frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Tell HN: I unknowingly broke the PHP RCE embargo. I am sorry.

529•petecooper•22h ago•209 comments

Ask HN: If the models are so good, why doesn't OpenAI just start 100 companies?

110•ex-aws-dude•11h ago•99 comments

Median product "lifespan" has fallen from ~4y down to ~1.5y

54•stanislavb•5h ago•24 comments

GitHub now uses a generic avatar instead of "Identicons" for new profiles

10•winkelmann•9h ago•2 comments

Ask HN: How to deal with shipping AI-written code you don't understand?

614•rzk•3d ago•748 comments

Tell HN: 2x PHP RCE CVEs with CVSS 10.0 Incoming

294•petecooper•2d ago•62 comments

Ask HN: Which AI Security tool do you use and why for your repositories?

3•BehanPrW•16h ago•1 comments

Ask HN: Have the PHP vulnerabilities been exploited?

5•crisnoble•12h ago•2 comments

Biggest pet peeve of FPGA toolchains

3•vWijdaan•13h ago•0 comments

Ask HN: How has your company adapted interviews in the AI world?

6•parthdesai•1d ago•6 comments

Ask HN: How can you retrain in a field requiring expensive equipment?

14•masterchief166•1d ago•11 comments

Toyota Releases Video of Wheelchair-Alternative Mobility Concepts in Action

13•Mobius01•1d ago•3 comments

Ask HN: Am I the only dev who, with the advent if AI, want to work in a forest?

12•aledevv•1d ago•15 comments

Run iOS on Android Phones

4•spicygum•23h ago•0 comments

Ask HN: Are we giving away our civilization?

13•bigwheels•1d ago•4 comments

Ask HN: How does your help desk verify someone before resetting MFA?

8•ovudus•1d ago•1 comments

Open-source, cross-harness memory for AI agents

17•shakshukan•1d ago•14 comments

Ask HN: Dark mode for HN please? (2026)

26•Stitch4223•3d ago•14 comments

Ask HN: How do you deal with AI output of your boss?

21•okr•5d ago•18 comments

Ask HN: Friends, what is your Plan B?

2•wombat-man•15h ago•5 comments

Ask HN: Do you know Bitbucket are chaning their SSH endpoints?

5•mcrmonkey•3d ago•2 comments

Firefox Auto-Run on Windows

3•BubbleRings•1d ago•3 comments

AMA – "Final Fantasy: The Spirits Within", milestone in CGI, is 25 years old

12•kaveh808•1d ago•6 comments

Ask HN: Does anyone else just want to disconnect from everything?

16•lualover•2d ago•23 comments

Ask HN: Should HN add a "Show AI" prefix for AI-related or AI-assisted projects?

3•wslh•16h ago•4 comments

Ask HN: Financial Audit of DuckDuckGo?

9•giantg2•1d ago•2 comments

Ask HN: How to get the most intelligence out of your agents?

10•thechairman12•3d ago•16 comments

TI C66X / Ad Sharc+ Decompilers

5•kavinsky777•2d ago•0 comments

Ask HN: My Gemini bill shot up suddenly to 2500 USD in one day

10•kinj28•2d ago•3 comments

Ask HN: What have you built privately with AI that you'd like to share?

10•erelong•3d ago•25 comments
Open in hackernews

Getting tired of Helm – any better way to handle deployments in Kubernetes?

25•DeborahEmeni_•1y ago
I’ve been deep in Helm templates lately and it’s starting to feel like YAML hell. It was fine when we had a few services, but now it’s just hard to manage. Anyone found a workflow that avoids Helm altogether? Or made Helm manageable at scale?

Comments

LarsLarson•1y ago
We are using kustomize to create the yaml and argocd for deployment. All via ci and git-ops.

works really well

GauntletWizard•1y ago
I'm a huge fan of Kustomize. I'm ambivalent towards argocd, but Kustomize is as close to a DWIM tooling as it's possible to get for Kubernetes.
OhSoHumble•1y ago
Also using Kustomiza and Argo. It's really good imo.
natbennett•1y ago
I prefer ytt for templating and kapp for deployments.

https://github.com/carvel-dev/carvel

johnjungles•1y ago
ArgoCD
dvektor•1y ago
Yeah the whole 'git repo = helm chart' just does not feel great at all. As we all know, the only thing worse is not using helm and having to deal with writing all those service, pv, pvc, ingress yaml files individually :)
haiku2077•1y ago
ArgoCD for relatively simple stuff.

