You want some minutes, and then we'll see what you say. Give us a minute. Second. What's your name? I'm a pro driver, is that it? Second. No one knows? Okay. Public invited to be called. Do we don't have any? Look at that, we're born. Okay. I have a pod communications. Do you have the same one? Anybody? Okay. So, we're just going to do October's, I'm assuming, or do you want to do last two months since we just did October, okay? October, so projected for sunset. Revenue, we were projected at $30,121. Our actual revenue in it, $51,688. It's about 11%. Prime-wise, projected rounds were at $23,83, and $32,68, about one and a half percent increase from previous October. All due to weather. Weather was pretty darn good for October. November, unfortunately, is not good so far. As of right now, I've been closed 13 of the 21 days. The total closure last year in November was six days. So, I've doubled the closed days due to the snow. Rounds and revenue were down, so your rounds were down almost 50% from last year for November and then revenue-wise were down about $6,000 in revenue. Although the punch cards that we started selling, we sold more punch cards than last November so far. And, of course, when it's being removed, a small increase, we just made a little money on them. But, we'll see. Go ahead. No, you didn't. I thought, yeah, for sunset. I'm just curious for what I'm saying. When you look at next year's budget when you project revenue, do you take into account a certain X number of snow days? It's always a guess. Like last year, for example, we didn't really get very shut down until January 1st that we got the snow. And then, we were closed January and February the entire month in 2022. So, it's a really guessing game. If we get open and give it a good play, it's kind of a bonus. I think that's how it's been projected in the past. You look back at all of them, at least since I've been here, in the 10 years. You know, like, I wish you'd re-projected the revenues for January and February, but you got zero. Yeah, it's generally a small amount for December. Last November was one of the most important November of this history. I remember when it was already September. Yeah, November was one of the most important. Yeah, it was a very important year. Okay, so... Okay, so you wanted to buy a lot of the things as well? Yeah. Okay, 20 picture revenues came in at $113,929. Bring them ahead by $83,327. Very good year. These three picture revenues came in at $157,907 for the month. Year to date, we're at $1,848,948, almost $120,000. It's been great. The cost has been very good. They're looking at the rounds. Twin peaks to actual rounds for the month of October, $3,906. But their year-to-date numbers are $36,935, which is very small. I remember whenever I was just trying to get to $35,000 for the year, two peaks now, I was going that way. And then for new creeks rounds, actual rounds here are data $40,248. Down to 651 rounds, the way ahead in revenues. Because, you know, race fees and a few other categories were doing it very well. I ran the numbers for November as well. And we've been open nine days this month, 17 days and 21. We're down almost $42,000 so far from the month. But on a good note, if we get open this weekend, we will meet last year's numbers, which was our record year, which is 1.0, 1.9. Just a few more days of being open, and we're going to set another record year. What's it, of course, look like? Is the snow about gone? You know, I keep opening and blocking the key sheet. Nothing, okay, so you can go, who is that? Oh, no, now we're open for Friday. There's not a lot of others, but what we do have is keeps freezing over. So we're open for Friday. In the comments section. Moving on. Old minutes. We're on a barge, I forgot the bench. You want to talk about irrigation first? Hmm, my bad. Okay. So, I can't remember how we left it out in the last meeting, but now we're going to work it on. Originally, we're going to do a clean-piece irrigation system. They got changed to just the pump station this year. And now, we're going to change that. Now we're going to do clean-piece and sunset irrigation replacements, scheduled for fall, starting fall of 23. As it sits right now, we have our inspections turned into purchasing. We'll be working on it. They put it into the format. Hopefully get it out of the bid here as soon as possible. What's your projected completion? So, clean-piece is projected to start just after Labor Day 23 and probably be done in March or June 24. So that's the way to do a little bit of work in the fall, pump stations over the winter and finishing up in 24. And then the sunset would either fall right behind that even starting in June or right after Labor Day 24. It's all dependent on the water project that's going over there. Now, we can't start our project until they're done. And then that one's projected to pay in September. It would be done by the end of the year. Or if it started in June, it would be done by Labor Day October. Will that affect people playing? You have to close the course now? We don't have to. We're trying not to close the course. It'll definitely be places impacted by the project. But it's going to work kind of like a road construction where we'll be in one spot and move around. I know there's going to be small parts of the course impacted at the time. They're going to be done. So all that planning is dependent on the availability of all the companies that show interest in it. So it's mostly boring that they're doing? Or they're going to be trenching? It's going to be a little bit of both. The main lines will be dug into the back door or trenching. Because there'll be six to eight inch lines at sunset. And there'll be ten inch lines here at two weeks. And there'll be 48 inches down. And then all our lateral lines will be as attached to them. And we pull the work stretch depending on what the train looks like in the area. So that'll dictate how much the course is? Closed to some extent. The main line is going to be the part that has the biggest impact. That's the part they have to trench or dig in. For the laterals, we're using HPP. So we'll have fused together long stretches at home. And then pull the long stretch in into a little bore. And then we do the other one. If a lot of places are like that for the bore. Yeah. So it'll be a mixture of that. And over trenching depending on what the train looks like or what the work is actually doing. The irons on all of these? The maintenance building. We have completed our second submittal to the design review team. We have just a few minor things that have to be addressed with them. We've also submitted to the planning department for the permit. And it's probably three months before we can get that done. And then we'll be ready to work with the citywide award contractors so that we won't have to go to a bid or get as many quotes as we can from those four companies to do the construction. We're hoping that that can take place starting in February because if we don't start construction by March 15th there's some wildlife issues that will prohibit us from moving forward until August after August 15th. So we're hoping to get the earthwork going so that we're already in process before some of the birds come back. We have a lot of old business. Sunset, anything? He has a presentation he's going to do. Let's get some data. So here in the Sunset presentation should be very similar to the two weeks in New Creek presentation we had earlier at our last meeting. So we'll start off with an update on the projects we did this year. Our main projects we did over at Sunset this year was renovation on a couple of key boxes. So it started here with number nine, the back key box. We have a picture of the old key box here up in the middle. And you can kind of see it from the picture but the main point of the renovation was to take the crown that has been in there caused by years and years of use and top pressing. Then over here, here's when it was the finish work done. So you can see kind of here in this front corner of the key box that's how much elevation they changed onto that key box to make it level. Two and a half feet in this front corner so that would be the north-west corner of the key box. You know also on this back side here by the station they were able to add another four feet of key box that was flat so we changed a whole lot more key area than what we used to have. Down here in the middle was a picture of when it was completed on May 27th of this year. So pretty big difference there on that key box. But not as big as number five of the box. So number five was probably one of the larger projects that made the most difference in before and after. This one with all taken out of the house and crown we also decided to make it one larger key box instead of having two separate ones on the back. So at the end of the year it was moving about 18 inches of soil off the back key box which was the blue one and then moving it out with the white key box that's previously there which also allowed it to add about four or five feet towards the very front of the key box. So between down here in the middle you can see the flatwork they did. You can kind of tell by this picture the difference in elevations they did that none went out. So that back key box we made about 1,400 square feet of key space than what we originally thought we were going to have. So we had a pretty good increase in usable key area on the back key. And here's a picture in the lower right of the key right when the sod was laid or completed. So this project was done on June 10. So that's just the white and blue key box. The next one that was done we also did the forward keys on number five. So this one here had an awful lot of crown in it a lot like the key on number nine but once they got everything stripped down we were actually able to add another four feet to the front and four feet to the back key box so we'll keep it at the same width which also gave us about 1,400 square feet of usable key area on the forward key on five. So the middle picture here shows their dirt work their dirt work when they got it done and it was 400 square feet on this one about 4 feet under it. So then here on the right is a picture of the key once it was completed during growing and this was completed on June 10 and now all these keys were grown in cut back out to their key shape and now fully grown in and part of the core style. You can still see a few of the transition areas out there from the difference in size that was late but now everything has grown in and they're going to be used to make sure Ryne will agree that they have to agree with anything but positive feedback from all the key boxes that they got done. So then I may have a restructure of that of all of these really have a little lie a lot of players that were confused at first but you know it's nothing but positive feedback on everything at all. Another project that was completed at first part of 22 was got a new roof put on the vacant shop here it's kind of like this time for a new roof on the vacant shop so that was one of the things we got done this year. That was a much bigger project than just put the shoes on. There were some pretty significant issues there and I think we being able to replace that roof extended the life of that building because we were given notice that if we didn't do something we needed to get out of it so they did a really nice job and things are much better than they had been a hundred years ago. So I gave an update a little bit ago on Sunset I spoke about that project so this was the first map I received from our designer he's still in the process of finishing Sunset designer with numbering out all the stations but this is the new design of the irrigation system over at Sunset so right now Sunset the lower side of where the clubhouse is and the south side on the other side between Longstreet and Third are two separate non-connected irrigation system the new design will connect the system to the one irrigation system and