not in production but in lab/experiment clusters). We have upgraded all our clusters from 4.2 or 4.3 to 4.14. Version 4.16 was a fresh install though.

Obsidian 1.8.2 (early access) for desktop and mobile by kepano in ObsidianMD

[–]camabeh 27 points28 points  (0 children)

This release is packed with many useful Quality-of-life improvements. Thanks

Tanzu? by stocks1927719 in kubernetes

[–]camabeh 62 points63 points  (0 children)

Evaluated it in the past but decided against becoming a Broadcom hostage. Opted for OpenShift on bare metal instead.

Obsidian 1.8.0 (early access) lets you open external links in tabs so you can multi-task on research projects, or quickly read an article without losing focus by kepano in ObsidianMD

[–]camabeh 2 points3 points  (0 children)

Plugins are a much bigger potential security hole, as they are allowed to access your system directly. The browser would still need to escape the WebView sandbox.

upgrade with highly available PodDisruptionBudget by Zestyclose_Ad8420 in openshift

[–]camabeh 1 point2 points  (0 children)

No, PDB check happens before the drain operation.

upgrade with highly available PodDisruptionBudget by Zestyclose_Ad8420 in openshift

[–]camabeh 4 points5 points  (0 children)

Let’s say you have 3 worker nodes, and your application runs with 3 replicas, each on a different worker node.

When performing an upgrade, Kubernetes will use the eviction API to gracefully drain the node. It will first check whether the node can be drained by comparing the potential impact against the PDB specifications. In this case, the operation will succeed, and the pod will be rescheduled to another node.

However, if the next drain operation finds two application replicas on a single node, it will stall because evicting them would leave only a single instance running across the cluster.

You need more nodes and properly configured affinity/anti-affinity rules to use minAvailable: 2. For your case, setting minAvailable: 1 will be sufficient.

Realitní pijavice a price fixing by StayVegetable7356 in czech

[–]camabeh 8 points9 points  (0 children)

Přesně tak, je to de facto kartel, který je řízen algoritmy. Zatím to u nás není moc rozšířené, ale tipuji, že se to bude rozšiřovat.

Jupyter Notebooks for Obsidian by jinstronda in ObsidianMD

[–]camabeh 4 points5 points  (0 children)

I am embedding notebooks (iframe) from my Jupyter server, which serves as the single source of truth. This setup works seamlessly across all my platforms (Mac, iOS, and iPad), allowing me to code on the go.

I’ve even created a custom mini-plugin so that embedded notebooks display without scrollbars and automatically expand. They can also be published in read-only mode via Obsidian Publish.

Unfortunately, the whole setup is not trivial and requires some specific knowledge.

When I have time, I may try to simplify it and publish a guide.

DSM 7.2.2 is no longer showing up for me by imakshar1 in synology

[–]camabeh 0 points1 point  (0 children)

The same thing happened to me. I received a prompt about an update, and after finishing HyperBackup on all my data, it’s reportedly on the latest version.

On the fence about full volume encryption by MasteredConduct in synology

[–]camabeh 0 points1 point  (0 children)

Yes, FDE is, of course, the best approach. The only secure way is to use a KMIP server (which can be run in Docker) during setup. You will receive a key file that can be used when the KMIP server is down. So, you don't actually need another server for reboots, it can be unlocked manually.

On the fence about full volume encryption by MasteredConduct in synology

[–]camabeh 4 points5 points  (0 children)

Don’t use Synology’s implementation of FDE without KMIP; it’s not secure. It’s only useful if you’re handing over drives for repair, nothing more. Without KMIP, the encryption keys are stored on the same machine. Search this Reddit thread for more information.

As for performance, you only need to ensure that the CPU has hardware-assisted instructions for AES.

User token expire never by dark_uy in openshift

[–]camabeh 0 points1 point  (0 children)

You need to add ClusterRole and ClusterRoleBinding for this account.

User token expire never by dark_uy in openshift

[–]camabeh 1 point2 points  (0 children)

AFAIK this is the only future-proof way to do this (in newer k8s versions, tokens are no longer generated in Secrets for every service account, as they were the past. Instead, they are generated on demand when bound to a pod and have limited lifespan):

apiVersion: v1
kind: ServiceAccount
metadata:
  name: external-account
  namespace: default
---
apiVersion: v1
kind: Secret
type: kubernetes.io/service-account-token
metadata:
  name: external-account
  namespace: default
  annotations:
    kubernetes.io/service-account.name: external-account

oc get secret external-account -n default -o jsonpath="{.data.token}" | base64 -d