Oh Dear
Oh Dear's weekly changelogs have carried a security section five weeks running.
Comparison · Infra & APIs
KubeArmor vs Rancher
A side-by-side editorial comparison of KubeArmor and Rancher — release velocity, themes, recent moves, and the top alternatives to consider.
KubeArmor vs Rancher: at a glance
What is KubeArmor?
KubeArmor ships fixes as release-candidate tags, and its feed misses the finals.
KubeArmor's feed shows five release-candidate tags and one merge-commit entry from October for 1.7.6 and 1.7.7, each carrying one or two commits: a relay-channel memory leak fix with pprof added, a snitch fix, removed limits and an AppArmor alert-throttling fix. GitHub shows 1.7.6 went final on 23 October, which the feed missed; it replaced the execve kprobe with a tracepoint, fixed pods not terminating on AppArmor nodes, added audit alerts from the BPF-LSM enforcer and expanded arm64 eBPF testing.
What is Rancher?
Three Rancher branches went from rc1 to final in a day, with nothing but a Dashboard ref bump.
Rancher's latest round cut v2.11.19, v2.12.15 and v2.13.11 as finals on October 29, one day after their rc1 tags. Each tag body shows only the automated Dashboard ref update. Alongside them, v2.15.3 reached rc2 and v2.14.7 reached rc1, so the two newest lines are still in candidate stage.
KubeArmor vs Rancher: editorial side-by-side
KubeArmor
5.0INFRA · APIS
KubeArmor ships fixes as release-candidate tags, and its feed misses the finals.
◆ Current state
KubeArmor's feed shows five release-candidate tags and one merge-commit entry from October for 1.7.6 and 1.7.7, each carrying one or two commits: a relay-channel memory leak fix with pprof added, a snitch fix, removed limits and an AppArmor alert-throttling fix. GitHub shows 1.7.6 went final on 23 October, which the feed missed; it replaced the execve kprobe with a tracepoint, fixed pods not terminating on AppArmor nodes, added audit alerts from the BPF-LSM enforcer and expanded arm64 eBPF testing.
◆ Where it's heading
The project is mid-way through stabilising its eBPF enforcement across architectures: arm64 syscall matching, multi-arch image tests and the move from kprobes to tracepoints all reduce kernel-specific breakage. The release process remains RC-heavy, with near-identical tags cut minutes apart, which makes the feed a poor guide to what users actually get.
◆ Prediction
Expect 1.7.7 final soon after rc1, carrying the AppArmor throttling fix. The arm64 work in 1.7.6 suggests further multi-architecture fixes rather than new policy features next.
Rancher
5.0INFRA · APIS
Three Rancher branches went from rc1 to final in a day, with nothing but a Dashboard ref bump.
◆ Current state
Rancher's latest round cut v2.11.19, v2.12.15 and v2.13.11 as finals on October 29, one day after their rc1 tags. Each tag body shows only the automated Dashboard ref update. Alongside them, v2.15.3 reached rc2 and v2.14.7 reached rc1, so the two newest lines are still in candidate stage.
◆ Where it's heading
The feed keeps publishing the branch matrix rather than what shipped in it. The older branches move through quickly on automation while the newest lines take extra candidates, the same split as the August round. What changed in these releases is not visible in the entries, so the pattern shows process rather than product direction.
◆ Prediction
Expect v2.15.3 and v2.14.7 finals to follow once their candidates clear. Nothing in these tags indicates what they contain.
Alternatives to KubeArmor and Rancher
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either KubeArmor or Rancher.
Apache ShenYu
ShenYu's AI gateway plugins are back in motion, with 2.7.2 candidate tags in October.
TestingBot
TestingBot's autumn work is plumbing: a rebuilt tunnel and another bug-tracker link.
All Quiet
All Quiet moves from enterprise integrations to the on-call engineer's own day.
Robusta
Robusta's recent releases patch its runner image rather than add features.
Uptrends
Uptrends spent October on account plumbing: vault credentials, bulk edits and a free trial path.
See all KubeArmor alternatives → · See all Rancher alternatives →
Recent activity from KubeArmor and Rancher
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 3d agoKubeArmor1.7.7-rc1 fixes AppArmor alert throttling
- 3d agoRancherv2.12.15 final: automated Dashboard ref bump
- 3d agoRancherv2.11.19 final: automated Dashboard ref bump
- 3d agoRancherv2.13.11 final: automated Dashboard ref bump
- 4d agoRancherv2.12.15-rc1: automated Dashboard ref bump
- 4d agoRancherv2.13.11-rc1: automated Dashboard ref bump
- 4d agoRancherv2.15.3-rc2: candidate image and branch manifest
- 5d agoKubeArmorDuplicate 1.7.7-rc1 entry: AppArmor alert throttling fix
- 11d agoKubeArmor1.7.6-rc6 backports a snitch fix
- 27d agoKubeArmor1.7.6-rc5: a single 'remove limits' change
- 27d agoKubeArmor1.7.6-rc4 fixes a relay-channel memory leak, adds pprof
- 28d agoKubeArmor1.7.6-rc3: same commits as rc4
Frequently asked questions
What is the difference between KubeArmor and Rancher?
They serve adjacent needs but don't currently overlap on shipped themes. KubeArmor and Rancher are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is KubeArmor better than Rancher?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. KubeArmor and Rancher are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to KubeArmor?
Top KubeArmor alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "KubeArmor alternatives" section above for the current picks, or visit /alternatives/kubearmor for the full list with editorial commentary on each.
What are the best alternatives to Rancher?
Top Rancher alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Rancher alternatives" section above for the current picks, or visit /alternatives/rancher for the full list with editorial commentary on each.