争光的技术栈 – Docs

Redis高可用部署指南

Thu, 16 Oct 2025 04:29:30 +0800

知乎这篇概念讲的挺好的: https://zhuanlan.zhihu.com/p/543953543

高可用方案概览

根据业务需求和技术要求，Redis高可用方案可以分为以下几种：

方案	适用场景	说明	优点	缺点
单机版	开发测试或稳定性要求不高	通过持久化机制保证数据安全	配置简单，资源消耗少	无法应对硬件故障，恢复时间长
主从复制	读多写少场景,要求数据不丢失,节点故障后能快速恢复,能接受宕机时间	配置数据同步,但主从切换手动控制或自行实现	维护相对简单,高可用也有保证,客户端不用改造	需要自己实现主从切换或者手动切换
哨兵模式	要求数据不丢失,节点故障后能恢复数据,单机故障能够快速自愈	通过哨兵监听主redis的状态,故障后自动切换并通知客户端	自动故障恢复，配置灵活	客户端需要支持哨兵协议或在客户端和redis直接加一层proxy
集群模式	大数据量，高并发	数据分片存储，横向扩展（其实就是数据库的分库分表概念,根据key计算存放到那个节点上,每个节点只承担部分key的读写）	水平扩展，高性能	跨节点操作限制，运维复杂

详细配置指南

注意: 这里配置只是各种模式的简要示例,请不要用于生产

1. 单机版配置

AOF持久化配置

AOF（Append Only File）通过记录每个写命令来持久化数据：

# redis.conf 配置
appendonly yes
appendfilename "appendonly.aof"

# AOF同步策略
appendfsync everysec # 推荐：每秒同步一次

# AOF重写配置
auto-aof-rewrite-percentage 100
auto-aof-rewrite-min-size 64mb

# AOF文件损坏修复
aof-load-truncated yes

RDB快照配置

# RDB快照配置
save 900 1 # 900秒内至少1次修改
save 300 10 # 300秒内至少10次修改 
save 60 10000 # 60秒内至少10000次修改

# RDB文件配置
dbfilename dump.rdb
dir /var/lib/redis

# 压缩配置
rdbcompression yes
rdbchecksum yes

混合持久化配置（推荐）

# 启用混合持久化（Redis 4.0+）
aof-use-rdb-preamble yes

# 同时启用AOF和RDB
appendonly yes
save 900 1
save 300 10
save 60 10000

2. 主从复制配置

主节点配置（redis-master.conf）

# 基础配置
port 6379
bind 0.0.0.0

# 主从复制配置
replica-serve-stale-data yes
replica-read-only yes

从节点配置（redis-slave.conf）

# 基础配置
port 6379
bind 0.0.0.0

# 主从复制配置
replicaof 192.168.1.100 6379
#masterauth masterpassword

# 从节点只读
replica-read-only yes

启动主从节点

# 启动主节点
redis-server /etc/redis/redis-master.conf

# 启动从节点
redis-server /etc/redis/redis-slave.conf

# 验证主从状态
redis-cli -h 192.168.1.100 -a masterpassword info replication

3. 哨兵模式配置

哨兵配置文件（sentinel.conf）

# 哨兵端口
port 26379

# 哨兵工作目录
dir /var/lib/redis-sentinel

# 监控主节点配置
sentinel monitor mymaster 192.168.1.100 6379 2

# 认证配置
sentinel auth-pass mymaster masterpassword

# 故障检测配置
sentinel down-after-milliseconds mymaster 5000
sentinel parallel-syncs mymaster 1
sentinel failover-timeout mymaster 15000

# 通知脚本
sentinel notification-script mymaster /etc/redis/notify.sh
sentinel client-reconfig-script mymaster /etc/redis/reconfig.sh

# 日志配置
logfile /var/log/redis/sentinel.log
loglevel notice

启动哨兵集群

# 在三台机器上分别启动哨兵
redis-sentinel /etc/redis/sentinel.conf

# 验证哨兵状态
redis-cli -h 192.168.1.100 -p 26379 sentinel masters
redis-cli -h 192.168.1.100 -p 26379 sentinel slaves mymaster

Java客户端连接示例

// Jedis哨兵配置
Set<String> sentinels = new HashSet<>();
sentinels.add("192.168.1.100:26379");
sentinels.add("192.168.1.101:26379");
sentinels.add("192.168.1.102:26379");

JedisSentinelPool pool = new JedisSentinelPool("mymaster", sentinels);
Jedis jedis = pool.getResource();

4. 集群模式配置

集群节点配置（redis-cluster.conf）

# 基础配置
port 7000
bind 0.0.0.0

# 集群配置
cluster-enabled yes
cluster-config-file nodes-7000.conf
cluster-node-timeout 15000

# 内存配置
maxmemory 2gb
maxmemory-policy allkeys-lru

创建集群

# 创建6节点集群（3主3从）
redis-cli --cluster create \
 192.168.1.100:7000 192.168.1.101:7000 192.168.1.102:7000 \
 192.168.1.100:7001 192.168.1.101:7001 192.168.1.102:7001 \
 --cluster-replicas 1

# 验证集群状态
redis-cli -h 192.168.1.100 -p 7000 cluster nodes
redis-cli -h 192.168.1.100 -p 7000 cluster info

性能优化建议

1. 内存优化

# 内存配置
maxmemory 4gb
maxmemory-policy allkeys-lru

# 内存使用优化
hash-max-ziplist-entries 512
hash-max-ziplist-value 64
list-max-ziplist-size -2
set-max-intset-entries 512
zset-max-ziplist-entries 128
zset-max-ziplist-value 64

监控与运维

1. 监控指标

关键性能指标

# 内存使用情况
redis-cli info memory

# 连接数统计
redis-cli info clients

# 命令统计
redis-cli info commandstats

# 主从复制状态
redis-cli info replication

# 持久化状态
redis-cli info persistence

2. 故障处理

常见故障处理流程

主节点宕机

# 手动切换到从节点
redis-cli -h slave-ip -p 6379 SLAVEOF NO ONE

# 更新应用配置指向新主节点
# 修复原主节点后设为从节点
redis-cli -h old-master-ip -p 6379 SLAVEOF new-master-ip 6379

数据恢复

# 从AOF文件恢复
redis-server --appendonly yes --appendfilename appendonly.aof

# 从RDB文件恢复
redis-server --dbfilename dump.rdb --dir /path/to/rdb

集群节点故障

# 查看故障节点
redis-cli --cluster check 192.168.1.100:7000

# 移除故障节点
redis-cli --cluster del-node 192.168.1.100:7000 node-id

# 添加新节点
redis-cli --cluster add-node new-node-ip:7000 192.168.1.100:7000

3. 参考资料

K8s部署规划

Thu, 06 Nov 2025 07:48:55 +0800

介绍

本文汇总在部署 Kubernetes（后文简称 K8s）过程中与稳定性、维护成本相关的注意事项（仅个人观点），供规划集群规模、拆分策略与网络/节点选型时参考。

集群规模

官方大规模集群建议： https://kubernetes.io/docs/setup/best-practices/cluster-large/

单节点建议不超过 110 个 Pod（源于 kubelet 默认上限；进程/连接数激增会影响系统调度性能）。
单集群节点数量不建议超过 500（官方理论上限约 5000；若每节点 Pod 很少，例如 AI 集群每节点少于 10 个 Pod，可适当提高上限）。
单集群 Pod 数量不建议超过 60,000（官方理论上限约 150,000）。
单命名空间下同类资源（Pod 等）数量建议不超过 1,000。原因：API 的 List/Watch 无分页，超大量对象初始 List 会明显放大响应时间（可用缓存/索引缓解，但复杂度上升）。

图：绿色为实践建议区间，蓝色为官方可达上限。规模越靠近上限，调度/存储/网络的系统性风险与维护复杂度呈非线性上升。

注意：

Q: 为什么不做一个超大单集群，这样只需要维护一个集群即可？ A: 集群越大，维护难度越大，各组件更容易触发性能瓶颈，随之而来的是大量高难度的维护工作。例如：

比如：

etcd：当对象数与写入 QPS 持续上升，压缩与事务延迟会明显增大，需要分片或替换。字节的方案：自研替代 etcd 的存储组件 https://github.com/kubewharf/kubebrain/blob/main/docs/design_in_detail_cn.md 蚂蚁的方案：分多个 etcd 存储 https://www.sofastack.tech/blog/ant-massive-sigma-cluster-etcd-splitting-in-practice/ 阿里：修改了 etcd 代码 https://zhuanlan.zhihu.com/p/657824957
apiserver：仅仅是海量节点的 kubelet 心跳与各类 Controller/Operator 的并发请求会产生就有高的 QPS，需要扩容、限流与网关分流等规划。字节的方案：自研 KubeGateway 组件 https://zhuanlan.zhihu.com/p/546398348 阿里：https://zhuanlan.zhihu.com/p/657824957
scheduler：大规模集群下，Pod 并发创建量高；默认调度串行绑定，一个一个调度会导致排队时间显著增加。社区调优参考：https://kubernetes.io/docs/concepts/scheduling-eviction/scheduler-perf-tuning/ 其他大厂通常自研调度器：https://zhuanlan.zhihu.com/p/563944955
controller 与 operator：瓶颈主要源于 List/Watch 机制。其会将目标资源全量缓存到内存并持续 Watch 变化；当对象规模巨大时，启动全量 List 耗时（分钟级）、内存占用暴涨，事件吞吐可能跟不上（控制器通常逐条处理事件）。
网络：取决于网络方案。例如使用 Calico 时，节点上的路由/策略规则会非常多。一般推荐下沉到 IaaS 网络能力（如 MacVLAN 等）承载复杂度。
故障爆炸半径：出现故障后，受影响的 Pod 数量多，影响面广。

图：单一“超大集群”会在 etcd、apiserver、scheduler、控制器、网络以及故障影响半径多个维度放大复杂度。

集群部署策略（什么时候建新集群）

是否新建集群没有统一标准，以下从稳定性、维护与隔离等维度给出参考：

拆分的好处：集群更小稳定性更高；同类业务归群管理更方便。合并的好处：集群数量更少，统一运维与资源利用率更高。

网络区隔离：若存在互联网区/内网区等严格隔离的安全域，建议每个网络区独立一个集群。比如银行等,会划分互联网区和内网区等,则推荐每个网络区一个集群
多活/高可用：同城双活、两地三中心等架构，建议按高可用要求为每个机房（或可用区）建设 1–2 个集群，避免集群层面单点故障。
跨区高时延：若机房之间网络时延较高（如 >100ms），建议分别建设集群。
规模逼近阈值：当单集群规模已接近建议上限，可按业务域等维度拆分（如电商核心/内部支撑分别建集群）。
业务特性截然不同：如 AI 训练/推理集群与通用业务集群建议分离，便于资源、网络与调度策略独立演进。

图：满足任一关键触发条件（安全域隔离 / 多活 / 规模逼近阈值 / 业务类型截然不同 / 高跨区延迟）即可进入“新建集群”路径。

网络选型

Calico：常规场景推荐使用 Calico 直通/BGP 模式，架构简单，基于 Linux 路由表实现。网络或 Linux 运维同学稍加学习即可完成日常维护与应急处理。
Cilium：基于内核 eBPF 的高性能方案，功能强大，支持 L4/L7 与网关能力，可替代 kube-proxy，观测能力也很强；团队具备相应维护能力时推荐采用。
MacVLAN：适用于对 IP 审计/合规要求高、规模较大的场景，使容器网络更贴近虚拟机网络形态，可复用现有 IaaS 网络管理平台/工具/规范（强烈推荐使用道客开源的 Spiderpool，已在大规模金融客户生产落地，稳定且功能丰富）。

图：Calico（简单稳定）、Cilium（高性能 + eBPF 能力）、MacVLAN（合规 / 大规模 / 复用 IaaS）。依据团队能力、合规要求、性能与可观测诉求选择。

节点配置

由于单节点不建议超过 110 个 Pod（110 个 Pod 往往对应 220+ 容器进程，进程/连接数较大，Linux 上的上下文切换与内核资源压力都会上升），因此单机配置并非越大越好，否则可能造成资源浪费。

可结合业务场景进行节点规格估算。大致逻辑：

节点可用 CPU ≈ (Pod 平均请求 CPU × 110) ÷ 超卖系数 ÷ 系统资源预留比例
节点可用内存 ≈ (Pod 平均请求内存 × 110) ÷ 超卖系数 ÷ 系统资源预留比例

其中：
- 超卖系数：例如超卖 50% 则为 1.5（即请求 1.5 Core，实际物理仅预留 1 Core）。
- 系统资源预留比例：实际运行期为系统与突发预留的比例，例如 0.8 表示最多使用到物理资源的 80%。

示例：若多数业务 Pod 为 Java，常见请求比例为 CPU:内存 = 1:4 或 1:2，例如 1 Core / 4 GiB、4 Core / 8 GiB。

按 1 Core / 4 GiB 估算，超卖系数 1.5（超卖 50%），系统资源预留 0.8（预留 20%）：

CPU ≈ 1 × 110 / 1.5 / 0.8 ≈ 92 Core 内存 ≈ 4 × 110 / 1.5 / 0.8 ≈ 367 GiB

可选购约 96 Core / 512 GiB 规格的物理服务器（向上规整并考虑中间件占用与突发）。

以上仅为示例，需结合实际业务画像进行修正（例如中间件集群往往需要更高内存作为缓存）。

图：通过“平均单 Pod 资源 × 110 / 超卖系数 / 系统预留”得到近似节点规格；再结合真实画像（语言栈 / 中间件 / 波峰波谷）修正。

Release Note Changelog 20251104_084327

Tue, 04 Nov 2025 08:43:27 +0800

Release Note Changelog (20251104_084327)

本次共新增 5 个 release note 文件：

项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.14.0
- 文件: kubernetes/ingress-nginx/helm-chart-4.14.0
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.4
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.4
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.8
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.8
项目: cilium/cilium
- 版本: v1.19.0-pre.2
- 文件: cilium/cilium/v1.19.0-pre.2
项目: open-telemetry/opentelemetry.io
- 版本: 2025.10
- 文件: open-telemetry/opentelemetry.io/2025.10

Release Note Changelog 20251102_084710

Sun, 02 Nov 2025 08:47:10 +0800

Release Note Changelog (20251102_084710)

本次共新增 41 个 release note 文件：

项目: karmada-io/karmada
- 版本: v1.13.9
- 文件: karmada-io/karmada/v1.13.9
项目: karmada-io/karmada
- 版本: v1.14.6
- 文件: karmada-io/karmada/v1.14.6
项目: karmada-io/karmada
- 版本: v1.15.2
- 文件: karmada-io/karmada/v1.15.2
项目: keycloak/keycloak
- 版本: 26.4.2
- 文件: keycloak/keycloak/26.4.2
项目: keycloak/keycloak
- 版本: 26.4.1
- 文件: keycloak/keycloak/26.4.1
项目: keycloak/keycloak
- 版本: 26.4.0
- 文件: keycloak/keycloak/26.4.0
项目: keycloak/keycloak
- 版本: 26.3.5
- 文件: keycloak/keycloak/26.3.5
项目: keycloak/keycloak
- 版本: 26.3.4
- 文件: keycloak/keycloak/26.3.4
项目: keycloak/keycloak
- 版本: 26.3.3
- 文件: keycloak/keycloak/26.3.3
项目: keycloak/keycloak
- 版本: 26.3.2
- 文件: keycloak/keycloak/26.3.2
项目: keycloak/keycloak
- 版本: 26.3.1
- 文件: keycloak/keycloak/26.3.1
项目: keycloak/keycloak
- 版本: 26.3.0
- 文件: keycloak/keycloak/26.3.0
项目: kyverno/kyverno
- 版本: v1.15.2
- 文件: kyverno/kyverno/v1.15.2
项目: kyverno/kyverno
- 版本: v1.15.1
- 文件: kyverno/kyverno/v1.15.1
项目: kyverno/kyverno
- 版本: v1.15.0
- 文件: kyverno/kyverno/v1.15.0
项目: volcano-sh/volcano
- 版本: v1.13.0
- 文件: volcano-sh/volcano/v1.13.0
项目: volcano-sh/volcano
- 版本: v1.12.2
- 文件: volcano-sh/volcano/v1.12.2
项目: volcano-sh/volcano
- 版本: v1.12.1
- 文件: volcano-sh/volcano/v1.12.1
项目: volcano-sh/volcano
- 版本: v1.12.0
- 文件: volcano-sh/volcano/v1.12.0
项目: volcano-sh/volcano
- 版本: v1.11.2
- 文件: volcano-sh/volcano/v1.11.2
项目: volcano-sh/volcano
- 版本: v1.11.0-network-topology-preview.3
- 文件: volcano-sh/volcano/v1.11.0-network-topology-preview.3
项目: volcano-sh/volcano
- 版本: v1.10.2
- 文件: volcano-sh/volcano/v1.10.2
项目: volcano-sh/volcano
- 版本: v1.9.1
- 文件: volcano-sh/volcano/v1.9.1
项目: volcano-sh/volcano
- 版本: v1.11.0-network-topology-preview.2
- 文件: volcano-sh/volcano/v1.11.0-network-topology-preview.2
项目: volcano-sh/volcano
- 版本: v1.11.1
- 文件: volcano-sh/volcano/v1.11.1
项目: thanos-io/thanos
- 版本: v0.40.1
- 文件: thanos-io/thanos/v0.40.1
项目: thanos-io/thanos
- 版本: v0.40.0
- 文件: thanos-io/thanos/v0.40.0
项目: thanos-io/thanos
- 版本: v0.39.2
- 文件: thanos-io/thanos/v0.39.2
项目: thanos-io/thanos
- 版本: v0.39.1
- 文件: thanos-io/thanos/v0.39.1
项目: thanos-io/thanos
- 版本: v0.39.0
- 文件: thanos-io/thanos/v0.39.0
项目: thanos-io/thanos
- 版本: v0.38.0
- 文件: thanos-io/thanos/v0.38.0
项目: open-telemetry/opentelemetry.io
- 版本: 2025.09
- 文件: open-telemetry/opentelemetry.io/2025.09
项目: open-telemetry/opentelemetry.io
- 版本: 2025.08
- 文件: open-telemetry/opentelemetry.io/2025.08
项目: open-telemetry/opentelemetry.io
- 版本: 2025.07
- 文件: open-telemetry/opentelemetry.io/2025.07
项目: open-telemetry/opentelemetry.io
- 版本: 2025.06
- 文件: open-telemetry/opentelemetry.io/2025.06
项目: open-telemetry/opentelemetry.io
- 版本: 2025.05
- 文件: open-telemetry/opentelemetry.io/2025.05
项目: open-telemetry/opentelemetry.io
- 版本: 2025.04
- 文件: open-telemetry/opentelemetry.io/2025.04
项目: open-telemetry/opentelemetry.io
- 版本: 2025.03
- 文件: open-telemetry/opentelemetry.io/2025.03
项目: open-telemetry/opentelemetry.io
- 版本: 2025.02
- 文件: open-telemetry/opentelemetry.io/2025.02
项目: open-telemetry/opentelemetry.io
- 版本: 2025.01
- 文件: open-telemetry/opentelemetry.io/2025.01
项目: open-telemetry/opentelemetry.io
- 版本: 2024.12
- 文件: open-telemetry/opentelemetry.io/2024.12

