Introduction | Dalec
Introduction | Dalec
Dalec is a project aimed at providing a declarative format for building system packages and containers from those packages. Our goal is to provide a secure and…
August 29, 2024 at 10:55AM
via Instapaper
1_r/devopsish
will-moss/isaiah: Self-hostable clone of lazydocker for the web. Manage your Docker fleet with ease
will-moss/isaiah: Self-hostable clone of lazydocker for the web. Manage your Docker fleet with ease
August 29, 2024 at 10:55AM
via Instapaper
Internet outages spread across Ukraine following Russian air strikes on critical infrastructure
Millions of Ukrainians have experienced internet disruptions over the last two days following Russian missile and drone strikes targeting critical infrastructure throughout the country.
Nvidia has become world's 'most important stock,' adding pressure to upcoming earnings report
Nvidia has been the primary beneficiary of the AI boom, as a handful of the richest technology companies order billions of dollars of the company's processors.
Three Kinds of Research
The secret fourth kind is 'we applied a standard theory to their map of every tree and got some suspicious results.'
Archive
Last Week in Kubernetes Development - Week Ending August 25 2024
Week Ending August 25, 2024
https://lwkd.info/2024/20240828
Developer News
KubeCon + CloudNativeCon + Open Source Summit China 2024 happened last week in Hong Kong. The event had various talks on AI, running AI workloads on Kubernetes and the CNCF ecosystem, and updates from various maintainers of different CNCF projects. There was also a keynote by Linus Torvalds. Videos will be posted in the CNCF YouTube channel soon.
Release Schedule
Next Deadline: 1.32 cycle begins, September 9
We’re in the period between releases. Shadow applications for the v1.32 release team are open until September 6. The tentative dates for the v1.32 cycle are from September 9th to December 11th, 2024.
Featured PRs
126745: Improve PVC protection controller’s scalability by batch-processing PVCs by namespace & caching live pod list results [fixed dead loop issue with idle work queue]
This PR significantly enhances the scalability of the PVC Protection Controller by implementing batch processing of PVCs by namespace and caching live pod list results. It resolves a critical dead loop issue in the idle work queue and addresses performance bottlenecks in large clusters by reducing the number of API calls required for PVC deletion. As a result, the kube-controller-manager’s CPU usage is optimized, ensuring more efficient and reliable operation, especially in environments with high pod and PVC churn.
KEP of the Week
KEP 3998: Job success/completion policy
This (KEP) aims to enhance Indexed Jobs by allowing custom success criteria, so a job can be marked as succeeded based on specific pod indexes, such as leader pods, rather than requiring all pods to succeed. It supports distributed computing frameworks like MPI and PyTorch, where only certain pods determine job success. The proposal does not alter the default behavior for jobs without a SuccessPolicy or extend this feature to NonIndexed Jobs in its first iteration.
This KEP is tracked for beta release in v1.31.
Other Merges
kubeadm now sorts the result of MergeKubeadmEnvVars, and allows mixing of flags `–print-manifest and –config
Printer unit tests added for DRA resources
transformation_operations_total metric gets additional resource label
pkg/kubelet/cm/dra migrated to contextual logging
Fix for estimated cost for Kubernetes defined CEL types for equals
Common apiserver for all testcases in CEL tests
kube-scheduler removes non-csi volumelimit plugins
Scheduling throughput thresholds set in scheduler_perf tests
Fix to DRA with structured params to make unschedulable pods schedulable again after ResourceSlice cluster events
kube-proxy now uses field-selector clusterIP!=None on Services to avoid watching for Headless Services
NominatedPodsForNode moved to scheduling queue to make the invocations more direct
Events cached in the scheduling queue are cleared as soon as possible when SchedulerQueueingHints is enabled so that scheduler consumes less memory.
