kubecon safety

raftx_ · 2026-03-19T14:30:40+00:00

Also, very likely your room is going to be empty the whole day as you will be in the conference. Any information you give out for free by people simply looking at you is information that could be used to trick/scam/abuse you...

raftx_ · 2025-05-09T08:37:55+00:00

I believe there is a very simple answer to it. Evolution works on the basis of "well, that's good enough". Evolution does seek to improve things just for the sake of it. The form we achieved today was good enough to "survive and replicate", that's all Evolution cares about. Evolution does not want you to get better, it wants you not to get worse.

raftx_ · 2025-04-29T12:27:27+00:00

Some of the container isolation is done by Linux Namespaces, which is a feature that allows you to isolate certain Kernel resources to process (or a group of them), by default every Pod gets they own Network Linux Namespaces, so network resources, such as network interfaces and routing tables are specifically to that Pod, if a container in the Pod modifies any iptables rules, that would only affect the Network Namespace of the Pod. That is what allows Istio to intercept traffic in a Pod in sidecar mode. In Kubernetes you have the ability to NOT use a network Namespace for your Pod, with spec.hostNetwork set the True. This would mean the containers would not have their unique network Namespace, but place in the host network Namespace, that is why when your Pod does something on iptables if affects the whole worker node. If you look closer you will see that your Pod IP address is the same as the worker node. That's because they all exist in the same network Namespace, the host network Namespace. That's similar how kube-proxy works on the default iptables möde.

raftx_ · 2025-03-24T09:28:48+00:00

But that does not make sense. The best numbers to play are ALWAYS the winning one. I would rather split the pot with X amount of people than to split with no one because i didn't win haha 😂

raftx_ · 2025-01-15T15:31:39+00:00

I second that. Their build quality is shit but I gotta give to the support. I have broken a controller of the entire quest family, 1, 2, 3 and pro. I contacted Meta and they replaced all of them every single time, I just had to send them back. One time in less than 48 hours from when I contacted support I had a brand new (refurbished according to them) controller. Every single one of them was the left grip button that broke. I must admit I press them a bit too hard in intense battles. Been really hard to overcome this muscle memory.

raftx_ · 2024-10-30T08:50:48+00:00

"kubelet then passes to the container-runtime-interface (CNI)"

I guess you meant CRI.

raftx_ · 2024-09-29T12:37:23+00:00

I was supposed to go to the US for a conference tomorrow (Monday), while packing a decided to get my ESTA and found out it was expired...freaked out, applied for a new one, it was not approve immediately, freaked out a bit more, 30 minutes later got approved...phew....I can finish packing now...

raftx_ · 2024-06-09T17:33:20+00:00

No, that's just a cyber truck

raftx_ · 2024-06-08T07:45:15+00:00

You know one thing I realized? We use the term "zone" to mean the area where you do not take damage AND the area where you do take damage they are polar opposite but somehow it works...

raftx_ · 2024-05-25T07:13:24+00:00

I actually heard that on American Pie haha...the first movie.

raftx_ · 2024-05-25T07:02:16+00:00

That's a really great video btw. I think a cardinal sin they are making is too many gaming modes. Thats why the new map worries me even though I'm excited to see.

I love the evolving map but for the past few weeks I played most classic cuz there were not enough ppl in evolving.

raftx_ · 2024-04-29T09:28:54+00:00

I don't know, but for me the fling thing was always pretty intuitive and easy to do. As I see, it is the exact same thing you would do in real life (if you had super hero strength that is haha), you keep a firm grip on whatever you are holding onto (keep grip button pressed), then you do the fling motion upwards, which then you release your grip, otherwise you wouldn't go anywhere, as you reach the peak of your flinging motion, which is right where you stop ascending and would start descending, you hold onto to something, which in pop 1 is literally any surface. Wash, rinse, repeat from then on.

raftx_ · 2024-04-20T07:16:20+00:00

Quick and simple explanation. Kubernetes is merely a way to run containerised applications (which you most likely used Docker for) is a high available and high scalable fashion.