pipe going underneath Longstreet here right by two green and three peak so Sunset having two separate irrigation systems with two really different personalities that will be one complete irrigation system in the same station in the same station so this here will put all the head space in the 65 feet right now everywhere from 60 65 to 70 feet so this will be a lot more uniform there will be a weak mainline which is the dark line that goes around the both areas so that way the irrigation pressure will be more consistent because it will be multiple ways the water will be fed to a certain area we will see less change in pressure down here from three green about 60 to 70 feet to see a lot more consistent watering pattern in the irrigation system we currently have over there next question the heads some of them where you put the distance to are those going to be changed or new ones updated or so the system at Sunset it will be a brand new pipe but all the heads will be reused over there he's talking about the yard workers you know you have the yard workers they take all the heads once the project is completed is when you guys will be doing the update it's put on the bid but it all depends on how much it gets one of the line items on there so it is included to be the sprinkler heads we will make sure that we get one of the work just got to fix that I need the heads installed there let's see we're looking forward to 23 just a few items we're going to look at doing our fixed acid inventory so replacing items around the golf course that we need for our appliances at the clubhouse small hand tools or other pieces of equipment around the maintenance shop work on broken fence posts around the perimeter of the course then just like this here and how to come out of winter seed in the bare areas that we can see come out of winter so going into 23 and 24 we won't be doing any projects on the golf course since they'll be disrupted with construction so we'll be doing major renovation projects until after the water project and the irrigation system are put in so that way we don't end up destroying normal work we just got done do you look at the ball washers things the stands we do that more as needed basis when they get worn out or we notice that something needs attention how do you just how do you maintain those because sometimes what we can do other times it will be such a note there will be no significant consistency so in the middle of the summer it's kind of hard with the evaporation but that's something between the maintenance crew and the marshals out there someone goes around and fills them up and checks them it's supposed to be on a clear binding basis sometimes it probably gets forgotten that's where they get a little dry out do you think ball washers are necessary? unfortunately they are it's everybody else's especially when you get the rain here you can run any ball I think it's the I didn't do anything about towel but one problem is that you have to play and if you don't have a place to get water it's cooler it's water but if you have a lot of towel that's what I do most of the time because it's too hard to remember to get into the ball washer or whatever the one main thing we had this year was an honor to be a party over there at sunset to mention that last year there was just a few pictures of that evening from left before everyone showed up and on the right as the evening went down as we were all enjoying the sunset at sunset and that picture does not represent what it was like because everybody was hugging I was amazed how well you got that cleaned up I played the next day and it was a long chat the morning or something man you wouldn't know if that was even there every a couple random it was incredible besides that everyone did a really good job probably found any trashed morning mat or the night out that's what we were thinking about last year we're here going to some course conditions at sunset this was my presentation was supposed to be in October all this stuff we aerated on September 7 so by now everything at sunset is healed up no sign of aeration when we did it it's two months ago almost already so we'll be on schedule again for fall spring up next year somewhere in April I think after this these healed up really quick not too much sign of aeration very more than a week and a half it's just my imagination but I got the readings since that was incredible this year you were a lot better than you have me today I've heard that a lot from a lot of people coming to go in Ryan then did aeration on the 7th there I don't know was it like three days later I went out on the pudding here on the practice area I had my daughter with me at the time so I had to head to our carrier I was rolling a few plus I couldn't tell that there was aeration done they were the fastest they've been all year too right after this and I mean as a player I was completely blown away I'm very happy with it as a head professional I'm extremely ecstatic about it when I hear customers saying greens have been fantastic that's the pride and joy early of all the golf courses those are our children of course we take care of that green we don't have anybody for that right now here's kind of a little schedule of what we've been doing to get ready for the future which we did another slight little venti or needle tiny in the first part of October just to help increase the airflow on the greens help dry them out a little more we've been all the watering with the rolling and everything throughout the year definitely changes to a lot of greens which on our side of it we see as a black layer which is when you cut a cup right underneath the root zone of the grass there's a little bit of black organic material that builds up through the year so putting some holes in the green to get some air moving down helps reduce that so we're a little better going into winter and getting ready for the spring put down some fertilizer just after that to help get them a little healthier going into the winter this year we're at a sunset you're able to aerate the entire golf course the aerated greens the aerated ease and surrounds the air approaches we're able to use the tractor amount of aerator from Queen Pete's here to do sunsets half inch tines four to five inches deep on all fairways and also afterwards they're able to take what we have it's called an airway it takes little quarter inch wide by five inch long knives that you drive around it kind of puts slits everywhere and we were able to hit the course again just to help increase the air flow and get ready for some moisture from the winter the bottom part's here we're kind of waiting on what mother nature allows us to do we were scheduled to do our golf fertilizer at last Tuesday but our little impromptu steps changed that plan and we were supposed to go out again tomorrow but nothing melting off we're on the schedule again for next week we'll see how it goes and then we'll be waiting for the greens to clear off to apply one last dose and then we'll decide to help force them all so if we do end up having another spring like we did this year where the greens are covered for extended period of time we won't have to worry about any disease or fungus wanting to grow in there which helps us buy a little tiny greens come a lot better out in the spring than if we don't do it here's just a small group of guys from Sunset a region from Bandy who's our one full-time guy over here and the rest of them are all temporary guys that work over there so between all of them and myself I'm the mechanic that puts his time here in Sunset to make Sunset as good a product as we can get for the golfers over there if anyone has any questions that's all we got Brian did you have anything you wanted to talk about? I mean really the only 100-year party with the biggest thing that happened for the year you know tournaments we had a lot of great tournaments of course it was fantastic to be able to produce a lot of great tournaments for the people you know honestly it's just a thank you guys thank the customers we tried to thank everyone because we wouldn't be here without you guys Sunset exists Twin Peaks you create we all exist because of the customers and with the weather everything has been a fantastic year it really has I know my business has seen the best year it's ever had but that's also because we talk to more people in the door so it's how we drive around our businesses we get more people there we may make some money to pay the employees but you know we're there for the golfers we're there for the golfers so I don't really have much thank you guys questions he covered that presentation nope yes so we have two openings on the board Marshall we interviewed this week John indicated tonight when we were waiting for the meeting to start that he had applied for the board so I need to reach out to the clerk's office but it was Rick and Annie and I did the interviews and we would like to recommend to reappoint Marshall we would like a motion on that and then I'll get back to you John as soon as I hear from the clerk's office somebody willing to make that motion I should recommend and there's a line from the staff nope I'm on the board well I'm just saying thank you every time for this year thank you for your support for our board attendance I'm happy all of those thank you guys very much thank you I would like a motion to adjourn second second happy Thanksgiving happy Thanksgiving Merry Christmas


Hi, good morning and welcome to today's products and focus. So what we've actually seen kind of overnight It's in the equity markets apart from the UK 100 are pretty much flat across the board We're as commodities have sold us strongly and the US dollar is broadly rallying across the board and That's one of the reasons why the UK 100 has come off so much because it's got such commodity focus You actually have West Texas crude trading below 40 dollars as we speak So this is where we are with the US 30 just above potential resistance 177 47 now potentially acting as support longer-term potential resistance a 18,000 112 fall by 18 to 84 trading above both moving averages Almost have a bullish crossover on the MACD and the other technicals are relatively neutral Looking at that you came in hundred you can see the negative candle that you had there on Friday Was positive got pushed into the red towards in the session more read this morning 6300 is the potential support level to have a look at now We do almost have a bullish crossover on the MACD. It's not happened as of yet. The other technicals are neutral We are trading below that 21 period SMA 55 period SMA could act as a potential short-term cap But that's where we are UK market looking vulnerable should the commodity sell off Continue look in Japan to do five prospect monetary easing cause this to gap up this morning It's a negative territory from the start of its opening price to now Still higher than its close on Friday 20,087 has been the potential resistance level and it's slowly creaking and grinding up higher and should re-challenge that soon Looking then at dollar yen The dollar had a bit of a jump back this morning after selling off a little bit more after the FOM FOMC sessions on Thursday Long-term potential resistance remains 124 Looking at the other equity markets cables getting hit hard your dollars moving lower So dollar yen could be well positioned for a move to the upside Should the macroeconomic picture continue and we are seeing a prospect of Quantitative easing in the Eurozone so diverging policy aspects between the US and the Eurozone Makes Euro dollar kind of interesting, but we'll come back to that in a second moving over to West Texas crude You can just see the technical picture and where this is going right now 37 spot 50s and next potential support very ugly candle on Friday usually a strong psychological signal off a reversal He tried to go higher was in positive territory got pushed all the way back down Even below its opening price into negative territory and that's followed through