Don’t Rely on eBPF Alone for Kubernetes
eBPF (Extended Berkeley Packet Filter) has garnered significant attention for security, monitoring, observability and other use cases. Indeed, its capability to extend its hooks for security purposes...
View ArticleTim Hockin: Kubernetes Needs a Complexity Budget
CHICAGO — Top Kubernetes engineers are agreeing: K8s is getting too complex, for end-users and maybe even for the core maintainers themselves. Time to put complexity on a budget. For his Thursday...
View ArticleOne Year of Remote Kubernetes Development: Lessons Learned
Imagine you’re a developer working on a distributed system. It’s early in the morning, you open your laptop and spin up your environment. And not just a part of it, literally the entire system with...
View ArticleKubernetes Gateway API Nixes Future Beta Releases
Last week, the Kubernetes API Gateway Project, a humongous collaborative effort, reached its version 1.0 general release. At KubeCon+CloudNativeCon last week, two of the principal maintainers shared...
View ArticleHow Platform Engineering Comes from Complexity
CHICAGO — Platform engineering comes from complexity. It sure seems like it after this week at KubeCon + CloudNativeCon North America, hearing from people like Release CEO Tommy McClung. “I was the...
View ArticleManaging Ransomware Threats in Kubernetes-Based Applications
Ransomware exacts a huge toll on organizations, and the average successful attack costs an enterprise nearly $4.5 million to remediate. Ransomware will likely continue to rise and sap the global...
View ArticleCycle.io: Meet the Team on a Mission to Replace Kubernetes
When we think about container orchestration, for much of the last decade Kubernetes has been the default choice. But it is not developer-friendly and requires significant time and understanding to...
View ArticleMulticloud Architecture: What I Want to See
What does “multicloud” really mean? Is it a destination? An action? How would one “multicloud” anyway? The term “multicloud” has been a buzzword that many talk about doing but very few execute...
View ArticleDebugging Containers in Kubernetes — It’s Complicated
Several presentations at DockerCon this year focused on improving the developer experience, a theme Docker has promoted since its early days. One challenge discussed: debugging containers in...
View ArticleDoes Kubernetes Really Perform Better on Bare Metal vs. VMs?
Many people presume that a Kubernetes cluster deployed on bare metal performs better than one deployed on virtual machines, but until now there hasn’t been any proof of that assumption. At Gcore, we...
View ArticleSecuring Microservices Communication with mTLS in Kubernetes
Kubernetes, the de facto orchestration platform for containerized applications, provides a powerful environment for deploying and managing microservices. But as the number of interconnected services...
View ArticleOpenTelemetry for Go Is Almost a Go
It took a while, but OpenTelemetry will shortly be able to fully accommodate Go and applications written in Go. This has served as a potential boon for users of Go, which is known for its relatively...
View ArticleHow Cilium’s Mutual Authentication Can Compromise Security
Recently, the Cilium project announced support for a new mutual authentication mechanism that can be deployed transparently to applications with a simple configuration flag. On the surface, this seems...
View ArticleWhy WebAssembly Is a Good Fit for Extensible Control Planes
When designing the libraries and platforms on which our applications are built, the uses can end up being very different from those we originally envisioned. Because of this, it’s generally wise to...
View ArticleMicrosoft’s New .NET Dev Tool Draws Community Support
Microsoft’s new .NET Aspire cloud native development platform has begun to sprout a vibrant ecosystem just weeks after its release. .NET Aspire is an opinionated stack for building resilient,...
View ArticleDemo: Self-Service Kubernetes with Rafay’s Backstage Plugins
CHICAGO — Backstage has been adopted at a rapid pace in the three and a half years since it was launched by streaming giant Spotify. So much so that many organizations using it want their toolchains...
View ArticleHPC Kubernetes: AI Training on 3,500 GPUs
To date, Kubernetes has largely steered clear of the high-performance computing (HPC), or supercomputing space. But with such a premium being put on GPUs for large machine learning these days,...
View ArticleAkin to SBOM, Trivy Adds KBOM Vulnerability Scanning to K8s
Kubernetes, often dubbed the “operating system of the cloud,” is a complex and critical piece of infrastructure in modern cloud native environments. Ensuring its security is paramount, given its...
View ArticleReimagining Multicluster Kubernetes with k0s/k0smotron
Kubernetes has a well-deserved reputation for being complicated. In one sense, this is inevitable: container orchestration on multiple infrastructures and feature configurations is complex stuff,...
View ArticleHow AWS Supports Open Source Work in the Kubernetes Universe
CHICAGO — At 2022’s KubeCon+CloudNativeCon North America, in Detroit, Amazon Web Services announced it was working on a mirror of Kubernetes assets, which were hosted on Google Cloud. That, in...
View Article