Release Spotlight: Cilium 1.17.0
Last week, a new Cilium release arrived, 1.17.0, accumulating an impressive number of 2700+ commits. They resulted in many changes in the project, improving its networking, security, and observability features, as well as scalability.
Some highlights of this release are: protocol differentiation (UDP, TCP) for services, per-service load balancing algorithm selection, Multi-Cluster Service API controller, Pod-level networking QoS classes support, improved network policy performance, ability to select CIDRs by labels, static addresses for gateways, dynamic Hubble metrics and numerous new metrics, rate limiting for eBPF events against CPU usage, and Gateway API 1.2.1 support.
Other noticeable updates in the Cloud Native space:
1. KubeArmor, a Cloud Native runtime security enforcement system (a CNCF Sandbox project), released its v1.5.0 (and subsequent v1.5.x fixes) with several new features. They include support for rules for SCTP protocol, all protocols with raw network socket/domain, and specifying
protocol: all for network rules, configurable Docker imagePullSecrets, and special preset rules to handle fileless process execution.2. Skaffold, a CLI tool for continuous development of applications for Kubernetes, has introduced v2.14.0 (and subsequent v2.14.1 fix), bringing various updates. It got Helm dependencies and concurrency support, faster
helm install (by using goroutines), optimised Kaniko builds (by using compression) and imagePullSecret support in Kaniko, as well as a new GCS (Google Cloud Storage) client.3. External Secrets Operator, a Kubernetes operator that integrates external secret management systems (a CNCF Sandbox project), reached v0.14.0 (and subsequent v0.14.x fixes) introducing stateful generators, with a new Grafana ServiceAccounts generator as its first implementation. Now, ESO can manage user or system accounts for database systems, message brokers, managed service providers, etc.
4. Falco Talon, a no-code solution for a customisable response engine working with Falco (a CNCF Graduated project), was updated to v0.3.0. It features a new actionner called
kubernetes:sysdig: when a suspicious event occurs in a Pod, Talon triggers a capture and exports the created artifact to AWS S3 or Minio, which you can later explore via sysdig CLI tool.5. Crossplane, a framework for building Cloud Native control planes (a CNCF Incubating project), released v1.19.0 just yesterday. It comes with Usage API and Claim server-side apply promoted to Beta (enabled by default now), customisable ports for Crossplane, auto-downgrading feature for packages in the automatic dependency management (Alpha), support for private repositories in the CLI commands downloading Crossplane packages (
render, validate), and an API promotion policy.#news #releases