Check Point® Software Technologies Ltd. announced that its Check Point CloudGuard solution has been recognized as a Leader across three key GigaOm Radar reports: Application & API Security, Cloud Network Security, and Cloud Workload Security.
Loft Labs announced a Plugin System & SDK (software development kit) for its open-source project vcluster, enabling the project’s user community and other software providers in the cloud-native space to customize the synchronization logic of the vcluster “syncer” component.
This gives users flexibility to define which resources get synchronized to the underlying Kubernetes cluster and to specify how that should happen.
The vcluster open source software is growing quickly with more than 400,000 downloads and over 1,300 stars on GitHub in less than a year after its initial release.
“Opening up vcluster to be customizable and ‘programmable’ was the logical next step to address the increasing number of requests we receive for vcluster to integrate with other CNCF projects and cloud-native technologies,” said Fabian Kramm, Co-founder and CTO of Loft Labs. “Now, users can create and contribute vcluster plugins without having to deal with the internals of the vcluster core. This makes it easier for anyone to customize vcluster’s behavior to their specific needs and integrate virtual clusters into their existing tool stack.”
Fundamentally, a vcluster plugin is a lightweight Kubernetes operator that has access to both the virtual cluster and the host cluster simultaneously. This is the main difference between a vcluster plugin and a regular Kubernetes operator that would just be installed inside the vcluster itself. Given this dual access, a vcluster plugin is able to translate resources between both the virtual cluster and its host Kubernetes clusters, which is the basic premise behind how vcluster works.
Each plugin will run as a sidecar container inside the vcluster pod. This is done to allow easier communication between vcluster and the plugins, as well as to deliver capabilities such as high-availability.
The vcluster project maintainers have created an SDK for writing plugins that abstract a lot of the syncer complexity away from the user, but still provides access to the underlying data structures if needed. Internally, the vcluster SDK uses the popular controller-runtime project, that is used by vcluster itself to create the controllers. The vcluster SDK makes it possible to write custom plugins with just a few lines of code.
First launched in April 2021, vcluster is used to create lightweight Kubernetes clusters that run inside the namespaces of underlying Kubernetes clusters. Using virtual clusters solves the majority of multi-tenancy issues of Kubernetes because they offer:
- Better isolation than simple namespace-based multi-tenancy;
- Reduced cloud computing cost because virtual clusters are much more lightweight and resource-efficient than spinning up separate single-tenant clusters;
- Logical separation and encapsulation of application workloads from the underlying cluster’s shared infrastructure workloads (such as shared ingress controller or network plug-ins).
At the same time, virtual cluster users can expect that their virtual cluster behaves just like any regular Kubernetes cluster because vcluster is a certified Kubernetes distribution, which means that it passes all conformance tests that CNCF requires. Virtual clusters are often used as development environments when engineers are building, testing and debugging cloud-native software, but they are also frequently used as ephemeral environments for executing continuous integration/continuous delivery (CI/CD) pipelines.
Loft Labs builds its enterprise-grade Kubernetes platform Loft on top of vcluster. Loft is used by large organizations to create a self-service platform for their engineering teams. When an enterprise runs Loft, their engineers can provision virtual clusters on-demand whenever they need them, either using the Loft UI (user interface), the Loft CLI (command-line interface) or even using the Kubernetes command-line tool kubectl via the custom resources provided as part of Loft.
Industry News
LaunchDarkly announced the private preview of Warehouse Native Experimentation, its Snowflake Native App, to offer Data Warehouse Native Experimentation.
SingleStore announced the launch of SingleStore Flow, a no-code solution designed to greatly simplify data migration and Change Data Capture (CDC).
ActiveState launched its Vulnerability Management as a Service (VMaas) offering to help organizations manage open source and accelerate secure software delivery.
Genkit for Node.js is now at version 1.0 and ready for production use.
JFrog signed a strategic collaboration agreement (SCA) with Amazon Web Services (AWS).
mabl launched of two new innovations, mabl Tools for Playwright and mabl GenAI Test Creation, expanding testing capabilities beyond the bounds of traditional QA teams.
Check Point® Software Technologies Ltd. announced a strategic partnership with leading cloud security provider Wiz to address the growing challenges enterprises face securing hybrid cloud environments.
Jitterbit announced its latest AI-infused capabilities within the Harmony platform, advancing AI from low-code development to natural language processing (NLP).
Rancher Government Solutions (RGS) and Sequoia Holdings announced a strategic partnership to enhance software supply chain security, classified workload deployments, and Kubernetes management for the Department of Defense (DOD), Intelligence Community (IC), and federal civilian agencies.
Harness and Traceable have entered into a definitive merger agreement, creating an advanced AI-native DevSecOps platform.
Endor Labs announced a partnership with GitHub that makes it easier than ever for application security teams and developers to accurately identify and remediate the most serious security vulnerabilities—all without leaving GitHub.
GitHub announced a wave of new features and enhancements to GitHub Copilot to streamline coding tasks based on an organization’s specific ways of working.
Mirantis launched k0rdent, an open-source Distributed Container Management Environment (DCME) that provides a single control point for cloud native applications – on-premises, on public clouds, at the edge – on any infrastructure, anywhere.
Hitachi Vantara announced a new co-engineered solution with Cisco designed for Red Hat OpenShift, a hybrid cloud application platform powered by Kubernetes.