Kubernetes Atlanta Meetup: September 2022

# Kubernetes Atlanta Meetup: September 2022 - **Date:** 09.28.2022 - **Location:** - Virtual via Zoom - **Speakers:** - **Christian Posta, VP & Global Field CTO @ Solo.io**  Christian Posta (@christianposta) is Global Field CTO at Solo.io, former Chief Architect at Red Hat, and well known in the community for being an author (Istio in Action, Manning, Istio Service Mesh, O'Reilly 2018, Microservices for Java Developers, O’Reilly 2016), frequent blogger, speaker, open-source enthusiast and committer on various open-source projects including Istio, Kubernetes, and many others. Christian has spent time at both enterprises as well as web-scale companies and now helps companies create and deploy large-scale, cloud-native resilient, distributed architectures. He enjoys mentoring, training and leading teams to be successful with distributed systems concepts, microservices, devops, and cloud-native application design. - **The Future of Istio is sidecar-less** Every service mesh, including Istio, uses a sidecar proxy as its data plane. With this pattern, a mesh can intercept and enhance the capability of networking communication on behalf of an application. However, and unfortunately, this sidecar deployment pattern comes with a price to pay in terms of operations, complexity, and performance. With the advent of eBPF in modern operating systems, and some coordination with the Linux networking capabilities, we can look forward to improvements in service mesh architecture including moving away from a sidecar approach to a more transparent approach. In this talk we dig into the future of Istio, which I work on, to show how Istio can be run in a sidecarless mode. - **Leigh Capili, Staff Developer Advocate @ VMware**  Leigh is an empathetic speaker and developer with niches in cloud-native systems and security. He has a background in building software to manage infrastructure. Leigh contributes to Kubernetes and Flux and is frequently working on his next software demo. He also co-maintains Ignite, the microVM manager with Docker UX. (https://ignite.rtfd.io/) Leigh works with the VMware Tanzu Advocacy team and previously built Developer Experience and Platform with Weaveworks, Beatport, AT&T, and DIRECTV. Leigh enjoys snowboarding with his wife and has a 60lb dog named Pepsi. - **Packaging vcluster with Carvel** Jump in with Leigh Capili for an adventure into the fun components and quirks of `vcluster` the awesome open-source project from Loft. This project is very exciting because it enables a multi-tenancy model that empowers platform builders to implement controls and features while also enabling end-users to have access and freedom within their virtual-cluster boundary. Expect Leigh to bring his hacking spirit and obsession with developer experience along! Flux now supports OCI sources, and Carvel has a new package creation workflow ;) (`kctrl package`). See you for the demo! - **Hosts:** - @alex.b - @phenixblue ## This Month in Kubernetes - v1.26 Release Cycle  - Have your draft KEPs ready for the PRR team by Thursday, and final versions opted-in by Oct. 6. Current CI signal is green - Next Deadline: Production Readiness Sept. 29th - Fix Releases  - The September 15th patch releases [broke user applications](https://groups.google.com/a/kubernetes.io/g/dev/c/tA6LNOQTR4Q). As such, new patch releases for 1.25.2, 1.24.6, 1.23.12, and 1.22.15 were pushed on Sept. 21. Users should skip the prior update and go straight to this one. - v1.25.2 - v1.24.6 - v1.23.12 - v1.22.15 - Promotions  - NA - Deprecations  - [In-tree cloud provider auth for kubectl is removed again for 1.26](https://github.com/kubernetes/kubernetes/pull/112341) - CVE's  - [CVE-2022-3172 - Allows aggregated API servers to misdirect traffic and steal credentials](https://github.com/kubernetes/kubernetes/issues/112513) - [CVE-2021-25749](https://github.com/kubernetes/kubernetes/issues/112192) - PR's of Note  - [Add auth API to get self subject attributes](https://github.com/kubernetes/kubernetes/pull/111333) - Community News  - [COSI: Object Storage Management using Kubernetes](https://kubernetes.io/blog/2022/09/02/cosi-kubernetes-object-storage-management/) - [Security Checklist for Clusters](https://kubernetes.io/docs/concepts/security/security-checklist/) - [Official CVE Feed - Alpha](https://kubernetes.io/docs/reference/issues-security/official-cve-feed/) - For machines: `$ curl -Lv https://k8s.io/docs/reference/issues-security/official-cve-feed/index.json` - [Blog Post](https://kubernetes.io/blog/2022/09/12/k8s-cve-feed-alpha/) - [Testing Kubernetes operators using EnvTest](https://www.infracloud.io/blogs/testing-kubernetes-operator-envtest/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-8-AZSSSkSGwDWQPTjjlwt6X_LczIZigbAkshtQrfozIfeMo-leSIPVa75ZJxXg_dB6caEc) ## Meetup Links - [Cody Crudgington Memorial Site](https://everloved.com/life-of/cody-crudgington/) ## Meetup Slides ## Meetup Recordings ## Meetup Notes ### Who's Hiring  ###### tags: `meetup` `september` `2022` `cody crudgington` `istio` `ambient mesh` `service mesh` `sidecarless` `carvel` `vcluster` `oci` `imgpkg`