with more pressure this morning So that's where we are with West Texas gold is probably not loving the dream either now on the wrong side of 1072 the next potential support is round about 1050 so we'll see where we get from there Moving on to your dollar you can see we're just slowly grinding lower one of the lowest levels We've seen since April this year with one spot zero five twenty four being the next potential support level there We'll come back to that when we look at the Mac with data events today The cable has had a really bad day on Friday Very strong bearish engulfing pattern on the Friday Folds through by another negative candle this morning. We're actually trading at the bottom of the range for GBP USD And the next potential support is at one spot 50 27 So my code data wise what do we have today? We've got PMI for Germany PMI for the Eurozone And existing home sales, you know inflation-related data for the eurozone is pretty much redundant at the point We're we're looking at monetary easing potentially to support the eurozone economy, especially with all the new anti-terror legislation they're ramping up new hiring new technology The European Union is going to be spending a lot of money on surveillance and kind of terrorism So I would expect it to be potentially a strong argument for further months for easing sooner rather than later Tuesday brings GDP for Germany IFO business expectations for Germany GDP for the US and then CCI for the US again Then Wednesday, you've got house prices for the UK durable goods orders and employment data for the US and crude oil Inventories, which will be interesting for crude oil It's getting quite close to thirty seven dollars now. It's quite impressive Right guys that gives you a bit of an idea of what to expect today in the backdrop of what's happening in Europe And the prospect of higher interest rates in the US keep around the chart forum Make insights part of your layer going forward and join me again tomorrow to find out what happened next


All right, thanks a lot for joining. Let's chat about surviving the original failures. So first speaker slide, let me introduce amazing end user of the project we're going to talk about. Nuno. And creator of KGB, Yuri. Thank you. So show of hands, whoever heard about KGB, the Kubernetes global balancer before. Amazing. Much more people than I expected. I appreciate it. So what is KGB? Kubernetes global balancer open source project sandbox one. It is designed to solve the global server load balcing problem and challenge in Cloud 94. So it is running on top of Kubernetes. It is designed to be as simple to use as possible. It just reconciles a single CRD of JSLB type. It doesn't require any management cluster, so that's a strong point of the solution. And no, in current, no single point of failure. So and design on top of well, battle tested DNS protocol and supports a pretty good set of global load balancing strategies. So a little bit of project history in context to why it was even created. So it was originated in Upsa. And Upsa is amazing South African Bank. I had a honor to work for. And they are running, I believe, is still running a huge Kubernetes fleet, more than 100 clusters. And they required some form of JSLB solutions that is cloud native. So that is aware of Kubernetes primitive, what is happening down to the pot health level. And back in Upsa, we needed geographically a solution that would steer the traffic to geographically disparate clusters. And this geography could mean different data centers or different regions in AWS Cloud or actually a mix of them. We tried to find some proprietary vendor solutions. There was nothing that was cloud native enough.  And that's just not fast enough for cloud native forward. So that's why we decided to build a solution from scratch. And it was something that we developed in open from day zero. So it wasn't something that was born internally. Then open sourced. We were starting it as a OSS project from the very first day. And I think it very positively affected the overall design of the project. And we never made any shortcuts. So in a nutshell, how it works, very simple thing. You have at least two clusters that are geographically dispersed. In this specific example on the diagram, you have one cluster in the European region or data center, another one, a secondary one in the United States. We are running KGB controller on both of the clusters. So we are putting KGB next to your application workload. So again, no control cluster, no separate management layer. Everything is distributed. And we integrate it with some environmental data. And this diagram, it is relatively, but it's just one of the examples. You can integrate with virtually any kind of DNS server depending on your environment. Assuming workload, for some reason, dies on the first primary cluster. And it cannot recover itself on standard Kubernetes manner. Then KGB is smart enough to steer the traffic to the secondary cluster. And basically, it makes your application globally highly available. So that's roughly the thing. It's worth to mention that like a core principles that were imprinted into the project from very, very first day. And thanks to Donovan from APSA for actually put it on paper even before we started to code it up. So it should be Kubernetes native, meaning it relies on the Kubernetes primitives as much as possible. So we are not reinventing the view. We are not creating some additional health checks. We are designing. We are checking the pod health status just out of the standard Kubernetes service primitive. No service endpoints available. It means that pods are dead. And application is more functioning, right? We have as simple as possible interfaces possible single CRD that is tightly coupled with a very standard ingress Kubernetes object. Again, no control cluster is very powerful. So we distribute the solution next to the workloads. And it makes the solution itself highly redundant. Based on DNS, so yeah, DNS runs internet. We obviously also inherited some DNS limitations. We will talk about later. But overall, it's very reliable stuff. Environment agnostic. So we are trying to be as much as independent from environment as possible. So for to integrate KGB into environment, you need a very simple stuff. It's a zone delegation, meaning that's just a couple of NS records on your environment DNS, like R2-2.3 from the previous diagram. And it is NS type record and a gluer record, and that's it. And it is usually done automatically by the KGB solution. So to the user interface, really just one single CRD. And as you can notice, it has embedded standard ingress in its spec and a strategy section that is dedicated to actual global load balancing strategy. So here, the mandatory ones are actually just a type. And in case of failover, we also need to assign a primary geotech. The detail times, they are just something to override the defaults. To say, it's so important to start with enabling global load balancing. So basically, you're just dropping in this custom resource. And assuming KGB is installing cluster, at least two clusters, it will create a really global load balancing strategy for you and stir the traffic. And you instantiate GSLB kinds on both of the clusters. So they will be able to discover each other. If you already have a form or some form of Helm charts, for example, your development teams already have a standard application package, including the ingress. And you maybe don't even want to teach them yet another new CRD, even single one. There is a possibility just to put the annotations, KGBIO, and the control will pick it up and create CRD automatically in the background. So your development teams or people who are dealing with Helm charts don't even need to learn that stuff. So that just declare the strategy and associated geotechs and it will just work. So very simplistic. And we're doing gateway support next, right? Yeah, gateway support is on the road map. So gateway also knows this kind of ingress V2. We are trying to follow the latest versions of cloud native APIs. So yeah, it's definitely on the road map right now. Load balancing strategies, so actually the core functionality. So we started initially with a simple round robin and a failover. And I think they're still the most popular strategies that the people are using. So round robin, you have two clusters and you put them into GSLB. You put GSLB CRs on both of them. And after that, the DNS responses are going to be provided in a random manner, right? So from both clusters, and non-predictable by design. Failover is most popular probably straightforward. It's the one that we showed in diagram. You have a primary cluster, secondary cluster. Assuming the workload is dead on a primary one, it will steer the traffic to a secondary one. When workload is healthy again, it will steer it back. Super straight forward. Then after project matured, we got some more advanced load balancing strategies, like a weighted round robin. And thanks, Mikhail, if you're watching it, for implementing this. It's actually a very advanced statistical algorithms behind, and we can apply the weights on two associated cluster geotechs. And this way, predictively, balance the traffic between multiple locations. And GeoAP strategy, thanks, Dinar, for implementing it. It is more classic in terms of finding the closest geographical cluster. So from global traffic management perspective. But it's tricky to implement because it requires a crafted GeoAP-compatible database. And it also has a strong environment requirement of your DNS solution, DNS resolver, to have a DNS0 extension. So it is to propagate the client subnet to actually make the DNS-based load balancer aware from where the client is coming from. So it is doable. It is working. But it has much more dependencies than other strategies. So supported integration. So as it was mentioned, KGB can work on any CNCF-conformant Kubernetes cluster, no restrictions, and pretty much any ingress controller. So we heavily tested it on a most popular ingress and a tri-afic, but there is no technical limitation to not to work on any ingress controller that is compatible with standard APIs. And for external DNS, meaning the integration into the providers, into the environments that you are running. So originally, it's the project that started back in UPSA, as I mentioned. And we used to have an Infoblock. So that's the first integration we implemented. Then we went to a public-level support. So it's a WS route 53. And then we had an amazing experience with the partners, with the guys from NS1. And then we developed the RFC 2136. So basically, an ability to work with any DNS, classic one like a bind or Windows DNS, so you can hook into the DNS process and create the zone delegation automatically. And you can integrate virtually in any environment. And what's coming next is Azure public DNS support. And it will be released really soon. We already have a code working, and you will see it today. For observability standpoint, we obviously were thinking about day two operations. And we had a pretty rich metrics around the reconciliation loop of the GCLB type and associated traces. So open telemetry, compatible Evans, are getting propagated through RTL collector. And thanks, all to you for implementing it. That is amazing contribution. So usually, at this point, when I deliver in KGB-related talks, I am showing the live demo. But today I have amazing user with me, so I can just relax. The stage is yours. Thank you very much. So for those of you who don't know Millennium BCP, we're the largest privately owned bank in Portugal. So from South Africa, second biggest user is Portugal. Banking as well. Our goal at Millennium is to use five geographical regions in Europe, covering Azure, GCP, and on-prem regions as well, and to basically do the same thing throughout all of those regions. And by saying the same thing, it's infrastructure as code and GitOps. What that means is that, for instance, our developers don't particularly care