KubeWeekly #162

Published: February 13, 2019

The Headlines

Editor’s picks of the highlights from the past week.

Runc and CVE-2019-5736
Noah Kantrowitz, Kubernetes

This week a container escape vulnerability in runc was announced. We wanted to provide some guidance to Kubernetes users to ensure everyone is safe and secure.

Building a Kubernetes Edge (Ingress) Control Plane for Envoy v2
Daniel Bryan & Richard Li, Datawire

With the open source Ambassador API Gateway, we wanted to tackle the challenge of creating a new control plane that focuses on the use case of deploying Envoy as a forward-facing edge proxy within a Kubernetes cluster, in a way that is idiomatic to Kubernetes operators. In this article, we’ll walk through two major iterations of the Ambassador design, and how we integrated Ambassador with Kubernetes.

Istio and Kubernetes in production. Part 2. Tracing
Alexander Lukyanchenko, Avito

In the previous post, we took a look at the building blocks of Service Mesh Istio, got familiar with the system, and went through the questions that new Istio users often ask. In this post, we will look at how to organize the collection of tracing information over the network.

Webinars

Upcoming webinars on cloud native technologies.
To Russia With Love – Kubernetes in Exotic Locations

Michael Wojcikiewicz, CloudOps
February 19 @ 10 am – 11 am PDT
REGISTER NOW »

Everything You Need to Know About the CKA and CKAD

Randy Abernethy, RX-M
February 21 @ 10am – 11am PDT
REGISTER NOW »

The Technical

Tutorials, tools, and more that take you on a deep dive into the code.

Development in the Cloud
Jakub Borys, Student.com

Microservices Orchestration with Kubernetes
Asad Faizi, CloudPlex.io

Viewing Logs In Kubernetes

Using Kubernetes
Deepak D, deechris27

What every Data Scientist should know about Kubernetes (but they are afraid to ask) Part 1
Jacek Bzdak, Logic AI

Kubernetes Ingress Controllers: How to choose the right one: Part 1
Eric Liu, ITNEXT

Develop, Build, Release & Deploy
Dipanshu Goyal

Kubernetes adventures — Creating a Kubernetes cluster
Diego Lakatos

Using SPIRE to (Automatically) Deliver TLS Certificates to Envoy For Stronger Authentication
Andrew Harding, Scytale.io

Tooling Spotlight:

kube-psp-advisor – Help building an adaptive and fine-grained pod security policy
kuberhealthy – Easy synthetic testing for Kubernetes clusters. Works great with Prometheus.
Autocert – A kubernetes add-on that automatically injects TLS/HTTPS certificates into your containers.

Number of "Who's Hiring" #HackerNews posts each month mentioning Kubernetes (or K8s) pic.twitter.com/7xJoSFcLa3
— Dan Kohn ☁️👨🏼‍💻 @ NYC 🏢😷🗽🍎 (home) (@dankohn1) February 11, 2019