Kubernetes Pod Security Admission

Today I upgraded my production kubernetes cluster from v1.24.4 to v1.25.0 and encountered a problem during the upgrade. Because the PodSecurityPolicy api was removed from kube apiserver, and by instead of Pod Security Admission (PSA), so I needed to merge PodSecurityPolicy into PSA. At this time I did some research on PSA. PSA has been defined as a stable interface in v1.25.0 and the PodSecurity controller is enabled by default. the PSA controller forces pods to run in an environment with specific permissions by creating permissions rules in namespace, and all pods under that namespace will have access to the host environment restricted to that permission. ...

September 5, 2022 · 2 min · alexchen

ETH Mainnet Merge - PoW to PoS

Ethereum mainnet merge In August this year, the ETH goerli test network was merged 2.0, I also participated in the test network merge, the whole process was successful, I used lighthouse as the ETH Consensus layer, geth as the Execution layer, the current test network running validator node status is good. In the coming September, the main ETH network will be merged with 2.0, and I also ran the Consensue Layer and Execution Layer separately, so I hope this major merger will be completed successfully. ...

August 31, 2022 · 2 min · alexchen

Storytelling and Emotion

July 30, 2022 · 0 min · alexchen

My Web Content Platform

This is the architecture of the content management platform I currently use, the front end of the two google comput engine for connecting to the global Internet and hosting static sites, the back-end cluster all running on my owner hosted ARM64 system platform, the Cloudflared tunnel is running inside of kubernetes cluster, when the user requests invisibleart, the request will be sent to the tunnel through the cloudflare edge network, then cloudflared will send the request to the target address wordpress engine, the backend database is used vitess mysql cluster, the early use of tidb I found that compatibility problems with wordpress, and finally I decided to use vitess, in the backup, expansion, and disaster recovery, vitess is still very reliable. ...

July 29, 2022 · 1 min · alexchen

The Invisible Art the Legends of Movie Matte Painting Book

I finally got the book I wanted to buy four years ago on ebay, The Invisible Art, because it is an extremely rare book and most foreign used bookstores do not support direct shipping to China, so I waited for a long time looking for an opportunity to buy a newer copy of The Invisible Art, and finally I found a merchant on ebay who sent the book to China through a forwarding center in the US. The reason for buying this book is that I wanted to build my own world view. Although this book is mainly about Matte Painting in film production, just as we sit in the cinema and watch a movie, we do not feel that there is such a group of artists behind the scenes serving the story of the movie, our thoughts are moving forward with the story. Similarly, in other fields, after we use technology to complete the whole, we should let the user or the admirer feel the art itself, not the technique, the technique is to serve the art, through learning Matte Painting, we always need to remember that Matte Painting is to serve the story, when leaving the story behind to express your ideas through gorgeous technology, no one can understand you, because the viewer has already seen you in the work, he already knows this is a gorgeous special effect. Do some thinking divergence, like playing music, at first we focus on the technique, and finally the musicality, we want the music to tell the story, this time we have to learn the Invisible Art technique, to let the listener be attracted to your music, not as a spectator to listen to your performance, great Matte Painting work is all about creating physically realistic scenes. The same of good musician is to let you understand the meaning of each note, Invisible Art is about taking every detail to the extreme and then building a magnificent world in which every sculptural detail of the artist is hidden, which is why I created invisibleart.pro. To learn a field, you first have to like it, and then you explore the details in it. ...

July 11, 2022 · 2 min · alexchen