Welcome to the show everyone. I'm Cole and I got three lovely guests with me today. I have a right below me Fiona Then Chris So and then carry way down there at the bottom. Hi. Hello. We're like we're like the Brady Bunch Well, as you all can see here. We have a tier list pulled up. I need to be excited with this tier list I thought it would be too easy if we just did it based on which characters we like. Yeah, sure Because some of them they don't get enough screen time to really for you make it like a fair fair fight So what I thought would be interesting is going off to their cork Which cork would you like to have most in your day-to-day life? We have the Golden Honey is the pinnacle of all existence. Then we have S. A. B. C. D We wouldn't had in a had to edit the tier list that was here to Add the correct category to fit Manetta anime Tommy pickles over here. I'm not I'm not a man in a stand I'm just saying with this context. I don't know that he deserves this treatment. Let's have a police officer Okay, the the perp is getting away. You got tape man Get out of here. So now you stuck some of your hair to him. Yeah Good job. Yeah, I thought oh gross. What is this? Tackle him. I thought you were gonna do something more practical like oh, I need to set up my VR camera So I'm gonna put a sticky ball in the corner great. Yeah, that makes a ball camera, but also tape Okay, that's fair. It doesn't have to be gross about it.  No, okay, gross No Well, hear me out then Momo is gonna be number one. Yeah Yeah, you just get to eat and make things and make things. Yeah Right now Nobody likes the things I make so I think it's safe to say Momo The only thing with this I'm not thinking I don't think Bakugo has a good quirk for day-to-day life No, that's what I was thinking. I was like Bakugo the ones who have like super powerful quirks.  Yeah, which You know, I can't talk about on like live. I can't talk about how Right, but I guess if you like camping you could make fires, but then you have Todoroki, no Yeah, yeah, you're totally then you can also put the fire out. Can we can we go ahead? Just let's put Todoroki where he belongs now at the very top. That's fair. That's fair I could also to be fair. I could also see bumping him down to a Eventually if we if we find out it as you populated. Oh man, I forgot to put my coke in the fridge It's warm. What am I gonna do? Frost it was also Like a billion degrees in austin yesterday. So yeah Yep, I could see like having self-cooled cool down your own body. Okay. Now. All right. Does Bakugo have Some practical cooking applications that we're not thinking of let's say he has a corn on the cob He could have popcorn. I don't know. I think he did. He could blow it up or instead of yeah instead of blowing it up Just put in the microwave for 37 Well, all right, if all of this is just tape and microwaves, then what are we even doing here? Every time you go to work out you're sweating. You're sure you're sweating glycerin and somebody You have your apartment's gone. Yeah, because you decided to light up a doobie. What do you think and carry? I think I would love to have kota's kota's is great. You have to talk to all your critters Yeah, you know, it's curious We haven't really seen like the extent of his of his power Like if he can summon all of the creatures to come together and form giant creature and Could be some other crazy stuff Probably I don't know if you're saying with a critter, but what I'm not saying anything. I hope he can find love me too Good yeah pretty pretty average Frog girl, let's think about this to you Yeah, she's like I mean being a frog is cool, but what would we do?   I don't know. We maybe say see Yeah, I don't think it's I don't think it's completely useless. What do you mean? What way? Yeah, hey, go ahead day to day.   It's really far away Okay, you know the second you said long tongue. I was like maybe be Yeah, I'm not I'm not trying to get blue here. I'm just like maybe You're going very blue. I guess there's a lot of applications. Yeah, like uh, I can look more ice cream cones Oh, you could like line them up. Sure. Yeah Triple scoop no problem. All the flavors. I'm well. Do you have some better grip? You have like a like spider-man grip Jesus christ. What about having a tail? Tail is not useful Why are you putting it to the c s? I'm just moving it around I feel like it'll just be a bother to be honest.  I hate that Wait, but hold on but hold on. Okay. Can he use it as a seat? Okay, what about having engines in your legs? I that's a pretty big positive for me. I think it's a positive Definitely not like in the quarantine. I don't really think you need that. Also. Are you fast enough to not need a car? Oh, yeah, well, but he has to like engage his legs to do that. He has to engage for a while too Yeah, because he's not like constant. He doesn't he doesn't have that constant right all right I could go a look cats are sexy. He's got some nice ones So what did chat just said does eat a good to the doctor or the mechanic? Okay, so for toko yomi. Are you a bird still?  His quirk is having a weird shadow dark. Dude. Yes dark. All right. Let's just talk about dark shadow Let's just talk about dark. Yeah, because that's wild someone to talk to during the quarantine That's true. What if what if my depression has already given me a dark shadow? Okay. Well, this got real sad. Yeah It's your dark shadow on your lap right there. Yeah, this is my dark shadow and I I need him. So he's a golden honey. Uh-oh Uh-oh It's good for fighting. It is good for fighting. Then you're not fighting day to day. So are you chris? Are you I live a crazy life y'all living a bad part of a bad part of awesome. We live in the same part We can all use a built-in in front right now. I love that. Um, I was gonna put thank you. Um, because it's electricity, right? Yeah, that's an a Or else. I mean, I don't know but what is his like threshold for how much he can use before he goes one punch man face It's it's I think it's gotta be pretty high like it's high I feel like he could charge his phone And not yeah bad eyelash the amount of times I was in bed just you know playing my switch and Oh, and it just it died charges all the way in the living room. Look at that. That's close to an s I don't know. Yes, but now hold on now. I have these around the house for a reason. So yeah counter to that How much money did you spend on those? I don't know 20 bucks How many but how many do you have? Okay, I wonder what his situation is for getting on the plane because he's like it's got like electricity Right, they don't let you even bring battery packs onto the plane. They don't have to know Yeah, yeah, they don't really have to know that's illegal cold if you do if you do shock him and make him forget He's not he's not lithium ion. He's fine. Yeah, we sure Okay, I'm not but I'm seeing from the s situation. It's like things that are needed literally daily And then just momo literally anything momo can literally make anything. So you can make a battery. You can make a You can make a battery. Yeah You can make an ice pack Yeah, you know what else? You know what else you can make?  Do you want to have a hobby tier list? Yeah Because Veneta would be in the same spot I feel like uh sugar rush is actually Worst because now you're hyper and you can't do anything. I do that already. We're thinking like be your sea Yeah, if we're comparing super strength, there's people with super strength that don't have to do that I think she would be good and I think that's a good segue to kiyoshima Well, it's hard in but he is a hard boy. Yeah, he can make himself like In like where he can't get hurt. So I don't know every time I move like anything I get bruises and cuts and spritz all over me Yeah, how quickly can he turn it on like if he's like, I guess like fumbling around to go to the bathroom at night You can turn it on so you don't bang your shin on something. Yeah, like I think it's instantaneous for him. Okay. Yeah Oh, that's that's pretty high up there. And he can also like hearted specific parts of his body, too Yeah, he's not okay. I gotta go. I gotta go. So can Veneta So Mind you like a or b I'm leaning a I'm leaning a that seems pretty There are a lot of times where I am hurt and I'd like to not be hurt The closest I'll get to another mineta tier. What are you gonna blast and also you'll get a stomach ache? I yeah, I have enough stomach aches.  