Welcome to The New Stack Context, a podcast that takes a look at the week’s most pertinent news for the at-scale development and deployment community. This week we’re talking with Joel Speed, a cloud infrastructure engineer at Pusher who’s been helping build its internal Kubernetes platform. Joel wrote a contributed post for us this week about how to solve Kubernetes configuration woes with a custom controller, so we’ll talk to him first about that.
Later in the show, we talk with TNS managing editor Joab Jackson and TNS editor-in-chief Alex Williams about what we’re expecting from KubeCon + CloudNativeCon North America in Seattle next week. The New Stack has two pancake breakfasts and a full schedule of podcasts and livestreams, so visit our website or follow us on Twitter @thenewstack next week for live updates from KubeCon.
- CNAB Simplifies Container-Style Deployments for Distributed Apps: Microsoft and Docker have joined forces to simplify the business of packaging multiple components into a single application. Introduced at Microsoft’s Cloud Native Application Bundles (CNAB) provides a way to package your components into an application, using a new package manager called Duffle. CNAP is a reference implementation, so it is open to others.
- Critical Vulnerability Allows Kubernetes Node Hacking: Kubernetes gets its first major vulnerability! “With a specially crafted request, users that are allowed to establish a connection through the Kubernetes API server to a backend server can then send arbitrary requests over the same connection directly to that backend, authenticated with the Kubernetes API server’s TLS credentials used to establish the backend connection,” the Kubernetes developers said in an advisory.
- Portworx PX-Enterprise 2.0: The Missing Piece of the Hybrid Cloud: Portworx has just taken a giant step forward with the release of Portworx-Enterprise 2.0 is a virtual storage fabric that spans multiple clusters whether that’s in the same cloud platform, multiple clouds or a mix of on-prem and cloud.
- Solving Kubernetes Configuration Woes with a Custom Controller: When updating a config map, they needed a way to see these changes got pushed out. Neither ConfigMaps nor Secrets are versioned, nor do they have control loops. While updating a ConfigMap will update the mounted file within a Pod, updating Secrets triggers no change within the cluster.
Photos of the Week
The Cloud Native Computing Foundation, Kubecon + CloudNativeCon, and Portworx are sponsors of The New Stack.
Feature image via Pixabay.