@sqL_handLe@CliffordAsness "So Liz, can you explain this gap in your employment history?"
"Well.. umm... I was, ah, briefly, well, the UK Prime Minister."
๐ณ
@Dianasaur323 Great product managers and architects have a talent for doing so and are worth their weight for that!
From turning insurmountable problems into achievable steps to find a solution, through to a way to deliver those big visions ๐คฏ
@benarent@CockroachDB@goteleport Plus "Future work
In future, instead of using host authority for signing certificates used by a database server, we can introduce another authority specifically for database access which would help decouple authority rotation for databases from the rest of the cluster."
@benarent@CockroachDB@goteleport Thank you for that, I am really interested in "the database server needs to be configured with Teleport's certificate authority and ... use server certificate issued by Teleport"
Or "can also be ... configured with a custom CA cert if ... uses cert/key pair signed by user's CA."
@benarent@CockroachDB@goteleport We could follow Split CA https://t.co/wfySt90FCN however that's not a good idea either:
"Warning:
We do not recommend you use split CA certificates unless your organizational security practices mandate you to do so" and still not mutual TLS.
@benarent@CockroachDB@goteleport I'm trying to understand the mechanism & security from the teleport docs, on teleport it's stating mutual TLS, but the implementation is having teleport be the root CA for all cockroach certs. That's not mutual TLS. /1
IT IS TIME
The man looked up from his beach chair.
"Really? I've only just retired."
Death held up a timer. A single grain was about to fall. And yet... It didn't.
CURIOUS
Vetinari shrugged. "I've only just discovered drinks with little umbrellas. I'll let it fall in a bit"
@davidfowl@kelseyhightower "The application should simply retry the database connection, using some sort of backoff, and log errors along the way. At some point either the database will come online, or your company will be out of business." โค๏ธ
Wow! ๐คฏ Thank you @Radiolab for your podcast on the Null family!! All of #sqlfamily#sqlhelp should listen to this!
https://t.co/abIaq67SRo
https://t.co/uyweIgVYNm
@sqL_handLe No worries, when I first used the NOEXEC ON check I used to do the same thing, I had large comments telling the user to check, then the penny dropped ๐คฃ๐๐คฃ
@Kendra_Little Ooh that reminds me of making Sopa de Lima, strips of corn tortillas fried/baked are served with this spicy, zesty chicken soup.
So yummy!