Kubernetes Podcast from Google

65k nodes on GKE, with Maciej Rozacki and Wojciech Tyczyński Nov 13, 2024

Guests are Maciej Rozacki, Product Manager on GKE for AI Training, and Wojciech Tyczyński, Software Engineer on the GKE team at Google. We explore what it means for GKE to support 65k nodes, and the open source contributions that made this possible

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

The Kubernetes Podcast is on Bluesky

OpenTelemetry expanding into CI/CD observability

Gitpod is moving away from Kubernetes

OpenCost is a CNCF Incubated project

Links from the interview

Guests:

Kubernetes OSS Scalability thresholds

PGS on the Kubernetes Podcast

Batch Working Group

Serving Working Group episode on the podcast

Dynamic Resource Allocation

Kueue

Multitenancy and Fairness at Scale with Kueue

SIG Scalability

Links from the post-interview chat

Consistent Reads from Cache

Kubernetes Scalability: A Multi-Dimensional Analysis

Working Group Serving, with Yuan Tang and Eduardo Arango Oct 31, 2024

Yuan is a principal software engineer at Red Hat, working on OpenShift AI. Previously, he has led AI infrastructure and platform teams at various companies. He holds leadership positions in open source projects, including Argo, Kubeflow, and Kubernetes WG Serving. Yuan authored three technical books and is a regular conference speaker, technical advisor, and leader at various organizations.

Eduardo is an environmental engineer derailed into a software engineer. Eduardo has been working on making containerized environments the de facto solution for High Performance Computing(HPC) for over 8 years now. Began as a core contributor to the niche Singularity Containers, today known as Apptainer under the Linux foundation. In 2019 Eduardo moved up the ladder to work on making Kubernetes better for performance oriented applications. Nowadays Eduardo works at NVIDIA on the Core Cloud Native team working on enabling specialized accelerators into Kubernetes workloads.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Docker official terraform provider

Tetrate and Bloomberg Envoy AI Gateway

KubeCon+CloudNativeCon North America 2024 laptop drive

Remaining KCDs for 2024

Links from the interview

Yuan Tang

Eduardo Arango WG Serving

Kserve

Kserve Serving models with OCI images

LLM Gateway

Dynamic Resources Allocation

Container Security, with Michele Chubrika Oct 15, 2024

This episode is special. We collaborated with the folks behind the Cloud Security Podcast from Google, Anton Chuvakin(LinkedIn)and Tim Peacock, to bring you a joint episode. We had the pleasure to jointly interview Michelle Chubirka, a Cloud Security Developer Advocate. We talked about VM and Container security, debunked some myths about isolation, attack surfaces, immutability of containers, and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

KCP, with Marvin Beckers Oct 01, 2024

Marvin Beckers is a Team Lead at Kubermatic and a contributor and maintainer of the CNCF Sandbox Project, KCP. KCP is an open source horizontally scalable control plane for Kubernetes-like APIs.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Cloud Native Maturity Model

Spotify AI Platform, with Avin Regmi and David Xia Sep 24, 2024

Guests are Avin Regmi and David Xia from Spotify. We spoke to Avin and David about their work building Spotify’s Machine Learning Platform, Hendrix. They also specifically talk about how they use Ray to enable inference and batch workloads. Ray was featured on episode 235 of our show, so make sure you check out that episode too.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

IBM acquired Kubecost

KubeCon Japan in 2025

Call for Proposals for KubeCon EU 2025 is now open

Artifact Hub is a CNCF incubating project

OpenMetrics is dead, long live OpenMetrics

Kubecolor 0.4.0

Links from the interview

Dagger, with Solomon Hykes Sep 17, 2024

Solomon Hykes is the co-founder of Dagger. He is probably best known as the creator of Docker. The tool that changed how developers package, run and distribute software in the last 11 years. His impact on our industry is undeniable. Today, we discuss his new venture, Dagger. Dagger is a new approach to how we do CI/CD.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Ray & KubeRay, with Richard Liaw and Kai-Hsun Chen Sep 03, 2024

In this episode, guest host and AI correspondent Mofi Rahman interviews Richard Liaw and Kai-Hsun Chen from Anyscale about Ray and KubeRay. Ray is an open-source unified compute framework that makes it easy to scale AI and Python workloads, while KubeRay integrates Ray’s capabilities into Kubernetes clusters.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Kai-Hsun Chen on LinkedIn
Richard Liaw on LinkedIn
Ray from the RISE Lab at UC Berkeley
Ray: A Distributed System for AI by Robert Nishihara and Philipp Moritz - Jan 9, 2018
KubeRay Docs
KubeRay on GitHub
PyTorch
Apache Airflow
Apache Spark
Kubeflow
Apache Submarine (retired)
Jupyter Notebooks
VS Code
Examples of schedulers for Batch/AI workloads in Kubernetes

Examples of observability tools for Batch/AI workloads in Kubernetes

Examples of loadbalancers

Nginx
Istio

Ray Data: Scalable Datasets for ML
Dask Python - Parallel Python
Ray Serve: Scalable and Programmable Serving
HPA - Horizontal Pod Autoscaling in Kubernetes
Karpenter - “Just-in-time nodes for any Kubernetes cluster”
Lazy Computation Graphs with the Ray DAG API
Types of hardware accelerators

Pandas
Numpy
KubeCon EU 2024 - Accelerators(FPGA/GPU) Chaining to Efficiently Handle Large AI/ML Workloads in K8s - Sampath Priyankara, Nippon Telegraph and Telephone Corporation & Masataka Sonoda, Fujitsu Limited
NVidia Megatron

Links from the post-interview chat

LitmusChaos, with Karthik Satchitanand Aug 20, 2024

In this episode, we spoke to Karthik Satchitanand. Karthik is a principal software engineer at Harness and co-founder and maintainer of LitmusChaos, a CNCF incubated project. We talked about Chaos engineering , the Litmus project and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Kubernetes v1.31: "Elli", with Angelos Kolaitis Aug 13, 2024

Guest is Angelos Kolaitis, Angelos is a senior Software Engineer at Canonical working on Kubernetes. He has multiple contributions to open source projects, a highlight of which is his involvement in the Kubernetes Release Team since Kubernetes v1.26.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Completing the largest migration in Kubernetes history

OpenTofu, with Ohad Maislish Aug 06, 2024

Ohad Maislish is the CEO and co-founder of env0 and part of the founding team for the OpenTofu project. Before env0, Ohad was the CEO and founder of Arno Software, a cloud infrastructure services company, and Capester, a startup that empowered citizens in smart cities worldwide. Over the course of this career, Ohad has also served in different technical and management roles at Ravello Systems, eToro, and VMware. He was also the youngest developer at Microsoft Israel at the age of 17, after starting his bachelor's degree at the age of 14.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

The Kubernetes Removals and Major Changes blog for v1.31

Google Cloud Announced GKE Extended support

Bob Killen has joined as a Senior Technical Program Manager

Microsoft announced general availability of Microsoft Azure Container Storage

CNCF Glossary Turkish edition

Links from the interview

Ohad Maislish

OpenTofu announcement

OpenTofu state encryption

OpenTofu 1.8 early evaluation of variables

ValKey

AWS Support for ValKey

KubeCon EU Co-lo: Atlantis and OpenTofu: The Future of Open-Source IaC

Links from the post-interview chat

Abdel chatting on the IaC Podcast at kubeCon Paris 24

OpenTofu State and Plan Encryption

IaC Podcast

Dapr, with Mauricio Salatino Jul 23, 2024

Mauricio Salatino is a software engineer at Diagrid working on the Dapr project but also serves as a chair for the newly formed App Development Working Group under the TAG App Delivery for the CNCF. He also serves as a member of the steering committee for Knative and the Keptn project. Mauricio authored a book about Platform Engineering on Kubernetes for Manning and co-authored some books on Jboss. He used to work for Red Hat and VMware.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Dapr (Distributed Application Runtime)
JBoss
Overview of JNDI (Java Naming and Directory Interface)
Secrets Management Overview on Dapr
Knative
Java Spring Boot
App Development Working Group (Cloud Native Computing Foundation)
Spring AI
Langchain
Dapr and service meshes
Istio
Vcluster
Testcontainers

Observability & Engineering Management, with Charity Majors Jul 09, 2024

Charity Majors is the co-founder and CTO of honeycomb.io. She pioneered the concept of modern Observability, drawing on her years of experience building and managing massive distributed systems at Parse (acquired by Facebook), then subsequently at Facebook, and at Linden Lab building Second Life. She is the co-author of Observability Engineering and Database Reliability Engineering (O'Reilly). She loves free speech, free software and single malt scotch.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Honeycomb.io
O’Reilly Book: Observability Engineering
O’Reilly Book: Database Reliability Engineering
Charity’s blog site: charity.wtf
Charity Blog: Questionable Advice: “My boss says we don’t need any engineering managers. Is he right?”
Daniel H. Pink book: “Drive: The Surprising Truth About What Motivates Us”

In which, “He examines the three elements of true motivation—autonomy, mastery, and purpose-and offers smart and surprising techniques for putting these into action in a unique book that will change how we think and transform how we live.”

Charity blog on Stack Overflow: “Generative AI is not going to build your engineering team for you”

In which she talks about how the tech industry is an apprenticeship industry.

Charity Majors in the Google Cloud Next 2024 Developer Keynote
honeycomb.io blog: “How Time Series Databases Work—And Where They Don't” by Alex Vondrak
honeycomb.io blog: “Why Observability Requires a Distributed Column Store” by Alex Vondrak

Links from the post-interview chat

AI/ML in Kubernetes, with Maciej Szulik, Clayton Coleman, and Dawn Chen Jun 25, 2024

In this episode, we talk to three active leaders who have been around since the very beginning of Kubernetes. We explore how Kubernetes has changed since its inception, with a particular focus on current efforts in Open source Kubernetes to support AI/ML style workloads.

Maciej Szulik is currently taking a seat in the Kubernetes Steering Committee. He’s also leading Special Interests Groups responsible for kubectl, workload and batch controllers. Maciej has been contributing to Kubernetes since the early days, jumping from one area to another where help was needed. He authored the first version of audit and helped shape its current one, as well as touched multiple other places in apimachinery. He was also responsible for designing and implementing Job and CronJob controllers. In kubectl he was responsible for the plugin mechanism and several major refactors to simplify the code. Since May 2024 he joined the ranks of Production Readiness Review (PRR) approvers helping ensure high production standards for the future of Kubernetes releases.

Clayton Coleman is a long-time Kubernetes contributor, having helped launch Kubernetes as open source, being on the bootstrap steering committee, and working across a number of SIGs to make Kubernetes a reliable and powerful foundation for workloads. At Red Hat he led OpenShift’s pivot onto Kubernetes and its growth across on-premise, edge, and into cloud. At Google he is now focused on enabling the next generation of key workloads, especially AI/ML in Kubernetes and on GKE.

