<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News - New Comments: &#34;&#34;kubernetes&#34; &#34;k8s&#34;&#34;</title><link>https://news.ycombinator.com/newcomments</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Tue, 25 Aug 2026 20:09:43 +0000</lastBuildDate><atom:link href="https://hnrss.org/newcomments?q=kubernetes+OR+k8s" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by mrweasel in "How much of HN is AI?"]]></title><description><![CDATA[
<p>It seems a bit self-reinforcing. AI makes almost zero (positive) impact on my day to day life and isn't actually something I interact with directly and the same holds true for most people I talk to.<p>There's a few of my friends in tech for whom AI has obviously massively changed how they work, but again not in a clear positive direction.<p>To me there seems to be a push to heavily prompte LLMs, even thought the benefits aren't all that clear yet. Some people are seeing massive improvements in how they work and it's understandable that they, like with blockchains or Kubernetes previously want to share their optimism. I just question if maybe these people are being to louder and have to much influence. There's a large silent majority for whom all the AI stuff is almost completely pointless.<p>It does need to take up more space on HN, compared to your normal media, because the technology needs to find it's way into applications and appliances. The hype will die down, especially once we start to see the actual costs, e.g. ChatGPT doesn't actually provide enough value for the average user to warrant a subscription, hence the ads. For now, it seems that AI is heavily pushed by industry and a group of fans, the amount of news and articles just doesn't line up with the actual daily use.</p>
]]></description><pubDate>Tue, 25 Aug 2026 16:07:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=49436377</link><dc:creator>mrweasel</dc:creator><comments>https://news.ycombinator.com/item?id=49436377</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49436377</guid></item><item><title><![CDATA[New comment by skullone in "What Is a Syslog Server?"]]></title><description><![CDATA[
<p>And the number of k8s envs that log stdout through them into.... more rsyslog, it's truly everywhere. Plus all the sidecar containers deployed that shuffle app logs, lots of syslog there, its so lightweight and simple and reliable. I watch all the gyrations people go through to achieve the same result, and it's always changing, hurts my brain thinking how much time they waste</p>
]]></description><pubDate>Mon, 24 Aug 2026 20:36:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=49425509</link><dc:creator>skullone</dc:creator><comments>https://news.ycombinator.com/item?id=49425509</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49425509</guid></item><item><title><![CDATA[New comment by realexweb in "Show HN: Kern – container and resource runtime in a 1.5 MB binary, no daemon"]]></title><description><![CDATA[
<p>Fair, and it's not CRI. The README's limits section says "Not a Kubernetes runtime. No CRI. Use containerd or CRI-O." I meant runtime in the docker/podman sense, pull and build and lifecycle in one binary, and you're right that the word is overloaded enough that the title doesn't carry that by itself.<p>Since you're building it, two things you'll hit before you hit the docs. cargo install needs the package name, because it searches the whole repo and finds three packages with binaries (the CLI, the fuzz harness, the Windows shim):<p>cargo install --git <a href="https://github.com/getkern/kern" rel="nofollow">https://github.com/getkern/kern</a> getkern --locked<p>And a source build is 1.91 MB, not the 1.5 in the title. The release binary is smaller because CI builds it with a pinned nightly, build-std and optimize_for_size, on an opt-level="z" profile; the source stays plain stable Rust on purpose, so building doesn't need nightly.<p>Interested in what breaks.</p>
]]></description><pubDate>Mon, 24 Aug 2026 20:24:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=49425378</link><dc:creator>realexweb</dc:creator><comments>https://news.ycombinator.com/item?id=49425378</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49425378</guid></item><item><title><![CDATA[New comment by Melatonic in "AI and Infrastructure Engineering"]]></title><description><![CDATA[
<p>I think the issue is that there is a not yet emerged standard for the mid size companies that we hear less about here on HN but make up a huge amount of business in the US. Kubernetes may be the gold standard for larger companies or tech heavy companies of all sizes. But what about the mid size organisations ?</p>
]]></description><pubDate>Mon, 24 Aug 2026 17:16:29 +0000</pubDate><link>https://news.ycombinator.com/item?id=49422961</link><dc:creator>Melatonic</dc:creator><comments>https://news.ycombinator.com/item?id=49422961</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49422961</guid></item><item><title><![CDATA[New comment by doctoboggan in "Coding expertise is going to collapse from AI reliance"]]></title><description><![CDATA[
