Twitter | Search | |
Joe Beda
Founder and CTO . Started GCE, , GKE, , . Xoogler. He/Him.
17,114
Tweets
844
Following
14,524
Followers
Tweets
Joe Beda 2h
Replying to @aronchick
Not saying that isn't screwed up. But perhaps that might be the explanation.
Reply Retweet Like
Joe Beda 2h
Replying to @aronchick
Yeah but then they'd have to rework the steady state models for profitability. Keeping them vacant makes the property look better on paper as vacancy is a temporary situation.
Reply Retweet Like
Joe Beda 2h
Replying to @aronchick
I'd guess that it'll take time for refinancing or for rents to catch up.
Reply Retweet Like
Joe Beda 2h
Replying to @aronchick
My guess: financing assumes base rent level. Freebies and incentives are a way to lower rents without lowering rents.
Reply Retweet Like
Joe Beda 6h
Replying to @krisnova
I'm so sorry it didn't end with a summit. Lots of questions but just rest and recover. Glad you are safe. Rachel and I were really scared.
Reply Retweet Like
Joe Beda 23h
Replying to @CarterRMorgan
Where you going? What's next? Did I miss an update?
Reply Retweet Like
Joe Beda Jun 24
Replying to @as_w @jeffsand and 2 others
Ha! Fun fact: we called early demos of avalon/WPF "CFS" for "Cool Flying Shit". But the browsers pretty much do it all now. That was a long time ago!
Reply Retweet Like
Joe Beda retweeted
Benjamin Goering Jun 22
Just did first restore from ark backup . Deleted my self-hosted GitLab + persistentvolumes. Restored. It worked! Thanks .
Reply Retweet Like
Joe Beda Jun 24
Replying to @jonolson @jessfraz
Hahaha. So sorry. But it was needed!
Reply Retweet Like
Joe Beda Jun 23
Replying to @mattklein123
Did you use teeth? (Either yours or the baby's)
Reply Retweet Like
Joe Beda Jun 23
Replying to @gugahoi @netflix
Yeah that's not gonna happen. ;)
Reply Retweet Like
Joe Beda Jun 23
Replying to @mauilion @raesene and 3 others
Good one! I didn't know about that.
Reply Retweet Like
Joe Beda Jun 23
Reply Retweet Like
Joe Beda Jun 23
Yeah -- with RBAC enabled. And, really, *everyone* should be running with RBAC at this point.
Reply Retweet Like
Joe Beda Jun 23
At least in most clusters the default service accounts have zero privs. It'd be nice to be able to use the PSP to change it so the SA creds don't get mounted by default.
Reply Retweet Like
Joe Beda Jun 23
Pico services are the new thing. Goes great with chips and guac.
Reply Retweet Like
Joe Beda Jun 23
Replying to @jessfraz
My motto has always been "Don't get good at something you don't want to do". (I should get stickers made...)
Reply Retweet Like
Joe Beda Jun 23
Oh -- and you could still probably use SubjectAccessReview to implement AuthZ using k8s RBAC.
Reply Retweet Like
Joe Beda Jun 23
Folks in SIG-auth and the container identity WG might have more ideas beyond this as what to do in the meantime. I'd reach out to them via mail/slack/zoom.
Reply Retweet Like
Joe Beda Jun 23
You could create a controller that generates NATS specific secrets for access. Do this by watching for SAs that have an "map to NATS annotation" on them. Then create a buddy secret. You'll have to map it into the pod explicitly but it would be safer.
Reply Retweet Like