Dawn Chen has been a Principal Software Engineer at Google cloud since May 2007. Dawn has worked on an open source project called Kubernetes before the project was founded. She has been one of tech leads in both Kubernetes and GKE, and founded SIG Node from scratch. She also led Anthos platform team for the last 4 years, and mainly focuses on the core infrastructure. Prior to Kubernetes, she was the one of the tech leads for Google internal container infrastructure -- Borg for about 7 years. Outside of work, she is a wife, a mother of a 16-year old boy and a good friend. She enjoys reading, cooking, hiking and traveling.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Kubernetes 1.31 Code Freeze is on July 9th

Links from the interview

Kubernetes Working Group Batch
Kubernetes Working Group Serving
Blog: Introducing Indexed Jobs (2021)
Docs: Kubernetes Jobs
KEP: Elastic Indexed Jobs
Docs: Kubernetes CronJobs
KubeCon EU 2021: The Long, Winding and Bumpy Road to CronJob’s GA - Maciej Szulik, Red Hat & Alay Patel, Red Hat
KubeCon EU 2018: Writing Kube Controllers for Everyone - Maciej Szulik, Red Hat (Beginner Skill Level)
Kubernetes Working Group Device Management
Kubernetes Enhancement Proposal process README
DockerCon 2014: The announcement of Kubernetes at DockerCon
Blog: AI & Kubernetes (by Kaslin)
Kueue - “Kueue is a cloud-native job queueing system for batch, HPC, AI/ML, and similar applications in a Kubernetes cluster.”
Whitepaper: Large-scale cluster management at {Google} with {Borg}
Email: “Containers: Introduction” - An email introducing the concept of Linux containers to the Linux community

Links from the post-interview chat

Leading Kubernetes into its Second Decade Jun 11, 2024

We talk with Nikhita Raghunath, Nabarun Pal, and Paco Xu. Nikhita, Nabarun, and Paco have each held various leadership positions related to the Kubernetes project. They talk about their journeys, the various leadership roles they’ve been in, and offer advice for new contributors and those who want to move into leadership in the project.

Nikhita is a Staff Software Engineer at Broadcom. She is currently a member of the CNCF Technical Oversight Committee (TOC) overseeing all technical matters of the CNCF. In the past, she was a member of the Kubernetes Steering Committee, a technical lead for SIG Contributor Experience and has also won the CNCF Top Committer Award. Currently, she is also a co-chair of the KubeCon+CloudNativeCon conference.

Nabarun is a Staff Software Engineer at Broadcom, a maintainer of the Kubernetes project, a member of the Kubernetes Steering Committee and a chair of Kubernetes SIG Contributor Experience. In the past, he was the release lead for Kubernetes 1.21 and has served eight release teams. Nabarun also works actively with the Python community by organizing PyCon India and has been recognized in media publications for his work.

Paco is an open source team lead in DaoCloud. He started to work on container/docker in 2016 and later started to participate in the Kubernetes Community in 2018. He is a current member of Kubernetes Steering Committee and works mainly on kubeadm and sig-node. He is Co-chair of KubeCon+CloudNativeCon China 2024.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Blog: 10 Years of Kubernetes

CNCF-Hosted Co-Located Events Overview

CFP for CNCF-hosted Co-located Events

Kubernetes Community Days

Links from the interviews

CNCF Technical Oversight Committee

SIG ContribEx

Google Summer of Code

CNCF Top Committer Award 2021 - Nikhita Raghunath

Blog Post: Google Summer of Code with Kubernetes by Nikhita Raghunath

Kubernetes Docs: Extend the Kubernetes API with CustomResourceDefinitions

SIG API Machinery

SIG Testing

SIG Release

CNCF Chop Wood Carry Water Award 2018 - Nikhita Raghunath

Kubernetes Steering Committee

KubeCon India

KubeCon NA

Kubernetes 1.21: Power to the Community

Pycon India

Kubernetes Python Client on GitHub

Kubernetes Contributor Summit 2019 YouTube Playlist

Kubernetes Release Team

KubeCon NA 2024 Scholarships (applications due by September 1, 2024)

Kubernetes Production Readiness Review Process

Kubernetes Release Team CI Signal Lead Runbook

10th Anniversary Special with Tim Hockin and Kelsey Hightower Jun 06, 2024

Welcome to the second episode of the 4 part special series for the Kubernetes 10 year anniversary. In this episode we spoke to two very influential people in Kubernetes’ history. Tim Hockin and Kelsey Hightower Both have been involved with the project since its inception and both had, and continue to have, impact on the project and the community.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Chatter of the week

KuberTenes Regional Events

Kubernetes Twitter Account

News of the week

Kubernetes introduces hydrophone

AKS Automatic

CKS Changes after Sept 12, 2024

KubeCon and CloudNativeCon CFP Closes June 9th

KubeCon Co-Located events CFP Closes June 14, 2024

Links from the interview

Google Borg

Google Omega

Let Me Contain That For You

Kubernetes Sidecars

Why Service Is the Worst API in Kubernetes

Kubernetes Maintainers Read Mean Comments

Kubernetes The Hard Way

Kelsey retirement announcement

Google's infrastructure for everyone else

Kubernetes: Up and Running

CNI

Kubernetes Networking

Kubernetes Resource Model (KRM)

A Decade of Kubernetes Contribution May 29, 2024

This episode is the first in our four-part Kubernetes 10 Years Anniversary special! The focus of this episode is on Kubernetes maintainers who have been involved with the project since its early days, and who are still active today. Featuring guests: David Eads, Davanum Srinivas (Dims), and Federico Bongiovanni.

David is a senior principal software engineer at Red Hat. He started contributing to Kubernetes before v1 and now serves as a sig-auth tech lead and sig-apimachinery tech lead and chair.

Dims is a principal engineer at AWS, long term contributor to Kubernetes who served in multiple committees for the project. Today dims is in the Technical Oversight Committee or TOC. Welcome to the show Dims!

Federico Bongiovanni is an engineering manager at Google. He started using Kubernetes in the early days at a previous company, and became a contributor about 6 years ago when he joined Google. Today, he’s a Co-chair of SIG-APIMachinery. Welcome to the show! Would you like to tell us more about yourself?

Do you have something cool to share? Some questions? Let us know:

- web: [kubernetespodcast.com](https://kubernetespodcast.com)

- mail: [kubernetespodcast@google.com](mailto:kubernetespodcast@google.com)

- twitter: [@kubernetespod](https://twitter.com/kubernetespod)

News of the week

https://istio.io/latest/news/releases/1.22.x/announcing-1.22/

https://kubernetes.io/blog/2024/05/09/gateway-api-v1-1/

https://traefik.io/blog/traefik-3-0-ga-has-landed-heres-how-to-migrate/

https://devblogs.microsoft.com/dotnet/dotnet-build-2024-announcements/

https://events.linuxfoundation.org/kuber10es-birthday-bash/

https://www.cncf.io/kubertenes/

Links from the interview

Kubernetes SIG Auth

Kubernetes SIG API Machinery

Automagic kubectl config merging causes hair loss

Safety or Usability: Why Not Both? Towards Referential Auth in K8s - Rob Scott, Google & Mo Khan, Microsoft

Open Stack

Kubernetes Cloud Provider OpenStack

RedHat OpenShift

Kubernetes SIG Architecture

Kubernetes Kubelet

Blog: Completing the Largest Migration in Kubernetes History

Dims’ PR removing over 1 million lines of Cloud Provider code from Kubernetes

KubeCon EU 2024 talk: Kubernetes Is FINALLY Removing in-Tree Cloud Providers - Bridget Kromhout & Chris Privitere

KEP-2395: Removing In-Tree Cloud Provider Code

Blog from 2019 about the reasoning behind the removal of cloud provider code

Blog about setting cloud provider code to disabled by default in v1.29

The March 2024 Spotlight blog on SIG Cloud Provider

Links from the post-interview chat

Kubernetes Maintainers Read Mean Comments - Tim Hockin, Google & Davanum Srinivas, Amazon Web Services

“Working in Public: The Making and Maintenance of Open Source Software” by Nadia Eghbal

Keynote: A Vision for Vision - Kubernetes in Its Second Decade - Tim Hockin

SIG K8s Infrastructure

Postgres on Kubernetes, with Álvaro Hernández May 15, 2024

Álvaro Hernández is the founder and CEO of OnGres a company that provides among other things a distribution of Postgres that runs on Kubernetes, called “StackGres”. Álvaro is also an AWS Data Hero and a passionate database and open source software developer

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Note: This episode was edited on May 17th to remove a chatter segment from episode 219, which had been mistakenly edited into it.

News of the week

Kubernetes code cleanup

KEP-2395: Removing In-Tree Cloud Provider Code - GitHub KEP Readme
Remove gcp in-tree cloud provider and credential providers - GitHub PR
Spotlight on SIG Cloud Provider - Blog
The Future of Cloud Providers in Kubernetes - Blog
Kubernetes 1.29: Cloud Provider Integrations Are Now Separate Components - Blog

Google I/O

KubeCon + CloudNativeCon Europe 2024 Report

KuberTENes Birthday Bash

The Kubernetes Community takes over kubernetesio on X

WG-Serving on GitHub

DoK Community Ambassador Applications

Links from the interview

Álvaro Hernández:

Data on Kubernetes (DoK) Community

Data On Kubernetes 2022 Report

Data on Kubernetes Whitepaper - Database Patterns - by CNCF TAG Storage

Istio

Apache Zookeeper

Strimzi - CNCF Project for running Apache Kafka on Kubernetes

Apache Kafka

Postgres extensions

The Kubernetes Operator Pattern

Presentation about PostreSQL Hooks from PostgreSQL wiki

OCI - Open Container Initiative

Why Postgres Extensions should be packaged and distributed as OCI images

OpenFeature with, with Thomas Poignant and Todd Baert Apr 30, 2024

Guests Thomas Poignant and Todd Baert are Software engineers with long experience working on IAM systems and feature flagging software. Today they are both maintainers and members of the Technical Committee of OpenFeature which is a CNCF incubated project.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Istio service Mesh add-on on Azure Kubernetes Services

The CNCF released their 2023 annual survey

Women Who code closed its doors

Vulnerability in OpenMetadata version 1.31 or lower

Links from the interview

Thomas Poignant

Todd Baert

OpenFeature

Feature Flagging

Pete Hodgson article on feature flags

Go feature flag

Flagd

FlagSmith

Kubernetes v1.30 “Uwubernetes”, with Kat Cosgrove Apr 17, 2024

In this episode, release lead Kat Cosgrove walks us through what’s new in Kubernetes 1.30. Recorded at KubeCon EU 2024.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

KubeCon EU 2024 Apr 08, 2024

KubeCon EU 2024 was the largest KubeCon yet! Explore the trends and learnings from the event through interviews with attendees.

