
Suggested Reads
LF Charities Welcomes Project Jupyter, Expanding Role in Data Science and Furthering Community Innovation
2 MIN READ LF Charities Welcomes Project Jupyter, Expanding Role in Data Science and Furthering Community Innovation The Linux Foundation | 17 October 2024 SAN…
October 17, 2024 at 03:53PM
via Instapaper
Week Ending October 13, 2024
https://lwkd.info/2024/20241017
Developer News
VM images built with Kubernetes Image Builder older than v0.1.37 have a security hole that may allow remote login. This includes Proxmox, Nutanix, OVA, QEMU, and raw providers. Upgrade to v0.1.38 or later, and rebuild your VM images.
SIG-Release is planning to phase out artifacts for some architectures by 1.33. In 1.32, the updated cross-build images for ppc64le and s390x will not be released, because of broken dependencies.
Release Schedule
Next Deadline: Docs placeholder PRs deadline, October 24
The enhancements freeze was last week and we have a total of 60 KEPs tracked for v1.32. 9 enhancements did not make the cut for the enhancements freeze and 9 were deferred. Coming up next is the deadline for getting your docs placeholder PRs open, on 24th of October. If your KEP is tracked for v1.32 and if you have updates to the docs, don’t forget to open your PRs in time!
The patch releases planned for October have been moved to Tuesday, October 22, 2024.
Featured PRs
127878 [scheduler] calculate pod requests resources with sidecar containers
This PR updates the scheduler scoring process to consider the resource requests of existing sidecar containers when scheduling Pods. As per the sidecar containers KEP, resources calculations for scheduling pods with sidecars is supposed to be: Max(Max( each InitContainerUse ), Sum(Sidecar Containers) + Sum(Containers)), but existing scheduler logic was using Max(RegularContainers, InitContainers) to calculate resources instead. This PR updates this logic.
KEP of the Week
KEP 3104: Introduce kuberc
This KEP proposes to introduce a new kuberc file that can be used to separate cluster credentials and server configuration from user preferences. This new and entirely opt-in kuberc file would allow users to configure aliases and default flags and also aims to deprecate the kubeconfig Preferences field. While in alpha, this feature can be enabled by setting the KUBECTL_KUBERC environment variable to true. The file will default to being located in ~/.kube/kuberc. A flag will allow overriding this default location with a path i.e. kubectl –kuberc /var/kube/rc.
This KEP is tracked for alpha release in the ongoing v1.32 cycle.
Other Merges
Fix for misleading kubeadm init output
NestedNumberAsFloat64 accuracy test is now architecture-neutral
Fix for spacing in kubectl –validate flag description
Version transition information in kube_features.go removed
kube-apiserver --tracing-config-file file is now validated strictly
kubelet: the --image-credential-provider-config file is now loaded with strict deserialization
CRI client to use default timeout for ImageFsInfo RPC
scheduler_perf test case for AssignedPodAdd event handling added
hcsshim library replaced with new hnslib library
Strict validation enabled for ResourceQuotaConfiguration
e2e node tests to use shared context in regular container tests
Getters for the field name and typeDescription of the Reflector struct renamed
EgressSelectorConfiguration now uses strict validation
etcd3 store decode functions extracted into an interface
Integration tests for TaintToleration in requeueing scenarios
Fix for data race in kubelet/volumemanager
Scheduler to start considering the resource requests of sidecar containers
Shorthand for kubectl explain –output
WaitForJobComplete and WaitForJobFailed functions to fail fast in e2e tests
CRI proxy for node e2e tests added
More e2e tests for sidecar containers
Fix for bug where kubelet restarts from missing cpuset cgroup
In-place Pod resize feature now adds extended Resources field to ContainerStatuses struct
Behavior of per request read/write handler with net/http server documented
Promotions
WatchList to beta
LoadBalancerIPMode to GA
Deprecated
kube-proxy command line flags --healthz-port and --metrics-port removed
Version Updates
Kubernetes is now built with go 1.23.2
vendor: system-validators to v1.9.0
Bump to several golang.org/x packages
via Last Week in Kubernetes Development https://lwkd.info/
October 17, 2024 at 12:30PM
GitOps: How Many GitOps (ArgoCD) Instances Are Recommended for Multiple Environments?
