kcl VS constellation

KCL: A declarative configuration and policy programming language implemented by Rust, which improves the writing of a large number of complex configurations through mature programming language technology and practice, and is committed to building better modularity, scalability and stability around configuration, simpler logic writing, fast automation and good ecological extensionally.

Rust Ver. here

Have you considered using a different language for templating? this could be a BIG selling point. Some good ones are cue-lang (though I haven't seen support for rust), kcl or nickel-lang.

We usually use KCL as the DSL（ https://github.com/KusionStack/KCLVM ）Build a user interface abstraction (masking the Kuberetes concept that developers do not want to understand) and build different UIs based on this abstraction (it can be an IDE interface, a WebUI, or a CLI), which is very flexible and can quickly respond to the increasing demand for UI changes from developers. Alternatively, another approach is to quickly modify YAML through KCL's Mutation capability (different teams can use KCL to write different namespace conditions). And KCL can be combined with ArgoCD to achieve better results

Website: https://kcl-lang.io/

Sure, the IDE/Editor extension based on the kcl-language-server issue is here: https://github.com/KusionStack/KCLVM/issues/513

A lot happening in Europe, Enclaive provides encrypting containers (GitHub), Edgeless Systems provides a whole encrypted k8s with constellation (GitHub), then there are other players like scontain and secustack.

Aber schau dir bspw mal https://github.com/edgelesssys/constellation an.

Would smth. like https://github.com/edgelesssys/constellation be helpful for those cases?

Hey u/Aztreix, we've recently released an open-source Kubernetes distribution that keeps all data always encrypted and isolates your workloads from cloud infrastructure. This solves many compliance requirements, at least for European companies. Feel free to check it out: https://github.com/edgelesssys/constellation.

Maybe they should deploy it via Constellation https://github.com/edgelesssys/constellation

Easy! I recently posted about our open-source project Constellation. Constellation is the first confidential Kubernetes distribution. Think Rancher Kubernetes Engine (RKE) or RedHat OpenShift for confidential computing.

Therefore, having such verifiable infrastructure seems paramount for a zero trust architecture. Constellation (https://github.com/edgelesssys/constellation) for example leverages Confidential Computing hardware to provide a fully-verifiable Kubernetes cluster. (Disclaimer: I work on that project)

Constellation does this as well btw: https://github.com/edgelesssys/constellation Disclaimer, I work on the project.