Featuring:

And additional Guest Host, Mofi Rahman.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Creating Envoy, with Matt Klein Mar 19, 2024

Matt Klein is the CTO of bitdrift which is building a Mobile observability platform. Matt is known for being the creator of Envoy, one of the most popular open source proxies in the cloud space.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Cloud Native Rejekts

CNCF 2024 Prospectus

KubeCon Paris Guide Abdel co-authored

KubeCon Paris Recommendations Map

Links from the interview

Matt Klein:

Envoy Proxy

Twitter kicks Android app users out for five hours due to 2015 date bug

NGINX

HAProxy

Matt Klein’s X post about 1 billion pulls for envoy on DockerHub

Envoyproxy on DockerHub

Envoymobile

Rust programming language

Falco Graduation, with Mike Coleman Mar 06, 2024

Mike Coleman is a developer advocate at Sysdig focused on open source software and spends a lot of time working on the Falco project. We’ll explore how Falco enables runtime security, and celebrate its recent graduation!

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Falco Graduation announcement

Google Gemma Open Model

GitOps Associate Certification (CGOA)

Certified GitOps Associate (CGOA) Exam

Linkerd 2.15 announcement

Linkerd 2.15 stable release announcement

Crossplane 1.15 announcement

Open Source Summit North America Schedule

Cloud Native Security Con North American

Cloud Native Security Con America CFP

Links from the interview

Mike Coleman

"Docker?!?! But, I’m a sysadmin" - Mike Coleman

Mike Colemane and Bill Gates in an Earthquake

Falco project

KubeCon NA 2019 CTF

Cryptomining Detection Using Falco

Navigating Open Source Project Hurdles to Achieve Community Enpowerments Aizhamal Nurmamat kyzy & Bob Killen

Wrangle your alerts with open source Falco and the gcpaudit plugin

Falcosidekick

Practical Cloud Native Security with Falco

Certified Kubernetes Security (CKS) exam

API Machinery, Chaos and Dishwashers, with Lucas Käldström Feb 20, 2024

Lucas Käldström is a CNCF Ambassador, Kubernetes contributor and expert. Lucas Co-led SIG cluster lifecycle, ported Kubernetes to ARM and shepherded kubeadm from inception to GA. Today Lucas runs three meetup groups in Finland, studies at Aalto University, and, when time allows, contributes to cloud native software as a contractor.

We chatted about Kubernetes API machinery, Chaos, Entropy, and Dishwashers.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Weaveworks shutdown their operations

Weavwork CEO Alexis Richardson post on Linkedin

kubetrain.io

Bytedance KubeAdmiral on GitHub

Bytedance KubeAdmiral Announcement on InfoQ

Strimzi joins the CNCF Incubator

Microsoft new Cost Management tools for Azure

Links from the interview

Lucas Käldström

Kubernetes as a dishwasher

Understanding Kubernetes Through Real-World Phenomena and Analogies - Lucas Käldström

Lucas research thesis

Paper - Large-scale cluster management at Google with Borg

API Machinery

Dr. Stefan Schimanski

KCP - Kubernetes-Like Control Plane

Kubernetes API Conventions

SIG Architecture

Ingress2gateway - Ingress to Gateway Migrator

Promise Theory: Principles and Applications (Mark Burgess, Jan Bergstra)

In Search of Certainty: The Science of Our Information Infrastructure (Mark Burgess)

Sweden Finns

Links from the post-interview chat

Keynote: Reperforming a Nobel Prize Discovery on Kubernetes - Ricardo Rocha & Lukas Heinrich

Why Service Is the Worst API in Kubernetes, & What We’re Doing About It - Tim Hockin

Gateway API TCP Routes

Community-Powered Kubernetes LTS: Ensuring Stability and Compatibility While Driving Innovation Jeremy Rickard

https://github.com/yannh/kubeconform

Kubernetes stale reads, with Madhav Jivrajani Feb 09, 2024

Madhav Jivrajani is an engineer at VMware, a tech lead in SIG Contributor Experience and a GitHub Admin for the Kubernetes project. He also contributes to the storage layer of Kubernetes, focusing on reliability and scalability.

In this episode we talked with Madhav about a recent post on social media about a very interesting stale reads issue in Kubernetes, and what the community is doing about it.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Chatter of the week

Mofi Rahman co-host this episode with Kaslin

Kubernetes Podcast episode 211

News of the week

Google announced a new partnership with Hugging Face

RedHat self-managed offering of Ansible Automation Platform on Microsoft Azure

The schedule for KubeCon CloudNativeCon EU 2024 is out

CNCF Ambassador applications are open

The CNCF Hackathon at KubeCon CloudNativeCon EU 2024 CFP is open now

The annual Cloud Native Computing Foundation report for 2023

CNCF's certification expiration period will change to 24 months starting April 1st, 2024.

Sysdig 2024 Cloud Native Security and Usage Report

Links from the interview

Madhav Jivrajani

Priyanka Saggu Interview

Stale reads Twitter/X thread by Madhav

"Kubernetes is vulnerable to stale reads, violating critical pod safety guarantees" - GitHub Issue tracking the stale reads CAP Theorem issue

CMU Wasm Research Center

"A CAP tradeoff in the wild" blog by Lindsey Kuper

"Reasoning about modern datacenter infrastructures using partial histories" research paper

The Kubernetes Storage Layer: Peeling the Onion Minus the Tears - Madhav Jivrajani, VMware

KEP-3157: allow informers for getting a stream of data instead of chunking.

KEP 2340: Consistent Reads from Cache

Journey Through Time: Understanding Etcd Revisions and Resource Versions in Kubernetes - Priyanka Saggu, KubeCon NA 2023

Kubernetes API Resource Versions documentation

Cilium and eBPF, with Bill Mulligan Jan 23, 2024

Guest is Bill Mulligan. Bill is Community Pollinator at Isovalent working on Cilium and eBPF. We learned how to properly pronounce Isovalent and what it actually means. We also spoke in depth about eBPF, Cilium, network function in Kubernetes and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

The Kubernetes legacy Linux package repositories are going away in January 2024

Kubernetes 1.29 is now available on GKE in the Rapid Channel

The Vmware Tanzu Application Catalog is fully compliant with the SLSA Level 3

AWS extended support for Kubernetes minor versions pricing update

The Kubernetes Contributor Summit Paris CFP is Open, closes Feb 4th

KubeCon and CloudNativeCon EU 2024 co-located events agenda is live

The Cloud Native Glossary is now available in French

Blixt a new experimental LoadBalancer based on the Gateway API and eBPF

Links from the interview

Bill Mulligan:

Covalent bonds on Wikipedia

Isovalent Hybridization on Wikipedia

Isovalent company site

BPF - Berkeley Packet Filtering

eBPF project site

Fast by Friday: Why eBPF is Essential - Brendan Gregg

Cilium Certified Associate (CCA)

CCA Study Guide from Isovalent on GitHub

Istio Certified Associate (ICA)

Certified Kubernetes Administrator (CKA)

Certified Kubernetes Application Developer (CKAD)

Kubernetes and Cloud Native Associate (KCNA)

Resources to prepare for the CCA certification

Isovalent library

The World of Cilium

Cisco acquired Isovalent

Developing eBPF Apps in Java

BGP in eBPF

NAIS, with Johnny Horvi and Frode Sundby Jan 09, 2024

This week’s guests are Johnny Horvi and Frode Sundby from NAVs (Norwegian Labour and Welfare Administration) platform team. We talked about NAIS. A kubernetes-based team centric platform aiming at providing the tools needed to deploy and operate apps easily.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Kubernetes 1.29 features:

Kubernetes 1.29 release lead Interview

Cisco acquired Isovalent

Cilium 2023 Annual report

KubeCon and CloudNativeCon Paris 2024 Hackathon

OpenFeature incubated as a CNCF project

Links from the interview

Guests:

Nais

Links from the post-interview chat

Nais on GitHub

Kubernetes v1.29, with Priyanka Saggu Dec 13, 2023

In this episode we interviewed Priyanka Saggu, Kubernetes v1.29 release lead and SIG ContribEx Tech Lead. We spoke about the release, the new features and enhancements, and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Kyverno completes third-party security audit

Google Deepmind Introduction to Gemini

Google launches Gemini - The Verge

Linux Foundation Newsletter: November 2023

High Performance Software Foundation (HPSF) Founding Announcement
App Defense Alliance joins Joint Development Foundation under the Linux Foundation

Open Source Summit North America 2023 CFP (closes January 14, 2024)

Links from the interview

Kubernetes v1.29 release information page on k8s.dev

Removals, Deprecations, and Major Changes in Kubernetes 1.29

Release Blog - Kubernetes v1.29: Mandala

Breaking changes

KEP 2395: Removing In-Tree Cloud Providers (SIG Cloud Provider, Beta)

Kubernetes v1.28 on the Kubernetes Podcast from Google - discussion of removal of in-tree storage plug-ins

Major Changes

KEP 1287: In-Place Update of Pod Resources (SIG Node, Alpha)

Support in-place Pod vertical scaling in VPA

KEP 753: Sidecar Containers (SIG Node, Beta)

Stable

KEP 3299: KMS v2 Improvements OR KMSv2 (SIG Auth)

SIG Etcd on the Kubernetes Podcast from Google

KEP 2485: ReadWriteOncePod PersistentVolume Access Mode (SIG Storage, SIG Scheduling)
KEP 727: Kubelet Resource Metrics Endpoint (SIG Instrumentation)

“The Kubelet Summary API is a source of both Resource and Monitoring Metrics. Because of it’s dual purpose, it does a poor job of both.”

Beta

KEP 2799: Reduction of Secret-based Service Account Tokens (SIG Auth)

Alpha

KEP 3866: nftables kube-proxy backend (SIG Network)

[KCSNA 2023] Iptables the end of an era - Dan Winship, Antonio Ojea

Links from the post-interview chat

Kaslin’s blog about “Out of Tree” Kubernetes

In this episode we interviewed Priyanka Saggu, Kubernetes v1.29 release lead and SIG ContribEx Tech Lead. We spoke about the release, the new features and enhancements, and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Kyverno completes third-party security audit

Google Deepmind Introduction to Gemini

Google launches Gemini - The Verge

Linux Foundation Newsletter: November 2023

High Performance Software Foundation (HPSF) Founding Announcement
App Defense Alliance joins Joint Development Foundation under the Linux Foundation

Open Source Summit North America 2023 CFP (closes January 14, 2024)

Links from the interview

Kubernetes v1.29 release information page on k8s.dev

Removals, Deprecations, and Major Changes in Kubernetes 1.29

Release Blog - Kubernetes v1.29: Mandala

Breaking changes

KEP 2395: Removing In-Tree Cloud Providers (SIG Cloud Provider, Beta)

Kubernetes v1.28 on the Kubernetes Podcast from Google - discussion of removal of in-tree storage plug-ins

Major Changes

KEP 1287: In-Place Update of Pod Resources (SIG Node, Alpha)

Support in-place Pod vertical scaling in VPA

KEP 753: Sidecar Containers (SIG Node, Beta)

Stable

KEP 3299: KMS v2 Improvements OR KMSv2 (SIG Auth)

SIG Etcd on the Kubernetes Podcast from Google

KEP 2485: ReadWriteOncePod PersistentVolume Access Mode (SIG Storage, SIG Scheduling)
KEP 727: Kubelet Resource Metrics Endpoint (SIG Instrumentation)

“The Kubelet Summary API is a source of both Resource and Monitoring Metrics. Because of it’s dual purpose, it does a poor job of both.”