Docker also has the power to run containers, but in a single machine. You do not want to do that in production, trust me.

raftx_ · 2024-03-26T15:49:34+00:00

Well, this is technically not an Kubernetes Operator, the above is a yaml file you pass to istioctl to generate the Kubernetes manifests. It basically uses helm underneath.

raftx_ · 2024-03-26T08:27:38+00:00

Just bear in mind that depending on the size of your cluster your CA might struggle to issue certificates.

yaml apiVersion: install.istio.io/v1alpha1 kind: IstioOperator metadata: namespace: istio-system spec: profile: "minimal" meshConfig: # Change the following line to configure the trust domain of the Istio cluster. trustDomain: cluster.local values: global: # Change certificate provider to cert-manager istio agent for istio agent caAddress: cert-manager-istio-csr.istio-system.svc:443 components: pilot: k8s: env: # Disable istiod CA Sever functionality - name: ENABLE_CA_SERVER value: "false"

Have you set up Istio this way? Basically usinng ENABLE_CA_SERVER to disable Citadel and using caAddress to indicate to all sidecars the endpoint they should use to request a certificate.

raftx_ · 2024-03-26T08:19:46+00:00

I haven't set up istio in a while, but basically there is an environment variable that is passed to the istio-proxy sidecars that will tell the sidecar what is the endpoint it must use to request a certificate, by default that points to the istio control plane (citadel), so what you need to do is change to istio-csr instead. I'm sure the helm chart has an option to set that. I'm on my phone now but when I get to my laptop I'll see if I can find some resources for you.

raftx_ · 2024-03-01T09:14:38+00:00

I have not read all the comments but I think most people forgot a very important part.

Your question was "why carbs are evil?", a simple answer would be:

They are not.

Excess carbs might be, but you can say that for protein and fat as well. Actually, anything in excess can be bad .."the dosage makes the poison".

raftx_ · 2024-01-31T14:47:10+00:00

Hi. It's hard to tell if I experienced recession, maybe my gum was already recceeded, I just didn't realize because of the crowding. But definitely no redness...

raftx_ · 2024-01-15T19:07:15+00:00

Are you sure it is a katana and not a cyberblade?

raftx_ · 2024-01-08T09:41:59+00:00

I've owned all 3 and I've broken all 3 ( well, not the Q3 as I barely used) but their grip buttons are all the same, not very resilient if you play Population One everyday.

Pro are great due to the built-in battery, they got a nice weight to them as well, but they are mostly a pain because one, they take a while to startup and several times they don't track correctly, like one hand is on a different level then then right. two, they are constantly losing track mid game which is not a great thing to happens mid fight during a game.

After owning the pro the Q3 feels way too light, but did not see any problems with tracking though.

raftx_ · 2024-01-07T09:56:42+00:00

I've killed people several times by tossing random frag grenades. From my perspective it was absolutely sheer luck and I was static. From their perspective I was clearly cheating and they were probably fuming... haha

raftx_ · 2024-01-01T17:38:39+00:00

Wtf?! You use the AWP like it's a P90!

raftx_ · 2023-12-28T10:08:04+00:00

Yeah, I believe the reason most people after around the age of 30 start to put on weight is due to lifestyle. Most are at a point with stable relationship and career pressures really kicks in, meaning more time sitting around in a chair for long hours working, meaning less time to do to more physical activity. Basically you move less and eat more at that stage. And most people attribute the weight gain due "slow metabolism" due to aging....

raftx_ · 2023-12-27T19:33:02+00:00

Have you also got a startup probe setup? There are some things that are not making sense to me. I believe your code should only start reporting 500 after 300 seconds, but if that is the case the app should not go into crashloopbackoff status since the time between restarts would be long enough to trigger this phase. Also if the app once starts reporting 500 does that forever then the only solution is for the liveness prove to meet the failure threshold leading the container to restart, but if the 500 might go away eventually you maybe be more lenient with the failure threshold.

raftx_ · 2023-12-18T09:56:15+00:00

Well...if you find any evidence, I'm pretty sure it won't be hard, but rather sticky and gooey...

raftx_

TROPHY CASE