I think D is so you're talking a lot about earlier tape. We always need tape We always be tape. Yeah, like I have like 18 rolls of tape for some ungodly reason I think it's because I just forget that I have so much tape that I keep buying it in terms of like just what I would like to have He is basically spider-man. I mean I put him pretty high up there. Yeah, it's practical. It's fun He can get around with it. All right. I love Ashita She's my favorite.   Amazon boxes, but you could stop global warming I was gonna say we have to assume that there's some ramifications to melting your trash with acid Look at Manetta and assume nothing. So in a chat says she is super disinfectant. If there's medicinal applications Okay, that goes higher. Yeah invisibility in this situation like in all practicality I don't know about s because she can't turn it off and I assuming I don't know I don't know. Yeah, I could finally disappear. Can Izawa? Remove her quirk. Whoa.  And I'd love to know your thoughts on it because It didn't make sense to me because also if she eats do you see the food like Yeah, I don't think you'd see the dick. Listen. This isn't like Wonder Woman's invisible jet where you could just see the Contents within I don't think that that's what this is pretty much anything that gets inside of her. There's a threshold Yeah, yeah, okay. I'm sure there's some great rule 34. We could look up. They would have demonstrations Well, you wouldn't see anything. I'm pretty sure it wouldn't exist. Well now my question is can she see herself? Oh Oh, that's a that's like depressing actually it is depressing. This is a weird one Octopus octopus arms. You can grow body parts Uh, I would find it useful for my work. You can grow like extra ears. I forget. Can't he detach them as well? Or do they have to stay attached? I do remember I think it was in an episode where an appendage was removed and it was bloody and it looked really gross Which that's what happens when I detach anything from myself. Yeah I also love the idea of having a barbershop quartet with yourself. I love your priorities. Yeah Four mouths. Hey, we're all singing. All right Zero, you know, I have to make her like super high tier, right? She can amplify sounds frequencies and so forth and she can also hear like vibrations by plugging into like walls and And so forth.  Yeah I was just thinking that. So you could just plug directly into the What if we put her up to B? I can live with B. I was I would see B Okay, okay. She's like if we save these two for the end I think it was because really useful. I just have a lot of clutter And so having things not fall off and hit my toes all the time But you'd have to predict that things would fall off. That's true. Okay. Okay Here's here's something that put it pretty high up there Moving exactly.   I like that Do you it doesn't go to the gym and you rack up a bunch of weight and everybody's like, oh, you're so strong You're like, yeah, I am Is it like I thought it was just moving up I like if she wants to push it forward she has to literally yeah push it. Yeah Removing the effects of gravity on it. Yeah, there's there's a lot of business applications construction sites moving Yeah, like I would almost say s I put our past it And if you're upset with somebody you can just do it to them and make them suffer for a while They're like, okay, you're gonna spend some time up there and think about what you did Well, I mean it's useful still useful. Yeah regardless of business and that's money. Yeah, and uh, yeah Oh, yeah, that's pretty high up there. Yeah, the boy the boy himself It effectively just is super strength But I think the applications are are similar to Aravities or it's like he can go into any business he wants to be the strong mover How well can our body take it though?  It is I'm just making sure that we're including that in the deciding is that you will when you get it You will be breaking your bones until you learn how to use it And also you have to be able to control like the percentage or the amount of force you're putting on that Item that you're like moving now I would say the advantage that we have that deku does not is that we're not constantly dealing in life and death situations We would probably have time to build it up and actually train it the right way instead where he's like Every time like okay. I I have to learn trial by buyer go I don't even do they explore this in the manga. Does does he just has he just tried drinking milk? Get them good bones, man. Like has he milk will absolutely solve it. Yeah Oh, I can't wait to see it got milk at with deku on front. It's s. It's gotta be s Okay, it's it is it is practical I get what you're saying though to counter something you had mentioned earlier like take I really sra. Yeah. Yeah, and I also love them. So it has to be s Yeah, I can see either s or a I think it's depending on how you want to use it Can we before we get to golden honey, could you make an e-tier real quick? Okay, cool. I just want to put Mineta a little lower That's all That's good, okay Because yeah, you know, he's sick. He's touching his face all the time. He touches his face so much There's not a lot to him. He's mostly face. I have my answer for golden honey. Are we all going to say that once three two one? Go Yeah, okay Easy that was easy. That was real easy. I was kind of easiest golden honey ever I was gonna say the character that we started with saying was the golden honey I knew I was like it has to be her in this time like Lipids all you're doing is you're just eating and you're just making stuff. How amazing is that? Oh, I got her life is animal crossing We've been talking about taking all of the golden honeys we've done and doing the best golden honey off That would be hard. This is it for the tier list. Is it for top tier? Can I say I think this might have been the most civil tier list. Yeah, we've been a part of that was a good I like that tier list. That was fun. Yeah, I like that tier list Hey there. Thanks for checking out the video While you're here go ahead and like comment and subscribe Let us know what other kind of tier lists you would want to see what other shows games anything anime related at all Uh, if you want to see more great content like that head on over to roosterteeth.com You can be the first member. We have a ton more to see


Away from Ben Ray, straight now to Zamfara State, where government has threatened to shut down tax deferred in organizations. The organizations according to the government are all in taxes between the year 2018 and this year. Addressing news spread in Gozo, the acting chairman of the State Revenue Service, Shehu Gumi, says the agency has followed due process in seven non-compliance notices to the affected ones. The government according to Gumi will seek court order after the termination of the notices to shut down any of the defaulting organization to recover its revenue. Our next line of actions, which is in line with the prohibition of the law, is to go and seek for a court order and destrain their organizations. And when we destrain, if they fail to abide by the prohibition of the law, paying the tax, we have the right even to sell off their property and recover the money due to the state government. It's also content in the law. The law has given all that power. Now, after this, if they fail to comply, we will go and seek court order and destrain that will close their business. Then if they fail to, within the plethora of time, we will sell off the properties and recover our money. That is the tax due to the government.