<p>I often think back to the early GPT days before agents as maybe the last time I will deeply learn a technical subject. I think that was when I actually learned the most as I had to stay completely in the loop. I had recently started a new job and had to work with k8s for the first time. Using GPT to help me implement new services and help me diagnose and fix issues with kubectl taught me so much.<p>Now with agents I don't have any insights into what its doing with kubectl and would have no reason to learn how it works (other than my own curiosity).<p>I agree that the human no longer gains expertise, but I am not sure that will matter in the long run.</p>
]]></description><pubDate>Mon, 24 Aug 2026 17:13:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=49422922</link><dc:creator>doctoboggan</dc:creator><comments>https://news.ycombinator.com/item?id=49422922</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49422922</guid></item><item><title><![CDATA[New comment by stego-tech in "AI and Infrastructure Engineering"]]></title><description><![CDATA[
<p>I’ve been in engineering long enough to know it’s cyclical: the new thing always eats layers that demanded expertise until <i>it</i> demands expertise, at which point something new tries eating that layer. It was shell scripting until it became Ansible, until it became HCL, until it became K8s, until Helm, until AGENTS.md, until…well, until we wound up back at building images again for local compute because cloud costs are spiraling upward and privacy/sovereignty are the focus again.<p>It’s kind of ironic that, for all the expertise I’ve cultivated, all the skills I’ve grown, all the knowledge I’ve gained, I’ve found myself back at the start of my career cycle again in terms of manually defining and building OS images for virtualization on local hardware. AI has not been much help in this regard because of the hundreds of OS settings I have to understand and set according to security posture - I’ve been unable to get Claude/Qwen/etc to build an effective hardening profile for something as fundamental as CIS2, because it always presumes an AD environment on a CSP as opposed to a local VM. Believe me, I would <i>love</i> for it to do so, because this is dry, uninteresting work, but I’ve spent more time wrangling AI than I would’ve spent writing my own Powershell.<p>AI is, at least in my realm, a neat tool for basic, repetitive, boilerplate work. Very much a <i>sudo make me a sandwich</i> type of deal, except for YAML. That’s not me knocking the tool, just my two cents on what function it serves at present. Put another way: we wouldn’t have made our sixth hire a Support staffer if AI could do more.</p>
]]></description><pubDate>Mon, 24 Aug 2026 02:09:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=49414522</link><dc:creator>stego-tech</dc:creator><comments>https://news.ycombinator.com/item?id=49414522</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49414522</guid></item><item><title><![CDATA[New comment by skinfaxi in "AI and Infrastructure Engineering"]]></title><description><![CDATA[
<p>> Did Kubernetes kill Ansible? Kind of. I haven’t written an Ansible playbook in years - if you handed me one right now I’d be squinting at the module syntax like I’d never seen it before - not because configuration management stopped mattering, but because Kubernetes made server management easy enough that we stopped building our own node images at all - we just use whatever the cloud provider hands us, an AWS AMI built for us, no questions asked. And when did I last SSH into a node to debug something?<p>K8s did not kill Ansible because of ease. Ansible is obsolete because we moved from creating a machine and changing it to instantiating it with the changes we wanted. Ansible makes sense when you are continuously updating a server-in-place and is decidedly less useful when you spin up a new unit with the new configuration when changes are made. Even in this instance the underlying skills remain the same.</p>
]]></description><pubDate>Mon, 24 Aug 2026 00:57:17 +0000</pubDate><link>https://news.ycombinator.com/item?id=49414124</link><dc:creator>skinfaxi</dc:creator><comments>https://news.ycombinator.com/item?id=49414124</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49414124</guid></item><item><title><![CDATA[New comment by nunez in "OTel isn’t going well"]]></title><description><![CDATA[
<p>Not the OP, but turning on auto-instrumentation for a Golang app running in Kubernetes breaks the app if the app is either:<p>- Running an old version of Golang (older than 1.18 if memory serves), or<p>- has libraries that the eBPF probes don't like.<p>And while I like OTel, I agree with the OP that you are absolutely going deep-sea diving if you're going to do anything beyond the examples provided (which is very easy to do!)</p>
]]></description><pubDate>Sat, 22 Aug 2026 16:25:25 +0000</pubDate><link>https://news.ycombinator.com/item?id=49401255</link><dc:creator>nunez</dc:creator><comments>https://news.ycombinator.com/item?id=49401255</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49401255</guid></item><item><title><![CDATA[New comment by jrop in "Stop Making TUIs"]]></title><description><![CDATA[