Beta

KEP 2799: Reduction of Secret-based Service Account Tokens (SIG Auth)

Alpha

KEP 3866: nftables kube-proxy backend (SIG Network)

[KCSNA 2023] Iptables the end of an era - Dan Winship, Antonio Ojea

Links from the post-interview chat

Kaslin’s blog about “Out of Tree” Kubernetes

KubeCon NA 2023 Dec 05, 2023

This episode Kaslin went to KubeCon North America In Chicago. She spoke to folks on the ground, asked them about their impressions of the conference, and collected a bunch of cool responses.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Google researchers discover 'Reptar,’ a new CPU vulnerability

Reptar by Tavis Ormandy

Tim Hockin: Kubernetes Needs a Complexity Budget

Kubernetes' Tim Hockin on a decade of dominance and the future of AI in open source

Keynote: A Vision for Vision - Kubernetes in Its Second Decade - Tim Hockin

Open and Secure: A Manual for Practicing Thread Modeling to Assess and Fortify Open Source and Security

Announcing our latest book release: a comprehensive security guide to assess and fortify open source security

Links from the interview

CNCF LLM Starter Pack

Crossplane

Web Assembly

Intro to Kubernetes Gateway API

Links from the post-interview chat

SIG ContribEx Comms Team Rap by Bart Farrell

Kubernetes Pen Testing, with Jesper Larsson Nov 29, 2023

Jesper Larsson is a Freelance PenTester. Jesper works with a hacker community called Cure53. Co-organizes SecurityFest in Gothenburg, Sweden. Hosts Säkerhetspodcasten or The Security Podcast. Jesper is also a Star on Hackad, a Swedish TV Series about hacking.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Kubernetes Removals, Deprecations, and Major Changes in Kubernetes 1.29

Introducing SIG etcd

etcd, with Marek Siarkowicz and Wenjia Zhang (The Kubernetes Podcast from Google)

WebAssembly (WASM) and OpenShift: A Powerful Duo for Modern Applications

Linux Foundation Events

Pass the torch in ContribEx #7603

Links from the interview

Cure53 Hacker Community

Säkerhetspodcasten

Hackad TV Show on IMDB

SecurityFest Gothenburg

Falco by Sysdig

Wolfi by Chainguard

The Untold Story of NotPetya, the Most Devastating Cyberattack in History

Links from the post-interview chat

The Untold Story of NotPetya, the Most Devastating Cyberattack in History

Confidential Computing, with Fabian Kammel Nov 23, 2023

Fabian Kammel is a Security Architect at ControlPlane, where he helps to make the (cloud-native) world a safer place. In his career, he continuously worked to bring hardware security and cloud-native security closer together. His past projects include:

* A cloud-native PKIs for on-road vehicle services secured by enterprise HSMs

* An always-encrypted Kubernetes distribution that harnesses the power of Confidential Computing

* And more recently securing SPIFFE-based machine identities via hardware attestation.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Links from the interview

Confidential Computing Blog from kubernetes.io

Confidential Computing Consortium

Confidential Computing Whitepaper

Intel SGX Enclave

Swap Memory with Kubernetes in Beta in 1.28

Hardware Security Modules

Trusted Platform Modules (TPM)

Envelope Encryption

Confidential Computing Concepts - Confidential Virtual Machine

AMD Secure Encrypted Virtualization (AMD SEV)

AMD Secure Encrypted Virtualization - Secure Nested Paging (AMD SEV SNP)

Trusted Computing Base (TCB)

Remote Attestation

Confidentiality, Integrity, and Availability: The CIA Triad

Intel SGX Enclaves

Confidential Containers (CoCo)

Katacontainers

AWS Firecracker

etcd, with Marek Siarkowicz and Wenjia Zhang Nov 17, 2023

Guests are Marek Siarkowicz , Senior Software Engineer in Google Cloud, Tech Lead of SIG-etcd AND Wenjia Zhang, Engineering Manager in Google Cloud, Co-Chair of SIG-etcd, Google. We spoke about the project, the recent change to become a Special Interest Group and how to learn etcd.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Co-host this week is Mofi Rahman [X, LinkedIn]. Cloud Developer Advocate at Google

Karpenter graduated to Beta

The Kubernetes SIG Network announced release 1.0 of the Gateway API

Ingress2gateway new CLI to migrate from Ingress to Gateway

The Call for Proposals for KubeCon EU 2024 will close on Nov 26, 2023

Links from the interview

etcd

Meaning of etcd

etcd history from CoreOs

Raft paper

On the Hunt for Etcd Data Inconsistencies by Marek Siarkowicz - [youtube]

Lessons Learned From Etcd the Data Inconsistency Issues by Marek Siarkowicz - [youtube]

The first pancake rule

etcd as a Kubernetes sig

The Case for SIG-ifying etcd

CNCF Contributor License Agreements (CLA)

Kubernetes Prow

Contributor Experience Special Interest Group

Kubernetes Watch

Go Serialization and Deserialization

Cilium with external etcd

Certified Kubernetes Administrator

etcd mentorship program

etcd @kubecon NA 2023

Links from the post-interview chat

Kubernetes considerations for large clusters

Operating etcd clusters for Kubernetes

Kueue

etcd on the podcast

The Heartbleed Bug

XKCD meme about dependency

WasmCon 2023 Nov 16, 2023

WasmCon took place in BELLEVUE, WASHINGTON on Sept 6-7 2023. Kaslin and Mia from our advocacy team went down there and spoke to some folks at the conference to get their impression of the event.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Mia Villaseñor:

Cilium Graduated

Docker AI apps tools

Kubernetes steering committee election results

CRI-O moved to Kubernetes owned repository

CNCF TOC voted to archive the SMI project

Links from the interview

Guests

Trusted Compute Group

Trusted Platform Module (TPM)

Jnode

Midokura WASM Runtime

Cosmonic Cloud

CNCF WasmCloud

Wasm Components Model

WASI

WasmTime SQLite in Wasm talk at WasmCon

AI and Wasm talk at WasmCon

Envoy and Wasm

The WIT format

Cloudflare RU workers

Wasm and Kubernetes

Wasm and Kubernetes case study

Doom on Cloudflare workers with Wasm

Wasm and bosch by Emily Ruppel

Dynamic Linking Python

Dynamic Linking in Wasm from Wasm I/O 23

Links from the post-interview chat

Podcast episode#208 with Phil estes

Podcast episode#203 with Justin Cormack

What's new in Istio, with John Howard and Keith Mattix Oct 06, 2023

This week we explore what’s new in Istio with core maintainers John Howard and Keith Mattix

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

History of containerd, with Phil Estes Sep 21, 2023

This week we explore the history of containers, particularly containerd, with Phil Estes.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Links from the post-interview chat

Keynote: Reperforming a Nobel Prize Discovery on Kubernetes - Ricardo Rocha & Lukas Heinrich
Keynote: CERN Experiences - Ricardo Rocha & Clenimar Filemon
Jesse Frazelle’s container escape challenge used to be at contained.af, but it doesn’t seem to exist anymore.
Containers from Scratch - Liz Rice at GOTO 2018 (there are a bunch of recordings of this talk)
Mirantis-owned cri-dockershim on Github

Kubernetes 1.28 with Grace Nguyen Sep 04, 2023

Guest is Grace Nguyen. Kubernetes 1.28 release lead and student at the University of Waterloo. Grace had to juggle exams and community work to bring Kubernetes 1.28 to life. We will get to know grace and learn what work went into release, where the theme come from and what's special about it

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Grace Nguyen

LinkedIn
X

Links from the post-interview chat

LeakSignal with Wesley Hales and Max Bruce Aug 21, 2023

Guests are Wesley Hales and Max Bruce are co-founders of LeakSignal. LeakSignal is an American startup which is building a set of tools and products to detect and prevent data exfiltration in Service Meshes and proxies supporting Envoy and proxy-wasm.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the Interview

LeakSignal

LeakSignal GitHub

Blog post about Cloud Armor WAF capabilities

Akamai
eBPF

Links from the post-interview chat

Envoy Mobile

The State of Kubernetes Cost Optimization, with Fernando Rubbo and Kent Hua Jul 26, 2023

“The State of Kubernetes Cost Optimization,” is a recent report based on research into best practices for running Kubernetes clusters. If you’re running your workloads as efficiently as possible, your costs will be optimal too. The report reviews the data and offers recommendations on tools and techniques you can use to optimize your Kubernetes clusters. We talk with two of the report’s creators, Fernando Rubbo and Kent Hua, to learn more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

- CNCF Istio Graduation blog

- Istio’s blog about CNCF Graduation

- CNCF Blog on Flux v2 GA release

- Redhat Blog on Kubevirt 1.0

- Pulumi blog on v4.0 of their Kubernetes Provider

- VMware Wasm Labs blog on serverless with wasm

- CNCF announcement of over 30 new members

- VMware docs on self-hosted Tanzu

Links from the interview

- The State of Kubernetes Cost Optimization report

- “Sharing the inaugural State of Kubernetes Cost Optimization report” blog

- Resource Management for Pods and Containers (Kubernetes Documentation)

Links from the post-interview chat

- Google Site Reliability Engineering (SRE) books

- Google Cloud Managed Service for Prometheus

Platform Engineering with Nicholas Eberts Jun 30, 2023

This week we speak to GKE Project Manager, Nicholas Eberts, about Platform Engineering. He draws from his considerable experience both with the Cloud Native community and working with businesses to set up their cloud platforms to explore the trend.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

- Kubernetes binary distribution via CDN at dl.k8s.io

- OpenShift Service Mesh version 2.4

- AWS Signer

- KubeCon CloudNativeCon North America 2023 registration

- KubeCon CloudNatieCon and Open Source Summit China 2023 registration

- Kubernetes Bill of Materials CLI from KSOC Labs

- Blog

- GitHub

- CNCF Blog "Version after version: how the open source project Kubernetes releases its software"

Links from the interview

Nicholas Eberts:

