Do you prefer a terminal to manage your Kubernetes resources yet find yourself sometimes kubectl’ing a bit too much? There’s a new rising star in the K8s TUI space!
kty, dubbed “the terminal for Kubernetes” and written in Rust, was recently created to empower you with a console-based dashboard for interacting with K8s clusters via any SSH client (including the one you might have on your phone!). You will need to install it to your cluster in order to:
- Log in to your cluster via OpenID providers’ accounts, such as GitHub or Google;
- Navigate through your Kubernetes Pods and filter them (listing Nodes will be added soon);
- Check your Pods’ manifests, get a shell, read the logs;
- Forward traffic from your local machine to the cluster and vice versa;
- Transfer files from your Pods via SCP or SFTP.
▶️ GitHub repo
📢 Reddit announcement
#tools #CLI
kty, dubbed “the terminal for Kubernetes” and written in Rust, was recently created to empower you with a console-based dashboard for interacting with K8s clusters via any SSH client (including the one you might have on your phone!). You will need to install it to your cluster in order to:
- Log in to your cluster via OpenID providers’ accounts, such as GitHub or Google;
- Navigate through your Kubernetes Pods and filter them (listing Nodes will be added soon);
- Check your Pods’ manifests, get a shell, read the logs;
- Forward traffic from your local machine to the cluster and vice versa;
- Transfer files from your Pods via SCP or SFTP.
▶️ GitHub repo
📢 Reddit announcement
#tools #CLI
👍3
The recent ISSTA (International Symposium on Software Testing and Analysis) 2024 conference featured a research article called “An Empirical Study on Kubernetes Operator Bugs”. Its authors conducted the first comprehensive study on 210 operator bugs from 36 Kubernetes operators, including those for PostgreSQL, MySQL, Redis, Elasticsearch, OpenTelemetry, Prometheus, etc.
Some of the findings are:
- The most common bug patterns in the K8s operators are incorrect state observation and analysis (60%), incorrect reconciliation (27%), incorrect custom resource definition (9%), and incorrect access control configuration (4%).
- 83% of operator bugs require updating specific state properties or updating them with specific values.
- 54% of operator bugs only lead to silent failures such as unstable state and undesired state.
🔗 Article DOI and its full PDF.
#news #articles
Some of the findings are:
- The most common bug patterns in the K8s operators are incorrect state observation and analysis (60%), incorrect reconciliation (27%), incorrect custom resource definition (9%), and incorrect access control configuration (4%).
- 83% of operator bugs require updating specific state properties or updating them with specific values.
- 54% of operator bugs only lead to silent failures such as unstable state and undesired state.
🔗 Article DOI and its full PDF.
#news #articles
🔥5
Here comes our newest digest of the prominent software updates in the Cloud Native ecosystem!
Release Spotlight: CloudNativePG 1.24.0
CNPG is a Kubernetes operator for PostgreSQL databases. Last month, the project announced its new v1.24.0 release with significant updates. Perhaps the two most prominent features are Distributed PostgreSQL Topologies, which enable hybrid and multi-cloud CNPG deployments, and Managed Services, which allow advanced service management, including accessing PostgreSQL outside Kubernetes.
CNPG 1.24 also got an enhanced synchronous replication API with the
Other noticeable updates in the Cloud Native space:
1. OpenTelemetry Collector v0.109.0 with an updated GitHub Receiver (previously known as Git Provider Receiver) adhering to the CICD Semantic Conventions 1.27.0 and GitHub metrics promoted to alpha. Other new features include a receiver for Google Cloud monitoring, support for Prometheus-created timestamps, exponential histogram support for Elasticsearch, encoding extensions in the Kafka receiver, and more.
2. CRI-O, an OCI-based implementation of Kubernetes Container Runtime Interface (a graduated CNCF project), was updated to v1.31.0 with crun as the default OCI runtime. It also got support for fine-grained
3. Jaeger, a distributed tracing system (a graduated CNCF project), is getting closer to its v2 with v1.61.0 / v2.0.0-rc1. Jaeger v2 introduces a new architecture for Jaeger backend components based on the OpenTelemetry Collector framework. You can read more about it in this article. The latest release also brought numerous experimental features, such as validation in badger storage and memory storage configs, tail-based sampling processor extension, and health check extension.
4. Argo CD v2.13 RC was announced with 40+ new features. They include a new
5. KCL, a constraint-based record and functional language (a CNCF Sandbox project), released its v0.10.0 with numerous changes in the core, toolchain, IDE, libraries, and SDKs. Some of them are attribute access and index access in assignment statements, a new
#news #releases
Release Spotlight: CloudNativePG 1.24.0
CNPG is a Kubernetes operator for PostgreSQL databases. Last month, the project announced its new v1.24.0 release with significant updates. Perhaps the two most prominent features are Distributed PostgreSQL Topologies, which enable hybrid and multi-cloud CNPG deployments, and Managed Services, which allow advanced service management, including accessing PostgreSQL outside Kubernetes.
CNPG 1.24 also got an enhanced synchronous replication API with the
synchronous_standby_names option, WAL disk space exhaustion prevention, declarative delayed replicas, transparent support for the allow_alter_system parameter (from PostgreSQL 17), an ability to define postInit and postInitTemplate instructions in configmaps or secrets, and more. You can find more information on GitHub. Other noticeable updates in the Cloud Native space:
1. OpenTelemetry Collector v0.109.0 with an updated GitHub Receiver (previously known as Git Provider Receiver) adhering to the CICD Semantic Conventions 1.27.0 and GitHub metrics promoted to alpha. Other new features include a receiver for Google Cloud monitoring, support for Prometheus-created timestamps, exponential histogram support for Elasticsearch, encoding extensions in the Kafka receiver, and more.
