Shared posts

01 Dec 11:30

Un zapato usado por los espías aliados durante la Segunda Guerra Mundial tiene un tacón invertido para engañar a los alemanes cuando siguen su rastro y dirigirlos en una dirección completamente equivocada.

by Fino
01 Dec 11:29

Los cuidadores de enfermos al final de la vida también necesitan cuidarse a sí mismos

by Ingrid Ramo González, Psicóloga en Cuidados Paliativos y Psicooncóloga Clínica Cuides UIC Barcelona. Coordinadora Equipo Atención Psicosocial (EAPS). Fundación la Caixa, Universitat Internacional de Catalunya
Nayeem6777/Shutterstock

El final de la vida de una persona requiere unos cuidados acordes con la complejidad de ese proceso único e irrepetible. Los cuidadores informales (familiares, amigos o personas con vínculos afectivos), formales (aquellos que reciben una remuneración por su trabajo) o profesionales de la salud (principalmente, equipos especializados en cuidados paliativos) conforman una red básica para reducir el sufrimiento y garantizar el soporte adecuado a la persona enferma durante el trance de morir.

Sin embargo, brindar esa asistencia no resulta algo inocuo y puede tener “efectos secundarios” en todos los que participan.

Contagio emocional y “fatiga por compasión”

Al cuidar de una persona con una enfermedad avanzada es fácil centrarse en la observación y el alivio de las necesidades que tiene o que van apareciendo. Hay incluso quien es capaz de adelantarse a que aparezcan. El inconveniente es que esa atención tan centrada en el otro puede hacer que se pierdan de vista las propias necesidades. “¿Qué necesito yo para estar bien?” es una pregunta que puede parecer egoísta o fuera de lugar en esas circunstancias, pero resulta imprescindible si queremos asegurar una buena calidad en los cuidados y no desgastarnos en exceso.

Frecuentemente, la vivencia de la enfermedad, el final de la vida y la pérdida del ser querido activan un cóctel de emociones: sufrimiento, hostilidad, enfado, culpa, vergüenza, amor, esperanza, decepción, gratitud, etc. Como seres humanos empáticos, no somos inmunes a ninguno de esos sentimientos. Si el cuidador no tiene formación ni las habilidades de gestión adecuadas, puede experimentar un tsunami emocional que le genere desasosiego y le deje una huella psicológica perdurable, difícil de borrar.

El desgaste por empatía o “fatiga por compasión” sería el equivalente del burn out o “síndrome del estar quemado” en aquellas profesiones donde se establece una relación de ayuda. El hecho de estar en contacto permanente con el sufrimiento puede llevar al profesional a sentirse exhausto y a perder el sentido de su trabajo o, incluso, la capacidad de generar un vínculo terapéutico con sus pacientes.

Estar expuesto constantemente a la incertidumbre de la evolución de una enfermedad y, finalmente, a la muerte puede generar impotencia, indefensión (o falta de control sobre las circunstancias) y preocupación constante. Además, la fragilidad y la muerte hacen que el cuidador se cuestione su propia existencia. O sea, es habitual que surjan dudas y preguntas como ¿qué sentido tiene la vida? o ¿qué sentido tiene sufrir? Si bien es cierto que estas reflexiones pueden dar lugar a grandes aprendizajes, al mismo tiempo pueden abrir un camino introspectivo difícil de recorrer en soledad y sin certezas.

Y, por último, el cuidador también puede experimentar el duelo anticipado, un proceso de aflicción o dolor que comienza antes de que se produzca el fallecimiento del ser querido. Suele estar acompañado de preocupación por el futuro y sentimientos de culpa, enfado e injusticia. Aunque son emociones que nos preparan para la pérdida, pueden dificultar la tarea de cuidado y no aseguran un mejor proceso de duelo una vez la muerte se haya producido. Transitar por esa anticipación, aceptar lo que está ocurriendo, requiere de una mirada compasiva del otro y de uno mismo.

Espacios para cuidar de las propias necesidades

Para mitigar todos estos posibles “efectos secundarios” hay un antídoto: el autocuidado. Este ayuda a preservar pequeños espacios para atender y cuidar de las propias necesidades, ya sean físicas (como comer sano, ducharse o hacer ejercicio), psicológicas (meditar, realizar actividades significativas…) o sociales (compartir con otros, dejarse ayudar…). Crea un espacio de conexión donde recordar que nuestro bienestar es tan importante como el del otro.

En este sentido, el autocuidado también puede considerarse un acto de responsabilidad, puesto que el malestar del cuidador afecta al enfermo. Es decir, al cuidar de uno mismo somos capaces de generar una especie de efecto mariposa que mejora los cuidados que podemos ofrecer a los demás.

Además, sabemos que aquellos profesionales capaces de generar un cambio de mirada hacia su propio rol y su contribución hacia el alivio del sufrimiento ajeno tienen menor riesgo de sufrir fatiga por compasión. A este fenómeno se le conoce como satisfacción por compasión.

Si el profesional se hace consciente de sus propios límites, valora sus esfuerzos de atención hacia el otro, celebra sus logros e incluso amplía su perspectiva y se siente partícipe de un bien mayor, podrá compensar ese desgaste por empatía.

Aplicado a los profesionales de los cuidados paliativos, esto se traduciría, por ejemplo, en tener claro que el objetivo no es curar al enfermo sino aliviar su sufrimiento; ser conscientes de lo que sí se ha podido conseguir (reducir significativamente el dolor físico, emocional o espiritual del enfermo) y sentir que contribuyen al bien de la sociedad mejorando la calidad de vida de las personas (y de sus seres queridos) hasta el final de sus días.

Junto con las pautas de autocuidado, esta lectura contribuirá a que la balanza del profesional se decante más hacia la satisfacción que hacia el desgaste. Eso le dotará de mayores recursos de afrontamiento ante situaciones de alto impacto emocional y le ayudará resignificar el sentido de su propio rol.

The Conversation

Las personas firmantes no son asalariadas, ni consultoras, ni poseen acciones, ni reciben financiación de ninguna compañía u organización que pueda obtener beneficio de este artículo, y han declarado carecer de vínculos relevantes más allá del cargo académico citado anteriormente.

01 Dec 11:26

The 5 Second Rule Will Change Your Life

by Lewis Howes

🔔 Subscribe for more great content: https://www.youtube.com/lewishowes

Listen to this episode on the go!
🍎 Apple Podcasts: https://podcasts.apple.com/us/podcast/the-school-of-greatness/id596047499
🟢 Spotify: https://open.spotify.com/show/07GQhOZboEZOE1ysnFLipT?si=a03d916bade54d4f

💰 get my NEW YORK TIMES BESTSELLING book "Make Money Easy" today!https://lewishowes.com/moneyyou
📙 get my NEW YORK TIMES BESTSELLING book "The Greatness Mindset" today! https://lewishowes.com/gmyo
📤 sign up for my FREE newsletter https://lewishowes.com/greatnessdelivered

Follow Lewis!
Instagram: https://www.instagram.com/lewishowes/
Tiktok: https://www.tiktok.com/@lewis
Facebook: https://www.facebook.com/lewishowes/
Twitter: https://twitter.com/LewisHowes
💻 Website: http://lewishowes.com/
📲 For more Greatness text PODCAST to +1 (614) 350-3960

Get More Greatness!
Greatness Clips: https://www.youtube.com/@GreatnessClips
Spanish: https://www.youtube.com/@LewisHowesEspañol
Portuguese: https://www.youtube.com/@LewisHowesPortugues
Lewis Howes Shorts: https://www.youtube.com/@lewishowesshorts

#greatness #inspiration #motivation #teamwater
01 Dec 11:23

Secret Service Agent: How To Stay In Control When Someone Is Trying To Manipulate You!

by The Diary Of A CEO

Ex-Secret Service interrogator DESMOND O’NEILL reveals the 4-step formula for difficult conversations, how to decode narcissism, the secret to communication and real connection - AND debunks the biggest myths about interrogation!

Desmond O’Neill is a former special agent for the US Secret Service with over 30 years of experience in negotiation and interrogation. He has worked for the High-Value Detainee Interrogation Group (HIG) training and conducting research on interrogation, and is a co-instructor for the online platform ‘Beyond Bulletproof’, covering influence, communication, and confidence.

