logo
Dates

Author


Conferences

Tags

Sort by:  

Authors: Tim Hockin, Bowei Du
2021-10-13

tldr - powered by Generative AI

Updates and directions on Kubernetes Network Components presented at SIG-NETWORK conference
  • SIG-NETWORK is responsible for Kubernetes network components such as pod networking, ingress and egress traffic, service abstractions, and network policies
  • The SIG is focused on major projects such as dual stack support, gateway API for L4 and L7, and network policy improvements
  • IPv4 v6 dual stack is now GA and services and pods now support both IPv4 and IPv6
  • Gateway API has made significant progress towards v1 alpha 2 and aims to be role-oriented and extensible
  • Reference policy governs whether or not a given resource is allowed to be referenced from another namespace
  • A CVE was discovered in the 122-123 cycle regarding endpoint or endpoint slice APIs directing traffic with unintended effects
  • The mitigation for this issue is to treat the ability to create, modify endpoint and endpoint slices as a privileged operation and remove this capability from the ordinary users of your cluster