2. CRI-O, an OCI-based implementation of Kubernetes Container Runtime Interface (a graduated CNCF project), was updated to v1.31.0 with crun as the default OCI runtime. It also got support for fine-grained
SupplementalGroups control and Kubernetes image volume source (both appeared in Kubernetes v1.31), sigstore signature verification for policies corresponding to a certain Kubernetes namespace, new --no-sync-log option, new crio check subcommand, etc.3. Jaeger, a distributed tracing system (a graduated CNCF project), is getting closer to its v2 with v1.61.0 / v2.0.0-rc1. Jaeger v2 introduces a new architecture for Jaeger backend components based on the OpenTelemetry Collector framework. You can read more about it in this article. The latest release also brought numerous experimental features, such as validation in badger storage and memory storage configs, tail-based sampling processor extension, and health check extension.
4. Argo CD v2.13 RC was announced with 40+ new features. They include a new
argocd appset generate command to preview application manifests, a dry-run mode for argocd appset create, promotion of the multi-source applications from beta to stable, an ability to use regexps to configure the allowed namespaces, improved reconcile performance for applications with many resources, added Application Set metrics, and more.5. KCL, a constraint-based record and functional language (a CNCF Sandbox project), released its v0.10.0 with numerous changes in the core, toolchain, IDE, libraries, and SDKs. Some of them are attribute access and index access in assignment statements, a new
kcl test tool, a new KCL C/C++ language SDK, KCL WASM lib support for Mode.js and browser integration. A new KCL Playground based on WASM is now also available here.#news #releases
👍4
A new (third) edition of the “Kubernetes – An Enterprise Guide” book* by Scott Surovich and Marc Boorstein was recently published. Packt now offers free digital copies of the book in exchange for unbiased reader reviews. It got an overwhelming response on Reddit with 500+ comments in less than two days. You can reach Maran Fernandes on LinkedIn to join the crowd.
* It covers networking, security (RBAC, KubeArmor, OPA, GateKeeper, Vault, External Secret Operator), service mesh (Istio), CI/CD (GitLab, Argo CD), observability (Prometheus, Grafana, OpenSearch), and multitenancy (vCluster) topics.
P.S. If you’re interested in books about Kubernetes, see our earlier post listing five of them as the community recommends.
#career
* It covers networking, security (RBAC, KubeArmor, OPA, GateKeeper, Vault, External Secret Operator), service mesh (Istio), CI/CD (GitLab, Argo CD), observability (Prometheus, Grafana, OpenSearch), and multitenancy (vCluster) topics.
P.S. If you’re interested in books about Kubernetes, see our earlier post listing five of them as the community recommends.
#career
👍3
Here goes our latest bunch of interesting Kubernetes-related articles recently spotted online:
1. “Kubernetes security fundamentals: Admission Control” by Rory McCune, Datadog.
2. “High Availability Alertmanager on Kubernetes: No Alerts Left Behind” by Joe Banks.
3. “Developer's Guide to Installing OpenTelemetry Collector” by Prathamesh Sonpatki, Last9.
4. “Using GitHub as a Helm Chart Repository” by Christian Huth.
5. “Securing Kubernetes and Containers: Best Practices to Reduce Attack Surface” by Nathan Hueck.
#articles
1. “Kubernetes security fundamentals: Admission Control” by Rory McCune, Datadog.
“In this post we'll take a look at admission control, another key aspect of Kubernetes security. Admission control is the last of the three stages that requests go through when they're being processed by a Kubernetes cluster. Assuming that the request has valid credentials and is authorized, Kubernetes admission controllers will process the request and may modify or reject it during that process.”
2. “High Availability Alertmanager on Kubernetes: No Alerts Left Behind” by Joe Banks.
“For alerting in Python Discord and other personal projects I am a big fan of AlertManager. Unlike other much more complex alerting and on-call systems, AlertManager is a dead-simple Go application which is easy to deploy and configured solely with YAML files. [..] This article covers my approach to making AlertManager highly available on Kubernetes, and how you can do the same.”
3. “Developer's Guide to Installing OpenTelemetry Collector” by Prathamesh Sonpatki, Last9.
“Learn how to install and configure the OpenTelemetry Collector for enhanced observability. This guide covers Docker, Kubernetes, and Linux installations with step-by-step instructions and configuration examples.”
4. “Using GitHub as a Helm Chart Repository” by Christian Huth.
“GitHub Pages in combination with the GitHub Releaser Action make it really easy to publish your Helm Charts securely and reliably. You can use a custom domain to change the default domain to suit your needs and make the Helm Repository easily accessible. [..] In this guide, I'll show you how to set up a Helm Chart Repository in less than 10 minutes using GitHub Pages and GitHub Action Workflows.”
5. “Securing Kubernetes and Containers: Best Practices to Reduce Attack Surface” by Nathan Hueck.
“By following these best practices for securing Kubernetes and Containers in cloud environments, you can significantly reduce the attack surface and ensure that your containerised workloads are protected from common security threats. [..] Secure the Kubernetes API; Secure the Kubelet; Pod Security; Network Security; Secrets Management; Image Security; Monitoring and Logging; Regular Patching and Updates; Auditing Kubernetes; Additionally Securing Containers.”
#articles
❤3👍2
EDB, the original authors of CloudNativePG, celebrates the leadership of its well-known Kubernetes operator for PostgreSQL in GitHub stars. The project was launched just two years ago, and now it has surpassed all other Open Source PgSQL operators in stargazers.
