The HeadlinesEditor’s picks of the highlights from the past week.
Runc and CVE-2019-5736
Noah Kantrowitz, Kubernetes
This week a container escape vulnerability in runc was announced. We wanted to provide some guidance to Kubernetes users to ensure everyone is safe and secure.
Building a Kubernetes Edge (Ingress) Control Plane for Envoy v2
Daniel Bryan & Richard Li, Datawire
With the open source Ambassador API Gateway, we wanted to tackle the challenge of creating a new control plane that focuses on the use case of deploying Envoy as a forward-facing edge proxy within a Kubernetes cluster, in a way that is idiomatic to Kubernetes operators. In this article, we’ll walk through two major iterations of the Ambassador design, and how we integrated Ambassador with Kubernetes.
Istio and Kubernetes in production. Part 2. Tracing
In the previous post, we took a look at the building blocks of Service Mesh Istio, got familiar with the system, and went through the questions that new Istio users often ask. In this post, we will look at how to organize the collection of tracing information over the network.