Going on everyone Sam here with late and sports guards. We are ripping 20 our 10 box Tuesdays 10 box bowman and more baseball mixer number 139 random teams Here's a look again at your random results as always you can find these on the website under the results tab as well as the Lincoln Chat, so good luck here everybody see what we've got man Bring up my cheat sheet. We're gonna start with pristine Get our really base heavy product out of the way Yeah, retail starting to show up a little bit more around here. You would know more than anybody I feel like yeah, like I hit prison basketball once and I just bought a I bought a blaster Just a hold But yeah, I want to pick up some World Cup prisms if I see some next time I go grocery shopping I've just been at my groceries delivered Like I mean it's like either delivered or sometimes I just don't pick them up Many machado and Gary Carter. Yeah, my chicken nuggets and ramen and I'm ordering picking up really live in the life, man Yeah Yeah, David Ortiz Josh Hader ice one there for the Brewer's We go Cabrera and we got another brew crew. That's gonna be Jake Cousins on the in case thought of not numbered That's Bruce first sweeping hits so far every single hit in this break has been a bruise Matt Olson orange Freddy Peralta going to the brew crew two of 25 he's got Milwaukee Walk he's about pretty happy right now. That's Andrew H. Andrew. Congrats Andrew Holder we Freddie Freeman for the Braves 17 out of 25 MV free Backhand same Anderson Marcus Simeon with the five fingers saving the face What Max Crannock each year. Oh, there's a Zander Bogerts for the Red Sox not numbered in case He's there for two long time a 13 year deal that's east. Yeah last now and Corbin burns Audrey's are built. Plus they got trade turner to Yeah, Bogerts and trade turner. No, no, no, no the Phillies got My bad my bad my bad my bad everybody come on Already in the comments. How do you not know that trade turner went to the Phillies? Jackson Co are on the pink 12 out of 15 for the Royals nice one there low numbered rookie and last up Got a case of 21 platinum from the bullpen nice there you go Sounds awesome Marshman base and base smart honestly to open six sit on six and then Worst comes the worst if it goes down just open it if it goes up sell it base and blue Jacob the Grom 32 out of 75 keep right down on the thing only two autos and In pristine only two autos in there guys. We'll make a note of it Let's do let's do mosaic choice next Also have two silver packs getting ripped with this Mosaic choice Full peacock and one Chill dude Got Thomas the pucky and Brian de la Cruz on your variations. That's gonna be You Darvish as well as Paul Goldschmidt Got autos next is Hans Kraus going to the Phillies on the rookie autograph and Jack Lopez That's going to the Tigers on the other autograph Jack Lopez both not numbered now for our choice exclusives Reese Hoskins not numbered for the Phillies and Tyler McGill for the Mets also not numbered this time a rookie very nice Um, let's see what are we gonna do now Sean? I'm back Now listen 21 sterling and we'll do I'm back after Now we'll do top scone hobby after actually Switch it up. Oh Yeah, master Absolutely, I heard that mayor and judge very happy about it. Absolutely Very pumped about that So happy he's back Jayrod, there's Cole Henry for the nationals Clark Schmidt and wills William Contreras the Braves Well, yeah, I was gonna say Nick. He'd want judge to go to San Fran understandable Torque Ian Anderson. There's Nicola Dolo for the Reds to 199 Got auto Jared Schuster. That's going to the Braves Nice one Atlanta Andres Jimenez and Alex Kierlov. Nice. Got to see him hit a home run in person once nice Try to think the Yankee games. I went I did not see him hit on run Saw Raphael Devers second career home run. Oh, yeah, yeah, I Saw It's about it for interesting stuff. I saw I saw a In Blaze Jordan nice one there for the Red Sox congrats Boston nice blaze Nicolodolo Francisco Alvarez the coolest game I was ever at was it was a Braves and Red Sox game my dad and I went to Atlanta and it was the game that Pablo Sandoval got in trouble from the Red Sox because he was liking Instagram pictures in the bathroom during the game That was the game. I was at that game Yeah Yeah, boo Red Sox is right There's you near Severino for the twins nice one there Congrats twins Trish and Casas Matthew Libre store boo Red Sox, baby Red Sox Your band There's Dylan Carlson got auto Kobe Mayo 43 out of 125 for the Orioles on the wave Nice one there Baltimore Jake Cronin worth Sam Huff There we go That's it. Let's do a box of tops chrome hobby now. We'll do a silver pack with it as well 2022 tops chrome hobby There you go. It's like my dad I have not pulled a Michael Jordan autograph now. He only signs for upper decks. So we don't get a lot of upper deck stuff Unfortunately, not same with LeBron There's prism Casey Meis going to the Tigers to Brian A's Prism Alexander Wells rookie Ian Hap sunny gray purple Connor Wong rookie to 250 Nick that is awesome. That's pretty cool actually Josh Chisholm refractor not numbered of course Like notable games That's pretty cool That's pretty cool White Park when John Farrell was managing the Red Sox I saw him almost get thrown out on a an argued call. That was pretty cool I think one of the closest when I want some bashing all brew on that's all Everybody There's Oliver Ortega that's going to the Angels nice one there Fine McMahon super high upper deck and tickets are 500 each at the word that Honestly I Grindelow Cruz on the rookie auto nice one there Marlins. Congrats Miami, Cal Raleigh That's cool Cal Raleigh refractor rookie, I mean that's