This happened just recently: at the time of writing this post, CNPG had 4291 stars vs. 4264 for its closest opponent (an operator from Zalando). Also, as we all know, GitHub stars are quite a vague metric. However, the star history chart confirms an overall trend in how the community adopts CNPG.
P.S. Here, you can find an overview of CNPG and a brief comparison with other solutions.
#news #databases
This happened just recently: at the time of writing this post, CNPG had 4291 stars vs. 4264 for its closest opponent (an operator from Zalando). Also, as we all know, GitHub stars are quite a vague metric. However, the star history chart confirms an overall trend in how the community adopts CNPG.
P.S. Here, you can find an overview of CNPG and a brief comparison with other solutions.
#news #databases
👍3
If you’re interested in running local/private LLMs (leveraging Ollama and similar solutions) on Kubernetes, take a look at this new project.
KubeAI serves an OpenAI-compatible HTTP API in Kubernetes, providing you with a drop-in OpenAI replacement and simplifying the needed operations. The project’s authors call it “a Model Operator that manages vLLM and Ollama servers [inside Kubernetes].” Most noticeable KubeAI features include:
- Support for various Open Source model servers, including vLLM, Ollama, FasterWhisper, and Infinity. (Speech-to-Text and Text-Embedding are supported.)
- An option to preload LLMs in custom container images.
- Autoscaling based on load.
- A Chat UI based on OpenWebUI.
- An ability to work in the CPU-only mode and with GPUs. TPU support is planned.
- No dependencies (such as service meshes) and installable in regular K8s clusters, OpenShift, and managed K8s solutions (currently, there’s an instruction for GKE with Autopilot).
▶️ GitHub repo
#tools #genai
KubeAI serves an OpenAI-compatible HTTP API in Kubernetes, providing you with a drop-in OpenAI replacement and simplifying the needed operations. The project’s authors call it “a Model Operator that manages vLLM and Ollama servers [inside Kubernetes].” Most noticeable KubeAI features include:
- Support for various Open Source model servers, including vLLM, Ollama, FasterWhisper, and Infinity. (Speech-to-Text and Text-Embedding are supported.)
- An option to preload LLMs in custom container images.
- Autoscaling based on load.
- A Chat UI based on OpenWebUI.
- An ability to work in the CPU-only mode and with GPUs. TPU support is planned.
- No dependencies (such as service meshes) and installable in regular K8s clusters, OpenShift, and managed K8s solutions (currently, there’s an instruction for GKE with Autopilot).
▶️ GitHub repo
#tools #genai
🔥3
Just a few prominent recent events regarding new/maturing CNCF projects:
1. Perses, a dashboard tool to visualise observability data from Prometheus/Thanos/Jaeger aspiring to become a standard, was accepted as a CNCF Sandbox project in the end of August.
2. Artifact Hub, a web app to find, install, and publish packages and configurations for Cloud Native software, became a CNCF Incubating project (after being in its Sandbox for 4 years).
3. CloudNativePG, a Kubernetes operator for PostgreSQL (we covered it just recently), has applied to join CNCF Sandbox. Interestingly, it is the second attempt to do so, with the first one carried out (and failed) in April 2022 when the project was just born.
#tools #news #cncfprojects
1. Perses, a dashboard tool to visualise observability data from Prometheus/Thanos/Jaeger aspiring to become a standard, was accepted as a CNCF Sandbox project in the end of August.
2. Artifact Hub, a web app to find, install, and publish packages and configurations for Cloud Native software, became a CNCF Incubating project (after being in its Sandbox for 4 years).
3. CloudNativePG, a Kubernetes operator for PostgreSQL (we covered it just recently), has applied to join CNCF Sandbox. Interestingly, it is the second attempt to do so, with the first one carried out (and failed) in April 2022 when the project was just born.
#tools #news #cncfprojects
👍3
Here comes our newest digest of the prominent software updates in the Cloud Native ecosystem!
1. Cortex, a scalable long-term storage for Prometheus (a CNCF Incubating project), got its v1.18.0 with lots of updates. They include an experimental native histogram ingestion, support for filtering alerts (ListRules API), new query rejection mechanism, a token bucket limiter, and ingester metadata API limits.
2. Argo Workflows, a workflow engine for orchestrating parallel jobs on Kubernetes, has seen its v3.6.0-rc1 with hundreds(!) of changes. Some of its new features are using Prometheus TLS by default, configurable individual metrics, OpenTelemetry metrics and numerous new other metrics (Pod pending counter, Pod phase counter, leader metric, etc.), multiple schedules in
3. Kanister, a framework for application-level data management on K8s (a CNCF Sandbox project), released v0.111.0 with support for read-only and write access modes when
4. Kata Containers 3.9.0 introduced support for pulling cosign-signed images, refined device management for kata-agent, image annotations for remote hypervisors,
5. Devtron, a tool integration platform for Kubernetes, was updated to v0.7.2. This release brought support for creating plugins at pipeline stage level, TLS support for Git and GitOps, GitOps support for OCI repositories, GitLab webhook support, async Argo CD app refresh operation, and other features.
6. PipeCD, a GitOps-style continuous delivery platform for apps across different environments (a CNCF Sandbox project), got its v0.49.0 featuring significantly improved AWS Lambda support (plan preview, drift detection, etc.), ECS enhancements (drift detection, LiveState UI), OIDC support for the SSO, and sending OpenTelemetry traces to control plane.
