Posts tagged: infra

💭 PolyFill Vulnerability is WILD - YouTube

2024-06-28T19:48:03Z

Damn, supply chain vector attacks are wild. Random guy in Primes stream was getting $40k offers to buy their open source project while in university and they have never made anything from it. What a social engineering attack this is. It would be so easy to make it look like a good deal and that the package was going to a good new owner who has real resources to maintain it.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Queueing – An interactive study of queueing strategies – Encor...

2024-06-28T16:19:37Z

Queueing – An interactive study of queueing strategies – Encore Blog

In this blog, we go on an interactive journey to understand common queueing strategies for handling HTTP requests.

Encore — Open Source Backend Framework for robust distributed systems · encore.dev

Absolutely sick post. This is top tier animated blog posts. This posts demos how different queuing systems work with fantastic interactive demos.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 How Ahrefs Gets a Billion Dollar-Worth Infrastructure With a 9...

2024-05-16T01:38:42Z

External Link

tech.ahrefs.com

2024 has been a wild year for infra with going “back” to on prem being made popular by @dhh. Well it looks like ahrefs saw right through the cloud trends an decided to ride the anti cloud train until it came back around to the station.

Being just a bit critical of the article it is impossible to get an apples to apples without actually running something of this scale and spending too much to find out. I cant imagine raw ec2 and ebs being the cheapest route into aws. They used no serverless tech in their article, but I digress, because I like this own your shit and build good product train.

What about People?!

This follow up does dive into the typical gut reaction that people cost a lot of money, you must account for them. You see when you hire people who are actually good at what they do, and run lean a lot of cost goes away, you have levels of management that disappear, levels of tooling that don’t need to exist, departments of IT don’t need to exist.

Colo’s are the new hotness, and will continue to grow!

I just notices that they didn’t even account for egress, support and taxes, egress costs would make a difference.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Kubernetes Secrets in 5 Minutes! - YouTube

2023-10-30T16:47:19Z

I am converting my docker compose env secrets over to k8s secrets. This guide was clear and to the point how I can replicate this exact workflow.

First set the secret, the easiest way is to use kubectl wtih –from-literal because it automatically base64 encodes for you.

kubectl create secret generic minio-access-key --from-literal=ACCESS_KEY=7FkTV**** -n shot

If you don’t use the --from-literal you will have to base64 encode it.

echo "7FkTV****" | openssl base64

Once you have your secret deployed, you have to update the container spec in your deployment manifest to get the valueFrom secretKeyRef.

    spec:
      containers:
        - env:
            - name: ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  key: ACCESS_KEY
                  name: minio-access-key
            - name: SECRET_KEY
              valueFrom:
                secretKeyRef:
                  key: SECRET_KEY
                  name: minio-secret-key
          image: registry.wayl.one/shot-scraper-api
          name: shot-wayl-one
          ports:
            - containerPort: 5000
              protocol: TCP
          resources: {}
      restartPolicy: Always

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Waylon Walker 🐍 on X: "Which is more complicated" / X

2023-10-30T13:25:53Z

External Link

X (formerly Twitter) · twitter.com

Wow, shocked at these results. All this time I’ve been told and believed that k8s is incredibly hard, and you need a $1M problem before you think about it because it will take a $1M team to maintain it. So far my experience has been good, and I definitely do not have a $1M problem in my homelab.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts

💭 Delete a Postgres Cluster · Fly Docs

2023-10-17T18:42:30Z

Delete a Postgres Cluster

Documentation and guides from the team at Fly.io.

Fly · fly.io

Deleting a fly postgres db cluster was not straightforward to me as the app name is not inferred from the toml like it is for the main app.

fly apps destroy <pg-app-name>
fly pg db list -a <pg-app-name>

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts