Hacker News new | ask | show | jobs
by himata4113 126 days ago
Kubernetes solves real problems for the 1% who need it. The other 99% are paying a massive complexity tax for capabilities they never use, while 87% of their provisioned CPU sits idle.

is where the author is just wrong:

- abstracts away ssh - makes it pretty unnecessary

- rbac multi tenancy

- better automations

- orchestating more than one cluster

- better infra as code

- provisions are as good as you make them, if you don't want them only use limits.

- large mind share, bitnami (was) great

I use k3s for my home network because it's simple and easy, thinking that k8s is overengineered just plain wrong - it's just different especially if you compare different versions of k8s designed for different things where for ex: k3s bundles csi, cni, ctl, ingress for you.

I actually struggle with compose ('orchestration' alternative) significantly more since it usually has complicated workarounds to missing features.

I have been running 5 k8s-flavored clusters for more than half a decade between 1 to 40 nodes.

1 comments

The author claimed cert-manager as inherent k8s overhead (its not) but then didn't mention certificate management with docker swarm at all. They lost me there.
This is the thing about kubernetes that these short sighted takes always seem to miss. Kubernetes is complicated because deployment is complicated. For every little knob in k8s there is a pretty good standard path. Need certs? Cert manager. Autoscaling? Cluster autoscaler or KEDA. Load balancing? Handled. All wheels you will need to reinvent yourself otherwise.
The author mostly lost me when he started doing comparative line counts between docker swarm and kubernetes.

And the docker swarm example didn’t even accomplish the same thing.

I agree. Honestly, this overhead doesn't exist in practice. I've never even checked what's inside cert-manager namespace, it gets deployed for every new cluster, it works, someone automated this, now who cares.
No kidding. Using cert-manager with my DNS on cloudflare or GKE is about the easiest and most mindless and zero-friction LE implementation I’ve ever used.