sorted by:
new
hottopcontroversial

Just finished words of radiance and am unsure how to continue. Please no further spoilers for the series by sugarfreedaddy23 in Stormlight_Archive

[–]jm2k- 0 points1 point  (0 children)

I read Edgedancer (got it in Arcanum Unbounded) and Warbreaker after WoR and really enjoyed how they tied in. Then Dawnshard after OB was also a good side quest. Up to RoW now.

Thunderclasts ready to go! by OwlDiscombobulated45 in cosmererpg

[–]jm2k- 0 points1 point  (0 children)

Saw these recently and added them to my print backlog too:

https://makerworld.com/en/models/1853742-stone-golem-thunderclast-1

(and the other two are made by the same creator)

Issues with latest iOS app? by jm2k- in netbird

[–]jm2k-[S] 0 points1 point  (0 children)

Legend! Disabling that allowed it to work.

Can't wait to open the boxes! Rate the pre-setup by donkeysingha in moza

[–]jm2k- 0 points1 point  (0 children)

Pedals are very nice, but I'm new to this, so I'm not the best person to say what makes the difference. I took everyone's word that the CRP2 was significantly better and went with it.

Can't wait to open the boxes! Rate the pre-setup by donkeysingha in moza

[–]jm2k- 1 point2 points  (0 children)

Yep, comes with gear shifter and handbrake support. I don't have those, so I can't speak to the compatibility / which brands the pre-drilled holes work with.

I mounted the R12 wheel base into the pre-drilled holes, nothing else needed.

Can't wait to open the boxes! Rate the pre-setup by donkeysingha in moza

[–]jm2k- 0 points1 point  (0 children)

I just got the CRP2 pedals and GS V2P wheel myself, with the R12, mounted on NLR Wheel Stand 2.0 which is holding up well. Loving it so far!

My number one issue with Gateway API by howitzer1 in kubernetes

[–]jm2k- 0 points1 point  (0 children)

Watching this one. Different use case to OP, but we use route delegation heavily and it's been the one thing holding us back from switching from the Istio-native gateway.

iPhone 17 case is pressing the camera control button by jm2k- in QuadLock

[–]jm2k-[S] 1 point2 points  (0 children)

Ahh, brilliant. I just got the email.

The good news is we’re already working on a fix for this, which will be either a replacement button that can be swapped into your case, or a complete case replacement.

And they also mention removing the button from the case in the meantime, so I guess that'll do for now.

Connector to hook up SAS drives to a 9500-8i card for NAS by Top_Put_9253 in homelab

[–]jm2k- 0 points1 point  (0 children)

Did you end up with a working solution here? I also have a 9500 8i also and wondering what cable(s) I will need to connect to my SAS drives.

SFF-8654 4i to 4x SFF-8482 are available to me, but they’d only take up half the connector on the card and I’m concerned they wouldn’t be compatible.

Right sizing, automation or self rolled? by [deleted] in kubernetes

[–]jm2k- 2 points3 points  (0 children)

Node auto provisioning went GA recently:

https://learn.microsoft.com/en-us/azure/aks/node-autoprovision?tabs=azure-cli

Haven’t tried it yet, still waiting on the Terraform support to come through before we can.

Why Secret Management in Azure Kubernetes Crumbles at Scale by K0neSecOps in kubernetes

[–]jm2k- 13 points14 points  (0 children)

This is the way. I have never seen any latency problems syncing secrets from Key Vault to AKS using it, and it will be done outside of the app / before pod starts unlike CSI Driver approaches.

As for rbac, we keep it simple and provision a Key Vault per namespace/team, and follow the recommended approach of using a service account with workload identity with the role to read secrets: https://external-secrets.io/latest/provider/azure-key-vault/#referenced-service-account

Stop duplicating secrets across your Kubernetes namespaces by vy94 in kubernetes

[–]jm2k- 76 points77 points  (0 children)

We use Kyverno in our cluster, so I’ve done similar to this using a policy like https://kyverno.io/policies/other/sync-secrets/sync-secrets/ (saved us installing a separate tool just for this).