#news #releases
1. Cortex, a scalable long-term storage for Prometheus (a CNCF Incubating project), got its v1.18.0 with lots of updates. They include an experimental native histogram ingestion, support for filtering alerts (ListRules API), new query rejection mechanism, a token bucket limiter, and ingester metadata API limits.
2. Argo Workflows, a workflow engine for orchestrating parallel jobs on Kubernetes, has seen its v3.6.0-rc1 with hundreds(!) of changes. Some of its new features are using Prometheus TLS by default, configurable individual metrics, OpenTelemetry metrics and numerous new other metrics (Pod pending counter, Pod phase counter, leader metric, etc.), multiple schedules in
CronWorkflow, SQLite-based memory store for live workflows, dynamic templateRef naming, support for ephemeral credentials for S3, and many UI improvements.3. Kanister, a framework for application-level data management on K8s (a CNCF Sandbox project), released v0.111.0 with support for read-only and write access modes when
kando connects to Kopia repository server, cache size limits for Kopia server, an ability to pass labels and annotations when creating/cloning volume snapshot resources, and customisation of the labels and annotations of the temporary Pods created by Kanister.4. Kata Containers 3.9.0 introduced support for pulling cosign-signed images, refined device management for kata-agent, image annotations for remote hypervisors,
SetPolicy support in agent-ctl, and more.5. Devtron, a tool integration platform for Kubernetes, was updated to v0.7.2. This release brought support for creating plugins at pipeline stage level, TLS support for Git and GitOps, GitOps support for OCI repositories, GitLab webhook support, async Argo CD app refresh operation, and other features.
6. PipeCD, a GitOps-style continuous delivery platform for apps across different environments (a CNCF Sandbox project), got its v0.49.0 featuring significantly improved AWS Lambda support (plan preview, drift detection, etc.), ECS enhancements (drift detection, LiveState UI), OIDC support for the SSO, and sending OpenTelemetry traces to control plane.
#news #releases
👍4
Our newest bunch of interesting Kubernetes-related articles recently spotted online:
1. “The Beginner's Guide to Securing Kubernetes” by Ophir Kelmen, Hunters.
2. “OpenTelemetry Tracing in 200 lines of code” by Jeremy Morrell.
3. “The Istio Service Mesh for People Who Have Stuff to Do” by Luca Cavallin.
4. “Node.js 20 upgrade: a journey through unexpected HEAP issues with Kubernetes” by Loïc “Ztec” Doubinine, Deezer.
5. “Introduction to the Gateway API: Revolutionizing Kubernetes Networking” by Disha Virk.
6. “Keycloak with istio and Oauth2-Proxy” by Chris Haessig.
#articles
1. “The Beginner's Guide to Securing Kubernetes” by Ophir Kelmen, Hunters.
“In this article, you will learn foundational terms and concepts essential for securing Kubernetes clusters. Whether you're a beginner or an experienced professional, this guide covers the critical knowledge required to understand the security dimensions of Kubernetes and methods to identify and detect specific attack techniques. No prior knowledge of Kubernetes is necessary to benefit from the article.”
2. “OpenTelemetry Tracing in 200 lines of code” by Jeremy Morrell.
“It’s no wonder then that most developers approach tracing libraries as unknownable black boxes. We add them to our applications, cross our fingers, and hope they give us useful information when the pager goes off at 2am. They are likely a lot simpler than you expect! Once you peel back the layers, I find a useful mental model of tracing looks like “fancy logging” combined with “context propagation” a.k.a “passing some IDs around”.”
3. “The Istio Service Mesh for People Who Have Stuff to Do” by Luca Cavallin.
“Istio is a powerful tool that simplifies traffic management, security, and observability for microservices. Contributing to Istio gave me insight into how it helps solve some of the complex challenges that come with running distributed systems. If you're running a microservices architecture or planning to scale, Istio can help you make your system more resilient and easier to manage.”
4. “Node.js 20 upgrade: a journey through unexpected HEAP issues with Kubernetes” by Loïc “Ztec” Doubinine, Deezer.
“When using Node.js in a Kubernetes environment, and more broadly in a containerized scenario, you must consider the memory and CPU reservation. It needs to be configured in order to set limits to your process that would otherwise consume more than you expected. Also, setting it to low values requires attention to ensure the process accommodates the limit appropriately.”
5. “Introduction to the Gateway API: Revolutionizing Kubernetes Networking” by Disha Virk.
“Traditional tools like the Ingress API have long been the backbone for exposing services to external traffic, but as environments grow more sophisticated, developers and operators are looking for greater flexibility, extensibility, and fine-grained control over network traffic. In this article, we’ll dive deep into what the Gateway API is, why it was developed, and how it’s set to transform the way we handle networking in Kubernetes.”
6. “Keycloak with istio and Oauth2-Proxy” by Chris Haessig.
“Setting up Istio with Keycloak and OAuth2 Proxy is a common pattern for adding authentication and authorization to your microservices architecture. Each component plays a crucial role in securing access to resources while maintaining flexibility and scalability. Keycloak acts as an identity provider (IdP) and OAuth2 authorization server. It manages user authentication, including multi-factor authentication (MFA), single sign-on (SSO), and federation. By integrating OAuth2 Proxy, you can convert the OAuth2 authentication flow from Keycloak into HTTP headers that are passed to backend services. This decouples services from handling authentication logic, allowing centralized security management.”
#articles
👍1
CNCF has published another project journey report: etcd. It covers the whole story of this well-known key-value store (since 2013), featuring various stats and focusing on the years under the CNCF guidance (since 2018).
