ALL THINGS KUBERNETES

KubeCon + CloudNativeCon Copenhagen 2018: Day 3

Day 3 of the KubeCon in Copenhagen is well underway, and Kubernetes project evolution is at the top of the agenda.

The mood of the third conference day was set by Aparna Sinha, Group Product Manager for Google Inc., who spoke about Kubernetes project updates. According to Aparna, Kubernetes is rapidly becoming one of the most popular and in-demand open source software projects. It is already second to Linux in popularity on GitHub, and 54% of enterprises are using Kubernetes at least in some way.

As Kubernetes matures, the community shifts attention from cool features to cluster and cloud security, and the tangible presence of security startups participating in this conference confirms this trend.

For many users, Kubernetes 1.7 was a milestone release that added security, support for stateful applications, and extensibility features. Kubernetes hardened its security with new encrypted secrets that allow encrypting etcd key-value store used by Kubernetes internally. Progress has been also made in threat detection, with better integration of various cloud native threat detection tools like Aqua, Capsules, Sysdig, Twistlock — all hosted by the CNCF.

Kubernetes developers have also addressed enterprises’ concern with the potential security risks associated with the broad access of containers to system resources that might compromise the host security. On May 2, 2018, just in time for the conference, Google open sourced its gVisor tool for the development of sandboxed containers. This new container architecture offers better isolation of containers by intercepting application system calls and acting as a guest kernel running in the user space. gVisor open sourcing satisfies the enterprise appetite for running heterogenous and less trusted workloads in Kubernetes clusters. In addition to these security updates, new Kubernetes versions introduce automatic updates of stateful applications like databases and enable a number of performance improvements.

It is clear that Kubernetes project updates are leading the community to more secure, fast, and efficient usage of Kubernetes clusters. These changes can attract more companies working with sensitive workloads to adopt the Kubernetes infrastructure.

One of the case studies of such adoption was presented by Sarah Wells, Technical Director for Operations and Reliability for Financial Times. This British media giant has successfully handled the transfer of over 150 microservices to Kubernetes recently, dramatically improving deployment speed and reducing infrastructure costs.

The discussions on these and other topics are underway in panels and sessions of KubeCon after which all attendees are going to the All Attendee Party in one of the most beautiful places of Copenhagen, the Tivoli Gardens.

The Supergiant team is joining the party to briefly enjoy the event but will be soon back at the conference. If you are close to the venue, come visit our official KubeCon booth (SU-C17) and stay for updates about the last date of the conference tomorrow.

Subscribe to our newsletter