HNHacker News
TopNewBestAskShowJobs

throwawaykbfud

6 karma · joined July 21, 2018

submissionscomments
throwawaykbfud··on Into the Borg – SSRF inside Google production network
>Do I think Kubernetes is great if I have to build a CloudFormation thing to spin up all of its infrastructure and run it myself,

Yes.

>or would I rather pay big company to do it?

Also yes. The two aren't mutually exclusive.

Come on, you've used Borg. You wanna volunteer to going back to just using machines and VMs by hand, or worse, wiring up a complex and unreadable (Ansible|SaltStack|Chef|Puppet) playbook to set everything up?

No. This is why in the early days I was indeed running Kubernetes on AWS, by hand. As the tooling improved it only got better. I honestly wanted to have alternative choices, but Docker continually missed the point with Swarm and I just gave up on it.

>Your rebuttals are honestly more misleading, in my opinion, than my points, because you’re personally wrapped up in it and that’s coming across.

You are projecting wildly on this one.

throwawaykbfud··on Into the Borg – SSRF inside Google production network
>Good. Because that was my point.

Fair enough, but you said a whole lot of other crap that is very much misleading in my opinion, and I was addressing all of that.

>It can only span multiple clouds now because other clouds had to ship Kubernetes

See, this is the kind of thing that makes me treat this as FUD rather than just criticism. I was running Kubernetes on AWS long before Amazon offered a service for it. If Kubernetes wasn't open source and instead each cloud provider came up with their own implementation, would that have been better?

>Get back on your real username

No thanks. Doesn't take a rocket scientist to figure out why.

throwawaykbfud··on Into the Borg – SSRF inside Google production network
There's a lot of FUD in here, like suggesting that Google wouldn't use something written in Go for this purpose (lol,) suggesting an open source platform that can span multiple clouds is an attempt to lock people into GKE (lol 2x,) and suggesting that Kubernetes is "married" to Docker (CNI? CRI?) or isn't extensible (the entire gRPC/REST API? custom resources? device plugins?)

People use Kubernetes for the ecosystem, the "shit around it." They even formed a foundation for the "shit around it" called the CNCF. And if you think all of that stuff is just for GKE lockin, maybe take a look at gRPC sometime.

I don't disagree that Kubernetes is not positioned to be a replacement for Borg, at least not for many years. It has a lot to go and the Storage API is indeed a sore spot for the Kubernetes project in general. But this realization is a very long walk from "Kubernetes was designed to lock people into GKE."