<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: danielmartins</title><link>https://news.ycombinator.com/user?id=danielmartins</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Wed, 13 May 2026 15:11:48 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=danielmartins" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by danielmartins in "Googlebook"]]></title><description><![CDATA[
<p>Judging by the poor hardware quality of some Google Pixel generations, I'm not putting my money anywhere near this thing.<p><i>Edit:</i> spelling</p>
]]></description><pubDate>Tue, 12 May 2026 21:12:34 +0000</pubDate><link>https://news.ycombinator.com/item?id=48114665</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=48114665</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48114665</guid></item><item><title><![CDATA[New comment by danielmartins in "GrapheneOS – Break Free from Google and Apple"]]></title><description><![CDATA[
<p>I had a Pixel 6a with Graphene OS for a year before the phone started to glitch and eventually die. It ran pretty hot; sometimes it was hard to even hold the phone in my hands without burning myself.<p>I could not get a replacement as I bought the phone in a foreign country (Google doesn’t sell Pixels here in Brazil).<p>So as much as I love the idea of running a more private phone, I found the hardware extremely fragile and poorly designed, so I will not buy from them again anytime soon.</p>
]]></description><pubDate>Tue, 17 Feb 2026 15:28:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=47048516</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=47048516</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47048516</guid></item><item><title><![CDATA[Handling Secrets in the Terminal]]></title><description><![CDATA[
<p>Article URL: <a href="https://danielfm.me/posts/handling-secrets-in-the-terminal/">https://danielfm.me/posts/handling-secrets-in-the-terminal/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=46886563">https://news.ycombinator.com/item?id=46886563</a></p>
<p>Points: 1</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 04 Feb 2026 14:57:11 +0000</pubDate><link>https://danielfm.me/posts/handling-secrets-in-the-terminal/</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=46886563</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46886563</guid></item><item><title><![CDATA[New comment by danielmartins in "Ask HN: Share your personal website"]]></title><description><![CDATA[
<p>Here’s mine!<p><a href="https://danielfm.me" rel="nofollow">https://danielfm.me</a><p>After years of neglect, I updated the theme, translated all pages to Portuguese and finally posted something new. I hope to continue this and maybe start making it an habit.</p>
]]></description><pubDate>Wed, 14 Jan 2026 23:54:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=46625816</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=46625816</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46625816</guid></item><item><title><![CDATA[OPA Policies Without Breaking the Bank]]></title><description><![CDATA[
<p>Article URL: <a href="https://danielfm.me/posts/opa-policies-without-breaking-the-bank/">https://danielfm.me/posts/opa-policies-without-breaking-the-bank/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=46601441">https://news.ycombinator.com/item?id=46601441</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 13 Jan 2026 14:34:18 +0000</pubDate><link>https://danielfm.me/posts/opa-policies-without-breaking-the-bank/</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=46601441</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=46601441</guid></item><item><title><![CDATA[New comment by danielmartins in "Ghostty 1.0"]]></title><description><![CDATA[
<p>Thanks!</p>
]]></description><pubDate>Fri, 27 Dec 2024 13:45:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=42521991</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=42521991</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42521991</guid></item><item><title><![CDATA[New comment by danielmartins in "Ghostty 1.0"]]></title><description><![CDATA[
<p>Looks awesome, amazing work!<p>Any particular/strong reason for choosing Zig for this?</p>
]]></description><pubDate>Fri, 27 Dec 2024 11:17:19 +0000</pubDate><link>https://news.ycombinator.com/item?id=42521373</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=42521373</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=42521373</guid></item><item><title><![CDATA[Prometheus for Developers]]></title><description><![CDATA[
<p>Article URL: <a href="https://danielfm.me/prometheus-for-developers/">https://danielfm.me/prometheus-for-developers/</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=20460148">https://news.ycombinator.com/item?id=20460148</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Wed, 17 Jul 2019 14:57:45 +0000</pubDate><link>https://danielfm.me/prometheus-for-developers/</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=20460148</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=20460148</guid></item><item><title><![CDATA[New comment by danielmartins in "Amazon EKS – Now Generally Available"]]></title><description><![CDATA[
