Istio 1.22 and OpenTofu 1.7. Kubernetes turns 10 party and GKE Features

The News

GKE

• Scalable multi-tenancy management with Config Sync and team scopes: Learn how to combine GKE fleet with team scopes and Config Sync to build multi-tenant GKE clusters.
• POD Multi-networking on GKE: If you are a telco user this is for you. You can assign multiple interfaces in seperate networks to the same pod for use-cases like Network Functions.
• Running out of IP addresses for your Kubernetes Pods: This article has some tried and and true working solution for when you eat up all your IP addresses on GKE.
• GKE-Managed subnet for Services: Planning IP address ranges is a pain. GKE now (Autopilot version 1.27 and standard Version 1.29) assigned a GKE-Managed IP Range (34.118.224.0/20) if you don’t specify one. You can still optionally specify your own IP Range.
• Trillium AKA TPU v6: Is a new generation of Tensor Processing Units. A new more powerful offering in the AI Hypercomputer portfolio of products. It’s supported on Vertex AI, GKE and GCE.

Google Cloud

• Introducing Google Threat Intelligence: This new offering combines existing products like Mandiant, VirusTotal and an AI-powered agent to provide conversational search across multiple sources.
• Artifact Registry adds new features: You can now download files from a standard or remote repo regardless of the artifact format. Set Immutable tags (Preview) and get more about of vulnerability scanning. And yeah don’t forget Google Container Registry (GCR) will be sunset on March 18, 2025.

Kubernetes

• Kubernetes for Developers: A new edition of this book is out now. Learn how Kubernetes can be useful to you as a developer.
• Kubernetes is turning 10: And there will be a lot of celebration parties around. If you are based in the Silicon Valley Google is hosting one in the Bay View campus. RSVP here.

Cloud Native

• OpenTofu 1.7.0 is out: Tons of new features like state encryption, functions and more.
• Istio 1.22 is out: Ambient mode now in Beta, Gateway API now Stable for service mesh and much more.

The Technical

Google Cloud

• Configure a Cloud Run to use direct VPC egress: Learn how to use Direct VPC egress with Cloud Run to access Internal services on GCP with this codelab.
• Migrate from GCR to AR with gCrane: With GCR set to sunset on March 18 next year. This article shows how gcrane can be used to move your artifacts to Artifacts Registry.

The Editorial

• KubeCon Paris Transparency Report: The largest KubeCon so far. more than 50% first timers.

Tools of the week

• https://github.com/hac01/gcp-iam-brute: Fuzz test GCP IAM permissions.