CNCF 项目变更记录 20251031_084313

Fri, 31 Oct 2025 08:43:13 +0800

CNCF 项目变更记录

OAuth2 Proxy

类型: 新增项目

name: OAuth2 Proxy
stage: sandbox
github: https://github.com/oauth2-proxy/oauth2-proxy
docs: https://oauth2-proxy.github.io/oauth2-proxy/
description: A generic reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

Oxia

类型: 新增项目

name: Oxia
stage: sandbox
github: https://github.com/oxia-db/oxia
docs: https://oxia-db.github.io
description: Oxia is a scalable metadata store and coordination system

Dalec

类型: 新增项目

name: Dalec
stage: sandbox
github: https://github.com/project-dalec/dalec
docs: https://github.com/project-dalec/dalec
description: Dalec provides a declarative format for building system packages and containers from those packages in a secure way for supply chain security.

Dragonfly

类型: 项目阶段变更

阶段变更: incubating → graduated

name: Dragonfly
stage: graduated
github: https://github.com/dragonflyoss/dragonfly
docs: https://d7y.io/
description: https://d7y.io/

OpenFGA

类型: 项目阶段变更

阶段变更: sandbox → incubating

name: OpenFGA
stage: incubating
github: https://github.com/openfga/openfga
docs: https://openfga.dev
description: OpenFGA is a high performance and flexible authorization/permission system built for developers and inspired by Google Zanzibar

Crossplane

类型: 项目阶段变更

阶段变更: incubating → graduated

name: Crossplane
stage: graduated
github: https://github.com/crossplane/crossplane
docs: https://crossplane.io/
description: Crossplane is the cloud native control plane framework that allows you to build control planes without needing to write code. Crossplane has a highly extensible backend that enables you to orchestrate applications and infrastructure no matter where they run and a highly configurable frontend that lets you define the declarative API it offers.

CNCF 项目变更记录 20251020_084544

Mon, 20 Oct 2025 08:45:44 +0800

CNCF 项目变更记录

Lima

类型: 项目阶段变更

阶段变更: sandbox → incubating

name: Lima
stage: incubating
github: https://github.com/lima-vm/lima
docs: https://github.com/lima-vm/lima
description: Linux virtual machines, typically on macOS, for running containerd

Air780EP其他资料

Sun, 19 Oct 2025 01:58:54 +0800

为了避免后续官方删除,这里还是把相关资料截图保存下

如果能访问这里,可以下面文档看官方文档即可: https://docs.openluat.com/air780ep/product/

开发版引脚信息

见: https://c.vue2.cn/attachment/20241025095559636_%E5%BC%80%E5%8F%91%E6%9D%BFCore_Air780EP%E4%BD%BF%E7%94%A8%E8%AF%B4%E6%98%8EV1.0.1.pdf

这里存档20241025095559636_开发板Core_Air780EP使用说明V1.0.1.pdf

硬件手册

见 https://docs.openluat.com/air780ep/product/file/Air780EP%E7%A1%AC%E4%BB%B6%E6%89%8B%E5%86%8CV1.1.pdf

这里存档Air780EP硬件手册V1.1.pdf

这里存档合宙Air780EP模组使用手册-V1.0.7.pdf

Air780EP入门指南

Sat, 18 Oct 2025 21:17:05 +0800

今天补办电信手机卡的时候,发现电信套餐可以办理一共5个电话卡了,想起我好久之前买的4G 模块AIR780EP, 果断花了0元申请新开了一个副卡因为这个板子官方已经放入归档,很多资料比较乱,今天折腾了大半天才搞定这个板子的下载,这里记录下(也是担心那天官方就把资料全清理了😄)

下载

参考: https://docs.openluat.com/air780ep/luatos/app/Public_data/

硬件准备

板子插入卡,然后连接上线
点击板子上的power按键,检测电脑的"设备管理器",是否多出对应的设备

注: 如果用线连接电话和板子后,点击boot按键,电脑的"设备管理器"里面没有重新加载出新设备,一般会向下图一样,多出几个设备如果没有,可能是线是只充电的线,不是数据线(充电线里面只有两根电源和地线—-我这换了好几根才找到一根数据线)

软件准备

usb 驱动程序

这个板子是不用下载的,这里说明下😄
Luatools 工具下载

见: https://docs.openluat.com/Luatools/ 下载后,根据说明进行安装

安装完成后需要下载core 文件(固件)

点击"账户"-> “打开资源下载”,会弹出一个窗口,选择"Air780EP"对应的luatos 固件,点击"开始下载即可"

这一步只是下载文件到你电脑上

下载固件

用线重新连接板子

如果之前连接着,插拔一下板子(避免板子已经开机),然后记得不要点任何按键—这个时候板子只有红色的电源灯亮
这里什么都不选,点击"下载固件"按钮

注: 第一次没有从项目下载固件是因为 “下载固件” 界面的提示信息更多一些
在打开的如下界面中,选择上一步下载的core文件,点击"下载按钮"

一般是安装Luatools目录的"resource"目录下
点击"下载按钮"后,进度条会变化,然后
```
a. 按住"BOOT"按钮不放
b. 按住"power"按钮,待进度条变化后,松开"power"按钮
c. 待下载完成后,在松开"BOOT" 按钮
```
注: 我这边下载第一次完成后,后续下载貌似是不需要点击任何按键的(感觉是默认安装的固件和程序导致我这里尝试了很久)

下载第一个程序

准备程序

创建个代码目录,比如"luatos/4g-websocket"目录,然后目录下创建一个main.lua,贴如如下内容

PROJECT = "airtun"
VERSION = "1.0.0"

-- sys库是标配
_G.sys = require("sys")
-- _G.sysplus = require("sysplus")


-- Air780EP的AT固件默认会为开机键防抖, 导致部分用户刷机很麻烦
if rtos.bsp() == "EC618" and pm and pm.PWK_MODE then
 pm.power(pm.PWK_MODE, false)
end

-- 报错信息自动上报到平台,默认是iot.openluat.com
-- 支持自定义, 详细配置请查阅API手册
-- 开启后会上报开机原因, 这需要消耗流量,请留意
if errDump then
 errDump.config(true, 600)
end

local wsc = nil

sys.taskInit(function()

 sys.waitUntil("IP_READY") -- 等待联网成功

 -- 这是个测试服务, 当发送的是json,且action=echo,就会回显所发送的内容
 -- 加密TCP链接 wss 表示加密
 wsc = websocket.create(nil, "wss://echo.airtun.air32.cn/ws/echo")
 -- 这是另外一个测试服务, 能响应websocket的二进制帧
 -- wsc = websocket.create(nil, "ws://echo.airtun.air32.cn/ws/echo2")
 -- 以上两个测试服务是Java写的, 源码在 https://gitee.com/openLuat/luatos-airtun/tree/master/server/src/main/java/com/luatos/airtun/ws

 if wsc.headers then
 wsc:headers({Auth="Basic ABCDEGG"})
 end
 wsc:autoreconn(true, 3000) -- 自动重连机制
 wsc:on(function(wsc, event, data, fin, optcode)
 --[[
 event的值有:
 conack 连接服务器成功,已经收到websocket协议头部信息,通信已建立
 recv 收到服务器下发的信息, data, payload 不为nil
 sent send函数发送的消息,服务器在TCP协议层已确认收到
 disconnect 服务器连接已断开

 其中 sent/disconnect 事件在 2023.04.01 新增
 ]]
 -- data 当事件为recv是有接收到的数据
 -- fin 是否为最后一个数据包, 0代表还有数据, 1代表是最后一个数据包
 -- optcode, 0 - 中间数据包, 1 - 文本数据包, 2 - 二进制数据包
 -- 因为lua并不区分文本和二进制数据, 所以optcode通常可以无视
 -- 若数据不多, 小于1400字节, 那么fid通常也是1, 同样可以忽略
 log.info("wsc", event, data, fin, optcode)
 -- 显示二进制数据
 -- log.info("wsc", event, data and data:toHex() or "", fin, optcode)
 if event == "conack" then -- 连接websocket服务后, 会有这个事件
 log.info("WebSocket connect succeed!")
 sys.publish("wsc_conack")
 end
 end)
 wsc:connect()
 -- 等待conack是可选的
 sys.waitUntil("wsc_conack")
 --local stat = wsc:ready()
 -- 定期发业务ping也是可选的, 但为了保存连接, 也为了继续持有wsc对象, 这里周期性发数据
 while true do
 wsc:send((json.encode({action="echo", msg=os.date()})))
 sys.wait(15000)
 -- 发送二进制帧, 2023.06.21 之后编译的固件支持
 -- wsc:send(string.char(0xA5, 0x5A, 0xAA, 0xF2), 1, 1)
 end
 wsc:close()
 wsc = nil
end)


-- 用户代码已结束---------------------------------------------
-- 结尾总是这一句
sys.run()
-- sys.run()之后后面不要加任何语句!!!!!

开始安装第一个程序

点击"项目管理测试",会弹出下面的窗口,然后点击"创建"按钮,在弹窗中输入项目名,如"4g-demo"
选择core 文件

我一般是把上面"下载固件" 步骤的选择的core文件,复制一份到代码目录的core目录下,然后选择
然后选中"添加默认lib",然后点击"增加目录(递归)",选择之前的代码目录
然后点击"下载脚本",等待执行完成

执行完成(这里一般会比其他板子时间久,中间会重启板子切换到下载模式,下载完成后又重启板子进入正常启动模式)如下图:
检测输出,选中"4G模块USB打印"后,就会自动选择"开始打印"

点击"重启模块",可以看到右边的网络信息,以及下面的日志

CNCF 项目变更记录 20251008_084041

Wed, 08 Oct 2025 08:40:41 +0800

CNCF 项目变更记录

Cadence Workflow

类型: 新增项目

name: Cadence Workflow
stage: sandbox
github: https://github.com/cadence-workflow/cadence
docs: https://cadenceworkflow.io/
description: Cadence is a distributed, scalable, durable, and highly available fault-oblivious stateful code platform.

CNCF 项目变更记录 20251001_064144

Wed, 01 Oct 2025 06:12:09 +0800

CNCF 项目变更记录

KServe

类型: 新增项目

name: KServe
stage: incubating
github: https://github.com/kserve/kserve
docs: https://kserve.github.io/website/
description: Standardized Distributed Generative and Predictive AI Inference Platform for Scalable, Multi-Framework Deployment on Kubernetes

Release Note Changelog 20251001_064152

Wed, 01 Oct 2025 06:12:09 +0800

Release Note Changelog (20251001_064152)

