twakefield

A question about feature parity came up on a separate thread.

These plans have all the same commercial features we offer to our Enterprise customers, but with a standard, monthly subscription.

The free OSS edition has is mainly missing the RBAC and integration points with third party identity providers. Although we added Github OAuth in v2.4 of the OSS and plan to add more popular auth providers in the future.

Pretty excited about this (even though its a .x release). There are some nice features in the OSS edition, including better support for OpenSSH nodes and Github OAuth[0], and it also is the first release where you can use the Enterprise features at a standard monthly subscription price[1].

[0] https://github.com/gravitational/teleport/releases

[1] https://gravitational.com/blog/teleport-pro-business/

Let me know if you'd like me to try and introduce you to a couple of our customers - taylor@

Gravitational | Sales Reps | Oakland, CA | Onsite, full-time

We (gravitational.com) build software (and offer services) that allows businesses to deploy and manage applications across cloud providers and on-premise infrastructure environments.

Until now, we have been successful bootstrapping sales with the founding team, generating millions of dollars in sales in under a year without any significant marketing spend. We have developed a popular open source project on Github called Teleport[1] that generates good lead flow and we are closing deals with large technology companies, including telecoms, SaaS providers and enterprise software companies.

There are multiple use cases for our offerings: migrating legacy workloads to the cloud, selling SaaS offerings on-premise, improving the efficiency of Ops and SRE teams, securing internal IT systems, and more.

We need proper sales reps with technical backgrounds to take the business to the next level. We plan on starting by hiring two junior or mid-level sales reps and building the team from there.

More information: http://gravitational.com/sales-reps/

Apply: jobs@gravitational.com

[1] http://github.com/gravitational/teleport

Gravitational | Senior Devops Engineer, Senior Backend Engineer | Oakland and Toronto | ONSITE, REMOTE (for those with remote experience), https://gravitational.com/

About us:

We are well-funded, early stage systems & cloud startup headquartered in Oakland. We are an experienced team: we founded Mailgun [1] which was acquired by Rackspace, we created Vulcand [2] and some other cool stuff at Rackspace [3] and are the authors of Teleport [4], Teleconsole [5] and Telekube [6].

We love Linux and low level systems programming and we love helping open source communities and other engineers build great solutions.

Additional detail: https://github.com/gravitational/careers

Contact: jobs@gravitational.com

[1] https://www.mailgun.com

[2] https://github.com/vulcand/vulcand

[3] https://www.rackspace.com/en-us/cloud/servers/onmetal/specs

[4] https://github.com/gravitational/teleport

[5] https://www.teleconsole.com/

[6] http://gravitational.com/telekube/

I don't disagree with you but I think we need to be cognizant of the best way to transition away from the current value system.

I worry a step change will fail badly.

Setting the specific numbers aside, I think providing subsidized jobs is generally a better idea than UBI.

American society places a lot of value on having a job, so it is important for people to have one to help maintain self worth.

"Like many organizations we talk to, you probably have large amounts of data that you want to use to train machine learning models."

I understand's Google's bias here but doesn't it usually make more sense to bring the programs/models to where the data already is?

This is exciting...godspeed. In almost every big company I have either worked at or done business with, the legal team (in-house and external) was a bottleneck when trying to get something significant done in a reasonable time frame.

In most cases it wasn't because they objected to what was trying to be done or that they were lazy (they always seemed to work the longest hours). They just never seem to have the cycles to focus on what needed to be reviewed.

I hope these efforts can help make that part of my world a little more efficient.

From this small sample, I'd say you're a pretty darn good writer...at least as judged by telling interesting stories.

There's a link to the security audit report in the post but here it is, as well, for those interested: https://cure53.de/pentest-report_teleport.pdf

Thanks - will update that link now that it's out.

We've also published some other workshops for Docker and Kubernetes that we take customers through when onboarding (if needed): https://github.com/gravitational/workshop

Feel free to take them for a spin and feedback welcome and appreciated.

That's good perspective. My followup question is: why build the phone, then...because it's the remote control?

The perverse outcome of the tobacco MSA was that state's payments were tied to tobacco usage. So if tobacco usage went down, so did their payments.

This pretty much obligated the states to transfer their interests to investors of the securitizations in order to reduce the obvious conflict of interest.

Yes, my rant tag was trying to be a subtle admission of the bias.

I'm sure there were some good aspects of the MSA that I failed to mention. The restrictions on marketing is one that comes to mind without a lot of thought.

I think the biggest problem (that I remember) was money getting allocated to pay for things other than programs to help the original victims.

