Cloud Native News - CNN41

CNCF & Community

• Announcing the 2020 Steering Committee Election Results
  The 2020 Steering Committee Election is now complete. All 3 members are elected by the Kubernetes Community. The newly elected members of the Kubernetes Steering Committee serve for 2 years.
• Announcing the 2020 OpenTelemetry Governance Committee Election
  The OpenTelemetry project is looking for long term contributors to open the governance committee and to steer the future of the OpenTelemetry engagement.
• Cloud Native Computing Foundation Announces Rook Graduation
  The cloud-native storage tool has grown its contributor base by 260% since joining CNCF. This massive growth shows the need for and interest in software-defined storage solutions. Therefore, Rook moves on from incubation to graduation.
• Helm Hub Moving To Artifact Hub
  Your Helm charts of trust getting a new home. Facing scaling issues, Helm Hub migrates its charts to Articat Hub, a CNCF Sandbox project, which will get with this move some fresh wind in its sails.

CI/CD

• Terraform at Scale — Modualized Hierarchical Layout and Continuous Delivery of Infrastructure
  With growing infrastructure, the complexity of your IaC grows as well. While every approach has its limits, the modularized hierarchical layout seems to keep even massively scaled infrastructure in sync with its corresponding definitions.

Cloud-Native Industry

• Announcing HashiCorp Boundary
  HashiCorp announced on their house conference HashiConf two new exciting projects. HashiCorp Boundary is a simple and secure remote access — to any system anywhere based on trusted identity. Boundary looks like a promising alternative to common but legacy access ways.
• Announcing HashiCorp Waypoint
  The other pair of shoes announced by HasiCorp is Waypoint, a supporting developer with a consistent workflow to build, deploy, and release applications across any platform. Waypoint allows you to create, deploy, and release software; as simple as possible, developer centric.

Networking

• How to perform a CNI Live Migration from Flannel+Calico to Cilium
  Learn how to migrate from one CNI to another CNI without any downtime. This blog is here to save the day and explain the complexities of switching the overlay network.
• Yet Another Kubernetes DNS Latency Story | Beat Engineering Blog
  If you haven't encountered a DNS latency issue with Kubernetes, you probably just haven't dig deep enough. Read this article written by Andreas Strikos.
• Container networking is simple
  To most people, containers and especially container networking is indistinguishing from black magic. Ivan is doing an excellent job explaining its primitives.

Observability

• Achieving multi-tenancy in monitoring with Prometheus & the mighty Thanos Receiver
  "One of the common challenges of distributed monitoring is to implement multi-tenancy. Thanos receiver is a Thanos component designed to address this common challenge. The receiver was part of Thanos for a long time, but it was EXPERIMENTAL. Recently, Thanos went GA with the Receiver component."

Security

• CVE-2020-15157 "ContainerDrip" Write-up - Darkbit
  "If an attacker publishes a public image with a crafted manifest that directs one of the image layers to be fetched from a web server they control and they trick a user or system into pulling the image, they can obtain the credentials used by ctr/containerd to access that registry."

Containers & Orchestration

• Learn about Podman and forget Docker
  Docker always served us well - it is the dawn of a new set of container tooling... Daemonless containers, containers running as non-root, building OCI compliant images without Docker... Read it, learn it, love it!

Other

• Minecraft as a k8s admin tool. KubeCraftAdmin : The adventurer’s admin…
  Bringing the best of two worlds together, KubeCraft reflects Kubernetes deployments, services, and replicas within Minecraft. Is this the future of cluster administration? Treating the cows like cattle again?

Photo by Johannes Plenio on Unsplash