He explains:
◼️Why you should never label someone a narcissist
◼️The No.1 habit silently ruining your communication
◼️Why “me me me” syndrome is sabotaging your relationships
◼️How gaslighting really works, and how to shut it down fast
◼️Why your brain lies to you when emotions take over

You can learn more about ‘Beyond Bulletproof’, here: https://bit.ly/43SKyMW

The Diary Of A CEO:
◼️Join DOAC circle here - https://doaccircle.com/
◼️Buy The Diary Of A CEO book here - https://smarturl.it/DOACbook
◼️The 1% Diary is back - limited time only: https://bit.ly/3YFbJbt
◼️The Diary Of A CEO Conversation Cards (Second Edition): https://g2ul0.app.link/f31dsUttKKb
◼️Get email updates - https://bit.ly/diary-of-a-ceo-yt
◼️Follow Steven - https://g2ul0.app.link/gnGqL4IsKKb

Sponsors:
Adobe - https://Adobe.Ly/OneBetter
Rubrik: To learn more, head to https://rubrik.com
Function Health: https://Functionhealth.com/DOAC to sign up for $365 a year. One dollar a day for your health.
01 Dec 11:23

Giving Up

by Doug

Giving Up

And more birds.

01 Dec 11:18

El auge de Aliança Catalana, más allá de las encuestas

by Guillem Pujol

Este artículo ha sido publicado originalmente en Catalunya Plural. Puedes leerlo en catalán aquí.

El último barómetro del Centro de Estudios de Opinión (CEO) confirma que el PSC continúa siendo la primera fuerza en el Parlamento, pero con síntomas claros de desgaste. La proyección sitúa a los socialistas entre 38 y 40 escaños, pero, según la comparación con el barómetro anterior, esto supone perder entre dos y cuatro diputados.

En cambio, Esquerra Republicana reaviva: se colocaría en segunda posición con 22–23 escaños, lo cual implica ganar entre dos y tres respecto a la encuesta anterior. El movimiento importante se produce alrededor de Junts per Catalunya y Aliança Catalana. Junts caería hasta los 19–20 escaños, cosa que quiere decir dejarse hasta 15–16 diputados en relación con el último barómetro del CEO. Al mismo tiempo, Aliança Catalana, que a las elecciones anteriores había entrado con solo dos diputados, aparece ahora empatada con Junts, también con 19–20 escaños, después de un salto de hasta 18 escaños en la estimación.

Al bloque de la derecha española, el movimiento es más discreto pero significativo: Vox llegaría a los 13–14 diputados y avanzaría el PP, que se quedaría con 12–13 escaños. La tendencia no es tanto un gran crecimiento del PP como el hecho de que el espacio más duro de la derecha (Vox y Aliança Catalana) gana peso relativo. Mientras tanto, Comunes continuaría con unos seis diputados y la CUP se movería entre tres y cuatro, prácticamente estabilizados respecto al barómetro anterior.

Estas cifras dibujan un escenario claro: el PSC continúa al frente, ERC recupera posiciones, Junts se hunde y la extrema derecha –en versión españolista y en versión “autóctona”– consolida una presencia que hace solo unos años parecía imposible en Catalunya. Pero, como siempre pasa con las encuestas, lo importante no son solo los números, sino qué nos dicen sobre el tipo de país que se está configurando.

Aliança Catalana: ¿un partido independentista?

La lectura más obvia es que Aliança Catalana se ha “comido” una parte importante de Junts per Catalunya. Varios análisis apuntan a que alrededor de un 20% de los antiguos votantes de Junts se inclinarían ahora por Sílvia Orriols, y que la fidelidad de voto de Junts es una de las más bajas del sistema. Pero el fenómeno va mucho más allá de un simple trasvase dentro del bloque independentista.

El CEO y las crónicas posteriores remarcan un punto crucial: cerca de la mitad de los votantes potenciales de Aliança Catalana no se definen como independentistas. Esto quiere decir que el partido no crece para que represente un “independentismo más puro” o una radicalización coherente del Procés, sino porque se ha convertido en un contenedor amplio de malestar. Un espacio donde confluyen votantes desencantados con Junts, votantes de Vox y del PP, personas que habían optado por ERC, y gente que, sencillamente, no encontraba ninguna opción que verbalizara su frustración.

Aliança Catalana no es, por lo tanto, la continuación del sobiranisme por otros medios, sino otra cosa: una extrema derecha que utiliza la identidad catalana como vehículo para articular un discurso de orden, de miedo y de exclusión. Su relato se centra menos en la construcción de un proyecto de país y más en la construcción de un enemigo: la inmigración, determinados barrios, cierta idea de “invasión” o de “pérdida de la Catalunya de siempre”.

Este detalle –que una parte sustancial de su electorado no sea independentista– es el que tendría que hacer saltar todas las alarmas. Indica que el que se está moviendo no es solo el eje nacional, sino una reconfiguración del voto identitario en clave autoritaria. La etiqueta “catalana” aquí no apunta tanto a un proyecto de emancipación colectiva como una frontera simbólica: un nosotros cerrado, amenazado, que necesita levantar muros (materialmente y culturalmente) para protegerse.

Dicho de otro modo: Aliança Catalana representa el punto de encuentro entre un independentismo agotado y una derecha radical europeizada, que comparte con otras fuerzas del continente la misma fórmula: mezclar precariedad, inseguridad y desigualdad con un discurso culturalista que señala la inmigración como culpable.

Síntoma de un fracaso estructural, no una anomalía repentina

Si miramos el fenómeno en perspectiva, queda claro que el auge de Aliança Catalana no es un rayo caído del cielo, ni el resultado de un único error táctico de los otros partidos. Es el síntoma de un proceso largo de degradación institucional y política, en que las fuerzas de gobierno –en Cataluña, en el Estado y a Europa– han renunciado a abordar de manera seria las raíces materiales del malestar social.

Hace años que amplios sectores de la población conviven con precariedad estructural; con trabajos inestables y mal remunerados, con una crisis de la vivienda galopante y unos alquileres desbocados, y con un Estado infrafinanciado. Y todo esto mientras el 1% acumula cada vez más y más riqueza.

En paralelo, las instituciones europeas han ido consolidando un marco de políticas migratorias abiertamente racistas y seguritarias, con Frontex como emblema de la idea de que las fronteras valen más que las vidas. La migración ha sido convertida en un problema policial y militar, no en una realidad humana a gestionar con derechos y justicia. Esta lógica, asumida por gobiernos de todos los colores, legitima de facto los marcos mentales sobre los cuales opera la extrema derecha.

A todo esto se suma un ecosistema mediático y digital que, demasiado a menudo, vincula de manera acrítica delincuencia e inmigración, alimenta titulares alarmistas y transforma casos puntuales en pruebas irrefutables de un supuesto “caos generalizado”. El resultado es un clima en que el miedo y el resentimiento se normalizan, mientras las causas estructurales –políticas de vivienda, fiscalidad, regulación laboral, redistribución– quedan fuera de foco.

En este contexto, Aliança Catalana no hace nada especialmente original: simplemente ocupa el espacio que los otros han dejado vacío. Convierte el malestar en voto, pero lo hace desplazando la responsabilidad hacia los de siempre: los más vulnerables. No cuestiona los poderes económicos, ni las élites, ni las decisiones estructurales que han llevado hasta aquí. Cuestiona el vecino, el extranjero, “los de abajo” que son percibidos como extraños.

Por eso, centrar el debate exclusivamente en si AC tendrá 18, 19 o 20 diputados es perder de vista la cuestión fundamental: ¿qué piensan hacer las fuerzas que se reivindican democráticas y progresistas ante este malestar? Si la respuesta continúa siendo gestión tecnocrática, parches a corto plazo y una apelación abstracta a unos “valores europeos” que hace tiempos que no se traducen en políticas reales, el terreno continuará siendo propicio para que la extrema derecha crezca.

El CEO no nos dice solo quién va ganando la carrera por la Generalitat. Nos dice, sobre todo, que una parte creciente del país ha dejado de creer que la política sirva para mejorar la vida. Mientras esto no cambie, Aliança Catalana continuará siendo mucho más que una encuesta favorable: será el espejo incómodo de un sistema que hace años que deja demasiada gente atrás.