I think I've seen this movie before. This looks like it's headed down the path of the Tobacco Master Settlement Agreement [0].

Here's the playbook:

1) A.G.s and private lawyers start filing lawsuits.

2) Defendants realized there is potentially catastrophic liability here and start negotiating a master settlement agreement ("MSA") whereby the states agree not to sue in the future in exchange for a set payment schedule to the plaintiffs.[1]

3) States A.G.s realize this is a great publicity opportunity to leverage their career into other elected office and governors realize this a real revenue stream.

4) So, interests aligned and there is a settlement.

5) Lawyers make a TON of money on their fee schedule set forth in the MSA. So much so, the Tobacco MSA lawyers were securitizing their future fees in private markets.

6) Bankers swoop in and start pitching states on the securitization of MSA payments for states to cover current deficit shortfalls.

7) Bankers make a point or two on the securitization deal proceeds ($10s or $100s of millions).

8) States leverage their future payments under the MSA to fill budget gaps where ever possible. Some allocate a small portion of the proceeds to the victims of the malfeasance but many do not because there are better ways to get future votes.

</rant>

Full disclosure: I was once a young public finance analyst working 80-100 hour weeks building financial models to securitize Tobacco MSA payments...slight grudge still held.

[0] https://en.wikipedia.org/wiki/Tobacco_Master_Settlement_Agre...

[1] Tobacco stocks jumped on news of the settlement because a large known liability is much better than an unknown one.

EDIT: slight clarification.

My skype account was hacked (who's wasn't?) a few months ago. I tried to access it to change the password but in the process I was forced to link it some other Microsoft account that I didn't even know I had. It took me half the day to recover my original passwords then reset them. Now to get to Skype (if I'm logged out) I have to log into some Microsoft cloud identity thing.

All for a service (skype) I rarely use.

qmarchi - we have some different options that are dependent on support needed. If you fill out the contact form on gravitational.com I can go into more detail. Or email info@.

Hey HN, we (gravitational) are pretty excited about this release. We'll be monitoring the thread in case you have any questions.

I work at Gravitational. Sorry this isn't more informative. We are still working on a blog post and release notes with more information. We wanted to get the release out asap because some customers are waiting on it.

"Once your sales starts selling to large customers, they would report back on compliance requirements and certifications related to security."

And get ready for the questionnaires, each different enough to maximize the time spent on them. The Vendor Security Alliance[0] is attempting to standardize them. Although, I'm not sure how much uptake it's getting. At a minimum, it's a good example of a typical questionnaire.

[0] https://www.vendorsecurityalliance.org/

I know nothing about grocery retail but my initial reaction is why can't Instacart tie into Safeway, Wholefoods, etc. inventory management system to get a more timely view on what's available? Are existing grocery inventory management systems more rudimentary so this is not possible?

Yes, I was admittedly over generalizing with my statement regarding open sourcing Borg.

The brilliance of open sourcing Borg (aka Kubernetes) is evident in times like these. We[0] are seeing more and more SaaS companies abstract away their dependencies on AWS or any particular cloud provider with Kubernetes.

Managing stateful services is still difficult but we are starting to see paths forward [1] and the community's velocity is remarkable.

K8s seems to be the wolf in sheep's clothing that will break AWS' virtual monopoly on IaaS.

[0] We (gravitational.com) help companies go "multi-region" or on-prem using Kubernetes as a portable run-time.

[1] Some interesting projects from this comment (https://news.ycombinator.com/item?id=13738916)

* Postgres automation for Kubernetes deployments https://github.com/sorintlab/stolon

* Automation for operating the Etcd cluster:https://github.com/coreos/etcd-operator

* Kubernetes-native deployment of Ceph: https://rook.io/

Humble Bundle does this for indie games and other digital goods. I'm guessing they've thought about doing something similar for software like you mention but decided not to for some reason. It would be interesting to know why.

Perhaps the model needs support / services included.

Edit: or perhaps humble bundle is just more oriented to consumer goods.

You can use static or short lived tokens to bootstrap: http://gravitational.com/teleport/docs/admin-guide/#adding-n...

Vault is not yet supported but PR's welcome :)

edit: Looks like there's an open issue for consul to start: https://github.com/gravitational/teleport/issues/423

Hey HN - This is basically a hosted version of Teleport[0], which may scare some people. We don't store the sessions and you can always self-host if you prefer.

[0] http://gravitational.com/teleport/

Yes, we'll also write up some sample identity provider integrations.

RBAC should land in mid-January: https://github.com/gravitational/teleport/issues/620