where things run. That's on the infrastructure teams to ensure what our developers ensure on their side is that their outputs gets converted to an OEM file, an open application model definition file. And then, IFRA picks up that file and does things. Some of those things includes by using GitOps to pull that file into a management cluster, having Kubevala and Crossplane spin up everything that needs to be spun up. And that includes geographical distribution. Yeah, maybe if I can interfere with the amazing combination of Crossplane and KGB. I couldn't not to mention it. I still need my hotel to be paid. Well said, well said. And even if KGB is simple to integrate, honestly, our users don't care about it. Their thing, our application, just runs. What we typically use in terms of run environments is this sort of pattern where there's a management cluster somewhere that runs, well, management planes, things that need to be, well, they have a state that needs to be backed up, for instance, Crossplane, Kubevala, and other planes. And the only thing that those management clusters do is spin off things to run clusters and the run clusters themselves. For us, a run cluster is a pair of communities clusters. That's how we insured those 99.95 SLOs. And they are not only multi-zone, they are multi-region. So for instance, this pair, one of them is in Azure North Europe. The other one is in Azure West Europe. And KGB does its thing. Let's see how. So the URL is live. You can hit it now if you want. End code is in this URL down here. Feel free to browse if and when you guys want to. So maybe while you're firing it up, worth to mention that it's a very similar case that we had in Opsa, and you have in a millennium BCP that applications are getting deployed on top of at least two clusters just by default. And it is totally transparent to the users, right? So is there just by default globally available? And this global availability is driven by KGB? Yeah. So quick overview of the code you can find in these repos. You'll find a repo called IAC. And here, we are just spinning up the resources for the demo. Network, Key Vault, Management Cluster. And very long, or not, Terraform, Pacifico to call that high availability, AKS module, and not going into too much detail what we have here are two instances of Terraform that basically spin up a cluster, get flux into it, get external DNS going, get the external secrets operator in there, and generate also the initial files for GitOps, which is the other repo next to this one. So here in Cluster Config, these folders that you see, Run North and Run West, were generated by Terraform. And in the end, what we have here in the Azure portal are two run clusters, one in Earth Europe, the other one in West Europe. And we'll be targeting those two clusters. Since all of this is automated and no one actually ran kubectl whatever into those clusters, we also needed to take care of deploying KGB there. So what we do is to imagine it. We have a folder in the Git repo for KGB and namespace stuff and a generalized Helm release definition for Flux to pick up that basically has some variables for Cluster GeoTag and the pair GeoTag for that cluster. Customize, put the right values there, and, behold, you have two clusters connected to each other. Some control plane ran the Terraform module and we're up and running. And by the way, this is how we do service continuity and disaster recovery. We just spin up two new clusters if any of those two fail. No worries in recovery, so to speak. This means that when we deploy an application using GitOps to this pair of clusters, and for this demo we're using Hello Kubernetes Docker image, besides doing just the standard Helm release for that app. And, well, the only thing here worth noticing is this app will just say welcome from Kubernetes and there's a variable there for Cluster Name. We are also deploying that CRD. Same thing that was in the previous slide, just saying primary GeoTag is North Europe, Type is failover. That's that. And getting here, we could do it like this, putting the CRD into Git. We could do a kismise patch if we had ingresses already declared in the repo. Now, it's up to you. Thing is, it's one file, either GSLD, CRD, or kismise patch. With this in place, I knew that was kind of going to break, so welcome to my curl test. Is this stuff accessible? No. Just in time. Security's read. What is it? All right. It's blocked by conference organizers. No, that's cool, isn't it? Access point. We have each Wi-Fi. No, it's on cross-planes. Double check. It shouldn't be Ryan cross-planes, I believe. It's on up-bound. OK. Try to reconnect. Sorry, we are making manual Wi-Fi failover. No, it's on HTTP. You can access HTTPS. Yeah, yeah, yeah. Thank you. Appreciate it. So plan B. OK. Plan B. Today? Last attempt. Last attempt, and we have a last resort solution on my local setup. I will be able to show you. Come on. Yeah, yeah. Go for it. No, I've got it. I've got it. OK. Nice. Now, you know what it was? Network cable. Oh. Up and running. So as I was saying, we have North Europe cluster replying currently. So scenario one, you're going to be doing plane maintenance, whatever, on this cluster. You want to shift everything to West Europe. So you could do something as simple as, here's my JSLB, customer resource. I'm going to say this is going to West Europe.  There you go. And just to save us a bit of time, just going to run flex reconcile on both clusters, just for us not to wait for flex to sync. And with this in place, we should see that the reply will move from North to West. Let me. And when? Now, West. You see? Do you want to do a quick explanation of what happened behind the scenes?  And thanks to the zone delegation that is configured environment as DNS, we're able to dynamically craft the DNS responses according to the strategy from our internal core DNS that is part of the KGB and returns the appropriate DNS response. And the reason, well, one of the reasons why this is fast is because if you look at the public DNS zone that's behind this, this is the Azure public DNS zone that we are plugged into, nothing changed. We're not updating records in a lot of places. That's a great point, right? We are not using external DNS to populate it centrally. We are serving the DNS request on our own and core DNS, and only zone delegation is configured. So this is an S record, GSL DNS, and a global record that would point to the set of KGB-enabled cluster nodes. So we're replying straight out of the Kubernetes clusters where the workload is. Exactly. This was planned maintenance. Cool. What about unplanned maintenance? So we are replying from West. Let me get into that cluster and just remove replicas. Which is exactly what it sounds like. Killed the app. Oh, now we're replying from North. No service endpoints in the West Europe cluster. Cool. So I'll just serve DNS to say, go there. North Europe, that's the one. Just like that. And honestly, we are shifting pretty fast now, now that we're out of network cables. But worst case scenario, with all DNS TTLs in the middle and all of that, at most, this takes less than a minute. Right, Yuri? Yeah, basically, to the point of that, we are based on DNS. So it's a great protocol, stable one. But we are also inheriting some limitations. So we are operating with a very short time to lift TTL value. For demo purposes, it's kind of 30 seconds to enable a fast switch in production. I noticed that people tend to raise it a bit, so it will be less aggressive. But anyway, just usually, it is one reconciliation loop within a Kubernetes controller overlapped with TTL. So that's what you can expect how fast the lower will happen. Do you want to talk a bit about internals? Yeah, we have five minutes. And maybe I'll try to quickly explain how that stuff actually works. So we have a KGB controller that encapsulates the core logic of the solution. It continuously watches for GSLB-CR, the ones that we showed before. And we have a very tightly catapult ingress at the standard one. And ingress is associated with very standard Kubernetes application service and your application ports. So as I mentioned before, it's just the service endpoints. We need no additional health check, no additional logic. If service endpoints array is empty, then the application is kind of failed mode. And we have an integral part of the solutions that are happening in the system KGB namespace. We are using DNS endpoint CRD and custom resource instantiations that we are reusing from external DNS project. So basically we are populating the entries dynamically according to the global service load balancing strategy. And we are also running a core DNS, a special built. It's not a Kubernetes system. Core DNS, it's a standalone deployment that is part of KGB as a solution, the integral part. And it has a special built, a special model that is capable to read data from a Kubernetes custom resource. So that's the way it reads dynamically from Kubernetes API effectively and serves the dynamically crafted responses according to the strategy. And for the integration parts that we discussed several times, NS record plus GLURA records that configures its own delegation on HDNS. So again, in this case, it's route to T3. But as we discussed before, it can be anything. We are using external DNS also as a part of the project. So it is able to automatically configure it for you in your environment. So that's what's happening in a scope of single cluster, right? What about the multi-cluster kind of coordination stuff? Where is the state? So the main part, as was already mentioned, is on delegation configuration. So first two rounds of reconciliation loop clusters are figuring out the own health of the local application. And in parallel, they're configuring the zone delegation. So to actually craft a proper DNS response, according to the desired GSLB strategy, we need some form of coordination. And in this case, we are using the same DNS. We are using some environment DNS for each other cluster discovery. And then we are cross-polling associated core DNS on a special FQDN for local targets. So both clusters are aware of each other's healthy endpoints. And in this diagram, it's actually round-robin in action. And they're merging two health API arrays together and returning DNS response in consistent ways. The most important part is that both core DNS that are responsible for the zone, effectively, they are always returning a consistent response no matter which cluster is hit by the DNS client. Yeah, a little bit of CNCF landscape stats. CNCF Sandbox project level, pretty good stats, reasonably active maintenance. We were also a part of CNCF Security Slam North America end of last year. And it very nicely affected the project. We now have a Salsa enabled. We have a Cosine, Sbom, all the stuff, the same fanciest release pipeline server. We have a diverse group of maintainers. So three, from original Apsa, one, a maintainer from Transform and one from Abount, me. So we got this kind of recommendation from CNCF technical oversight committee a couple of years ago to make a group of maintainers more diverse. Meaning like not from the single company, it happened this way. Well, effectively, it happened because a couple of Apsa folks left, including myself, but its implementation details. And roadmap, the very high level Azure integration you already seen in the demo. It works. It's going to be like an X release. We just need to polish a little bit of Helm chart integration in UX.  A gateway support to support the newest kind of next version of Ingress. And a little to my roadmap is fully available. And please, if you like the stuff, please join the project. Try it out. Join us in the CNCF Slack channel. We have a dedicated one. We're usually very responsive. Please star us. It will really help. The project is a project adoption. If you ever, ever will use KGB and you are confident to say it publicly, please send a pull request to AdoptersMD. And any issues and PRs are welcome. So thank you so much.