Some of the facts are:
- in CNCF, etcd has seen 65k contributions from 400+ companies;
- top contributing companies (cumulative) are CoreOS, Google, VMware, Red Hat, and Amazon;
- the project has its own SIG-etcd (introduced in 2023);
- there were 38 keynotes, talks, sessions, meetings, and workshops dedicated to etcd at KubeCons.
P.S. You can find more project reports (Kubernetes, Harbor, OpenTelemetry, and Argo) here.
#news #databases #cncfprojects
Some of the facts are:
- in CNCF, etcd has seen 65k contributions from 400+ companies;
- top contributing companies (cumulative) are CoreOS, Google, VMware, Red Hat, and Amazon;
- the project has its own SIG-etcd (introduced in 2023);
- there were 38 keynotes, talks, sessions, meetings, and workshops dedicated to etcd at KubeCons.
P.S. You can find more project reports (Kubernetes, Harbor, OpenTelemetry, and Argo) here.
#news #databases #cncfprojects
A few prominent event-related news:
1. The schedule for the first-ever KubeCon + CloudNativeCon India (Dec 11-12) was just published. It features 80+ talks covering Kubernetes, Cilium, Istio, Argo, OpenTelemetry, Kyverno, Buildpacks, Kubeflow, etcd, and many other CNCF projects.
2. KubeCrash, a virtual & free conference focused on Platform Engineering, will happen on October 9th. There will be 10+ talks from CNCF Ambassadors, The New York Times, VMware, Red Hat, Intuit, Buoyant, SUSE, Fairwinds, and other companies.
3. Open Source Observability Day (OSOD), another virtual & free conference, focused on observability this time, is planned for October 24th. It will host speakers from Isovalent, Percona, VictoriaMetrics, Honeycomb, Chronosphere, ClickHouse, and more.
4. 30+ videos from KCD Czech & Slovak 2024 that happened on June 6-7 in Prague are now available for watching in this YouTube playlist.
#news #events
1. The schedule for the first-ever KubeCon + CloudNativeCon India (Dec 11-12) was just published. It features 80+ talks covering Kubernetes, Cilium, Istio, Argo, OpenTelemetry, Kyverno, Buildpacks, Kubeflow, etcd, and many other CNCF projects.
2. KubeCrash, a virtual & free conference focused on Platform Engineering, will happen on October 9th. There will be 10+ talks from CNCF Ambassadors, The New York Times, VMware, Red Hat, Intuit, Buoyant, SUSE, Fairwinds, and other companies.
3. Open Source Observability Day (OSOD), another virtual & free conference, focused on observability this time, is planned for October 24th. It will host speakers from Isovalent, Percona, VictoriaMetrics, Honeycomb, Chronosphere, ClickHouse, and more.
4. 30+ videos from KCD Czech & Slovak 2024 that happened on June 6-7 in Prague are now available for watching in this YouTube playlist.
#news #events
❤2
At some point, we all might need to create development environments in Kubernetes. This project simplifies this task!
Kardinal is marketed as “the lightest-weight way” to spin up temporary environments. It aims to make this process as fast and easy as possible. To do so, Kardinal Kontrol is used as a cloud-hosted control plane and a service called Kardinal Manager is deployed to your Kubernetes cluster. Here’s what this tool provides:
- Various environments’ types: for single or multiple services with shared resources, for apps with isolated stateful resources, and for apps with full isolation.
- Templates to unify and customise the environments’ configuration.
- Plugins to simplify configuring dev versions of stateful or external services. Currently, there are plugins for Redis, Neon DB, PostgreSQL (seed data), and AWS RDS.
- Web dashboard to see your environments.
- An ability to use it with Tilt or Telepresence by following the relevant instructions.
- Ready-to-use playground to see Kardinal in action via GitHub Codespaces.
▶️ GitHub repo
📢 Reddit announcement
📖 Introduction article
#tools #dev
Kardinal is marketed as “the lightest-weight way” to spin up temporary environments. It aims to make this process as fast and easy as possible. To do so, Kardinal Kontrol is used as a cloud-hosted control plane and a service called Kardinal Manager is deployed to your Kubernetes cluster. Here’s what this tool provides:
- Various environments’ types: for single or multiple services with shared resources, for apps with isolated stateful resources, and for apps with full isolation.
- Templates to unify and customise the environments’ configuration.
- Plugins to simplify configuring dev versions of stateful or external services. Currently, there are plugins for Redis, Neon DB, PostgreSQL (seed data), and AWS RDS.
- Web dashboard to see your environments.
- An ability to use it with Tilt or Telepresence by following the relevant instructions.
- Ready-to-use playground to see Kardinal in action via GitHub Codespaces.
▶️ GitHub repo
📢 Reddit announcement
📖 Introduction article
#tools #dev
👍3
Here comes our newest digest of the prominent software updates in the Cloud Native ecosystem!
Release Spotlight: Talos 1.8.0
As many know, Talos is ”Linux designed for Kubernetes.” Last month, it was significantly updated with the v1.8.0 release. This version of Talos is based on Kubernetes 1.31.1, Linux 6.6.49, containerd 2.0.0-rc.4, and brought numerous new features. In terms of K8s, it got a slim Kubelet image with fewer utilities and switched to it as default, node annotations support in machine configuration, various CNI plugins bundled by default (for Flannel), kube-proxy with nftables backend as default, and DNS forwarding for CoreDNS Pods.
Some other changes include a rewritten disk management backend for more complex configurations, Ephemeral volumes support, support for the Apache CloudStack platform, default AppArmor profiles, support for custom trusted roots, and much more. You can find a full list of improvements in the What’s New document.
