Cert-manager, an open-source Kubernetes add-on that can automate the management and issuance of TLS certificates from various issuing sources, has become a CNCF incubating project. The project can ensure that certificates are up-to-date and can renew certificates before expiration to run highly secure, encrypted data communications using TLS. “cert-manager is probably one of the first … continue reading
Wazuh is an open-source security platform for threat prevention, detection, and response that can protect workloads across on-premises, virtualized, containerized, and cloud-based environments. It consists of an endpoint security agent deployed to the monitoring systems and a management server which collects and analyzes data gathered by those agents. It is fully integrated with Elastic Stack, … continue reading
Spiffe and Spire is an open-source universal identity control plane for distributed systems. It allows users to secure microservices communication automatically with Envoy, X.509, or JWT. Spiffe is a Secure Production Identity Framework For Everyone which works to offer a secure identity to every workload in a modern production environment. It also removes the need … continue reading
Clusterpedia is an encyclopedia of Kubernetes clusters that can help users synchronize, search for, and control multi-cluster resources. The inspiration behind its name is Wikipedia, according to the developers behind the project on GitHub. It is a CNCF sandbox project that includes support for complex searches, filters, sorting, paging, and more. Clusterpedia also offers support … continue reading
Service Mesh Interface (SMI) provides a standard interface for service meshes on Kubernetes, a basic feature set for common service mesh use cases, and the flexibility to support new service mesh capabilities over time. The specification defines a common standard that can be implemented by various providers and it follows the CNCF code of conduct. … continue reading
Waltz is an open-source project that lets users visualize and define their organization’s technology landscape developed by Deutsche Bank. Deutsche Bank released the project in early 2018 to help users make smarter decisions on technology investment. “A core belief behind Waltz is that technology information should be accessible by everyone within your organisation. Furthermore employees … continue reading
Zabbix is an enterprise-class, open-source distributed monitoring solution released under the GNU General Public License (GPL) version 2. With it, users can get a single pane of glass view of their whole IT infrastructure stack including network, server, cloud, application, and service monitoring. Zabbix is scalable to any infrastructure whether on-premise or in the cloud. … continue reading
The Incident Automation company Shoreline.io announced a collection of Op Packs that make it easier to diagnose and repair common infrastructure incidents in production cloud environments called the Shoreline open source solutions library. The more than 35 free Op Packs cover issues such as JVM memory leaks, filling disks, rogue processes, and stuck Kubernetes pods. … continue reading
Kube-monkey is an implementation of Netflix’s Chaos Monkey specifically for Kubernetes clusters. It works by randomly removing Kubernetes (k8s) pods in the cluster, encouraging and validating the development of failure-resilient services. According to GitHub, kube-monkey runs at a pre-configured hour on weekdays and creates a schedule of deployments that will experience a pod death at … continue reading
NVIDIA announced that it cofounded a Linux Foundation project to democratize innovations in the data center and to further open the NVIDIA DOCA data processing unit software to software providers. The Open Programmable Infrastructure (OPI) project aims to create a community-driven, standards-based open ecosystem to accelerate networking and other data center infrastructure tasks, according to … continue reading
Backed by NS1 Labs, Orb is an open-source tool for edge observability that utilizes dynamic policy orchestration in order to extract real-time insights from traffic streams at the edge. Those insights are then transformed into actions through integration with modern observability stacks, leading to accelerated time-to-action and a reduction in price. With Orb, users can … continue reading
Envoy Gateway makes using Envoy Proxy easier for developers and helps to reverse fragmentation as part of a new effort within the Envoy proxy open-source project to simplify Envoy use in cloud-native application development. Envoy Gateway will reduce existing, redundant efforts around Envoy and make it much easier for application developers to use Envoy as … continue reading