Last night a very special event offered over three hours of insights and history about the world’s second-largest open source project (after Linux). As Kubernetes celebrated its 10th anniversary, Google’s Mountain View campus hosted a parade of key figures from the community who all helped make it happen. As the evening rolled along, speakers came from every level of the project: Dawn Chen spoke after 17 years at Google — as one of the leads of its fateful Borg project. Sarah Novotny presented a whirlwind history of Kubernetes from her perspective as program manager for the Kubernetes commun ..read more

Maybe the Kubernetes ecosystem is getting too complicated for its own good. Nearly half of Kubernetes users surveyed in a new report from Spectro Cloud said they are having problems choosing and validating which infrastructure components to use within their production environments. The main culprit: the maturity of Kubernetes. There are simply too many choices for organizations to handle, judging by the survey participants’ responses. In the new report, 48% said they find it difficult to decide which stack components to use from the broad cloud native ecosystem. That figure has shot up from 2 ..read more

Kubernetes node overhead is a largely unrecognized “cost of doing business” for teams using Kubernetes. It can be defined as the node resources used to run Kubernetes itself. All Kubernetes nodes have capacity: the consumption of these resources is the sticker price that providers like Amazon Web Services and the Google Cloud Platform bill for. A subset of that total capacity is defined as allocatable capacity; this is the portion of the node that workloads can actually be scheduled on. Capacity is what you pay for, allocatable capacity is what you can use and the difference is node overhead ..read more

Just about every organization with a significant cloud footprint has issues with wasted spending on enormous amounts of unused cloud resources, and an entire catalog of tools has sprung up to try to help. But what do you do when you choose and deploy a FinOps cost-control tool like an autoscaler in your Amazon Web Services EKS cluster and… it falls short of expectations? Did you pick the wrong tool? Probably not — at Platform9, our conversations with customers have consistently shown that a wide variety of existing tools do help… but not enough. You need something more than just a tool — you ..read more

Cloud Foundry‘s open source Korifi cloud native developer platform attracted considerable attention at the Cloud Native Computing Foundation’s KubeCon + CloudNativeCon EU 2024 conference. Attendees expressed appreciation for the familiar cf push workflow and the overall developer-centric value proposition that Korifi offers. Discussions frequently centered around integrating this experience seamlessly with Kubernetes, the leading container orchestration platform. The Korifi booth witnessed a steady stream of visitors, many of whom were familiar with the project and eager to discuss its curren ..read more

BARCELONA, Spain — Nutanix executives say its AI-assisted processes and tools for developers, administrators and CIOs will represent simplified platforms and tools for user organizations. But now Nutanix is aggressively expanding its cloud native support with AI, of course. To accomplish its historical goal, Nutanix’s efforts need to involve building momentum for open source adoption and services built on those in order to adopt and offer AI-driven solutions for operations built on Kubernetes. Not to say Nutanix has lagged in its adoption and contribution to the open source community. But for ..read more

BARCELONA, Spain — It was revealed during Nutanix’s annual user’s conference here, .NEXT 2024, that the company’s Nutanix Kubernetes Platform (NKP) will offer a comprehensive platform for Kubernetes management across multiclouds that does not require the usual Kubernetes know-how for individual services. AI will do much of the orchestration and management of the clusters, although a company representative did not reveal details about how this would be integrated into NKP, ahead of its expected availability this summer as part of Nutanix’s Project Beacon for Kubernetes. @nutanix CEO @RajivRam ..read more

Whenever another open source company moves to a source-available license, there is inevitably discussion about whether or not this means the end of open source companies. One more big infrastructure company changing its licensing structure doesn’t, in our opinion, mean open source companies are all destined to change licenses or die. But it does highlight the fact that open source companies face some challenges that are unique; they also have opportunities that proprietary companies can’t take advantage of. If, as a community, we value the continued success of open source businesses in the se ..read more

An assessment practice, Kubernetes Security Posture Management (KSPM) offers a robust framework for protecting against common attack vectors, responding to incidents, and ensuring a deep layer of defense through a defense-in-depth strategy. But how do you harden your Kubernetes clusters, enhance incident response capabilities and implement defense-in-depth measures? Fundamental Hardening Techniques KSPM starts by implementing “cyber hygiene” practices to defend your cluster against common attack vectors. This includes securing the Kubernetes control plane to prevent potential attacks. Measure ..read more

Role-based access control (RBAC) is the default access control approach in Kubernetes (K8s). This model categorizes permissions using specific verbs to define allowed interactions with resources. Within this system, three lesser-known permissions — escalate, bind and impersonate — can override existing role limitations, grant unauthorized access to restricted areas, expose confidential data or even allow complete control over a cluster. This article explains these potent permissions, offering insights into their functions and guidance on mitigating their associated risks. About RBAC Role and ..read more