Gravitational, a YC-backed company, makes Teleport, an open source Go tool for SSH and cluster access, and blogs about it and Kubernetes.
HN links it for its hiring posts and Teleport docs. Commenters describe Teleport as amazing to use and a good way to get off plain SSH.
Elixir is great for stateless apps. So are a bunch of other platforms.
Elixir is exceptional at stateful apps. And it is true, many of those things are now handled through K8S. However, K8S doesn't handle everything and requires a lot more ceremony and infrastructure than what you can get within the Elixir/Erlang ecosystem.
I think there might be a way to work with Elixir + K8S in a way specific to the domain you are working with. Not everyone needs to be able to hot-reload code without dropping live connections, but if if you do, and you want to deploy on K8S, then you can try writing a K8S operator that encapsulates that idea. However: https://gravitational.com/blog/running-postgresql-on-kubernetes/ (which is more about how every distributed system requires deep domain knowledge, not just specifically about PostgreSQL)
I have not deployed Elixir on GCP. I have deployed other things though, and I can tell you the private networking is much better set up than AWS. As far as distributing nodes, you can do that with any of the cloud providers.
Gravitational | Senior Devops Engineer, Senior Backend Engineer | Oakland and Toronto | ONSITE, REMOTE (for those with remote experience), https://gravitational.com/
About us:
We are well-funded, early stage systems & cloud startup headquartered in Oakland. We are an experienced team: we founded Mailgun [1] which was acquired by Rackspace, we created Vulcand [2] and some other cool stuff at Rackspace [3] and are the authors of Teleport [4], Teleconsole [5] and Telekube [6].
We love Linux and low level systems programming and we love helping open source communities and other engineers build great solutions.
Additional detail: https://github.com/gravitational/careers
Contact: jobs@gravitational.com
[1] https://www.mailgun.com
[2] https://github.com/vulcand/vulcand
[3] https://www.rackspace.com/en-us/cloud/servers/onmetal/specs
[4] https://github.com/gravitational/teleport
[5] https://www.teleconsole.com/
[6] http://gravitational.com/telekube/
Thank you Abe! The kind comments are appreciated!
So far we have gotten positive feedback. While this feature does not protect against root doing something malicious, it does allow admins to capture what root was doing up until they did something malicious and link that information to an identity (if using SSO).
Along with this feature we rolled out a Workflow API [1] that can be used to request role elevation. Once you add in session termination (which we are aiming for in the next release), you will have a powerful set of features that will allow you to start users out with limited access to your cluster with the ability to request more privileges and potentially automatically termination your session (and user) if you're found to be doing some malicious.
[1] https://gravitational.com/blog/workflow_api/
Gravitational (YC S15) | Multiple Positions | Seattle, Toronto, Oakland | https://gravitational.com
Do you enjoy building and selling security and deployment tools for other engineers? Join us to hack on open source software in Seattle, Toronto or Oakland. Most of our code is Go, we have very little technical debt, our codebase is clean and small. Selling our products is fun.
Here is our tech stack:
* Go.
* Linux.
* Kubernetes.
We are looking for sales, marketing and QA automation engineers and managers to join the team.
The full list of our open positions and application instructions:
https://gravitational.breezy.hr/
We offer:
* Competitive salary and equity.
* 401k with company match.
* Christmas bonus.
* Offsite retreat for everyone once a year.
* Excellent health insurance.
Depending on what you're looking for, if it's just an environment to play around with, minikube is a good option: https://github.com/kubernetes/minikube
And as another poster stated, kubeadm is a good way to get started on a VM or local system by following this guide: https://kubernetes.io/docs/setup/independent/install-kubeadm/
And last, possibly not what you're looking for but worth mentioning, there are commercial options available such as gravitational telekube which includes among other features a way to consistently install kubernetes amongst different environments and providers https://gravitational.com/telekube/. *Please be aware though that I'm affiliated with gravitational and work on telekube
Seems like this mainly notes changes in this release.
https://gravitational.com/teleport is the landing page with more feature details.
I think a short list of features interesting to me is:
* SSH CA integrated with whatever SSO you have, removing need to distribute SSH authorized_keys files.
* SSH Bastion & Server with audit logging. Record sessions, who did what. Needed for many security-sensitive environments.
* Reverse-tunnel mode, where devices without public IPs (or a vpn) can connect to your bastion server. Useful if you're deploying computers "in the field" that you want remote access to, without needing additional VPN or port forwarding, etc.