La entrada El auge de Aliança Catalana, más allá de las encuestas se publicó primero en lamarea.com.

01 Dec 11:15

Announcing Amazon EKS Capabilities for workload orchestration and cloud resource management

by Channy Yun (윤석찬)

Today, we’re announcing Amazon Elastic Kubernetes Service (Amazon EKS) Capabilities, an extensible set of Kubernetes-native solutions that streamline workload orchestration, Amazon Web Services (AWS) cloud resource management, and Kubernetes resource composition and orchestration. These fully managed, integrated platform capabilities include open source Kubernetes solutions that many customers are using today, such as Argo CD, AWS Controllers for Kubernetes, and Kube Resource Orchestrator.

With EKS Capabilities, you can build and scale Kubernetes applications without managing complex solution infrastructure. Unlike typical in-cluster installations, these capabilities actually run in EKS service-owned accounts that are fully abstracted from customers.

With AWS managing infrastructure scaling, patching, and updates of these cluster capabilities, you can use the enterprise reliability and security without needing to maintain and manage the underlying components.

Here are the capabilities available at launch:

  • Argo CD – This is a declarative GitOps tool for Kubernetes that provides continuous continuous deployment (CD) capabilities for Kubernetes. It’s broadly adopted, with more than 45% of Kubernetes end-users reporting production or planned production use in the 2024 Cloud Native Computing Foundation (CNCF) Survey.
  • AWS Controllers for Kubernetes (ACK) – ACK is highly popular with enterprise platform teams in production environments. ACK provides custom resources for Kubernetes that enable the management of AWS Cloud resources directly from within your clusters.
  • Kube Resource Orchestrator (KRO) – KRO provides a streamlined way to create and manage custom resources in Kubernetes. With KRO, platform teams can create reusable resource bundles that abstract away complexity while remaining natively to the Kubernetes ecosystem.

With these features, you can accelerate and scale your Kubernetes use with fully managed capabilities, using its opinionated but flexible features to build for scale right from the start. It is designed to offer a set of foundational cluster capabilities that layer seamlessly with each other, providing integrated features for continuous deployment, resource orchestration, and composition. You can focus on managing and shipping software without needing to spend time and resources building and managing these foundational platform components.

How it works
Platform engineers and cluster administrators can set up EKS Capabilities to offload building and managing custom solutions to provide common foundational services, meaning they can focus on more differentiated features that matter to your business.

Your application developers primarily work with EKS Capabilities as they do other Kubernetes features. They do this by applying declarative configuration to create Kubernetes resources using familiar tools, such as kubectl or through automation from git commit to running code.

Get started with EKS Capabilities
To enable EKS Capabilities, you can use the EKS console, AWS Command Line Interface (AWS CLI), eksctl, or other preferred tools. In the EKS console, choose Create capabilities in the Capabilities tab on your existing EKS cluster. EKS Capabilities are AWS resources, and they can be tagged, managed, and deleted.

You can select one or more capabilities to work together. I checked all three capabilities: ArgoCD, ACK, and KRO. However, these capabilities are completely independent and you can pick and choose which capabilities you want enabled on your clusters.

Now you can configure selected capabilities. You should create AWS Identity and Access Management (AWS IAM) roles to enable EKS to operate these capabilities within your cluster. Please note you cannot modify the capability name, namespace, authentication region, or AWS IAM Identity Center instance after creating the capability. Choose Next and review the settings and enable capabilities.

Now you can see and manage created capabilities. Select ArgoCD to update configuration of the capability.

You can see details of ArgoCD capability. Choose Edit to change configuration settings or Monitor ArgoCD to show the health status of the capability for the current EKS cluster.

Choose Go to Argo UI to visualize and monitor deployment status and application health.

To learn more about how to set up and use each capability in detail, visit Getting started with EKS Capabilities in the Amazon EKS User Guide.

Things to know
Here are key considerations to know about this feature:

  • Permissions – EKS Capabilities are cluster-scoped administrator resources, and resource permissions are configured through AWS IAM. For some capabilities, there is additional configuration for single sign-on. For example, Argo CD single sign-on configuration is enabled directly in EKS with a direct integration with IAM Identity Center.
  • Upgrades – EKS automatically updates cluster capabilities you enable and their related dependencies. It automatically analyzes for breaking changes, patches and updates components as needed, and informs you of conflicts or issues through the EKS cluster insights.
  • Adoptions – ACK provides resource adoption features that enable migration of existing AWS resources into ACK management. ACK also provides read-only resources which can help facilitate a step-wise migration from provisioned resources with Terraform, AWS CloudFormation into EKS Capabilities.

Now available
Amazon EKS Capabilities are now available in commercial AWS Regions. For Regional availability and future roadmap, visit the AWS Capabilities by Region. There are no upfront commitments or minimum fees, and you only pay for the EKS Capabilities and resources that you use. To learn more, visit the EKS pricing page.

Give it a try in the Amazon EKS console and send feedback to AWS re:Post for EKS or through your usual AWS Support contacts.

Channy

01 Dec 10:43

SUSE Linux Enterprise es reconocido como Bien Público Digital por la ONU

by Yaso
SUSE Linux Enterprise Server se convierte en el primer Linux comercial reconocido como Bien Público Digital por la ONU, destacando su impacto global.
01 Dec 10:35

Siete preguntas que debemos hacernos antes de compartir una noticia en redes sociales

by Yaso
Ofreceremos estrategias que nos ayudarán a reflexionar críticamente sobre las noticias presentes en redes sociales antes de compartirlas.
01 Dec 10:34

Una sarcástica visión de cómo es la experiencia web hoy en día, mierdificación incluida

by Yaso
Guangyi Li ha recreado es una web esquemática cómo es su experiencia web hoy en día, lo cual incluye lo peor de lo peor, desde los anuncios fuera de lugar a los pop-ups abusivos, el disparo de las notificaciones, chats, ratings,...
01 Dec 10:34

Europa entra en una “zona roja” hídrica: dos décadas de datos satelitales revelan un agotamiento acelerado de las reservas de agua

by Lon
Un nuevo análisis científico señala que extensas regiones del sur y centro del continente se están secando mientras avanza el colapso climático. El trabajo, realizado en colaboración con Watershed Investigations y The Guardian, constata que amplias zonas de España, Italia, Francia, Suiza, Alemania y parte del Reino Unido...
01 Dec 10:33

Michael Levin: Hidden Reality of Alien Intelligence & Biological Life | Lex Fridman Podcast #486

by Lex Fridman

Michael Levin is a biologist at Tufts University working on novel ways to understand and control complex pattern formation in biological systems.
Thank you for listening ❤ Check out our sponsors: https://lexfridman.com/sponsors/ep486-sb
See below for timestamps, transcript, and to give feedback, submit questions, contact Lex, etc.

*Transcript:*
https://lexfridman.com/michael-levin-2-transcript

*CONTACT LEX:*
*Feedback* - give feedback to Lex: https://lexfridman.com/survey
*AMA* - submit questions, videos or call-in: https://lexfridman.com/ama
*Hiring* - join our team: https://lexfridman.com/hiring
*Other* - other ways to get in touch: https://lexfridman.com/contact

*EPISODE LINKS:*
Michael Levin's X: https://x.com/drmichaellevin
Michael Levin's Website: https://drmichaellevin.org
Michael Levin's Papers: https://drmichaellevin.org/publications/
- Biological Robots: https://arxiv.org/abs/2207.00880
- Classical Sorting Algorithms: https://arxiv.org/abs/2401.05375
- Aging as a Morphostasis Defect: https://pubmed.ncbi.nlm.nih.gov/38636560/
- TAME: https://arxiv.org/abs/2201.10346
- Synthetic Living Machines: https://www.science.org/doi/10.1126/scirobotics.abf1571

