News for hackers. Stuff that matters.
Re:Kubernetes 1.10 released by old-gregg on Wednesday March 28, 2018 @11:45AM (#16698623)
We use Kubernetes in a very unusual way. We built a tool that allows you to take a snapshot of a Kubernetes cluster (along with all apps deployed inside) and save it as a single .tar.gz tarball.

This tarball can be used to re-create the exact replicas of the original cluster, even on server farms not connected to the Internet, i.e. it includes container images, binaries for everything, etc.

But if the replica clusters do have internet access, they can dial back home and fetch updates from the "master". People use this to run complex SaaS applications inside their customers' data centers, on private clouds. These clusters run for months without any supervision, until the next update comes out.

Thanks to Kubernetes, you have a complete, 100% introspection into a complex cloud software, which allows for a use case like this. Basically if you're on Kubernetes you can no longer be tied to your one or two AWS regions and start selling your complex SaaS as downloadable run-it-yourself software. [1]

[1] https://gravitational.com/telekube/

Re:Kubernetes 1.10 released by piaste on Wednesday March 28, 2018 @11:55AM (#16698743)
Is it really necessary to copy the containers themselves? Do they contain long-lasting state? (And if they do, how does this state get properly synchronized between master and slaves?)

If the offline server farms hosted a private Docker registry (which is very simple to set up), couldn't you then simply push the container images to the registry, copy the relevant YAML files, and instantiate an identical cluster that way?

Re:Kubernetes 1.10 released by jacquesm on Wednesday March 28, 2018 @01:58PM (#16700106)
That's pretty clever, it looks like you've found a sweet spot somewhere in the middle between SaaS and good-old on premises that would serve a lot of use cases.
Re:Kubernetes 1.10 released by kansface on Wednesday March 28, 2018 @03:08PM (#16700795)
How do you guys handle eg CVEs?