In this Q&A session, we dive into managing GitOps instances with ArgoCD. Learn about the optimal number of ArgoCD instances for multiple environments, the difference between ephemeral and permanent environments, and the importance of cluster-based GitOps management. Discover best practices for separating production and non-production clusters, and how to utilize Argo Workflows and Argo Rollouts effectively.
ArgoCD #GitOps #DevOps
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
via YouTube https://www.youtube.com/watch?v=Tuba7LpoUVM
Releasing WinAmp source goes badly – for its owners, anyway
The owners of WinAmp have just deleted their entire repo one month after uploading the source code to GitHub. Lots of source code, and quite possibly, not all…
October 17, 2024 at 10:05AM
via Instapaper
Microsoft's Azure Linux 3.0 Adds Valkey, Enables Other New Features - Phoronix
Microsoft has released Azure Linux 3.0.20241005 as the "October 2024" update to the company's in-house Linux distribution. Azure Linux 3.0 reached GA status…
October 17, 2024 at 09:41AM
via Instapaper
Amazon invests $500M to go nuclear after Microsoft and Google
Amazon (AMZN) is the latest Big Tech company to invest in nuclear energy to power artificial intelligence (AI) data centers. Amazon Web Service (AWS), the…
October 17, 2024 at 09:18AM
via Instapaper
Introduction | Eraser Docs
When deploying to Kubernetes, it's common for pipelines to build and push images to a cluster, but it's much less common for these images to be cleaned up. This…
October 16, 2024 at 12:27PM
via Instapaper
Exclusive | Amazon, Databricks Strike Five-Year Deal Around AI Chips
October 16, 2024 at 11:06AM
via Instapaper
Declarative configuration and the Kubernetes Resource Model, with Brian Grant
This episode offers a rare glimpse into the design decisions that shaped the world's most popular container orchestration platform.
Brian Grant, CTO of ConfigHub and former tech lead on Google's Borg team, discusses the Kubernetes Resource Model (KRM) and its profound impact on the Kubernetes ecosystem.
He explains how KRM's resource-centric API patterns enable Kubernetes' flexibility and extensibility and how they have influenced the entire cloud native landscape.
You will learn:
How the Kubernetes API evolved from inconsistency to a uniform structure, enabling support for thousands of resource types.
Why Kubernetes' self-describing resources and Server-side Apply simplify client implementations and configuration management.
The evolution of Kubernetes configuration tools like Helm, Kustomize, and GitOps solutions.
Current trends and future directions in Kubernetes configuration, including potential AI-driven enhancements.
Sponsor
This episode is sponsored by StormForge – Double your Kubernetes resource utilization and unburden developers from sizing complexity with the first HPA-compatible vertical pod rightsizing solution. Try it for free.
More info
Find all the links and info for this episode here: https://kube.fm/krm-brian
Interested in sponsoring an episode? Learn more.
via KubeFM https://kube.fm
October 15, 2024 at 06:00AM
CVE-2024-9594
https://github.com/kubernetes/kubernetes/issues/128007
VM images built with Image Builder with some providers use default credentials during builds
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
October 11, 2024 at 02:04PM
CVE-2024-9486
https://github.com/kubernetes/kubernetes/issues/128006
VM images built with Image Builder and Proxmox provider use default credentials
via Kubernetes Vulnerability Announcements - CVE Feed https://kubernetes.io/docs/reference/issues-security/official-cve-feed/
October 11, 2024 at 02:04PM
Getting Started with Backstage: From Zero to Operational Dev Portal
Explore Backstage from a beginner's perspective! Discover what Backstage is, its main components, and how to set it up from scratch. We'll dive into its source code, extend it with plugins, and create custom components and templates. Learn how to transform the developer experience by integrating tools and managing systems through a unified portal. Perfect for those who prefer a graphical interface over command-line tools. Watch as we set up a Backstage development environment, configure plugins, and automate workflows with templates.
