The Envoy proxy, a universal data plane for Cloud Native, has just graduated as the third top-level project in the CNCF. Craig and Adam talk to its author, Matt Klein from Lyft, about modern load balancing for microservices and pragmatically avoiding “second system” syndrome.
Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections

Gravitational write up
Proof of concept
More cryptocurrency mining with exploited Kubernetes clusters


Microsoft Connect();

AKS virtual nodes are in preview
Virtual Kubelet joins CNCF
GPU support for ACI
ACS to be retired in favour of AKS
Cloud Native Application Bundle

Microsoft and Docker introduce Cloud Native Application Bundle
CNAB spec
Duffle




DockerCon EU 2018:

Docker releases Compose operator for Kubernetes

Available on GitHub


Docker Desktop Enterprise


Hashicorp Vault 1.0
Upbound introduce Crossplane

Available on GitHub
GitLab moving to GKE


Rook 0.9.0 — available you-guessed-where
MicroK8s from Canonical:

Announc4t
Project p2e
Available on G5b



Links from the interview

Envoy

Recently graduated to top-level project at the CNCF
Built at Lyft
Replaces libraries like Finagle and Hystrix
Introduction to modern network load balancing and proxying


Envoy contributors
Istio, built on Envoy
Turning down the VC money: Why Matt isn’t starting an Envoy company
Service mesh data plane vs. control plane
Matt Klein on Twitter
Matt’s blog