kind of funny, but you still got to get banned unfortunately Wow, there you are That's Dylan. Yeah, that's awesome. Yeah July 4th playing the Houston Carson Kelly for the Diamondbacks. Hey, we won Magenta. So 350. That's good Bobby Baez Piper, Randy Rosarano. Oh, yeah And the Cardinals fan of a Red Sox we figured how often we're gonna play each other. That's true. Yeah, it's a good point Absolutely That's like my buddy and I like we went to a Celtics Hawks game in the garden. Yeah, just I agree It's like how often are we gonna both have the day off and The red the Hawks and the Celtics are playing each other and both available like we're like, yep We're all hawks Jersey there one of like five people. I just take it off Yeah, I was getting wrecked because they ended up losing to Wander Franco. Yeah, I learned that one the hard way. It's like I wore we wore a Raven stuff to what's it called to The Jacksonville because no one cares about the Jags. Sorry Vaughn if you're in here, but That's true Vaughn and Randy Max Krannick refractor rookie So it's basically it was like pretty much it was like 50 50 Yeah of Ravens and what is new for Oh, yeah, absolutely. They're all well-traveled fan bases, you know The police box came in st. Louis is rough. Yeah, for sure Especially rivals. That's always tough Yeah, I would never never go into it without It was insane. Yeah, I wouldn't even think you're going to Philadelphia Don't Carlson Jacob. Yeah, another one. I wouldn't wear Yeah, I know Yeah, it's me swanson refractor and Max Krannick, so that'll do it for top scram hobby We'll do iMac max do under wraps after that. Oh, we'll do our silver back my best See if we got something then You know, we haven't hit anything big hit out of these yet DG LaMahew on the base onto iMac now walk everybody That's sick Good start right there We've got go into the Is this going to Rangers Spencer Howard triple button patch. There you go Rangers. That's pretty sick man Texas is Nick H. Congrats Nick followed by a Joey Bart 13 out of 25 Player warn Jersey It's like two-color patch in Jersey. Nice one there Giants and Fran We've got 37 out of 38 Colton Welker nice one there for the Rockies Colorado Nick H. What's up laser cat laser got a kill of Badoo for the Tigers that's gonna be 16 out of 99 in the Jersey order Patrick Buttons is right Three of them next up AJ Alexi That's gonna be for the Rangers 22 out of 46 Yeah, I grabbed the update Then we've got just an S with the Braves 50 out of 99 Spencer Strider nice one there Really sick two-colored RPA. I remember that too. I remember when I killed Badoo was Really hot for those two weeks That's pretty awesome move by Under wraps up next. Oh That's sick, dude, that's so sick. Oh, that's gonna be so awesome Got going back to Justin s How about a chipper Jones ball? Inscribed Hall of Fame 18 Look at that man That's so sick. That's so sick Nice one there congrats Justin go into the Braves nice chipper ball Let's go. This is such a good product through the fanatics under wraps Chipper again inscribed Hall of Fame 18 Do This will do 22 sterling Are you a top chatter sin? Not surprised it's got a break this thing.  He's unnecessary unnecessarily loud and Over-the-top reaction, I'm gonna just the way that's That's like oh boy. It's like somebody that's a joke right over the head right there They serious Brandon Marsh to 99 Nice one there top chatter after tax season fair enough Panger Panetta, that's going to the A's on the base auto Jeremy Pena rookie and Reginald pressiata even quam We've got Leho Lopez rookie auto 108 out of 150 for the reds nice one there rookie auto sincey her smidler's a new bar New bath last new bath My drop in the link to origin Next year break with spots is all the way up until football It's gonna be origins Hobby 16 box case break to 150 freezing or cooling freeze and alarm Cooling Right The Chinese I was roasting dawn for that one O'Neill cruise Got Roberto compost going to the Tigers. That was so funny Colding freeze alarm No soda and a nag role instead have been so Oh, that would have been so funny dude, I would have been I would have been probably There's Francisco Alvarez to 150 Yeah, he asked me to write it down. I wrote it down. That's a Guzman to 150 for the angels. Seriously Roan to contrarious CJ Abrams. That'll do it for the Was that sterling? Next we are on to top scrum jumbo 22 No, it was so funny because he asked you to write it down and he said you said no egg roll and a soda And then you wrote it down and then he goes you want He's like, no, can I have a soda and you wrote down with so Could have gotten lost on the way trying to find the answer Wasn't like a dissertation Jesse wanker Ronald Acuna nice one there. I'll leave this to your call First auto Greg Deekman going to the Cubs Nice one there congrats Chicago Sonny Gray refractor Oh, yeah, I know I said you hope Donnie can play Yeah, if he goes out there and shanks it he might not make it out of that park Jumping. Yeah, there's Andrew McCutcheon on the prism. It's gonna be like a gang initiative Andrew McCutcheon Yeah, that's actually pretty good. There's a green Andre Jackson in 99. Hey, Susie, Lazardo On hell's their buff for the Royals Jazzism Keep telling everybody about dried briefs It's all about raising awareness Yep Want soto green wave 50 out of 99 nice one there for the Nationals Wanda Franco rookie Anthony Bender rookie auto Hey, so where it is for rabies a nice judge refractor. It's like a $20 card right there Michael Scott Dunder Mifflin celebrity first annual fun run race for the cure Hosted by Michael Scott Christian Yelts and refractor Shane Bieber the Guardians Same off is my favorite show