Shulou(Shulou.com)06/02 Report--

Author | Wang Menghai, Sun Jianbo, Song Jingchao

Important news of the industry

1. Heavy! Alibaba Open Source's first edge computing cloud native project OpenYurt

On May 29, Beijing time, on the occasion of the first anniversary of the release of Aliyun container service ACK @ Edge (edge cluster hosting service), Alibaba officially announced the open source of his core competencies and contributed a complete edge computing cloud native project-OpenYurt to the community. OpenYurt is Alibaba's first edge computing cloud native open source project, which brings together the profound technology accumulation of Alibaba's many edge computing business teams, and deeply excavates the appeal of "edge computing + cloud native implementation".

2. Istio 1.6formal release

Merge modules (Citadel,sidecar injection, Galley) that are not merged into Istiod, support in-situ upgrade and canary release on Istio control surface, provide richer metric output, add WorkloadEntry API simplified virtual machine support, etc.

3. The ability of gke to introduce container security risk detection

Gke introduces the capability of container security risk detection (beta phase), which currently includes security risk detection of binaries, lib files, and script files.

4. Containerd 1.4.0-beta.0 release

This is the fifth major version of containerd (pre-release version), which contains a large number of new features and bug fixes. In terms of CRI, many changes have also been made: adding isolation of Windows container processes, adding support for CGroups v2, and restarting CNI network configuration when listening for file change events.

5. Introduction to large-scale key Management (KES)

As a bridge between KMS systems and application systems of cloud platform service providers, it shields the differences of KMSapi of multiple cloud platform vendors. The root key information obtained by KES from KMS is stored in memory, which is used as a proxy for KMS to handle stateless encryption and decryption operations to reduce the pressure on KMS.

6. ARM releases new CPU, GPU and NPU

ARM officially unveiled its latest products Cortex-A78 CPU and Mali-G78 GPU on the 26th and said it will be used in the next generation of flagship smartphones in 2021 and beyond. ARM revealed that compared with Cortex-A77, Cortex-A78 is suitable for 5nm process, with a 20% improvement in performance and a 50% reduction in power consumption. This performance meets the current stringent battery consumption of 5G and is suitable for collapsible devices with multiple and larger screens at the same time.

Important upstream progress

1. Make NodeIPAM controller support varialble sized CIDRs

The NodeIPAM controller supports modifying the cidr of the ip of the pod that can be assigned to each node, and the algorithm uses Interval Tree to track the cidr of the ip of each node.

2. MCS: Add Headless support and graduation criteria

A kind of service is designed to meet the needs of discovery and distribution of multiple clusters. By designing a super cluster as a service discovery registry center, each member registers its own services to the super cluster independently, while member registers its own services (import) with the super cluster, and makes kube-proxy aware of import and related endpointslice, so as to realize the ability of cluster-ip communication between multiple clusters.

3. Add Kustomize components KEP

Use the Kustomize type as the official resource of K8s to implement the concept of component.

4. Use new format for Structured Logging KEP

The log of K8s will be structured and output to json format, which is officially scheduled for release at 1.19.

Open source project recommendation

OpenYurt

Openyurt is a native infrastructure management framework for edge computing cloud based on Ali Cloud container service ACK @ Edge (Edge Cluster hosting Service). It is fully compatible with upstream Kubernetes, and provides capabilities such as edge autonomy, efficient operation and maintenance channels, edge cell management, edge traffic topology management, heterogeneous resource support and so on.

Read the recommendations this week

1. "slow stateful deployment? Using openkruise to implement container application fixed id "

Douyu introduced how they solved the problem of native StatefulSet by switching to OpenKruise, as well as the improvement of publishing efficiency and access to demo brought about by OpenKruise.

2. "Kubernetes Apply vs Replace vs. Patch"

This paper introduces the principles and recommended scenarios behind the apply / replace / patch operation of K8s.

3. "Istio v1.6 Deep interpretation: Simplify"

Istio 1.6 officially released, about two and a half months after the 1.5 release, this release is the most normal release cycle since September last year, thanks to the joint efforts of developers in all communities.

4. "getting started with Serverless from scratch | value of Serverless"

This paper discusses the evolution of application architecture and describes the definition and concept of Serverless in detail.

5. "this article will take you to thoroughly clarify the working mechanism of certificates in Kubernetes"

This article will try to explain the working mechanism of Kubernetes and Certificate in a way that is easier to understand than official documentation. If you have doubts about this, I hope this article will be helpful to you.

6. "how Tekton works"

Analyze the working principle of Tekton with source code and scenario.

"Alibaba cloud native, focusing on micro-services, Serverless, containers, Service Mesh and other technology areas, focusing on cloud native popular technology trends, cloud native large-scale landing practice, to be the best understanding of cloud native developers of the technology circle."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.