Use a secret manager?

Cert is a secret, add a small agent to your containers that pings your secret manager and gets back the current cert. Then saves / imports it (or whatever is appropriate).

Check out Fez if you haven’t already. Also Tunic does a great job of starting out basic & breaking precedent.

A bit of an elaboration on why water towers are used in combination with pumps. Pumps are great for moving a constant amount of water around at whatever rate the pump is designed for (e.g. a small pump will move something like 1 gallon per minute). a big enough pump (or series of smaller pumps) can cause that pumped water to consistently flow at that rate.

The problem is that people don’t use water at a constant rate. In the morning, several residents probably all run the shower at the same time. if too many people open the water tap at the same time, a pump will give each just a fraction of what they expect.

But a water tank high up supplies water by gravity, you could open a large number of water taps, and as long as the pipes from the tank are big enough they’d all have the same pressure as if just one opened.

The water is gradually pumped up to the tank no matter if people are using it or not, then when many people want water, they all get it at expected pressures and the tank start to empty. Eventually people close the taps, the tank will slowly start to fill again from the pump.

This same basic design is also how water towers supply water to many single story buildings, it’s not a unique engineering feat for skyscrapers, but an adjustment to fit somewhere within the building’s footprint.

Chex mix is a classic!

I’d suggest Podman over docker if someone is starting fresh. I like Podman running as rootless, but moving an existing docker to Podman was a pain. Since the initial docker setup was also a pain, I’d rather have only done it once :/

For me the use case of K8s only makes sense with large use cases (in terms of volume of traffic and users). Docker / Podman is sufficient to self-host something small.

There’s a decent body of research indicating cash transfers actually are as effective as in-kind charity (often found to be even more efficient). With more recently neuance being added hinting at when one or the other is better at achieving long-term benefits. This is the basis behind charities like Give Directly. If you’re interested in some background:

Randomized trial of cash compared to food welfare in Mexico: https://www.aeaweb.org/articles?id=10.1257/app.6.2.195

OECD counties comparing cash transfers to expanded childcare and education: https://read.oecd-ilibrary.org/social-issues-migration-health/money-or-kindergarten-distributive-effects-of-cash-versus-in-kind-family-transfers-for-young-children_5k92vxbgpmnt-en#page5

India based comparison, noting the effectiveness and perception of the in-kind charity impacts long term results (e.g. social stigma of receiving food charity): https://www.sciencedirect.com/science/article/abs/pii/S0306919214000499

Any assumption that direct cash payments will be misspent as a reason to prefer in-kind welfare isn’t justified IMO. Benefits are fungible. Any money saved on food / childcare / whatever will be respent either efficiently (or not) in similar proportions to the direct money welfare… But administrative costs and externalities with in-kind transfers tend to make them less efficient on average.

Yeah, a lot of the studies about remote work being less productive I find faulty. In my work/team we saw huge productivity gains. Now company-wide are asking for return to office and I’m telling my team not to comply and refer complaints to me (manager). We do go in once a week (in-person interactions have a benefit, but there’s diminishing returns to how often these in person benefits occur). Often this will be lined up with client meeting, in-person performance reviews, team lunch, etc.

The international remote teams are already complaining. They can’t have the usual meetings because my team is commuting to the office on X day of week. Yeah, early morning meeting with India, EU, etc are a staple now (and part of our productivity boost, it’s better to meet when it’s not super late for them). When commute to office returned I (and others) booked commute as a time block so the international teams didn’t try to get us on calls in the car. If the company wants that time block back for meetings the involved members don’t come in.

This will eventually come to a head, but I’m standing with my team members and improved metrics over blanket C-level demands. The business case is already written up for the first time they complain.