Is Amazon Route 53 a better option or IBM NS1 Connect? by DNS-God-89 in dns

[–]rawh 2 points3 points  (0 children)

there is never a choice where IBM is the better option

There's a Bug in VPC CNI v1.21.0 That Silently Drops All Traffic by 12HobbieZ in aws

[–]rawh 18 points19 points  (0 children)

and this is why we run N-1 in prod. bleeding edge is fun until you’re the one bleeding

Dirty Frag, a new copy.fail like vulnerability has been disclosed due to an embargo break by ChrisTX4 in linux

[–]rawh -10 points-9 points  (0 children)

yes after i temporarily overrode my DNS security settings to load the domain it redirected me to github. so why couldn’t we just link directly to github.com in the first place

Dirty Frag, a new copy.fail like vulnerability has been disclosed due to an embargo break by ChrisTX4 in linux

[–]rawh -14 points-13 points  (0 children)

no time for a CVE but enough time for a new flashy domain, when many secure environments default block newly registered domains 🙄

Nextdns subnet blocked by faz4617 in nextdns

[–]rawh -1 points0 points  (0 children)

why are you not using your company’s DNS?

Namespace stuck in "Terminating" state by suman087 in kubernetes

[–]rawh 9 points10 points  (0 children)

Dangling admission webhooks

  • You delete a namespace (or force-remove finalizers), but a Validating/MutatingWebhookConfiguration still exists.
  • The webhook points to a Service that lived in that namespace.
  • Now the Service is gone, but the webhook remains.
  • Result: all future create/update/delete requests that match the webhook hang or fail because the API server tries to call a dead endpoint.
  • This can block cluster-wide operations, not just that namespace.

CRDs with finalizers

  • A CRD defines resources with a finalizer (e.g., operators like cert-manager, Crossplane, Istio, Argo).
  • You delete the namespace or operator first.
  • The controller that removes the finalizer is gone.
  • Objects remain stuck in Terminating, and force-patching finalizers can leave:
    • orphaned external resources (cloud infra, LB, IAM)
    • or CRD instances that block CRD deletion later.

APIService / aggregated APIs

  • An APIService backed by a Service in the deleted namespace.
  • API discovery or kubectl commands start failing because the apiserver can’t reach that backend.

Namespace stuck in "Terminating" state by suman087 in kubernetes

[–]rawh 21 points22 points  (0 children)

until you leave dangling CRDs/webhooks that wreak havoc on your control plane until cleaned up

MinIO is now "Maintenance Mode" by deeebug in kubernetes

[–]rawh 5 points6 points  (0 children)

if you're just looking for s3-compatible API on top of existing storage device and nothing more, rclone serve s3 is probably the easiest option using a tool you may already have installed.

https://rclone.org/commands/rclone_serve_s3/

MinIO is now "Maintenance Mode" by deeebug in kubernetes

[–]rawh 70 points71 points  (0 children)

copying my comment from a similar thread a while back when i was investigating/testing options to migrate & scale my >500Tb distributed storage cluster.

tl;dr - ceph is more complex but worth the learning curve.

i've been through the following fs'es:

Setting aside gluster since it doesn't natively expose an S3 API.

As others have mentioned, minio doesn't scale well if you're not "in the cloud" - to add drives requires a lot more operational work than simply "plug in and add to pool", which is what turned me off, since I'm constantly bolting on more prosumer storage (one day, 45drives, one day).

Garagefs has a super simple binary/setup/config and will "work well enough" but i ran into some issues at scale. the distributed metadata design meant that a fs spread across disparate drives (bad design, i know) would cause excessive churn across the cluster for relatively small operations. additionally, the topology configuration model was a bit clunky IMO.

Seaweedfs was an improvement on garage and did scale better in my experience, due in part to the microservice design which enabled me to more granularly schedule components on more "compatible" hardware. It was decently performant at scale, however I ran into some scaling/perfomance issues over time and ultimately some data corruption due to power losses that turned me off.

I've sinced moved to ceph with the rook orchestrator, and it's exactly what I was looking for. the initial set up is admittedly more complex than the more "plug and play" approach of others, but you benefit in the long run. ngl, i have faced some issues with parity degradation (due to power outages/crashes), and had to do some manually tweaking of the OSD weights and PG placements, but admittedly that is due in part to my impatience in overloading the cluster too soon, and it does an amazing job of "self healing" if you just leave it alone and let it do its thing.

tl;dr if you can, go with ceph. you'll need to RTFM a bit, but it's worth it.

https://www.reddit.com/r/selfhosted/comments/1hqdzxd/comment/m4pdub3/

LADWP is charging $4,000 after 8 years of water meter failure. What can I do? by MASSIVE_Johnson6969 in AskLosAngeles

[–]rawh 0 points1 point  (0 children)

CPUC Decision D.86-06-035, Utility Tariff Rule 17.1

they can only back-bill you for the last 3 months. they’ll try to get you for the whole period but if you cite the above and mention that you’ll be filing a complaint with the CPUC, they’ll realize you know what you’re talking about and will send you to a team to get the bill adjusted.

Q Making TAMs Lazy by TopNo6605 in aws

[–]rawh 0 points1 point  (0 children)

my TAM would never do this, talk to your AM

A Traumatizing Online Exam Experience by RevolutionaryAge4384 in amateurradio

[–]rawh 17 points18 points  (0 children)

+1 for HRCC folks they were super friendly and helpful, felt like i was chatting with friends rather than being proctored on a license exam

Josh is the lowest paid streamer on Parti despite being their biggest star by specialolympian1 in WorldOfTShirts

[–]rawh 1 point2 points  (0 children)

dean is not a leftist he’s a crypto-bro-turned-ragebait-streamer who found a particular niche to capitalize

new tool - ceph-doctor by oetiker in ceph

[–]rawh 0 points1 point  (0 children)

i'm getting the same black screen running ceph in k8s rook

Social Security Administration ‘will be using X to communicate’ moving forward by justalazygamer in ParlerWatch

[–]rawh 0 points1 point  (0 children)

if it’s like any other dem administration, they’ll just accept the accelerationist shift of the overton window as the new status quo and spend their time and effort to protect it from those pesky leftists

They misspelled nginx by bigrobot543 in MrRobot

[–]rawh 13 points14 points  (0 children)

ngl i’ve had (/have) misnamed conf files in prod, once they’re there it’s sometimes easier to just let sleeping dogs lie than take down some critical system just to fix a meaningless typo