kefala : On Feeling Competent
VS Code & Hugo: The MoonBooth guide
In this article, I'll show you all the VS Code tips and tricks I use to save time working with Hugo sites each month.
Earth now weighs six ronnagrams: New metric prefixes voted in
Say hello to ronnagrams and quettameters: International scientists gathered in France voted on Friday for new metric prefixes to express the world's largest and smallest measurements, prompted by an ever-growing ...
Scaling Mastodon in the Face of an Exodus
Elon Musk bought Twitter, hundreds of thousands of people joined Mastodon, and the Weirder Earth server wasn't ready. Here's how we saved it, and how you can do the same for yours.
They tried to make a commercial product using AI to help devs write code and they’re throwing in the towel saying it’s too early | Kite is saying farewell
From 2014 to 2021, Kite was a startup using AI to help developers write code. We have stopped working on Kite, and are no longer supporting the Kite software. Thank you to everyone who used our product, and thank you to our team members and investors who made this journey possible. Our journey at Kite […]
Study: Almost 50% of macOS malware only comes from one app
A report by Elastic Security Labs found that 6.2% of malware ends up on macOS devices. However, almost 50% of this malware come from one source, a utility software suite called MacKeeper.
Justice Dept. Is Said to Investigate Ticketmaster’s Parent Company
The inquiry predates the botched presale of Taylor Swift tickets this week and is said to focus on whether Live Nation has abused its power in the live music industry.
The Surprising Afterlife of Unwanted Atom Bombs
The Biden administration has called for the retirement of the B83 superweapon, but nuclear experts say its most destructive parts will live on indefinitely in one form or another.
Mastodon on AWS: Host your own instance
While Twitter seems to be in chaos, the free and decentralized alternative, Mastodon, is rising. At first glance, Twitter and...
Hundreds of employees say no to being part of Elon Musk’s ‘extremely hardcore’ Twitter
“It will be extremely hard for Twitter to recover from here”
Twitter locks staff out of offices until next week
It comes amid reports that large numbers of workers have resigned from the social media platform.
These three charts show who is most to blame for climate change
Getting to the bottom of which countries have contributed most to climate change is complicated, but a few pieces of data can help.
Elon Musk orders software programmers to Twitter HQ amid at least 1,000 resignations
The morning after Musk's deadline for Twitter employees to shape up or ship out, preliminary data suggest many chose option 2.
Special counsel will oversee Justice Department's Trump investigations
The official will oversee the case of the national security documents that were found at the former president's Florida estate and key aspects of the Jan. 6 probes, according to a senior DOJ official.
Blog: Kubernetes Removals, Deprecations, and Major Changes in 1.26
Author : Frederico Muñoz (SAS)
Change is an integral part of the Kubernetes life-cycle: as Kubernetes grows and matures, features may be deprecated, removed, or replaced with improvements for the health of the project. For Kubernetes v1.26 there are several planned: this article identifies and describes some of them, based on the information available at this mid-cycle point in the v1.26 release process, which is still ongoing and can introduce additional changes.
The Kubernetes API Removal and Deprecation process
The Kubernetes project has a well-documented deprecation policy for features. This policy states that stable APIs may only be deprecated when a newer, stable version of that same API is available and that APIs have a minimum lifetime for each stability level. A deprecated API is one that has been marked for removal in a future Kubernetes release; it will continue to function until removal (at least one year from the deprecation), but usage will result in a warning being displayed. Removed APIs are no longer available in the current version, at which point you must migrate to using the replacement.
Generally available (GA) or stable API versions may be marked as deprecated but must not be removed within a major version of Kubernetes.
Beta or pre-release API versions must be supported for 3 releases after deprecation.
Alpha or experimental API versions may be removed in any release without prior deprecation notice.
Whether an API is removed as a result of a feature graduating from beta to stable or because that API simply did not succeed, all removals comply with this deprecation policy. Whenever an API is removed, migration options are communicated in the documentation.
