Author | Xun Ming, the heart of water, Yuan Yi, source of three co source
Industry News
CNCF plans to TOC rose to 11 people
Technical Oversight Committee (TOC) is one of the three core management agencies CNCF, starting from January 2020, TOC expand from nine to 11 members, two new positions are responsible for the end-user and project maintenance.
NASA team embrace K8s
Out of a cloud native, zero trust and open source stringent requirements, the development team finally chose to build a Kubernetes platform to achieve easy collaboration developers and non-developers, without using any sophisticated tools.
Traefik 2.0 officially released
Træfik is a new type http reverse proxy, load-balancing software, can easily deploy micro-services. It supports a variety of back-end (Docker, Mesos / Marathon, Etcd , BoltDB ...), you can automate the configuration and dynamic management. The large version of the update adds many features, such as the highly anticipated supports TCP, middleware custom route, the new Dashboard, canary release, flow replication. Traefik 2.0 With so many new features and enhancements, users can to help the transition from version 1.x to the new version, the official provides a migration guide .
Harbor 1.9 release
In this new version, adds some interesting features, such as allowing system administrators to limit the quota of project resources, you can customize your Tag retention policy, in order to support Webhook and CI / CD integration, replication has been enhanced, security vulnerability white list;
Significant progress upstream
Kubernetes project
service ip cidr canceled after the default value (before is 10.0.0.0/24), allowing users to avoid misconfiguration.
Avoid kubelet http probe, because when the payload is too large truncation, return ErrLimitReached. In fact, from the beginning v1.16, has limited the length of the response body is no more than 10KB.
Delete namespace when some resource often occur due to the failure to properly remove delete hang finalizer caused to live. Now by increasing the status namespace of the condition, to display the namespace in which the number of resources finalizer has not been removed, the default is to start after 60s;
Ratelimiter guaranteed by a separate delete retry interval within 1min.
Currently kubectl cpcommand broke a number of CVE, you are going to start sig cli directly deprecate out of this command , but for the convenience of users, the future will come again achieved in other ways. The KEP proposed by standalone pipe + tar way to solve path traversals, symlink directory escapes, tar bombs, and other exploits.
Increased CRI interfaces to perceive OS / Arch.
Knative project
serving 0.9 release on September 17, which is the official version of Serving v1 second release candidate, the main change is the model of the v1 API version is available.
eventing 0.9 released in September 18 The updated version of the much-related functions, as a whole tends to be stable.
Open source projects recommended
Agones 1.0
Agones is Google and game companies jointly developed by Ubisoft game server. It is used on a Kubernetes hosting, operation and expansion of the library dedicated game server, the user can flexibly adjust their game in their host configuration on demand.
This week Recommended Reading
1.《The Problem with Cloud Native》
Now, most people know the basics of cloud computing, but really understand it for most people is still a problem. Take the popular term "Cloud Native", the IT expert to use it to describe the "get" cloud strategy, people, teams and companies, and they use it to get maximum effectiveness. Other people use it to describe the building in a cloud computing environment, deploying and managing things method.
2.《The first Kubernetes Project Journey Report is out!》
Kubernetes is the most widely used container orchestration platform, often called "cloud of Linux". Kubernetes hosted by Cloud Native Computing Foundation (CNCF). This report attempts to objectively assess the state of the project and how CNCF Kubernetes Kubernetes influence the progress and growth.
3. " typical problems 6 K8s logging system construction, you encountered a few? "
With K8s constantly updated iteration, using K8s logging system construction developer, gradually we encounter a variety of complex problems and challenges. In this article, the author combines his many years of experience, analysis K8s log system construction difficulties and look forward to provide a useful reference for the reader.
"Alibaba Cloud native micro-channel public number (ID: Alicloudnative) focus on micro service, Serverless, container, Service Mesh and other technical fields, focusing popular technology trends in cloud native, cloud native large-scale landing practice, do most understand cloud native developers technology public number. "