*SPONSORS:*
To support this podcast, check out our sponsors & get discounts:
*Shopify:* Sell stuff online.
Go to https://lexfridman.com/s/shopify-ep486-sb
*CodeRabbit:* AI-powered code reviews.
Go to https://lexfridman.com/s/coderabbit-ep486-sb
*LMNT:* Zero-sugar electrolyte drink mix.
Go to https://lexfridman.com/s/lmnt-ep486-sb
*UPLIFT Desk:* Standing desks and office ergonomics.
Go to https://lexfridman.com/s/uplift_desk-ep486-sb
*Miro:* Online collaborative whiteboard platform.
Go to https://lexfridman.com/s/miro-ep486-sb
*MasterClass:* Online classes from world-class experts.
Go to https://lexfridman.com/s/masterclass-ep486-sb

*OUTLINE:*
0:00 - Introduction
0:44 - Biological intelligence
9:17 - Living vs non-living organisms
14:30 - Origin of life
18:15 - The search for alien life (on Earth)
51:19 - Creating life in the lab - Xenobots and Anthrobots
1:04:21 - Memories and ideas are living organisms
1:18:02 - Reality is an illusion: The brain is an interface to a hidden reality
2:03:48 - Unexpected intelligence of sorting algorithms
2:29:26 - Can aging be reversed?
2:33:17 - Mind uploading
2:51:57 - Alien intelligence
3:06:52 - Advice for young people
3:13:21 - Questions for AGI

*PODCAST LINKS:*
- Podcast Website: https://lexfridman.com/podcast
- Apple Podcasts: https://apple.co/2lwqZIr
- Spotify: https://spoti.fi/2nEwCF8
- RSS: https://lexfridman.com/feed/podcast/
- Podcast Playlist: https://www.youtube.com/playlist?list=PLrAXtmErZgOdP_8GztsuKi9nrraNbKKp4
- Clips Channel: https://www.youtube.com/lexclips

*SOCIAL LINKS:*
- X: https://x.com/lexfridman
- Instagram: https://instagram.com/lexfridman
- TikTok: https://tiktok.com/@lexfridman
- LinkedIn: https://linkedin.com/in/lexfridman
- Facebook: https://facebook.com/lexfridman
- Patreon: https://patreon.com/lexfridman
- Telegram: https://t.me/lexfridman
- Reddit: https://reddit.com/r/lexfridman
01 Dec 10:32

Únete a autonomos30n.es hoy

by Escaños en Blanco para dejar Escaños Vacíos

#autonomos30n #autonomos30n.es #autonomos #manifestacion #30n #derechoslaborales #trabajadores #españa #condicionesdignas #protesta
01 Dec 10:30

Lemmy's day

by El Camionero Acrata TEIS
01 Dec 10:29

Los Magistrados de la Asociación Profesional de la Magistratura rompen a reír durante el último monólogo del humorista Bolaños.

by Fino
01 Dec 10:28

Trabaja inteligente, no duro

by Fino

Trabaja inteligente, no duro

Trabaja inteligente, no duro

Ver post completo: Trabaja inteligente, no duro

01 Dec 10:27

Un guardia civil fuera de servicio denuncia por agresіones al líder de una empresa desokupa canaria.

by Fino
01 Dec 10:27

Trabajando y aun así sin hogar. María José, con 58 años, lleva más de dos años viviendo en su coche en Málaga.

by Fino

Y no es la única…

Trabajando y aun así sin hogar. María José, con 58 años, lleva más de dos años viviendo en su coche en Málaga.

La vivienda en España se ha disparado tanto que muchos jóvenes ya olvidan la idea de comprarse un piso y ven otras alternativas como las casas prefabricadas. Pero hay otros que van más allá y deciden vivir de otra forma. Este es el caso de José Antonio, un joven funcionario gaditano, decidió que no iba a esperar más y con su sueldo de 1.300 euros y sin la posibilidad de pagar un piso a decidido optar por la solución de vivir en una furgoneta.

Es imposible alquilar algo en Cádiz con mi sueldo”, explica en un vídeo publicado en su perfil de TikTok, donde muestra su día a día y que recoge la cadena Telecinco. Su solución ha causado sorpresa y debate, pero él lo resume con una frase contundente: “Dime en qué piso me meto pagando 700 euros al mes”. @huffingtonpost

Eh, ¡¡¡Pero hemos subido el SMI!!! 😀

Trabajando y aun así sin hogar. María José, con 58 años, lleva más de dos años viviendo en su coche en Málaga.

Ver post completo: Trabajando y aun así sin hogar. María José, con 58 años, lleva más de dos años viviendo en su coche en Málaga.

01 Dec 09:12

¡Nos vamos del mercado, amigo!

by Lon
Tras once años haciendo periodismo de servicio público y un año persiguiendo en los tribunales a la industria del bulo y el odio, CTXT y ACO sellan su alianza en forma de fundación. Acompáñanos, por favor
01 Dec 08:54

Denuncias Falsas (a raíz del libro de Soto Ivars, Esto no existe)

by Escaños en Blanco para dejar Escaños Vacíos

Exponemos distintas opiniónes dentro de Escaños en Blanco sobre el tema de denuncias falsas en temas de violencia de género

Twitter: https://x.com/escanosenblanco
Instagram: https://www.instagram.com/escanosenblanco/
Telegram: https://t.me/canalEscanos
Web: https://www.escanos.org
01 Dec 08:06

Biggest Kubernetes Certifications Discounts ever (All Links in the Description) 🎉

by Abhishek.Veeramalla

Use this link - https://hubs.la/Q03V4Rjs0

60% off Code - CW25BUNAP - Valid on: PowerBundle CKA + CKAD, PowerBundle CKS + CKA, PowerBundle KCNA + CKA

50% off Code - CW25K8BUNAP - Valid on: Golden Kubestronaut Bundle, Kubestronaut to Golden Kube upgrade Bundle, Kubestronaut Bundle, CKA to Kubestronaut Bundle, CKAD to Kubestronaut Bundle

60% off Bundles (Including ITPP's) using code CW25BUNAP

50% off courses, certifications, skill creds and ILT's using code CW25AP

and 30% off both Thrive-One annual and Thrive-One monthly subscriptions with CW25TOA, and CW25TOM

Don’t miss the biggest Cyber week deals ever.
01 Dec 08:05

Kubernetes in a Nutshell

by Antonella Blasetti

back to the classics…why this giant is so important? Which advantages?

Disney

The true power of Kubernetes lies in its ability to completely transform infrastructure management. Instead of thinking about individual virtual machines, networks, and load balancers, you get to manage a single, unified compute fabric with maintenance. This changes the game, making everything faster, more efficient, and ultimately less expensive (if your team has skills).

Consider the task of deploying a new application.

  • Before Kubernetes: You would need to provision VMs, manually install dependencies, configure networking and firewalls, set up a load balancer, and create monitoring alerts. Every new application required a full-stack infrastructure setup, a time-consuming and error-prone process.
  • With Kubernetes: You simply create a YAML file that declares your desired state: “I want to deploy my application with 3 replicas and expose it with a service.” You submit this file, and Kubernetes handles all of the low-level details instantly. It finds the best nodes, sets up the network rules, and manages the lifecycle of your application automatically.

While the initial setup of the cluster requires careful planning, the benefits can be grat. Deploying a new application or scaling an existing one is now a lightning-fast process. Replicating a pod is nearly instantaneous because the container images are often cached on the worker nodes.

This resource sharing means you no longer have to reserve dedicated, underutilized VMs for every single application, leading to significant cost savings and a more efficient use of your cloud resources.

Declarative vs. Imperative Configuration

Declarative Configuration is the preferred method for managing Kubernetes objects. You define the desired state of your system (e.g., “I want 5 replicas of this container”) in a manifest file (.yaml). Kubernetes’ control plane then works to achieve and maintain that state. This is highly advantageous for automation and version control.

Imperative Configuration involves direct commands to the cluster (e.g., kubectl create deployment). While useful for quick, ad-hoc tasks, it is not reproducible and should be avoided in production environments.

Key takeaway: Always use declarative configuration for production workloads to ensure consistency, auditability, and easy rollback.

gemini

Control Plane

Kubernetes automates the deployment, scaling, and management of containerized applications. This includes tasks like service discovery, load balancing, and self-healing.

So, its primary goal is to maintain the Desired State. It is the ultimate decision-maker. If you ask for 3 replicas of an app, the Control Plane ensures 3 exist. If one dies, the Control Plane detects it and orders a replacement. So, K8s will take the burden of maintaining application availability.