How do you practically and lovingly share the truth about LGBT issues without coming across as hateful and bigoted? That's what we're gonna be talking about in today's video. Hey what's up guys, it's Isaac David and this is The Daily Disciple where I hope you follow Jesus daily. If you're new to the channel, subscribe because I'm putting out new videos every single day that will help you find Jesus and follow him daily. A huge shout out to everyone at Patreon. It is only through your support that I can continue to do this and you help this ministry keep going and growing. So thank you so much. If you want to help support my ministry, link in bio to join Patreon. Now one of the most prevalent questions that I'm getting now at days and it's pretty interesting over the last couple months how many times this question has come up is how can I explain to my friends that LGBTQ plus is a sin and how do you even go about doing that in this world without being ostracized or hated or whatever else? And it's a challenging question. It's a tricky question and I'm going to kind of give you some examples of practical examples of what I have said and what I would say in that situation of a kind of a personal conversation where you're talking about your faith and LGBT issues. But first, I think it's important that we set our expectations properly. I don't think it should be an expectation of us that we will make it through this entire life or existence without ever being hated on or ever being called names or ever being rejected or ever being called the bigot or whatever else, right? I don't think that's a proper expectation just because in the Bible that hasn't been laid out as an expectation that we should have. By following Jesus, we will be persecuted in some way. And for some people that actually legitimately means and across the globe there is, man, there is some tremendous and terrible persecution that's going on. And for us in the West, in large part, the persecution that we have to experience is a lot less significant. And it might just be personal and social rejection or being called a bigot or hateful or homophobic or whatever else, transphobic, because we will experience those things even when we're doing our best to be loving and gracious and explain things. We can't determine how other people are going to respond. So I just want to lay that out for you. And so I don't want you to have all this weight on yourself that you need to get it exactly, right? So then nobody dislikes you. That shouldn't be the goal in this situation. Loving somebody is going to be speaking truth to them. And that is that that's what we need to focus on. Yes, tone is important. Yes, as we're how we're presenting it. Yes, we we're all going to focus on those things in this video, but we're focusing on not watering down the truth because we want to be liked by people. Okay, now after that long intro, I want to get into how I bring about this conversation or how I respond to the questions about LGBT issues in a one to one setting. You know, it's different when you're kind of online or in a debate scenario or in a bigger crowd or whatever.  This is how I would respond. And I actually experienced this a couple of times. One example is a friend I had from basketball, an old teammate, he asked me, he knew I was a Christian.  Why?  Why is that a thing? It doesn't seem to make sense. And for me, what that tells me is that often in this conversation, you need to unravel some things, right? You can't just begin from the beginning because there's some misconceptions there.  That's not, that's not a part of it at all. So if that's what you've heard, if you have seen examples of Christians hating certain people, those were not good examples of what Christians should do. So can I explain to you a little bit more about Christians views on LGBT issues? And from there, okay, he says, yeah, okay, sure. And I want to give him an overview of my worldview. I want to start him from the beginning and, you know, depending on how quick you are, or, you know, how much you have this kind of down to a couple words here and there phrases or that kind of thing, it could take you a long time to explain. But let me give you a little bit of insight into what I like to do. I like to start people out in the garden and say God created Adam and Eve in his image. They were designed to follow him and obey him. They sinned against him. And that kind of created a rift between us and God. And through that generations after that have a sin nature. And that means that we have this propensity towards sin. We have this tendency towards sin. And that means that not all of our desires are good. It means that some of our desires are actually bad. A lot of them are bad. And we've all sinned against God. That's what it says in Romans 3.23. And we are all in need of saving because we are guilty before God because of our sins against him. And if God is a just judge, he has to punish sin. So the good news, you know, the good news is that we were created in the image of God. That's, that's awesome, right? The bad news that we've sinned against him. But now the good news of the gospel is that Jesus came to this earth fully God and fully man to live the sinless life that we could not live to die on the cross. The death we deserve to die for our sins against God. And he rose again, rose again on the third day defeating sin and death. And what we are called to do is put our faith in Jesus and God will give us a new identity. He will make us into a new creation. Go on to explain that we all need saving, right? It's not just people that identify as LGBTQ or whatever else. Those aren't just kind of like singled out as the broken people, as the people that need saving.  You know, we can apply this directly to porn, right? A lot of people watch porn nowadays and it's not good. It's against God. It's against God's ways and we need to repent of that. And because we partake in that, we need saving. We have this desire to, you know, watch porn or sleep with our girlfriend or whatever else, but that doesn't make it right. That doesn't mean that we should be perfectly justified into following that lifestyle. No, God is calling us to set that aside, to cast that aside to put that sin to death and receive him and the transformation that he offers. You see, it's an identity issue. While many in the LGBTQ community will try to take that on as their identity, God is offering us a separate identity, disconnected from our sexuality to step into who he created us to be. And that doesn't mean that all your desires are going to change, that you will now have heterosexual desires or your kind of gender confusion will totally be fixed. But it does mean that through Christ, he's given us his power and his presence to overcome temptation in our daily life to follow him, to step into his best for us. Generally, in these conversations, I will need to reinforce the idea that it's not about singling out people in the LGBTQ community. I will say that quite a few times because it takes them a while to understand.   And my goal is to say this, look, it's not to water down the truth, but it's to give him proper context. It's not like the Bible just teaches against those things. The Bible preaches against a lot of things that even heterosexual people and especially heterosexual people that have that orientation are tempted by, right?  It's like, no, we are all broken and sinful people in need of God's grace. And just because we feel a certain way or we have certain desires doesn't make those things good. Those kind of couple points are so essential in trying to bring about understanding here. At the end of the day, they're not, a lot of people won't understand this, right?  That's kind of still messed up. But at least you're trying to be faithful and gracious in explaining why you believe what you believe, right? And so from there, I want to ask them. I would ask them, okay, you know, if you were in my position, if you kind of believed all this stuff, what would real love do? Would real love compromise what they believe and say, oh, that's totally cool. Keep doing what you're doing. Or would real love speak up?  The answer is no. And they will affirm that, you know, most likely everybody I've talked to will affirm that because logically it's like, well, you know, if you do believe that, then it is loving to speak up about that. And so now at least they can understand your heart. They can disagree with you. They can say, okay, look, yeah, but I don't agree with any of that. I don't think you're right in believing that. But at least they can say, okay, well, since you do believe that it makes sense that the reason that you're so passionate about this and that you want to share this, it's not out of hate, it's out of love. Some people will say, okay, well, look, I'm beginning to understand. And that can hopefully begin a conversation about these things. I'm not saying that this is the only information that you want to share with them. The only things you need to say, you know, I think this is a good starting point, at least in my experience and conversations that I've had about kind of explaining the Christian perspective of LGBTQ plus all that, right? And I may have left some things out, you can share with me in the comments and things that I should kind of add to this kind of initial conversation. But ultimately, you know, the heartbreaking thing is a lot of people will reject it regardless. They'll reject the gospel, they'll reject the Bible, they'll reject the authority of what God has laid before us, because their eyes have yet to be open to believe. We need to give the rest to God in prayer. I would love to hear some of your guys' stories or maybe your responses to some of these difficult, challenging situations. Hopefully there's some encouraging stories that will help encourage other people as well. Thank you so much for watching, guys. Once again, to everyone on Patreon. It is an amazing blessing in my life that you are here, that you are supporting. And it's my goal ultimately to be able to do this full time and then continue on with the ministry and keep it going and growing and helping people find Jesus and follow him daily. That's my mission. That's my goal. Thank you for enabling me to do that. And if you want to help support, link in bio to do that. Anyway, thank you so much for watching, guys. And I will see you next time. God bless.


