frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Square Minus Square – A coding agent benchmark

https://aedm.net/blog/square-minus-square-2025-12-22/
1•Topfi•1m ago•0 comments

The Rime of the Ancient Maintainer

https://www.joanwestenberg.com/the-rime-of-the-ancient-maintainer/
1•mitchbob•6m ago•0 comments

Show HN: The 「Imposter Game」 Spanish Version – Juego Del Impostor

https://impostergame.win/es
1•tomstig•7m ago•0 comments

Machine perception liquid biopsy IDs brain tumors via microenvironment signature

https://www.nature.com/articles/s41565-025-02080-2
1•bookofjoe•8m ago•0 comments

3D-projecting on screen in 20 mins: from nothing to full understanding

https://www.youtube.com/watch?v=qjWkNZ0SXfo
1•begoon•11m ago•0 comments

Always Bet on Text

https://graydon2.dreamwidth.org/193447.html
3•jesseduffield•12m ago•1 comments

Picasso: Creator and Destroyer

https://www.theatlantic.com/magazine/archive/1988/06/picasso-creator-and-destroyer/305715/
1•breve•17m ago•0 comments

Go Delete Yourself from the Internet. Seriously.

https://www.wsj.com/tech/personal-tech/personal-information-privacy-deleteme-2ceea2ad
1•xqcgrek2•20m ago•1 comments

AWS: How do you do, fellow kids? Please watch our keynotes in Fortnite

https://www.theregister.com/2025/12/02/aws_reinvent_fortnite/
1•gnabgib•22m ago•0 comments

Brownian Spin-Locking Effect

https://www.nature.com/articles/s41563-025-02413-5
1•QueensGambit•22m ago•0 comments

Wine 11.0 RC4 – Run Windows Applications on Linux, BSD, Solaris and macOS

https://www.winehq.org/announce/11.0-rc4
1•neustradamus•23m ago•0 comments

Pain killer taken by millions linked to deadly heart conditions, study finds

https://www.dailymail.co.uk/health/article-15414287/Painkiller-tramadol-opioid-deadly-heart-condi...
2•haltingproblem•23m ago•0 comments

Torn City

https://www.torn.com/index.php
1•psalminen•24m ago•0 comments

Elon Musk Says He's Removing 'Sustainable' from Tesla's Mission

https://gizmodo.com/elon-musk-says-hes-removing-sustainable-from-teslas-mission-2000703528
4•toomanyrichies•24m ago•0 comments

Google Reveals the Top Searches of 2025

https://www.searchenginejournal.com/google-reveals-the-top-searches-of-2025/563738/
1•gnabgib•29m ago•0 comments

Show HN: MAPLE – Multi-agent protocol with resource-aware scheduling

https://github.com/maheshvaikri-code/maple-oss
1•maheshvaikri99•31m ago•0 comments

Newsly – Analyze Polymarket Events

https://newsly.studio
1•polyGuest•35m ago•1 comments

Python 3.6-3.14 Performance on M1, M5 and Zen2

https://crewtech.se/b/1/index.html
1•apelapan•38m ago•1 comments

Elon Musk drops sustainable from Tesla's mission as he completes his villain arc

https://electrek.co/2025/12/26/elon-musk-drops-sustainable-teslas-mission-completes-villain-arc/
12•breve•39m ago•1 comments

Systems Are Sticky (2024)

https://dottedmag.net/blog/systems-are-sticky/
1•xk3•43m ago•0 comments

Ask HN: Anyone Still Using Snipcart?