- Twitter

- LinkedIn

- Abdel tweeting about Platform Engineering

- "DevOps is dead, long live Platform Engineering" tweet

- DORA (DevOps Research and Assessment)

- Charity Majors on the Hacking the Org Podcast

- Charity Majors on the DevInterrupted Podcast

- Open Service Broker

- CNCF Landscape

- Google Bard

Docker && WASM, with Justin Cormack Jun 19, 2023

This week we speak to Justin Cormack the CTO of Docker. We talked about WASM (or WebAssembly Modules), Docker support for running WASM apps and the future of the technology.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

WASMCon 2023:

CFP
Event

Kyverno Project 1.10

Intro to Cilium course

Microsoft Azure Linux is GA

CNCF Glossary German edition is live

Google C3 Machine family is available for GKE

ChainGuard move from Github Registry to self-hosted

Amazon Pull through cache on AWS container registry

Links from the interview

Justin Cormack:

KubeCon EU 2023 Jun 06, 2023

In this episode we bring you with us to KubeCon EU 2023 in Amsterdam, Netherlands. We interviewed several attendees about their experience at the conference.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Featuring:

News of the week

Kubernetes SIG Infra migrating some CI jobs to AWS

Kubernetes 1.26 now Generally Available on GKE

Software Supply Chain Security startup Stacklock, by Craig McLuckie and Luke Hinds raised 17.5M$

Kubernetes SIG Testing End to End Testing Best Practices update

Knative version 1.10 release

KubeDay Israel schedule

Links from the interview

Kubernetes, Resistance is Futile - Adnan Hodzic, ING

Choose Your Own Adventure: The Treacherous Trek to Development - Whitney Lee, VMware & Viktor Farcic, Upbound

Agones + Quil;kin: Kubernetes Game Server Orchestration and UDP Service Mesh - Mark Mandel, Google Cloud

Open Policy Agent

eBPF

Build Your Own Path in the Cloud Native Ecosystem - Rich Burroughs, Loft Labs & Kaslin Fields, Google (Whitney mentioned learning about eBPF in this talk)

Google Cloud Anthos

PlayStation and Kubernetes: How to Solve a Problem Like Real-Time

Story of Our Transition to a Custom Kubernetes Operator for an API Gateway - Vincent Behar, Ubisoft

CNCF TAG App Delivery

Cloud Native Buildpacks

Kuberoke

Kubernetes 1.27 Chill Vibes, with Xander Grzywinski May 15, 2023

Xander Grzywinski is a Senior Open Source Product Manager at Microsoft and the Kubernetes 1.27 release lead.

We interviewed Xander to explore some highlights from the release, and discuss a bit about what it’s like to work with the release team.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Traefik Labs Launches Traefik Hub

Software Supply Chain Security Assessment:

CNCF Spring 2023 Cloud Native Ambassadors

Updates to the Auto-refreshing Official CVE Feed

What’s New in Red Hat OpenShift Virtualization 4.12

Azure Kubernetes upgrades and Long Term Support

KubeCon SHANGHAI, CHINA is back on Sept 26-28, 2023

CFP Closes on June 18, 2023

KubeCon NA takes place on Nov 6-9, 2023 in Chicago, Illinois

CFP Closes on June 18, 2023

KubeCon EU 2024 takes place on Mar 19-22 in Paris, France

Introducing Sessionize: a new CFP platform for CNCF events

Manage Amazon EKS Clusters with New VMware Tanzu Mission Control Features

Google Cloud turned profit for the first time according to the earning call of Q1 2023

Links from the interview

Xander Grzywinsk:

Pod Security Policies

KEP 753: Sidecar containers

Kubernetes 1.27 Release team

Kubernetes 1.27: Chill Vibes

Freeze k8s.gcr.io image registry

Kubernetes Vertical Pod Autoscaler

Kubernetes Removals and Major Changes In v1.27

Kyverno — verify Kubernetes control plane images

Kubernetes 1.27: StatefulSet PVC Auto-Deletion (beta)

Kubernetes 1.27: Query Node Logs Using The Kubelet API

Kubernetes 1.27: Efficient SELinux volume relabeling (Beta)

Kubernetes 1.27: StatefulSet Start Ordinal Simplifies Migration

Kubernetes 1.27: Introducing An API For Volume Group Snapshots

Kubernetes 1.27: Quality-of-Service for Memory Resources (alpha)

Kubernetes 1.27: Vertical Pod Autoscaler supporting in-place updates

Kubernetes 1.27: Server Side Field Validation and OpenAPI V3 move to GA

Kubernetes 1.27: More fine-grained pod topology spread policies reached beta

Kubernetes 1.27: Single Pod Access Mode for PersistentVolumes Graduates to Beta

Kubernetes 1.27: HorizontalPodAutoscaler ContainerResource type metric moves to beta

Links from the post-interview chat

GKE Workload rightsizing

Kubernetes Community Check-up with Paris Pittman Apr 24, 2023

Paris Pittman is a Senior Program Manager at the Open Source Program office at Apple. A Prominent Kubernetes and CNCF member who served many roles with a focus on community and governance. Paris was on some key milestones for this show. First appearance was on Episode 1 and later on Episode 100. So we could not be happier to have Paris back in Episode 200. We discussed how Paris got started with community work and how the experience has been. Paris shared with us some words of wisdom on the power of working with others and the importance of moving on.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

KCD Amsterdam Retro

AWS announced Data on EKS

Kubecon EU 2023 “Security Village”

Podman desktop released version 0.14

Keycloak joined CNCF as an incubating project

Kubernetes v1.27 code name Chill Vibes was released

The CNCF “Cloud Native Explorers” - Amsterdam Edition

CNCF white paper on Platforms for Cloud Native Computing

GKE Autopilot is now the default mode of operations for new clusters

Links from the interview

Paris Pittman:

Linkedin
Twitter
Mastodon (@paris@hachyderm.io)

OSCON 2016

Sarah Novotny

Kaslin is a new chair of SIG contribX

SCaLE20x Apr 13, 2023

In this episode we bring you with us to Southern California Linux Expo, or SCaLE20x in Pasadena, California. We interviewed several attendees about their experience at the conference.

Featuring:

Robin Phantomhive, attendee at SCaLE and community member
Mofi Rahman, Developer Advocate at Google
Fatima Sarah Khalid, Dev Evangelist at GitLab
Bryan Behrenshausen, Open Source Program Manager at GitLab
Laura Santamaria, Geek with an achievement streak at Dell
Jeff Deifik, Cybersecurity at Aerospace Corp
Jill Bryant Ryniker of LWDW and the Destination Linux Podcast
Bill Schouten of Tux Digital and the Sudo Show Podcast

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Links from the interview

Breaking Kubernetes for Fun and Profit with David Flanagan Mar 27, 2023

David Flanagan is a developer, educator and technology enthusiast with a special interest for Kubernetes and Cloud Native technologies. David is the founder of Rawkode Academy, an online platform aiming at teaching kubernetes to developers.

One of the popular shows on RawKode is Klustered. Where david invites people to fix broken kubernetes clusters, learn a thing or two and have a laugh

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

Istio Ambient Mesh merged into the main branch

Kubernetes 1.27 changes and removals

k8s.gcr.io to registry.k8s.io redirect

Preview support for pod sandbox on Azure Kubernetes Services

Katacontainers

Docker apologies for handling Free Teams deprecation

Schedule for CNCF-hosted and colocated events is up

Kubernetes WithOut Kubelet

CrowdStrike Discovers First-Ever Dero Cryptojacking Campaign Targeting Kubernetes

Links from the interview

David Flanagan

How Spotify Accidentally Deleted All its Kube Clusters with No User Impact - David Xia

You probably DON'T need a service mesh

Klustered episode with Abdel and Marek

Docker first release at PyCon 2013

KubeHuddle 2023 Toronto

Kubernetes Failure Stories

Kubelete runOnce flag

Cloud Native Security Con with Emily Fox Mar 03, 2023

Emily Fox is a security engineer @Apple Cloud Services, a CNCF Technical Oversight Committee member and co-chair for a bunch of CNCF events including recently the Cloud Native Security Conference in Seattle.

We had a chance to talk to Emily about the first edition of the CNSC 2023, her involvement with the CNCF community. Her role as a security engineer and some career discussions.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

News of the week

KubeEdge v1.13.0 released on January 18, 2023, achieves SLSA 3 compliance

SLSA 3 compliance

KubeVela brings software delivery control plane capabilities to CNCF Incubator

GKE Updates:

AWS announced the availability of AKS anywhere on Snowball Edge Devices

Sysdig released their 6th annual Cloud Native Security and Usage Report.

Rebooting the Cloud Native Hamburg community group

KubeCon EU Amsterdam Schedule

Katacoda Kubernetes tutorials shutdown

LFX Internships for WASMEdge

Kubernetes Community Days (KCDs):

Upcoming CFP deadlines:

KCD Italy CFP closes February 20 2023 (in-person)
KCD Czech + Slovak CFP closes March 1, 2023 (in-person)
KCD Bangaluru CFP closes March 20, 2023 (in-person)
KCD Zurich CFP closes March 31, 2023 (in-person)
KCD Colombia CFP closes March 31, 2023 (in-person)

Check out upcoming KCDs that might be in your region:
- Sponsorship opportunities are available
- Donation Prospectus available for review

KCD Israel 2023, Mar 23, 2023
KCD LA, Mar 9, 2023
KCD Pakistan (Islamabad), February 20, 2023
KCD Netherlands (Amsterdam), February 23-24, 2023
KCD France (Paris), March 7, 2023
KCD Los Angeles, March 9-10, 2023
KCD Ukraine Virtual Fundraiser, March 16, 2023

Links from the interview

Emily Fox:

Cloud Native Security Con Youtube Playlist

How to Secure Your Supply Chain at Scale - Hemil Kadakia & Yonghe Zhao, Yahoo

eBPF

CIA Triad

Waterfall development

Cloudcareers.dev podcast

Rory McCune on twitter

Software Supply Chain Security

Emily Fox on SBOM

Emily Fox on SDLC

Shift Left Security: Best Practices for Getting Started

Episode 196 with Benjamin Elder

CNSC 2023 seattle guests

Frederick Kautz on SPIFFE/SPIRE

Chris Aniszczyk's Blog

Beyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions - Tiffany Jernigan

Standardization & Security - A Perfect Match - Ravi Devineni & Vinny Carpenter, Northwestern Mutual

CSI Container: Can You DFIR It? - Alberto Pellitteri & Stefano Chierici, Sysdig

Links from the post-interview chat

Cloud Native Security Con Eu 2023

CNCF TOC

Kubernetes Registry with Benjamin Elder Feb 14, 2023

Benjamin Elder is a Senior Software Engineer at Google, a Kubernetes SIG Testing Chair & Tech Lead, and a Kubernetes Steering Committee member. In this episode we got to chat with Benjamin about the new kubernetes registry migration from k8s.gcr.io to registry.k8s.io. We also had an opportunity to discuss the community, the various SIG's (Special Interest Groups) Benjamin is involved with the amount of work needed to drive the project forward.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Chatter of the week

Google Developer Experts program.

