Cloud Native News

Kubernetes is popular, complex, a security risk – and destined for invisibility
As Joe Beda admits: Kubernetes is complex. This Blog posts sketches what and why things related to Kubernetes need to get more approachable.

Alcide Kubernetes security platform supports PCI and GDPR security regulations
"Alcide, a Kubernetes security leader, now supports compliance scans for PCI and GDPR, enabling DevOps to deliver regulatory compliance checks rapidly and seamlessly alongside Alcide’s Kubernetes security capabilities."
Mirantis acquires Kontena Three months after Mirantis acquired Docker, they hunt down their new objective of desire: Kontena, the open source container and micro service developer platform.
Linkerd team propose service mesh-free way to run multi-cluster Kubernetes Ever heard of service mirroring? No? Linkerd maintainer Thomas Rampelberger introduced this idea of a service mirror operator which mirrors a remote service locally and configures endpoints to route traffic to the right IP. All without a service mesh!

CNCF Tools Overview: Fluentd – Unified Logging Layer
A great overview about Fluentd. its configuration and also alternatives. This way I learned about vector!
Introducing the Calico eBPF dataplane
The Calico team merged a new dataplane option to Calico, based on eBPF. This new dataplane will be included as a Tech Preview capability in the next version of Calico, v3.13.
Bring your ideas to the world with kubectl plugins
Adding functionality to kubectl? Possible with kubectl plugins! There is even krew, a kubectl plugin manager!

Logging FOMO is real and it hurts. Here’s how to overcome it
Everyone will know sooner or later: more logs do not necessarily lead to better logging...
Docker Images : Part II - Details Specific To Different Languages
The successor of Jérôme Petazzonis blog series about Docker Images. The first one was about Docker Image sizes.
How to monitor kube-controller-manager
The kube-controller-manager is one of the key components of every Kubernetes Cluster. Sysdig already explained us how to monitor kubelet, as covered in CNN-6.
Advanced Persistence Threats: The Future of Kubernetes Attacks
"What could an attacker who understands Kubernetes at a deep level be capable of?" - Ian Coldwater and Brad Geesaman try to give an answer.
The Difference Between API Gateways and Service Mesh
Marco Palladino, CTO of Kong, the API Gateway wrote a lengthy article about the goals of API Gateways and Service Meshes and - more importantly - when to chose what.
Cloud Cost Optimization at Scale: How we use Kubernetes and spot instances to reduce EC2 billing up to 80%
Saving costs of your Kubernetes cluster is possible via spot instances. This is a field report how it can be approached.
Kubernetes Journey — Up and running out of the cloud — How to setup the HAProxy Cluster with high availability
A deep into how to configure HAProxy Cluster with high availability with the help of Corosync and Pacemaker to load balance the kube-apiserver.