jsabo

Yeah I suppose the laws currently being passed in dozens of states across the country are actually fully in support of LGBTQ+ communities and aren't in fact discrimination.

Agreed, this is one of the biggest issues I see. Anywhere you install a custom controller essentially has access to ~all of your resources. What could go wrong?

I'm not sure what you mean by too many things ended up as custom resources -- it's the recommended extension point and you can do a lot with them that you can't do with core types.

Custom resources had/have some growing pains but I think worked out pretty well. It can be very very hard to test and distribute them though. As someone who maintained a controller with paid support, your test matrix gets pretty large pretty fast accounting for different k8s versions, different hosted versions (GKE, AKS, etc), different distros (openshift, rancher, etc). And that's before you even get into specific configurations like pod security policies, can the control plane communicate with the data plane, is there a service mesh.

Resource versioning is hard to get right. Once a resource type is v1, it becomes difficult to extend it. You can't add a beta field to it easily. Revising schema can be hard since anything more than a no op conversion between versions requires a webhook, which requires a certificate chain, and while cert-manager is popular it is not ubiquitous and regularly has breaking changes. Webhook setup issues made up a large portion of our support requests.

As far as the general "reconciliation loop" architecture goes, you end up with something similar in most orchestration systems I've worked on, or you wish that you did. So overall I think that worked out well. Getting it right can be hard, but I think that's the nature of the beast.

It might be worth reading Susan Fowler's rather notable reflection on her time at Uber if you think discrimination is only subtle or at the edges

If you're using a tag like centos:8 that gets updated periodically, you already do not have reproducible builds. This just ensures you get updated packages as soon as possible

Remember there are multiple supreme court cases just this year about trans people's right to both be trans and employed. That's part of what is meant by "existence being political".

That depends on if your existence is political I suppose. Ask some of your LGBT colleagues, especially trans colleagues, if they feel like can just leave politics at the door.

There's a lot of hurdles involved with actually using the service -- many movies are explicitly unavailable, eligible screenings of available movies are very limited (only two showings per movie for the entire day this weekend for me, only between 4-7pm), and the main hassle of not being able to buy multiple seats at once or in advance.

For what it's worth I've really enjoyed some of your output during that time though, I was actually listening to one of the o pioneers pink couch recording earlier today. Sorry to hear it burned you out though, I can definitely see how that'd happen trying to tour and work freelance simultaneously.

I didn't mean to come across as totally dismissive, more that it was something I was unaware of and was sad I couldn't find more detail about. Good looking with the link though. I'm reading through that section now but it doesn't look like there's any follow up on that claim unfortunately. Assuming generously they're paying 4% of the ticket price to process CCs, it seems like there's still a pretty good chunk money going back to the venue.