<p>The approach you're describing (redesign the protocol) is one path. Another is to sidestep the protocol entirely by using a platform that already owns its rendering surface and happens to run in a terminal: my preference is Neovim.<p>Let me get the caveats out of the way first: this only makes sense if you already live in Neovim. The whole ergonomic case is muscle memory you already have. If you're not a Neovim user, you're just buying another learning curve. Also, the language is Lua (not Rust) so it won't appeal to the ratatui crowd on that front, and there's no proper layout system yet.<p>Neovim [0] renders to its own buffer system (extmarks, floating windows, virtual text) rather than emitting ANSI escape codes. Under the hood it's still a terminal app, but from the UI author's perspective you're not fighting terminfo, CSI sequences, or varying terminal support. You get proper cursor tracking, scroll regions, and editable text areas out of the box.<p>On the UI framework side, morph.nvim [1] provides a React-like component model (h(), state, reconciliation) on top of Neovim. It's not a general answer the way ratatui is, but for the slice of devs already in Neovim (there are dozens of us!), it's a pragmatic way to get GUI-framework-like ergonomics without the terminal protocol fight.<p>For a sample of what TUIs in this paradigm can look like, I've been working on tuis.nvim [2] (Docker, K8s, SystemD services, process management, and more all as native Neovim buffer TUIs).<p>[0] <a href="https://neovim.io" rel="nofollow">https://neovim.io</a><p>[1] <a href="https://github.com/jrop/morph.nvim" rel="nofollow">https://github.com/jrop/morph.nvim</a><p>[2] <a href="https://github.com/jrop/tuis.nvim" rel="nofollow">https://github.com/jrop/tuis.nvim</a></p>
]]></description><pubDate>Sat, 22 Aug 2026 14:32:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=49400159</link><dc:creator>jrop</dc:creator><comments>https://news.ycombinator.com/item?id=49400159</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49400159</guid></item><item><title><![CDATA[New comment by stego-tech in "Stop Making TUIs"]]></title><description><![CDATA[
<p>Just adding in my perspective:<p>TUIs, at least to me and some friends in my circles, do something that native applications don’t: demand focus from the user.<p>Sure, modern terminals and TTY environments have visual tabs and virtual terminals that let you quickly toggle between multiple apps, and you can of course manually code your screen to split apps across a single “window” if you really want to get into the guts of things.<p>But for several folks in my close circles (myself included), the fact that each TUI occupies an entire screen by default, forces us to focus on what’s going on and what tasks we’re trying to accomplish in a way native UIs don’t. On the desktop I can flit between Discord and Telegram and multiple games and several Firefox windows full of tabs and the video encode I’m working on and hey did that bank transaction go through let’s check my email except UGH music streaming went off the rails so let me go back to my client and-<p>You get the idea. For folks who lack the neurotransmitters to maintain consistent focus or wave off distractions, a terminal environment acts as an accessibility device in and of itself. btop on 1, irssi on 2, Hermes (Qwen 35B) on 3, with 4 as my primary workspace and 5 as a fallback. Simple. Clean. Efficient. Lightweight.<p>I <i>generally</i> concur with the author that we should be “summoning” (I <i>love</i> that word for reasons that deserve their own essay/comment) more native UI apps that are as information-dense as, well, Bloomberg Terminal. There’s no reason we can’t build something as powerful and focused for the everyman for, say, inventory collections, or K8s constructs, or network architecture, all in a native UI. There’s nothing wrong with the GUI, only that at some point we let ourselves get suckered for the narrative that GUIs have to be easy, simple, and opaque, as opposed to transparent and (logically) complex. We can and should build GUIs that flow logically like the commands they’re executing behind the scenes; hell, we should be able to open a console log of every action we took in the GUI and the associated command(s) it executed, so we can better learn to transpose from GUI to CLI ourselves and build more capable or complex automations.<p>GUI isn’t bad. TUI isn’t bad. What’s bad is presuming one or the other is superior to everything (or for everyone) else, or worse, assuming one cannot function in a given way comparable or equivalent to the other.</p>
]]></description><pubDate>Sat, 22 Aug 2026 11:33:59 +0000</pubDate><link>https://news.ycombinator.com/item?id=49398660</link><dc:creator>stego-tech</dc:creator><comments>https://news.ycombinator.com/item?id=49398660</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49398660</guid></item><item><title><![CDATA[New comment by rcleveng in "OTel isn’t going well"]]></title><description><![CDATA[
<p>Sounds a lot like K8s.  It's not a framework you use, it's a framework to build a framework on top of.<p>I wish the observability vendors would move to using it under the covers so it's easier to mix and match.<p>I wish the otel support wasn't super buggy in most of the frameworks and backends.</p>