A note about the removal of the CRI v1alpha2 API and containerd 1.5 support
Following the adoption of the Container Runtime Interface (CRI) and the [removal of dockershim] in v1.24 , the CRI is the supported and documented way through which Kubernetes interacts withdifferent container runtimes. Each kubelet negotiates which version of CRI to use with the container runtime on that node.
The Kubernetes project recommends using CRI version v1 ; in Kubernetes v1.25 the kubelet can also negotiate the use of CRI v1alpha2 (which was deprecated along at the same time as adding support for the stable v1 interface).
Kubernetes v1.26 will not support CRI v1alpha2 . That removal will result in the kubelet not registering the node if the container runtime doesn't support CRI v1 . This means that containerd minor version 1.5 and older will not be supported in Kubernetes 1.26; if you use containerd, you will need to upgrade to containerd version 1.6.0 or later before you upgrade that node to Kubernetes v1.26. Other container runtimes that only support the v1alpha2 are equally affected: if that affects you, you should contact the container runtime vendor for advice or check their website for additional instructions in how to move forward.
If you want to benefit from v1.26 features and still use an older container runtime, you can run an older kubelet. The supported skew for the kubelet allows you to run a v1.25 kubelet, which still is still compatible with v1alpha2 CRI support, even if you upgrade the control plane to the 1.26 minor release of Kubernetes.
As well as container runtimes themselves, that there are tools like stargz-snapshotter that act as a proxy between kubelet and container runtime and those also might be affected.
Deprecations and removals in Kubernetes v1.26
In addition to the above, Kubernetes v1.26 is targeted to include several additional removals and deprecations.
Removal of the v1beta1 flow control API group
The flowcontrol.apiserver.k8s.io/v1beta1 API version of FlowSchema and PriorityLevelConfiguration will no longer be served in v1.26 . Users should migrate manifests and API clients to use the flowcontrol.apiserver.k8s.io/v1beta2 API version, available since v1.23.
Removal of the v2beta2 HorizontalPodAutoscaler API
The autoscaling/v2beta2 API version of HorizontalPodAutoscaler will no longer be served in v1.26 . Users should migrate manifests and API clients to use the autoscaling/v2 API version, available since v1.23.
Removal of in-tree credential management code
In this upcoming release, legacy vendor-specific authentication code that is part of Kubernetes
will be removed from both
client-go and kubectl .
The existing mechanism supports authentication for two specific cloud providers:
Azure and Google Cloud.
In its place, Kubernetes already offers a vendor-neutral
authentication plugin mechanism -
you can switch over right now, before the v1.26 release happens.
If you're affected, you can find additional guidance on how to proceed for
Azure and for
Google Cloud .
Removal of kube-proxy userspace modes
The userspace proxy mode, deprecated for over a year, is no longer supported on either Linux or Windows and will be removed in this release. Users should use iptables or ipvs on Linux, or kernelspace on Windows: using --mode userspace will now fail.
Removal of in-tree OpenStack cloud provider
Kubernetes is switching from in-tree code for storage integrations, in favor of the Container Storage Interface (CSI).
As part of this, Kubernetes v1.26 will remove the the deprecated in-tree storage integration for OpenStack
(the cinder volume type). You should migrate to external cloud provider and CSI driver from
https://github.com/kubernetes/cloud-provider-openstack instead.
For more information, visit Cinder in-tree to CSI driver migration .
Removal of the GlusterFS in-tree driver
The in-tree GlusterFS driver was deprecated in v1.25 , and will be removed from Kubernetes v1.26.
Deprecation of non-inclusive kubectl flag
As part of the implementation effort of the Inclusive Naming Initiative ,
the --prune-whitelist flag will be deprecated , and replaced with --prune-allowlist .
Users that use this flag are strongly advised to make the necessary changes prior to the final removal of the flag, in a future release.
Removal of dynamic kubelet configuration
Dynamic kubelet configuration allowed new kubelet configurations to be rolled out via the Kubernetes API , even in a live cluster.