The plan right now is let's let's fly to Iron Forge. You want to do it on the count of three? Okay, ready? On the count of three, we're going to go to Iron Forge. Sue, a beast should have wiped Crusade off the map. Sliders, mod check. Three, two, one, go. Careful. Oh, we did it. Oh, God. You're birds in my bird's eye. Yeah, it's a it's a human birdapid. I don't like it. Wait, why not just a bird's eye? OK, I really regret this. See, isn't this cool? There it is. That's Black Rock Mountain. So in vanilla, wow, this is like the epitome.  This is the like, this is the epitome of end game content for like the first year and a half of vanilla. Wow. And then eventually, like you add in a Q 40 and then you add in Max Ramos end game content. Like most of it occurs right here for the first year and a half. Thanks for the amazing fresh Dua stream, dude. I actually think duo duo leveling is like this is like the best way to level. It's so good. I have no mana. Give me a second. I give you a wisdom. Drinking some milk. Gaga. I've got your milk. Stop. Don't say that. Can you thorns me, though? I'm fixing to when I'm trying to get my my mana back up. Oh, I am powerful again. Two out of two, three out of three. Help me, help me, help me.  What the heck? Well, don't go in there because you're not in my line of sight. I'm fine to actually tell her not to swear. Oh, I'm sorry.  You're okay. Sort of. Okay. Holy shrimp. Oh my God, wait. I need to be next to you otherwise I can't hear you. See, see, see, see, see, see, see, see, see. Okay. Healing, healing, healing, healing, healing. Oh, not you. No, no, not me. It heal you, heal you. Don't heal me. Heal him. You have to, you have to target me. You have to target me. You did it. I did it, but I'm only targeted a frickin' thing because you're swimming in that. No, no, target, look at your party friends. Oh, oh, true, true, true. Okay, cool. I love like looking at like getting up high like this and looking at things. Yeah, this is so beautiful. Oh, let's go back. Oh, wait, come back. What? What? Blue. What? All that the light touches. It's your kingdom. Oh yeah, if you find cool things, you can, you can hit Alt Z. And screenshot? Yeah, well, you hit Alt Z to get rid of your UI. Oh, Alt Z. Yeah, and then you can print screen to screen, so screenshot if you think like you see something cool. Photo mode. Oh, it's Alt F2. And then it says G4, experience screenshot, photo mode. No, no, do, no, it's Alt Z and then print screen.  Let's, let's leave.  I want to take a picture. Did you take a photo? Okay.  Why did you jump? Your jump. Yeah, but I had an ability that made me not die. Really? She fucks. It's monkey to see a monkey do. I'm supposed to follow your command. Like there's not really- So they're anti-heroes too? Yeah, there's not really good and bad. Like the alliance isn't good or bad and the horse isn't good or bad.  No? How is, chat, how is that true? How is that not true? Excuse me. Like dude, it blows my mind.  It is, it, it, dude. I can't even think straight. What? What's wrong with you? The hordes, they're just savages.  They live in mud huts. Um, what in the John White are you talking about? Unbelievable. What's that Pocahontas guy's name? John White? John Wick. Smith, what in the John Smith are you talking about? It's like the, you're in the scene from Pocahontas where it's like, it's the, it's the scene when they like going to war. It's like savages, savages. They're barely even human. Do you know what I'm talking about? It's so, it's so good. It's one day- The movie is so good. One day our kids are going to watch that. Well, not you and I, but like one, whenever it's separate. The children of the planet. Okay. Yeah. Are going to watch that and they're going to be like, this is so unrealistic. This would never happen and that's really cool. Um, yeah, but also the drama of it is kind of cool. What's the like in the movie? You know what I mean? No, no, you don't think it's cool? Am I wrong? He's a joking. No, no, the drama of like the story of the movie where it's like you have like these two like combating nations. I'm never talking to you again. It's, is it not cool? Cause you have like two like combating like factions of people, but then like the like Pocahontas and John White. You're like one of those people who like has books about war and likes war. I think it's good. Wait, Lord of the Rings is cool. It's a good story. Game of Thrones. Cool. Pocahontas is one of the worst movies I've ever seen. Also, I can't read. Please don't tell me what I'm reading. No, not war is good. I'm talking about the movie is good. Like the story of the movie is good.  Use that instead of the stamina, I think. Well, thank you, kind sir. No problem. Penny for the baby. Would you like a copper ring? I wonder what you just said. No, I wonder. I have a copper ring for you. I have a, I have a hit ring. Should I use this hit ring? Oysters, clams and cockles. The Battle of Duskwood. My dearest Lord and Lady, I hope this letter finds you well. It is with a heavy heart that I inform you that the Battle of Duskwood is not going well. We are besieged on all sides by scourge and vile beasts. I fear we may not be able to make it through the night as the house creeps close to Darkshire. We require the might of our Lord and the righteous vengeance of the Crusade enclosed. You will find a flower for each of you. I fear they may be the last I ever pick. May the light have mercy on our souls. My goodness. Hold on, let me respond. Danny boy, I shall make haste and make our way into Duskwood to protect Darkshire from the evil scourge as soon as possible. Light give me strength. Amen. Amen. Wait, you have a, you have a mail too? I do. Miss Bonnie, enclosed in this package is a savage beast of the Cornish Rex variety. Please take him along your adventures and tame him well. Let us know his name once you have decided. I got an animal. What is this? A cat carrier. We have a cat. Teaches you how to summon this companion. Oh gosh, you learned about pets. Okay, so right click on it. I'm eating food. Stop. Stop eating food. You ate the cat. You ate the cat. Can I keep him? Achievement earned. And then click pet. Oh my God. Okay, so you can put that on your, you can put that on your hot bar too if you want. What does it do when I'm just fighting? Does it get killed? No, it doesn't do anything. It's just, it's a non-combat pet. It just, it just sits there. That's cool. So cute. Sir S-Fan, after our conquest against the sewer beast, I took it upon myself to investigate. I entered a sewer grate and found a slew of crocodiles within the very sewers of Stormwind. After a tense battle, I followed a lead to the wetlands. The place I believed they were brought from. There, I met, I met you once again on the road. While I am pledged to another guild, I cannot help but think this is fate. Should our paths cross thrice, I hope you will accept me. As a comrade, it regards Sir Rowan Adalard. Indubitably Sir Adalard. Great work in the fields. Sling these vile crocodilists. Your work in protecting Azeroth will not go unnoticed. Burnsy, Geldenbike. Grand Marshal S-Fan, I've taken up arms after my village and wife and child were murdered by the, by the Lich King and the Scourge. I have nothing left. I don't know why I laughed at that. Dude, it was the ants. The ants made me laugh. It was like, my village and wife and child. I don't know why, like, instead of, I don't know why I made me laugh. We're murdered by the Lich King and the Scourge. I have nothing left. Like, give my life now to be by your side and fight for them. May I join your guild? Azeroth calls my name and I'm just two defender. Burnsy in chat. Yes, Burnsy. A man who has nothing to live for. Is a man who has everything to fight for. The crusade will gladly accept your devotion to the light. Okay, very good. Okay, it's done. Okay, I am ready. Yeah, what we should do is we should actually go to Duskwood next, because the people need us in Duskwood. The Scourge are taking over.