]]></description><pubDate>Sat, 22 Aug 2026 04:43:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=49396628</link><dc:creator>rcleveng</dc:creator><comments>https://news.ycombinator.com/item?id=49396628</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49396628</guid></item><item><title><![CDATA[New comment by cyberpunk in "The road to ACID transactions in Cassandra 6"]]></title><description><![CDATA[
<p>Yep, the pain is real. We don’t mention sstableloader in polite company. Add in kubernetes and getting your rf/racdc.properties 
 right in a 3 az cluster so everything doesn’t just die on a netsplit with local_quorum (harder than it sounds) the joys of the ‘repair’ cronjob, backups, and commitlogs only occasionally not corrupting to the point the 8th out of the 15 nodes in your kube sts can’t restart after a bad exit() (e.g during worker upgrades —- good luck with this one!) …. yeah. hate.<p>Postgres isn’t the answer for my workload tho we really tried, i even wrote custom sharding for our postgres and it couldn’t handle the writes the cassandra setup shrugs off, but for sure this isn’t a ‘normal’ requirement most applications have.</p>
]]></description><pubDate>Sat, 22 Aug 2026 00:04:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=49395239</link><dc:creator>cyberpunk</dc:creator><comments>https://news.ycombinator.com/item?id=49395239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49395239</guid></item><item><title><![CDATA[New comment by nrmitchi in "Claudette: Make Claude stop talking like a BuzzFeed article"]]></title><description><![CDATA[
<p>I struggled with this for <i>a long time</i>, but actually seem to have gotten to a place where this is largely resolved. Copy/paste from my current claude.md:<p>The CC-5 rule specifically seems to be (just from reading through, nothing repeatable-eval based) the part that actually catches and prevents me from having to clean it up afterwards.<p>```<p>### Code comments<p>The failure this prevents: writing a comment that narrates <i>the change I am
making right now</i>. That context is real, but it expires the instant the change
merges — the defect it describes no longer exists, so the comment becomes a
story about a problem no future reader can observe. It is a changelog entry in
the wrong file, and a third copy of text already required in the commit body
(3.b) and the PR description.<p>- *CC-1 (MUST NOT)* Write a comment describing a change, a fix, a defect, its
  cause, or what the code used to do. No "was/now/previously/instead of", no
  "this fixes", no "needed because otherwise", no "note that we no longer".<p>- *CC-2 (MUST)* Apply the survival test to every comment before writing it:
  <i>would this still be true and useful to someone reading this file a year from
  now, who never saw the diff?</i> If it only makes sense beside the diff, it is
  changelog — delete it and put it in the commit body.<p>- *CC-3 (MUST)* Default to zero comments. Declarative config — Terraform,
  DNS records, k8s manifests, CI YAML, Helm values — is self-describing and
  takes none. A resource named `dmarc-example-com` does not need a comment
  saying it is the DMARC record.<p>- *CC-4 (MAY)* Comment only when a future editor would actively break
  something without it: a non-obvious external constraint, a required
  out-of-band manual step, an invariant the surrounding code cannot show. One
  line. If it needs a paragraph it belongs in `plans/`, not inline.<p>- *CC-5 (MUST)* Before every commit, re-read the comment lines I added:
  `git diff --cached | grep '^+' | grep -E '#|//|/*'`. Each hit must pass CC-2
  on its own. Deleting is always an acceptable outcome. "I already wrote it",
  "it is only one line", and "this one is genuinely useful" are not exemptions
  — the last one is the exact thought that precedes every violation.<p>- *CC-6 (MUST)* Applies to comments I <i>edit</i> as well as ones I add. When a
  change invalidates an existing comment, the default action is DELETE, not
  rewrite it into a new narrative.<p>```<p>Yes, I am aware that claude mostly generated this, and it can probably be better and/or more succinct.</p>
]]></description><pubDate>Fri, 21 Aug 2026 18:42:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=49392261</link><dc:creator>nrmitchi</dc:creator><comments>https://news.ycombinator.com/item?id=49392261</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49392261</guid></item><item><title><![CDATA[New comment by pstuart in "Generic Methods in Go 1.27"]]></title><description><![CDATA[
<p>> Go people were always been perfectly capable of creating abominational messes before generics arrived<p>A poster child for this is k8s.</p>
]]></description><pubDate>Fri, 21 Aug 2026 13:40:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=49387908</link><dc:creator>pstuart</dc:creator><comments>https://news.ycombinator.com/item?id=49387908</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49387908</guid></item><item><title><![CDATA[New comment by hardbyte in "Show HN: Interactive PostgreSQL Permissions"]]></title><description><![CDATA[
