8 min read

April 2025

April 2025
KubeCon CloudNativeCon London was a huge success! (Photo credit: Cloud Native Computing Foundation via Flickr)

👋 Intro

Welcome to the April edition of CloudNative.Now - a monthly newsletter that covers all that has been happening in the cloud native world in the past month!

I'm not sure about all of you but KubeCon London was a fantastic, albeit very busy, week for me! So many people I wanted to catch up with from the community, both old friends and new. It was lovely to see everyone and just wish I had more time to catch everyone I wanted to talk with.

This month's issue includes several announcements and updates from KubeCon and related events so if you weren't able to make it don't feel like you're missing out!

On a personal note, I also spoke at the first ever KCD Budapest 🇭🇺 this month and had a fantastic time.
Lots of great talks and a really good turn out with almost 300 attendees! 🤯

A selfie of four people smiling, stood in a bar.
I got to hang out with some of my fellow CNCF Ambassadors!

I'm also still looking for feedback on this newsletter. I've had some great feedback so far, both in person and via the form, but would really like to get as much as possible to make it great for all of you!
So if you have a few minutes to spare I'd love it if you could share your thoughts:

➡️ Feedback Form ⬅️

As always, you’re invited to subscribe to the email newsletter or add the RSS feed to your favourite feed reader to make sure you don’t miss anything! And please help to spread the word and recommend this to your friends and network if you find the content useful! 💙

If you have any feedback or have any links you’d like to suggest please reach out on Bluesky or Mastodon! 💬

📰 News & Articles

🔒 Security

  • The Collapse of CVE: How a Funding Failure Threatens Global Cybersecurity - Sal Kimmich
    The Common Vulnerabilities and Exposures (CVE) program will no longer be funded by the U.S. government, a serious concern for global vulnerability coordination. As a response, some of the board members have started the CVE Foundation in an attempt to keep things going.
  • ⚠️ Argo Events CVE-2025-32445
    A user with permission to create/modify EventSource and Sensor custom resources can gain privileged access to the host system and cluster, even without having direct administrative privileges.
  • ARMO CADR Detects and Contains Kubernetes Crypto Mining Attacks - Amit Schendel
    Learn how ARMO CADR uncovered and prevented two distinct crypto-mining attack campaigns targeting a vulnerable Kubernetes deployment, providing valuable insights and IOCs.
  • clusterfuck: attack sims on k8s clusters - bilal
    clusterfuck is a multi-stage attack simulation against k8s environments. It performs executing privilege escalation, container escape, credential theft, lateral movement, and crypto mining techniques. It’s designed to validate detection capabilities in your cloud security posture management (CSPM) and endpoint detection and response (EDR) tools.
  • Kubectl Get Hacked - Iain Smart
    Discussing some ways kubeconfig files can bite and taking a look specifically at the exec capabilities.

🧑‍🏫 Tutorials, Videos & Podcasts

🧰 Tools

  • Kubernetes v1.33: Octarine - Agustina Barbetta, Aakanksha Bhende, Udi Hofesh, Ryota Sawada, Sneha Yadav
    Similar to previous releases, the release of Kubernetes v1.33 introduces new stable, beta, and alpha features. The consistent delivery of high-quality releases underscores the strength of our development cycle and the vibrant support from our community.This release consists of 64 enhancements. Of those enhancements, 18 have graduated to Stable, 20 are entering Beta, 24 have entered Alpha, and 2 are deprecated or withdrawn.
  • Nelm 1.0 released: Helm-chart compatible alternative to Helm 3 - Flant staff
    We mentioned this in last months issue but Flant have now put out a blog post introducing the v1.0 release of Nelm.
  • Introducing kube-scheduler-simulator - Kensei Nakada
    The Kubernetes Scheduler is a crucial control plane component that determines which node a Pod will run on. Thus, anyone utilizing Kubernetes relies on a scheduler. kube-scheduler-simulator is a simulator for the Kubernetes scheduler that allows users to closely examine the scheduler’s behavior and decisions.
  • Introducing vNode: Virtual Nodes for Secure Kubernetes Multi-Tenancy - Lukas Gentele
    Loft Labs introduces a new complimentary tool to their vCluster project that helps with node-level isolation - vNode.
  • KubeFleet - Azure
    KubeFleet is an open source solution that works on any Kubernetes cluster. We are working towards the vision that we will eventually be able to treat each Kubernetes cluster as cattle.
  • Koreo - Real Kinetic
    Koreo is a new approach to Kubernetes configuration management empowering developers and platform teams through programmable workflows and structured data
  • Ksctl
    Ksctl aims to simplify a collection of kubernetes clusters running on different cloud providers. It provides a simple and intuitive interface for managing Kubernetes clusters and is designed to be efficient and can perform tasks quickly and without the need for additional tools.
  • Comparing open source Cloud Native DBaaS solutions - Sergey Pronin
    Comparing open source Cloud Native database-as-a-service solutions that can help you to avoid vendor lock and run databases in Kubernetes with ease.
  • Atuin Desktop: Runbooks that Run - Ellie Huxtable
    Atuin Desktop looks like a doc, but runs like your terminal. Script blocks, embedded terminals, database clients and prometheus charts - all in one place.

🎤 Events and CFPs

Events

CFPs open this month

💬 Social Post of the Month

A screenshot of a Bluesky post from @jamesl.bsky.social. The text reads: "CIVO brought a server to KubeCon. Sat there at their booth, with the case off. You could go up and touch it, so I’d assumed it was an engineering sample or otherwise non-functional. I was later told it was a real production unit. @civo.com , I have to ask, did it still work after #kubecon?". The image below shows a rack server with the lid removed, showing the internals.
Well Civo, did it still work?! 😆

🤷 Misc & Fun

That's all for this month!
Thank you for reading! 💙

If you enjoyed this post, please spread the word and share with your friends.

~ Marcus 👋