[{"data":1,"prerenderedAt":251},["ShallowReactive",2],{"project-28918850":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":9,"maker":10,"posted_at":11,"year":12,"points":13,"comments":14,"rank_in_year":15,"shown_in_year":16,"top":17,"tier":18,"category":19,"subcategory":20,"format":21,"keywords":22,"reception":28,"sentiment":9,"stance_mix":29,"scored_comments":33,"aspects":34,"strip":38,"post_text":41,"what":42,"said":81,"maker_in_thread":131,"shape":139,"grid":143,"attempts":212,"same_week":213,"maker_shows":39,"maker_hidden":243,"reader_version":244,"card":245},"28918850","Datree (YC W20)","Prevent K8s misconfigurations from reaching production","title","Show HN: Datree (YC W20): Prevent K8s misconfigurations from reaching production",null,"shimont",1634655848,2021,144,26,345,2533,14,"notable","dev_tools","kubernetes policy checks","cli",[23,24,25,26,27],"kubernetes","misconfiguration","policy as code","helm","ci\u002Fcd","quiet",{"positive":30,"neutral":31,"mixed":32,"critical":30},1,2,0,4,{"idea":35,"design":36,"pricing":37},{"positive":30,"critical":30},{"positive":32,"critical":32},{"positive":32,"critical":32},[32,32,32,32,32,32,32,32,32,32,32,32,32,30,32,39,32,39,32,32,40,32,32,32,32,32],3,5,"Hi HN, this is Shimon and Eyar of Datree (https:\u002F\u002Fwww.datree.io\u002F).\n\nWhen I was an Engineering Manager of Infrastructure at ironSource (NASDAQ:IS) for 400 developers, a developer made a mistake, causing a misconfiguration to reach production, which caused major problems for the company's infrastructure.\n\nMistakes happen all the time - you learn from them and hope to never make them again. But how can we prevent a production issue from recurring, or, how about a bigger challenge — how can you prevent the next one from the get-go?\n\nIn our case, we tried sending emails to our devs, writing Wikis, ",{"problem":43,"audience":49,"pricing":53,"motivation":59,"time_to_build":9,"stack":63,"openness":78,"stage":79,"team_size":80},{"value":44,"source":45,"evidence":46},"Kubernetes misconfigurations reaching production and causing outages.","maker",[47],{"id":48},"post",{"value":50,"source":45,"evidence":51},"Engineering teams and developers writing Kubernetes manifests and Helm charts.",[52],{"id":48},{"value":54,"source":45,"evidence":55},"Free tier of 1000 policy checks per month, including the dashboard.",[56],{"id":57,"by":10,"text":58},"28920838","The dashboard is also offered as part of our freemium offering :) we offer 1000 policy checks per month for free. Including the dashboard. In terms of what we offer compared to…",{"value":60,"source":45,"evidence":61},"Maker's experience of a costly Kubernetes misconfiguration at ironSource.",[62],{"id":48},[64,68,72],{"value":65,"source":45,"evidence":66},"Kubernetes",[67],{"id":48},{"value":69,"source":45,"evidence":70},"Helm",[71],{"id":48},{"value":73,"source":45,"evidence":74},"JSON Schema for custom rules",[75],{"id":76,"by":10,"text":77},"28928736","We just released support for custom rules :) from interviewing our users, we decided to start with [0] JSON Schema as it is very easy to write rules using it and you do not have…","freemium","launched","team",{"praise":82,"objections":89,"requests":105,"questions":113,"alternatives":122},[83],{"value":84,"source":45,"evidence":85},"Shift-left approach catches issues earlier in development.",[86],{"id":87,"by":10,"text":88},"28928713","Hey, this is a great question. We are big believers in \"shift-left\" and trying to fix\u002Favoid issues as early as possible. We started with a CLI tool as it is agnostic and can be…",[90,98],{"value":91,"source":92,"evidence":93},"Dev-centric CLI rather than platform-enforced policy at the cluster.","commenter",[94],{"id":95,"by":96,"text":97},"28927463","mr_moose","As someone who works in a similar space (K8s configuration management and IaC), I'm curious what drove you to