1•youz•45m ago•0 comments

Machine-Driven Code Review

https://bits.logic.inc/p/code-review-without-bottlenecks
1•sgk284•45m ago•0 comments

The moral critic of the AI industry–a Q&A with Holly Elmore

https://www.foommagazine.org/the-moral-critic-of-the-ai-industry-a-q-a-with-holly-elmore/
1•paulpauper•46m ago•0 comments

Unknown Knowns: Five Ideas You Can't Unsee

https://linch.substack.com/p/unknown-knowns
1•paulpauper•46m ago•0 comments

Show HN: An app to learn about the world

1•davit_kocharyan•49m ago•0 comments

Nvidia-Groq deal is structured to keep 'fiction of competition alive'

https://www.cnbc.com/2025/12/26/nvidia-groq-deal-is-structured-to-keep-fiction-of-competition-ali...
5•1vuio0pswjnm7•51m ago•0 comments

Crafting Effective Conference Session Titles for 2026

https://julieyack.com/2025/12/26/ai-cant-save-a-bad-session-abstract-but-it-can-help-make-a-meh-o...
1•rbanffy•51m ago•0 comments

Trump Invited White South Africans to America. One Ended Up in Detention

https://www.nytimes.com/2025/12/26/us/trump-afrikaner-ice.html
4•vinni2•52m ago•0 comments

Israel becomes first country to formally recognise Somaliland as state

https://www.reuters.com/world/middle-east/israel-recognises-somaliland-somalias-breakway-region-i...
2•GaryBluto•56m ago•1 comments

Tmux and SSH Agent Forwarding

https://blog.feld.me/posts/2025/12/tmux-ssh-agent-forwarding/
1•zdw•56m ago•0 comments
Open in hackernews

How I think about Kubernetes

https://garnaudov.com/writings/how-i-think-about-kubernetes/
50•todsacerdoti•2h ago

Comments

NewJazz•1h ago
Love the HN title mod here lol
stavros•1h ago
HN removes a "how" if the post starts with it, sometimes making it hilarious.
dkdcio•1h ago
I’ve seen this a few times now, what’s the context/background on why this is done?
NewJazz•1h ago
I think maybe they check for "How to [...]" and other variations? "How I broke TLS 1.3" -> "I broke TLS 1.3"
dkdcio•1h ago
yeah but why?
JCattheATM•15m ago
Over-engineering to solve a problem that doesn't exist, thereby making one.
zem•1h ago
yeah, really wish they would fix that one!
frisovv•1h ago
Tbh the missing how is probably why I followed the link. And I appreciated the post, so net positive outcome here.
DonHopkins•1h ago
Otherwise you might confuse it with the HN mod tomhow.

Same reason they remove "dang" if the post starts with it, like the discussion about "Dang! Who ate the middle out of the daddy longlegs".

https://ifunny.co/picture/dang-who-ate-the-middle-out-of-the...

websiteapi•1h ago
I always wonder if things can be simpler. When you think of a really simple DB you think of SQLite. What's the really simple K8s? Even doing a single node deployment these days seems complicate with Prometheus, Grafana, etc. etc. docker/podman compose up with quadlets and all of this stuff just seems so eh.

I really like the idea of something like Firebase, but it never seems to work out or just move the complexity to the vendor, which is fine, but I like knowing I can roll my own.

eyeris•1h ago
Big question is which feature subset you want to replicate.

Kubernetes means everything to everyone. At its core, I think it’s being able to read/write distributed state (which doesn’t need to be etcd) and being able for all the components (especially container hosts) to follow said state. But the ecosystem has expanded significantly beyond that.

jauntywundrkind•1h ago
IMO this is what keeps people from building systems that might challenge kubernetes. Everyone wants to say Kuberentes is too complex, so we built something that does much less. I respect that! But I think it usually fails to grok what Kubernetes is and why it's such an interesting and vital rallying point, that's so thoroughly captured our systems-making. Let's look at the premise:

> That’s why I like to think of Kubernetes as a runtime for declarative infrastructure with a type system.

You can go build a simple way to deploy containers or ship apps: but you are missing what I think allows Kubernetes to be such a big tent, thats a core useful platform for so many. Kubernetes works the same for all types, for everything you want to manage. It's the same desired state management + autonomic systems patterns, whatever you are doing. An extensible platform with a very simple common core.

There are other takes and other tries, but managing desired state for any kind of type is a huge win that allows many people to find their own uses for kube, that is absolutely the cornerstone to it's popularity.

If you do want less, the one project I'd point to that is kubernetes without the kubernetes complexity is KCP. It's just the control plane. It doesn't do anything at all. This to me is much simpler. It's not finding a narrowly defined use case to focus on, it's distilling out the general system into it's simplest parts. Rebuilding a good simple bespoke app container launching platform around KCP would be doable, and maintain the overarching principles that make Kube actually interesting.