本次共新增 116 个 release note 文件：

项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.3
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.3
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.7
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.7
项目: kubernetes/ingress-nginx
- 版本: controller-v1.13.3
- 文件: kubernetes/ingress-nginx/controller-v1.13.3
项目: kubernetes/ingress-nginx
- 版本: controller-v1.12.7
- 文件: kubernetes/ingress-nginx/controller-v1.12.7
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.2
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.2
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.6
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.6
项目: kubernetes/ingress-nginx
- 版本: controller-v1.13.2
- 文件: kubernetes/ingress-nginx/controller-v1.13.2
项目: kubernetes/ingress-nginx
- 版本: controller-v1.12.6
- 文件: kubernetes/ingress-nginx/controller-v1.12.6
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.13.1
- 文件: kubernetes/ingress-nginx/helm-chart-4.13.1
项目: kubernetes/ingress-nginx
- 版本: helm-chart-4.12.5
- 文件: kubernetes/ingress-nginx/helm-chart-4.12.5
项目: etcd-io/etcd
- 版本: v3.6.5
- 文件: etcd-io/etcd/v3.6.5
项目: etcd-io/etcd
- 版本: v3.5.23
- 文件: etcd-io/etcd/v3.5.23
项目: etcd-io/etcd
- 版本: v3.6.4
- 文件: etcd-io/etcd/v3.6.4
项目: etcd-io/etcd
- 版本: v3.6.3
- 文件: etcd-io/etcd/v3.6.3
项目: etcd-io/etcd
- 版本: v3.5.22
- 文件: etcd-io/etcd/v3.5.22
项目: etcd-io/etcd
- 版本: v3.6.2
- 文件: etcd-io/etcd/v3.6.2
项目: etcd-io/etcd
- 版本: v3.6.1
- 文件: etcd-io/etcd/v3.6.1
项目: etcd-io/etcd
- 版本: v3.6.0
- 文件: etcd-io/etcd/v3.6.0
项目: goharbor/harbor
- 版本: v2.14.0
- 文件: goharbor/harbor/v2.14.0
项目: goharbor/harbor
- 版本: v2.14.0-rc2
- 文件: goharbor/harbor/v2.14.0-rc2
项目: goharbor/harbor
- 版本: v2.14.0-rc1
- 文件: goharbor/harbor/v2.14.0-rc1
项目: goharbor/harbor
- 版本: v2.13.2
- 文件: goharbor/harbor/v2.13.2
项目: goharbor/harbor
- 版本: v2.13.2-rc1
- 文件: goharbor/harbor/v2.13.2-rc1
项目: goharbor/harbor
- 版本: v2.13.1
- 文件: goharbor/harbor/v2.13.1
项目: goharbor/harbor
- 版本: v2.13.1-rc3
- 文件: goharbor/harbor/v2.13.1-rc3
项目: goharbor/harbor
- 版本: v2.12.4
- 文件: goharbor/harbor/v2.12.4
项目: goharbor/harbor
- 版本: v2.12.4-rc1
- 文件: goharbor/harbor/v2.12.4-rc1
项目: goharbor/harbor
- 版本: v2.13.1-rc2
- 文件: goharbor/harbor/v2.13.1-rc2
项目: containerd/containerd
- 版本: v2.1.4
- 文件: containerd/containerd/v2.1.4
项目: containerd/containerd
- 版本: v2.0.6
- 文件: containerd/containerd/v2.0.6
项目: containerd/containerd
- 版本: v1.7.28
- 文件: containerd/containerd/v1.7.28
项目: containerd/containerd
- 版本: v1.6.39
- 文件: containerd/containerd/v1.6.39
项目: containerd/containerd
- 版本: v2.1.3
- 文件: containerd/containerd/v2.1.3
项目: containerd/containerd
- 版本: v2.1.2
- 文件: containerd/containerd/v2.1.2
项目: containerd/containerd
- 版本: v2.1.1
- 文件: containerd/containerd/v2.1.1
项目: containerd/containerd
- 版本: v2.1.0
- 文件: containerd/containerd/v2.1.0
项目: containerd/nerdctl
- 版本: v2.1.6
- 文件: containerd/nerdctl/v2.1.6
项目: containerd/nerdctl
- 版本: v2.1.5
- 文件: containerd/nerdctl/v2.1.5
项目: containerd/nerdctl
- 版本: v2.1.4
- 文件: containerd/nerdctl/v2.1.4
项目: containerd/nerdctl
- 版本: v2.1.3
- 文件: containerd/nerdctl/v2.1.3
项目: containerd/nerdctl
- 版本: v2.1.2
- 文件: containerd/nerdctl/v2.1.2
项目: containerd/nerdctl
- 版本: v2.1.1
- 文件: containerd/nerdctl/v2.1.1
项目: containerd/nerdctl
- 版本: v2.1.0
- 文件: containerd/nerdctl/v2.1.0
项目: containerd/nerdctl
- 版本: v2.0.5
- 文件: containerd/nerdctl/v2.0.5
项目: containerd/nerdctl
- 版本: v2.0.4
- 文件: containerd/nerdctl/v2.0.4
项目: containers/podman
- 版本: v5.6.2
- 文件: containers/podman/v5.6.2
项目: containers/podman
- 版本: v5.6.1
- 文件: containers/podman/v5.6.1
项目: containers/podman
- 版本: v5.6.0
- 文件: containers/podman/v5.6.0
项目: containers/podman
- 版本: v5.6.0-rc2
- 文件: containers/podman/v5.6.0-rc2
项目: containers/podman
- 版本: v5.6.0-rc1
- 文件: containers/podman/v5.6.0-rc1
项目: containers/podman
- 版本: v5.5.2
- 文件: containers/podman/v5.5.2
项目: containers/podman
- 版本: v5.5.1
- 文件: containers/podman/v5.5.1
项目: containers/podman
- 版本: v5.5.0
- 文件: containers/podman/v5.5.0
项目: containers/podman
- 版本: v5.5.0-rc2
- 文件: containers/podman/v5.5.0-rc2
项目: containers/podman
- 版本: v5.5.0-rc1
- 文件: containers/podman/v5.5.0-rc1
项目: projectcalico/calico
- 版本: v3.29.6
- 文件: projectcalico/calico/v3.29.6
项目: projectcalico/calico
- 版本: v3.30.3
- 文件: projectcalico/calico/v3.30.3
项目: projectcalico/calico
- 版本: v3.29.5
- 文件: projectcalico/calico/v3.29.5
项目: projectcalico/calico
- 版本: v3.30.2
- 文件: projectcalico/calico/v3.30.2
项目: projectcalico/calico
- 版本: v3.28.5
- 文件: projectcalico/calico/v3.28.5
项目: projectcalico/calico
- 版本: v3.30.1
- 文件: projectcalico/calico/v3.30.1
项目: projectcalico/calico
- 版本: v3.29.4
- 文件: projectcalico/calico/v3.29.4
项目: projectcalico/calico
- 版本: v3.30.0
- 文件: projectcalico/calico/v3.30.0
项目: projectcalico/calico
- 版本: v3.28.4
- 文件: projectcalico/calico/v3.28.4
项目: projectcalico/calico
- 版本: v3.29.3
- 文件: projectcalico/calico/v3.29.3
项目: cilium/cilium
- 版本: v1.17.8
- 文件: cilium/cilium/v1.17.8
项目: cilium/cilium
- 版本: v1.16.15
- 文件: cilium/cilium/v1.16.15
项目: cilium/cilium
- 版本: v1.18.2
- 文件: cilium/cilium/v1.18.2
项目: cilium/cilium
- 版本: v1.19.0-pre.0
- 文件: cilium/cilium/v1.19.0-pre.0
项目: cilium/cilium
- 版本: v1.18.1
- 文件: cilium/cilium/v1.18.1
项目: cilium/cilium
- 版本: v1.17.7
- 文件: cilium/cilium/v1.17.7
项目: cilium/cilium
- 版本: v1.16.13
- 文件: cilium/cilium/v1.16.13
项目: cilium/cilium
- 版本: v1.18.0
- 文件: cilium/cilium/v1.18.0
项目: cilium/cilium
- 版本: v1.17.6
- 文件: cilium/cilium/v1.17.6
项目: cilium/cilium
- 版本: v1.16.12
- 文件: cilium/cilium/v1.16.12
项目: karmada-io/karmada
- 版本: v1.15.1
- 文件: karmada-io/karmada/v1.15.1
项目: karmada-io/karmada
- 版本: v1.14.5
- 文件: karmada-io/karmada/v1.14.5
项目: karmada-io/karmada
- 版本: v1.13.8
- 文件: karmada-io/karmada/v1.13.8
项目: karmada-io/karmada
- 版本: v1.15.0
- 文件: karmada-io/karmada/v1.15.0
项目: karmada-io/karmada
- 版本: v1.14.4
- 文件: karmada-io/karmada/v1.14.4
项目: karmada-io/karmada
- 版本: v1.13.7
- 文件: karmada-io/karmada/v1.13.7
项目: karmada-io/karmada
- 版本: v1.12.10
- 文件: karmada-io/karmada/v1.12.10
项目: karmada-io/karmada
- 版本: v1.12.9
- 文件: karmada-io/karmada/v1.12.9
项目: prometheus/prometheus
- 版本: v3.6.0
- 文件: prometheus/prometheus/v3.6.0
项目: prometheus/prometheus
- 版本: v3.5.0
- 文件: prometheus/prometheus/v3.5.0
项目: prometheus/prometheus
- 版本: v2.53.5
- 文件: prometheus/prometheus/v2.53.5
项目: prometheus/prometheus
- 版本: v3.4.2
- 文件: prometheus/prometheus/v3.4.2
项目: prometheus/prometheus
- 版本: v3.4.1
- 文件: prometheus/prometheus/v3.4.1
项目: prometheus/prometheus
- 版本: v3.4.0
- 文件: prometheus/prometheus/v3.4.0
项目: argoproj/argo-cd
- 版本: v3.2.0-rc2
- 文件: argoproj/argo-cd/v3.2.0-rc2
项目: argoproj/argo-cd
- 版本: v3.1.8
- 文件: argoproj/argo-cd/v3.1.8
项目: argoproj/argo-cd
- 版本: v3.0.19
- 文件: argoproj/argo-cd/v3.0.19
项目: argoproj/argo-cd
- 版本: v2.14.20
- 文件: argoproj/argo-cd/v2.14.20
项目: argoproj/argo-cd
- 版本: v3.1.7
- 文件: argoproj/argo-cd/v3.1.7
项目: argoproj/argo-cd
- 版本: v3.0.18
- 文件: argoproj/argo-cd/v3.0.18
项目: argoproj/argo-cd
- 版本: v2.14.19
- 文件: argoproj/argo-cd/v2.14.19
项目: argoproj/argo-cd
- 版本: v3.1.6
- 文件: argoproj/argo-cd/v3.1.6
项目: argoproj/argo-cd
- 版本: v3.0.17
- 文件: argoproj/argo-cd/v3.0.17
项目: argoproj/argo-cd
- 版本: v2.14.18
- 文件: argoproj/argo-cd/v2.14.18
项目: helm/helm
- 版本: v3.19.0
- 文件: helm/helm/v3.19.0
项目: helm/helm
- 版本: v3.18.6
- 文件: helm/helm/v3.18.6
项目: helm/helm
- 版本: v3.18.5
- 文件: helm/helm/v3.18.5
项目: helm/helm
- 版本: v3.17.4
- 文件: helm/helm/v3.17.4
项目: helm/helm
- 版本: v3.18.4
- 文件: helm/helm/v3.18.4
项目: helm/helm
- 版本: v3.18.3
- 文件: helm/helm/v3.18.3
项目: helm/helm
- 版本: v3.18.2
- 文件: helm/helm/v3.18.2
项目: helm/helm
- 版本: v3.18.1
- 文件: helm/helm/v3.18.1
项目: jenkinsci/jenkins
- 版本: jenkins-2.530
- 文件: jenkinsci/jenkins/jenkins-2.530
项目: jenkinsci/jenkins
- 版本: jenkins-2.529
- 文件: jenkinsci/jenkins/jenkins-2.529
项目: jenkinsci/jenkins
- 版本: jenkins-2.528
- 文件: jenkinsci/jenkins/jenkins-2.528
项目: jenkinsci/jenkins
- 版本: jenkins-2.516.3
- 文件: jenkinsci/jenkins/jenkins-2.516.3
项目: jenkinsci/jenkins
- 版本: jenkins-2.527
- 文件: jenkinsci/jenkins/jenkins-2.527
项目: jenkinsci/jenkins
- 版本: jenkins-2.526
- 文件: jenkinsci/jenkins/jenkins-2.526
项目: jenkinsci/jenkins
- 版本: jenkins-2.525
- 文件: jenkinsci/jenkins/jenkins-2.525
项目: jenkinsci/jenkins
- 版本: jenkins-2.516.2
- 文件: jenkinsci/jenkins/jenkins-2.516.2
项目: jenkinsci/jenkins
- 版本: jenkins-2.524
- 文件: jenkinsci/jenkins/jenkins-2.524

chcf_project_changgelog_20250930_061209

Tue, 30 Sep 2025 06:12:09 +0800

Release Note Changelog (20250930_061209)

本次共新增 16 个 release note 文件：

项目: kubernetes/kubernetes
- 版本: v1.33.5
- 文件: kubernetes/kubernetes/v1.33.5
项目: kubernetes/kubernetes
- 版本: v1.32.9
- 文件: kubernetes/kubernetes/v1.32.9
项目: kubernetes/kubernetes
- 版本: v1.31.13
- 文件: kubernetes/kubernetes/v1.31.13
项目: kubernetes/kubernetes
- 版本: v1.34.0
- 文件: kubernetes/kubernetes/v1.34.0
项目: kubernetes/kubernetes
- 版本: v1.33.4
- 文件: kubernetes/kubernetes/v1.33.4
项目: kubernetes/kubernetes
- 版本: v1.32.8
- 文件: kubernetes/kubernetes/v1.32.8
项目: kubernetes/kubernetes
- 版本: v1.31.12
- 文件: kubernetes/kubernetes/v1.31.12
项目: coredns/coredns
- 版本: v1.12.3
- 文件: coredns/coredns/v1.12.3
项目: coredns/coredns
- 版本: v1.12.2
- 文件: coredns/coredns/v1.12.2
项目: coredns/coredns
- 版本: v1.12.1
- 文件: coredns/coredns/v1.12.1
项目: coredns/coredns
- 版本: v1.12.0
- 文件: coredns/coredns/v1.12.0
项目: coredns/coredns
- 版本: v1.11.4
- 文件: coredns/coredns/v1.11.4
项目: coredns/coredns
- 版本: v1.11.3
- 文件: coredns/coredns/v1.11.3
项目: coredns/coredns
- 版本: v1.11.1
- 文件: coredns/coredns/v1.11.1
项目: coredns/coredns
- 版本: v1.11.0
- 文件: coredns/coredns/v1.11.0
项目: coredns/coredns
- 版本: v1.10.1
- 文件: coredns/coredns/v1.10.1

coredns_v1.10.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.10.1

coredns/coredns v1.10.1 Release Notes

Published at: 2023-02-06T18:30:04Z

This release fixes some bugs, and adds some new features including:

Corrected architecture labels in multi-arch image manifest
A new plugin timeouts that allows configuration of server listener timeout durations
acl can drop queries as an action
template supports creating responses with extended DNS errors
New weighted policy in loadbalance
Option to serve original record TTLs from cache

Brought to You By

Arthur Outhenin-Chalandre, Ben Kaplan, Chris O’Haver, Gabor Dozsa, Grant Spence, Kumiko as a Service, LAMRobinson, Miciah Dashiel Butler Masters, Ondřej Benkovský, Rich, Stephen Kitt, Yash Singh, Yong Tang, rsclarke, sanyo0714

Noteworthy Changes

plugin/timeouts - Allow ability to configure listening server timeouts (https://github.com/coredns/coredns/pull/5784)
plugin/acl: adding ability to drop queries (https://github.com/coredns/coredns/pull/5722)
plugin/template : add support for extended DNS errors (https://github.com/coredns/coredns/pull/5659)
plugin/kubernetes: error NXDOMAIN for TXT lookups (https://github.com/coredns/coredns/pull/5737)
plugin/kubernetes: dont match external services when endpoint is specified (https://github.com/coredns/coredns/pull/5734)
plugin/k8s_external: Fix rcode for headless services (https://github.com/coredns/coredns/pull/5657)
plugin/edns: remove truncating of question section on bad EDNS version (https://github.com/coredns/coredns/pull/5787)
plugin/dnstap: Fix behavior when multiple dnstap plugins specified (https://github.com/coredns/coredns/pull/5773)
plugin/cache: cache now uses source query DNSSEC option for upstream refresh (https://github.com/coredns/coredns/pull/5671)
Workaround for incorrect architecture (https://github.com/coredns/coredns/pull/5691)
plugin/loadbalance: Add weighted policy (https://github.com/coredns/coredns/pull/5662)
plugin/cache: Add keepttl option (https://github.com/coredns/coredns/pull/5879)
plugin/forward: Fix dnstap for forwarded request/response (https://github.com/coredns/coredns/pull/5890)

Full Changelog: https://github.com/coredns/coredns/compare/v1.10.0...v1.10.1

coredns_v1.11.0_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.0

coredns/coredns v1.11.0 Release Notes

Published at: 2023-08-08T14:15:16Z

Release Highlights

Adds support for accepting DNS connections over QUIC (doq).
Adds CNAME target rewrites to the rewrite plugin.
Plus many bug fixes, and some security improvements.

This release introduces the following backward incompatible changes:

In the kubernetes plugin, we have dropped support for watching Endpoint and Endpointslice v1beta, since all supported K8s versions now use Endpointslice.
The bufsize plugin changed its default size limit value to 1232
Some changes to forward plugin metrics.

Brought to You By

Amila Senadheera, Antony Chazapis, Ayato Tokubi, Ben Kochie, Catena cyber, Chris O’Haver, Dan Salmon, Dan Wilson, Denis MACHARD, Diogenes Pelisson, Eng Zer Jun, Fish-pro, Gabor Dozsa, Gary McDonald, João Henri, Justin, Lio李歐, Marcos Mendez, Marius Kimmina, Ondřej Benkovský, Pat Downey, Petr Menšík, Rotem Kfir, Sebastian Dahlgren, Vancl, Vinayak Goyal, W. Trevor King, Yash Singh, Yashpal, Yong Tang, Yuheng, cui fliter, jeremiejig, junhwong, rokkiter, yyzxw

Other Noteworthy Changes

add support for RISC-V (https://github.com/coredns/coredns/pull/6195)
doh: allow http as the protocol (https://github.com/coredns/coredns/pull/5762)
doq: add DNS-Over-QUIC server support (https://github.com/coredns/coredns/pull/6182)
plugin/bufsize: change default value to 1232 (https://github.com/coredns/coredns/pull/6183)
plugin/clouddns: fix answers limited to one response (https://github.com/coredns/coredns/pull/5986)
plugin/dnssec: on delegation, sign DS or NSEC of no DS. (https://github.com/coredns/coredns/pull/5899)
plugin/dnstap: add tls support (https://github.com/coredns/coredns/pull/5917)
plugin/forward: continue waiting after receiving malformed responses (https://github.com/coredns/coredns/pull/6014)
plugin/forward: fix forward metrics for backwards compatibility (https://github.com/coredns/coredns/pull/6178)
plugin/health: poll localhost by default (https://github.com/coredns/coredns/pull/5934)
plugin/k8s_external: add fallthrough option (https://github.com/coredns/coredns/pull/5959)
plugin/kubernetes: expose client-go internal request metrics (https://github.com/coredns/coredns/pull/5991)
plugin/kubernetes: filter ExternalName service queries for subdomains of subdomains (https://github.com/coredns/coredns/pull/6162)
plugin/kubernetes: fix headless/endpoint query panics when endpoints are disabled (https://github.com/coredns/coredns/pull/6137)
plugin/kubernetes: fix ports panic (https://github.com/coredns/coredns/pull/6179)
plugin/kubernetes: remove Endpoint and EndpointSlice v1beta Support (https://github.com/coredns/coredns/pull/6147)
plugin/loadbalance: improve weights update (https://github.com/coredns/coredns/pull/5906)
plugin/rewrite: introduce cname target rewrite rule to rewrite plugin (https://github.com/coredns/coredns/pull/6004)
plugin/transfer: send notifies after adding zones all zones (https://github.com/coredns/coredns/pull/5774)
prevent fail counter of a proxy overflows (https://github.com/coredns/coredns/pull/5990)
prevent panics when using DoHWriter (https://github.com/coredns/coredns/pull/6120)
run coredns as non root. (https://github.com/coredns/coredns/pull/5969)
support unix socket for GRPC (https://github.com/coredns/coredns/pull/5943)

coredns_v1.11.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.1

coredns/coredns v1.11.1 Release Notes

Published at: 2023-08-15T20:00:30Z

This release fixes a major performance regression introduced in 1.11.0 that affected DoT (TLS) forwarded connections. It also adds a new option to dnstap to add metadata to the dnstap extra field, and fixes a config parsing bug in cache.

Brought to You By

Chris O’Haver, P. Radha Krishna, Yong Tang, Yuheng, Zhizhen He

Noteworthy Changes

Revert “plugin/forward: Continue waiting after receiving malformed responses (https://github.com/coredns/coredns/pull/6014)" (#6270)
plugin/dnstap: add support for “extra” field in payload (https://github.com/coredns/coredns/pull/6226)
plugin/cache: fix keepttl parsing (https://github.com/coredns/coredns/pull/6250)

coredns_v1.11.3_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.3

coredns/coredns v1.11.3 Release Notes

Published at: 2024-07-29T17:29:13Z

This release contains some new features, bug fixes, and package updates. Because of the deployment issues with the previous release, all changed features from 1.11.2 have been included in this release. New features include:

When the forward plugin receives a malformed upstream response that overflows, it will now send an empty response to the client with the truncated (TC) bit set to prompt the client to retry over TCP.
The rewrite plugin can now rewrite response codes.
The dnstap plugin now supports adding metadata to the dnstap extra field.