Its management Team:

kube-apiserver (The Hub)

The component that talks to the outside world.

  • It validates and configures data for objects (Pods, Services, etc.).
  • It is the only component that writes to the database. All other components (Scheduler, Kubelet, generic users) must talk to the API Server. It is stateless and scales horizontally.

etcd (The Memory)

The backing store for all cluster data.

  • Stores the entire state of the cluster (what Pods exist, what nodes are healthy).
  • It is a consistent and highly-available key-value store. It is the single “Source of Truth.” If you lose etcd data, you lose the cluster.

How we avoid losing it?:

  • Clustering (Raft Algorithm): In a production environment, the Control Plane is distributed. It is not just one server; it is a fleet of them working together….etcd is rarely run as a single instance in production. It runs as a cluster of odd-numbered nodes (usually 3 or 5).
  • Quorum: It relies on a majority vote. If you have 3 nodes, you can lose 1 and still write data. If you have 5, you can lose 2. This ensures high availability.
  • Strict Consistency: Unlike some databases that allow “eventual consistency,” etcd ensures that if a read happens immediately after a write, it gets the new data.
  • Backups: Administrators (or cloud providers like EKS) perform periodic snapshots of the etcd database to cold storage to recover from total catastrophic failure

kube-scheduler (The Planner)

It constantly watches the API Server for unscheduled Pods (Pods with an empty nodeName field). Its task is to assign Pods to Nodes, but NOT running the Pod (the Kubelet does that); it is strictly about the decision of where to place it.

Decision: When a new Pod is created, the scheduler initiates a rigorous three-step cycle to find the best home for it.

1. Filtering “Which nodes are capable of running this Pod?”

The scheduler looks at the entire cluster and filters out nodes that do not meet the hard requirements. If a node fails a filter, it is discarded from the list of candidates.

  • Resource Availability: Does the node have enough free CPU and RAM to satisfy the Pod’s requests?
  • Node Selectors: Does the node have the labels specified in the Pod’s nodeSelector?
  • Taints: Does the node have a taint that the Pod does not tolerate?

Result: A list of feasible nodes (0, 1, or many). If 0, the Pod goes into Pending state.

Scoring: “Which of the capable nodes is the best fit?”

The scheduler assigns a score (0–100) to the remaining feasible nodes based on active scoring functions.

  • Image Locality: Nodes that already have the container image cached get a higher score (saves bandwidth and startup time).
  • Least Requested: Nodes with fewer existing workloads might be prioritized to spread the load (load balancing).
  • Bin Packing: If you want to fill up nodes (so to optimize resources), you might score nodes higher if they are almost full, to free up other nodes for scaling down (cost optimization).

Once the winner is selected, the scheduler sends a request to the API Server to update the Pod object. It writes the node’s name into the Pod’s nodeName field. The Kubelet on that specific node sees this assignment and starts the container runtime.

kube-controller-manager (The Enforcer)

A daemon that embeds the core control loops. The central mind that watches and act.

The Controller’s Control Loop

Kubernetes is built on the “control loop” concept. A controller continuously watches the state of resources in the cluster, compares it to the desired state defined in your manifest files, and takes action to reconcile any differences. It constantly checks: “Is the reality matching what the user requested?”

  • Self-Healing (Rescheduling): If a Node crashes, the scheduler does not “move” the Pod (Pods are immutable). Instead, the Controller notices the Pod is missing (Current State < Desired State) and creates a new replacement Pod. The Scheduler then immediately assigns this new Pod to a healthy node.
  • Performance & Preemption: If a high-priority “Critical” Pod needs to run but the cluster is full, the Scheduler can Preempt (evict) lower-priority workloads to free up resources. This ensures your most important applications always have the performance they need.
  • Rebalancing: While standard Kubernetes is conservative about moving running Pods, the concept of Desired State ensures that if you add new nodes to a cluster, new workloads will automatically start filling them to balance performance.

Data Plane Components

The data plane consists of the Worker Nodes where your applications run. Each node has two main components:

  • Kubelet: The primary agent on a node that ensures containers are running in a pod. It is the only that can communicate with the control plane to receive instructions.
  • Kube-proxy: A network proxy that maintains network rules on the nodes, allowing communication to and from your pods and services. When a request is made to a Kubernetes Service, the kube-proxy on each node takes that Service’s stable IP address and creates a set of local network rules (typically using iptables or IPVS).
    This is what makes Services work. When you send traffic to a Service IP, kube-proxy is the component that ensures the packet is forwarded to one of the backend Pods, even if that Pod is on a different node.
    A Service gives you a single, constant IP address and DNS name that never changes, automatically forwarding traffic to whichever Pods are currently healthy and running behind it..

Container Runtime (The Engine)

The software responsible for actually running the containerized process.
In the past, this was almost always Docker.
Modern Kubernetes (and EKS) uses containerd or CRI-O.

CRI (Container Runtime Interface): interface that acts as a “universal translator” between the Kubelet and the container runtime.
The Kubelet sends generic commands (like “Start Container”) that are translated into the specific low-level actions needed to run the container.

Kubernetes Pod Specifications (PodSpecs)

A PodSpec is a YAML-based definition of a pod, describing its containers, volumes, networking, and other configuration. It is the core unit of deployment in Kubernetes. Understanding the PodSpec is crucial as it dictates the behavior and configuration of your application.

Resource Requests and Limits

This is the most critical configuration for cluster stability.

  • Requests: The Minimum guaranteed. The Scheduler uses this number to decide if a node has enough room.
  • Limits: The Maximum allowed. The Linux kernel uses this to throttle (CPU) or kill (Memory) the process if it goes too high.

For critical apps, set requests equal to limits. This gives you "Guaranteed QoS" (Quality of Service).

apiVersion: v1
kind: Pod
metadata:
name: critical-web-app
spec:
containers:
- name: web
image: nginx
resources:
requests:
memory: "1Gi" # Scheduler guarantees 1Gi is free on the node
cpu: "500m" # 0.5 CPU cores
limits:
memory: "2Gi" # If it hits 2Gi, OOMKill happens
cpu: "1000m" # If it tries to use >1 core, it is throttled (slowed down)

Taints and Tolerations

Taints allow a Node to repel Pods. This is used for “Dedicated Nodes” (e.g., GPU nodes, Admin-only nodes). Unless a Pod has a special “Toleration” (a VIP pass), the Scheduler will not place it there.

Step 1: Taint the Node (The Bouncer)

# Apply a taint to a node
kubectl taint nodes gpu-node-01 dedicated=gpu:NoSchedule

Step 2: Add Toleration to Pod (The VIP Pass)

apiVersion: v1
kind: Pod
metadata:
name: ml-training-job
spec:
containers:
- name: tensor-app
image: tensorflow/tensorflow:latest
tolerations:
- key: "dedicated"
operator: "Equal"
value: "gpu"
effect: "NoSchedule"
# Note: A toleration allows entry, but doesn't guarantee it.
# Usually combined with Node Affinity to ensure it *must* go there.

Node Affinity (The Magnet)

Affinity allows a Node to attract Pods. This is used for “Zone Awareness” or “Hardware Selection.”

  • Hard Affinity (required): "You MUST run here. If no node matches, stay Pending."
  • Soft Affinity (preferred): "Please run here. If you can't, run anywhere else."
apiVersion: v1
kind: Pod
metadata:
name: high-availability-app
spec:
affinity:
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: topology.kubernetes.io/zone
operator: In
values:
- us-east-1a
- us-east-1b
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 1
preference:
matchExpressions:
- key: disktype
operator: In
values:
- ssd
containers:
- name: app
image: my-app:1.0

IgnoredDuringExecution means that Kubernetes ignores the change for existing workloads. It does not evict them.

Persistent Storage

In Kubernetes, Pods are ephemeral : if a Pod writes data to its local disk and then crashes, that data is gone forever. To save data, we use Persistent Storage.

StorageClass : what is available (e.g., “Fast SSD”, “Cheap HDD”, “Network File System”).

PersistentVolumeClaim / PVC: what the apps want (e.g., “I want 10GB of the Fast SSD”).