develop a CLI tool for enforcing policies as opposed to something…",{"value":99,"source":92,"evidence":100},"Dashboard seemed limited to paying customers.",[101],{"id":102,"by":103,"text":104},"28920711","sbkg0002","Is it me, or is the dashboard only for paying customers? What does this add compared to Polaris by fairwinds ?",[106],{"value":107,"source":92,"evidence":108},"Support for OPA Rego policies.",[109],{"id":110,"by":111,"text":112},"28924571","bobbiechen","Looks like this is a policy-as-code tool in the vein of Terraform Cloud's Sentinel Policies, or more generally Open Policy Agent, but specifically targeted at k8s use cases. From…",[114,118],{"value":115,"source":92,"evidence":116},"Why a CLI rather than cluster-level enforcement like Gatekeeper or Kyverno?",[117],{"id":95,"by":96,"text":97},{"value":119,"source":92,"evidence":120},"Why custom rules are YAML\u002FJSON rather than Rego or Sentinel.",[121],{"id":110,"by":111,"text":112},[123,127],{"value":124,"source":92,"evidence":125},"Polaris by Fairwinds.",[126],{"id":102,"by":103,"text":104},{"value":128,"source":92,"evidence":129},"OPA Gatekeeper and Kyverno.",[130],{"id":95,"by":96,"text":97},{"comments":132,"answered":39,"key":133},6,[134,137,138],{"id":135,"text":136},"28920943","I know! I think that the fact that developers are dealing more and more with infra is very empowering but on the other hand brings new challenges. It is no longer Dev VS OPS, but…",{"id":87,"text":88},{"id":76,"text":77},{"commenters":140,"max_depth":33,"maker_replies":132,"first_comment_mins":141,"lifespan_hours":142},16,111,19,[144,148,151,154,156,159,162,164,166,168,171,174,176,179,181,183,185,186,188,190,193,197,200,203,206,209],[145,32,32,146,147,32],"28920372","other\u002Fneutral\u002Fnone","exdsq",[149,32,32,146,150,32],"28920725","geofft",[152,32,32,146,153,32],"28921130","romanlab",[155,32,32,146,150,32],"28922541",[157,32,32,146,158,32],"28921186","TeMPOraL",[160,32,32,146,161,32],"28920900","nonameiguess",[163,32,32,146,153,32],"28921057",[165,32,32,146,147,32],"28921620",[135,32,32,167,10,30],"maker\u002Fpositive\u002Fidea",[169,32,32,146,170,32],"28924112","nijave",[172,32,32,146,173,32],"28924388","wvh",[175,32,32,146,147,32],"28926263",[177,32,32,146,178,32],"28926629","johntash",[95,30,30,180,96,32],"project\u002Fcritical\u002Fidea",[87,30,32,182,10,30],"project\u002Fneutral\u002Fidea",[110,31,39,184,111,32],"project\u002Fneutral\u002Fdesign",[76,31,32,184,10,30],[102,39,39,187,103,32],"project\u002Fneutral\u002Fpricing",[57,39,32,189,10,30],"project\u002Fpositive\u002Fpricing",[191,39,32,146,192,32],"28923500","bbrennan",[194,33,40,195,196,32],"28921621","project\u002Fpositive\u002Fidea","verchol",[198,33,32,199,10,30],"28928750","maker\u002Fpositive\u002Fnone",[201,40,32,146,202,32],"28920534","nawgz",[204,40,32,146,205,32],"28920543","dang",[207,40,32,208,10,30],"28920667","maker\u002Fneutral\u002Fnone",[210,40,32,211,202,32],"28920690","commenter\u002Fpositive\u002Fnone",[],[214,219,224,229,233,238],{"id":215,"name":216,"points":217,"category":218},"28901214","SurfSonar",332,"hardware",{"id":220,"name":221,"points":222,"category":223},"28910368","dstream",217,"consumer_social",{"id":225,"name":226,"points":227,"category":228},"28868382","OtterTune",164,"infrastructure",{"id":230,"name":231,"points":232,"category":228},"28900125","Qvm-Create-Windows-Qube",120,{"id":234,"name":235,"points":236,"category":237},"28886328","command-interface",119,"languages",{"id":239,"name":240,"points":241,"category":242},"28895897","Vizzu",115,"data",false,"v2",{"id":246,"name":5,"line":6,"ai":243,"cat":19,"year":12,"points":13,"comments":14,"rec":28,"s":9,"top":17,"kw":247,"maker":10,"domain":248,"tier":18,"attempts":32,"strip":249,"url":-1,"mix":250,"praise":84,"objection":91,"sub":20},28918850,[23,24,25,26,27],"","00000000000001030300500000",[30,31,32,30],1794036612353]