Brought to You By

Amila Senadheera, Ben Kochie, Benjamin, Chris O’Haver, Grant Spence, John Belamaric, Keita Kitamura, Marius Kimmina, Michael Grosser, Ondřej Benkovský, P. Radha Krishna, Rahil Bhimjiani, Sri Harsha, Tom Thorogood, Willow (GHOST), Yong Tang, Yuheng, Zhizhen He, guangwu, journey-c, pschou Ted Ford

Noteworthy Changes

plugin/tls: respect the path specified by root plugin (https://github.com/coredns/coredns/pull/6138)
plugin/auto: warn when auto is unable to read elements of the directory tree (https://github.com/coredns/coredns/pull/6333)
plugin/etcd: the etcd client adds the DialKeepAliveTime parameter (https://github.com/coredns/coredns/pull/6351)
plugin/cache: key cache on Checking Disabled (CD) bit (https://github.com/coredns/coredns/pull/6354)
plugin/forward: Use the correct root domain name in the forward plugin’s health checks (https://github.com/coredns/coredns/pull/6395)
plugin/forward: Handle UDP responses that overflow with TC bit (https://github.com/coredns/coredns/pull/6277)
plugin/rewrite: fix multi request concurrency issue in cname rewrite (https://github.com/coredns/coredns/pull/6407)
plugin/rewrite: add rcode as a rewrite option (https://github.com/coredns/coredns/pull/6204)
plugin/dnstap: add support for “extra” field in payload (https://github.com/coredns/coredns/pull/6226)
plugin/cache: fix keepttl parsing (https://github.com/coredns/coredns/pull/6250)
Return RcodeServerFailure when DNS64 has no next plugin (https://github.com/coredns/coredns/pull/6590)
Change the log flags to be a variable that can be set (https://github.com/coredns/coredns/pull/6546)
Bump go version to 1.21 (https://github.com/coredns/coredns/pull/6533)
replace the mutex locks in logging with atomic bool for the “on” flag (https://github.com/coredns/coredns/pull/6525)
Enable Prometheus native histograms (https://github.com/coredns/coredns/pull/6524)

coredns_v1.11.4_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.11.4

coredns/coredns v1.11.4 Release Notes

Published at: 2024-11-13T03:07:13Z

This release adds some new features and fixes some bugs. New features of note:

forward plugin: new option next, to try alternate upstreams when receiving specified response codes upstreams on (functions like the external plugin alternate)
dnssec plugin: new option to load keys from AWS Secrets Manager
rewrite plugin: new option to revert EDNS0 option rewrites in responses

Brought to You By

AdamKorcz, Anifalak, Ben Kochie, Chris O’Haver, Frederic Hemery, Grant Spence, Harshita Sao, Jason Joo, Jasper Bernhardt, Johnny Bergström, Keith Coleman, Kevin Lyda, Lan, Lin-1997, Manuel Rüger, Nathan Currier, Nicolai Søborg, Nikita Usatov, Paco Xu, Reinhard Nägele, Robbie Ostrow, TAKAHASHI Shuuji, Till Riedel, Tobias Klauser, YASH JAIN, cedar-gao, chenylh, wmkuipers, xinbenlv, zhangguanzhang

Noteworthy Changes

core: set cache-control max-age as integer, not float (https://github.com/coredns/coredns/pull/6764)
plugin/metadata: evaluate metadata in plugin order (https://github.com/coredns/coredns/pull/6729)
plugin/dnssec: dnssec load keys from AWS Secrets Manager (https://github.com/coredns/coredns/pull/6618)
plugin/rewrite: Add “revert” parameter for EDNS0 options (https://github.com/coredns/coredns/pull/6893)
container: Restored backwards compatibility of Current Workdir (https://github.com/coredns/coredns/pull/6731)
plugin/auto: call OnShutdown() for each zone at its own OnShutdown() (https://github.com/coredns/coredns/pull/6705)
plugin/dnstap: log queue and buffer memory size configuration (https://github.com/coredns/coredns/pull/6591)
plugin/bind: add zone for link-local IPv6 instead of skipping (https://github.com/coredns/coredns/pull/6547)
plugin/kubernetes: only create PTR records for endpoints with hostname defined (https://github.com/coredns/coredns/pull/6898)
plugin/rewrite: execute the reversion in reversed order (https://github.com/coredns/coredns/pull/6872)
plugin/etcd: fix etcd connection leakage during reload (https://github.com/coredns/coredns/pull/6646)
plugi/kubernetes: Add useragent (https://github.com/coredns/coredns/pull/6484)
plugin/hosts: add hostsfile as label for coredns_hosts_entries (https://github.com/coredns/coredns/pull/6801)
plugin/file: Fix zone parser error handling (https://github.com/coredns/coredns/pull/6680)
plugin/forward: Add alternate option to forward plugin (https://github.com/coredns/coredns/pull/6681)
plugin/file: return error when parsing the file fails (https://github.com/coredns/coredns/pull/6699)
build: Generate zplugin.go correctly with third-party plugins (https://github.com/coredns/coredns/pull/6692)

Full Changelog: https://github.com/coredns/coredns/compare/v1.11.3...v1.11.4

coredns_v1.12.0_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.0

coredns/coredns v1.12.0 Release Notes

Published at: 2024-11-21T19:41:27Z

This release adds a new feature:

New multisocket plugin - allows CoreDNS to listen on multiple sockets

Brought to You By

Ben Kochie, Chris O’Haver, Emmanuel Ferdman, Viktor

Noteworthy Changes

plugin/multisocket (https://github.com/coredns/coredns/pull/6882)

coredns_v1.12.1_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.1

coredns/coredns v1.12.1 Release Notes

Published at: 2025-03-31T20:26:21Z

In this release:

kubernetes: Revert recent change to only create PTR records for endpoints with hostname defined.
forward: added option to return SERVFAIL immediately if all upstreams are unhealthy.

Brought to You By

Adrian Moisey, Arthur Outhenin-Chalandre, Bartosz Borkowski, Ben Kochie, Chris O’Haver, Min Woo Kim, Puneet Loya, Rich, Viktor, momantech

Noteworthy Changes

core: Increase CNAME lookup limit from 7 to 10 (https://github.com/coredns/coredns/pull/7153)
plugin/kubernetes: Fix handling of pods having DeletionTimestamp set (https://github.com/coredns/coredns/pull/7119) (#7131)
plugin/kubernetes: Revert “only create PTR records for endpoints with hostname defined (https://github.com/coredns/coredns/pull/6898)" (#7194)
plugin/forward: added option failfast_all_unhealthy_upstreams to return servfail if all upstreams are down (https://github.com/coredns/coredns/pull/6999)

coredns_v1.12.2_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.2

coredns/coredns v1.12.2 Release Notes

Published at: 2025-06-06T11:42:00Z

This release introduces significant improvements to plugin stability and extensibility. It adds multicluster support to the Kubernetes plugin, fallthrough support in the file plugin, and a new SetProxyOptions function for the forward plugin. Notably, the QUIC (DoQ) plugin now limits concurrent streams, improving performance under load. Several bug fixes and optimizations improve reliability across plugins, including rewrite, proxy, and metrics.

Brought to You By

Ambrose Chua, Arthur Outhenin-Chalandre, Ben Kochie, Colden Cullen, Gleb Kogtev, Hirotaka Tagawa, Kevin Lyda, Manuel Rüger, Mark Mickan, Parfenov Ivan, skipper, vdbe, Viktor Oreshkin, Ville Vesilehto, Yannick Epstein, Yong Tang

Noteworthy Changes

core: Enable plugins via environment during build (https://github.com/coredns/coredns/pull/7310)
core: Ensure DNS query name reset in plugin.NS error path (https://github.com/coredns/coredns/pull/7142)
plugin/forward: Added SetProxyOptions function for forward plugin (https://github.com/coredns/coredns/pull/7229)
plugin/ready: Do not interrupt querying readiness probes for plugins (https://github.com/coredns/coredns/pull/6975)
plugin/secondary: Make transfer property mandatory (https://github.com/coredns/coredns/pull/7249)
plugin/rewrite: Truncated upstream response (https://github.com/coredns/coredns/pull/7277)
plugin/quic: Limit concurrent DoQ streams and goroutines (https://github.com/coredns/coredns/pull/7296)
plugin/kubernetes: Add multicluster support (https://github.com/coredns/coredns/pull/7266)
plugin/bind: Remove zone for link-local IPv4 (https://github.com/coredns/coredns/pull/7295)
plugin/metrics: Preserve request size from plugins (https://github.com/coredns/coredns/pull/7313)
plugin/proxy: Avoid Dial hang after Transport stopped (https://github.com/coredns/coredns/pull/7321)
plugin/file: Add fallthrough support (https://github.com/coredns/coredns/pull/7327)
plugin/kubernetes: Optimize AutoPath slice allocation (https://github.com/coredns/coredns/pull/7323)

coredns_v1.12.3_release_note

Tue, 30 Sep 2025 06:12:09 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.3

coredns/coredns v1.12.3 Release Notes

Published at: 2025-08-05T17:24:51Z

This release improves plugin reliability and standards compliance, adding startup timeout to the Kubernetes plugin, fallthrough to gRPC, and EDNS0 unset to rewrite. The file plugin now preserves SRV record case per RFC 6763, route53 is updated to AWS SDK v2, and multiple race conditions in cache and connection handling in forward are fixed.

Brought to You By

blakebarnett Brennan Kinney Cameron Steel Dave Brown Dennis Simmons Guillaume Jacquet harshith-2411-2002 houpo-bob Oleg Guba Sebastian Mayr Stephen Kitt Syed Azeez Ville Vesilehto Yong Tang Yoofi Quansah

Noteworthy Changes

plugin/auto: Return REFUSED when no next plugin is available (https://github.com/coredns/coredns/pull/7381)
plugin/cache: Create a copy of a response to ensure original msg is never modified (https://github.com/coredns/coredns/pull/7357)
plugin/cache: Fix data race when refreshing cached messages (https://github.com/coredns/coredns/pull/7398)
plugin/cache: Fix data race when updating the TTL of cached messages (https://github.com/coredns/coredns/pull/7397)
plugin/file: Return REFUSED when no next plugin is available (https://github.com/coredns/coredns/pull/7381)
plugin/file: Preserve case in SRV record names and targets per RFC 6763 (https://github.com/coredns/coredns/pull/7402)
plugin/forward: Handle cached connection closure in forward plugin (https://github.com/coredns/coredns/pull/7427)
plugin/grpc: Add support for fallthrough to the grpc plugin (https://github.com/coredns/coredns/pull/7359)
plugin/kubernetes: Add startup_timeout for kubernetes plugin (https://github.com/coredns/coredns/pull/7068)
plugin/kubernetes: Properly create hostname from IPv6 (https://github.com/coredns/coredns/pull/7431)
plugin/rewrite: Add EDNS0 unset action (https://github.com/coredns/coredns/pull/7380)
plugin/route53: Port to AWS Go SDK v2 (https://github.com/coredns/coredns/pull/6588)
plugin/test: Fix TXT record comparison logic for multi-string vs multi-record scenarios (https://github.com/coredns/coredns/pull/7413)

chcf_project_changgelog_20250929_054905

Mon, 29 Sep 2025 05:50:33 +0800

Release Note Changelog (20250929_054905)

本次共新增 2 个 release note 文件：

项目: kubernetes/kubernetes
- 版本: v1.34.1
- 文件: kubernetes/kubernetes/v1.34.1
项目: coredns/coredns
- 版本: v1.12.4
- 文件: coredns/coredns/v1.12.4

chcf_project_changgelog_20250929_045842

Mon, 29 Sep 2025 05:22:25 +0800

CNCF 项目变更记录

Akri

类型: 新增项目

name: Akri
stage: sandbox
github: https://github.com/project-akri/akri
docs: https://docs.akri.sh
description: https://docs.akri.sh

Atlantis

类型: 新增项目

name: Atlantis
stage: sandbox
github: https://github.com/runatlantis/atlantis
docs: https://www.runatlantis.io/
description: Terraform Pull Request Automation for Teams

CDK for Kubernetes (CDK8s)

类型: 新增项目

name: CDK for Kubernetes (CDK8s)
stage: sandbox
github: https://github.com/cdk8s-team/cdk8s
docs: https://cdk8s.io/
description: CDK8s lets you define Kubernetes apps and components using familiar programming languages and object-oriented APIs.

Cloud Custodian

类型: 新增项目

name: Cloud Custodian
stage: incubating
github: https://github.com/cloud-custodian/cloud-custodian
docs: https://cloudcustodian.io/
description: https://cloudcustodian.io/

DevStream

类型: 新增项目

name: DevStream
stage: archived
github: https://github.com/devstream-io/devstream
docs: https://www.devstream.io/
description: https://www.devstream.io/

kagent

类型: 新增项目

name: kagent
stage: sandbox
github: https://github.com/kagent-dev/kagent
docs: https://kagent.dev/
description: Kagent is an open source programming framework designed for DevOps and platform engineers to run AI agents in Kubernetes

Kairos

类型: 新增项目

name: Kairos
stage: sandbox
github: https://github.com/kairos-io/kairos
docs: https://kairos.io
description: https://kairos.io

KCL

类型: 新增项目

name: KCL
stage: sandbox
github: https://github.com/kcl-lang/kcl
docs: https://kcl-lang.io/
description: A constraint-based record & functional language mainly used in configuration and policy scenarios.

KitOps

类型: 新增项目

name: KitOps
stage: sandbox
github: https://github.com/kitops-ml/kitops
docs: https://kitops.org/
description: An open standard for packaging, managing, and deploying ML models and artifacts across different systems

kpt

类型: 新增项目

name: kpt
stage: sandbox
github: https://github.com/kptdev/kpt
docs: https://kpt.dev
description: https://kpt.dev

Kubean

类型: 新增项目

name: Kubean
stage: sandbox
github: https://github.com/kubean-io/kubean
docs: https://kubean-io.github.io/kubean/
description: Product ready cluster lifecycle management toolchains based on kubespray and other cluster LCM engine.

KubeDL

类型: 新增项目

name: KubeDL
stage: archived
github: https://github.com/kubedl-io/kubedl
docs: https://kubedl.io
description: https://kubedl.io

KubeEdge

类型: 新增项目

name: KubeEdge
stage: graduated
github: https://github.com/kubeedge/kubeedge
docs: https://kubeedge.io/en/
description: https://kubeedge.io/en/

KusionStack

类型: 新增项目

name: KusionStack
stage: sandbox
github: https://github.com/KusionStack/kusion
docs: https://kusionstack.io/
description: https://kusionstack.io/

Meshery

类型: 新增项目

name: Meshery
stage: sandbox
github: https://github.com/meshery/meshery
docs: https://meshery.io
description: https://meshery.io

Metal³

类型: 新增项目

name: Metal³
stage: incubating
github: https://github.com/metal3-io/baremetal-operator
docs: https://metal3.io/
description: https://metal3.io/

OpenTofu

类型: 新增项目

name: OpenTofu
stage: sandbox
github: https://github.com/opentofu/opentofu
docs: https://opentofu.org/
description: OpenTofu is an open source infrastructure as code tool that enables users to safely and predictably provision and manage cloud and on-prem infrastructure. It’s a community-driven fork of Terraform that maintains backward compatibility while offering enhanced features, stability.

OpenYurt

类型: 新增项目

name: OpenYurt
stage: incubating
github: https://github.com/openyurtio/openyurt
docs: https://openyurt.io/
description: An open platform that extending your native Kubernetes to edge.

Runme Notebooks

类型: 新增项目

name: Runme Notebooks
stage: sandbox
github: https://github.com/runmedev/runme
docs: https://runme.dev/
description: A toolchain that turns Markdown into interactive, cloud-native, runnable Notebook experiences for DevOps.

SuperEdge

类型: 新增项目

name: SuperEdge
stage: archived
github: https://github.com/superedge/superedge
docs: https://superedge.io/
description: An edge-native container management system for edge computing

Tinkerbell

类型: 新增项目

name: Tinkerbell
stage: sandbox
github: https://github.com/tinkerbell/tinkerbell
docs: https://tinkerbell.org/
description: https://tinkerbell.org/

Distribution

类型: 新增项目

name: Distribution
stage: sandbox
github: https://github.com/distribution/distribution
docs: https://github.com/distribution/distribution
description: https://github.com/distribution/distribution

Dragonfly

类型: 新增项目

name: Dragonfly
stage: incubating
github: https://github.com/dragonflyoss/dragonfly
docs: https://d7y.io/
description: https://d7y.io/

Harbor

类型: 新增项目

name: Harbor
stage: graduated
github: https://github.com/goharbor/harbor
docs: https://goharbor.io/
description: https://goharbor.io/

zot

类型: 新增项目

name: zot
stage: sandbox
github: https://github.com/project-zot/zot
docs: https://zotregistry.dev/
description: Zot is an OCI-native container registry for distributing container images and OCI artifacts.

Bank-Vaults

类型: 新增项目

name: Bank-Vaults
stage: sandbox
github: https://github.com/bank-vaults/bank-vaults
docs: https://bank-vaults.dev/
description: Bank-Vaults is a Vault swiss-army knife: a K8s operator, Go client with automatic token renewal, automatic configuration, multiple unseal options and more. A CLI tool to init, unseal and configure Vault (auth methods, secret engines). Direct secret injection into Pods.

bpfman

类型: 新增项目

name: bpfman
stage: sandbox
github: https://github.com/bpfman/bpfman
docs: https://bpfman.io/
description: An eBPF Manager for Linux and Kubernetes

Cartography

类型: 新增项目

name: Cartography
stage: sandbox
github: https://github.com/cartography-cncf/cartography
docs: https://cartography.dev
description: Cartography is a Python tool that consolidates infrastructure assets and the relationships between them in an intuitive graph view.

cert-manager

类型: 新增项目

name: cert-manager
stage: graduated
github: https://github.com/cert-manager/cert-manager
docs: https://cert-manager.io/
description: https://cert-manager.io/

Confidential Containers

类型: 新增项目

name: Confidential Containers
stage: sandbox
github: https://github.com/confidential-containers/confidential-containers
docs: https://confidentialcontainers.org/
description: Confidential Containers is an open source community working to enable cloud native confidential computing by leveraging Trusted Execution Environments to protect containers and data.