ChatGPT.

OpenAI Case Study.

Kubernetes Jobs API.

Job Tracking, to Support Massively Parallel Batch Workloads, Is GA in kubernetes 1.26.

Stateful apps on Kubernetes.

Kelsey Hightower's take on Databases on Kubernetes twitter space.

Kubernetes Resources Model

News of the week

Linkerd published a 2022 recap

The CNCF Cloud Native Maturity Model

The CNCF Cloud Native Maturity Model website

Using Amazon EKS with Google Workspace identities

CNCF Ambassador 2.0 program

Cloud Native Security Con NA 2023 (website - recordings)

The CNCF important updates for KubeCon + CloudNativeCon 2023 and co-located events

Kubernetes 1.26 news:

https://kubernetes.io/blog/
Eviction policy for unhealthy pods guarded by PodDisruptionBudgets:https://kubernetes.io/blog/2023/01/06/unhealthy-pod-eviction-policy-for-pdbs/
Retroactive Default StorageClass: https://kubernetes.io/blog/2023/01/05/retroactive-default-storage-class/
Alpha support for cross-namespace storage data sources: https://kubernetes.io/blog/2023/01/02/cross-namespace-data-sources-alpha/
Advancements in Kubernetes Traffic Engineering: https://kubernetes.io/blog/2022/12/30/advancements-in-kubernetes-traffic-engineering/
Job Tracking, to Support Massively Parallel Batch Workloads, Is Generally Available: https://kubernetes.io/blog/2022/12/29/scalable-job-tracking-ga/
CPUManager goes GA: https://kubernetes.io/blog/2022/12/27/cpumanager-ga/
Pod Scheduling Readiness: https://kubernetes.io/blog/2022/12/26/pod-scheduling-readiness-alpha/
Support for Passing Pod fsGroup to CSI Drivers At Mount Time: https://kubernetes.io/blog/2022/12/23/kubernetes-12-06-fsgroup-on-mount/
GA Support for Kubelet Credential Providers: https://kubernetes.io/blog/2022/12/22/kubelet-credential-providers/
Introducing Validating Admission Policies: https://kubernetes.io/blog/2022/12/20/validating-admission-policies-alpha/
Device Manager graduates to GA: https://kubernetes.io/blog/2022/12/19/devicemanager-ga/
Non-Graceful Node Shutdown Moves to Beta: https://kubernetes.io/blog/2022/12/16/kubernetes-1-26-non-graceful-node-shutdown-beta/
Alpha API For Dynamic Resource Allocation: https://kubernetes.io/blog/2022/12/15/dynamic-resource-allocation/
Windows HostProcess Containers Are Generally Available: https://kubernetes.io/blog/2022/12/13/windows-host-process-containers-ga/
We're now signing our binary release artifacts!: https://kubernetes.io/blog/2022/12/12/kubernetes-release-artifact-signing/

Links from the interview

Benjamin Elder

Kubernetes Steering Committee

Kubernetes SIG Testing

Kubernetes IN Docker (KIND)

Benjamin on the podcast episode 96

Paris Pittman

Kubernetes registry move from k8s.gcr.io to registry.k8s.io

Archeio is the tool used to redirect to GCR or S3 depending on the client.
The design of how requests are handled.
Doc detailing the background of this migration.

Kubernetes SIG Contributor Experience

Kubernetes Slack channel

Kubernetes v1.26 Electrifying, with Leonard Pahlke Dec 15, 2022

Leonard Pahlke is not only the Release Lead for Kubernetes v1.26, he's also a co-chair of the CNCF TAG for Environmental Sustainability and a student working toward a Master's Degree in Computer Science at the Hamburg University of Applied Sciences. In this episode, Leonard talks with us about Open Source contribution, environmental sustainability, and Kubernetes v1.26.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Chatter of the week

The 1.23 Release team (where Kaslin was a comms shadow)

Shoutout to Kunal Kushwaha, another Kubernetes contributor who started out as a student, and who advocates for students in the community via his YouTube channel & more.

KubeCon EU 2023 (which will have a student track as part of the schedule)

KubeCon Diversity and Inclusion Scholarships

News of the week

Kubernetes Removals, Deprecations, and Major Changes in 1.26

AWS ReInvent 2022

AWS YouTube Channel

Control Plane Logs added for GKE

Gateway Controller for Single Clusters reaches GA for GKE

Prometheus Turns 10

Prometheus Training

Prometheus Documentary by HoneyPot

Move to registry.k8s.io

Leak Signal Micro-waf

CNCF Maintainer Track changes

Links from the interview

Leonard Pahlke’s Blog

Leonard Pahlke blog about contribution: Start Contributing to Open Source Projects

Leonard Pahlke CNCF WG Environmental Sustainablity Blog Post

TAG Environmental Sustainability GitHub

Specific 1.26 changes mentioned:

Kubernetes 1.26: We're now signing our binary release artifacts!
Kubernetes 1.26: Windows HostProcess Containers Are Generally Available
CEL for Admission Control KEP
In-tree Storage Plugin to CSI Migration - Azurefile
In-tree Storage Plugin to CSI Migration - vSphere
In-tree storage plugin removals for GlusterFS and OpenStack, and more, are outlined in the “Kubernetes Removals, Deprecations, and Major Changes in 1.26” blog

Kubernetes Enhancement Proposals (KEPs)

Kubernetes v1.26 Electrifying Release Blog

Links from the post-interview chat

List of Kubernetes SIGs

Kubernetes Release Team Shadow program

Kubernetes on Vessels, with Louis Bailleul Nov 24, 2022

Louis Bailleul is a Chief Enterprise Architect at PGS. After years of running highly-ranked super computers to process PGS’ seismic data, Louis’s team at PGS has lead a transition to Google Cloud. Listen in to learn about HPC in Google Cloud with GKE, and to explore using Kubernetes to do processing on vessels at sea!

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Listen to the KubeCon NA 2022 recap episode

News of the week

Links from the interview

KubeCon NA 2022 Nov 10, 2022

In this episode we bring you with us to KubeCon NA 2022 in Detroit, Michigan. We interviewed 15 attendees from various backgrounds and learned some cool insights.

Featuring:

Mo Khan, Software Engineer, Microsoft.
Katrina Verey, Senior Staff Production Engineer, Shopify.
Aishwarya Harpale, Student, Rutgers University.
Jeffery Sica, Principal Developer Experience Engineer, CNCF.
Kirsten Schumy, Software Engineer, AWS.
John-Paul Robinson, HPC Architect, University of Alabama at Birmingham.
Madhav Jivrajani, Software Engineer, Vmware.
Leigh Capili, Developer Advocate, Vmware Tanzu.
Nim Jayawardena, Developer Programs Engineer, Google.
Charlie Yu, Developer Programs Engineer, Google.
Ahrar Monsur, Developer Programs Engineer, Google.
Mickey Boxell, Product Manager, Oracle.
Eddie Zaneski, Software Engineer, Chainuard.
Andy Piggott, Chief Product Officer, Section.
Logan Smith, Director of Business Development, GrafanaLabs.
Brian Dorsey, Developer Advocate, Google - Shoutout for recommending the microphones for interviews.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

CrowdStrike cryptojacking finding
Skaffold v2 Generally Available
GKE Security Posture Dashboard
- Blog
- Video
Cdk8s+ from AWS
- Blog
- Project page
CNCF Sandbox project application information
Istio becomes a CNCF Incubating project
Cert-manager becomes a CNCF Incubating project
Cisco OpenClarity
Kube-router bug
Google Cloud Next Wrap-Up
Microsoft Ignite highlights blog
Cloud Native SecurityCon
Linux Foundation partnership with Razom for Ukraine

Links from the interview

Looking Forward and Back, with Adam Glick Oct 13, 2022

After four and a half years hosting this podcast (and almost 9 years at Google) Craig Box is moving on from the latter, which unfortunately means leaving the former. But the show must go on. In this episode Craig introduces new hosts Abdel Sghiouar and Kaslin Fields. We take a small look forward, and then a big look back.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Links from the show

Adam’s last episode
Abdelfettah Sghiouar
Kaslin Fields
First-gen stickers
Second-gen stickers
Episode 60, with Mark Shuttleworth
Episode 15, with Dan Ciruli and Jasmine Jaksic
- Dan on sticker duty
Episode 30, with Joe Zou
- A rare team photo
Music and musicians
Double guest trivia:
- Episodes 1 and 100 with Paris Pittman
- Episodes 62 and 180 with Ricardo Rocha (on a technicality)
The Adam face
- Corey Quinn: separated at birth?
One of many booth meetups
Follow Craig Box on Twitter
Follow Adam Glick on LinkedIn

Fresh Pivot, with Dan Stein Oct 05, 2022

Dan Stein is an engineering manager at General Bioinformatics. Dan Stein is also DJ Fresh, a multi-million selling artist with two UK number one records. Learn about the surprising overlap between these two careers.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod and @craigbox

Chatter of the week

News of the week

Links from the interview

DJ Fresh
Atari 800 and Atari ST
- Pong
- Atari BASIC
Commodore Amiga
- OctaMED
Fatboy Slim and the Atari ST
Dogs on Acid music forum
Taylor Hawkins Tribute Concerts
Abolishing the high tax rate in the UK, or not
Breakbeat Kaos
- Hold Your Colour by Pendulum
Kryptonite by DJ Fresh
Gold Dust
Subsequent hits:
- Louder
- Hot Right Now
Kyma (sound design language) and Max/MSP
We Got Coders
General Bioinformatics
- NGS gene sequencing
- Ensembl
Hasura
GraphQL Playground
NCBI - National Center for Biotechnology Information
Max Martin
How Music Works by John Powell
Learning:
- Treehouse
- Udemy
- 3Blue1Brown
- Codeacademy
DJ Fresh’s new single, Higher
DJ Fresh on Facebook
Dan Stein on Twitter

VMware Tanzu, with Betty Junod Sep 28, 2022

Betty Junod, VP of Product Marketing at VMware Tanzu, kindly took up Craig’s challenge to explain the various parts of the Tanzu ecosystem, and how the traditional IT buyer and the modern cloud native really aren’t that different.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod and @craigbox

Chatter of the week

News of the week

Links from the interview

VMware
- History
Docker
Solo.io
VMware Tanzu introduction blog
- VMware acquires Heptio
- VMware acquires Pivotal
Tanzu Mission Control
Tanzu for Kubernetes Operations
Tanzu Application Platform
Tanzu Kubernetes Grid
- Bring your own host to TKG
Project Pacific introduction
- TKG 2.0
VMware Aria Operations for Applications
Tanzu Application Service
- Cloud Foundry
Open source projects:
- Velero
- Antrea
- Carvel
- Cartographer
Michigan cider
Detroit-style pizza
Betty Junod on Twitter