<p>Not as generally available as I thought, and for the looks of it, feels just as "hacky" as the preview with respect to the user experience. For some reason, I was expecting more from them.</p>
]]></description><pubDate>Tue, 05 Jun 2018 19:08:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=17240972</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=17240972</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=17240972</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>You can annotate any Service of type LoadBalancer in order to configure various aspects[1] of the associated ELB, including which ACM-managed certificate you want to attach to each listener port.<p>[1] <a href="https://github.com/kubernetes/kubernetes/blob/master/pkg/cloudprovider/providers/aws/aws.go" rel="nofollow">https://github.com/kubernetes/kubernetes/blob/master/pkg/clo...</a></p>
]]></description><pubDate>Thu, 14 Sep 2017 01:53:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=15244437</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15244437</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15244437</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> This is not true, if you run Debian / CentOS7 / Ubuntu, out of the box the settings are good. The thing you don't want to do is start to modify the network stack by reading random blogs.<p>I agree these are good defaults, but they are not meant to work well for all kinds of workloads. And yes, if things are working for you they way they are, that's okay; there's no need to change anything.<p>On the other hand, I personally don't know <i>anyone</i> who runs production servers of any kind on top of unmodified Linux distros.</p>
]]></description><pubDate>Wed, 13 Sep 2017 20:50:41 +0000</pubDate><link>https://news.ycombinator.com/item?id=15242519</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15242519</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15242519</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> TLS termination at the Ingress Controller and by default unencrypted from there to the service endpoint?<p>We are doing TLS termination at the ELB (we're running on AWS).<p>> Interesting discussion here: <a href="https://github.com/kubernetes/ingress/issues/257" rel="nofollow">https://github.com/kubernetes/ingress/issues/257</a><p>Great, thanks!<p>Regarding ways of updating of the NGINX upstreams without requiring a reload, I was just made aware of modules like ngx_dynamic_upstream[1]. I'm sure there are other ways to address this in a less disruptive way than reloading everything, so this is probably something that could be improved in the future.<p>[1] <a href="https://github.com/cubicdaiya/ngx_dynamic_upstream" rel="nofollow">https://github.com/cubicdaiya/ngx_dynamic_upstream</a></p>
]]></description><pubDate>Wed, 13 Sep 2017 20:36:14 +0000</pubDate><link>https://news.ycombinator.com/item?id=15242351</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15242351</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15242351</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>No. By default, the NGINX ingress controller routes traffic directly to pod IPs (the Service endpoints):<p><a href="https://github.com/kubernetes/ingress/tree/master/controllers/nginx#why-endpoints-and-not-services" rel="nofollow">https://github.com/kubernetes/ingress/tree/master/controller...</a></p>
]]></description><pubDate>Wed, 13 Sep 2017 20:13:16 +0000</pubDate><link>https://news.ycombinator.com/item?id=15242151</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15242151</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15242151</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> Why would any sane Op/Inf/SRE choose not to have at least account-level isolation - is it only a matter of cost due to under-utilization?<p>In our particular case, yes, pretty much. We are a small company with a small development team, so even if I would want to split accounts to different teams, we would end up having one account for 2-3 users, which doesn't make a lot of sense now.</p>