Other noticeable updates in the Cloud Native space:
1. mariadb-operator was updated to v0.0.33 featuring an ability to pause updates via
2. kubectl.nvim, a plugin for Neovim simplifying your work with Kubernetes, became mature with its v1.0.0. Its features now include configurable keymaps, resource selection with fuzzy completion, label selector filtering, customisable overview dashboard, real-time resource monitoring, Custom Resource support, Ingress and Helm integration, and much more.
3. k0s, an “all-inclusive Kubernetes distribution” from Mirantis for IoT, Edge, and bare metal, got its v1.31 based on Kubernetes 1.31. This release also supports running dual-stack clusters with kube-router and allows you to configure the bind address. Notably, this project recently applied to join CNCF Sandbox.
4. Flux 2.4 was released with the general availability of Flux S3-compatible Source API, Azure DevOps OIDC authentication, and various improvements in controller and CLI (including a new
5. Falco 0.39.0 was released, boasting 50 merged PRs (and 100+ more PRs for libs and drivers). They introduced new
#news #releases
Release Spotlight: Talos 1.8.0
As many know, Talos is ”Linux designed for Kubernetes.” Last month, it was significantly updated with the v1.8.0 release. This version of Talos is based on Kubernetes 1.31.1, Linux 6.6.49, containerd 2.0.0-rc.4, and brought numerous new features. In terms of K8s, it got a slim Kubelet image with fewer utilities and switched to it as default, node annotations support in machine configuration, various CNI plugins bundled by default (for Flannel), kube-proxy with nftables backend as default, and DNS forwarding for CoreDNS Pods.
Some other changes include a rewritten disk management backend for more complex configurations, Ephemeral volumes support, support for the Apache CloudStack platform, default AppArmor profiles, support for custom trusted roots, and much more. You can find a full list of improvements in the What’s New document.
Other noticeable updates in the Cloud Native space:
1. mariadb-operator was updated to v0.0.33 featuring an ability to pause updates via
Never update strategy to allow progressive fleet upgrades and operator upgrades. It also brought a new mariadb-operator-crds Helm chart, huge CRD size reduction, and basic auth support in the Galera agent.2. kubectl.nvim, a plugin for Neovim simplifying your work with Kubernetes, became mature with its v1.0.0. Its features now include configurable keymaps, resource selection with fuzzy completion, label selector filtering, customisable overview dashboard, real-time resource monitoring, Custom Resource support, Ingress and Helm integration, and much more.
3. k0s, an “all-inclusive Kubernetes distribution” from Mirantis for IoT, Edge, and bare metal, got its v1.31 based on Kubernetes 1.31. This release also supports running dual-stack clusters with kube-router and allows you to configure the bind address. Notably, this project recently applied to join CNCF Sandbox.
4. Flux 2.4 was released with the general availability of Flux S3-compatible Source API, Azure DevOps OIDC authentication, and various improvements in controller and CLI (including a new
flux create secret proxy command, the --recursive flag for flux diff kustomization, and Windows support via WinGet).5. Falco 0.39.0 was released, boasting 50 merged PRs (and 100+ more PRs for libs and drivers). They introduced new
basename and regex operators, append output feature (to add output text or fields to a subset of loaded rules), and dynamic driver selection in Falco with Helm.#news #releases
👍4❤1
Our newest bunch of interesting Kubernetes-related articles recently spotted online:
1. "Why Kubernetes is removing in-tree cloud-provider integration support in v1.31, and how it can affect you" by Reza Ramezanpour, Tigera.
2. "Write Your Next Kubernetes Controller in Rust" by Thomas Rampelberg, kty.
3. "PromQL Cheat Sheet: Must-Know PromQL Queries" by Prathamesh Sonpatki and Anjali Udasi, Last9.
4. "Kubecost with AWS integration: Implementing and automating with Terraform" by Anton Kirikov, Palark.
5. "Internal Developer Platform: Insights from Conversations with Over 100 Experts" by Artem Lajko.
6. "The Karpenter Effect: Redefining Our Kubernetes Operations" by Tanat Lokejaroenlarb, Adevinta.
#articles
1. "Why Kubernetes is removing in-tree cloud-provider integration support in v1.31, and how it can affect you" by Reza Ramezanpour, Tigera.
"In this blog post, we will examine cloud-provider integrations with Google Cloud Provider infrastructure, how it works, and how we can upgrade to later versions of Kubernetes without breaking our environment."
2. "Write Your Next Kubernetes Controller in Rust" by Thomas Rampelberg, kty.
"If you’re interested in interacting with Kubernetes outside of the golang ecosystem, kube-rs is fantastic. It has a great API, lots of examples and supports everything that I would have wanted. The best parts of client-go, controller-runtime and kubebuilder are all rolled into one, letting you build on top of the rich Rust ecosystem. [..] Keep reading to understand a little bit more about the functionality I believe is required and the differences between the languages."
3. "PromQL Cheat Sheet: Must-Know PromQL Queries" by Prathamesh Sonpatki and Anjali Udasi, Last9.
"PromQL can be a pain, but it's also incredibly powerful when you know how to use it. I've spent countless hours fumbling through queries, and I want to save you some of that hassle. Here's a collection of PromQL snippets that have helped me in the trenches."
4. "Kubecost with AWS integration: Implementing and automating with Terraform" by Anton Kirikov, Palark.
"In this article, we are going to take a look at the things Kubecost is capable of and how it integrates with AWS. We’ll also cover a case study in which we were able to help our customer take advantage of these features and use Terraform to automatically deploy everything they needed."