ContainerSSH

类型: 新增项目

name: ContainerSSH
stage: sandbox
github: https://github.com/containerssh/containerssh
docs: https://containerssh.io
description: ContainerSSH launches a new container for each SSH connection in Kubernetes, Podman or Docker. The user is transparently dropped in the container and the container is removed when the user disconnects. Authentication and container configuration are dynamic using webhooks, no system users required.

Copa

类型: 新增项目

name: Copa
stage: sandbox
github: https://github.com/project-copacetic/copacetic
docs: https://github.com/project-copacetic/copacetic
description: https://github.com/project-copacetic/copacetic

Curiefense

类型: 新增项目

name: Curiefense
stage: archived
github: None
docs: https://www.curiefense.io/
description: https://www.curiefense.io/

Dex

类型: 新增项目

name: Dex
stage: sandbox
github: https://github.com/dexidp/dex
docs: https://dexidp.io/
description: https://dexidp.io/

external-secrets

类型: 新增项目

name: external-secrets
stage: sandbox
github: https://github.com/external-secrets/external-secrets
docs: https://external-secrets.io/
description: https://external-secrets.io/

Falco

类型: 新增项目

name: Falco
stage: graduated
github: https://github.com/falcosecurity/falco
docs: https://falco.org/
description: https://falco.org/

Hexa

类型: 新增项目

name: Hexa
stage: sandbox
github: https://github.com/hexa-org/policy-orchestrator
docs: https://hexaorchestration.org/
description: https://hexaorchestration.org/

in-toto

类型: 新增项目

name: in-toto
stage: graduated
github: https://github.com/in-toto/in-toto
docs: https://in-toto.io
description: https://in-toto.io

Keycloak

类型: 新增项目

name: Keycloak
stage: incubating
github: https://github.com/keycloak/keycloak
docs: https://www.keycloak.org/
description: Keycloak is an open-source identity and access management solution for modern applications and services, built on top of industry security standard protocols.

Keylime

类型: 新增项目

name: Keylime
stage: sandbox
github: https://github.com/keylime/keylime
docs: https://keylime.dev/
description: Bootstrap & Maintain Trust on the Edge / Cloud and IoT.

KubeArmor

类型: 新增项目

name: KubeArmor
stage: sandbox
github: https://github.com/kubearmor/kubearmor
docs: https://kubearmor.io/
description: Runtime protection for Kubernetes & other cloud Workloads. Kubearmor provides a observability and policy enforcement system to restrict any unwanted, malicious behaviour of cloud-native workloads at runtime.

Kubescape

类型: 新增项目

name: Kubescape
stage: incubating
github: https://github.com/kubescape/kubescape
docs: https://kubescape.io/
description: Kubescape is an open source security and compliance platform that scans clusters, Kubernetes manifest files (YAML files, and Helm charts), code repositories, container registries and images. It detects misconfigurations according to frameworks such as the NSA-CISA, MITRE ATT&CK® and CIS, as well as software vulnerabilities, and calculates risk scores.

Kubewarden

类型: 新增项目

name: Kubewarden
stage: sandbox
github: https://github.com/kubewarden/kubewarden-controller
docs: https://www.kubewarden.io
description: Kubewarden is a Policy Engine powered by WebAssembly policies. Its policies can be written in CEL, Rego (OPA & Gatekeeper flavours), Rust, Go, YAML, and others. Kubewarden simplifies Policy-As-Code by allowing policy authors and consumers to use their preferred tooling and stack, develop and test policies out of cluster.

Kyverno

类型: 新增项目

name: Kyverno
stage: incubating
github: https://github.com/kyverno/kyverno
docs: https://kyverno.io/
description: https://kyverno.io/

Notary Project

类型: 新增项目

name: Notary Project
stage: incubating
github: https://github.com/notaryproject/notation
docs: https://notaryproject.dev/
description: https://notaryproject.dev/

Open Policy Agent (OPA)

类型: 新增项目

name: Open Policy Agent (OPA)
stage: graduated
github: https://github.com/open-policy-agent/opa
docs: https://www.openpolicyagent.org/
description: https://www.openpolicyagent.org/

Open Policy Containers

类型: 新增项目

name: Open Policy Containers
stage: sandbox
github: https://github.com/opcr-io/policy
docs: https://openpolicycontainers.com
description: A docker-inspired CLI for building, tagging, pushing, pulling, and signing OPA policies to and from OCI-compliant registries.

OpenFGA

类型: 新增项目

name: OpenFGA
stage: sandbox
github: https://github.com/openfga/openfga
docs: https://openfga.dev
description: OpenFGA is a high performance and flexible authorization/permission system built for developers and inspired by Google Zanzibar

OSCAL-COMPASS

类型: 新增项目

name: OSCAL-COMPASS
stage: sandbox
github: https://github.com/oscal-compass/compliance-trestle
docs: https://github.com/oscal-compass/community
description: The OSCAL COMPASS project is set of tools that enable the creation, validation, and governance of documentation artifacts for compliance needs. It leverages NIST’s OSCAL (Open Security Controls Assessment Language) as a standard data format for interchange between tools and people, and provides an opinionated approach to OSCAL SDK and adoption by policy engines.

Paralus

类型: 新增项目

name: Paralus
stage: sandbox
github: https://github.com/paralus/paralus
docs: https://www.paralus.io/
description: Paralus is a free, open source tool that enables controlled, audited access to Kubernetes infrastructure and Zero trust Kubernetes with zero friction.

Parsec

类型: 新增项目

name: Parsec
stage: sandbox
github: https://github.com/parallaxsecond/parsec
docs: https://parsec.community/
description: https://parsec.community/

Ratify

类型: 新增项目

name: Ratify
stage: sandbox
github: https://github.com/ratify-project/ratify
docs: https://ratify.dev/
description: A verification engine on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies you create.

SlimToolkit

类型: 新增项目

name: SlimToolkit
stage: sandbox
github: https://github.com/slimtoolkit/slim
docs: https://slimtoolkit.org/
description: Inspect, Optimize and Debug Your Containers

SOPS

类型: 新增项目

name: SOPS
stage: sandbox
github: https://github.com/getsops/sops
docs: https://github.com/getsops
description: sops is an editor of encrypted files that supports YAML, JSON, ENV, INI and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, age, and PGP.

The Update Framework (TUF)

类型: 新增项目

name: The Update Framework (TUF)
stage: graduated
github: https://github.com/theupdateframework/python-tuf
docs: https://theupdateframework.github.io/
description: https://theupdateframework.github.io/

Tokenetes

类型: 新增项目

name: Tokenetes
stage: sandbox
github: https://github.com/tokenetes/tokenetes
docs: https://tokenetes.io/
description: Tokenetes implements Transaction Tokens (TraTs) for microservices call chains. It’s a Kubernetes-native framework providing immutable identity and context in service-to-service communication to prevent attacks like software supply chain or privileged user compromise.

Athenz

类型: 新增项目

name: Athenz
stage: sandbox
github: https://github.com/AthenZ/athenz
docs: https://www.athenz.io
description: Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures

SPIFFE

类型: 新增项目

name: SPIFFE
stage: graduated
github: https://github.com/spiffe/spiffe
docs: https://spiffe.io/
description: https://spiffe.io/

SPIRE

类型: 新增项目

name: SPIRE
stage: graduated
github: https://github.com/spiffe/spire
docs: https://spiffe.io/spire/
description: https://spiffe.io/spire/

Teller

类型: 新增项目

name: Teller
stage: archived
github: https://github.com/tellerops/teller
docs: https://tlr.dev
description: https://tlr.dev

Carina

类型: 新增项目

name: Carina
stage: sandbox
github: https://github.com/carina-io/carina
docs: https://carina-io.github.io/
description: https://carina-io.github.io/

CubeFS

类型: 新增项目

name: CubeFS
stage: graduated
github: https://github.com/cubeFS/cubefs
docs: https://cubefs.io/
description: https://cubefs.io/

Curve

类型: 新增项目

name: Curve
stage: archived
github: https://github.com/opencurve/curve
docs: http://www.opencurve.io/
description: Curve is a distributed storage system designed and developed independently by NetEase, featured with high performance, high availability, high reliability and well expansibility, and it can serve as the basis for storage systems designed for different scenario.

HwameiStor

类型: 新增项目

name: HwameiStor
stage: sandbox
github: https://github.com/hwameistor/hwameistor
docs: https://hwameistor.io/
description: Hwameistor is an HA local storage system for cloud-native stateful workloads

K8up

类型: 新增项目

name: K8up
stage: sandbox
github: https://github.com/k8up-io/k8up
docs: https://www.k8up.io/
description: https://www.k8up.io/

Kanister

类型: 新增项目

name: Kanister
stage: sandbox
github: https://github.com/kanisterio/kanister
docs: https://kanister.io
description: https://kanister.io

Longhorn

类型: 新增项目

name: Longhorn
stage: incubating
github: https://github.com/longhorn/longhorn
docs: https://longhorn.io/
description: Cloud-native distributed storage for Kubernetes

OpenEBS

类型: 新增项目

name: OpenEBS
stage: sandbox
github: https://github.com/openebs/openebs
docs: https://www.openebs.io/
description: https://www.openebs.io/

ORAS

类型: 新增项目

name: ORAS
stage: sandbox
github: https://github.com/oras-project/oras
docs: https://oras.land/
description: https://oras.land/

Piraeus Datastore

类型: 新增项目

name: Piraeus Datastore
stage: sandbox
github: https://github.com/piraeusdatastore/piraeus-operator
docs: https://piraeus.io/
description: https://piraeus.io/

Rook

类型: 新增项目

name: Rook
stage: graduated
github: https://github.com/rook/rook
docs: https://rook.io/
description: https://rook.io/

Vineyard

类型: 新增项目

name: Vineyard
stage: sandbox
github: https://github.com/v6d-io/v6d
docs: https://v6d.io
description: Vineyard (v6d) is an in-memory immutable data manager.

containerd

类型: 新增项目

name: containerd
stage: graduated
github: https://github.com/containerd/containerd
docs: https://containerd.io/
description: https://containerd.io/

composefs

类型: 新增项目

name: composefs
stage: sandbox
github: https://github.com/containers/composefs
docs: https://github.com/containers/composefs
description: A project that combines Linux kernel features to provide read-only mountable filesystem trees stacking on top of an underlying “lower” Linux filesystem, particularly useful for mounting container images.

bootc

类型: 新增项目

name: bootc
stage: sandbox
github: https://github.com/containers/bootc
docs: https://github.com/containers/bootc
description: The bootc provides transactional, in-place operating system images and updates using OCI/Docker container images. This project applies the Docker container layering model to bootable host systems, using standard OCI/Docker containers as a transport and delivery format for base operating system updates.

CRI-O

类型: 新增项目

name: CRI-O
stage: graduated
github: https://github.com/cri-o/cri-o
docs: https://cri-o.io/
description: https://cri-o.io/

Hyperlight

类型: 新增项目

name: Hyperlight
stage: sandbox
github: https://github.com/hyperlight-dev/hyperlight
docs: https://github.com/hyperlight-dev/hyperlight
description: A lightweight, secure container runtime solution designed for modern cloud-native workloads

Inclavare Containers

类型: 新增项目

name: Inclavare Containers
stage: sandbox
github: https://github.com/inclavare-containers/inclavare-containers
docs: https://github.com/inclavare-containers/
description: https://github.com/inclavare-containers/

Krustlet

类型: 新增项目

name: Krustlet
stage: archived
github: https://github.com/krustlet/krustlet
docs: https://krustlet.dev
description: https://krustlet.dev

Kuasar

类型: 新增项目

name: Kuasar
stage: sandbox
github: https://github.com/kuasar-io/kuasar
docs: https://kuasar.io/
description: A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.

Lima

类型: 新增项目

name: Lima
stage: sandbox
github: https://github.com/lima-vm/lima
docs: https://github.com/lima-vm/lima
description: Linux virtual machines, typically on macOS, for running containerd

Podman Container Tools

类型: 新增项目

name: Podman Container Tools
stage: sandbox
github: https://github.com/containers/podman
docs: https://podman.io/
description: A set of tools providing full management of container lifecycle, including Podman, Buildah, and Skopeo, which manage containers and images without requiring a daemon or root privileges.

rkt

类型: 新增项目

name: rkt
stage: archived
github: https://github.com/rkt/rkt
docs: https://github.com/rkt/rkt
description: https://github.com/rkt/rkt

urunc

类型: 新增项目

name: urunc
stage: sandbox
github: https://github.com/urunc-dev/urunc
docs: https://urunc.io/
description: A CRI-compatible runtime for running unikernels and application kernels as containers. urunc bridges the gap between unikernels and containerized environments, enabling seamless integration with cloud-native architectures while maintaining OCI compatibility.

Virtual Kubelet

类型: 新增项目

name: Virtual Kubelet
stage: sandbox
github: https://github.com/virtual-kubelet/virtual-kubelet
docs: https://virtual-kubelet.io/
description: https://virtual-kubelet.io/

Interlink

类型: 新增项目

name: Interlink
stage: sandbox
github: https://github.com/interTwin-eu/interLink
docs: https://intertwin-eu.github.io/interLink/
description: InterLink aims to provide an abstraction for the execution of a Kubernetes pod on any remote resource capable of managing a Container execution lifecycle thanks to the Virtual Kubelet interface. It allows you to extend your cloud environment anywhere by running Kubernetes workloads on various infrastructures, creating a seamless cloud-native experience across diverse environments.

WasmEdge Runtime

类型: 新增项目

name: WasmEdge Runtime
stage: sandbox
github: https://github.com/WasmEdge/WasmEdge
docs: https://wasmedge.org/
description: https://wasmedge.org/

youki

类型: 新增项目

name: youki
stage: sandbox
github: https://github.com/youki-dev/youki
docs: https://youki-dev.github.io/youki/
description: https://youki-dev.github.io/youki/

Antrea

类型: 新增项目

name: Antrea
stage: sandbox
github: https://github.com/antrea-io/antrea
docs: https://antrea.io/
description: https://antrea.io/

Cilium

类型: 新增项目

name: Cilium
stage: graduated
github: https://github.com/cilium/cilium
docs: https://cilium.io/
description: https://cilium.io/

CNI-Genie

类型: 新增项目

name: CNI-Genie
stage: archived
github: https://github.com/cni-genie/CNI-Genie
docs: https://cnigenie.netlify.app
description: https://cnigenie.netlify.app

Container Network Interface (CNI)

类型: 新增项目

name: Container Network Interface (CNI)
stage: incubating
github: https://github.com/containernetworking/cni
docs: https://www.cni.dev/
description: https://www.cni.dev/

FabEdge

类型: 新增项目

name: FabEdge
stage: archived
github: https://github.com/FabEdge/fabedge
docs: https://github.com/FabEdge/
description: https://github.com/FabEdge/

Kube-OVN

类型: 新增项目

name: Kube-OVN
stage: sandbox
github: https://github.com/kubeovn/kube-ovn
docs: https://kube-ovn.io
description: https://kube-ovn.io

kube-vip

类型: 新增项目

name: kube-vip
stage: sandbox
github: https://github.com/kube-vip/kube-vip
docs: https://kube-vip.io
description: Kubernetes Virtual IP and Load-Balancer for both control plane and Kubernetes services

Network Service Mesh

类型: 新增项目

name: Network Service Mesh
stage: sandbox
github: https://github.com/networkservicemesh/api
docs: https://networkservicemesh.io/
description: https://networkservicemesh.io/

OVN-Kubernetes

类型: 新增项目

name: OVN-Kubernetes
stage: sandbox
github: https://github.com/ovn-kubernetes/ovn-kubernetes
docs: https://ovn-kubernetes.io/
description: https://ovn-kubernetes.io/

Spiderpool

类型: 新增项目

name: Spiderpool
stage: sandbox
github: https://github.com/spidernet-io/spiderpool
docs: https://spidernet-io.github.io/spiderpool/
description: Spiderpool is the underlay and RDMA network solution of the Kubernetes, for bare metal, VM and public cloud

Submariner

类型: 新增项目

name: Submariner
stage: sandbox
github: https://github.com/submariner-io/submariner
docs: https://submariner.io
description: Submariner enables direct networking between Pods and Services in different Kubernetes clusters, either on-premises or in the cloud.

Armada

类型: 新增项目

name: Armada
stage: sandbox
github: https://github.com/armadaproject/armada
docs: https://armadaproject.io/
description: https://armadaproject.io/

Capsule

类型: 新增项目

name: Capsule
stage: sandbox
github: https://github.com/projectcapsule/capsule
docs: https://capsule.clastix.io
description: Capsule implements a multi-tenant and policy-based environment in your Kubernetes cluster. It is designed as a micro-services-based ecosystem with the minimalist approach, leveraging only on upstream Kubernetes.

Clusternet

类型: 新增项目

name: Clusternet
stage: sandbox
github: https://github.com/clusternet/clusternet
docs: https://clusternet.io
description: https://clusternet.io

Clusterpedia

类型: 新增项目

name: Clusterpedia
stage: sandbox
github: https://github.com/clusterpedia-io/clusterpedia
docs: https://clusterpedia.io
description: Clusterpedia is used for complex resources search across multiple clusters, support simultaneous search of a single kind of resource or multiple kinds of resources existing in multiple clusters.