Welcome, welcome. Have a seat, everyone. Welcome to the first lightning talk in a series of four 15 minutes long lightning talks. Unfortunately, we will not have any time left for Q&A, but you are welcome to find each speaker after their presentations. So, for our first round, may I please introduce to you Javi Gembe, who is our WordPress veteran, WordCamp speaker and 21st WordCamp attendee this year. Not this year? Not this year? Nah, old years, yeah. It could be too much. And he will walk us through how to prevent data leaks in WordPress. So, please give a warm welcome to Javi. Thank you very much for being here and to this talk or perhaps you just don't understand German as me, so you are here because there is the only talk in English. So, well, let's talk about WP leaks. You did a very good introduction about me. As you said, I'm a WordPress veteran. This is a term, a trademark from Rengkust, so it's not my word. And I have to thank him. I'm like Rengkust, but we are twins as you can know. The complex version of Rengkust. I have a, since a month ago or two, I'm running a free project for the WordPress community that is called WP TalkLink. And it's for language change among us, the people from the WordPress community. But my income comes from Universal Summit, that is my own agency. And I have this agency since 2010. And after more than 300 projects, I want to talk to you about some of my experience about this. And, well, I want to talk to you about data leaks. And I will introduce you some cases about this, just to warn you and perhaps prevent it. So, well, the first thing I have to do is to define what is a data leak into WordPress. Well, in WordPress, we have two types of data. The data that visitors see into the web pages, so we could call this the front end. And also, we have the data that we have for the internal use, settings, and also all the things that has sense to the project itself for WordPress. And just in this part, the private, the password or the backend of the website is the data that we have to prevent to leak to outside. For instance, we have the emails of the, in BookCommerce, we have the emails of the users, all the purchases, IPs, and a lot of settings, also security data. So, we have to prevent that leak, it's codes outside. Also, I think it's important the settings and all that type of things. So, well, now the examples are coming. So, well, this is the first case I want to use. This is the only one that happens to us. So, this was a nightmare. And, well, now imagine that you have a client. In this case, it was NGO, a non-governmental organization. That's us for creating a private zone just for sharing the PDFs and how they spend the money and just for the information for the people who pay the bills. So, we decide to put a commercial plugin for that. So, everyone with access has its own username and password and so on. And we gave the keys, we gave the project to the client and I forgot to go to their clients to produce. And after a while, I received an strange email from Google Search Console and I checked it and I found that. What's that? It's Google results with emails. This is an example, it's not a screenshot. I didn't do any screenshot in that moment. But imagine that you have the list, the emails of that people listed on Google. It's hard to take the leak. Luckily, there were no personal emails leaked in this case, but corporate ones, but it could happen. And this is not just a case. So, on Google, you can find more than seven results with this problem, exactly this problem. So, this was my phrase when I found that. And after research, I saw that there were three things that happened at the same time and did that leak happen. So, what happened? So, the client was using the email as the user name that is not supposed to happen. And WordPress has a site map.xm5 since WordPress 0.5 by default. So, every no one has a site map.xm5. So, it's not a site map. So, it's not a site map. So, it's not a site map. It's 0.5 by default. So, no matter if you have installed a SEO plugin or not, you have this in your all your installations. And this is an example. You type this and perhaps it redirects you to the real one, but mostly WordPress websites have this. So, what happened is, more or less, an example like this. You have the user listed. So, for instance, if you can enter into my bank account, which bank I'm using. If you want to enter into a WordPress website, you mostly of the WordPress are using the same blogging page and URL, the Slack part, and you already have the user due to this, and you only have to find the password, so it's very dangerous. And also with a lot of taxonomies or posts or things that we are using just for setting up and to serve the content to the client, but perhaps they are not important, are auxiliary, are not the things. So this is what it happened with this project. The solution what was on MySQL for you is always check your same mat.xml file for all the projects and see if you have to serve these things or not. In this case, the project didn't need an SEO plugin because it was for private people, so we don't need that, but it could be a good suggestion to use an SEO plugin because there are some setups. I don't know if it's anyone from Jaws or any other SEO here. No. Well, they have an option and you can quit and remove the same apps or whatever, and it's very useful. And if not, or just in case, as a fallback, you can use a custom code, a simple PHP snippets, and I have in MySQL account, I have some examples of how you could exclude taxonomies, CPTs, and the user page that always should be removed from the same app. Okay. Well, now imagine, well, this case is another. Now imagine that your client asks you to create a simple format. They have an input for files. So for instance, imagine that you are in your client's medical center and the doctor is asking for a personal test or, and it says a data that you have to protect a lot. So you go, you install a form plugin with the input field, and that's all. What happened, and this has millions of results on Google that a lot of paths into the websites are unprotected. So it's very helpful because you can reach that type of documents. And this is the main path of the uploads, but every form plugin use its own. So this is quite dangerous. So always check if you are listing the directories, the files into the directories. This is something that happens. You can create the index.x html files or PHP as WordPress does, and just to prevent the leak, you can also add to ht access that directive. But for instance, it happens in some projects that the ht access is deleted by, I don't know. So the safest way is always put an index file empty. And also you, there are some people that believe that if you upload a document to the WordPress media, the gallery, you, this document is private because for instance, you, you have put a password into the page or whatever, but be careful. I'll, I'll take you later in another slide, more about that, but all the things that you upload to the media can be reached by anyone. Well, more or less related to that, imagine that you have, you are a content creator and you do the, the common funnel send way and you create the steps for steps or just you give a free PDF just for launching a, for, so the, sorry, the, the visitors give you an email and then they do marketing with that. And you could feel that the thank you pages or the, the step three in the panel are not reachable, but anyone, because it's not listed in the menus or in the navigation of the page, but it can be reached. So, or well, also another good example is while you are remaking one website with a typical under construction plugin, you may think that you are protected and no one can see what's inside, but it can be seen. And for instance, I create this page as an example and you can reach that with the rest API that is already done and activated by default in all the WordPress websites. So, well, the, the solution or the suggestions is the same. Check always the rest API endpoints. I will show you who are always with the SEO plugin also set up well the things. And this is very 10 years or not, but the solution should be this is what the rest API, but perhaps some plugins on the work for specific cells itself could be stop working. So it's quite dangerous. Well, I will talk to you about similar type of leaks. More or less, you are seeing that I'm talking about two, two paths and more, but they care about Google Docs. For instance, when you work in agency and you work with collaborators, you can, you have to share the access for the WordPress websites with them. And I remember one case that I was just playing with Google Docs. And I found one, the first results like I'm from Spain is from Spanish results. And it was there were a trailer leak of what not from tele from an agency that was using trailer for sharing the things. And I recognize the name of one of that agency. So the owner was a puppy in one course. So I had to, to contact him and say, Hey, you are leaking or your WordPress access of your clients. And that's insane. Also be careful, as I said, with the rest API and the permission escalation, I won't talk to you now. And this is the paths. Every WordPress site has this. You only have to type the domain and slash WP. That's Jason. And you have a lot of information, perhaps it's not a personal information, but it's information that you are leaking into your WordPress website. You are selling there very easily. Mostly of the plugins you are using and a lot of things. This is on the pages you have the media you have upload. So you have to be careful with that. Also you have the users, but there are not all the users, but the ones that have published content into the blog. The solution could be against Google Docs. If you share that kind of data that like access, Cypher it first and have the same algorithm for the encrypt that. Disable or not. Be careful with this because there are no good solutions yet. But some friends are working in a very good solution to cover all these parts. And keep up to date. That will be. So if you thought you have following all the guidelines before hitting me of WordPress, I'm sorry, perhaps I give you bad news. And well, if you understand the first sentence, you are to all ask me. Check Cypher.xml, all the things. The Google Docs also check with site, colon, and the domain name. If you are leaking any data or you have some things that has not to be into the WordPress install. And tomorrow there will be a very interesting talk here. I think it's a... Well, tomorrow let's check the schedule and see that there will be one hour with, I think, these suggestions and more. So, well, and the most important part, have fun. So, thank you very much. Gracias and see you. Thank you, Javi. This was indeed an eye-opener. And before you move on to the next speaker, we also have a gift for you. Thank you. Thank you very much.