A cluster operator could reconfigure the kubelet on a Node by specifying a ConfigMap
that contained the configuration data that the kubelet should use.
Dynamic kubelet configuration was removed from the kubelet in v1.24, and will be
removed from the API server in the v1.26 release.
Deprecations for kube-apiserver command line arguments
The --master-service-namespace command line argument to the kube-apiserver doesn't have
any effect, and was already informally deprecated .
That command line argument wil be formally marked as deprecated in v1.26, preparing for its
removal in a future release.
The Kubernetes project does not expect any impact from this deprecation and removal.
Deprecations for kubectl run command line arguments
Several unused option arguments for the kubectl run subcommand will be marked as deprecated , including:
--cascade
--filename
--force
--grace-period
--kustomize
--recursive
--timeout
--wait
These arguments are already ignored so no impact is expected: the explicit deprecation sets a warning message and prepares the removal of the argumentsin a future release.
Removal of legacy command line arguments relating to logging
Kubernetes v1.26 will remove some
command line arguments relating to logging. These command line arguments were
already deprecated.
For more information, see [Deprecate klog specific flags in Kubernetes Components] (https://github.com/kubernetes/enhancements/tree/3cb66bd0a1ef973ebcc974f935f0ac5cba9db4b2/keps/sig-instrumentation/2845-deprecate-klog-specific-flags-in-k8s-components) .
Looking ahead
The official list of API removals ) planned for Kubernetes 1.27 includes:
All beta versions of the CSIStorageCapacity API; specifically: storage.k8s.io/v1beta1
Want to know more?
Deprecations are announced in the Kubernetes release notes. You can see the announcements of pending deprecations in the release notes for:
Kubernetes 1.21
Kubernetes 1.22
Kubernetes 1.23
Kubernetes 1.24
Kubernetes 1.25
We will formally announce the deprecations that come with Kubernetes 1.26 as part of the CHANGELOG for that release.
Securing Software Supply Chain Series - Recommended Practices Guide for Customers (PDF)
My Journey from Twitter to Mastodon
Written and publish date: November 18, 2022
monkeyWie/gopeed: High speed downloader that supports all platforms.
How to handle a reorganization as an engineering manager | LeadDev
Deleting DMs from Twitter using the GDPR
Twitter is falling apart at the seams. You might want to do your best to ensure your DMs don't end up in the wrong hands.
Penpot | Design Freedom for Teams
The open-source solution for design and prototyping
One of my extended family IT goals is to get all my peeps using password managers | John Opdenakker (@j_opdenakker@infosec.exchange)
I’ve asked this on Twitter before but let’s also try it here in the hope to reach more people outside of the #infosec bubble.
Do you use a password manager?
Reblogs appreciated! [ ] Yes [ ] No [ ] What’s a password manager? [ ] Show results
Meta Employees, Security Guards Fired for Hijacking User Accounts - WSJ
A note from CEO Andy Jassy about role eliminations
The message below was shared with Amazon employees today.
How Bunny Storage achieves a sub-17ms average global latency towards Bunny CDN
We keep calling Bunny Storage the fastest cloud storage in the world, and with the recent Johannesburg expansion, it's now running faster than ever. Thanks to the new region, Bunny Storage is now less than 17ms away from Bunny CDN on a global average, which makes Bunny Storage faster than
otterize/intents-operator: Manage network policies and Kafka ACLs in a Kubernetes cluster with ease.
Common Misconceptions about Kubernetes - A Talk with Viktor Farcic - Cohesive
rqlite: The Distributed Database Built on Raft and SQLite (Philip O'Toole) - YouTube
CMU Database Group - Vaccination Database Tech Talks - Second Dose (2021)
Speakers: Philip O'Toole (rqlite)
rqlite: The Distributed Database Built on Raft an...
Passkeys & 1Password: The future of passwordless | 1Password
The passwordless future is rapidly approaching. Soon, 1Password will help you sign in using passkeys, and we’re excited to share a sneak peek with you today.
Super-hot salt could be coming to a battery near you