The Envoy proxy, a universal data plane for Cloud Native, has just graduated as the third top-level project in the CNCF. Craig and Adam talk to its author, Matt Klein from Lyft, about modern load balancing for microservices and pragmatically avoiding “second system” syndrome.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

News of the week

• CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections
  • Gravitational write up
  • Proof of concept
  • More cryptocurrency mining with exploited Kubernetes clusters
• Microsoft Connect();
  • AKS virtual nodes are in preview
  • Virtual Kubelet joins CNCF
  • GPU support for ACI
  • ACS to be retired in favour of AKS
  • Cloud Native Application Bundle
    • Microsoft and Docker introduce Cloud Native Application Bundle
    • CNAB spec
    • Duffle
• DockerCon EU 2018:
  • Docker releases Compose operator for Kubernetes
    • Available on GitHub
  • Docker Desktop Enterprise
• Hashicorp Vault 1.0
• Upbound introduce Crossplane
  • Available on GitHub
  • GitLab moving to GKE
• Rook 0.9.0 — available you-guessed-where
• MicroK8s from Canonical:
  • Announc4t
  • Project p2e
  • Available on G5b

Links from the interview

• Envoy
  • Recently graduated to top-level project at the CNCF
  • Built at Lyft
  • Replaces libraries like Finagle and Hystrix
  • Introduction to modern network load balancing and proxying
• Envoy contributors
• Istio, built on Envoy
• Turning down the VC money: Why Matt isn’t starting an Envoy company
• Service mesh data plane vs. control plane
• Matt Klein on Twitter
• Matt’s blog