Cloud Native Weekly: Istio 1.20.0 released

From data to large model application, on November 25th, Hangzhou Yuanchuang Conference was held to share development tips.

Open source project recommendations

DevPod

DevPod is a pure client tool that creates reproducible developer environments based on devcontainer.json on any backend. Each developer environment runs in a container and is specified via devcontainer.json. With DevPod providers, these environments can be created on any backend, such as a local machine, a Kubernetes cluster, any accessible remote machine, or a virtual machine in the cloud.

Gemini

Gemini is a Kubernetes CRD and operator for managing volume snapshots. You can periodically create snapshots of the data on PersistentVolumes, clear old snapshots, and restore the snapshots with minimal downtime.

MTKPI

MTKPI - Multi-tool Kubernetes penetration testing image. This docker image contains all the most common tools required for Kubernetes penetration testing.

Article recommendation

5 Best Alerting and Monitoring Tools for Kubernetes

This article introduces the top five alerting and monitoring tools for Kubernetes. The article points out that Kubernetes, as the preferred choice for running applications in containers, has the advantages of scalability, flexibility, and elasticity. However, managing and monitoring Kubernetes can be quite difficult. Therefore, monitoring and alerting are key to ensuring smooth and reliable operation of applications. Monitoring and alerting are practical ways to effectively operate a Kubernetes cluster. They enable you to collect metrics, logs, and trace data for clusters, nodes, Pods, containers, services, and applications, and to visualize and trace the data using dashboards, charts, and tables. analyze. Alert on anomalies, errors, failures, and SLA violations with rules, thresholds, and notifications, and take action by investigating the root cause, resolving the issue, or escalating to the appropriate team.

Top 5 Machine Learning Tools for Kubernetes

This article introduces five top tools for machine learning on Kubernetes. The article describes the features, benefits, and use cases of each tool, as well as the criteria for selecting these tools, such as functionality, ease of use, popularity, and innovativeness. By using these tools, users can more easily perform machine learning tasks on Kubernetes and improve the efficiency and reliability of their workflows.

8 different types of Kubernetes deployment strategies

This article introduces eight different deployment strategies of Kubernetes, including Recreating, Rolling, Blue/Green, Canary, A/B, Ramped Slow Rollout, Best-Effort Controlled Rollout, and Shadow Deployment. It explains the advantages and uses of each strategy, helping readers make informed choices when deploying and upgrading applications.

Cloud native dynamics

Kubescape 3.0 released

Kubescape is the next generation of CNCF’s Kubernetes security posture management tool and has recently released v3.0.

Kubescape 3.0 adds the following new features:

Store compliance and container scan results as resources within the Kubernetes cluster
Scan container images for vulnerabilities via command line interface
Report vulnerabilities for all images in the cluster
New at-a-glance security scan to help you set a baseline for cluster security
Highlight high-risk workloads: those that could cause the most harm if compromised
Improved display output
New competency-based Helm chart
Prometheus metrics per workload, namespace and cluster
Alert through Prometheus Alertmanager
Send data to a managed service outside the cluster

OpenCost announces integration with Microsoft AKS cost analysis tool

OpenCost is integrating with Microsoft's new Azure Kubernetes Service (AKS) cost analysis tool to enable usage metrics collection. Microsoft Azure customers now have native visibility into cost allocations based on Kubernetes-specific structures.

AKS Cost Analysis is a free add-on for standard and advanced AKS clusters and is available to customers at no charge. It provides cost allocation reporting directly in the Azure portal. AKS customers can now easily visualize their Kubernetes cost allocations as a basis for further optimization and anomaly detection.

Istio 1.20.0 released

Istio 1.20.0 is released. This is the last Istio version in 2023. The following are the main changes in this version:

Gateway API
Improved external name service support
Consistent Envoy filter ordering
Extended support for the network WasmPlugin
TCP metadata exchange enhancements
Insert root certificate rotation
Traffic mirroring now supports multiple destinations
...

This article is published by OpenWrite, a blog that publishes multiple articles !