konfd
Infrastructure
kubernetes configuration management
SHOW HN2016
How HN took it
1 positive, 4 neutral or asking, 0 mixed, 2 critical, out of 7 comments about the project. Thread score -0.08.
Privacy: 0 for, 1 againstIdea: 0 for, 1 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for writing config files into pod namespaces without external backends
From 2 comments
More great stuff from Kelsey... My tldr; konfd writes out k8s configmaps based on other k8s resources like secrets, configmaps, etc. Really useful for writing out complete config…
gabrtv on HNHi kelsey, this is pretty nice ! Is there any way to bribe you into slowing down on the awesome sauce delivery pipeline so people can catch up !? asking for a friend. If you find…
fcantournet on HN
Objections
Kubernetes secrets are stored unencrypted in etcd, so calling them secrets is misleading
From 3 comments
Kelsey, I (and others) would kindly appreciate it if you'd stop calling anything in Kubernetes as it exists today a "secret" and writing new code to further encourage its use.…
otterley on HNIf someone can access your etcd, they can write new pods to run into it which will then be distributed to nodes to run. Those new pods could reference existing secrets, be in any…
TheDong on HNAren't secrets stored unecrypted in kube? I'd hesitate to call them secrets, though config looks good.
tonyhb on HN
Watch-based updates would be faster and more efficient than a sync loop
From 1 comment
More great stuff from Kelsey... My tldr; konfd writes out k8s configmaps based on other k8s resources like secrets, configmaps, etc. Really useful for writing out complete config…
gabrtv on HN
Requests
Add a watch mode instead of polling on syncInterval
From 2 comments
More great stuff from Kelsey... My tldr; konfd writes out k8s configmaps based on other k8s resources like secrets, configmaps, etc. Really useful for writing out complete config…
gabrtv on HNThis is great feedback. I'm still on the fence about a watch mode for the following reasons: 1. The template configmap will not change as often as the secrets and configmap…
kelseyhightower on HN
Integrate Vault with Kubernetes secrets
From 2 comments
Kelsey, I (and others) would kindly appreciate it if you'd stop calling anything in Kubernetes as it exists today a "secret" and writing new code to further encourage its use.…
otterley on HNFirst, thanks for taking the time to offer feedback regarding what we call "secrets" in Kubernetes. As you've rightfully pointed out the current implementation of "secrets" are…
kelseyhightower on HN
Questions
Why use ConfigMaps for templates instead of a third-party resource
From 1 comment
Hi kelsey, this is pretty nice ! Is there any way to bribe you into slowing down on the awesome sauce delivery pipeline so people can catch up !? asking for a friend. If you find…
fcantournet on HN
Alternatives named
HashiCorp Vault
From 2 comments
Kelsey, I (and others) would kindly appreciate it if you'd stop calling anything in Kubernetes as it exists today a "secret" and writing new code to further encourage its use.…
otterley on HNFirst, thanks for taking the time to offer feedback regarding what we call "secrets" in Kubernetes. As you've rightfully pointed out the current implementation of "secrets" are…
kelseyhightower on HN
envconsul
From 1 comment
Also consider Consul/Vault so you can leverage the remarkably uncoupled portability of envconsul: https://github.com/hashicorp/envconsul // PS. To help avoid confusion, I wish…
Terretta on HN
Go objects to generate Kubernetes configs
From 1 comment
I propose an alternative to templates: Use go objects to define your config. Better dynamicity, readability and typesafety. See my post…
kozikow on HN
vault-controller
From 1 comment
Didn't he already do this? https://github.com/kelseyhightower/vault-controller
coleca on HN