We’re heading out on holiday tomorrow, joining family in Queenstown1 for a week. I hope none of the major cloud vendors announces anything while I’m away?
Anyway, it was kind of many companies to take a breather over the American Thanksgiving weekend. Or perhaps they thought their news would be lost under the scandals of the football World Cup and the continuing stooooooooory of a quack that’s gone to the dogs now running a social media company?
Let’s get to the news.
New old stock
Can you believe that Prometheus is 10 years old? This might come as a surprise, as I’m sure you associate it closely with Kubernetes, which is a spritely eight-year-old. But the time-series database came first, being a re-implementation of Google’s Borgmon built by engineers at Soundcloud. It was properly announced in 2015, and the rest is the kind of history they make documentaries about.
The Department of Defence released a zero-trust strategy and roadmap for implementation by 2027. 45 capabilities are outlined across 7 pillars, with a final goal of “a secure DoD Information Enterprise”. The DoD library also includes their zero trust reference architecture and a lovely two-page “placemat” which you can print out and put under your rations.
Ever noticed how everyone has a survey and a report? This week’s report is from Civo, the K3s-as-a-service company whose niche I still can’t put my finger on2. Their 1,000 person panel had 51% of respondents using Kubernetes and/or containers, up 2% from last year but a low figure compared to the Gartner projections of “everyone by 2025”. 72% are using one of AWS, Azure or Google, with no number on how many were using Civo: only that the number has doubled since the last report.
Beware ye: 66% of developers expressed concerns about security consequences created by Kubernetes vulnerabilities, with over 50% saying misconfigurations or exposures were driving their concerns.
The full report bears the obligatory cost of your email address.
Did someone say “Kubernetes vulnerabilities”? My colleague Ben has written up a summary of the key cloud native ecosystem vulnerabilities in 2022, and what you could have done to avoid each. Many of them were in CRI-O or containerd, so I think the answer is “we should all have kept using Docker”.
Far enough in advance of AWS re:Invent that I feel that it’s OK to mention it here, Amazon announced the launch of a new container management CLI. Finch is an open source client for container development. Targeted first at Mac users, Finch is a convenience distribution which packages Lima, nerdctl, containerd, and BuildKit to do the actual work. The team is building Finch in the open, building out milestones and a roadmap with input from users and contributors.
Over in the WebAssembly corner, Wasmer has released version 3.0 of its open-source WebAssembly runtime. Headline features include the ability to compile a WebAssembly file into a native Windows, Linux or Mac OS executable, and to run Wasm packages directly using wasmer run
. It should be noted that Wasmer and its CEO are not without controversy, though the tech remains popular even with company detractors.
Stock in trade
Kubernetes 1.26 is nearing completion, so my team at ARMO did a write-up on what you are going to need to know. Did you like the “release manager interview” I did on the old show? Reach out and let me know.
Argo CD and Flux are both currently undergoing final voting to reach graduated status in the CNCF. Which will get there first? Argo already jumped the gun on Twitter, but I hear no-one uses that site any more.
The CNCF are now offering scholarships for maintainers to attend events. They will be available to individuals who are not being assisted or sponsored by a company or organization and are unable to attend for financial reasons.
Linux Foundation and Rancher Government Services have teamed up to make training available to US Government employees.
Please now pull Kubernetes containers from registry.k8s.io to
save Google some moneyget a better user experience.
And that’s the news.
Kingstown?
Perhaps this is what disruption looks like.
It is great to find you here.