PersistentVolume / PV : This is the real slice of storage .

Dynamic Provisioning

In the old days (“Static Provisioning”), an Admin had to manually create 100 PVs and hope they were enough. Today, we use Dynamic Provisioning. When you create a PVC (The Order), the Cluster automatically talks to the Cloud Provider (AWS/GCP) to create the PV instantly.

1. The StorageClass

This tells Kubernetes: “When someone asks for gp3-storage, ask AWS to create an EBS gp3 volume."

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
name: gp3-storage
provisioner: ebs.csi.aws.com # <--- The AWS EBS CSI Driver
parameters:
type: gp3
fsType: ext4
reclaimPolicy: Delete # If PVC is deleted, delete the EBS volume too
volumeBindingMode: WaitForFirstConsumer # Important: Don't create volume until Pod is scheduled!

2. The PersistentVolumeClaim / PVC

The developer applies this. Notice they don’t mention AWS or EBS or GCP.

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: my-database-pvc
spec:
accessModes:
- ReadWriteOnce # EBS can only attach to ONE node at a time
storageClassName: gp3-storage # Matches the SC above
resources:
requests:
storage: 10Gi

3. The Pod

The Pod “mounts” the PVC.

apiVersion: v1
kind: Pod
metadata:
name: database-pod
spec:
containers:
- name: mysql
image: mysql:8.0
volumeMounts:
- mountPath: "/var/lib/mysql" # Where the app expects the data
name: my-storage
volumes:
- name: my-storage
persistentVolumeClaim:
claimName: my-database-pvc # Matches the PVC above

The “ReadWriteOnce” Trap

Most cloud block storage (AWS EBS, Google Persistent Disk, Azure Disk) is ReadWriteOnce (RWO).

  • Limitation: The volume can only be attached to ONE Node at a time.
  • Consequence: You cannot run 3 replicas of a web app sharing the same EBS volume.
  • Solution: For shared storage (ReadWriteMany), you must use a File System like AWS EFS (NFS), or FileStore.

Resilience & Scaling (ReplicaSets)

To ensure resilience, there are ReplicaSets.

A ReplicaSet is a simple loop with one job: Ensure X copies of a Pod exist. It does not care where they run, only that they run.

A ReplicaSet does not “own” Pods by name. It owns them by Label. If you manually create a loose Pod with the label app: my-web-app, the ReplicaSet will see it, count it, and adopt it.

Danger Zone: If you already have 3 replicas running, and you manually create a 4th Pod with the same label, the ReplicaSet will notice “Current (4) > Desired (3)” and terminate one of them immediately to return to the desired state.

You rarely write a ReplicaSet YAML directly. You use a Deployment.

  1. Deployment: Manages Updates (Rolling Updates, Rollbacks).
  2. ReplicaSet: Manages Scaling (Ensures X copies).
  3. Pod: Run the container.

When you create a Deployment, it automatically creates the ReplicaSet for you.

apiVersion: apps/v1
kind: Deployment
metadata:
name: frontend-deployment
spec:
replicas: 3 # <--- Passes this to the ReplicaSet
selector:
matchLabels:
app: frontend
template: # <--- The Pod Template
metadata:
labels:
app: frontend
spec:
containers:
- name: nginx
image: nginx:1.14.2

Configuring kubectl and the kubeconfig file

kubectl is the command-line tool for interacting with the Kubernetes API server. The kubeconfig file is where kubectl stores configuration for accessing your clusters. It contains cluster addresses, user credentials, and context information for different environments. Managing this file is key to securely and efficiently managing multiple clusters.

Kubernetes Namespaces

Namespaces are a way to logically partition a single cluster into multiple virtual clusters. They provide a scope for names and a mechanism for resource isolation, which is critical for managing multi-tenant environments and development teams.

Example: A common use case for namespaces is to separate environments. You could have a production namespace for your live applications and a development namespace for your testing and staging environments. This ensures that the two environments cannot interfere with each other, and you can apply different policies (e.g., security or resource quotas) to each.

ConfigMap and Secrets

The Golden Rule of containers is: Never bake configuration into your container image. If you have to rebuild your Docker image just to change a database URL or a log level, you are doing it wrong.

We solve this with ConfigMaps (for plain text) and Secrets (for sensitive data).

Think of a ConfigMap as a “Virtual Disk” that contains text files.

  1. You create a ConfigMap with key-value pairs (Filename -> Content).
  2. You tell the Pod to “mount” this map as a volume.
  3. Kubernetes creates the files inside the container at runtime.

Example: Fluent Bit Configuration

Fluent Bit is a log processor. It needs a complex config file (fluent-bit.conf) to know which logs to read and where to send them.

The ConfigMap (The Content)

This object holds the actual text of the configuration file.

apiVersion: v1
kind: ConfigMap
metadata:
name: fluent-bit-config
labels:
app.kubernetes.io/name: fluentbit
data:
# The "Key" becomes the filename
fluent-bit.conf: |
[SERVICE]
Parsers_File parsers.conf
[INPUT]
Name tail
Tag kube.*
Path /var/log/containers/*.log
Parser docker
DB /var/log/flb_kube.db

The Pod (The Consumer)

The Pod definition connects the ConfigMap to a specific path inside the container.

apiVersion: v1
kind: Pod
metadata:
name: fluent-bit-pod
spec:
containers:
- name: fluent-bit
image: fluent/fluent-bit
volumeMounts:
# 2. Mount the volume at a specific path
- name: fb-config-vol # Matches the volume name below
mountPath: "/fluent-bit/etc/" # Where the file will appear
readOnly: true
volumes:
# 1. Define a volume backed by the ConfigMap
- name: fb-config-vol
configMap:
name: fluent-bit-config # Matches the ConfigMap name above

The Result: When the container starts, it will find a file at /fluent-bit/etc/fluent-bit.conf containing the text you defined in the ConfigMap.

Why this is powerful

  • Decoupling: You can use the exact same Docker image (fluent/fluent-bit) in Dev, Staging, and Prod. You just mount a different ConfigMap in each environment.
  • Live Updates: If you edit the ConfigMap, Kubernetes updates the file inside the container automatically (though the application might need a restart to reload it).

Secrets are used for sensitive data like passwords or API keys. While Secrets are a secure way to store sensitive information, it’s important to note that they are not encrypted by default within Kubernetes; they are simply stored as base64-encoded strings. However, they are more secure than storing plain text configuration because they decouple sensitive data from your application code, provide fine-grained access control through RBAC, and can be integrated with external key management systems for true encryption at rest.
Using these objects decouples configuration from your application code, making your container images more portable and your configuration easier to manage and update without rebuilding.

Kubernetes Workloads

Workloads are the objects that manage and schedule pods. Common examples include:

  • Deployment: Manages a replica set and ensures a specific number of pods are running, handling rolling updates and rollbacks.
  • StatefulSet: Manages pods that require stable, persistent storage and network identities, ideal for databases.
  • DaemonSet: Ensures that a copy of a pod runs on every node in the cluster, useful for cluster-wide logging or monitoring agents.
  • Job: Manages a pod that runs a single, defined task to completion. Unlike the other workloads, a Job is “suicidal” — it is designed to terminate successfully after its task is finished. This makes Jobs perfect for one-off tasks like batch processing or database migrations.

CustomResourceDefinitions (CRDs) and Custom Controllers

Kubernetes is a Platform for Building Platforms.

If you want to add new features, you can do it using CustomResourceDefinitions (CRDs) and Custom Controllers. Together, these form the Operator Pattern.

Out of the box, Kubernetes knows about Pods, Services, and Deployments. But what if you want it to understand a Database?

  • CRD : You tell the API Server, “I am defining a new word called Database."
  • Custom Resource: A developer writes YAML saying, “I want a Database named my-sql-db."
  • Controller: A piece of software (Operator) watches for that sentence and actually spins up the StatefulSets, PVCs, and Services needed to make it happen.

