Headline
CVE-2023-46575: Meshery The Kubernetes and Cloud Native Manager - an extensible developer platform
A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.
video
Confidently wrangle cloud native infrastructure
Support for your Cloud Native Infrastructure and Apps
Meshery seamlessly integrates with every CNCF project, your existing tools and Kubernetes clusters, allowing you to enhance use your preferred monitoring, CI/CD, and security solutions.
Meshery’s Kubernetes-native approach means you can easily incorporate Meshery into your existing workflow without additional setup or integration effort.
Access the Cloud Native Patterns for Kubernetes
Design and manage all of your cloud native infrastructure using the design configurator in Meshery or start from a template using the patterns from the catalog.
(excerpt: patterns in-action)
Service Mesh Patterns
×
Your browser does not support HTML video.
Operate with configuration best practices
Assess your configurations against deployment and operational best practices with Meshery’s configuration validator.
Manage data plane intelligence with WebAssembly filters
Dynamically load and manage your own WebAssembly filters in Envoy-based service meshes.
Retrieves and presents the contents of a designated filter through identification by name or ID
Refer to the documentation here
Context-Aware Policies For Applications
Leverage built-in relationships to enforce configuration best practices consistently from code to Kubernetes. Enhance development process by building custom rules in Open Policy Agent’s Rego query language.
Simplify the process of Infrastructure Managment with Meshery Extension
Streamlining Platform Engineering with GitOps and Meshery. Preview your deployment, view changes pull request-to-pull request and get infrastructure snapshots within your PRs by connecting MeshMap to your GitHub repositories.
- See your deployment before you merge
- Connect MeshMap to your GitHub repo and see changes pull request-to-pull request
- Get snapshots of your infrastructure directly in your PRs
Manage the performance of your infrastructure and its workloads
Baseline and track your cloud native performance from release to release.
- Use performance profiles to track the historical performance of your workloads.
- Track your application performance from version to version.
- Understand behavioral differences between cloud native network functions.
- Compare performance across infrastructure deployments.
Platform Engineering with Meshery’s Extension Points
Meshery includes both REST APIs and GraphQL APIs, pluggable adapters via gRPCs, hot-loadable ReactJS and hot-loadable Golang binaries. The great number of extension points in Meshery make it ideal as the foundation of your internal deleloper platform.
Created By
Used By
**Add yourself as an **adopter****
and share your cloud native story with the community
Getting Started****with Meshery
01****Choose your Platform
Choose a platform and see how easy it is to start managing cloud native infrastructure with a single command.
Bash using Mac or Linux
Install on Kubernetes
Install on Docker
Brew User:
Install on Mac or Linux using Homebrew:
Docker User:****Get mesheryctl
Install mesheryctl with Bash, Brew, Scoop, or download directly.
Use mesheryctl
mesheryctl system context create docker --platform docker --set mesheryctl system start
Copy to clipboard
Use Docker Extension for Meshery
docker extension install meshery/docker-extension-meshery:stable-latest
Copy to clipboard
Windows User:
Using Scoop
$ scoop bucket add mesheryctl https://github.com/layer5io/scoop-bucket.git $ scoop install mesheryctl $ mesheryctl system start
Copy to clipboard
Using Binary
Not a Scoop user? Download and unzip the mesheryctl binary directly from the Meshery releases page. Add mesheryctl to your path for ease of use. Then, execute:
Using Helm
kubectl create ns meshery helm repo add meshery https://meshery.io/charts helm install meshery-operator meshery/meshery-operator -n meshery helm install meshery meshery/meshery -n meshery
Copy to clipboard
Don’t forget to grab a copy of mesheryctl. Install with Bash, Brew, or Scoop.
02****Manage your Cloud Native Infra
There is no step 2. Login and manage cloud native infrastructure!
Hear what other users have to say…
❝
The Meshery Extension transforms Docker Desktop into a powerful load generation utility, conveniently enabling me to deploy and configure any service mesh with a click of the button and invoke and control load-based performance tests from my desktop.
The precision by which performance measurements are generated and analyzed is a pinnacle focus of Nighthawk. Mesh performance characterization should be distilled from a set of value measurements, and that is where MeshMark compliments to create the ultimate comprehensive efficiency calculation.
Meshery is the perfect tool for ensuring that your cloud native applications are optimally configured and performing well; it also gives you a fantastic visual insight into what can be a large amount of textual configuration.
❞
While speed is one of Linkerd’s core competitive advantages, Linkerd provides much more than just an ultrafast data plane. We are pleased to support MeshMark’s establishment of a higher order set of functional considerations that incorporate value into the performance equation.
Performance measurement data rarely provides a clear and simple picture of how well our applications are performing from a business point of view, which are so often the key efficiency indicators that we really need.
❝
Many cloud native adopters have been put off from using service mesh due to the extra resource consumption and complexity that it can involve. We welcome MeshMark as an objective measure of that overhead, to help drive efficiency and make it easier for users to compare service mesh options.
❞
The fact that MeshMap automatically renders our Kubernetes configuration is a game-changer for our team.
❝
It was an intuitive experience to visually place and configure various components saving the time of going through 10 different YAML files.
❝
Are my resources utilized as best as possible? Why am I not getting the SLO met with 4 resources when I only needed 1 resource without the service mesh? How can I improve my 99.9% latencies or can I map my service policy to utilization? MeshMark will model and provide an index in answer to such questions.
With a goal to bring workload identity and attestation to all service meshes, HPE Security Engineering uses the Meshery Docker Extension to deploy their service mesh of choice and test the performance of our SPIFFE and SPIRE-based identity solution.
❞
The Meshery Docker Extension offers an easy button to go from Docker Compose to Kubernetes to any service mesh.
MESHERY IS A CLOUD NATIVE COMPUTING FOUNDATION PROJECT
Created by and its open source community.
Project Mailing lists
Engage in the Meshery project. Join any of our mailing lists.
Related news
A SQL injection vulnerability in Meshery before 0.6.179 allows a remote attacker to obtain sensitive information and execute arbitrary code via the order parameter.