Cloud Bulletin | Issue 3 - Feb 2023

New with Argonaut

Get more visibility into your Kubernetes clusters right from Argonaut using Prometheus metrics and k9s dashboards. Users can also enable GPU for GKE clusters and handle configuration file conflicts better through Argonaut. Check our January release notes for all our updates.

Also, check out these Top Seven cloud trends of 2023!

• Secret Management Primer: Challenges, Standards, and Best Practice
• Deploy Mezmo Agent to Your Kubernetes Cluster Using Argonaut
• Secret Management in Kubernetes: Approaches, Tools, and Best Practices

Kubernetes News

New GitOps observability dashboard

New Configuration Management Dashboard by GCP. You can view both the overall configuration and also see the packages that are synced across clusters. Easy install of Config Sync, checking the sync and reconcile status, filter issues, and identifying errors are now possible from the dashboard.

Modifications to PodDistributionBudgets (PDBs)

The release of Kubernetes v1.26 lets you specify an unhealthy pod eviction policy for PodDisruptionBudgets (PDBs) to help you maintain that availability during node management operations. IfHealthyBudget and AlwaysAllow are the two new policies that provide control over the process of dealing with unhealthy pods.

KubeCon EU

KubeCon EU is happening in Amsterdam from the 18th to the 21st of April. The standard registration closes in 2 weeks, grab your passes now. Virtual registration is also available.

Open Source Tool Spotlight

Monokle CLI for Kubernetes YAML validation. This is a unified visual tool for authoring, analysis, and deployment of Kubernetes configurations, covering the entire configurations lifecycle, from creation to validation to deployment.

https://kubeshop.github.io/monokle/features/

Karmada is a Kubernetes management system that enables you to run your cloud-native applications across multiple Kubernetes clusters and clouds with no changes to your applications. It is a CNCF Sandbox project and comes with built-in policy sets and cluster location agnostic centralized management.

https://karmada.io/

AWS Improvements

AWS IoT Core support for Protocol Protobuf

AWS IoT Core Rules engine can now decode Protobuf encoded messages, a popular messaging format among IoT customers in industries, to JavaScript Object Notation (JSON) without needing to invoke a Lambda function.

S3 Encrypts new objects by default

To improve security, all new S3 Objects are encrypted by default using server-side encryption (SSE-S3). To have an additional layer of encryption, you might also encrypt objects on the client side, using client libraries such as the Amazon S3 encryption client. Available at all AWS regions at no additional cost.

AWS Clean Rooms available in preview

AWS Clean Rooms is a new analytics service that helps companies across industries easily and securely analyze and collaborate on their combined datasets—without sharing or revealing underlying data.

AWS Personalize updates

Trending-now recipes can be used to recommend items gaining popularity at the fastest pace among their users.

Tag-based resource authorization is supported in IAM policies to allow granular control over access to Amazon Personalize resources and operations.

🗒️ Check out Jeff Barr's post about the content structure in AWS News Blog.

GCP updates

Cloud CDN supports Private origin authentication

Cloud CDN now supports private origin authentication for Amazon Simple Storage Service (Amazon S3) buckets and compatible object stores in Preview. This capability improves security by allowing only trusted connections to access the content on your private origins and preventing users from directly accessing it.

GPU Pods on GKE Autopilot - now in GA

Customers can now run ML training, inference, video encoding, and all other workloads that need a GPU with the convenience of GKE Autopilot’s fully-managed Kubernetes environment.

Event-driven transfer for Cloud Storage

Storage Transfer Service (STS) now offers preview support for event-driven transfers - serverless, real-time replication capability to move copy from AWS S3 to Cloud Storage and copy data between multiple Cloud Storage buckets. Available across all regions at no additional cost.

Cloud Load Balancing

Internal TCP/UDP load balancers can now be configured to handle private IPv6 traffic within your VPC. To enable this, you must configure your dual-stack subnet, backend VMs, health checks, and forwarding rules to handle IPv6 traffic.

Found something interesting?  Share it to a friend/colleague. Help us spread the word.

Cheatsheet: kubectl

This kubectl cheatsheet from phoenixNAP covers all the essential kubectl commands to list, create and delete a resource. Execute commands, print logs, and more.

Tutorial Spotlight

Protecting mission-critical pods from eviction using PriorityClass by Sunny B walks through the use cases of PriorityClass API along with hands-on examples.

Got any content pieces or tutorials that you would like to share with the readers of this newsletter? Leave us a DM on Twitter.

Upcoming Events

Not yet subscribed to this newsletter? Subscribe here.