The Custom Resource Definition

apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
name: databases.example.com
spec:
group: example.com
versions:
- name: v1
served: true
storage: true
schema:
openAPIV3Schema:
type: object
properties:
spec:
type: object
properties:
databaseName:
type: string
version:
type: string
storageSize:
type: string
scope: Namespaced
names:
plural: databases
singular: database
kind: Database
shortNames:
- db

The Custom Resource

Once the CRD is applied, your developers can now use this simple abstraction. They don’t need to know about StatefulSets or PVCs.

apiVersion: [example.com/v1](https://example.com/v1)
kind: Database
metadata:
name: my-app-db
spec:
databaseName: "users_db"
version: "8.0"
storageSize: "20Gi"

The Controller

Applying the YAML above does nothing by itself. It just saves a record in Etcd. To make it real, you need a Controller (Operator). This is code running in a Pod that loops forever:

  1. Watch: “Hey API Server, did anyone create a Database object?"
  2. Reconcile: “I see my-app-db requests 20Gi. I will now create a Kubernetes StatefulSet with MySQL 8.0 and a PVC for 20Gi."
  3. Update Status: “I have created the underlying resources. The Database status is now Provisioning."

The result is that your developers can manage a complex, multi-component database with a single, simple command. The custom controller handles all the underlying complexity, providing a powerful, automated, and declarative experience tailored to your organization’s needs.

But you need to code for creating a new Controller. Difficult? It used to be (writing raw REST API clients). Today, we use Frameworks like Kubebuilder or Operator SDK. These are code generators. They write 90% of the boilerplate for you.

In short, the pillars of Kubernetes. It you grasp all this, you can design really complex and powerful systems, like K8S’s dad.


Kubernetes in a Nutshell was originally published in Google Cloud - Community on Medium, where people are continuing the conversation by highlighting and responding to this story.

01 Dec 08:04

Expanding Google Cloud’s Cross-Cloud Network with a groundbreaking AWS collaboration

by Himanshu Mehra

Today, we announced a significant collaboration with Amazon Web Services (AWS) to offer a managed, private and secure, on-demand, solution for cross-cloud connectivity. This solution is designed to enable customers to easily build enterprise-grade applications that span both Google Cloud and AWS environments. This collaboration is particularly timely, as the adoption of multicloud applications is rapidly accelerating, driven in part by the rise of AI. A Forbes survey highlighted that 82% of respondents anticipate that the arrival of AI services will increase the demand for multicloud networking due to the scarcity of specialized accelerator resources and the availability of diverse AI agents across different vendors. The surge in multicloud adoption is a strategic imperative for organizations looking to build agentic AI applications, optimize workloads, access best-of-breed services, meet data residency requirements, and ensure the necessary resiliency for modern hybrid and multicloud applications.

To address the inherent network infrastructure challenges introduced by multicloud deployments, we designed the Cross-Cloud Network to simplify and optimize networking between Google Cloud and other providers.This commitment to multicloud integration has led to over 50% of the Fortune 500 currently using the Cross-Cloud Network, and this collaboration provides a significant boost. Importantly, this new jointly engineered solution with AWS is being published under an open specification, creating an opportunity to expand the reach, allowing other providers to contribute and implement this solution in their own environments, further benefiting mutual customers.

Introducing the Cross-Cloud Interconnect for AWS

Today marks a major step in simplifying and securing the multicloud journey. We are thrilled to announce a first of its kind open specification that fundamentally streamlines private network connections between customers' environments across different cloud providers. This groundbreaking joint specification has culminated in the preview of partner Cross-Cloud Interconnect for AWS, a powerful expansion of our Cloud Interconnect portfolio. This innovation allows you to build on-demand connections in minutes between your Google Cloud and AWS VPCs, transforming multicloud networking from a complex build into a simple, managed service.

1-A groundbreaking collaboration

This is more than just a connection — it's a complete shift in how you adopt multicloud solutions. We are delivering substantial value to our mutual customers:

  • Simplicity and speed: Say goodbye to complex networking builds. This is a fully managed, cloud-native experience where a cross-cloud connection is as easy as peering two VPCs. We're cutting end-to-end setup time from days to mere minutes, with flexible, on-demand bandwidth starting at 1 Gbps during preview and scaling up to 100 Gbps at general availability.

  • Secure by default: Your data's security is paramount. All connections between the two clouds' edge routers are MACsec-encrypted — providing line-rate performance with always-on encryption — for a more secure foundation.

  • Inherently resilient: Benefit from an inherently resilient architecture that provides layers of protection against facility, network, and software failures, ensuring your critical applications remain online.

  • Open and optimized: The foundation is an open specification for seamless adoption across the industry. You can also benefit from an optimized total cost of ownership through vendor consolidation and an on-demand service model that lets you provision exactly what you need, when you need it.

This service is launching with availability in key locations like N. Virginia, Oregon, London, and Frankfurt, with rapid expansion planned to more locations globally.

Simplifying cross-cloud connectivity

Before today's jointly engineered solution, building applications that spanned multiple cloud environments was a significant undertaking, often becoming a barrier to multicloud adoption. Customers faced a complex, multi-layered process that involved cross-functional teams and substantial lead times.

A typical deployment required several intricate steps:

  • Procurement: Acquiring physical connections, whether dedicated or through a shared partner offering, and then building and managing the necessary infrastructure to ensure network availability and separation of fate.

  • Logical configuration: Establishing basic connectivity by meticulously assigning and negotiating non-overlapping link-local IP addresses and setting up VLANs.

  • Routing setup: Configuring BGP sessions, assigning Autonomous System (AS) numbers, and creating complex routing policies to meet specific performance and reliability requirements.

  • Security implementation: Conducting thorough security reviews and implementing custom solutions to encrypt traffic between the distinct cloud environments.

The integrated partner Cross-Cloud Interconnect offering completely abstracts away this complexity. Customers can now bypass all the manual steps and instantly leverage pre-built physical connections with built-in security and resiliency, achieving streamlined, on-demand connectivity between their Google Cloud VPCs and AWS.

Building this powerful cross-cloud connection is now remarkably simple. Customers configure a single "transport" resource in Google Cloud and accept it in AWS. This transport is an innovative, managed construct that completely abstracts and provisions the underlying physical interconnects, VLAN attachments, and Cloud Router instances. This profound simplification enables end-to-end connectivity in minutes, transforming multicloud deployment from a days-long engineering project into a simple, rapid configuration task.

2-Simplifying Cross-Cloud connectivity

Under the hood: a secure and resilient foundation

We co-designed our solution to deliver a secure and resilient foundation for cross-cloud applications, with a simple new service that doesn’t compromise on core enterprise availability tenets. 

  • Privacy and security: All peering relationships are built between link local addresses, facilitating connectivity between IPv4 and IPv6 private address spaces across both environments. All underlying physical connections between Google Cloud and AWS edge routers are MACsec-encrypted, and both providers manage key rotation to meet enterprise security requirements.

  • Quad-redundancy: To enable connectivity between a Google Cloud and an AWS cloud region, quad-redundant connections are leveraged, ensuring facility redundancy, as well as edge-router redundancy. This design helps protect from multiple simultaneous failure scenarios and provides high resiliency levels for joint customers.
  • Managed operations are key to enabling integrated solutions. The newly introduced solution not only streamlines the physical and logical builds on behalf of joint customers, it also leverages a robust underlying proactive monitoring system that detects and reacts to failures before customers suffer from their consequences. The system relies on coordinated maintenance to avoid overlaps that may impact end-to-end service availability, and streamlines support operations to address potential issues on behalf of customers.
3-Under the hood

A variety of multicloud workloads

These new streamlined network connections between Google Cloud and AWS enable application teams to automate network builds for a variety of interesting applications. Consider the following scenarios:

  • Infrastructure and AI deployments supporting active-active or active-standby disaster recovery strategies. With basic connectivity between two peer services — e.g., agentic AI applications or database replicas — applications can synchronize state across the cloud boundary as if they are co-located, supporting maximum application resilience and operational consistency.

  • AWS customers issuing inbound requests into Google Cloud to allow a service running in AWS to securely and privately access a Google Cloud API. Examples include custom applications running on Compute Engine or a critical data warehouse hosted in BigQuery that bypasses the public internet for enhanced security and performance. 

  • Google Cloud customers issuing outbound requests towards AWS, where a data pipeline orchestrating in Google Cloud can privately pull large datasets from an AWS datastore like S3 or an RDS instance. 