So my daughter Seinfeld's good, too Seinfeld's really good. There's a couple really good great like classic Seinfeld episodes. What's up rusty? Rusty engine Ryu on the prism Jose Ramirez Hey Oscar Hernandez by a blue Ivan Castillo numbered 76 out of 150 for the Padres Brian is Sean shopping guys a link for origins divisions eight spots to go on that one everybody Got to fill that up if you want to get to 10 box Tuesday And personals Wanda Franco also, we're all just gonna be sitting around showing my I I like them all I like Stanley a lot Stanley's funny Ryan's really good obviously like Michael and Dwight Jim pan Who? Andy's funny, too. You never watch You're in there. Yeah, you got like you just got to give it a like you'll think it's funny And Michael's kind of Hilarious so good Nelson Cruz magenta to 399 Got Ryan Vellade prism rookie Wisdom purple jazz Chisholm for the Marlins nice one there to 250 Followed by an O'Neill cruise nice one there no cruise refractor that is Next up we've got 2022 Bowman Chrome hobby. We'll finish with choice. Good luck everybody I've seen a couple episodes Marshman letter Kenny. We were watching it on Hulu Yeah, not the biggest fan. It's pretty late funny, but can't get into it. I love my name is Earl. That's another good one That one's good Man Heather Bench that she'd watched a bunch of times and she got me to watch it Money Base auto Michael Garcia that's going to the Royals a little bit of a print line on the right there We'll send an empty box and wrapper with the royal swap Jonathan India magenta to 299 James Triantos Edison Paulino Yeah, it is one of those ones. It's so dumb that it's funny. I agree with that base. I Didn't not know he was a professional skateboarder back in the day Who is it Jason Lee is that plays Earl? Yeah, that was me Jason Lee Did not know who is professional skateboarder. That's kind of walk Wanda Franco Yeah, just that and then there's one back there too Pedro Pineda on the vapor to 75 nice one there for the ace your bell and heli's Jason Lee pro skateboarding shreds. That's awesome base auto Jew Baker going to the race That's Tampa and Change your diaper shimmer Edison Paulino on the first for the Red Sox It's so out of hand so quickly The veins popping out of the bread Robin face Jeremy Pena rookie the canary yellow coming up of wonder Franco There you go raise 68 out of 75 he's got Tampa But we asked there you go, buddy. We'll get this mag for you. That's awesome. Nice wander Guzman and Montgomery Gonna do the silver pack for the top scroma Jumbo that was two boxes ago. I got to do that my mistake. Oh, we got something Sean. No way. We got something It's tops finest Louise Robert on the rookie auto Wow Congrats white socks Eric R was not expecting that one There you go, man. Nice Lou Bob. That's a bonus. That's sweet dude sweet right there Yeah, my whole mag that for sure congrats Eric nice one there, buddy and Eureus Now the silver packs are fun when you start hitting man rookie auto blue Bob, too And we got bowman chrome choice to end it. Good luck everybody last box. Oh 10 box Tuesday Let's do a quick recap after as well a green. Wow, dude. Holy cow, man Go in a Kenneth H. How about a green Jason Shorio? boom true green Holy moly Let's go. Let's go. What a what a way to end it right here a Lou Bob into a choreo Let's go man. We'll get that mags.   That's insanity Absolute in Sanity All right, let's do a quick recap our relics. We had Joey Bart giants and a Spencer Howard for the Rangers the button relic Our non-magdautos we had Dylan Dodd for the Braves Jew Baker raise Michael Garcia Royals Jazz Chisel Marlins Ivan Castillo Padres Anthony Bender Marlins on hell's air for Royals Greg Deacon Cubs Denzer Guzman Angels Roberto Campos Tigers Carlos Coleman are as raised Alejo Lopez going to the Reds Pedro Pineda ease Spencer Strider Braves AJ Alexi Rangers Achille Badoo Tigers Colton Welker Rockies Brian De La Cruz Marlins Oliver Ortega Angels We had Kobe Mayo for the Orioles You near Severino twins blaze Jordan Red Sox Jacob Schuster Braves Cole Henry Nationals Jack Lopez Tigers Hans Kraus Phillies Josh Hader Brewers Jake Cousins Brewers Onto our mag cards. We had a Christian Baccaro base auto for the Nationals a Wander Franco canary yellow 68 out of 75 going to the Rays We had a Luis Robert coming out of a silver pack tops finest rookie auto not numbered from 2020 and a Jason choreo true green 36 out of 99 for the Guardians That'll do it for the break guys. Thanks again for the fill. That was awesome. Next up. We got basketball coming up


Oh, Brics is Brazil, Russia, India, China, South Africa, birdie here It's an economic group that got together, and in their last meeting, they included Argentina, Brazil, Saudi Arabia, Iran, and Egypt into Brics, right? I think those are the five that got added. So Argentina, Brazil, Egypt, Iran, and Saudi Arabia are entering Brics. It's an economic block that they're coming out with their own what do you call it, their own swift kind of system for settlements, for trade, right?  They lost so hard. Like this loss that happened in Ukraine with the with the war on Russia is one of the greatest, greatest losses in our history ever. Like go back thousands upon thousands of years, right? It's bigger than Napoleon, it's bigger in World War II, actually equivalent to World War II. It is literally, and with this loss, this war that they were raging on Russia through, Ukraine is a proxy, right? And multiple other proxies with Georgia are, you know, all these jobs, right? The West just lost and they didn't lose and maintain their power. They lost and they're crumbling, right? And they're crumbling, and they're crumbling.