Crossplane

类型: 新增项目

name: Crossplane
stage: incubating
github: https://github.com/crossplane/crossplane
docs: https://crossplane.io/
description: Crossplane is the cloud native control plane framework that allows you to build control planes without needing to write code. Crossplane has a highly extensible backend that enables you to orchestrate applications and infrastructure no matter where they run and a highly configurable frontend that lets you define the declarative API it offers.

Eraser

类型: 新增项目

name: Eraser
stage: sandbox
github: https://github.com/eraser-dev/eraser
docs: https://eraser-dev.github.io/eraser/
description: Eraser uses vulnerability data to remove non-running images from all Kubernetes nodes in a cluster.

Fluid

类型: 新增项目

name: Fluid
stage: sandbox
github: https://github.com/fluid-cloudnative/fluid
docs: https://fluid-cloudnative.github.io/
description: Fluid is an orchestration platform for elastic data abstraction and acceleration in cloud native environment.

hami

类型: 新增项目

name: hami
stage: sandbox
github: https://github.com/Project-HAMi/HAMi
docs: https://project-hami.github.io/HAMi/
description: Heterogeneous AI Computing Virtualization Middleware

Karmada

类型: 新增项目

name: Karmada
stage: incubating
github: https://github.com/karmada-io/karmada
docs: https://karmada.io/
description: https://karmada.io/

kcp

类型: 新增项目

name: kcp
stage: sandbox
github: https://github.com/kcp-dev/kcp
docs: https://kcp.io
description: https://kcp.io

k0s

类型: 新增项目

name: k0s
stage: sandbox
github: https://github.com/k0sproject/k0s
docs: https://k0sproject.io/
description: https://k0sproject.io/

KEDA

类型: 新增项目

name: KEDA
stage: graduated
github: https://github.com/kedacore/keda
docs: https://keda.sh/
description: https://keda.sh/

Knative

类型: 新增项目

name: Knative
stage: graduated
github: https://github.com/knative/serving
docs: https://knative.dev
description: Knative is a developer-focused serverless application layer which is a great complement to the existing Kubernetes application constructs. Knative consists of three components: an HTTP-triggered autoscaling container runtime called “Knative Serving”, a CloudEvents-over-HTTP asynchronous routing layer called “Knative Eventing”, and a developer-focused function framework which leverages the Serving and Eventing components, called “Knative Functions”.

Koordinator

类型: 新增项目

name: Koordinator
stage: sandbox
github: https://github.com/koordinator-sh/koordinator
docs: https://koordinator.sh
description: QoS based scheduling system for hybrid orchestration workloads on Kubernetes, bringing workloads the best layout and status.

kube-rs

类型: 新增项目

name: kube-rs
stage: sandbox
github: https://github.com/kube-rs/kube
docs: https://kube.rs
description: kube-rs is the core Rust ecosystem for building applications against Kubernetes

Kubeflow

类型: 新增项目

name: Kubeflow
stage: incubating
github: https://github.com/kubeflow/kubeflow
docs: https://kubeflow.org
description: The Kubeflow project is dedicated to making deployments of machine learning workflows on Kubernetes simple, portable and scalable by providing a straightforward way to deploy best-of-breed open-source systems for ML to diverse infrastructures.

KubeFleet

类型: 新增项目

name: KubeFleet
stage: sandbox
github: https://github.com/kubefleet-dev/kubefleet
docs: https://github.com/kubefleet-dev/kubefleet
description: A multi-cluster solution that enables users to effectively manage their applications running in multiple Kubernetes clusters.

Kubernetes

类型: 新增项目

name: Kubernetes
stage: graduated
github: https://github.com/kubernetes/kubernetes
docs: https://kubernetes.io/
description: Kubernetes is an open-source system for automating deployment, scaling, and management of containerized applications

KubeSlice

类型: 新增项目

name: KubeSlice
stage: sandbox
github: https://github.com/kubeslice/kubeslice
docs: https://kubeslice.io
description: https://kubeslice.io

KubeStellar

类型: 新增项目

name: KubeStellar
stage: sandbox
github: https://github.com/kubestellar/kubestellar
docs: https://kubestellar.io
description: https://kubestellar.io

Kured

类型: 新增项目

name: Kured
stage: sandbox
github: https://github.com/kubereboot/kured
docs: https://kured.dev
description: Kured (KUbernetes REboot Daemon) is a Kubernetes daemonset that performs safe automatic node reboots when the need to do so is indicated by the package management system of the underlying OS

Open Cluster Management

类型: 新增项目

name: Open Cluster Management
stage: sandbox
github: https://github.com/open-cluster-management-io/ocm
docs: https://open-cluster-management.io/
description: https://open-cluster-management.io/

OpenFunction

类型: 新增项目

name: OpenFunction
stage: sandbox
github: https://github.com/OpenFunction/OpenFunction
docs: https://openfunction.dev
description: https://openfunction.dev

Serverless Devs

类型: 新增项目

name: Serverless Devs
stage: sandbox
github: https://github.com/serverless-devs/serverless-devs
docs: https://www.serverless-devs.com/
description: https://www.serverless-devs.com/

Volcano

类型: 新增项目

name: Volcano
stage: incubating
github: https://github.com/volcano-sh/volcano
docs: https://volcano.sh/
description: https://volcano.sh/

wasmCloud

类型: 新增项目

name: wasmCloud
stage: incubating
github: https://github.com/wasmCloud/wasmCloud
docs: https://wasmcloud.com
description: https://wasmcloud.com

CoreDNS

类型: 新增项目

name: CoreDNS
stage: graduated
github: https://github.com/coredns/coredns
docs: https://coredns.io/
description: https://coredns.io/

etcd

类型: 新增项目

name: etcd
stage: graduated
github: https://github.com/etcd-io/etcd
docs: https://etcd.io/
description: https://etcd.io/

k8gb

类型: 新增项目

name: k8gb
stage: sandbox
github: https://github.com/k8gb-io/k8gb
docs: https://www.k8gb.io
description: https://www.k8gb.io

Xline

类型: 新增项目

name: Xline
stage: archived
github: https://github.com/xline-kv/Xline
docs: https://www.xline.cloud
description: Xline is a high-performance geo-distributed metadata management system, which is compatible with the ETCD interface.

gRPC

类型: 新增项目

name: gRPC
stage: incubating
github: https://github.com/grpc/grpc
docs: https://grpc.io/
description: https://grpc.io/

Connect RPC

类型: 新增项目

name: Connect RPC
stage: sandbox
github: https://github.com/connectrpc/connect-go
docs: https://connectrpc.com/
description: Connect is a family of libraries for building browser and gRPC-compatible HTTP APIs.

BFE

类型: 新增项目

name: BFE
stage: sandbox
github: https://github.com/bfenetworks/bfe
docs: https://www.bfe-networks.net
description: Open-source layer 7 load balancer derived from proprietary Baidu FrontEnd

Contour

类型: 新增项目

name: Contour
stage: incubating
github: https://github.com/projectcontour/contour
docs: https://projectcontour.io
description: https://projectcontour.io

Envoy

类型: 新增项目

name: Envoy
stage: graduated
github: https://github.com/envoyproxy/envoy
docs: https://www.envoyproxy.io
description: https://www.envoyproxy.io

LoxiLB

类型: 新增项目

name: LoxiLB
stage: sandbox
github: https://github.com/loxilb-io/loxilb
docs: https://loxilb.io
description: eBPF based cloud-native load-balancer. Powering Kubernetes|Edge|5G|IoT|XaaS Apps.

MetalLB

类型: 新增项目

name: MetalLB
stage: sandbox
github: https://github.com/metallb/metallb
docs: https://metallb.universe.tf
description: https://metallb.universe.tf

OpenELB

类型: 新增项目

name: OpenELB
stage: archived
github: https://github.com/openelb/openelb
docs: https://openelb.github.io
description: https://openelb.github.io

Easegress

类型: 新增项目

name: Easegress
stage: sandbox
github: https://github.com/easegress-io/easegress
docs: https://megaease.com/easegress
description: https://megaease.com/easegress

Emissary-Ingress

类型: 新增项目

name: Emissary-Ingress
stage: incubating
github: https://github.com/emissary-ingress/emissary
docs: https://emissary-ingress.dev/
description: https://emissary-ingress.dev/

Kgateway

类型: 新增项目

name: Kgateway
stage: sandbox
github: https://github.com/kgateway-dev/kgateway
docs: https://kgateway.dev/
description: An Envoy-powered, Kubernetes-native API Gateway that integrates Kubernetes Gateway API with a control plane for API connectivity in any cloud environment.

Kuadrant

类型: 新增项目

name: Kuadrant
stage: sandbox
github: https://github.com/kuadrant/kuadrant-operator
docs: https://kuadrant.io
description: Kuadrant combines Gateway API and Istio-based gateway controllers to enhance application connectivity. It enables platform engineers and application developers to easily connect, secure, and protect their services and infrastructure across multiple clusters with policies for TLS, DNS, application authentication & authorization, and rate limiting.

Aeraki Mesh

类型: 新增项目

name: Aeraki Mesh
stage: sandbox
github: https://github.com/aeraki-mesh/aeraki
docs: https://www.aeraki.net/
description: Aeraki Mesh allows you to manage any layer-7 traffic in a service mesh

Istio

类型: 新增项目

name: Istio
stage: graduated
github: https://github.com/istio/istio
docs: https://istio.io/
description: Simplify observability, traffic management, security, and policy with the Istio service mesh.

Kmesh

类型: 新增项目

name: Kmesh
stage: sandbox
github: https://github.com/kmesh-net/kmesh
docs: https://kmesh.net
description: Kmesh is a high-performance and low overhead service mesh data plane based on eBPF and programmable kernel. Kmesh brings traffic management, security and monitoring to service communication without needing application code changes. It is natively sidecarless, zero intrusion and without adding any resource cost to application container.

Kuma

类型: 新增项目

name: Kuma
stage: sandbox
github: https://github.com/kumahq/kuma
docs: https://kuma.io
description: https://kuma.io

Linkerd

类型: 新增项目

name: Linkerd
stage: graduated
github: https://github.com/linkerd/linkerd2
docs: https://linkerd.io/
description: Ultra light, ultra simple, ultra powerful. Linkerd adds security, observability, and reliability to Kubernetes, without the complexity.

Merbridge

类型: 新增项目

name: Merbridge
stage: archived
github: https://github.com/merbridge/merbridge
docs: https://merbridge.io/
description: Use eBPF to speed up your Service Mesh like crossing an Einstein-Rosen Bridge.

Open Service Mesh

类型: 新增项目

name: Open Service Mesh
stage: archived
github: https://github.com/openservicemesh/osm
docs: https://openservicemesh.io/
description: https://openservicemesh.io/

Sermant

类型: 新增项目

name: Sermant
stage: sandbox
github: https://github.com/sermant-io/Sermant
docs: https://sermant.io/
description: Sermant a proxyless service mesh solution based on Javaagent.

Service Mesh Interface (SMI)

类型: 新增项目

name: Service Mesh Interface (SMI)
stage: archived
github: https://github.com/servicemeshinterface/smi-spec
docs: https://smi-spec.io
description: https://smi-spec.io

Service Mesh Performance

类型: 新增项目

name: Service Mesh Performance
stage: archived
github: https://github.com/service-mesh-performance/service-mesh-performance
docs: https://smp-spec.io/
description: https://smp-spec.io/

CloudNativePG

类型: 新增项目

name: CloudNativePG
stage: sandbox
github: https://github.com/cloudnative-pg/cloudnative-pg
docs: https://www.cloudnative-pg.io/
description: CloudNativePG is a comprehensive platform designed to seamlessly manage PostgreSQL databases within Kubernetes environments, covering the entire operational lifecycle from initial deployment to ongoing maintenance

openGemini

类型: 新增项目

name: openGemini
stage: sandbox
github: https://github.com/openGemini/openGemini
docs: https://www.opengemini.org
description: openGemini is an open source distributed time series DBMS with high concurrency, high performance, and high scalability, focusing on the storage and analysis of massive observability data.

SchemaHero

类型: 新增项目

name: SchemaHero
stage: sandbox
github: https://github.com/schemahero/schemahero
docs: https://schemahero.io
description: https://schemahero.io

TiKV

类型: 新增项目

name: TiKV
stage: graduated
github: https://github.com/tikv/tikv
docs: https://tikv.org
description: A distributed transactional key-value database. Based on the design of Google Spanner and HBase, but simpler to manage and without dependencies on any distributed filesystem

Vitess

类型: 新增项目

name: Vitess
stage: graduated
github: https://github.com/vitessio/vitess
docs: https://vitess.io/
description: MySQL-compatible, horizontally scalable, cloud-native database solution.

CloudEvents

类型: 新增项目

name: CloudEvents
stage: graduated
github: https://github.com/cloudevents/spec
docs: https://cloudevents.io/
description: Standardizing common eventing metadata and their location to help with event identification and routing.

Drasi

类型: 新增项目

name: Drasi
stage: sandbox
github: http://github.com/drasi-project/drasi-platform
docs: https://drasi.io
description: A data change processing platform to simplify change-driven systems that need to detect, evaluate, and react to data changes quickly and efficiently at scale.

NATS

类型: 新增项目

name: NATS
stage: incubating
github: https://github.com/nats-io/nats-server
docs: https://nats.io/
description: NATS.io is a connective technology for distributed systems and is a perfect fit to connect devices, edge, cloud or hybrid deployments. True multi-tenancy makes NATS ideal for SaaS and self-healing and scaling technology allows for topology changes anytime with zero downtime.

Pravega

类型: 新增项目

name: Pravega
stage: archived
github: https://github.com/pravega/pravega
docs: https://cncf.pravega.io
description: https://cncf.pravega.io

Strimzi

类型: 新增项目

name: Strimzi
stage: incubating
github: https://github.com/strimzi/strimzi-kafka-operator
docs: https://strimzi.io/
description: https://strimzi.io/

Tremor

类型: 新增项目

name: Tremor
stage: sandbox
github: https://github.com/tremor-rs/tremor-runtime
docs: https://www.tremor.rs/
description: https://www.tremor.rs/

Artifact Hub

类型: 新增项目

name: Artifact Hub
stage: incubating
github: https://github.com/artifacthub/hub
docs: https://artifacthub.io
description: https://artifacthub.io

Backstage

类型: 新增项目

name: Backstage
stage: incubating
github: https://github.com/backstage/backstage
docs: https://backstage.io/
description: https://backstage.io/

Buildpacks

类型: 新增项目

name: Buildpacks
stage: incubating
github: https://github.com/buildpacks/pack
docs: https://buildpacks.io/
description: https://buildpacks.io/

Carvel

类型: 新增项目

name: Carvel
stage: sandbox
github: https://github.com/carvel-dev/ytt
docs: https://carvel.dev
description: Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes.

Dapr

类型: 新增项目

name: Dapr
stage: graduated
github: https://github.com/dapr/dapr
docs: https://dapr.io
description: https://dapr.io

Devfile

类型: 新增项目

name: Devfile
stage: sandbox
github: https://github.com/devfile/api
docs: https://devfile.io
description: https://devfile.io

DevSpace

类型: 新增项目

name: DevSpace
stage: sandbox
github: https://github.com/devspace-sh/devspace
docs: https://devspace.sh
description: https://devspace.sh

Helm

类型: 新增项目

name: Helm
stage: graduated
github: https://github.com/helm/helm
docs: https://helm.sh/
description: https://helm.sh/

ko

类型: 新增项目

name: ko
stage: sandbox
github: https://github.com/ko-build/ko
docs: https://ko.build/
description: https://ko.build/

Konveyor

类型: 新增项目

name: Konveyor
stage: sandbox
github: https://github.com/konveyor/operator
docs: https://www.konveyor.io/
description: https://www.konveyor.io/

Krator

类型: 新增项目

name: Krator
stage: archived
github: https://github.com/krator-rs/krator
docs: https://docs.rs/crate/krator/latest
description: https://docs.rs/crate/krator/latest

KubeVela

类型: 新增项目

name: KubeVela
stage: incubating
github: https://github.com/kubevela/kubevela
docs: https://kubevela.io
description: https://kubevela.io

KubeVirt

类型: 新增项目

name: KubeVirt
stage: incubating
github: https://github.com/kubevirt/kubevirt
docs: https://kubevirt.io/
description: https://kubevirt.io/

KUDO

类型: 新增项目

name: KUDO
stage: sandbox
github: https://github.com/kudobuilder/kudo
docs: https://kudo.dev/
description: https://kudo.dev/

Microcks

类型: 新增项目

name: Microcks
stage: sandbox
github: https://github.com/microcks/microcks
docs: https://microcks.io
description: https://microcks.io

ModelPack

类型: 新增项目

name: ModelPack
stage: sandbox
github: https://github.com/modelpack/model-spec
docs: https://github.com/modelpack/model-spec
description: The project establishes open standards for packaging, distributing and running AI artifacts in the cloud-native environment.

Nocalhost

类型: 新增项目

name: Nocalhost
stage: archived
github: https://github.com/nocalhost/nocalhost
docs: https://nocalhost.dev
description: https://nocalhost.dev

Operator Framework

类型: 新增项目

name: Operator Framework
stage: incubating
github: https://github.com/operator-framework/operator-sdk
docs: https://operatorframework.io/
description: https://operatorframework.io/

Podman Desktop

类型: 新增项目

name: Podman Desktop
stage: sandbox
github: https://github.com/podman-desktop/podman-desktop
docs: https://podman-desktop.io/
description: An open-source tool for developers to work with containers and Kubernetes with an intuitive and user-friendly interface to effortlessly build, manage, and deploy containers and Kubernetes — all from the desktop.

