One week of cloud native news:
- Supply chain security project in-toto upgraded to CNCF incubation project
- Cloud-native observability micro-survey results released
- Linkerd releases new feature for Kubernetes automatic multi-cluster failover
- Solo.io Introduces Gloo Mesh Enterprise 2.0
- Open source project recommendation
- Article recommendation
Enterprise Management Associates (EMA) is an industry-leading analyst firm dedicated to providing in-depth insights into all aspects of IT and data management technology. Recently, EMA analyst Torsten Volk said that independent of CNCF's investigation, EMA has noticed the strong momentum of Linkerd, Linkerd is more concise, it will add more enterprise-level functions in a targeted manner, thanks to this, its users The group is growing. They believe that in this raging service mesh war, Linkerd's advantage is becoming more and more obvious, and maybe the final winner is really Linkerd. What do you think of it?
Cloud Native Dynamics
Supply chain security project in-toto upgraded to CNCF incubation project
A few days ago, the CNCF Technical Oversight Committee (TOC) has voted to accept in-toto as an incubation project of CNCF.
in-toto is a framework for securing the software supply chain by collecting and validating relevant data. It does this by enabling libraries to gather information about software supply chain behavior and allowing software consumers and program managers to publish policies on software supply chain practices that can be validated before software is deployed or installed. In a nutshell, it helps capture what's happening in the software supply chain and make sure it's happening according to a defined policy.
The project was created in 2015 and joined the CNCF sandbox in 2019. At the same time, in-toto is also the first project to pass the CNCF TAG security security assessment.
Cloud-native observability micro-survey results released
CNCF, in partnership with the CNCF Observability Technical Advisory Group (TAG), will conduct a micro-survey of the cloud-native community in late 2021 to understand how organizations are using observability tools. The survey received 186 responses from the CNCF and Kubernetes communities.
The survey report shows that three CNCF observability projects lead the way in adoption: Prometheus (86%), OpenTelemetry (49%), and Fluentd (46%).
For more details, download the report .
Linkerd releases new feature for Kubernetes automatic multi-cluster failover
A few days ago, Linkerd released a new failover feature. This feature enables Linkerd to automatically redirect all traffic from a failed or unreachable service to one or more replicas of that service, including replicas on other clusters.
The failover policy is implemented as a Kubernetes operator that can be added to an existing Linkerd deployment and can be applied to a single cluster, but is particularly useful for multi-cluster deployments. Linkerd already provides powerful cross-cluster communication capabilities for any cluster topology, including multi-cloud and hybrid cloud; is completely transparent to applications; zero-trust compliant; and does not introduce any single point of failure (SPOF, single) into the system points of failure). For this feature set, the new failover operator now adds automation, allowing Kubernetes users to configure failure conditions, in which case Linkerd will automatically switch traffic between one or more services.
Solo.io Introduces Gloo Mesh Enterprise 2.0
Last week, Solo.io launched Gloo Mesh Enterprise 2.0, the latest version of its Istio service mesh and control plane that simplifies service-to-service connections in distributed applications.
Key enhancements in the new release include multi-tenant workspaces, a new unified API for east-west and north-south traffic management, a new UI for observability, and improved VM support.
Launched last year, Gloo Mesh Enterprise is an Istio-based Kubernetes-native solution for multi-cluster and multi-mesh service mesh management.
New features in v2.0, such as multi-tenant workspaces, enable users to set fine-grained access control and editing permissions based on roles on shared infrastructure, enabling teams to collaborate in large environments. Users can manage traffic, establish workspace dependencies, define cluster namespaces, and control destinations directly in the UI. And strategies can be reused and adjusted using tags.
Open source project recommendation
Bosun
Bosun is a domain-specific language (DSL) for monitoring alarms. It supports querying metric data from multiple TSDB databases, converts the query results into data types defined by Bosun and processes them uniformly, and provides functions such as alarm triggering and alarm notification. Supports OpenTSDB, Graphite, Prometheus, influxDB, etc.
json_exporter
This is a Prometheus exporter that grabs remote JSON content and converts it to metrics in Prometheus format.
rr
rr is a debugging tool produced by Mozilla, which can record the context of the program runtime, including threads, stacks, registers, etc.
HUBFS
HUBFS is a file system based on GitHub and Git, which can mount remote Git repositories into local directories, which can be accessed by any program.
tinysearch
tinysearch is a lightweight fast full-text search engine designed as an on-site search plugin for static websites (eg Jekyll, Hugo, etc.). It's written in Rust and needs to be compiled into WebAssembly to run in the browser.
Akcess
Akcess is a CLI tool that can be used to quickly generate kubeconfigs for various custom permissions. For example, to allow only Pods in the list default namespace:
$ akcess allow --verb list --resource pods
Article recommendation
KubeKey 2.0.0 released: making offline K8s deployment more convenient
On March 8, 2022, KubeKey 2.0.0 was officially released, which is the 7th official version of KubeKey and a very important version. This version adds the concepts of manifest and artifact, providing a solution for users to deploy Kubernetes clusters offline.
The future of Kubernetes
There may be better alternatives for developers to most traditional Kubernetes resources, and using alternatives will improve the way we develop and operate cloud-native applications for years to come. After all, Kubernetes is a platform to build on, it's not our ultimate goal.
Linkerd is about to win the service mesh war?
EMA analyst Torsten Volk said that, independent of the CNCF survey, Enterprise Management Associates (EMA) noted the strength of Linkerd. Linkerd is more concise, and it will add more enterprise-level features in a targeted manner. Thanks to this, its user base is constantly growing.
This article is published by OpenWrite , a multi-post blog platform !