DeborahEmeni_
DeborahEmeni_ on Hacker News
I’ve been experimenting with this recently. Running services inside microVMs instead of plain containers makes the threat model easier to reason about, especially for multi-tenant or untrusted workloads. I’ve been trying it out on Northflank and the trade-offs become pretty obvious.
Posted by
DeborahEmeni_ on Monday June 23, 2025 @06:35AM
from the self-post dept.
Quick question for platform engineers, DevOps engineers, or anyone deploying across multiple clouds:What’s the most annoying part of managing multi-cloud deployments?Was it the networking setup? Identity management? Keeping environments in sync?Please, how do you usually handle it?
Posted by
DeborahEmeni_ on Tuesday May 06, 2025 @11:14AM
from the self-post dept.
Just for fun (and some pain) — what’s the most laughably unrealistic minimum system requirement you’ve come across?
Vista on 512MB RAM? A "lightweight" dev tool that eats 2GB idle?
Drop your worst offenders and how badly it went in real use.
Posted by
DeborahEmeni_ on Tuesday May 06, 2025 @11:12AM
from the self-post dept.
I’ve been deep in Helm templates lately and it’s starting to feel like YAML hell.
It was fine when we had a few services, but now it’s just hard to manage.
Anyone found a workflow that avoids Helm altogether? Or made Helm manageable at scale?
Posted by
DeborahEmeni_ on Friday April 25, 2025 @04:33AM
from the self-post dept.
Setting up a deployment is one thing. But once things are live, I still struggle with the basics like:
Zonal redundancyDR setupsObservability across clusters
Curious how folks here think about Day 2, what’s worked for you?
Posted by
DeborahEmeni_ on Friday April 25, 2025 @04:27AM
from the self-post dept.
Every Kubernetes setup I’ve touched ends up like this: GitHub Actions, custom Docker registry, Helm, ArgoCD, a dashboard, and some bash scripts.
It works… until it doesn’t.
I’d love to hear if anyone has found a more cohesive way to do CI/CD for Kubernetes, or at least a setup that’s less painful to maintain long-term.
makes sense tbh. i’ve seen teams take that approach and only think about cost once it’s already a problem. ever had that come back to cause issues later?
yeah exactly. feels like the pricing model alone keeps a lot of folks from even starting. one wrong config and you’re done before you ship anything.
yeah that’s the part that gets me too. feels wild that there’s no built-in way to cap spend at the account level. even a “pause all” button would go a long way
agreed. old reddit actually works. no extra stuff and doesn’t get in the way
yep that’s the one. rough situation but the replies were interesting
yeah cost anomaly detector is underrated. do you usually set custom thresholds or just let it use the defaults?
yep this is the one. feels like a lot of people just copy-paste from stackoverflow without realizing they're hardcoding keys. have you seen this cause issues in prod or mostly in hobby stuff?
yeah makes sense. the idea that success = risk now is kind of wild. did you end up doing anything to limit that egress, or just ride it out?
appreciate the context. do you know if the platform itself didn’t meet dev needs, or was it more about rollout and team buy-in?
thanks for sharing this. really interesting seeing the jupyterhub setup combined with devcontainers. curious how usage went long term. did people keep using it without needing much hand-holding, or was it more of a “power users only” kind of thing?
also appreciate the note on the sister team. i’ve seen the same. lots of energy up front but adoption fizzles when teams don’t prioritize the boring stuff like docs and onboarding
got it, that makes sense. i was trying to keep things centralized at first but splitting per cluster might be the better call. did you end up automating anything around managing those separate instances or mostly manual?
Posted by
DeborahEmeni_ on Tuesday April 22, 2025 @01:02PM
from the self-post dept.
I’ve seen a few teams build internal dev platforms with great intentions: standardized tooling, faster onboarding, less cognitive load. But adoption often seems like the hardest part.Would love to hear what worked (or didn’t) for folks here.
Did you build it from scratch or stitch together existing tools?
Was usage organic or did you have to push it hard internally?
Any lessons on what made...
Posted by
DeborahEmeni_ on Tuesday April 22, 2025 @12:57PM
from the self-post dept.
I’ve been using ArgoCD with GitHub Actions for GitOps, and it worked well in the beginning. But once I started managing multiple clusters, it got more complicated:- Syncs slowed down- Had to spin up separate ArgoCD instances- CI/CD felt disconnected from the GitOps flowWould like to hear how others have approached GitOps at scale. Did you stick with Argo and layer on tooling? Or move to...
Posted by
DeborahEmeni_ on Sunday April 13, 2025 @09:09AM
from the self-post dept.
Saw someone on Reddit lose $86k from a compromised AWS account. I've heard way too many stories like this — misconfigured IAM, tokens in repos, no billing alerts...If you're on a small team, how are you actually protecting yourself from stuff like this? Is there a sane setup that works without needing a full-time AWS security person?
Posted by
DeborahEmeni_ on Sunday April 13, 2025 @09:08AM
from the self-post dept.
Saw someone on Reddit lose $86k from a compromised AWS account. I've heard way too many stories like this: misconfigured IAM, tokens in repos, no billing alerts...If you're on a small team, how are you actually protecting yourself from stuff like this? Is there a sane setup that works without needing a full-time AWS security person?
The “holding a button” thing actually resonated. It feels like the real work here is engineering the reward structure to make exploration even remotely viable. Dreamer’s world model might be cool, but most of the heavy lifting still seems to come from how forgiving the Minecraft environment is for training.
I do wonder though: if you swapped Minecraft for a cloud-based synthetic world with similar physics but messier signals, like object permanence or social reasoning, would Dreamer still hold up? Or is it just really good at the kind of clean reward hierarchies that games offer?
I’ve done something similar using OpenRouter and fallback chains across providers. It’s super helpful when you’re hitting rate limits or need different models for different payload sizes. I would love to see more people share latency data, though, especially when chaining Gemini + OpenAI like this.
Really cool setup! Curious how much of the performance here could vary depending on whether the model runs in a hosted environment vs local. Would love to see benchmarks that also track how cloud-based eval platforms (with potential rate limits, context resets, or system messages) might affect things like memory or secret-keeping over multiple rounds.
Apple's shift away from GPL has been showing for years, so this doesn't surprise me. But dropping rsync 2.6.9 this late without full 3.x support feels like a step backwards, especially for anyone relying on metadata preservation. I get the licensing angle, but the lack of feature parity in opensync might catch a lot of people off guard.