For complex stuff I write Python or Go programs to build manifests, then shell out to kubectl apply. An old example - deploying a multi-instance modded Arma 3 server on k3s: https://github.com/dharmab/homelab-k3s/tree/main/lab

a-saleh•1y ago
Why just simple?

T.b.h. if I were to write a manifest generator, I would still probably commit the thing into a repo and let argo do the rest. Maybe even fiddled around to make the generator into a config-management-plugin ... but that feels like over-doing it.

Nerudite•1y ago
Helmsman works great:

https://github.com/mkubaczyk/helmsman

b11484•1y ago
I've been working on improving a tool called kr8+, which uses jsonnet to combine cluster config and apply it to components: https://github.com/ice-bergtech/kr8
arlcode•1y ago
My recommendation is fluxcd for a great gitops based workflow (incorporates soap for secrets)
atmosx•1y ago
Kustomize is easier to manage at scale, but some upfront effort is required. Many charts are distributed as Helm packages, so you’ll often need to export them as raw YAML manifests. In an ideal setup, ArgoCD combined with Kustomize should cover most deployment needs. However, depending on your workflow, you may eventually need a way to dynamically replace variables. If the built-in tools in recent Kustomize versions aren’t sufficient, consider using envsubst as a fallback.
GauntletWizard•1y ago
I handle deploy time dynamic variables with `sed`. You shouldn't need more complexity than that.

(Not that I haven't had the need, I've use jsonnet with libk8s at scale. But if you're asking the question this simply, you probably don't need it)

atmosx•1y ago
> I handle deploy time dynamic variables with `sed`

I brought up envsubst because it’s a simpler, cleaner, and often overlooked option for variable substitution.

> Not that I haven't had the need, I've use jsonnet with libk8s at scale. But if you're asking the question this simply, you probably don't need it

In my view, Jsonnet isn’t an improvement - it’s complicated to learn, cumbersome to use, and prone to mistakes.

That said, if an organization decides to adopt any specific tool, I believe consistency in tooling, design, and practices is more important than the tool itself.

arccy•1y ago
if you only work with your own stuff, helm is easily (and best) avoided.

i like generating k8s yaml with cue, example: https://github.com/cue-labs/cue-by-example/tree/main/003_kub...

there's also https://timoni.sh/ if you want a helm-like experience, but with cue instead of templating.

If you're working with upstream projects, unfortunately many of them will only provide helm charts, so you got to decide between rewriting them to suit your env/tool, or just live with the crappiness of helm.

mococa•1y ago
+1 for Kustomize
bithavoc•1y ago
I use Pulumi native package for Kubernetes, no more YAML, only instances of Typescript classes.
Kerbonut•1y ago
I built my own tooling around templated manifest files (jinja2) and management via ansible playbooks (templated).
1024kb•1y ago
What exactly are you doing with Helm that's making it so painful to use, and what does your development workflow look like? I've certainly had my fair share of issues with Helm, especially when trying to get a bit too fancy with creating Helm libraries, and standardised charts. I've also found that trying to aggregate multiple charts into a single chart for deploying an environment can also become a nightmare to manage.

I'm currently looking at Helmfile so that I don't need to aggregate charts into a 'parent chart', and i'd also like to move towards a single standardised chart that all microservices can use, rather than spin up a new chart for each service.

Open-Sourcery•1y ago
Holos.run for my homelab cluster. Cuelang has a learning curve but works well with argo unlike Timoni and let's you import existing charts, bare manifests, and use kustomize. Let's me abstract config with custom types and unification/(inheritance if that is easier to think about but a bit wrong)
gtirloni•1y ago
https://github.com/apple/pkl-k8s
uaas•1y ago
IMHO at scale (both in terms of complexity and org level) having something consistent helps more than trying to fight the de-facto standard. Since most upstream projects are mainly distributed as Helm charts, going with anything else will require more effort eventually.
a-saleh•1y ago
Recently I have been writing more stings in jsonnet. If I were with more haskell-friendly team, might even try dhall. In general, I feel like writing the yaml in something else than yaml is the way to go, and as long as you get imports and way to do templating that is not just string interpolation, you are good.