5. "Internal Developer Platform: Insights from Conversations with Over 100 Experts" by Artem Lajko.
"I’ve received insights from Internal Developer Platform operators, companies that failed, companies that regret it, companies that are happy with it, and those that turned it into a product or SaaS solution. I’ve explored the value it brings and found that, in the end, many solutions share a similar logic."
6. "The Karpenter Effect: Redefining Our Kubernetes Operations" by Tanat Lokejaroenlarb, Adevinta.
"Managing a fleet of over 2,000 Kubernetes nodes and 30 clusters across 25 marketplaces is no small feat. While using Kubernetes Cluster Autoscaler and Amazon EKS Managed Node Groups served us well initially, we began encountering operational hurdles that hampered our efficiency and scalability. The complexities of cluster upgrades, the rigidity in instance type selection and limitations in use-case flexibility were becoming increasingly burdensome. We needed a solution that could address these challenges head-on."
#articles
👍3
Just learning GitOps or interested in getting a ready-to-use Kubernetes cluster fully controlled by Flux? Take a look at this repo!
k8s-gitops titled “GitOps Workflow for Kubernetes Cluster” builds your infrastructure based on K3s, a well-known lightweight distribution. After your cluster is installed, it bootstraps Flux2 and other services, resulting in:
- Fully-featured Kubernetes cluster with networking (CoreDNS, MetalLB), cert-manager, monitoring (Prometheus, Grafana, InfluxDB, Thanos), logs (Vector, Loki), and storage (Ceph/Rook);
- Continuously updated workloads triggered by the availability of new container images in the repo (via Renovate);
- Notifications and alerts from Flux bot in Discord;
- Auto-upgraded K3s version (via System Upgrade Controller from Rancher);
- Backups based on VolSync.
▶️ GitHub repo
#tools #gitops
k8s-gitops titled “GitOps Workflow for Kubernetes Cluster” builds your infrastructure based on K3s, a well-known lightweight distribution. After your cluster is installed, it bootstraps Flux2 and other services, resulting in:
- Fully-featured Kubernetes cluster with networking (CoreDNS, MetalLB), cert-manager, monitoring (Prometheus, Grafana, InfluxDB, Thanos), logs (Vector, Loki), and storage (Ceph/Rook);
- Continuously updated workloads triggered by the availability of new container images in the repo (via Renovate);
- Notifications and alerts from Flux bot in Discord;
- Auto-upgraded K3s version (via System Upgrade Controller from Rancher);
- Backups based on VolSync.
▶️ GitHub repo
#tools #gitops
👍5
Stefan Prodan, a core maintainer of Flux, announced Flux Operator in the ControlPlane blog.
This project is described as “a new component in the Flux CD ecosystem that automates the lifecycle management of Flux components and streamlines GitOps workflows for Kubernetes clusters.” Technically, it works as a Kubernetes operator (CRD controller), which can be used (instead of
Find more information in this announcement and GitHub repo.
#news #gitops
This project is described as “a new component in the Flux CD ecosystem that automates the lifecycle management of Flux components and streamlines GitOps workflows for Kubernetes clusters.” Technically, it works as a Kubernetes operator (CRD controller), which can be used (instead of
flux bootstrap) to deploy Flux and manage it in your cluster. This approach strives to simplify the installation, configuration, and operation (e.g., upgrading, scaling, and improved observability) of Flux. The operator's code is written in Go and licensed under AGPL 3.0.Find more information in this announcement and GitHub repo.
#news #gitops
👍4❤1
KubeEdge became the 27th graduated CNCF project.
KubeEdge is “a Kubernetes Native Edge Computing Framework”. It brings Kubernetes’ native container orchestration and scheduling capabilities to the edge, allowing you to render edge application management, cloud-edge metadata synchronisation, and edge IoT device management. It was initially created in Huawei Cloud, open-sourced in 2018, accepted to the CNCF Sandbox in 2019, and promoted to Incubating status in 2020. Learn more about its graduation in this announcement.
If you’re also surprised to realise there are 27 graduated CNCF projects already, have a look at this fantastic timeline (attached to the post) created by Hoon Jo, a CNCF Ambassador.
#news #cncfprojects
KubeEdge is “a Kubernetes Native Edge Computing Framework”. It brings Kubernetes’ native container orchestration and scheduling capabilities to the edge, allowing you to render edge application management, cloud-edge metadata synchronisation, and edge IoT device management. It was initially created in Huawei Cloud, open-sourced in 2018, accepted to the CNCF Sandbox in 2019, and promoted to Incubating status in 2020. Learn more about its graduation in this announcement.
If you’re also surprised to realise there are 27 graduated CNCF projects already, have a look at this fantastic timeline (attached to the post) created by Hoon Jo, a CNCF Ambassador.
#news #cncfprojects
👍4
Here comes our newest digest of the prominent software updates in the Cloud Native ecosystem!
Release Spotlight: Percona Everest 1.2.0
Everest is a new Open Source project from Percona: its first public release occurred earlier this year. It is a Cloud Native platform that should deployed on Kubernetes (EKS and GKE are currently recommended) and implements DBaaS (Database as a Service) for PostgreSQL, MongoDB, and MySQL.
The most recent version of Everest, v1.2.0, was released on October 1st. It introduced RBAC (technical preview) to manage users' roles and permissions. Other changes include retention copies for PostgreSQL when setting up backup schedules, an improved Database overview page in UI, and new operators for PostgreSQL (2.4.1) and MySQL (1.15.0).
