Stefan Schimanski (@the_sttts) 's Twitter Profile
Stefan Schimanski

@the_sttts

Control Planes @ Upbound, Ex-Redhat, Kubernetes, logician, restless, hungry & foolish, þetta reddast, github.com/sttts @sttts.social – Opinions are my own

ID: 6650392

linkhttps://github.com/sttts calendar_today07-06-2007 20:51:32

6,6K Tweet

3,3K Followers

709 Following

kramm (@fabiankramm) 's Twitter Profile Photo

Stefan Schimanski Stefan Schimanski so the idea of vNode is not to run a separate kubelet (although you could), instead it wraps and starts the pods of the vCluster in a separate linux user namespace, similar to how the pod sandbox does that with the network namespace

kramm (@fabiankramm) 's Twitter Profile Photo

Stefan Schimanski Yes exactly, we have a runtime that starts the actual pods inside another container (the vNode) that uses linux user namespaces, seccomp filters and sysfs/procfs to pretend to be a real node to the inner pod(s)

Stefan Schimanski (@the_sttts) 's Twitter Profile Photo

Talking about critical path. MVP is the spiritual successor in a less plannable environment. Visibility of necessary focus is what they have in common.

Stefan Schimanski (@the_sttts) 's Twitter Profile Photo

„directly share“ in LinkedIn irritates me every single time. It‘s a dishonest term. It really means „shared with network“ and NOT directly with you. Pure clickbait.

Stefan Schimanski (@the_sttts) 's Twitter Profile Photo

This costed me a day and a half: When watching via Golang types in controller-runtime, but use unstructured when reading from the cache, you are in trouble. Of course, 2 informers are run and they are not consistent aka events arrive and you don't see the changes in the cache.

Stefan Schimanski (@the_sttts) 's Twitter Profile Photo

After a little operational hickup where the app got deleted and GitOps eventually recreated everything, OH: "I only wish that the db would have been also deleted to test backups"

Stefan Schimanski (@the_sttts) 's Twitter Profile Photo

multicluster-runtime provider that watches kubeconfig secrets in a namespace and dynamically engages controllers 🚀 github.com/kubernetes-sig…