January 2025

๐ Intro
Welcome to the very first edition of CloudNative.Now - a monthly newsletter that covers all that has been happening in the cloud native world in the past month!
As this is the very first issue I feel like I should introduce myself and this newsletter a little bit. Iโm Marcus Noble ๐ and I work as a Platform Engineer at Giant Swarm. This newsletter is my attempt at keeping myself, and others, up-to-date on all the latest news, tools and events happening in the cloud native world. A new issue will be published each month on the last Friday of that month and contain a roundup of articles, announcements, tools, tutorials, events and CFPs relating to cloud native technologies and the community.
Youโre invited to subscribe to the email newsletter or add the RSS feed to your favourite feed reader to make sure you donโt miss anything! And please help to spread the word and recommend this to your friends and network if you find the content useful! ๐
If you have any feedback or have any links youโd like to suggest please reach out on Bluesky or Mastodon! ๐ฌ
๐ฐ News & Articles
- Announcing CloudNative.Now - Marcus Noble
An overview from myself on the technologies, decisions and architecture behind setting up this new newsletter and what is planned for the future. - Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking Online - The Hacker News
As many as 296,000 Prometheus instances are exposed online, leaking credentials and risking RCE attacks. - โ ๏ธ CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API - kubernetes
If you run Windows nodes in your Kubernetes cluster please make sure to take a look at this vulnerability that could allow for abritrary commands being run. - How CERN uses Grafana and Mimir to monitor the world's largest computer grid - Grafana Labs
Learn how CERN uses Grafana and Mimir to help 12,000 global researchers access data from the world's largest particle physics lab. - Dark Side of Open Source: The Community Strikes Back - Dotan Horovits
2024 saw great disturbance in the force with FOSS like Redis and Wordpress. But it also saw successful community forks and resilience. - Reddit No Longer Haunted by Drifting Kubernetes Configurations - Joab Jackson
Three years ago, Reddit's infrastructure engineers team spent most of its time putting out fires. Here's how developing a platform abstraction streamlined operations and put them back in charge. - Confidential computing at 1Password - 1Password
Confidential computing is a new technology that enables 1Password to bring its end-to-end encryption model into the cloud. - Exploring the Kubernetes API Server Proxy - raesene
A look into the Kubernetes API server proxy and some interesting security implications that you might want to be aware of. - Understanding Kubernetes: part 54 โ StatefulSet - Aurรฉlie Vache
Part 54(!!) of a series of sketchnotes from Aurรฉlie, this one covering everything StatefulSet. - Six Sins of Platform Teams - Sergey Tselovalnikov
In this article, Sergey shares their personal mental model for platform teams' sins (anti-patterns), and how you can avoid them. - Kubernetes 1.30 on EKS - Alberto Llamas
Everything you need to know about Kubernetes 1.30 on EKS and the new default of Amazon Linux 2023 - ๐บ Internal Developer Platforms Intro (You Choose! Ch. 5, Ep. 0) - DevOps Toolkit
New chapter of the popular โYou Chooseโ series starting soon, focussing on Internal Developer Platforms (IDPs). - CloudNativeAfrica
A new website and community championing cloud native adoption, development, and growth, in Africa. - A new era for Helm - Cloud Native Computing Foundation
As cloud native heads into its second decade, weโd like to spend some time talking about Helm and its future. - ๐๏ธ Cloud Native Compass | Navigating Kubernetes: Insights, Challenges, and the Release Cycle with Kat Cosgrove - David Flanagan & Laura Santamaria
In this episode of the Cloud Native Compass podcast, hosts David Flanagan and Laura Santamaria dive deep into the complexities of the Kubernetes release cycle with guest Kat Cosgrove.