Ambient Mesh, with Justin Pettit and Ethan Jackson Sep 20, 2022

When you think of a service mesh, you probably think of “sidecar containers running with each pod”. The Istio team has come up with a new approach, introduced recently as an experimental preview. Google Cloud software engineers Justin Pettit and Ethan Jackson join Craig to explore ambient mesh.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Nicira
Open vSwitch
Introucing Ambient Mesh
- Service mesh
First mention of Ambient in 2018
No first class support for sidecars in Kubernetes
Istio working group meeting, August 2021
- Remote proxy proposal
HBONE: HTTP/2-based overlay network environment
mTLS
HTTP Connect
GIF
MASQUE and QUIC
Get started with Ambient Mesh
Ambient Mesh Security Deep Dive
Justin Pettit and Ethan Jackson on Twitter

Security, Access and War, with Kateryna Ivashchenko Sep 09, 2022

Kateryna Ivashchenko is a Senior Demand Generation Manager at Teleport, an organizer of community events, and a supporter of the developer community in her home country of Ukraine.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Introducing Ambient Mesh in Istio
Istio 1.15
Linkerd 2.12
- Linkerd and the Gateway API
Symbiosis
Cuber nay-tace
- Reddit discussion
VMware Tanzu announcments from VMware Explore
Isovalent raises $40m Series B
Kubernetes Blog:
Kubernetes was never designed for batch jobs by Kurt Schelfthout
7 years of GKE General Availability

Links from the interview

Kubernetes 1.25, with Cici Huang Aug 23, 2022

It’s release day! We discuss today’s Kubernetes 1.25 with release team lead Cici Huang, Software Engineer at Google Cloud. What’s in, what’s out, and what is it like to lead a release you are also promoting a feature in?

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubernetes 1.25 release
Introducing Acorn
- Acorn Labs: Rancher Co-Founders’ New Kubernetes Startup by Christine Hall
- Episode 57, with Darren Shepherd
GKE updates:
KubeCon schedule published
- Cloud Native Rejekts
Scaling Kubernetes to thousands of CRDs by Nic Cope

Links from the interview

IBM Watson
Kubernetes Community Awards
SIG API Machinery
- Chair & Cici’s hiring manager: Fede Bongiovanni
Kubernetes 1.25 release team
Release blog
Highlights:
Kubernetes 1.24 delay
Theme and logo
Envelopes:
- 1.24 lead: Episode 178, with James Laverack
- 1.26 lead: Leonard Pahlke
Cici Huang on GitHub

Gateway API Beta, with Rob Scott Jul 21, 2022

Three years after they were first proposed, the new Kubernetes Gateway APIs - the evolution of the Ingress API - are in Beta. Rob Scott is a software engineer at Google and a lead on the SIG Network Gateway API project.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Argo security audit:
Kubernetes Cluster API integrates continuous fuzzing
- The report
- OSS Fuzz
Cilium 1.12
GKE Cluster Autoscaler location policy
The quest for neutrinos
- Ray traced Quake II

Links from the interview

Writing, Learning and Tech, with Ian Miell Jul 14, 2022

Ian Miell is a partner at consultancy Container Solutions, and an author of books on Bash, Git, Terraform and Docker. He explains to Craig how writing - whether runbooks, blog posts, training courses, or “real” books, can help you learn and make your team more effective.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Hot hot hot
Small pools and larger pools

News of the week

Links from the interview

Zwischenzugs
Business Value, Soccer Canteens, Engineer Retention, and the Bricklayer Fallacy
Zwischenzug and zugzwang in chess
Ian’s books:
Tcl
Why are enterprises so slow?
Erlang
Episode 164, with Daniel Walsh
‘AWS vs K8s’ is the new ‘Windows vs Linux’
The Runbooks Project
ITIL
Consultancy:
Finance topologies:
- Team Topologies by Manuel Pais and Matthew Skelton
- If You Want To Transform IT, Start With Finance
- Conway’s Law
Ian Miell on Twitter

Mercedes-Benz Tech Innovation, with Sabine Wolz Jul 07, 2022

Why does a car manufacturer own an IT company? How did that IT company end up running 900 Kubernetes clusters, starting at version 0.9? Craig asks these questions and more of Sabine Wolz, Product Manager at Mercedes-Benz Tech Innovation.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Live UK political coverage on the day of recording. As predicted, news happened slightly faster than publication, and at the time of release, Boris Johnson is expected to resign as Conservative Party leader today.
Shibboleth
Lord of the Rings TV show moved to UK

News of the week

Links from the interview

Consulting, with Steve Wade Jul 01, 2022

Gone are the days of working at the same company for 50 years. Consultants and contractors bring specialised experience to many companies in short bursts. Steve Wade is an independent Kubernetes consultant and trainer, and he tells us how that became the life for him.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

New GKE features:
Paralus (by Rafay)
Furiko (by Shopee)
New CNCF Sandbox projects:
- Clusterpedia
- OpenCost
- Aeraki Mesh
- Curve
- OpenFeature
- Kubewarden
- DevStream
Traefik Hub
Cyble’s exposed Kubernetes clusters
Bitnami index FAQ

Links from the interview

Cloud Native Storage, with Alex Chircop Jun 10, 2022

As we move further up the stack, we rely on many foundations – including storage. Alex Chircop is co-chair of the CNCF Storage Technical Advisory Group (TAG), as well as founder and CEO of Ondat (formerly StorageOS). Join us to learn why no app is truly stateless, and how data is the new storage.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Crowded House snippets:
- Distant Sun
- Sister Madly
- Don’t Dream It’s Over (you know this one)
- Weather With You
- Something So Strong
- How Will You Go

News of the week

Kubernetes 2021 annual report and blog post discussing it
SUSECon news
- SLSA Level 4
The State of CD 2022 report
Introducing OpenCost
- Spec
- Episode 124, with Webb Brown
OSTIF and ADA Logics posts discussing the CRI-O project audit
Bitnami Helm chart pruning and Reddit discussion
Upcoming Code of Conduct changes at the CNCF

Links from the interview

Goldman Sachs on Google Cloud
Episode 181, with Justin Santa Barbara
KubeCon EU 2016
CNCF TAG Storage
Data on Kubernetes community
CNCF TAGs
- CNCF Storage WG talk at KubeCon EU 2019
- CNCF TAG Storage talk at KubeCon EU 2022
Kubernetes SIG Storage
- Xing Yang
- CSI and COSI
Quinton Hoole
- Federation, aka “Ubernetes”
Whitepapers:
- Storage
- Disaster Recovery
Ondat
- Updog
Alex Chircop on Twitter

Configuration as Data, with Justin Santa Barbara Jun 01, 2022

What is configuration as data, how is different from infrastructure as code, and why can’t anything just be itself anymore? We posed these questions and more to long-time Kubernetes contributor Justin Santa Barbara at KubeCon EU, and this episode is the result. Justin created the kOps project and now leads the team at Google that makes Kubernetes easier to consume.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

KubeCon EU 2022, with Ricardo Rocha May 19, 2022

Live from Valencia, it’s KubeCon EU! Craig talks to conference co-chair and CERN computer scientist Ricardo Rocha about the event, and what it’s like to be in a room full of people again.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

9am Karaoke

News of the week

CNCF news from KubeCon EU:
Google Cloud improves GitOps usability with Config Sync and Porch
- kpt
- Other Google news from KubeCon
Tetragon from Isovalent
Envoy Gateway
Infra
- Ask HN with the creators
Cloud Foundry launches Korifi
SUSE NeuVector is open source
CloudNativePG from EnterpriseDB
- All the other options
Assured Open Source Software from Google Cloud
Recent Guest news:

Lightning Round

Links from the interview

Docker, with Scott Johnston May 10, 2022

Docker CEO Scott Johnston joins us to talk about the announcements from this week’s DockerCon, the transition from an enterprise to a developer tools company, and the Internet’s favourite whale.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Podes and antipodes
- Side note: Kubernetes needs the concept of an Antipod. BRB, writing a KEP
Google Cloud Podcasts

News of the week

DockerCon 2022
- Docker Extensions
- Docker Desktop for Linux
- Late breaking news: Docker acquires Nestybox
Spot VMs now on GCE and GKE; spot pods now on GKE Autopilot
Fully managed Linkerd with Buoyant Cloud
Sign up for CDcon and save 40% by using the code CdCon22AMEET40
AWS adds Kubernetes resource view
Deploying Kubernetes clusters in absurd languages by Lee Briggs

Links from the interview

Docker
DockerCon ‘22
DockerCon ‘14, the announcement of Kubernetes
Return or Revenge?
Scott’s history
- Four degrees from Stanford, including an MSMSE
- Sun and Netscape
  - Java Servlets and J2EE
  - Moore’s Law and Metcalfe’s Law
    - Standard on the Internet
    - Tom Lyon
- Loudcloud/Opsware and a16z
- Puppet
Scott joins Docker in 2014
The monorepo
The Soul of a New Machine
Docker Swarm
Messages from the future and the Google crystal ball
Open Cotainers Initiative
Docker Desktop for Apple Silicon Macs
virtiofs for Mac
$2.1 billion valuation
Moby Project
- Moby
- Ice Cube
The Dockershim saga, as reported throughout the episodes:
- Don’t panic about Docker
- Dockershim deprecation FAQ
- Mirantis will support the Dockershim
- But seriously, don’t worry about the Dockershim
- Dockershim is, like, proper gone
The puns and joke section
- Docker is krilled to see you
- Billy T James
- Beached Az. Can’t eat chups!
Docker Extensions
- CNCF Landscape or Magic Eye?
Docker Desktop for Linux
Multi-arch on Docker Hub
Docker roadmap
Scott Johnston on Twitter

Kubernetes 1.24, with James Laverack May 04, 2022

Gaze into the stars with Kubernetes 1.24 release team lead, James Laverack. James is a software engineer turned solutions engineer at Jetstack, and explains the difference between the two roles, as well as how he found his home in SIG Release and what to expect in 1.24.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

IMDB and MusicBrainz
SheetOps
xlskubectl by Daniele Polencic

News of the week

Links from the interview

IstioCon, with Mitch Connors Apr 27, 2022

Big week for Istio! Craig talks to Mitch Connors, Istio user experience working group lead and IstioCon program committee co-chair, about the project and the conference. Mitch talks to Craig about the news that Istio has been proposed to the CNCF.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

40th anniversary of the ZX Spectrum
Some soothing YouTube channels:
Some conference talks about the Commodore 64:
- Rich Code for Tiny Computers
- DevOps for the Commodore 64
DevOps for the ZX Spectrum
Manic Miner
- Play online