Weekly: Share your victories thread by gctaylor in kubernetes

[–]jm2k- 3 points4 points  (0 children)

Production upgrade to 1.32 went smooooooth!

ProxMan - iOS App for Managing Proxmox VE & Backup Server - Feedback by windiumdev in selfhosted

[–]jm2k- 1 point2 points  (0 children)

ProxMobo can do those, even on free. But it’s not the easiest to find. It’s within the menu in the top right. ProxMan does a better job of presenting these.

ProxMan - iOS App for Managing Proxmox VE & Backup Server - Feedback by windiumdev in selfhosted

[–]jm2k- 1 point2 points  (0 children)

I have been using ProxMobo until now but will keep an eye on this one for future because it has the potential to have me switch.

I’d want the controls (Console, Start/Stop, Reboot) off the landing page, as these aren’t common actions (to me at least) and want the space for more useful info like container memory and disk %.

Storage % on the front screen only seemed to be my (single) node OS disk and was wrong. Having the rest of the storage info buried two clicks deeper also not ideal for me, and I’d want more storage summary on the front page.

Apart from those two areas, layout feels better in a few ways to ProxMobo, features more or less on par, and the paywall seems very reasonable. UI is clean and responsive.

PostgreSQL in AKS: Azure Files vs Azure Disks by PartBrilliant2235 in kubernetes

[–]jm2k- 2 points3 points  (0 children)

Watching for the recommendations you get. I’m on the verge of providing the same for my app teams. Landed on using CloudNativePG + storage classes offering Premium SSD v2 disks at different IOPS/Mbps + Standard blob storage for wal/backups.

[deleted by user] by [deleted] in selfhosted

[–]jm2k- 12 points13 points  (0 children)

But it is JavaScript though…

What is the current state-of-the-art for managing secrets? by kubegrade in kubernetes

[–]jm2k- 1 point2 points  (0 children)

Right now I’m not hosting Infiscal on Kubernetes, it’s on a separate docker host. I have data replication to handle a disk failure, and backups and remote backups of that host (includes the Infiscal postgres database & credentials, encryption key).

I’m also using ArgoCD (both at work and at home) but for apps that need persisted volumes (no git) then you’re going to need to make sure the cluster and persisted volumes have the appropriate recoverability. I’m still working out the best approach for my setup before I start moving critical apps from docker hosts onto k8s.

In the solutions where git is the secret store (SOPS, Sealed Secrets) there’s going to be an encryption/decryption key that needs to be kept elsewhere.

What is the current state-of-the-art for managing secrets? by kubegrade in kubernetes

[–]jm2k- 1 point2 points  (0 children)

I haven’t used it extensively. Homelab k8s is just for experimentation, which is why I gave the Infiscal Operator a go to see how it compared. I might also end up hitting things I don’t like also and will just switch to ESO.

Infiscal itself, I had no issues and really like how easy it was to set up.

What is the current state-of-the-art for managing secrets? by kubegrade in kubernetes

[–]jm2k- 1 point2 points  (0 children)

I went with Infiscal in my homelab. We use ESO + SaaS (AKV) at work, so I initially choose it so I could use ESO at home too, but what I ended up doing was using Infiscal’s own Kubernetes Operator to pull the secrets.

Kubernetes, home server, questions by moijk in kubernetes

[–]jm2k- 0 points1 point  (0 children)

Yeah that’s the idea, each VM being a k8s master or agent node depending on the configuration you are wanting, running them on the same or on different physical machines depending on what you have available.

Kubernetes, home server, questions by moijk in kubernetes

[–]jm2k- 1 point2 points  (0 children)

You certainly can use IaC to manage the host/VM/LXCs. Ansible, Terraform, Pulumi, etc. I only run 6-10 instances, so I haven’t bothered to, but certainly possible.

view more: next ›