]]></description><pubDate>Wed, 13 Sep 2017 18:03:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=15240865</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15240865</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15240865</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> This is a great read. I know the single cluster for all env is something that is sort of popular but it's always made me uncomfortable for the reasons stated in the article but also for handling kube upgrades. I'd like to give upgrades a swing on a staging server ahead of time rather than go straight to prod or building out a cluster to test an upgrade on.<p>I've been doing patch-level upgrades in-place since the beginning, and never had a problem. For more sensitive upgrades, this is what I do: create a new cluster using based on the current state in order to test the upgrade in a safe environment before applying it to production.<p>And for even more risky upgrades, I go blue/green-like by creating a new cluster with the same stuff running in it, and gradually shifting traffic to the new cluster.</p>
]]></description><pubDate>Wed, 13 Sep 2017 18:03:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=15240860</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15240860</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15240860</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> Could you share which version of NGINX you found the issue with the reloads? Which version the fix was released?<p>I'm using 0.9.0-beta.13. I first reported this issue in a NGINX ingress PR[1], so the last couple of releases are not suffering from the bug I reported in the blog post.<p>> I find it interesting/brave that you use a single cluster for several environments.<p>I'm not working for a big corporation, so dev/staging/prod "environments" are just three deployment pipelines to the same infrastructure.<p>As of now, things are running smoothly as they are, but I might as well use different clusters for each environment in the future.<p>[1] <a href="https://github.com/kubernetes/ingress/pull/1088" rel="nofollow">https://github.com/kubernetes/ingress/pull/1088</a></p>
]]></description><pubDate>Wed, 13 Sep 2017 15:21:01 +0000</pubDate><link>https://news.ycombinator.com/item?id=15239084</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15239084</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15239084</guid></item><item><title><![CDATA[New comment by danielmartins in "Painless NGINX Ingress"]]></title><description><![CDATA[
<p>> OP didn't mention what Linux distro he's using and what are all of the OS-level configs he changed in the end of the day.<p>I'm using Container Linux, and yes, I did a few modifications, but I intentionally left them out of the blog post as someone would be tempted to use them as-is.<p>I'll share more details in that regard if more people seem interested.</p>
]]></description><pubDate>Wed, 13 Sep 2017 15:13:15 +0000</pubDate><link>https://news.ycombinator.com/item?id=15238999</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15238999</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15238999</guid></item><item><title><![CDATA[Painless NGINX Ingress]]></title><description><![CDATA[
<p>Article URL: <a href="http://danielfm.me/posts/painless-nginx-ingress.html">http://danielfm.me/posts/painless-nginx-ingress.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=15238672">https://news.ycombinator.com/item?id=15238672</a></p>
<p>Points: 177</p>
<p># Comments: 49</p>
]]></description><pubDate>Wed, 13 Sep 2017 14:37:52 +0000</pubDate><link>http://danielfm.me/posts/painless-nginx-ingress.html</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=15238672</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=15238672</guid></item><item><title><![CDATA[Container Performance Analysis at DockerCon 2017]]></title><description><![CDATA[
<p>Article URL: <a href="http://www.brendangregg.com/blog/2017-05-15/container-performance-analysis-dockercon-2017.html">http://www.brendangregg.com/blog/2017-05-15/container-performance-analysis-dockercon-2017.html</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=14346549">https://news.ycombinator.com/item?id=14346549</a></p>
<p>Points: 2</p>
<p># Comments: 0</p>
]]></description><pubDate>Tue, 16 May 2017 00:51:51 +0000</pubDate><link>http://www.brendangregg.com/blog/2017-05-15/container-performance-analysis-dockercon-2017.html</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=14346549</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14346549</guid></item><item><title><![CDATA[New comment by danielmartins in "Kubernetes Ingress with automatic TLS on ARM running in my living room"]]></title><description><![CDATA[
<p>Nice article.<p>You said you are using this toy cluster to play around with monitoring as well, so could you share more details in that area, for instance:<p>- How much resources does Kubernetes components take from your rpi boards?<p>- Did you have to do any tweaking in order to make everything run smoothly?</p>
]]></description><pubDate>Mon, 24 Apr 2017 13:27:08 +0000</pubDate><link>https://news.ycombinator.com/item?id=14184095</link><dc:creator>danielmartins</dc:creator><comments>https://news.ycombinator.com/item?id=14184095</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=14184095</guid></item></channel></rss>