BackstageTutorial #DeveloperTools #DeveloperPortal
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ ➡ Transcript and commands: https://devopstoolkit.live/internal-developer-platforms/getting-started-with-backstage-from-zero-to-operational-dev-portal 🔗 Backstage: https://backstage.io 🎬 Surviving Backstage with Roadie: A Developer's Nightmare or Dream?: https://youtu.be/LIhnicLyzsk
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬ 00:00 Introduction to Backstage 03:14 Backstage Development Setup 08:27 Backstage Plugins 12:02 Backstage Components and Templates 21:15 Backstage In Action
via YouTube https://www.youtube.com/watch?v=A-3Ai--Z-Gs
Progressive Delivery - Feat. Argo Rollouts and Flagger (You Choose!, Ch. 04, Ep. 06)
Progressive Delivery - Choose Your Own Adventure: The Observability Odyssey
In this episode, we'll go through progressive delivery. The contestants are Argo Rollouts and Flagger.
Vote for your choice of a tool for signing artifacts at https://cloud-native.slack.com/archives/C05M2NFNVRN. If you have not already joined CNCF Slack, you can do so from https://slack.cncf.io.
This and all other episodes are available at https://www.youtube.com/playlist?list=PLyicRj904Z9-FzCPvGpVHgRQVYJpVmx3Z.
More information about the "Choose Your Own Adventure" project including the source code and links to all the videos can be found at https://github.com/vfarcic/cncf-demo.
٩( ᐛ )و Whitney's YouTube Channel → https://www.youtube.com/@wiggitywhitney
progressivedelivery #argorollouts #flagger
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ 🔗 Progressive Delivery: https://github.com/vfarcic/cncf-demo/tree/main/manuscript/progressive-delivery/README.md
via YouTube https://www.youtube.com/watch?v=iXdZY9BpUjU
Valkey Momentum: Seven Months In
This week Google announced Memorystore support for Valkey and AWS announced support for Valkey in ElastiCache and MemoryDB. Aiven launched Aiven for Valkey in…
October 11, 2024 at 12:49PM
via Instapaper
Valkey is now included in Ubuntu | Ubuntu
In pursuit of open source sustainability, Canonical is a committed contributor to the development of Valkey. Following our mission to amplify the impact of open…
October 10, 2024 at 02:03PM
via Instapaper
Crossplane: How can we manage resources that were not created by Crossplane?
In this episode, we tackle managing existing resources with Crossplane. Learn how to take control of resources that weren't initially created by Crossplane. Those could be existing resources in Google Cloud, Azure, AWS, or anywhere else.
Crossplane #CloudManagement #ResourceControl #CloudComputing
Consider joining the channel: https://www.youtube.com/c/devopstoolkit/join
▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬ 🔗 Crossplane: https://crossplane.io
▬▬▬▬▬▬ 💰 Sponsorships 💰 ▬▬▬▬▬▬ If you are interested in sponsoring this channel, please visit https://devopstoolkit.live/sponsor for more information. Alternatively, feel free to contact me over Twitter or LinkedIn (see below).
▬▬▬▬▬▬ 👋 Contact me 👋 ▬▬▬▬▬▬ ➡ Twitter: https://twitter.com/vfarcic ➡ LinkedIn: https://www.linkedin.com/in/viktorfarcic/
▬▬▬▬▬▬ 🚀 Other Channels 🚀 ▬▬▬▬▬▬ 🎤 Podcast: https://www.devopsparadox.com/ 💬 Live streams: https://www.youtube.com/c/DevOpsParadox
via YouTube https://www.youtube.com/watch?v=LrSvRoemv18
AWS's Valkey Play: When a Fork Becomes a Price Cut
In a move that’s equal parts predictable and surprising, AWS has decided to make their Valkey-based services significantly cheaper than their Redis…
October 10, 2024 at 11:50AM
via Instapaper
Registration
Registration is open to all members of one of the Kubernetes orgs, qualified Etcd contributors, or sponsored attendees. Registration closes: Thursday, November…
October 10, 2024 at 10:56AM
via Instapaper
.IO domain names aren't going away - Domain Name Wire | Domain Name News
October 10, 2024 at 09:39AM
via Instapaper
October 10, 2024 at 09:14AM
via Instapaper