We're going to get started. We are going to be talking today about scaling Argo security and multi-tenancy in AWS, EKS, and we are from the New York Times. So my name is Dave Grzanti. I'm a principal engineer at the Times. I'm Luke Phillips, the staff engineer with the New York Times. And at the Times, our mission is to build the essential subscription bundle for every English-speaking curious person who seeks to understand and engage with the world. We're a digital-first experience, leaning into technology to produce comprehensive news coverage. As an example, what being shown behind me of our coverage of the Tulsa Race Massacre. And this particular story used machine learning to take historical records and create 3D spaces that are being mapped on screen. This specific story used a variety of microservices and data architecture to be able to map our news stories to this dynamic digital presentation. And this is just one example of things that the Times was trying to do to advance our storytelling and visual capabilities and build more comprehensive products. So today we're going to go over why we're building an internal developer platform at the Times, what Luke and I specifically work on within that team, how we're doing continuous delivery with Argo, an overview of multi-tenancy Argo architectures, how we're running Argo at the Times, some scaling challenges we faced, and some lessons learned. So I think for most people, what you may be familiar with at the Times is the news coverage. I'm sure people are familiar with Wordle, though, as well. So there's a lot of other products within the Times kind of scope, right? Games, crossword, Wordle. But we also have a very vibrant cooking website. The other platforms, Wirecutter and the Athletic, are also Times brands. There's also a growing audio presence, too, with podcasting and a few other things. So there's a lot of development and engineers at the Times who are building these products and teams like ours that are supporting those engineers. So if you were an engineer at the Times, application developer, we really want you focusing on developing software, developing stories like the visual one we showed you up there, but increasingly developers are being tasked with doing a lot more than just develop as things quote unquote shift left. And they're responsible for containerizing their applications, doing CICD, building them, testing them, dealing with ingress routing, monitoring, and their lives have just gotten a lot more complicated. So part of what we're trying to do is pull back on some of that complexity so they can focus on making their lives easier and also letting them get back to adding value for customers. And in addition to the developers, we also have folks in more of a DevOps SRE role that are responsible for running maybe Kubernetes platforms that these teams are deploying on now. And we kind of see a mix of how this may have worked in the past. Maybe they're using a cloud provider to run something, but they might be running their own clusters one versus two. Everybody kind of was doing it differently depending on the team. So what we really wanna do is consolidate all of that down to a shared platform. So future teams could deploy their applications and not worry about managing and maintaining and updating these. And this is really where our team, the Deliver Engineering team comes in, that Luke and I are part of. Deliver Engineering owns and manages these clusters to allow teams to deploy. They offer distinct multi-tenant spaces within the clusters and each team operates separate from each other and has Arbok and security controls. And if we kind of zoom out to look at that, the whole big picture of this IDP we're building, we want an NYT engineer to be able to create, kind of onboard to our platform, develop within some time the source control system like GitHub, have CICD tools to build, test and deploy to an AWS EKS environment, have some centralized ingress and routing for those applications and then be able to monitor them. So this is something that our larger team, Deliver Engineering is building. Luke and I specifically kind of land in the earlier parts of the diagram. Some of our colleagues are talking about other pieces of this system, but Argo is really the thing we're here to talk about today and why we chose Argo as our CD tool of choice. So I'm gonna hand it off to Luke to talk a little bit about that. Thank you, Dave, for the background on our developer platform. Given our platform and architecture of orchestrated container workloads or Kubernetes, obviously the emerging best practices for continuous delivery are utilizing GitOps. After evaluating the landscape of tools available, we went with Argo CD. This helps facilitate our continuous delivery and GitOps patterns within our internal developer platform. Some of the realized benefits of an internal developer platform, having an alignment of your software development, life cycle streams, your CI and CD processes, become reusable and repeatable, common tools and patterns. They improve velocity, quality, and support of software services that allows people like Dave and myself to scale our abilities as well. And being that this is ArgoCon, I don't really need to belabor much more of the CD benefits. But part of our any discussion about security and scaling requires a review of the deployment architectures and what kind of choices you make around operating Argo CD itself. So we wanna give a quick review of some of the published architectures of Argo CD itself and which was just the right size for us. Keep in mind that each example may fit better in your own use case. Starting off with a standalone model, each cluster has its own Argo instance. Some of the benefits to this is a reliability of each cluster operates independently, isolation of concerns, better security, distribution of load per cluster. However, this creates a lot of complexity for management and updates, as well as complexity in providing user access. This requires maintaining many instances and duplicating configuration. So this was not quite the right size for us, but we liked a lot of the security benefits here. Looking at some of the other options, you have your hub and spoke model, single Argo instance to connect and deploy to many Kubernetes instances. This is easy for management, creates a wonderful developer experience, one pane of glass to see all of your deployment applications, simple disaster recovery and simple access usage. The challenges though, it is the single point of failure. Scaling requires a lot more tuning of the individual components of Argo CD and the lack of isolation for security. So this was getting a lot closer to what we're looking for as far as the developer experience. And finally, one other set of architectures you can consider are Argo instances per group, per logical group or to split apart the components of Argo itself. Some of the benefits here is a little better load distribution per group and outage of one cluster won't affect every group and credentials become a little more scoped per group. However, you still have the challenge of maintaining more instances of Argo and requiring a separate management, sort of a separate management cluster. Alternatively, you can split apart the components of Argo CD, there's an experimental open source project open cluster management tool that does this. They'll also a great credit to some of this review and other architectural solutions that provide a better support around the splitting of components to check out the acuity or code fresh products. However, for us, we were looking at just the open source solutions right now. So balancing