Week Ending May 12, 2024

https://lwkd.info/2024/20240516

Developer News

The Azure File CSI Driver is affected by CVE-2024-3744; please upgrade ASAP.

The Kubernetes documentation is now available in 16 different languages. Thanks to every community member who helped on the translation and launch of the new Bengali website.

The planning for the Kubernetes Contributor Summit NA 2024 has started and the organizer team is looking for shadows and volunteers. Some roles do not require being at the KCS in person.

Do you use etcd clusters in addition to the one embedded in Kubernetes? If so, SIG-Etcd and SIG-Cluster-Lifecycle want to hear from you about a potential new etcd operator.

SIG Cloud Provider The new WG-Serving has published their workstream.

Release Schedule

Next Deadline: Production Readiness Freeze, June 6th, 2024

Angelos Kolatis, 1.31 Release Team Lead, has shared the 1.31 timeline. Important dates:

PRR Freeze: June 6

Enhancements Freeze: June 14

Code Freeze: July 10

Test & Docs Freeze: July 30

Release target: August 13

The Call for Enhancements for v1.31 is out! Make sure to opt-in well before the Production Readiness Review Freeze on June 6th so that there is enough time for reviews.

Patch releases for all supported versions are expected out this Wednesday.

Other Merges

Add kubectl logs --all-pods option to dump all pods in a set

kubectl port-forward can autocomplete

Resolve more corner cases with job finalizers

PersistentVolumeLabel admission plugin won’t support in-tree providers, which was a better fix than removing it

Count EvaluatedNodes better

Add feature gates for strict enforcement of CEL cost calculation

Filter pods before checking queueability, and make sure PreFilters return valid nodes

Warn users if they are running an Etcd version that does not support watch progress

Daemonsets include old unhealthy pods in their budget

DisableHTTP2 flag in the secure serving options

CSILimit scheduler plugin has queueing hints

Promotions

DisableNodeKubeProxyVersion to Beta

MatchLabelKeysInPodAffinity to Beta

Deprecated

Now that the Legacy Cloud Providers are removed try to remove them from staging, break the build, and replace them; legacy cloud provider staging will actually be removed once 1.30 is EOL

GA feature gate removal: ServiceNodePortStaticSubrange, CSINodeExpandSecret

CephRBD and CephFS in-tree provides are removed

Version Updates

golang to 1.22.3

Subprojects and Dependency Updates

kubernetes-csi/csi-driver-nfs to v4.7.0: add StorageClass definition in Helm charts

cri-o/ocicni to v0.4.3: added support for cni STATUS verb

prometheus/prometheus to 2.52.0: add a new metric prometheus_sd_kubernetes_failures_total to track failed requests to Kubernetes API

kops to v1.28.5: allow overlap of pod/node CIDR and service CIDR

cloud-provider-openstack to 1.30.0: add support to only run selected CSI services

via Last Week in Kubernetes Development https://lwkd.info/

May 16, 2024 at 01:00AM

Blog: From Code to Quill: Embark on a Legendary Kubernetes Quest with SIG Docs

https://www.kubernetes.dev/blog/2024/05/16/contribute-as-sig-docs-reviewer/

You’ve likely heard the adage, “Contributing isn’t just about writing code”, whispered in forums or seen etched into the digital walls of open source communities. But what depth of truth lies within this ancient wisdom, especially in the vast, evolving world of Kubernetes?

Today, contributing to open source extends far beyond the realm of coding. It’s an inclusive journey that welcomes the diverse skills of all who wish to be a part of it. Whether you’re a seasoned developer or someone whose strengths lie outside traditional programming, your contributions hold immense value.

Imagine yourself embarking on a journey that leverages your expertise and love for free software to enhance your capabilities and strengthen the very foundation of the Kubernetes ecosystem. This is a real opportunity for you to shine, to make an indelible mark on a project that powers some of the most critical infrastructure in the world today.

Your journey begins with a single step: joining the Special Interest Group (SIG) Docs. Here, your talent for articulating complex concepts, your keen eye for detail, and your unwavering commitment to clarity become your most powerful tools. As a contributor, you can transform dense technical landscapes into navigable pathways, making Kubernetes accessible to all.

This is your call to adventure, an invitation to expand beyond the familiar territories of code and into the rich, uncharted domains of documentation and collaboration, empowering a global community of users and contributors.

Why become a SIG Docs reviewer?

The Kubernetes project depends substantially on the SIG Docs to ensure that documentation is accurate, up to date, and easily accessible. By becoming a reviewer, you can help users and contributors navigate and understand Kubernetes more effectively. In addition, reviewing documentation provides unique opportunities for:

Expanding your Kubernetes knowledge: Engage deeply with new features and functionalities by reviewing their documentation.

Improving your technical writing skills: Develop an eye for detail and clarity in technical writing.

Strengthening the Kubernetes community: Help maintain the high quality of Kubernetes documentation, supporting both new and experienced users.

Building your network: Expanding your professional network, and getting together with contributors from around the globe.

Who are we looking for?

We’re seeking open source enthusiasts with:

Experience of Git and GitHub, comfortable with the process of reviewing pull requests and providing constructive feedback.

Familiarity with Markdown and documentation frameworks (Hugo experience is a plus but not required).

A passion for making complex technical concepts understandable and accessible.

Experience in technical writing or documentation review in open source projects is beneficial, but not mandatory. Kubernetes experience is welcome at all levels. Those less familiar with Kubernetes or containers can provide valuable fresh perspectives for beginners accessibility. We value diversity of experiences and the fresh eyes you can provide to make sure our content is clear and understandable for everyone.

