Trond Hindenes's Avatar

Trond Hindenes

@trond.hindenes.com

I dabble with cloud infra, Kubernetes, python, snowboards and sailboats. Oslo, Norway

44 Followers  |  96 Following  |  22 Posts  |  Joined: 19.11.2023  |  1.7861

Latest posts by trond.hindenes.com on Bluesky

Preview
GitHub - trondhindenes/autoversion Contribute to trondhindenes/autoversion development by creating an account on GitHub.

We've been using GitVersion for many years but realizing it's very clunky and the config is simply beyond my comprehension, I created a tiny go-based util to calculate a semantic version from git history with sane defaults and just enough options. --> github.com/trondhindene...

20.10.2025 21:17 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

interesting to move from kubernetes in AWS to Azure. Today I learned that there's only ONE load balancer for the cluster, so if you have two tcp endpoints you want to publish on the same port, well then, you can't. The things we take for granted...

26.02.2025 18:43 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

I just talked to an engineer who couldn't restart his machine right now because he had a Citrix connection up that he needs to call someone everytime he uses to get the 2FA token. Easy to forget that many still live(and work) in the age of legacy.

25.02.2025 11:29 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

Hi sure! I wont be able to respond until later, but PM away!

01.12.2024 13:05 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

A thing that bit us a couple of times early on, is that if your app just throws a 500, dapr will retry the message - that caused some infinite retry loops early on in our journey. So global exception handlers in your apps are probably a must. You have to design failure modes really carefully.

01.12.2024 10:56 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Apart from that we're super-happy. Especially testability of apps are a lot easier, as you can simply test "given this rest input, assert x and y" - we're a python shop so we use "pytest-httpserver" to "fake" the dapr sidecar during testing. That works super-well.

01.12.2024 10:56 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

For us, no. It's done what we needed. I would say that dapr is more tuned towards smaller quick-to-process messages than heavier ones, as there's some coordination between the sidecar and the main app, esp during shutdown. THere's some old issues around that on gh, f.ex github.com/dapr/dapr/is...

01.12.2024 10:56 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

yup correct. No issues at all, dapr sidecars are very lightweight. We haven't seen anything weird. Important to deploy the sidecar injector in HA mode, so you're guaranteed that sidecar injectction actually occurs.

01.12.2024 10:50 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

we've been using dapr for 3-4 years now. It used to have some rough edges, but those are mostly ironed out. It's a good tool.

01.12.2024 09:14 โ€” ๐Ÿ‘ 3    ๐Ÿ” 0    ๐Ÿ’ฌ 2    ๐Ÿ“Œ 0

Tailscale funnel is the perfect use-case for this. 3-minute (free) setup and you'll be up and running.

23.11.2024 20:08 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0
Post image

who hurt you

11.11.2024 11:32 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0
Post image

Pretty sure that's not how cloud is supposed to work.

02.11.2024 07:54 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

TLDR: So far I like #Azure more than I expected to.

01.11.2024 16:58 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

...without having to resort to iam role assumption mess. One identity if you're a human, one identity if yo're a workload workload. No fuss. It's how it should be.

01.11.2024 16:57 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

6. Not having to deal with multi-account roles and tribulations is a blessing. Azure and GCP definetely got it right, AWS got it wrong. And even if you do choose to split your cloud stuff into multiple Azure subscriptions, it's still easy to design cross-sub access...

01.11.2024 16:57 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

5. Provisioning stuff in Azure with an IaC tool is more complex than AWS due to the complexity of the objects. Some attributes are required although there's only a single valid value for that attribute. AWS objects are generally "flatter" and less esoteric.

01.11.2024 16:56 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

4. Documentation is still weak. Azure have this tendency to document the obvious stuff you kindof already understand, but leave out the difficult stuff - the information you're really looking for.

01.11.2024 16:56 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

3. Azure's Kubernetes service is good - I can't find any area where it's noticeably worse than EKS. It's really apparent that they have access to some really smart Kubernetes folks like @brendandburns.bsky.social

01.11.2024 16:55 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

2. Azure's control plane is still more unstable than AWS. Permissions changes take a while to propagate (in AWS that happens almost instantaneous), setting up a thing might fail with a mysterious error but succeed when retried.

01.11.2024 16:55 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

1. A lot is better than what it used to be in #Azure. A common auth model similar to IAM Roles now exists, albeit a bit simpler. I'm not sure that's a bad thing, #AWS IAM is quite complex. So giving a pod access to a storage bucket is now mostly a non-issue.

01.11.2024 16:55 โ€” ๐Ÿ‘ 0    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

I used to do a lot of #Azure work, but for the past 5-6 years I've been using only #aws and a tiny bit of #gcp for a while. So here's my "6 differences between AWS and Azure"

01.11.2024 16:54 โ€” ๐Ÿ‘ 2    ๐Ÿ” 0    ๐Ÿ’ฌ 1    ๐Ÿ“Œ 0

Finally time to learn me some Prometheus/Grafana. Long overdue.

27.10.2024 12:35 โ€” ๐Ÿ‘ 1    ๐Ÿ” 0    ๐Ÿ’ฌ 0    ๐Ÿ“Œ 0

@trond.hindenes.com is following 20 prominent accounts