the various pros and cons of the architectures we were looking at, we really enjoyed the experience of one Argo to rule them all. We also have some smaller instances of Argo for our own testing and allows us to sort of dynamically balance clusters if we need to. But right now, kind of one Argo to rule them all. We also balance the trade-offs of our strict security controls with CI governance and policies around our GitOps repos and measured separation of concerns for the various repos of config. I'd also advise you to check out another talk later this week by some of our colleagues that will be going into greater detail about the Git security and policies we use there. And so from here, I'll transition back to Dave who will go into more detail about how we're using Argo CD in this architecture. Thanks, Luke. So I'm gonna jump into Argo at the times and specifically how we have it deployed and some challenges we faced fitting into our multi-tenant Kubernetes environment. So as Luke pointed out, this is the model that we chose from the kind of available architectures that we kind of surveyed. And like I mentioned, we're deploying this into a multi-tenant cluster that another team within our department runs that had some requirements for how Argo operated and our security team also wanted it to see it match some of the Arbok controls that were already there. So when we kind of set out to use Argo CD, like a lot of people, we went to the docs and used kubectl to apply the manifest and create namespaces, all that sort of thing. When we wanted to add a new cluster, a target cluster, we used the Argo CD CLI to do that. This, from our experience, and I think now assumes a certain set of control and permissions within the clusters you're installing it in, mostly cluster-wide admin, which we didn't have. We were kind of operating just like a tenant with limited permissions within this multi-tenant cluster. So when this Argo security team kind of looked at the way that we had installed Argo in our sandbox POC environment, they kind of raised some red flags and they were like, you can't install this in the multi-tenant cluster that the tenants are using this way. So here's our kind of requirements for you. You won't get any cluster-wide admin access for the Argo installation. You need to limit what permissions Argo's going to have in the target clusters where users are running their applications down to the same permissions, essentially, that the users would have. And you have no access to install custom CRTs. So like you can't, we're not gonna give you access to install the Argo CRTs. So from our side, we were contemplating how we would do that, what we had to split up, what we had to do ourselves, kind of work with our other team in our department to kind of manage all this. So what we came up with was these kind of three things. So the first one was bring your own R box. So we kind of separated the installation of the CRTs and anything that would require cluster admin to the same workflow that was being used to install and set up the Kubernetes cluster in EKS. This allowed us to kind of keep all the CRTs and that stuff separate. We customized the Argo CD Helm chart to also separate stuff out. So we pulled out the pieces that could be run without this admin access. We essentially just did that with like a bash script to circle over the stuff that we needed to separate out and use the pieces that we needed. And then the last piece was, and this is the more interesting thing that I'm gonna talk a little bit more about next, was how the role of the service account that lives in the target clusters functioned and what permissions it had. And what we separated was the traditional way that it's done, if you just follow the docs is it has create, read, update, delete everything on all namespaces. So we made it so that cluster-wide role only had essentially read permissions and then we attached namespace-specific roles that matched what the tenants would have. So it kind of had one service account with a cluster role and then a role per namespace. So let's dig in a little bit on what that looks like and how that works. So this is kind of a simplified diagram showing the Argo CD lives in its own admin cluster and this kind of operates on all of our environments, dev stage, prod. It looks at a set of Git repos for the project and app files and on the target clusters there's that service account I mentioned and it has the cluster role that essentially only has read and then in each namespace it has a role binding that essentially mimics what each tenant is given. So Argo has the same permissions a tenant would over all of the applications within that namespace and this worked out for us better I think than we expected in the beginning. We were worried we weren't going to be able to kind of match the security requirements. So we were able to achieve that. We didn't necessarily love this setup though because I think the more research we did we realized we wanted to lean a little bit more into AWS IAM native security versus using a traditional Kubernetes model with a service account and a token. So the next thing we kind of looked at was could we lean into the AWS IAM model a bit more? And after kind of reading through various AWS docs about identity mappings and blogs on Argo and how the kind of two could match this is kind of the model that we came up with and wanted to try to achieve. So this would translate the same cluster and namespace roles that I talked about but it would remove the need for the service account and the Kubernetes token. So let's go through how we did this. So just a quick primer on AWS IAM for people who aren't familiar it's the identity and access management component within AWS and it just controls who can access what within AWS. So it's kind of their layer of IAM separate from Kubernetes Arbok. So the first thing we needed to do was set up a role which we called Argo CD and this is what the Argo components within the Argo CD cluster will assume when it needs to talk to another cluster. That role will have two things set up the first is a trust relationship and this allows the Argo CD cluster roles to assume this role via trust relationship. The next thing, oops I skipped over one, no? Oh sorry, I didn't skip on the next slide. This is doing the patch within Kubernetes to let those service accounts assume the role via an annotation. The next thing was the IAM policy on that account and I'll get to why this is important in a second but this allows this role to assume the role in the target cluster from the AWS side and if you kind of like think about this as a big picture we set up a role IAM role with a trust relationship and a policy. This is something typical you would do with a lot of if you're creating IAM roles in AWS but I was just stepping through the three pieces that were needed from the Argo CD operation side and the next thing is creating the role that this Argo CD role will assume in the target cluster and this can be done across accounts so I kind of showed how this can be separated and the important thing is to look at it just like the item in the principle showing that this trust relationship allows the Argo CD role to assume it and this role won't have any specific IAM permissions to do anything in AWS. It'll just have a trust relationship which allows that Argo CD role to assume it. This is what the cluster role and cluster role bindings look like specifically that I've kind of been mentioning all along. The one on the left is the tenant level role binding and role that are in the tenant specific namespaces and the one on the right is similar to what you would see if you install