Cloud Native Digest: 6 Kubernetes Cost Control Strategies

Open source projects worth checking out

Base Image Finder

When using a container scanning tool to identify known vulnerabilities (CVEs, or common vulnerabilities and exposures), it can be difficult to understand where the vulnerabilities exist in the container, and how to mitigate them. Often, the simplest and most efficient mitigation is to update the “base image” — or the image used in the FROM statement in your container definition.

BIF allows you to understand the impact of updating the base image of your container will have:

• First, it can detect what base image the container is using, even though it doesn’t have access to the Dockerfile.
• Second, it will show you what vulnerabilities are present in that base image.
• Lastly, it will show you what versions of that base image don’t have that vulnerability.

KServe

KServe provides a Kubernetes Custom Resource Definition for serving machine learning (ML) models on arbitrary frameworks. It aims to solve production model serving use cases by providing performant, high abstraction interfaces for common ML frameworks like Tensorflow, XGBoost, ScikitLearn, PyTorch, and ONNX.

It encapsulates the complexity of autoscaling, networking, health checking, and server configuration to bring cutting edge serving features like GPU Autoscaling, Scale to Zero, and Canary Rollouts to your ML deployments. It enables a simple, pluggable, and complete story for Production ML Serving including prediction, pre-processing, post-processing and explainability.

Kuberhealthy

Kuberhealthy is a Kubernetes operator for synthetic monitoring and continuous process verification. Write your own tests in any language and Kuberhealthy will run them for you. Automatically creates metrics for Prometheus. Includes simple JSON status page. Now part of the CNCF!

Clusterpedia

It is an encyclopedia of multi-cluster to synchronize, search for, and simply control multi-cluster resources.

Clusterpedia can synchronize resources with multiple clusters and provide more powerful search features on the basis of compatibility with Kubernetes OpenAPI to help you effectively get any multi-cluster resource that you are looking for in a quick and easy way.

Technical recommendations

6 Kubernetes Cost Control Strategies You Need In Place For 2023

This article discusses strategies for controlling cloud computing costs when using Kubernetes. It emphasizes the complexity and dynamism of cloud computing costs, and suggests adopting a FinOps approach to manage cloud computing costs. The article lists six Kubernetes cost control strategies, including workload cost allocation, Kubernetes cost optimization, right-sizing advice, Kubernetes cost showback, multi-cluster cost and usage, and cloud billing integration. The article recommends using a Kubernetes governance platform to implement these strategies. By adopting these strategies, organizations can gain better understanding of their cloud resource usage, optimize compute and workloads, and reduce costs associated with Kubernetes.

Top 5 DevOps Trends in 2023

In this article, it focuses on five DevOps trends that organizations should consider when developing applications in 2023 and how to leverage them to achieve their goals:

• Increased use of artificial intelligence and machine learning
• Scaling of DevSecOps
• Cloud-native technologies
• DevOps-as-a-Service
• Increased focus on observability

In 2023, DevOps will undergo another transformation with new tools and technologies that will help organizations stay ahead of the curve. For organizations looking to develop applications, understanding the latest trends is critical to ensuring success in the competitive digital marketplace.

Goodbye etcd, Hello PostgreSQL: Running Kubernetes with an SQL Database

This article introduces a method of using PostgreSQL as a data storage backend for Kubernetes instead of etcd. The article first discusses the limitations and drawbacks of etcd, and then highlights the advantages of using PostgreSQL as a data storage backend for Kubernetes. The article provides a detailed guide on how to use PostgreSQL in a Kubernetes cluster, along with example commands and configuration files. The article also discusses some of the challenges of using PostgreSQL in Kubernetes, such as managing database backups and recovery, and handling failover. Finally, the article notes that using PostgreSQL as a data storage backend for Kubernetes requires some additional configuration and management work, but can provide better performance and reliability.

What’s new in cloud native

Istio is now a graduated CNCF project

Istio is now a graduated Cloud Native Computing Foundation (CNCF) project.

Istio is an open source service mesh that layers transparently onto existing distributed applications. Istio’s powerful features provide a uniform and more efficient way to secure, connect, and monitor services. Istio is the path to load balancing, service-to-service authentication, and monitoring — with few or no service code changes.

Knative fuzzing audit results

Knative is happy to announce the completion of its fuzzing security audit. The audit was carried out by Ada Logics and is part of an initiative by the CNCF to bring fuzzing to the CNCF landscape. The audit spanned several months in late 2022 and early 2023 and resulted in 29 fuzzers written for 3 Knative sub-projects. The fuzzers found a single issue in a 3rd-party dependency that has been fixed.

Instacart Creates a Self-Serve Apache Flink Platform on Kubernetes

Instacart moved their Apache Flink workloads from AWS EMR to Kubernetes to meet the high demand for data processing use cases using Flink within the organization, as using EMR became problematic for many teams with different requirements. As a result, they made the platform easier to use and reduced their operational and infrastructure costs.

The company has been using Apache Flink on AWS EMR since 2021 for several use cases, ranging from real-time decision-making and data augmentation to machine learning feature generation and OLAP data ingestion. The usage of Flink grew gradually, with 50 product teams using it and running hundreds of pipelines.

About KubeSphere

KubeSphere is an open source container platform built on top Kubernetes with applications at its core. It provides full-stack IT automated operation and streamlined DevOps workflows.

KubeSphere has been adopted by thousands of enterprises across the globe, such as Aqara, Sina, Benlai, China Taiping, Huaxia Bank, Sinopharm, WeBank, Geko Cloud, VNG Corporation and Radore. KubeSphere offers wizard interfaces and various enterprise-grade features for operation and maintenance, including Kubernetes resource management, DevOps (CI/CD), application lifecycle management, service mesh, multi-tenant management, monitoring, logging, alerting, notification, storage and network management, and GPU support. With KubeSphere, enterprises are able to quickly establish a strong and feature-rich container platform.

To stay updated, visit our official website or follow us on Twitter.