Other noticeable updates in the Cloud Native space:
1. Volcano, a Cloud Native Batch System (a CNCF Incubating project), released its v1.10.0 with numerous new features. It got support for the queue priority scheduling strategy, fine-grained GPU resource sharing and reclaim, Pod scheduling readiness support, sidecar container scheduling capabilities, new
2. pi-cluster project, providing an automated home-lab Kubernetes setup, has seen massive changes with v1.9.0. It migrated its GitOps solution from Argo CD to Flux CD, CNI from Flannel to Cilium, service mesh from Linkerd to Istio, and switched Keycloak SSO to an external PostgreSQL database (managed by CNPG operator).
3. Perses, an observability visualisation dashboard tool (a CNCF Sandbox project), was updated to 0.48.0 with a new Prometheus metric finder, based on the design from Prometheus 3.0. It also got a PieChart panel plugin and numerous enhancements for the Table, ScatterPlot and TracingGanttChart panels. Other features include auto-complete support in the TraceQL query editor and improvements in OAuth support.
4. Kubermatic Kubernetes Platform 2.26 was released. It added the ability to define default and enforced applications for user clusters, webhook backend support for api-server audit logs, customisable fields in Presets, support for custom annotations, Tinkerbell support for the bare-metal provider, Kubernetes v1.30 and v1.31 support, and more.
5. CloudNativePG 1.24.1 was released just yesterday with PostgreSQL 17.0 as its default image. It also introduced the ability to configure the
#news #releases
Release Spotlight: Percona Everest 1.2.0
Everest is a new Open Source project from Percona: its first public release occurred earlier this year. It is a Cloud Native platform that should deployed on Kubernetes (EKS and GKE are currently recommended) and implements DBaaS (Database as a Service) for PostgreSQL, MongoDB, and MySQL.
The most recent version of Everest, v1.2.0, was released on October 1st. It introduced RBAC (technical preview) to manage users' roles and permissions. Other changes include retention copies for PostgreSQL when setting up backup schedules, an improved Database overview page in UI, and new operators for PostgreSQL (2.4.1) and MySQL (1.15.0).
Other noticeable updates in the Cloud Native space:
1. Volcano, a Cloud Native Batch System (a CNCF Incubating project), released its v1.10.0 with numerous new features. It got support for the queue priority scheduling strategy, fine-grained GPU resource sharing and reclaim, Pod scheduling readiness support, sidecar container scheduling capabilities, new
vcctl commands, and performance optimisations for large-scale scenarios.2. pi-cluster project, providing an automated home-lab Kubernetes setup, has seen massive changes with v1.9.0. It migrated its GitOps solution from Argo CD to Flux CD, CNI from Flannel to Cilium, service mesh from Linkerd to Istio, and switched Keycloak SSO to an external PostgreSQL database (managed by CNPG operator).
3. Perses, an observability visualisation dashboard tool (a CNCF Sandbox project), was updated to 0.48.0 with a new Prometheus metric finder, based on the design from Prometheus 3.0. It also got a PieChart panel plugin and numerous enhancements for the Table, ScatterPlot and TracingGanttChart panels. Other features include auto-complete support in the TraceQL query editor and improvements in OAuth support.
4. Kubermatic Kubernetes Platform 2.26 was released. It added the ability to define default and enforced applications for user clusters, webhook backend support for api-server audit logs, customisable fields in Presets, support for custom annotations, Tinkerbell support for the bare-metal provider, Kubernetes v1.30 and v1.31 support, and more.
5. CloudNativePG 1.24.1 was released just yesterday with PostgreSQL 17.0 as its default image. It also introduced the ability to configure the
full_page_writes parameter in PostgreSQL, the logs pretty command in the cnpg plugin, and the ability to use custom Docker images in the pgadmin4 plugin.#news #releases
👍2🔥2❤1
Operators became an essential part of the Kubernetes ecosystem. There are hundreds of operators today, and you can find most of them at OperatorHub. Interestingly, there is another way to discover them, especially the most popular ones.
awesome-operators repo on GitHub lists 300+ Kubernetes operators and:
1. sorts them by GitHub stars;
2. dismisses the projects with no updates in the last 6 months.
… which proves to be quite useful! The only visible downside is that little additional information on each operator is provided (e.g., no categorisation).
#tools
awesome-operators repo on GitHub lists 300+ Kubernetes operators and:
1. sorts them by GitHub stars;
2. dismisses the projects with no updates in the last 6 months.
… which proves to be quite useful! The only visible downside is that little additional information on each operator is provided (e.g., no categorisation).
#tools
👍4❤2
The “Inside Argo: Automating the Future” movie has been announced; here comes its trailer. This documentary covers the story of the Argo project and features interviews from its founders and current maintainers, the representatives of Akuity, CNCF, CodeFresh by Octopus Deploy, Intuit, and Red Hat. The world premiere will happen during KubeCon NA 2024 on November 14.
P.S. Previously, you could’ve seen documentaries about other significant Cloud Native projects:
- “Kubernetes: The Documentary”: Part 1 (24:54) and Part 2 (31:18)
- “Prometheus: The Documentary” (27:00)
- “Inside Envoy: The Proxy for the Future” (31:49)
#gitops #video #news
P.S. Previously, you could’ve seen documentaries about other significant Cloud Native projects:
- “Kubernetes: The Documentary”: Part 1 (24:54) and Part 2 (31:18)
- “Prometheus: The Documentary” (27:00)
- “Inside Envoy: The Proxy for the Future” (31:49)
#gitops #video #news
❤3