Porter

类型: 新增项目

name: Porter
stage: sandbox
github: https://github.com/getporter/porter
docs: https://porter.sh/
description: https://porter.sh/

Radius

类型: 新增项目

name: Radius
stage: sandbox
github: https://github.com/radius-project/radius
docs: https://radapp.io/
description: Radius is a cloud-native application platform that enables developers and the platform engineers that support them to collaborate on delivering and managing cloud-native applications that follow organizational best practices for cost, operations and security, by default.

Score

类型: 新增项目

name: Score
stage: sandbox
github: https://github.com/score-spec/spec
docs: https://score.dev/
description: Score is an open-source workload specification designed to simplify development for cloud-native developers.

sealer

类型: 新增项目

name: sealer
stage: archived
github: https://github.com/sealerio/sealer
docs: http://sealer.cool/
description: http://sealer.cool/

Serverless Workflow

类型: 新增项目

name: Serverless Workflow
stage: sandbox
github: https://github.com/serverlessworkflow/specification
docs: https://serverlessworkflow.io
description: https://serverlessworkflow.io

Shipwright

类型: 新增项目

name: Shipwright
stage: sandbox
github: https://github.com/shipwright-io/build
docs: https://shipwright.io
description: https://shipwright.io

Stacker

类型: 新增项目

name: Stacker
stage: sandbox
github: https://github.com/project-stacker/stacker
docs: https://stackerbuild.io
description: Stacker is a tool for building OCI images and related artifacts such as SBOMs natively via a declarative yaml format.

Telepresence

类型: 新增项目

name: Telepresence
stage: sandbox
github: https://github.com/telepresenceio/telepresence
docs: https://www.telepresence.io/
description: https://www.telepresence.io/

Visual Studio Code Kubernetes Tools

类型: 新增项目

name: Visual Studio Code Kubernetes Tools
stage: sandbox
github: https://github.com/vscode-kubernetes-tools/vscode-kubernetes-tools
docs: https://marketplace.visualstudio.com/items?itemName=ms-kubernetes-tools.vscode-kubernetes-tools
description: The extension for developers building applications to run in Kubernetes clusters and for DevOps staff troubleshooting Kubernetes applications.

xRegistry

类型: 新增项目

name: xRegistry
stage: sandbox
github: https://github.com/xregistry/server
docs: https://xregistry.io
description: The xRegistry project defines an abstract model for managing metadata about resources and provides a REST-based interface to discover, create, modify and delete those resources.

Argo

类型: 新增项目

name: Argo
stage: graduated
github: https://github.com/argoproj/argo-cd
docs: https://argoproj.github.io/
description: Kubernetes-native tools to run workflows, manage clusters, and do GitOps right.

Brigade

类型: 新增项目

name: Brigade
stage: archived
github: https://github.com/brigadecore/brigade
docs: https://brigade.sh/
description: https://brigade.sh/

Flux

类型: 新增项目

name: Flux
stage: graduated
github: https://github.com/fluxcd/flux2
docs: https://fluxcd.io/
description: https://fluxcd.io/

Keptn

类型: 新增项目

name: Keptn
stage: archived
github: https://github.com/keptn/lifecycle-toolkit
docs: https://www.keptn.sh
description: Cloud-native application life-cycle orchestration. Keptn automates your SLO-driven multi-stage delivery and operations & remediation of your applications.

OpenGitOps

类型: 新增项目

name: OpenGitOps
stage: sandbox
github: https://github.com/open-gitops/project
docs: https://opengitops.dev/
description: https://opengitops.dev/

OpenKruise

类型: 新增项目

name: OpenKruise
stage: incubating
github: https://github.com/openkruise/kruise
docs: https://openkruise.io/
description: https://openkruise.io/

PipeCD

类型: 新增项目

name: PipeCD
stage: sandbox
github: https://github.com/pipe-cd/pipecd
docs: https://pipecd.dev/
description: GitOps style continuous delivery platform that provides consistent deployment and operations experience for any applications

werf

类型: 新增项目

name: werf
stage: sandbox
github: https://github.com/werf/werf
docs: https://werf.io/
description: werf is a solution for implementing efficient and consistent software delivery to Kubernetes. It covers the entire CI/CD lifecycle and all related artifacts, glues commonly used tools (Git, Docker/Buildah, Helm, K8s) and facilitates best practices.

Kube-burner

类型: 新增项目

name: Kube-burner
stage: sandbox
github: https://github.com/kube-burner/kube-burner
docs: https://kube-burner.github.io/kube-burner/
description: https://kube-burner.github.io/kube-burner/

Flatcar Container Linux

类型: 新增项目

name: Flatcar Container Linux
stage: incubating
github: https://github.com/flatcar/Flatcar
docs: https://www.flatcar.org/
description: A community Linux distribution designed for container workloads, with high security and low maintenance

k3s

类型: 新增项目

name: k3s
stage: sandbox
github: https://github.com/k3s-io/k3s
docs: https://k3s.io
description: Lightweight Kubernetes

KubeClipper

类型: 新增项目

name: KubeClipper
stage: sandbox
github: https://github.com/kubeclipper/kubeclipper
docs: https://www.kubeclipper.io/
description: Manage kubernetes in the most light and convenient way.

Cozystack

类型: 新增项目

name: Cozystack
stage: sandbox
github: https://github.com/cozystack/cozystack
docs: https://cozystack.io
description: Cozystack is a free PaaS platform and framework for building private clouds and providing users/customers with managed Kubernetes, KubeVirt-based VMs, databases as a service, NATS, message brokers, etc. with GPU support in VMs and Kubernetes clusters.

SlimFaaS

类型: 新增项目

name: SlimFaaS
stage: sandbox
github: https://github.com/SlimPlanet/SlimFaas
docs: https://github.com/SlimPlanet/SlimFaas
description: The slimest and simplest Function As A Service

OpenFeature

类型: 新增项目

name: OpenFeature
stage: incubating
github: https://github.com/open-feature/spec
docs: https://openfeature.dev/
description: Standardizing Feature Flagging for Everyone

Chaos Mesh

类型: 新增项目

name: Chaos Mesh
stage: incubating
github: https://github.com/chaos-mesh/chaos-mesh
docs: https://chaos-mesh.org/
description: https://chaos-mesh.org/

Chaosblade

类型: 新增项目

name: Chaosblade
stage: sandbox
github: https://github.com/chaosblade-io/chaosblade
docs: https://chaosblade.io/
description: https://chaosblade.io/

Litmus

类型: 新增项目

name: Litmus
stage: incubating
github: https://github.com/litmuschaos/litmus
docs: https://litmuschaos.io/
description: https://litmuschaos.io/

Krkn

类型: 新增项目

name: Krkn
stage: sandbox
github: https://github.com/krkn-chaos/krkn
docs: https://krkn-chaos.github.io/krkn
description: Chaos testing tool for Kubernetes to identify bottlenecks and improve resilience and performance under failure conditions.

OpenCost

类型: 新增项目

name: OpenCost
stage: incubating
github: https://github.com/opencost/opencost
docs: https://www.opencost.io/
description: OpenCost provides visibility into current and historical Kubernetes spend and resource allocation.

Cortex

类型: 新增项目

name: Cortex
stage: incubating
github: https://github.com/cortexproject/cortex
docs: https://cortexmetrics.io/
description: https://cortexmetrics.io/

Fluentd

类型: 新增项目

name: Fluentd
stage: graduated
github: https://github.com/fluent/fluentd
docs: https://www.fluentd.org/
description: https://www.fluentd.org/

Fonio

类型: 新增项目

name: Fonio
stage: archived
github: https://github.com/foniod/foniod
docs: https://ingraind.org/
description: https://ingraind.org/

Inspektor Gadget

类型: 新增项目

name: Inspektor Gadget
stage: sandbox
github: https://github.com/inspektor-gadget/inspektor-gadget
docs: https://inspektor-gadget.io/
description: Open source eBPF debugging and data collection tool for Kubernetes and Linux

Jaeger

类型: 新增项目

name: Jaeger
stage: graduated
github: https://github.com/jaegertracing/jaeger
docs: https://www.jaegertracing.io/
description: https://www.jaegertracing.io/

K8sGPT

类型: 新增项目

name: K8sGPT
stage: sandbox
github: https://github.com/k8sgpt-ai/k8sgpt
docs: https://www.k8sgpt.ai
description: https://www.k8sgpt.ai

Kepler

类型: 新增项目

name: Kepler
stage: sandbox
github: https://github.com/sustainable-computing-io/kepler
docs: https://sustainable-computing.io/
description: Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe energy related system stats and exports as Prometheus metrics.

Kuberhealthy

类型: 新增项目

name: Kuberhealthy
stage: sandbox
github: https://github.com/kuberhealthy/kuberhealthy
docs: https://github.com/kuberhealthy/kuberhealthy
description: https://github.com/kuberhealthy/kuberhealthy

Logging Operator (Kube Logging)

类型: 新增项目

name: Logging Operator (Kube Logging)
stage: sandbox
github: https://github.com/kube-logging/logging-operator
docs: https://kube-logging.dev/
description: https://kube-logging.dev/

OpenMetrics

类型: 新增项目

name: OpenMetrics
stage: archived
github: https://github.com/OpenObservability/OpenMetrics
docs: https://openmetrics.io/
description: https://openmetrics.io/

OpenTelemetry

类型: 新增项目

name: OpenTelemetry
stage: incubating
github: https://github.com/open-telemetry/community
docs: https://opentelemetry.io/
description: https://opentelemetry.io/

OpenTracing

类型: 新增项目

name: OpenTracing
stage: archived
github: https://github.com/opentracing/opentracing-go
docs: https://opentracing.io/
description: https://opentracing.io/

Perses

类型: 新增项目

name: Perses
stage: sandbox
github: https://github.com/perses/perses
docs: https://perses.dev
description: Perses is a dashboard tool to visualize observability data from Prometheus/Thanos/Jaeger.

Pixie

类型: 新增项目

name: Pixie
stage: sandbox
github: https://github.com/pixie-io/pixie
docs: https://px.dev/
description: Open source Kubernetes observability for developers

Prometheus

类型: 新增项目

name: Prometheus
stage: graduated
github: https://github.com/prometheus/prometheus
docs: https://prometheus.io/
description: https://prometheus.io/

Skooner

类型: 新增项目

name: Skooner
stage: archived
github: https://github.com/skooner-k8s/skooner
docs: https://skooner.io/
description: https://skooner.io/

Thanos

类型: 新增项目

name: Thanos
stage: incubating
github: https://github.com/thanos-io/thanos
docs: https://thanos.io/
description: https://thanos.io/

Trickster

类型: 新增项目

name: Trickster
stage: sandbox
github: https://github.com/trickstercache/trickster
docs: https://trickstercache.org
description: https://trickstercache.org

SpinKube

类型: 新增项目

name: SpinKube
stage: sandbox
github: https://github.com/spinframework/spin-operator
docs: https://www.spinkube.dev/
description: Open source platform for efficiently running (containerless) Spin-based WebAssembly (Wasm) applications on Kubernetes.

container2wasm

类型: 新增项目

name: container2wasm
stage: sandbox
github: https://github.com/container2wasm/container2wasm
docs: https://github.com/container2wasm/container2wasm
description: A tool to run containers on Wasm-enabled environments.

KAITO

类型: 新增项目

name: KAITO
stage: sandbox
github: https://github.com/kaito-project/kaito
docs: https://kaito-project.netlify.app/
description: Kubernetes AI Toolchain Operator (KAITO) simplifies LLM inference, tuning, and RAG workloads on Kubernetes.

coredns_v1.12.4_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/coredns/coredns/releases/tag/v1.12.4

coredns/coredns v1.12.4 Release Notes

Published at: 2025-09-09T00:12:27Z

This release improves stability and security, fixing context propagation in DoH, label offset handling in the file plugin, and connection leaks in gRPC and transfer. It also adds support for the prefer option in loadbalance, introduces timeouts to the metrics server, and fixes several security vulnerabilities (see details in related security advisories).

Brought to You By

Archy Ilya Kulakov Olli Janatuinen Qasim Sarfraz Syed Azeez Ville Vesilehto wencyu Yong Tang

Noteworthy Changes

core: Improve caddy.GracefulServer conformance checks (https://github.com/coredns/coredns/pull/7416)
core: Propagate HTTP request context in DoH (https://github.com/coredns/coredns/pull/7491)
plugin/file: Fix label offset problem in ClosestEncloser (https://github.com/coredns/coredns/pull/7465)
plugin/grpc: Check proxy list length in policies (https://github.com/coredns/coredns/pull/7512)
plugin/grpc: Fix span leak and deadline on error attempt (https://github.com/coredns/coredns/pull/7487)
plugin/header: Remove deprecated syntax (https://github.com/coredns/coredns/pull/7436)
plugin/loadbalance: Support prefer option (https://github.com/coredns/coredns/pull/7433)
plugin/metrics: Add timeouts to metrics HTTP server (https://github.com/coredns/coredns/pull/7469)
plugin/trace: Migrate dd-trace-go v1 to v2 (https://github.com/coredns/coredns/pull/7466)
plugin/transfer: Fix goroutine leak on axfr err (https://github.com/coredns/coredns/pull/7516)

kubernetes_v1.31.12_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.31.12

kubernetes/kubernetes v1.31.12 Release Notes

Published at: 2025-08-13T19:50:00Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.31.13_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.31.13

kubernetes/kubernetes v1.31.13 Release Notes

Published at: 2025-09-10T04:03:49Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.32.8_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.32.8

kubernetes/kubernetes v1.32.8 Release Notes

Published at: 2025-08-13T19:45:14Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.32.9_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.32.9

kubernetes/kubernetes v1.32.9 Release Notes

Published at: 2025-09-10T00:19:23Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.33.4_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.33.4

kubernetes/kubernetes v1.33.4 Release Notes

Published at: 2025-08-13T19:46:26Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.33.5_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.33.5

kubernetes/kubernetes v1.33.5 Release Notes

Published at: 2025-09-10T01:38:50Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.34.0_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.34.0

kubernetes/kubernetes v1.34.0 Release Notes

Published at: 2025-08-27T17:19:17Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

kubernetes_v1.34.1_release_note

Mon, 29 Sep 2025 05:22:25 +0800

来源: https://github.com/kubernetes/kubernetes/releases/tag/v1.34.1

kubernetes/kubernetes v1.34.1 Release Notes

Published at: 2025-09-10T03:28:09Z

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

IOS自签名应用安装指南

Sun, 07 Sep 2025 22:08:11 +0800

介绍

苹果手机安装应用正常来说有以下方式:

app store 下载: 需要开发者上架(需要开发者掏钱并且通过苹果的审核)
testflight 下载: (需要开发者掏钱并且通过苹果的审核,但比app store 审核宽松)

非正常的:

开发者模式: 只要有apple 账户就可以
越狱: 一般都不考虑

这里将的是开发者模式

开发者模式

环境准备

MacOS 升级到最新版，并下载Xcode
用USB连接电脑和手机。解锁手机。
打开 XCode 应用, 从顶部菜单项选择 “Window” -> “Devices and Simulators”
这里一般就有自己手机了，如果没有，可以按下面的截图自己加一下
第一次连接，一般会提示这个信息，让你的手机开启开发者模式，根据提示操作即可
比如我的手机就是"设置"->“隐私与安装”,然后划到最下面有个"",选择打开后会提示重启手机,然后会再让你确认一次,然后就好了

下载app

这里就分两种情况:

代码构建方式

如果你是基于代码构建(比如开源下载的代码或自己写的代码),打开项目,然后选择设备,点击运行,就会自动构建和下载到手机了(测试发现,在同一个WIFI网络内,后续的升级不用USB线连接电脑也可以)
第一次安装会提示"不受信任的开发者", 然后打开"设置"->“通用”->“VPN与设备管理"选择对应的证书点击"信任 xxx”,然后再重新打开app或者重新在Xcode里面点击运行即可

ipa 文件方式

如有你已经构建了带签名的 ipa 包,可以打开 XCode 应用, 从顶部菜单项选择"Window" -> “Devices and Simulators”,选择自己手机的
一样会提示签名问题,参考上面的操作即可另: 如果ipa 没有签名,修改ipa的签名见(未测试): https://www.reddit.com/r/jailbreak/comments/ecojvu/help_how_to_fix_this_when_trying_to_installsign/

博客编写说明

Sun, 07 Sep 2025 08:26:52 +0800

针对非关键事情,特别是琐碎杂事,我的记性一直不好😄 为了避免自己遗忘如何维护本博客,记录下博客的关键信息

初始化

参考: https://imfing.github.io/hextra/zh-cn/docs/getting-started/

hugo new site zzg-blog --format=yaml
cd zzg-blog
# 下载主题
hugo mod get github.com/imfing/hextra
# 配置自动发布
mkdir -p .github/workflows
curl -o .github/workflows/pages2.yaml https://raw.githubusercontent.com/imfing/hextra-starter-template/refs/heads/main/.github/workflows/pages.yaml
cat > hugo.yaml <<-EOF
module:
imports:
- path: github.com/imfing/hextra
run: |
hugo \
--gc --minify \
--baseURL "https://zgfh.github.io/"
EOF
hugo new content/_index.md
hugo new content/docs/_index.md
hugo server --buildDrafts --disableFastRender

提交

# 这里手动配置下
vi .gitignore
# 修改 title, 导航 等
vi hugo.yaml
git init
git add .
git remote add origin git@github.com:zgfh/zgfh.github.io.git
git push -u origin main