<p>pgroles is a declarative PostgreSQL role manager (YAML in, plan/apply out, CLI or Kubernetes operator). This interactive tutorial walks through a few common Postgres permission errors that you might run into.<p>You run queries against real PostgreSQL 18 compiled to WASM (PGlite). Building up from early broad grants directly on users in the first section through to abstractions around owners, login roles and roles that scope access.</p>
]]></description><pubDate>Fri, 21 Aug 2026 10:52:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=49386288</link><dc:creator>hardbyte</dc:creator><comments>https://news.ycombinator.com/item?id=49386288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49386288</guid></item><item><title><![CDATA[New comment by solatic in "The August 17 outage"]]></title><description><![CDATA[
<p>My last three employers refused to take advantage of Kubernetes PriorityClasses and agree to schedule work to agree (as a cluster-wide resource that affected many teams) on what our PriorityClasses should be and to migrate workloads to have priorities. And this is something relatively easy to implement - no developer work required, and practically no YAML to write.<p>Why not? Because sadly, fundamentally, most workplaces are not run by people who care about day-2 operations or long-term health. Product or Sales pushes customer-visible work into the pipeline, and you dare not say no. "Day-2" work is not considered to be something that moves the needle. Even now, with GitHub facing these severe outages, it's not like they're facing some massive exodus; their load seems to be getting worse over time, not better.<p>I'd be very surprised if there weren't any employees at GitHub who had read the SRE book. I'd expect that they're just not listened to.</p>
]]></description><pubDate>Fri, 21 Aug 2026 07:09:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=49384789</link><dc:creator>solatic</dc:creator><comments>https://news.ycombinator.com/item?id=49384789</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49384789</guid></item><item><title><![CDATA[New comment by wotamess in "There's no such thing as a small software team anymore"]]></title><description><![CDATA[
<p>Eventually we'll compress out unnecessary state and keep desired data states only; AI then won't be editing k8s yml, source code, etc.<p>It will just be computing new geometric states and syncing them to the screen.<p>Incidentally not having devs save endless copies of their dev tools and languages will save a bunch of electricity; storing and copying that stuff around uses a lot of electricity.<p>Software engineers who want to be taken as experts in their craft need to understand the chip makers are experts in theirs all the same. They’re not leaving your concerns about correctness, efficiency, and stability unconsidered.<p>Almost offensive for non-experts in hardware dev to continue to insinuate no one but SaaS devs have any idea how computers work.</p>
]]></description><pubDate>Fri, 21 Aug 2026 03:04:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=49383248</link><dc:creator>wotamess</dc:creator><comments>https://news.ycombinator.com/item?id=49383248</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49383248</guid></item><item><title><![CDATA[New comment by metal13 in "The Citizen Developer"]]></title><description><![CDATA[
<p>Found this post super interesting. I've personally run into similar, and built a really lightweight k8s operator and claude skill that lets the citizen devs deploy to an eng/IT managed internal k8s cluster. Keeps things safe (non-public), and can update it as they get more advanced.</p>
]]></description><pubDate>Thu, 20 Aug 2026 22:49:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=49381329</link><dc:creator>metal13</dc:creator><comments>https://news.ycombinator.com/item?id=49381329</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49381329</guid></item><item><title><![CDATA[New comment by smartbit in "How Kubernetes Probes Work"]]></title><description><![CDATA[
<p><i>I ported Kubernetes to the browser</i> <a href="https://ngrok.com/blog/i-ported-kubernetes-to-the-browser" rel="nofollow">https://ngrok.com/blog/i-ported-kubernetes-to-the-browser</a><p>3 comments <a href="https://news.ycombinator.com/item?id=48734656">https://news.ycombinator.com/item?id=48734656</a></p>
]]></description><pubDate>Thu, 20 Aug 2026 09:32:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=49372355</link><dc:creator>smartbit</dc:creator><comments>https://news.ycombinator.com/item?id=49372355</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49372355</guid></item><item><title><![CDATA[New comment by tardoe in "Infra Lang – DSL That Compiles to Kubernetes, Helm, Compose, Terraform, and CI"]]></title><description><![CDATA[
<p>I tend to agree - this will work for a "standard" application web/app/db but as soon as you start doing anything remotely platform specific it won't work. E.g. k8s manages secrets and certs differently to compose etc.</p>
]]></description><pubDate>Thu, 20 Aug 2026 05:59:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=49370895</link><dc:creator>tardoe</dc:creator><comments>https://news.ycombinator.com/item?id=49370895</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=49370895</guid></item></channel></rss>