New e2e tests for Node endpoints
Deprecated
Graduated feature gates being removed: ValiatingAdmissionPolicy, StableLoadBalancerNodeSet, CloudDualStackNodeIPs, LegacyServiceAccountTokenCleanUp
kubeadm removes the deprecated flag ‘–experimental-output’
kubeadm removes the deprecated sub-phase of ‘init kubelet-finilize’ called experimental-cert-rotation
Version Updates
corefile-migration to v1.0.24
Subprojects and Dependency Updates
prometheus v2.54.1 allow multiple samples on same series, with explicit timestamps
containerd v1.7.21 regenerate introspection UUID if state is empty
grpc v1.66.1 enable EDS dualstack support by default; also v1.66.0
via Last Week in Kubernetes Development https://lwkd.info/
August 28, 2024 at 07:00PM
Software Licensing Changes and Their Impact on Financial Outcomes
Software Licensing Changes and Their Impact on Financial Outcomes
Another day, another rug pull. At least that’s what the cynical might say, as we as an industry once again are discussing the fallout of another company…
August 27, 2024 at 11:04AM
via Instapaper
Abusing Distroless containers: shell commands on shell-less containers with Harsha Koushik
Abusing Distroless containers: shell commands on shell-less containers, with Harsha Koushik
https://kube.fm/abusing-distroless-harsha
In this KubeFM episode, Harsha explores the intricacies of Kubernetes security, focusing on the benefits and misconceptions of Distroless container images and the broader aspects of container security.
You will learn:
The advantages and limitations of Distroless container images: understand why these images are smaller, have a reduced attack surface and are not inherently secure.
Best practices for container security: gain insights into selecting base images, managing dependencies, and fortifying your infrastructure at every layer.
Supply chain security: explore how the supply chain can be an attack vector and the importance of signing artifacts and validating sources.
Emerging Kubernetes tools and future projects: discover the latest tools Harsha is monitoring and get a sneak peek into his upcoming projects, including a new podcast and a tool for simulating multistage attacks in cloud-native environments.
Sponsor
This episode is sponsored by Learnk8s — estimate the perfect cluster node with the Kubernetes Instance Calculator
More info
Find all the links and info for this episode here: https://kube.fm/abusing-distroless-harsha
Interested in sponsoring an episode? Learn more.
via KubeFM https://kube.fm
August 27, 2024 at 08:00AM
You're not mature enough to release your first version as v1 · Jamie Tanna | Software Engineer
Why you should never release your first iteration of a project as your v1.0.0, but it should instead by v0.1.0.
AI to go nuclear? Data center deals say it’s inevitable
Anticipating astronomical compute-intensive AI workloads, hyperscalers and heavy data center operators are turning to energy providers for nuclear-fueled solutions in a ‘global arms race for power … like nothing we have ever seen before.’
Seattle Airport Blames Outages on Possible Cyberattack
The Port of Seattle, including the SEA Airport, is experiencing system outages likely caused by a cyberattack.
Anthropic publishes the 'system prompts' that make Claude tick | TechCrunch
Anthropic has published the system prompts for Claude, its family of generative AI models. They instruct the model how it should -- and shouldn't -- behave.
In a Kyiv hangar, Ukraine launches a cyber range for everyone
Beneath the wings of retired Soviet-era aircraft, Ukrainians recently took part in a cyber range program that organizers hope to expand far beyond the usual participants from military and intelligence agencies.
2 TB of Sensitive "ServiceBridge" Records Exposed in Cloud Misconfiguration
Follow us on Twitter (X) @Hackread - Facebook @ /Hackread
Revolutionary Quantum Compass Could Soon Make GPS-Free Navigation a Reality
A milestone in quantum sensing is drawing closer, promising exquisitely accurate, GPS-free navigation. Peel apart a smartphone, fitness tracker or virtual reality headset, and inside you’ll find a tiny motion sensor tracking its position and movement. Bigger, more expensive versions of the same tec
When A.I.’s Output Is a Threat to A.I. Itself
As A.I.-generated data becomes harder to detect, it’s increasingly likely to be ingested by future A.I., leading to worse results.
CISA Finding: 90% of Initial Access to Critical Infrastructure Is Gained Via Identity Compromise. What Can You Do About It?
Conventional wisdom suggests the keys to protect critical infrastructure against cyberattacks are network segmentation and OT security. But continued breaches imply those methods alone fall short. In fact, a CISA probe of 121 critical infrastructure networks found that their weakest link is identity compromise. Learn how to leverage an attacker’s perspective to better secure critical infrastructure.
Uber slapped with $324 million fine for sharing drivers' personal information
The case was initiated by complaints from 170 French Uber drivers, but a Dutch authority issued the fine because Uber’s European headquarters is in the Netherlands.
