News for hackers. Stuff that matters.
Re:A Gentle introduction to Kubernetes with more than just t... by MuffinFlavored on Friday September 20, 2019 @12:26AM (#21023324)
I struggle to understand when Docker is supposed to be introduced to a stack.

If you have a 100 user SaaS platform, do you run Linux containers on top of Linux just for isolation?

Re:A Gentle introduction to Kubernetes with more than just t... by inapis on Friday September 20, 2019 @02:11AM (#21023723)
If you need strong guarantees of isolation and if every user has their own dedicated installation. If you are a general service where isolation is enforced at the application level then just deploy straight away.

Docker is useful when you don't want to care about the underlying operating system or you might be deploying on different operating systems etc. Also if you want to quickly switch providers (like going from Ubuntu 18.04 on digital ocean to Windows Server on Azure) since it's a self contained image.

This self contained image is useful during development too. I can cleanly separate dependencies between applications and dev/test/prod. For example I develop a node app based on node 12 + pg 11 but I tinker with ghost too which requires node 10 + mysql. Having this in Docker keeps cruft and complexity off my macOS installation at the cost of space. Having multiple versions of a runtime/database etc can quickly become a nightmare to manage on local operating systems.

Operationally if you can control deployment and you don't need many servers, deploying to the base operating system makes sense. Docker/Kubernetes shine when you have scale + need to provision many servers across different platform providers.

Re:A Gentle introduction to Kubernetes with more than just t... by MuffinFlavored on Friday September 20, 2019 @12:08PM (#21028235)
> Operationally if you can control deployment and you don't need many servers, deploying to the base operating system makes sense. Docker/Kubernetes shine when you have scale + need to provision many servers across different platform providers.

On that same note... when do Terraform / Ansible start to make sense?

Re:A Gentle introduction to Kubernetes with more than just t... by fanf2 on Saturday September 21, 2019 @08:34AM (#21034958)
I have found that Ansible is necessary if you have more than one server and useful even for less than one (eg managing a service account on an old legacy shared machine owned by another team).
Re:A Gentle introduction to Kubernetes with more than just t... by inapis on Tuesday September 24, 2019 @02:03PM (#21062956)
I use terraform mainly for provisioning infrastructure (how many VMs on which platform, how many databases etc) while Ansible for configuring the software side of the deployment - like the dependencies, which version of code to pull, configuring nginx, cache etc
Re:A Gentle introduction to Kubernetes with more than just t... by wiennat on Friday September 20, 2019 @02:51AM (#21023864)
It can be introduced at many points.

in dev: You can setup dependencies without worrying about underlying os. So it is easier for building a new dev machine, adding a new team member, etc.

in integration test: you can setup multiple integration test environment as long as you have enough resource. Running multiple integration tests without interfering other team members is the major benefit here.

in prod: as you may know, for isolation and horizontal scaling. Easier roll back and update?

Re:A Gentle introduction to Kubernetes with more than just t... by bboreham on Friday September 20, 2019 @02:30AM (#21023780)
Containers are fantastic at isolating one software application from another. All their dependencies - runtime, library, packages - live in separate chrooted filesystems.

User-to-user isolation is hard, and extremely hard if any of the users could be malicious. Docker is broadly neutral here - adds a few tools, might add a few vulnerabilities.