Comments URL: https://news.ycombinator.com/item?id=46809522

Points: 1

# Comments: 0

Comments URL: https://news.ycombinator.com/item?id=41856695

Points: 1

# Comments: 0

    export SOME_VAR=$(cat /run/secrets/some_secret)
    exec /original/entrypoint.sh

https://github.com/neuroforgede/swarmgate

What's Swarmgate? Swarmgate is our innovative Docker Socket Proxy designed to provide a tenant-specific view onto a Docker Swarm. It supports all necessary operations for deploying stacks, along with managing volumes, secrets, configs, networks, and more. This allows multiple teams to work collaboratively within the same cluster without interfering with each other, thanks to unique labels that filter requests based on resource ownership. It's about making Docker Swarm environments as efficient and user-friendly as possible.

Under the Hood:

We've built Swarmgate using Node.js and Express, with the dockerode (and docker-modem) library for Docker interaction. This technology stack ensures robust performance and seamless integration with Docker's API, providing a reliable and effective management tool.

What's New in 0.7.0?

    Docker Registry Auth Verification: Enhanced security through Docker Registry authentication checks to prevent unauthorized access to images.

    Security Enhancements: Removal of the :version/swarm endpoint to protect against potential security vulnerabilities by exposing swarm join tokens.

    Simplified Proxying: Introduction of the proxyRequestToDocker function for straightforward proxying of requests without the need for filtering.

    Resolved Log Issues: We've tackled service/tasks log parsing issues to ensure compatibility and ease of use with the Docker CLI.

As enthusiastic as we are about Swarmgate 0.7.0, it's important to remember that this is still ALPHA software. It's primarily a defense against accidental disruptions within clusters. While we're diligently enhancing security features, it's advisable to use Swarmgate in environments where there's a high level of trust among users.

What's up next:

    A better tutorial on how to set this up

    More ideas from https://github.com/neuroforgede/swarmgate/issues/1

Comments URL: https://news.ycombinator.com/item?id=39746047

Points: 2

# Comments: 1

I love DRF for CRUD apis. It just gets the job done and you can Focus on data modelling.

We built our data hub/data Integration solution on top of it. [1] It was a good choice.

By far the most extensible and overridable library I have worked with so far. Even when you need to ressort to hacks, they never seem to break when upgrading a Version.

[1] https://github.com/neuroforgede/nfcompose

https://github.com/BretFisher/ama/discussions/146

Sounded cool, but in practice it was really slow. The techniques that are usually employed by Data Vault to fix this issue seemed too complex. Over time we moved to an implementation that handles the historization dynamically at runtime by generating historizing SQL queries ourselves [1]. We now use transaction time to determine winners and use an autoincrementing column to determine who wins on ties. A lot of brainpower went into ensuring this design is concurrency safe. On a sidenote: Generating SQL in python sounds dangerous, but we spent a lot of time on making it secure. We even have a linter that checks that everything is escaped properly whenever we are in dev mode [2].

[0] https://github.com/neuroforgede/nfcompose/

[1] https://github.com/neuroforgede/nfcompose/blob/main/skipper/...

[2] https://github.com/neuroforgede/nfcompose/blob/main/skipper/...

Also: Works on mobile now as well.

Comments URL: https://news.ycombinator.com/item?id=38867022

Points: 1

# Comments: 0

Note that we build dashboards for customers that end up having some complex SQL directly in Superset.

Comments URL: https://news.ycombinator.com/item?id=38784627

Points: 2

# Comments: 0

This is why we built Pro Feed - to have one central place to see all updates from your Microsoft ecosystem.

We are currently in closed beta, if you want to try it out, apply for a seat on the website. I am looking forward to your feedback!

Here is a list of our planned features:

- Smart Filters - slice and dice your Teams structure into aggregates that make sense to you

- Smart Notifications - notify on the messages that actually matter

- AI Assistant - Chat with your Message history

- Catch me up - Summarize what has happened while you were on vacation

- A lot more integrations: E-Mails, MS Planner tasks and a lot more are in the pipeline.

- Non Microsoft Integrations - depending on user feedback.

Comments URL: https://news.ycombinator.com/item?id=38714537

Points: 2

# Comments: 0

Its not shiny but it works. We use it for most of our selfhosted stuff (which is a lot) and our customers.

I host a swarm fans hangout every 2 months over at devops.fan with Bret Fisher. Also we help each other on discord. Join us :)

This project aims to alleviate this. We implement a Docker Socket Proxy which is intended to give a tenant specific view onto a Docker Swarm. It exposes all necessary operations to deploy stacks with all features to Docker Swarm as well as management endpoints for volumes, secrets, configs, networks.

Every proxy can be configured with a unique label to give a tenant specific view onto the swarm. This way you can have multiple teams of people collaborate on the same cluster. This is done by filtering all requests on resource labels to check whether the resources are "owned" by the proxy/tenant.

This projects uses Node.js and Express for the server, along with the dockerode (and docker-modem) library to interact with Docker.

Comments URL: https://news.ycombinator.com/item?id=38243211

Points: 3

# Comments: 1

This might sound familiar to you, though:

- Default priorities on tasks produce lists of shame that never get finished - missing due dates create uncertainty - unclear owners of tasks cause chaos.

These and other process problems are why we at NeuroForge built TaskThing. It will help you streamline and standardize your MS Planner process.

All fully integrated into MS Planner so you still get to use the MS Teams integration, Web view and mobile App that you are used to.

Comments URL: https://news.ycombinator.com/item?id=37671884

Points: 3

# Comments: 0

Also the volume plugin spec is so simple that it is possible to maintain your own plugin (even without csi).