写博客

运行服务,可以试试看到效果

hugo server --buildDrafts --disableFastRender

增加 docs 文章

hugo new content/docs/xx/xxx.md

markdown 格式: https://imfing.github.io/hextra/zh-cn/docs/guide/markdown/

go_start.md

Mon, 08 Jan 2018 22:08:09 +0000

环境准备教程： https://www.jianshu.com/p/eb35a47a157e 测试用例：https://github.com/astaxie/build-web-application-with-golang/blob/master/zh/11.3.md go init: http://blog.csdn.net/rznice/article/details/18987047

PWD.md

Mon, 08 Jan 2018 20:43:09 +0000

#安装 docker machin 见：https://docs.docker.com/machine/install-machine/#install-machine-directly

curl -L https://github.com/docker/machine/releases/download/v0.13.0/docker-machine-`uname -s`-`uname -m` >/tmp/docker-machine && \
chmod +x /tmp/docker-machine && \
sudo cp /tmp/docker-machine /usr/local/bin/docker-machine

#安装 docker-machine-driver-pwd https://github.com/play-with-docker/docker-machine-driver-pwd

wget https://github.com/play-with-docker/docker-machine-driver-pwd/releases/download/v0.0.5/docker-machine-driver.tar
tar -vxf docker-machine-driver.tar
mv `dpkg --print-architecture`/docker-machine-driver-pwd /usr/local/bin/docker-machine-driver-pwd

#创建机器

#Create a session in play-with-docker.com and set the PWD_URL env variable
export PWD_URL=https://labs.play-with-docker.com/p/b99mkeol9m7g00f57fng
docker-machine create -d pwd --pwd-url $PWD_URL node1
eval $(docker-machine env node1)
docker ps

#参考 http://training.play-with-docker.com/ 创建失败可能需要重新开一个session试试： https://github.com/play-with-docker/docker-machine-driver-pwd/issues/11

python unicode

Wed, 20 Dec 2017 11:40:40 +0000

总结

主动设置defaultencoding。（默认的是ascii）
代码文件的保存格式要与文件头部的# coding:xxx一致
如果是中文，程序内部尽量使用unicode，而不用str
不确定是否是unicode

#unicode/str 转换为 str
if isinstance(key, unicode):
key = key.encode('utf-8')

str与字节码

s = "人生苦短" s是个字符串，它本身存储的就是字节码,字节码有编码格式

unicode与str

unicode是一种编码标准，具体的实现标准可能是utf-8，utf-16，gbk python 在内部使用两个字节来存储一个unicode，使用unicode对象而不是str的好处，就是unicode方便于跨平台。

你可以用如下两种方式定义一个unicode:

s1 = u"人生苦短"
s2 = unicode("人生苦短", "utf-8")

encode与decode

# -*- coding:utf-8 -*-
su = "人生苦短"
# ： su是一个utf-8格式的字节串
u = s.decode("utf-8")
# ： s被解码为unicode对象，赋给u
sg = u.encode("gbk")
# ： u被编码为gbk格式的字节串，赋给sg
print sg
# 打印sg

文件头声明编码的作用：`# -- coding: utf-8 --`

*. 如果代码中有中文注释，就需要此声明 *. 比较高级的编辑器（比如我的emacs），会根据头部声明，将此作为代码文件的格式。 *. 程序会通过头部声明，解码初始化 u”人生苦短”，这样的unicode对象，（所以头部声明和代码的存储格式要一致）

参考：

http://wklken.me/posts/2013/08/31/python-extra-coding-intro.html http://python.jobbole.com/81244/

正则

Thu, 14 Dec 2017 16:41:42 +0000

正则是工作中常用的一个知识点：基础知识

参考： https://www.cnblogs.com/huxi/archive/2010/07/04/1771073.html

pycharm-pep8

Wed, 13 Dec 2017 13:44:33 +0000

###代码规范最近提交PR老是被因为一些代码规范问题别指出，自己表示不开心，但确实事自己问题，为什么不提前格式化代码呢？目前几乎大部分的编译器都有代码格式化功能，以及代码规范检测这里总结下我目前使用的语言的相应编译器的设置

###python 遵守pep8规范见：https://www.python.org/dev/peps/pep-0008/

*. pycharm 默认安装的pycharm会提示警告，你也可以修改你也可以设置，在：设置中搜索inspections，然后找到“PEP 8 coding style violation”，进行设置

###go

参考链接： https://www.zhihu.com/question/37787004 http://blog.csdn.net/u013088062/article/details/50113593 https://wangye.org/blog/archives/914/

Heapster

Wed, 29 Nov 2017 11:40:56 +0000

Heapster 介绍

Heapster会收集集群中的node，namespace，pod等级别的metric信息，对这些数据聚合之后存储到指定的后端存储系统中。Heapster是通过访问node上的kubelet的API来获取metric数据，而kubelet中聚合了cAdvisor这个工具采集当前节点的所有容器的性能数据。目前Heapster支持的后端数据库包括memory、InfluxDB、BigQuery、 Google Cloud Monitoring 和 Google Cloud Logging等。 Heapster收集到的metric数据可以通过restAPI访问，主要是CPU和内存数据，包括集群级别，node级别，namespace级别，pod级别，容器级别的metric数据。

参考链接：

Heapster架构 https://jimmysong.io/posts/using-heapster-to-get-object-metrics/ https://zhangchenchen.github.io/2017/10/29/kubernetes-monitoring-guide/ 监控点：https://github.com/kubernetes/heapster/blob/master/docs/model.md

virtualbox网络设置

Sun, 19 Nov 2017 12:52:00 +0000

Net Address 模式

该模式可以自己设置网络

新建网络在virtualbox的‘virtualbox’ -> ‘preferences（设置）’ 里面，点击‘网络’, 点击新加，可以增加网络，记得设置网络段，
其中端口转发可以把某个ip的端口映射到主机端口，一个用途就是从主机连接虚拟机
如：连接ip 为192.168.15.2的机器，增加端口转发： 2202 ->192.168.15.2:22
然后ssh -p 2202 root@127.0.0.1 即是访问192.168.15.2:22

2.虚拟机的网络选择自己刚创建的网络即可

centos7 初始化

Sun, 19 Nov 2017 12:51:44 +0000

系统安装

安装教程

配置网卡

centos7 默认不再是eth0,是一个随机值
修改文件：/etc/sysconfig/network-scripts/ifcfg-enp0s3 (其中enp0s3是随机值)

 TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=enp0s3
UUID=5229b41e-c936-49b8-bfe6-179bd04dd899
DEVICE=enp0s3
ONBOOT=no
IPADDR=192.168.15.11
GATEWAY=192.168.15.1
NETWASK=255.255.255.0
DNS1=192.168.15.1

然后重启网卡

ifdown enp0s3;ifup enp0s3

查看ip，centos默认没ifconfig，用ip ad

设置源

阿里源
 163

生成缓存
bash yum clean all yum makecache
安装第三方包，如htop，请先安装epel
bash yum -y install epel-release

安装常用包

yum install -y htop net-tools wget curl bash-completion

设置内核支持 memory and swap accounting

修改：/etc/default/grub,在GRUB_CMDLINE_LINUX一行内追加增加如下的参数 GRUB_CMDLINE_LINUX=“cgroup_enable=memory swapaccount=1”

centos_http代理(ubuntu类似)

Sat, 18 Nov 2017 21:25:25 +0000

本教程基于centos7， ubuntu类似，只需要替换下面的“yum” 为“apt-get” 即可

安装shadowsocks 并启用socket5代理

安装

yum install -y python-pip
pip install shadowsocks

用shadowsocks启动一个socket5代理
修改下面的配置，保存到/etc/shadowsocks_local.json(没有就新建一个)

{
"server": "{your-server}",
"server_port": 40002,
"local_port": 1080,
"password": "{your-password}",
"timeout": 600,
"method": "aes-256-cfb"
}

启动

sslocal -c /etc/shadowsocks_local.json -d start

测试

curl --socks5-hostname localhost:1080 google.com

如果返回301表示成功

转socket5为http代理

安装

yum install -y privoxy

配置,在/etc/privoxy/config 增加一行配置，指定上面开的socks5的端口

echo "forward-socks5 / 127.0.0.1:1080 ." >>/etc/privoxy/config

启动

service privoxy start

测试

curl --proxy localhost:8118 google.com

如果返回301表示成功

使用

打开终端口，先导入环境变量

export PROXY_PORT=8118
export PROXY_IP=127.0.0.1
export http_proxy=http://$PROXY_IP:$PROXY_PORT
export HTTP_PROXY=$http_proxy
export https_proxy=$http_proxy
export HTTPS_PROXY=$http_proxy
export no_proxy="localhost,127.0.0.1,localaddress,.localdomain.com,example.com,192.168.1.11,192.168.1.12,192.168.1.13"

然后再进行的http访问如果支持HTTP_PROXY环境变量（npm,curl等都支持），就会自动通过代理访问

另外，设置docker使用代理

https://docs.docker.com/engine/admin/systemd/#httphttps-proxy

k8s安装

Sat, 18 Nov 2017 18:20:45 +0000

设置代理

代理安装在当前shell启用代理

export PROXY_PORT=8118
export PROXY_IP=192.168.15.11
export http_proxy=http://$PROXY_IP:$PROXY_PORT
export HTTP_PROXY=$http_proxy
export https_proxy=$http_proxy
export HTTPS_PROXY=$http_proxy
export no_proxy="localhost,127.0.0.1,localaddress,.localdomain.com,example.com,192.168.1.11,192.168.1.12,192.168.1.13"

安装docker

systemctl disable iptables-services firewalld
systemctl stop iptables-services firewalld
cat <<EOF > /etc/sysctl.d/k8s.conf
net.bridge.bridge-nf-call-ip6tables = 1
net.bridge.bridge-nf-call-iptables = 1
EOF
sysctl --system
curl https://get.docker.com/|sh
systemctl enable docker && systemctl start docker

安装 kubeadm,kubelet,kubectl

cat <<EOF > /etc/yum.repos.d/kubernetes.repo
[kubernetes]
name=Kubernetes
baseurl=https://packages.cloud.google.com/yum/repos/kubernetes-el7-x86_64
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://packages.cloud.google.com/yum/doc/yum-key.gpg https://packages.cloud.google.com/yum/doc/rpm-package-key.gpg
EOF
setenforce 0
yum install -y kubelet kubeadm kubectl
source <(kubectl completion bash)
echo "source <(kubectl completion bash)" >> ~/.bashrc
#journalctl -xeu kubelet

运行 k8s

Initializes cluster master node:

kubeadm init --pod-network-cidr=192.168.0.0/16

如果kubelet启动不起来，查看下日志journalctl -xeu kubelet *. not work with enabled swap
添加下面的配置

echo 'Environment="KUBELET_EXTRA_ARGS=--fail-swap-on=false"' > /etc/systemd/system/kubelet.service.d/90-local-extras.conf

2.Initialize cluster networking:

kubectl apply -f https://docs.projectcalico.org/v2.6/getting-started/kubernetes/installation/hosted/kubeadm/1.6/calico.yaml

3.(Optional) Initialize kube-dashboard:

curl -L -s https://raw.githubusercontent.com/kubernetes/dashboard/master/src/deploy/recommended/kubernetes-dashboard.yaml | kubectl apply -f -

访问： https://127.0.0.1:8443 访问不了，：https://github.com/kubernetes/dashboard/wiki/Access-control 目前(v1.7.1)不支持手动切换语言：可以通过浏览器插件更改https://github.com/kubernetes/dashboard/issues/2240 4.如果是单节点需要允许主节点可部署

安装监控 heapster

kubectl create -f https://raw.githubusercontent.com/kubernetes/heapster/master/deploy/kube-config/influxdb/influxdb.yaml
kubectl create -f https://raw.githubusercontent.com/kubernetes/heapster/master/deploy/kube-config/influxdb/heapster.yaml
kubectl create -f https://raw.githubusercontent.com/kubernetes/heapster/master/deploy/kube-config/influxdb/grafana.yaml

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v2.14.18

argoproj/argo-cd v2.14.18 Release Notes

Published at: 2025-09-18T20:32:47Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.18/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.18/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

caa4dc1bd29606c41b8682a38b0e0cc421fc3675: fix(util): Fix default key exchange algorthims used for SSH connection to be FIPS compliant (#24499) (@anandf)
4f6686fc3f5e284da697ad1414899342994b6e26: fix: correct post-delete finalizer removal when cluster not found (cherry-pick #24415 for 2.14) (#24591) (@argo-cd-cherry-pick-bot[bot])
4359b3c77448594be8cf97f3e817ff6987653bb2: fix: use informer in webhook handler to reduce memory usage (#24622) (#24628) (@alexmt)

Documentation

3d76aa5daa8714f4595097f72747a3e07d401674: docs: Update URL for HA manifests to stable. (#24456) (@Kelketek)

Other work

981e7f762aa23c3d7639548243d662992186fa08: fix(2.14): change the appset namespace to server namespace when generating appset (#24481) (@nitishfy)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.17...v2.14.18

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v2.14.19

argoproj/argo-cd v2.14.19 Release Notes

Published at: 2025-09-22T23:02:59Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.19/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.19/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

4a133ce41b5984443eaeaa513cc100f33e44ff84: fix: limit number of resources in appset status (#24690) (#24694) (@alexmt)

Other work

376525eea2baedd18c41beeaf99dd18afbc4466c: ci(release): only set latest release in github when latest (#24525) (#24688) (@agaudreault)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.18...v2.14.19

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v2.14.20

argoproj/argo-cd v2.14.20 Release Notes

Published at: 2025-09-30T16:18:32Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.20/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v2.14.20/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

4ab9cd45bf11b05f4cdd9f30226e1ace5d8ba57b: fix: allow for backwards compatibility of durations defined in days (cherry-pick #24769 for 2.14) (#24772) (@argo-cd-cherry-pick-bot[bot])

Other work

7b219ee97fd10ef5cd2ca3e8f7324853d690c999: Merge commit from fork (@crenshaw-dev)
e889f0a7ffbad5c5eff0cf8578f86e749c044253: Merge commit from fork (@crenshaw-dev)
741f00e2e3543579763d94ba588c676f2c05f5e1: Merge commit from fork (@crenshaw-dev)
1f98e3f9897cc9e424011591b729c061e8c99414: Merge commit from fork (@thevilledev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.14.19...v2.14.20

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v3.0.17

argoproj/argo-cd v3.0.17 Release Notes

Published at: 2025-09-18T20:24:12Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.17/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.17/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

a85fa0947bda87ca6d4ceb69559123f85c87a58d: fix: correct post-delete finalizer removal when cluster not found (cherry-pick #24415 for 3.0) (#24589) (@argo-cd-cherry-pick-bot[bot])
97a87308ab1696db115ebc0cc0d1db7da60bcf4d: fix: use informer in webhook handler to reduce memory usage (#24622) (#24627) (@alexmt)

Documentation

b729cff93212a98c671603b5871e858e6f5bf852: docs: Update URL for HA manifests to stable. (#24455) (@Kelketek)

Other work

2a0282d66826c9a0a549c3912eadaf8ff2c7d1c5: fix(3.0): change the appset namespace to server namespace when generating appset (#24479) (@nitishfy)
0af18331eb3c3e23418eb272a1587ca8ee7a2980: fix(cherry-pick-3.0): Do not block project update when a cluster referenced in an App doesn’t exist (#24449) (@OpenGuidou)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.16...v3.0.17

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v3.0.18

argoproj/argo-cd v3.0.18 Release Notes

Published at: 2025-09-22T23:09:36Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.18/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.18/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

dcfb4db5509dc6eab69d46e5bea271b7bcb3ea75: fix(server): validate new project on update (#23970) (cherry-pick #23973 for 3.0) (#24663) (@argo-cd-cherry-pick-bot[bot])
36ce3809064a433f83d0991ae832cd79bfa26544: fix: limit number of resources in appset status (#24690) (#24695) (@alexmt)

Other work

531d96edef1c24e726a2f4ff7e9d2c088a6ef23e: ci(release): only set latest release in github when latest (#24525) (#24687) (@agaudreault)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.17...v3.0.18

Mon, 01 Jan 0001 00:00:00 +0000

来源: https://github.com/argoproj/argo-cd/releases/tag/v3.0.19

argoproj/argo-cd v3.0.19 Release Notes

Published at: 2025-09-30T16:25:34Z

Quick Start

Non-HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.19/manifests/install.yaml

HA:

kubectl create namespace argocd
kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/v3.0.19/manifests/ha/install.yaml

Release Signatures and Provenance

All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.

Release Notes Blog Post

For a detailed breakdown of the key changes and improvements in this release, check out the official blog post

Upgrading

If upgrading from a different minor version, be sure to read the upgrading documentation.

Changelog

Bug fixes

a731ea68ff6f43a4b4a8fe8e605edc7e9fd85b1b: fix: allow for backwards compatibility of durations defined in days (cherry-pick #24769 for 3.0) (#24770) (@argo-cd-cherry-pick-bot[bot])

Other work

307073647669a2cbc843ed906d266835740b9aa4: Merge commit from fork (@crenshaw-dev)
93ab7e4519fb0534f93eb7c67a7a5e7490eb7bc7: Merge commit from fork (@crenshaw-dev)
f60a9441a7a58c28affa38aa5057b3f1a5ad6ad3: Merge commit from fork (@crenshaw-dev)
2aaace870d4c13991069ef19ab99866d018d12ac: Merge commit from fork (@thevilledev)

Full Changelog: https://github.com/argoproj/argo-cd/compare/v3.0.18...v3.0.19