I seriously think there is something deeply rotten with our striving for simplicity. I know we've all been burned, and there's so often we want to throw up our hands, and I get it. But the way out is through. I'd rather dance the dance & try to scout for better further futures, than reject & try to walk back.

zsoltkacsandi•1h ago
Everything in infrastructure is a set of trade-offs that work in both directions.

If you want better monitoring, metrics, availability, orchestration, logging, and so on, you pay for it with time, money, and complexity.

If you can't justify that cost, you're free to use simpler tools.

Just because everyone sets up a Kubernetes / Prometheus / ELK stack to host a web app that would happily run on a single VPS doesn't mean you need to do the same, or that nowadays this is the baseline for running something.

vbezhenar•1h ago
Of course things can be simpler.

Remove abstractions like CNI, CRI, just make these things built-in.

Remove unnecessary things like Ingress, etc, you can always just deploy nginx or whatever reverse proxy directly. Also probably remove persistent volumes, they add a lot of complexity.

Use some automatically working database, not separate etcd installation.

Get rid of control plane. Every node should be both control plane and worker node. Or may be 3 worker nodes should be control plane, whatever, deployer should not think about it.

Add stuff that everyone needs. Centralised log storage, centralised metric scrapping and storage, some simple web UI, central authentication. It's reimplemented in every Kubernetes cluster.

The problem is that it won't be serious enough and people will choose Kubernetes over simpler solutions.

NewJazz•1h ago
Some people want their k8s logs to be centralized with non k8s logs. Standardizing log storage seems like a challenging problem. Perhaps they could add built in log shipping. But even then, the transfer format needs to be specified.

Adding an idp is pretty standard in k8s... What do you want to actually do different?

bigstrat2003•1h ago
> What's the really simple K8s?

It's k3s. You drop a single binary onto the node, run it, and you have a fully functional one-node k8s cluster.

whytevuhuni•1h ago
> What's the really simple K8s?

I think K8s couples two concepts: the declarative-style cluster management, and infrastructure + container orchestration. Keep CRDs, remove everything else, and implement the business-specific stuff on top of the CRD-only layer.

This would give something like DBus, except cluster-wide, with declarative features. Then, container orchestration would be an application you install on top of that.

Edit: I see a sibling mentioned KCP. I’ve never heard of it before, but I think that’s probably exactly what I’d like.

KronisLV•42m ago
In ascending order of functionality and how much complexity you need:

  - Docker Compose running on a single server
  - Docker Swarm cluster (typically multiple nodes, can be one)
  - Hashicorp Nomad or K3s or other light Kubernetes distros
zsoltkacsandi•1h ago
> Thinking of Kubernetes as a runtime for declarative infrastructure instead of a mere orchestrator results in very practical approaches to operate your cluster.

Unpopular opinion, but the source of most of the problems I've seen with infrastructures using Kubernetes came from exactly this kind of approach.

Problems usually come when we use tools to solve things that they weren't made for. That is why - in my opinion - it is super important to treat a container orchestrator a container orchestrator.

szundi•1h ago
It would have helped if you tell us why you don’t like this approach.
zsoltkacsandi•59m ago
It's right there:

> the source of most of the problems I've seen with infrastructures using Kubernetes came from exactly this kind of approach

But some more concrete stories:

Once, while I was on call, I got paged because a Kubernetes node was running out of disk space. The root cause was the logging pipeline. Normally, debugging a "no space left on device" issue in a logging pipeline is fairly straightforward, if the tools are used as intended. This time, they weren't.

The entire pipeline was managed by a custom-built logging operator, designed to let teams describe logging pipelines declaratively. The problem? The resource definitions alone were around 20,000 lines of YAML. In the middle of the night, I had to reverse-engineer how the operator translated that declarative configuration into an actual pipeline. It took three days and multiple SREs to fully understand and fix the issue. Without such a declarative magic it takes usually 1 hour to solve such an issue.