๐งโ๐ซ Tutorials & Videos
- ๐บ Is This the End of Crossplane? Compose Kubernetes Resources with kro - DevOps Toolkit
A look at KRO (see below) and how it might compare to Crossplane for resource management in Kubernetes. - ๐บ Learn Kubernetes | A Comprehensive Guide - Drewbernetes
Not a new series but if it's your New Years's resolution to learn Kuberentes then this playlist is for you! - Bootstrapping a Civo cluster with OpenTofu and Flux - Marcus Noble
A walkthrough of using OpenTofu and Flux to create a new, fully GitOps'd Kubernetes cluster on Civo. - ๐บ Top 10 DevOps Tools You MUST Use in 2025! - DevOps Toolkit
Discover the top tools you should consider using in 2025! From AI and CI/CD to containers and developer portals. - Designing and Implementing Platform Engineering - Microsoft
A free Platform Engineering course from Microsoft - Kubernetes RBAC: A Comprehensive Guide - Oshrat Nir
A comprehensive guide of all things Kubernetes RBAC, why and how to use it. - So you wanna write Kubernetes controllers? - Ahmet
A very detailed write up of the best practices of building a Kubernetes controller and CRDs
๐งฐ Tools
- Helm TUI - Pidanou Eang
Helm TUI (Terminal UI) is a text-based interface for managing Kubernetes Helm charts. With an intuitive and easy-to-use interface, it lets you search, install, upgrade, and delete charts with ease. - KRO - Powerful Abstractions for Kubernetes - AWS
Kube Resource Orchestrator (kro) is a new operator for Kubernetes that simplifies the creation of complex Kubernetes resource configurations. kro lets you create and manage custom groups of Kubernetes resources by defining them as a ResourceGroup, the project's fundamental custom resource. ResourceGroup specifications define a set of resources and how they relate to each other functionally. Once defined, resource groups can be applied to a Kubernetes cluster where the kro controller is running. Once validated by kro, you can create instances of your resource group. kro translates your ResourceGroup instance and its parameters into specific Kubernetes resources and configurations which it then manages for you. - Reserved Capacity Manager for Kubernetes - ssbostan
A new operator to help optimize the responsiveness of cluster-autoscaler by reserving low-priority resources on worker nodes as "hot spare" capacity. An interesting approach if scaling up quickly is important for you. - OpenTofu 1.9.0 - OpenTofu
New release introduces providerfor_each
. - helm-cel - idsulik
A Helm plugin that uses Common Expression Language (CEL) to validate values. Instead of using JSON Schema in values.schema.json, you can write more expressive validation rules using CEL in values.cel.yaml. - kubezonnet: Monitor Cross-Zone Network Traffic in Kubernetes - Polar Signals
A newly open sourced solution from Polar Signals for identifying and measuring cross-zone pod network traffic in Kubernetes clusters.
๐ค Events and CFPs
Events
- ๐ฌ๐ง The Schedule for KubeCon CloudNativeCon Europe 2025 is now available.
- Looking for Parties during KubeCon? Check out Conf.Party for all the latest details or follow on Mastodon or Bluesky.
- ๐บ๐ธ Civo Navigate NA - San Francisco - Civo
Civo Navigate NA is happening next month in San Francisco.
Not got a ticket yet? Get yours now for $25 codeKKCIVONAV25
(Thank you Civo for providing us with this offer ๐) - ๐ณ๐ด The Schedule for Cloud Native Day Oslo 2025 is now live.
Both myself and my colleague Joe will be giving talks here. I hope to see some of y'all there!
CFPs open this month
- ๐ซ๐ฎ KCD Helsinki 2025 - closes February 7th
- ๐ญ๐บ KCD Budapest 2025 - closes February 8th
- ๐น๐ท KCD Istanbul 2025 - closes February 15th
- ๐จ๐ฟ ๐ธ๐ฐ KCD Czech & Slovak - Bratislava 2025 - closes March 14th
- ๐ฉ๐ช ContainerDays Conference 2025 - closes March 31st
- ๐ฉ๐ช Cloud Native Summit Munich 2025 - closes April 6th
๐คท Misc & Fun
- DOOMยฎ CAPTCHA
Solve a CAPTCHA by playing Doom. - ๐ The Cloud Native Attitude - Container Solutions
New book release from Jamie Dobson and Anne Currie. - Seconds Since the Epoch - Aphyr
Today I learnt that seconds since the epoch don't include leap seconds! - Why Weโre Bringing Pebble Back - Eric Migicovsky
One of the original heros in the smartwatch scene looks like it will be making a comeback after more than a decade following Google making the code for PebbleOS open source.
That's all for this month!
Thank you for reading! ๐
If you enjoyed this post, please spread the word and share with your friends.
~ Marcus ๐