How to get started

Becoming a SIG Docs reviewer is a journey that starts with familiarizing yourself with the Kubernetes documentation contribution process. Here are the steps to get you started:

Familiarize Yourself with SIG Docs: Start by reading the SIG Docs contributor guide to understand how documentation contributions are made.

Join the Kubernetes Slack: Connect with the SIG Docs community on the

sig-docs channel. It’s a great place

to ask questions, find mentorship, and get to know the community.

Start Reviewing Pull Requests: Look for open pull requests labeled with good first issue or help wanted. These are great for beginners. Leave constructive feedback and suggestions. Familiarize yourself with the content guide and the style guide to provide more effectively reviewing Pull Requests.

Attend SIG Docs Meetings: Participate in the SIG Docs meetings. These meetings are an excellent opportunity to meet fellow contributors, discuss documentation improvements, and volunteer for reviewing tasks.

Shadow an Experienced Reviewer: To better understand the review process, sign up for our official PR Wrangling shadow program where you will be able to shadow an experienced reviewer and learn best practices and tips for reviewing efficiently and effectively.

Contributor Ladder: Familiarize yourself with the CNCF contributor ladder, which guides your progression from newcomer to advanced contributor roles in the Kubernetes community.

What’s next?

After consistently contributing to documentation reviews and demonstrating your understanding of Kubernetes documentation standards, you can express your interest in becoming an official SIG Docs reviewer. Engage with the SIG Docs chairs or leads on the public Slack channel or during SIG Docs meetings to discuss the next steps.

See you in the docs!

Becoming a SIG Docs reviewer is more than contributing; it’s embracing the heart of the Kubernetes community 🚀. Enhance your knowledge and writing skills while contributing to our valuable documentation. This is your opportunity to guide others with your expertise and make a lasting impact. Welcome aboard—see you there! 🌟

via Kubernetes Contributors – Contributor Blog https://www.kubernetes.dev/blog/

May 15, 2024 at 08:00PM

Troubling iOS 17.5 Bug Reportedly Resurfacing Old Deleted Photos

There are concerning reports on Reddit that Apple's latest iOS 17.5 update has introduced a bug that causes old photos that were deleted – in some cases years…

May 15, 2024 at 03:23PM

via Instapaper

Folding for Lucy

https://chrisshort.net/folding-for-lucy/

After the death of my niece, Lucy, I decided to donate a portion of our household compute to cancer research through Folding@Home

via ChrisShort.net https://chrisshort.net/

May 15, 2024 at 03:00AM

Cybersecurity Event Update

Cybersecurity Event Update Note for Media: The statement below can be attributed "to an Ascension spokesperson". May 13 - 4:30pm CT Ascension previously…

May 14, 2024 at 02:16PM

via Instapaper

Oracle goes vegan: Dumps Terraform for OpenTofu

May 14, 2024 at 02:09PM

via Instapaper

Changing of the Guard: "AWS Appoints Matt Garman as CEO"

This morning’s announcement that Adam Selipsky would be stepping down as AWS CEO, with longtime Amazonian Matt Garman stepping into the role, feels like a…

May 14, 2024 at 01:50PM

via Instapaper

jsha/minica: minica is a small, simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used.

Minica is a simple CA intended for use in situations where the CA operator also operates each host where a certificate will be used. It automatically generates…

May 14, 2024 at 10:49AM

via Instapaper

IBM open-sources its Granite AI models - and they mean business

BlackJack3D/Getty Images Open-sourcing large language models (LLMs) isn't easy. Just ask the Open Source Initiative (OSI), which has been working on an…

May 14, 2024 at 09:24AM

via Instapaper

AHA, H-ISAC warn hospitals about Black Basta following Ascension cyberattack

The Health Information Sharing and Analysis Center issued a threat alert Friday about the Russia-backed ransomware group Black Basta, warning of its accelerated…

May 13, 2024 at 03:32PM

via Instapaper

Mastering Kubernetes: Dive into Service and Network APIs

A guide into the world of Kubernetes Services and Network APIs. In this video, we explore the fundamental concepts of Kubernetes networking, including how pods communicate within a cluster and how external traffic finds its way to the right place. We'll take a closer look at Services as a way to expose your applications, defining ClusterIP, NodePort, LoadBalancer, Ingress, and Gateway API.

Kubernetes #KubernetesService #KubernetesIngress #GatewayAPI

Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/kubernetes/services-ingress-cluster-api 🔗 Kubernetes: https://kubernetes.io 🎬 Mastering Kubernetes: Dive into Workloads APIs: https://youtu.be/U6weXlzQxoY 🎬 Gateway API - Ingress And Service Mesh Spec Replacement?: https://youtu.be/YAtXTI3NKtI

▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please use https://calendar.app.google/Q9eaDUHN8ibWBaA7A to book a timeslot that suits you, and we'll go over the details. Or feel free to contact me over Twitter or LinkedIn (see below).

▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/

▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox

▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Kubernetes Service and Network APIs 01:15 Kubernetes Without Services 03:39 Kubernetes Services with ClusterIP 09:05 Kubernetes Services with NodePort 12:21 Kubernetes Services with LoadBalancer 16:21 Kubernetes Ingress 22:41 Kubernetes Gateway API 26:55 Goodbye (For Now)

via YouTube https://www.youtube.com/watch?v=-1H0BeN9hIk