China's Volt Typhoon Hackers Caught Exploiting Zero-Day in Servers Used by ISPs, MSPs
Threat hunters caught Chinese APT Volt Typhoon exploiting a zero-day (CVE-2024-39717) in Versa Director servers used by ISPs and MSPs.
Valkey Is a Different Kind of Fork
A fork of Redis, Valkey starts to gain its own momentum.
Git Commit Message AI
Git Commit Message AI. GitHub Gist: instantly share code, notes, and snippets.
Here’s the Pitch Deck for ‘Active Listening’ Ad Targeting
404 Media previously reported Cox Media Group (CMG) was advertising a service that claimed to target ads based on what potential customers said near device microphones. Now, here is the pitch deck CMG sent to prospective companies. Google has kicked CMG off its Partner Program in response.
Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline
Automate Everything: How One Manifest Powers Your Entire DevOps Pipeline
Dive into the essentials of setting up developer platform and enabling developers to start new projects effortlessly. In this video, we explore how to create a seamless interface for developers using Crossplane, GitHub, and Argo CD. Learn how to automate repository creation, CI pipelines, GitOps integration, and database provisioning with a single manifest. Follow along as we demonstrate the entire process from setup to deployment, ensuring everything is secure, automated, and stored in Git. Perfect for developers looking to streamline their workflow and focus on coding. Watch now to simplify your development journey!
DeveloperTools #GitOps #Crossplane #ArogCD #GitHub
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/internal-developer-platforms/automate-everything-how-one-manifest-powers-your-entire-devops-pipeline 🔗 Crossplane: https://crossplane.io 🔗 Argo CD: https://argoproj.github.io/cd 🎬 Crossplane Compositions | Tutorial (Part 3): https://youtu.be/X7E6YfXWgvE 🎬 Crossplane Tutorial: https://youtube.com/playlist?list=PLyicRj904Z99i8U5JaNW5X3AyBvfQz-16 🎬 Exploring KCL: Configuration and Data Structure Language; CUE and Pkl Replacement?: https://youtu.be/Gn6btuH3ULw 🎬 Crossplane Composition Functions | Tutorial (Part 5): https://youtu.be/XSzKs97Ls4g
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please use https://calendar.app.google/Q9eaDUHN8ibWBaA7A to book a timeslot that suits you, and we'll go over the details. Or feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Introduction 02:08 One Manifest For Everything 11:36 What Happened and How Did It Happen?
via YouTube https://www.youtube.com/watch?v=IEgXJEkjBZ0
%2Fcdn.vox-cdn.com%2Fuploads%2Fchorus_asset%2Ffile%2F24401977%2FSTK071_ACastro_apple_0001.jpg?width=92&height=&ar=&mode=&format=avif&dpr=2)
Apple rumor points to an iPhone 16, Watch, and AirPods launch event next month
And what about M4-powered Macs?
Making coffee at home as an economic signal
By Ruben Schade in Australia. 🌻
Making coffee at home as an economic signal
Overlooked No More: Mabel Addis, Who Pioneered Storytelling in Video Gaming (Gift Article)
She was a teacher when she participated in an educational experiment with IBM. As a result, she became the first female video game designer.
Test of a prototype quantum internet runs under New York City for half a month
To introduce quantum networks into the marketplace, engineers must overcome the fragility of entangled states in a fiber cable and ensure the efficiency of signal delivery. Now, scientists at Qunnect Inc. in Brooklyn, New York, have taken a large step forward by operating just such a network under the streets of New York City.
Is the Open Source Bubble about to Burst?
Is the Open Source bubble about to burst? While Free and Open Source Software (FOSS) isn’t just another tech trend, it’s facing real challenges as its adoption skyrockets. With millions…
How to Build a Minimal ZFS NAS without Synology, QNAP, TrueNAS
If you need a basic NAS and don't care about GUI features, it is suprisingly simple to set up a ZFS dataset and share it over the network using Samba.
Streisand effect | ‘Black Myth: Wukong’ Devs Told Streamers to Avoid Politics in Their Playthroughs. It Backfired
The Chinese studio granted early access on the condition that topics like “feminist propaganda” and “Covid-19” go unmentioned. What followed is the Streisand effect in full force.