4-A variety of multicloud workloads

Build applications across Google Cloud and AWS today

Regardless of your use case, if your organization would benefit from simple, secure, and robust on-demand connectivity between your Google Cloud and AWS environments, we invite you to start building your applications across clouds and let us manage your network connectivity infrastructure for you.

This collaboration is not restricted to Google Cloud and AWS. We invite other cloud and service providers to offer their customers this streamlined private peering capability with Google Cloud. To learn more, check out the open specification, and contact us at cross-cloud@google.com. We are truly excited to grow this ecosystem for the benefit of our joint customers.

01 Dec 08:04

AWS and Google Cloud collaborate to simplify multicloud networking

by Rob Enns

As organizations increasingly adopt multicloud architectures, the need for interoperability between cloud service providers has never been greater. Historically, however, connecting these environments has been a challenge, forcing customers to take a complex "do-it-yourself" approach to managing global multi-layered networks at scale.

To address these challenges and advance a more open cloud environment, Amazon Web Services (AWS) and Google Cloud collaborated to transform how cloud service providers could connect with one another in a simplified manner. 

Today, AWS and Google Cloud are excited to announce a jointly engineered multicloud networking solution that uses both AWS Interconnect - multicloud and Google Cloud’s Cross-Cloud Interconnect. This collaboration also introduces a new open specification for network interoperability, enabling customers to establish private, high-speed connectivity between Google Cloud and AWS with high levels of automation and speed.

“Integrating Salesforce Data 360 with the broader IT landscape requires robust, private connectivity. AWS Interconnect - multicloud allows us to establish these critical bridges to Google Cloud with the same ease as deploying internal AWS resources, utilizing pre-built capacity pools and the tools our teams already know and love. This native, streamlined experience — from provisioning through ongoing support — accelerates our customers' ability to ground their AI and analytics in trusted data, regardless of where it resides.” - Jim Ostrognai, SVP Software Engineering, Salesforce

Previously, to connect cloud service providers, customers had to manually set up complex networking components including physical connections and equipment; this approach required lengthy lead times and coordinating with multiple internal and external teams. This could take weeks or even months. AWS had a vision for developing this capability as a unified specification that could be adopted by any cloud service provider, and collaborated with Google Cloud to bring it to market.

Now, this new solution reimagines multicloud connectivity by moving away from physical infrastructure management toward a managed, cloud-native experience. By integrating AWS with Google Cloud’s Cross-Cloud Network architecture, we are abstracting the complexity of physical connectivity, network addressing, and routing policies. Customers no longer need to wait weeks for circuit provisioning: they can now provision dedicated bandwidth on demand and establish connectivity in minutes through their preferred cloud console or API. 

Reliability and security are the cornerstone of this collaboration. We have collaborated on this solution to deliver high resiliency by leveraging quad-redundancy across physically redundant interconnect facilities and routers. Both providers engage in continuous monitoring to proactively detect and resolve issues. And this solution is built on a foundation of trust, utilizing MACsec encryption between the Google Cloud and AWS edge routers. 

“This collaboration between AWS and Google Cloud represents a fundamental shift in multicloud connectivity. By defining and publishing a standard that removes the complexity of any physical components for customers, with high availability and security fused into that standard, customers no longer need to worry about any heavy lifting to create their desired connectivity. When they need multicloud connectivity, it's ready to activate in minutes with a simple point and click.” - Robert Kennedy, VP of Network Services, AWS

“We are excited about this collaboration which enables our customers to move their data and applications between clouds with simplified global connectivity and enhanced operational effectiveness. Today's announcement further delivers on Google Cloud’s Cross-Cloud Network solution focused on delivering an open and unified multicloud experience for customers.” - Rob Enns, VP/GM of Cloud Networking, Google Cloud 

This collaboration between AWS and Google Cloud is more than a multicloud solution: it’s a step toward a more open cloud environment. The API specifications developed for this product are open for other providers and partners to adopt, as we aim to simplify global connectivity for everyone. We invite you to explore this new capability today. To learn more about how to streamline your multicloud operations please visit the in-depth Google Cloud Cross-Cloud Interconnect blog and the AWS Interconnect - multicloud website to get started.

01 Dec 08:02

AWS announces preview of AWS Interconnect - multicloud

by aws@amazon.com

AWS announces preview of AWS Interconnect - multicloud, providing simple, resilient, high-speed private connections to other cloud service providers (CSPs), starting in preview with Google Cloud as the first launch partner and then with Microsoft Azure later in 2026.

Customers have been adopting multicloud strategies while migrating more applications to the cloud. They do so for many reasons including interoperability requirements, the freedom to choose technology that best suits their needs, and the ability to build and deploy applications on any environment with greater ease and speed. Previously, when interconnecting workloads across multiple cloud providers, customers had to go the route of a ‘do-it-yourself’ multicloud approach, leading to complexities of managing global multi-layered networks at scale. AWS Interconnect - multicloud is the first purpose-built product of its kind and a new way of how clouds connect and talk to each other. It enables customers to quickly establish private, secure, high-speed network connections with dedicated bandwidth and built-in resiliency between their Amazon VPCs and other cloud environments. Interconnect - multicloud makes it easy to connect AWS networking services such as AWS Transit Gateway, AWS Cloud WAN, and Amazon VPC to other Cloud Service Providers (CSPs) quickly, instead of weeks or months.

Interconnect - multicloud is available in preview in five AWS Regions. You can enable this capability using the AWS Management Console. CSPs can also easily adopt via a published open API package on GitHub. For more information, see the AWS Interconnect - multicloud documentation pages.

01 Dec 08:01

Announcing Amazon EKS Capabilities

by aws@amazon.com

Amazon Elastic Kubernetes Service (EKS) announces the general availability of EKS Capabilities, a fully-managed extensible set of Kubernetes-native platform features for workload deployment, AWS cloud resource management, and Kubernetes resource composition and orchestration. EKS Capabilities provides out-of-the-box platform features and offloads operations to AWS, improving the performance and security of your platform components.

EKS Capabilities streamlines building and scaling with Kubernetes, allowing you to focus on deploying applications rather than maintaining platform infrastructure. These capabilities run in AWS-owned infrastructure separate from your clusters, with AWS handling auto scaling, patching, and upgrading. Application developers get ready-to-use platform capabilities that enable faster workload deployment and scaling across the organization, while platform teams can offload operational tasks to AWS. Three capabilities are available at launch including continuous deployment with Argo CD, AWS resource management through AWS Controllers for Kubernetes (ACK), and dynamic resource orchestration using Kube Resource Orchestrator (KRO).

EKS Capabilities is available today in all AWS Regions, except AWS GovCloud (US) and China Regions. To get started with EKS Capabilities, use the EKS API, CLI, eksctl, AWS Console, or your favorite infrastructure as code tooling to enable it in a new or existing EKS cluster. To learn more, visit the EKS Capabilities feature webpage, user guide, pricing webpage, and AWS News Launch blog.

01 Dec 08:00

España es el segundo país europeo que más ha recaudado con el IRPF por la inflación.

by Fino

Al contrario que la mayoría de países, el Gobierno apenas la ha compensado, generando un aumento de la presión fiscal que afecta más a rentas bajas. @Jongonzlz

España es el segundo país europeo que más ha recaudado con el IRPF por la inflación.

Ver post completo: España es el segundo país europeo que más ha recaudado con el IRPF por la inflación.

01 Dec 07:59

Ya tenemos Premio Darwin 2025.

by Fino

Ya tenemos Premio Darwin 2025.

El entrenador de fitness tenía que consumir primero ingentes cantidades de comida para engordar rápidamente 25 kilos de peso; posteriormente, los perdería siguiendo un método de adelgazamiento que había diseñado previamente antes de que acabase el año. @20minutos

Ver post completo: Ya tenemos Premio Darwin 2025.

01 Dec 07:59

Jone Bengoa, en El Estafador  [web]  [twitter]  [instagram]  [facebook]

Jone Bengoa, en El Estafador  [web]  [twitter]  [instagram]  [facebook]

[instagram]  [tienda]

01 Dec 07:58

Bernal  [web]  [instagram]  [twitter]  [facebook] 

Bernal  [web]  [instagram]  [twitter]  [facebook