Once upon a time there was a creature named Purple Herple. Her favorite thing in the world was being purple. Her least favorite thing in the world was being alone, and right now she was all by herself. So she decided to go on a journey to find a place to belong.  They seemed nice, but Purple Herple didn't quite fit in with this group. They wanted her to be more like them, which meant being less purple. And being purple is Purple Herple's favorite thing in the world. So she kept on going on her journey to find a place to belong.


Hello, I'm Cheyenne Abbott, and I'm Shelby Abbott, and welcome to Learn the Sword on TGN. This is a weekly show with a new episode every Friday, so just click below to view the whole program. Yeah! During our last lesson in the Reviews section, I switched out the cut and used a different one. Instead of executing a Shinchoku Giri, the first cut you learned in your series, I switched it out for a different one, which is widely used in the Hapugiri series. This is called an Hidari Kesa Giri. Hidari Kesa Giri, a left-down or diagonal cut from your top right to your bottom left, or an angle from one o'clock to seven o'clock. I will demonstrate this cut that basically follows the monk's robe. For centuries, the Japanese have been using that as a guideline. Just like my top here that has a high angle, you follow this collar and it gives you good center mass for cutting. Before we start cutting angles, I want you to understand, it isn't about your hands cutting the angles, it's about the tip of the sword and the monouchi in this area cutting the angles. That way, you have a much better executed cut and follow-through. Hidari Kesa Giri, cutting from about one o'clock to seven o'clock following the monk's robe, I want you to cut from the top right down to the bottom left. After you've executed the cut and you want to set up for the next one, just bring the sword around, keeping it close to your shoulder's heads and ear up this way, lift it above your head, make sure your left hand is above your hairline, and you lift the sword about one fist distance above your head and then execute another Hidari Kesa Giri. Let's add this cut to your first kata, but without involving all the protocol. Eep! Yah! In kata one and most every other kata, that shows you how to defend yourself. Getting in and out of the target area is always different due to your opponent continuously moving. Even if you don't have a sword and you're brandishing a broomstick or a baseball bat, your opponent will get out of harm's way and try not to get hit. Let's add some practicality to this scenario. I will now demonstrate the execution of both cuts using steps and not using steps to get to the target area. Eep! Yah! Eep! Yah! Now you'll be able to chase down your opponent and beat the tar out of him. With Boken in hand, let's go from a Chudan stance to a Jodan stance. From here, I want us to think about a couple of few focal points. Boken in particular is the focal point relation to the sword to the top of your head.  From here, lift it up about one fist's length. This way, you'll be able to cast the sword and execute cuts a lot easier and smoother. Here are some focal points I want you to work with. A rectangle will give you a deeper cut and a square will give you a wider obtuse angle for your cuts about 45 degrees compared to 25 degrees with a rectangle. I want you to come in with a rectangle and cut from the top right all the way down to the bottom left and vice versa, from the top left all the way down to the bottom right. Of course, when you have a wider angle and I cut from the top right all the way down to the bottom left and vice versa, the angle is quite wider. Of course, when you practice your downward and horizontal cuts too, follow the same patterns because if you can follow these patterns, your cuts will be more consistent. Let's practice the first kata with all the formalities, protocol, and all the executed techniques and cuts that we've learned so far. Let's discuss Amigigyaku Joho-Giri. Amigigyaku Joho-Giri, an upward diagonal cut from your lower left to your upper right or an angle from 7 o'clock to 1 o'clock. You can practice Amigigyaku Joho-Giri with two hands, but at this time in your training, you will only be using one, for example, an horizontal cut and your Amigigyaku Joho-Giri. As you can see it comes up at an angle this way instead of going horizontal or of course coming down. Without any formalities, let's practice the draw on a Gyaku Joho-Giri and bring it in again. Sword up, triangle, right foot forward, turn the sword, left hand on your hip, and cut upward from 7 o'clock to 1 o'clock. Now we've learned four cuts out of the basic eight. Let's review and see what we've done. First, we have the vertical cut, your horizontal cut, your downward diagonal cut, and your reverse upward diagonal cut. Let's practice and review these. Practice these four cuts until your muscle memory sets in. By then you will have the basic understanding that can take you on to the next lesson. For those of you who want to practice a bit more, here is some extra credit for you to learn the basic footprint on Kata 2. In this fourth lesson, we have gone over a downward diagonal cut, an upward diagonal cut, completed the first Kata, and have given you a little insight to the second Kata. I am Shihan Abbott, and I look forward to seeing you next Friday on TGN. Until our next lesson, be well.


Alright lady, what is this? Okay, I'm still working on my ATtiny 817 port of the seesaw code, which was SAMDIO9, but I can't get SAMDIO9s. So importing the iSquared C to GPIO or analog code that we written a couple years ago for the SAMDIO9 to this chip, I did digital audio in the last video, and this one I'm working for analog input. So if you see on the computer, I've got it reading the analog voltage, and this is all going through iSquared C. So over here you can actually see the debug from the ATtiny 817. It's getting the requests, sending the data, and then this Arduino compatible is actually reading the analog through the iSquared C and outputting it to the serial monitor. But so far so good. So digital and analog working so far.


My name is Francis Dungu and I am from the Camry Welcome Trust program in Kenya. The several immunology group includes scientists who are studying the sales of the human immune system and the product they make in order to understand how people become immune to disease either following natural infection or immunization. So this group has got people who are working with HIV and other viruses. It's got people working with malaria and there are also people working with malnutrition. I'm personally interested in malaria and malaria vaccines and so my work includes understudying naturally acquired immunity and picking whatever reasons we can learn from it to develop a malaria vaccine. So our platform for malaria immunology in Kirifi is based on two platforms. One platform is conducting long-term longitudinal studies in children and the other platform is using experimental medicine where we infect people being exposed to malaria in order to identify individuals who are immune to malaria. We can identify people who are immune to malaria and then we compare the immune responses to malaria with people who are not yet immune. Then we can identify immune responses that can be used to identify antigens that we can include in vaccines. Another way that my work would help in developing malaria vaccines is helping in understanding why it is so difficult to immunize people who live in endemic areas. So one of the things that we've learned in the last few years is that if you develop a vaccine in Oxford or in America and those vaccines actually take quite well in animal models and in malaria naive individuals but when you move them to malaria endemic areas they are not very immunogenic and they are not as protective so it appears like prior exposure to malaria modifies the immune system making it more difficult to immunize people and my work is also trying to understand what that modification is and how it can be counteracted in delivering an effective vaccine. So one of the most exciting research projects that we've conducted in Kirifi recently is comparing the immune response to malaria in individuals who are currently infected with malaria so people who are living with constant infections these are people who are being persistently infected or they have chronic infections and we also have another group of individuals who were exposed to malaria a long time ago but they are not exposed to malaria because malaria has been controlled in the area where they live so in other words it's like comparing immune responses to malaria in individuals who are currently living with malaria and individuals who were historically infected a long time ago and what we've found is that current exposure interferes or impairs and the ability of the cells in these individuals to respond to malaria antigen in the way we would expect So in the last 5 to 10 years one of the great things that have happened of course is that so funders like the Welcome Trust have decided to support experimental human medicine that is for infections like malaria where it's easy to treat the disease and you can infect people who are semi immune to malaria in order to understand immunity to malaria and that is one of the things that we are doing in Kenya at the moment and that is very exciting because the immuno epidemiological studies happening in the field are confounded by many factors that makes it hard to make conclusive decisions on which immune responses or antigens that we can use for vaccines so other things that have lines of investigation that have come up in the last 5 to 10 years is that we have seen improvement in high throughput technology for screening antigens that can be included in vaccines and I think that is also quite good and also in the world of immunology so people have learned how to make human monoclonal antibodies and these human monoclonal antibodies especially in the case of HIV also immunity and cancer are actually being considered as immuno therapeutics and in some cases also infectious diseases we can use these monoclonal antibodies in the discovery for antigens that could be used in vaccines and I think that is also quite exciting and in some cases the same monoclonal antibodies can be used to broke any undesirable immune responses that may result in the immune response causing disease or interfering with immunization I think it is really important for us to understand naturally acquired immunity to malaria because as you know malaria continues to be a major public health issue in the countries in Africa and in Southeast Asia and what we have seen in the last 3 years even though we have effective drugs for treating malaria and insecticides for controlling malaria through killing mosquitoes is that the malaria control has stored and so we need new tools to be included together with the current tools to drive malaria transmission down further and my research will inform the design and the development of new vaccines and other therapeutics