
Security News
AI Slop Is Polluting Bug Bounty Platforms with Fake Vulnerability Reports
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.
tkestack.io/tapp
TAPP is a CustomResourceDefinition(CRD) based app kind, it contains most features of kubernetes deployment
and statefulset
, and it is easy for users to run legacy applications on Kubernetes. Nowadays, many customers want to adopt Kubernetes, and migrate their legacy applications to Kubernetes. However they could not use Kubernetes’ workloads(e.g. deployment
, statefulset
) directly, and it will take a lot of effort to transform those applications to microservices. TAPP could solve these problems.
Support unique index for each instance(same as statefulset
)
Support operating(start/stop/upgrade) on specific instances(pods)
It is more suitable for traditional operation and maintenance, e.g. when administor want to stop one machine, he could just stop instances on that machine, and do not affect instances on other machines.
Support in place update for instances
While many stateless workloads are designed to withstand such a disruption, some are more sensitive, a Pod restart is a serious disruption, resulting in lower availability or higher cost of running.
Support multi versions of instances
Instances use different images or different config.
Support Horizontal Pod Autoscaler(HPA) according to a lot kinds of metrics(e.g. CPU, memory, custom metrics)
Support rolling update, rolling back
Find more usage at tutorial.md.
$ make build
# assumes you have a working kubeconfig, not required if operating in-cluster
$ bin/tapp-controller --master=127.0.0.1:8080 // Assume 127.0.0.1:8080 is k8s master ip:port
or
$ bin/tapp-controller --kubeconfig=$HOME/.kube/config
# create a custom resource of type TApp
$ kubectl create -f artifacts/examples/example-tapp.yaml
# check pods created through the custom resource
$ kubectl get pods
You can clean up the created CustomResourceDefinition with:
$ kubectl delete crd tapps.apps.tkestack.io
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
AI-generated slop reports are making bug bounty triage harder, wasting maintainer time, and straining trust in vulnerability disclosure programs.
Research
Security News
The Socket Research team investigates a malicious Python package disguised as a Discord error logger that executes remote commands and exfiltrates data via a covert C2 channel.
Research
Socket uncovered npm malware campaign mimicking popular Node.js libraries and packages from other ecosystems; packages steal data and execute remote code.