the Argo CD out of the box for the cluster role except it only has list and watch on the cluster no create, read or delete permissions and then to kind of complete the circle here to link the IAM role down to the Kubernetes kind of native Arbok, AWS has this concept called identity mapping which you give it the AWS kind of identity and then the Kubernetes identity and that's how it does the linking. And then lastly when you register the target cluster within Argo CD, you just have to do some specific stuff within the configuration to say this is the role I want you to assume when you're talking to the target cluster, here's the name and here's the certificate data. So this would look a little different if you were just connecting the cluster with Kubernetes tokens. So with that I'm gonna hand it back to Luke for a second to talk about some of our scaling challenges. Thank you Dave. We'll take a quick look at the Argo components themselves. Given the style of architecture we've chosen, what kind of scaling challenges are we going to run into and what do we want to make sure everyone is just aware of with Argo? Thinking of Argo CD components operating in three phases. The visualize, the apply and the retrieve. Each phase presents scaling challenges to be aware of and tuned for. Our own challenges exist for the many cluster connections and the many GitHub repos were connected to. An option to extend what David mentioned earlier we could also even go so far as have one cluster connection per tenant per cluster. This is a challenge for future us to be aware of. So these are a collection of all the challenges you might face given the style of architectures we were looking at. For the many Git repos or mono repos we have a variety of parallelism or cache processing on the repo server side. For the many deployed applications or many cluster connections you have those challenges likewise with the large size of data being retrieved from the API that the body of the API itself might grow. And so to solve for these challenges first we wanna make sure we do thank the Argo community and the Helm chart project. Be sure to check it out. They have already tagged a lot of the out of the box flags and values ready to be set in the chart. So you have some tuning already available to you. I'm not getting into too much detail here as many of the other talks you might have heard today or we'll still see today. We'll get into some of these further details but for our specific challenges for the many Git repos being aware of all the timeouts and your polling and processing, forking, memory usage. As we mentioned earlier, the part of monitoring of our platform to be constantly aware and seeing how Argos growing and what kind of memory tuning you have to do for all of your infrastructure. Likewise for the many cluster connections you have a lot of tuning around the processor queues and starting to look at charting out the replicas of the cluster connections of the application controller and finally for the API itself really just watching the memory usage of that. And so finally we'll discuss some of our lessons learned through all this work that we've done. We'll start off I guess some of them, yeah. As we continue to investigate how we tune our security in multi-tenancy we want to continue to lean into the platforms that we're adopting, whether it's AWS or Argos CD. We're certainly interested in having this conversation with all of you, what ideas do you have for both AWS, AWS IM, roles, Argos CD security and multi-tenancy or where do we think the projects need to go or like where Argos CD needs to go. We certainly have a challenge for example of our Argos projects replicating the same security controls that we're managing in AWS IM. Is there say any alignment we could get there in some future capabilities or tools? Yeah and then the next slide was just one thing that we were kind of playing around with messing with with this AWS IM model which is the concern I think we have is if someone gets access to the kind of token service account that we have now they essentially have access to every app deployed in Argos CD because we have this one Argos CD to rule them all, which is not great. Leaning into the AWS IM model is better, it's using more native concepts but it's still you get access to Argo in our ops cluster, you have access to everything. So we've been thinking is it better to do roles per tenant and then kind of register those within our Argo cluster as individual target clusters per tenant, at least then kind of have separation but that doesn't really change the Argo access model, Argo itself still has access to all those tenant spaces. So we've just been trying to toy with some of these ideas and see if there's any kind of more individualized secure way we could make this so that the tenant stuff is tied more to get and there's a full life cycle of CINCD per tenant. And I think that's it, thanks everybody. And two other talks that we've been mentioning so we had a talk from a colleague this morning at SilliumCon about more about our runtime environment and how we're using Sillium. And then we have a talk later on Thursday about OPA and how we're using a policy to control some of our CI process and who can deploy into Argo and when, thanks. Thank you. We have time for maybe one question, questions? Oh, one right here. What's today's wordle? Yeah. Hello, sorry. My question is related about the, I see you are using a one cluster with multiple tenants. And what is the, how do you define or how do you define the tenants? I don't know, a specific namespace or multiple namespaces belong to one tenants or how do you define this? So yeah, like for me from the, like if you ignore Argo for a second, a tenant is a namespace, but we do have a concept that we're allowing tenants to create multiple namespaces, but there's some controls on top of that because we don't want, we don't give the tenants the ability to create namespace, namespaces themselves. So we've kind of, we wrote an operator that gives them limited permissions to make new namespaces if they want to. And then if you look at it from the Argo perspective, how we're managing that is we consider like a team or a tenant, like a one-to-one mapping with their, their like AWS or their cloud account. So, you know, they get out of the box, they've got a namespace that maps back to their cloud account. They can deploy multiple apps into that, but they do have the ability to kind of create sub namespaces if they want to. And it's one Argo project per tenant. And then that maps to basically prefixed namespaces with their tenant name. Okay, thank you. Thank you very much. Give a clap.


I'm Sillin Shao and we're co-leads of Team Equestr. We're designing and building a direct air capture system which can capture carbon dioxide from the atmosphere. What makes our project unique and interesting is that we only use electricity in this process. This means we can be coupled with renewable electricity resources to minimize our environmental impact. Our project is estimated to be less carbon intensive and more energy efficient than current commercial direct air capture processes. The capture carbon dioxide can then be stored away permanently. Our design is innovative and backed by research. The fundamental principles of the design have been proven to work. Now we just need some funds to combine all the subsystems together and experimentally show our design works. This award will help us prove that. We are already seeing the effects of rising carbon dioxide levels all around the world. It's not enough to be just a carbon neutral, we have to be carbon negative to really make a difference.