Checkmarx announced a new generation in software supply chain security with its Secrets Detection and Repository Health solutions to minimize application risk.
Spectro Cloud announced version 3.0 of its Palette platform.
With Palette 3.0, Spectro Cloud is transforming the Kubernetes operating model for IT operations and development teams, enabling them to thrive even as their application infrastructures enter a new phase of complexity and scale, spanning multiple K8s distributions and execution environments from the datacenter and cloud to the edge.
The Palette 3.0 release includes Nested Clusters, a feature that enables the partitioning of a host Kubernetes cluster and deploying lightweight virtual clusters on top, similar to how virtualization creates logically isolated virtual servers on top of physical machines.These lightweight virtual clusters are very fast to fire up, which means they’re ideal to give developers the access they need to a ‘sandbox’ environment without delays. They are much more secure than using namespaces. And they look and feel just like a production environment with all the tooling and policies, unlike running a home lab on your laptop. Best of all, they can be oversubscribed on host clusters and torn down on demand, so ops teams can keep cost and complexity under control and maximize utilization.
Palette’s Nested Cluster sandbox feature enables teams to deploy and manage these virtual clusters coupled with Palette’s enterprise-grade orchestration, visibility, day-2 operations, and the fine-grained role-based access control (RBAC) as well as security normally provided for conventional clusters.
Spectro Cloud Nested Clusters can work with any existing CNCF conformant host K8s clusters including distributions such as Spectro Cloud Palette eXtended Kubernetes (PXK), AKS/EKS/GKE, VMware Tanzu, Rancher, and more.
Palette has always provided unified control over the clusters it has deployed, regardless of K8s distribution or target environment. Now, it enables operations teams to extend visibility and control over their Kubernetes estate, bringing existing “brownfield” clusters across many different distributions and environments under consistent management. Customers can:
- Attach, monitor and manage existing clusters within Palette, importing clusters from VMware Tanzu and PKS, Rancher (RKE), OpenShift, AWS EKS, Azure AKS and Google GKE. This allows operations teams to benefit from Palette’s granular namespace-level visibility over resources, health and cost that may not otherwise be easy to get from other dashboards.
- Deploy add-on layers on top of existing clusters (service mesh, logging/monitoring, etc.) and perform day-2 operations like self-healing, backup/restore, GitOps and compliance scans, or configure granular RBAC, across the full stack. Nested Cluster sandboxes can be also deployed, extending the value and providing developers access to tools of their choice on top of any existing Kubernetes.
- Provision new clusters with Rancher’s RKE, AWS EKS and Azure AKS distributions or Palette’s PXK and manage their complete day-0 to day-2 lifecycle, including scaling, RBAC, auto-healing, configuration drift control, rolling upgrades, cost management, certification rotation and OS patching.
- Automate migration of existing clusters from Rancher’s RKE, AWS EKS, Azure AKS and VMware’s Tanzu environments to Palette’s CNCF-conformant, hardened PXK distribution, with zero downtime and no manual work involved. This gives ops teams a way to escape vendor lock-in from proprietary or legacy distributions and environments that may not have a clear or non-disruptive upgrade path.
Customers can do all this at their own pace, meaning they have a path to consolidate, migrate away from legacy distributions or cloud provider lock-in, and easily scale out the power and flexibility of Nested Cluster sandboxes across existing running clusters.
Palette Dev Engine is a new feature set and user experience within Palette that ops teams can provide directly to their development teams. This gives them self-service access to Kubernetes resources, while avoiding burdening ops with trouble tickets and questions or risking infrastructure security or availability.
Palette Dev Engine includes:
- App Profiles: a reusable blueprint for app components that can be shared across development teams
- App Services: an easy way to incorporate common functions like databases and message buses into an application
- Kubernetes Sandbox: an on-demand cluster experience, delivered through Palette’s Nested Cluster capability, that developers can use to deploy the App Profile for testing or small-scale use
- Developer Dashboard: a simple view to monitor the health of all their running applications, inspecting for errors, backing up their workloads, adding new parameters, etc.
PDE is designed to free developers from having to be responsible for the “care and feeding” of the whole Kubernetes infrastructure — even to the level of having to maintain a cluster on their laptop. Instead, they get the self-service access they need. PDE is designed so developers can quickly integrate it into their existing workflows and tooling: PDE can integrate via an API with vscode (support for other IDEs coming soon), and authentication occurs via existing credentials using SSO.
Ops teams can configure PDE to the specific needs of their development teams: specifying the maximum size of app sandboxes, pre-loading default app profiles and app services, defining the underlying infrastructure where the nested clusters run, and setting policies and governance around security, access, and other enterprise requirements. Additionally, they can reduce operating and capital costs through innovative cluster pause-and-resume functionality. With this control framework in place, developers can safely and easily self-serve clusters for their applications, while ops teams can look after the underlying Kubernetes infrastructure.
Together, these three announcements of Nested Cluster sandboxes, Fleet Management for Existing Environments and Palette Dev Engine empower enterprise ops teams to streamline their Kubernetes infrastructure and processes even in times of rapid growth: bringing all clusters together, consolidating host clusters through the use of Nested Clusters and giving all their developer teams easy access to sandbox environments and tooling to reduce manual rework when building and deploying all kinds of apps to Kubernetes clusters.
“This is a powerful feature set for our enterprise customers, who are constantly trying to streamline infrastructure operations and improve the experience for their developers, who are ultimately the consumer of Kubernetes,” said Spectro Cloud co-founder and CEO Tenry Fu. “In order to truly enable app development teams to innovate at the speed of business, you have to simplify the developer experience to learn and use Kubernetes. In this major version of Palette 3.0, we have created an environment where dev teams can quickly model and deploy apps using curated services without being Kubernetes experts, while dramatically increasing efficiency and cost benefits for IT.”
The new version 3.0 of Palette follows last year’s Palette 2.0 launch and last month’s Palette Edge announcement, which included the 1.0 GA release of the Kairos immutable edge factory. Spectro Cloud continues to innovate rapidly in the areas that matter for enterprises today: core Kubernetes management, edge computing and security, plus now the developer experience.
Industry News
SmartBear has appointed Dan Faulkner, the company’s Chief Product Officer, as Chief Executive Officer.
Horizon3.ai announced the release of NodeZero™ Kubernetes Pentesting, a new capability available to all NodeZero users.
Veracode acquired certain assets of Phylum, including its malicious package analysis, detection, and mitigation technology.
AppViewX announced the completion of its acquisition by Haveli Investments.
Check Point® Software Technologies Ltd. has been recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for Email Security Platforms (ESP).
Progress announced its partnership with the American Institute of CPAs (AICPA), the world’s largest member association representing the CPA profession.
Kurrent announced $12 million in funding, its rebrand from Event Store and the official launch of Kurrent Enterprise Edition, now commercially available.
Blitzy announced the launch of the Blitzy Platform, a category-defining agentic platform that accelerates software development for enterprises by autonomously batch building up to 80% of software applications.
Sonata Software launched IntellQA, a Harmoni.AI powered testing automation and acceleration platform designed to transform software delivery for global enterprises.
Sonar signed a definitive agreement to acquire Tidelift, a provider of software supply chain security solutions that help organizations manage the risk of open source software.
Kindo formally launched its channel partner program.
Red Hat announced the latest release of Red Hat Enterprise Linux AI (RHEL AI), Red Hat’s foundation model platform for more seamlessly developing, testing and running generative artificial intelligence (gen AI) models for enterprise applications.
Fastly announced the general availability of Fastly AI Accelerator.