Another example: external-dns. It's commonly used to manage DNS declaratively in Kubernetes. We had multiple clusters using Route 53 in the same AWS account. Route 53 has a global API request limit per account. When two or more clusters tried to reconcile DNS records at the same time, one would hit the quota. The others would partially fail, drift out of sync, and trigger retries - creating one of the messiest cross-cluster race conditions I've ever dealt with.

And I have plenty more stories like these.

NewJazz•1h ago
I feel like the author has a good grasp of the Kubernetes design... What about the approach is problematic? And why don't you think that is how Kubernetes was designed to be used?
zsoltkacsandi•57m ago
I wrote some personal stories below in this thread as a response to another user.
k8ssskhltl•1h ago
But then you need two different provisioning tools, one for infra in k8s, and one for infra outside k8s. Or perhaps using non-native tools or wrappers.
zsoltkacsandi•55m ago
> But then you need two different provisioning tools, one for infra in k8s, and one for infra outside k8s.

Yes, and 99% of the companies do this. It is quite common to use Terraform/AWS CDK/Pulumi/etc to provision the infrastructure, and ArgoCD/Helm/etc to manage the resources on Kubernetes. There is nothing wrong with it.

btown•1h ago
One approach if "dang it, someone/I needed to use kubectl during the outage, how do we get gitops/poor-mans-gitops back in place to match reality" is, either agentically-looping or artisanally-looping, to try simple gitops configurations (or diffs to current gitops configurations) until a dry-run diff with your live configuration results in no changes.

For instance, with Helm, I've had success using Helmfile's diffs (which in turn use https://github.com/databus23/helm-diff) to do this.

There's more of a spectrum between these than you think, in a way that can be agile for small teams without dedicated investment in gitops. Even with the messes that can occur, I'd take it over the Heroku CLI any day.

blackjack_•1h ago
Yes, there is a term for a system that handles a declarative state of infrastructure and does reconciliation versus current state; a control plane. We have been talking about control planes in devops/ SRE for a number of years now! Welcome to the conversation.
anymouse123456•1h ago
The allure of declarative approaches to complex problem solving has finally been worn down to nothing for me and Kubernetes was the last straw, nearly 10 years ago.

The mental gymnastics required to express oneself in yaml, rather than, say, literally anything else, invariably generates a horror show of extremely verbose boilerplate, duplication, bloat, delays and pain.

If you're not Google, please for the love of god, please consider just launching a monolith and database on a Linux box (or two) in the corner and see how beautifully simple life can be.

They'll hum along quietly serving many thousands of actual customers and likely cost less to purchase than a single month (or at worst, quarter) of today's cloud-based muggings.

When you pay, you'll pay for bandwidth and that's real value that also happens to make your work environment more efficient.

themgt•25m ago
If you're not Google, please for the love of god, please consider just launching a monolith and database on a Linux box (or two) in the corner and see how beautifully simple life can be.

You can literally get a Linux box (or two) in the corner and run:

  curl -sfL https://get.k3s.io | sh -
  cat <<EOF | kubectl apply -f -
  ...(json/yaml here)
  EOF
How am I installing a monolith and a database on this Linux box without Kubernetes? Be specific, just show the commands for me to run. Kubernetes that will work for ~anything. HNers spend more tokens complaining about the complexity than it takes to setup.

The mental gymnastics required to express oneself in yaml, rather than, say, literally anything else

Like, brainfuck? Like bash? Like Terraform HCL puppet chef ansible pile-o-scripts? The effort required to output your desired infrastructure's definition as JSON shouldn't really be that gargantuan. You express yourself in anything else but it can't be dumped to JSON?

paddw•1h ago
> Thinking of Kubernetes as a runtime for declarative infrastructure instead of a mere orchestrator results in very practical approaches to operate your cluster.

This is a pretty good definition.

I think part of the challenge is the evolution of K8s over time sometimes makes it feel less like a coherent runtime and more like a pile of glue amalgamated from several different components all stuck together. That and you will have to be aware of how those abstractions stick together with the abstractions from your cloud provider, etc...

tbrownaw•25m ago
It's an application server for multi-part containerized applications, like Tomcat is an application server for applications that can be turned into .war files.