April 2024 Summaries

Replicated's Monthly Release Highlights for May 2024 introduce several updates, including alpha support for adding S3 object storage and AWS RDS Postgres databases to EKS clusters, enhanced traffic routing into VM-based clusters with DNS and TLS provisioning, and a new comprehensive cluster creation page in the vendor portal. The Replicated SDK now allows programmatic naming and tagging of instances via the SDK API, improving instance management visibility. New features for the vendor portal include detailed workload status updates in notifications and the addition of channel release sequences on the Release History page. The embedded cluster section offers alpha support for single-node installations in air gap environments, enabling the creation of an air gap bundle for application and infrastructure updates. Product documentation has been enhanced with advanced KOTS template function examples and a new telemetry overview diagram, alongside a feature to hide the sidebar for a clearer reading experience.

In an interview with Replicated, Romain, a Senior Product Manager at GitGuardian, discusses the strategic importance of their self-hosted software solutions, which serve a significant portion of their larger enterprise clients who prefer on-premise deployments for better control and security. GitGuardian, known for its secret detection and remediation solutions, has partnered with Replicated to enhance their self-hosted offerings by integrating custom telemetry features, enabling better insights into customer usage patterns. This collaboration allows GitGuardian to utilize advanced tools like Helm for deployment, which caters to DevOps professionals and supports their goal of extending services to government entities with strict compliance needs. By leveraging Replicated's capabilities, GitGuardian can focus on developing core solutions while ensuring efficient delivery and troubleshooting of their self-hosted software. The partnership has also facilitated the implementation of new features, such as secret scanning in platforms like Slack and JIRA, further broadening GitGuardian's service capabilities.

Publishing applications to cloud marketplaces using Replicated offers a streamlined approach for distributing software by leveraging platforms provided by major cloud providers, such as AWS, Azure, Google, IBM, and Oracle. These marketplaces function like app stores for the cloud, allowing customers to easily purchase and install applications, which counts towards their committed cloud provider spend, aligning with their financial considerations. Advantages include established installation patterns familiar to customers and collaborative marketing efforts with cloud providers, even without formal partnerships. The process involves automating the maintenance of cloud resources, creating machine images, and using tools like CloudFormation for deployment. An example with AWS showcases the SlackerNews application, highlighting steps such as creating licenses, spinning up resources, and managing access through AWS features like Secrets Manager and Lambda functions. The approach emphasizes starting with simple deployments and iterating, with a focus on aligning with cloud provider best practices and ensuring customer ease of use. Replicated seeks to enhance integration across components and invites potential design partners to collaborate on this initiative.

On March 29, 2024, a security vulnerability was discovered in the xz/liblzma package, leading to a potential backdoor affecting SSH and prompting Replicated to conduct a risk assessment. Initially, their analysis showed no impact on their products due to regular updates based on Wolfi images, but they decided to proactively update their software after further information emerged. By April 3, 2024, Replicated released an updated version of KOTS, ensuring the exclusion of the vulnerable xz library, and continues to monitor the situation while encouraging customers to contact them with concerns.

The new Embedded Cluster, currently in Beta, represents a significant redesign of kURL to facilitate the deployment of applications alongside a Kubernetes cluster as an appliance that is easy to install, update, and manage. This solution, built on the k0s Kubernetes distribution, offers a faster installation process, reduced host dependencies, and enhanced operating system support compared to its predecessor. Key features include a simplified user experience through an admin console, streamlined updates for applications and clusters, and enhanced multi-node cluster support. The introduction of a single-node Beta and plans for airgap support and disaster recovery demonstrate ongoing development efforts. The Embedded Cluster aims to abstract Kubernetes complexities from end users, making it more accessible for software vendors and their customers. Users can configure the cluster through an Embedded Cluster config file, allowing for customization such as deploying additional Helm charts and modifying Kubernetes settings. The process includes customer-specific tarballs for installation, with the option for hosting resources internally or through Replicated's vendor API. The product's development team actively seeks feedback to refine features as they progress towards a General Availability release.

Replicated's April 2024 release highlights include updates and new features for the Compatibility Matrix, Vendor Portal, and Product Documentation. The Compatibility Matrix now supports auto-scaling node groups in EKS, GKE, and AKS clusters, allowing for more dynamic resource management, and introduces multiple node groups for mixed architectures and GPUs. It also adds alpha support for S3 buckets in EKS clusters. The Vendor Portal enhancements offer more detailed workload status information and the ability to view airgap bundle contents more easily, alongside the option to search by customer email via the Vendor API. Product Documentation improvements focus on enhanced navigation with a new navbar and sidebar, as well as "What's New?" and "Did You Know?" cards to highlight features on the docs site landing page.