Cloud Native News - CNN21/09

CNCF Community & Industry

• How I became a Kubernetes maintainer in 4 hours a week
  "I want to contribute to Kubernetes, but I don't know where to start." - Here is a real-life example!
• Cloud Native Computing Foundation Shares Schedule for KubeCon + CloudNativeCon Europe 2021 - Virtual
  This year, KubeCon + CloudNativeCon Europe is under the umbrella of "Forward Together." The packed program will offer some interesting talks for everyone and show the latest developments in the Cloud Native universe! And don't miss Max's talk on Seamless multi-cluster Communication and Observability with Linkerd .

Containers & Orchestration

• KubeEye: An Automatic Diagnostic Tool that Provides a Holistic View of Your Kubernetes Cluster
  "KubeEye is an open-source diagnostic tool for identifying various Kubernetes cluster issues automatically, such as misconfigurations, unhealthy components and node failures." It is based on Polaris and Node Problem Detector.
• Understanding the Kubernetes Event Horizon
  Of course, I used kubectl get events quite often. But TIL: "each event is an object that lives in a namespace, has a unique name, and fields giving detailed information." I never thought of that!

Networking

• Conntrack turns a blind eye to dropped SYNs
  As a systems engineer, it's only a matter of time before you're debugging network problems for the first time and come into contact with conntrack. This kind of deep dives is super valuable to understand the Linux Networking Stack just a little better.
• Cilium User Survey 2021
  Long-time readers of this newsletter probably already noticed that I'm super excited about the Cilium project. No question, I'm supporting their latest User Survey.

Security

• Threat Alert: Monero Miners Target Cloud-Native Dev Environments
  "In just four days, the attackers set up 92 malicious Docker Hub registries and 92 Bitbucket repositories to abuse these resources for cryptocurrency mining."
• Helm | Helm 2nd Security Audit
  "Helm has now completed a second security audit, funded by the CNCF. The first audit focused on the source code for the Helm client along with the process Helm uses to handle security. The second audit, performed by Trail of Bits, looked at the source code for the Helm client along with a threat model for the use of Helm."

Development

• K3S + K3D = K8S : a new perfect match for dev and test
  You all know K3s, k3d is a utility designed to run k3s in Docker easily. It provides a simple CLI to create, run, delete a fully compliance Kubernetes cluster with 1 to n nodes. A booster for your local "K8s" feeling development.
• Testing HashiCorp Terraform
  "Learn testing strategies for HashiCorp Terraform modules and configuration, and learn how to run tests against infrastructure."

Other

• Anaïs Urlichs - #100DaysOfKubernetes
  On her learning journey, Kubernetes Anaïs Urlichs shares her learnings every day while preparing for the CKAD exam. Thank you!
• AbsaOSS/k8gb
  "k8gb focuses on load balancing traffic across geographically dispersed Kubernetes clusters using multiple load balancing strategies to meet requirements such as region failover for high availability."

Photo by Nubelson Fernandes on Unsplash