Kubernetes 1.19 ya zo tare da tallafi na shekara guda, TLS 1.3, haɓakawa da ƙari

Sabuwar sigar Kubernetes 1.19 ta fito yanzu bayan ɗan jinkiri, amma a ƙarshe yanzu akwai tare da sabuntawa da yawa wanda ke inganta shirye-shiryen samar da Kubernetes. Wadannan cigaban sun hada da ingantaccen sigar Ingress da ayyukan seccomp, haɓaka tsaro, kamar tallafi don TLS 1.3 da sauran haɓakar fasali.

Bayan haka, kodayake ƙungiyar Kubernetes ya fitar da sabuntawa sau hudu a tarihi a shekara, zasu saki uku ne kawai a wannan shekara, saboda yanayin annoba. Shafin 1.19 mai yiwuwa ya zama sabuntawa na ƙarshe na wannan kalandar shekara.

“A ƙarshe, mun buga Kubernetes 1.19, na biyu na shekarar 2020 kuma zuwa yanzu mafi tsayi sakewa wanda ya ɗauki jimlar makonni 20. Ya ƙunshi haɓakawa 34: haɓakawa 10 an matsar da siyayyiyar sigar, haɓakawa 15 zuwa sigar beta da haɓaka 9 zuwa nau'in alpha.

“Shafin 1.19 ya sha bamban da na yau da kullun saboda COVID-19, zanga-zangar George Floyd, da sauran al'amuran duniya daban-daban waɗanda muka fuskanta a matsayin ƙungiyar ƙaddamarwa. «

Daga canje-canjen da aka gabatar, mafi mashahuri shine a ciki Ingress wanda aka fara gabatar dashi azaman beta na API Yana sarrafa damar zuwa waje a cikin sabis a cikin gungu, galibi zirga-zirgar HTTP, ƙari ma zai iya samar da daidaiton kaya, dakatar da TLS, da kuma tallata sunaye na asali.

Kuma a cikin wannan sabon sigar 1.19, Ingress an sabunta shi zuwa ingantaccen fasali kuma an kara shi zuwa Networks APIs v1. Wannan sabuntawa yana yin canje-canje masu mahimmanci ga abubuwan Ingress v1, gami da inganci da canje-canje na tsari.

A gefen sarkakiya (Yanayin Lissafi na Tsaro) kuma akwai azaman tsayayyen siga a cikin sigar Kubernetes 1.19 (seccomp sigar tsaro ce ta kernel wacce ke iyakance adadin kiran tsarin da aikace-aikace ke iya yi).

An fara gabatar da wannan azaman fasalin Kubernetes a cikin sigar 1.3, amma yana da iyakancewa. A baya, ana buƙatar bayani akan PodSecurityPolicy yayin amfani da bayanan martaba na seccomp zuwa kwasfan fayiloli.

A cikin wannan sigar, seccomp ya gabatar da sabon filin seccompProfile an kara shi zuwa kwandon abubuwa da tsaro Don tabbatar da daidaituwa ta baya tare da Kubelet, za a yi amfani da bayanan bayanan seccomp bisa fifiko:

  • Filin takamaiman akwati.
  • Bayanin takamaiman akwati.
  • Filin a matakin kwafsa.
  • Bayani na gaba ɗayan fayil ɗin.

Akwatin sandbox na an tsara faifai yanzu tare da bayanan martaba na seccomp lokacin gudu / tsoho daban a cikin wannan sabuntawa.

Wani muhimmin canji da kungiyar ta gabatar shine tsawaita lokacin tallafi zai ba da damar fiye da 80% na masu amfani don amfani da nau'ikan da suka dace, maimakon 50-60% da suke kallo a halin yanzu.

“Lokaci na tallafi na shekara-shekara yana samarda abubuwanda masu ƙarancin amfani suke son su kuma ya dace daidai da hawan shirin tsarawa na shekara-shekara. Farawa da sigar Kubernetes ta 1.19, za a faɗaɗa taga na talla zuwa shekara guda. "

Har ila yau, Kubernetes yana ba da matosai masu ƙarfi waɗanda rayuwar su tana da nasaba da kwafsa kuma ana iya amfani da shi azaman filin aiki (alal misali, emptydir ginannen nau'in girma) ko loda wasu bayanai a cikin kwafon ruwa (misali, ginannen tsari da kuma nau'ikan sirrin girma, ko "kundin CSI akan layi": Sirri abu ne wanda ke dauke da karamin bayanai masu matukar muhimmanci, kamar kalmar wucewa, alama, ko mabuɗin.

Sabuwar fasalin alpha a cikin Jigogin Jima'i na Jima'i yana bawa duk wani mai kula da adana ajiyar da ke tallafawa mai samar da kayan aiki damar amfani dashi azaman ƙararrakin ephemeral tare da ƙaran rayuwar rayuwa da aka alaƙa da kwafon.

Ana iya amfani dashi don samar da ajiyar aiki banda tushen faifai, kamar ƙwaƙwalwar ajiya mai ɗorewa ko keɓaɓɓiyar faifai na gida akan wannan kumburin. Duk abubuwan daidaitawa na StorageClass suna tallafawa don samar da ƙarar.

Duk ayyukan da goyan bayan PersistentVolumeClaims ke tallafawakamar bin diddigin ƙarfin adanawa, hotunan hoto da dawo da su, da kuma girman girma.

A ƙarshe, wani daga cikin fitattun sauye-sauye, an yi shi ne don shawarwarin binciken tsaro na bara, Siffar Kubernetes 1.19 tana ƙara tallafi don sabon TLS 1.3 ciphers ana iya amfani da hakan tare da Orchestrator.

Idan kanaso ka kara sani game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.