News of the week

Istio has applied to join the CNCF
Istio mode in Tanzu Service Mesh
KubeVirt moves to Incubation phase in CNCF
New sandbox projects:
- OpenFunction, from Kubesphere
- Teller, from Spectral Ops
- Sealer, from Alibaba
Chainguard Enforce
- Episode 47, with Kim Lewandowski
EKS Blueprints
Unit 42 finds serious vulnerabilities in AWS log4shell hotfix
Tanzu State of Kubernetes repor t
Go article in the Communications of the ACM
Please support DevOpsDays Kyiv

Links from the interview

Language, Learning and Leadership, with Divya Mohan Apr 14, 2022

Divya Mohan is a Technical Writer with SUSE, a CNCF Ambassador, co-chair of Kubernetes SIG Docs, and a mentor to new contributors. Learn how her love of language and learning led her from production support to the core of the community.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Volcano moves to incubation stage in CNCF
Nephio
- Automating cloud native networks
- Announcement press release
Improving secure software supply chain by Asra Ali and Laurent Simon, Google Open Source Security Team
Docker SBOM
- When the moon hits your eye like a big pizza pie, that’s Anchore
Talos Linux 1.0
- What’s new in Talos 1.0
- Episode 159, with Andrew Rynhard
Grafana raises Series D
Tanzu Application Platform v1.1
Kubernetes 1.24 delayed
- But seriously, don’t worry about the Dockershim
Ever Forward also delayed

Links from the interview

From zero to WIP: How I transitioned from being a sys admin working on legacy middleware to sailing the cloud native seas
Hindi, Marathi, Malayalam; just 3 of the 22 scheduled languages of India
IGATE
HSBC
Middleware
- Episode 175, with Bruno Andrade
SIG Docs
LitmusChaos, founded by Uma Mukkara and Karthik Satchitanand
Divya joins SUSE
- Hayden Barnes
The Friday Four
Divya’s writing on WebAssembly
Divya Mohan on Twitter

Shipa, with Bruno Andrade Apr 06, 2022

Bruno Andrade is founder and CEO of Shipa, delivering applications and policy “as code” to Kubernetes with a SaaS model. We discuss founding companies in Canada vs the USA, abstractions for deploying apps, and whether Kubernetes will really ever disappear.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

in-toto, with Santiago Torres-Arias Mar 30, 2022

When is it safe to run software? When is it safe to drink orange juice? Are we a better judge of one or the other? Santiago Torres-Arias is an Assistant Professor at Purdue University, the team lead of the in-toto project, and a contributor to The Update Framework. He joins Craig to talk security in both physical and software supply chains.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Don’t Forget The Lyrics
Gettin’ Jiggy Wit It
Explained on Genius
Will Smith on Top Gear
The Oscars thing (CW: violence, cuss words that Will Smith didn’t used to have to rap to sell records)
He’s The Greatest Dancer by Sister Sledge; written by Bernard Edwards and Nile Rodgers of Chic

News of the week

Links from the interview

ThreatMapper, with Sandeep Lahane and Owen Garrett Mar 23, 2022

ThreatMapper is an open source tool that hunts for vulnerabilities in your production Kubernetes environment, and ranks them based on their risk of exploit. It is built by Deepfence, who also sell a commercial product based on it called ThreatStryker. Co-founder/CEO Sandeep Lahane and head of products/community Owen Garrett join Craig to discuss how to decide what to open and what to keep closed, and just how deep his fence needs to be.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Go 1.18 released
- Go now with Google Cloud
Continuous fuzzing in etcd
Veritas says Kubernetes is an Achilles Heel in defense against ransomware attacks
ARMO’s changelog for the NSA/CISA hardening guide
- KubeScape
Cloud Native Developer Bootcamp
- Use the code K8SPC30 for 30% off, if it’s before April 19, 2022 when you read this
Plural launches with $6m seed round
- Launch HN post
Speed boost on Docker Desktop for Mac
Track the Ever Forward

Links from the interview

Deepfence
ThreatMapper: the open source project
ThreatStryker: the commercial product
A failed startup story
- Heartbleed
- Buffer overflow
- Address Sanitizer
- Intel SGX
- Chrome sandbox
- Intel MPX
- Spectre and Meltdown
NGINX (the company)
eBPF
Forward secrecy
Deepfence’s Series A announcement
Shifting left
Behind 2 proxies
MITRE ATT&CK matrix
Cyber Kill Chain
ThreatMapper on GitHub
What’s new in ThreatMapper 1.3.0?
Sandeep Lahare and Owen Garrett on Twitter

Argo, with Jesse Suen Mar 17, 2022

The Argo project is a set of four tools to help “get stuff done” with Kubernetes: Workflows, CD, Rollouts and Events. Jesse Suen is a creator of the Argo project and co-founder and CTO of Akuity, a company set up to provide commercial support for it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Backstage and in-toto join the CNCF
- Episode 136, with Lee Mills and Matt Clark
- Episode 155, with Priya Wadhwa
Gloo Mesh 2.0 announced at SoloCon
- The New Stack coverage
Linkerd failover operator
cr8escape vulnerability in CRI-O
GKE Autopilot vulnerabilities disclosed by Palo Alto Networks
Updated Kubernetes hardening guide (PDF)
KubeCon EU 2022 schedule
- Inside the numbers
CNCF Observability micro-survey
run:AI raises $75m

Links from the interview

Argo Project
Argo (film)
Jason and the Argonauts
Applatix
- Pratik Wadher and Rahul Dhide
Argo Workflows
Applatix acquired by Intuit; Intuit acquired Applatix
- Marianna Tessel
Alex Matyushentsev
The archived Argo CI
Argo CD
Argo Rollouts
GitOps Engine:
- Flux CD
- Argo and Flux joining forces
- First release of the GitOps Engine
- FAQ about why this didn’t work out
Remote vs Core
Argo Events
- Original BlackRock announcement
Argo in the CNCF
Akuity
- The many Aaron Court Motels
App of Apps
ApplicationSets
Join the CNCF Slack
Argo Workflows and CD community meetings
Jesse Suen on Twitter

Parca, with Frederic Branczyk Mar 09, 2022

The fourth horseman of the apocalypse observability, according to Frederic Branczyk, is continuous profiling. Frederic is founder and CEO of Polar Signals and creator of the Parca open source project. He and Craig talk all things Cloud Native observability.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Bad news from Australia:
- Shane Warne died
- National emergency called over flooding
Strange news
- Photoshopped fridge magnets
- Cookery books

News of the week

Links from the interview

Frederic Branczyk
Over-engineering coffee:
- Niche Zero grinder
- Decent Espresso
Prometheus
- Creation at SoundCloud
Observing the Kubernetes stack:
Google-Wide Profiling: A Continuous Profiling Infrastructure for Data Centers
Shades of blue are no joke when they make you $200m
KubeCon EU 2019 Keynote: …What Does the Future Hold for Observability? - Tom Wilkie & Frederic Branczyk
Polar Signals
Parca
- Introducing Parca and getting funded
- Parca on GitHub
Episode 163, with Thomas Dullien
Flame graphs and icicle graphs
PARCA: Program for Arctic Regional Climate Assessment
Pyrra by Matthias Loibl
Frederic Branczyk on Twitter

Kubernetes: The Documentary, with Josiah McGarvie Mar 02, 2022

Six years after its creation, Kubernetes is the subject of its very own documentary film. Job platform Honeypot has released. Josiah McGarvie was Honeypot’s head of video, and the lead filmmaker for Kubernetes: The Documentary. Join us for the director’s commentary.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Sysdig Cloud Native Security and Usage Report, with Anna Belak Feb 23, 2022

Anna Belak learned about containers and security as a Gartner industry analyst. She is now the Director of Thought Leadership at Sysdig, who have just published their latest annual Cloud Native Security and Usage Report. Anna joins Craig to dicuss the report’s findings.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Rancher Desktop, with Matt Farina Feb 16, 2022

We’re back for 2022 with a look at Rancher Desktop, which recently hit 1.0. Its creator, Matt Farina, is today’s guest. Matt is a Distinguished Engineer at SUSE, was a founding chair of Kubernetes SIG Apps, and was recently appointed to the CNCF TOC.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Matt Farina
General Dynamics Land Systems
Drupal
Palintir (not that one)
HP donates patents to support Linux
HP acquires Stackato Cloud Foundry distribution
CNCF Landscape
- Or not
Helm
SIG Apps
Artifact Hub)
- What is the Artifact Hub?
Rancher Labs acquired by SUSE
Episode 57, with Darren Shepherd
Open source from SUSE/Rancher
- Rio
- Longhorn
- Epinio
- Kubewarden
Rancher Desktop
- Announcement
- 1.0 release
Slashes
kube-solo
nerdctl
k3s and k3d
Matt Farina joins the CNCF TOC
Cloud Native Podcast
- Episode 102, with Matt Butcher
Matt Farina on Twitter

Kubernetes 1.23, with Rey Lejano Dec 08, 2021

Learn all about what’s new in today’s Kubernetes 1.23 with its release team lead, Rey Lejano. Rey is a Field Engineer at SUSE/Rancher Labs, and a contributor to the Docs, Release and Security SIGs. Long time listener Adam also drops by to ask Craig what’s been happening with the hiatus.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Links from the interview

Knative 1.0, with Ville Aikas Nov 02, 2021

We celebrate the launch of Knative 1.0 with Ville Aikas, who has been with the project since the beginning. He was also with the Kubernetes team at the beginning, and thus we cannot resist a Pete Best comparison. We also celebrate Jimmy’s last show as our guest host with a rapid-fire Kubernetes quiz.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Jimmy graduates!

Links from the interview

Important programmers from Finland
Paddington Bear
University of Washington
Google Voice
Google Cloud Storage
- Read-after-write consistency
The Fifth Beatle
Knative
- Serving
- Eventing
- Build, which became Tekton Pipelines
Did we market Knative wrong? by Ahmet Alp Balkan
Duck typing
- Rubber duck debugging
- Extending Knative for Fun and Profit, by Matt Moore & Ville Aikas
- Subresources
- Proposal for custom subresources for CRDs
Google Cloud Run
IBM Cloud Code Engine
Knative steering committee and technical oversight committee
Great artists steal
Chainguard
Ville to present at Knative community meetup on November 17
- Craig presented Knative at the Kubernetes Colorado meetup in July 2018
Seattle Kraken
Ville Aikas on Twitter

Engineering Effectiveness and KubeCon NA 2021, with Jasmine James Oct 21, 2021

Jasmine James is an Engineering Manager within the Engineering Effectiveness organization at Twitter, focused on their internal developer experience. She is also the latest co-chair of KubeCon + CloudNativeCon, starting with the North America event last week. Jasmine joins us to talk about being in the same room as other people - up to 3,000 of them - for the first time in a long while.

The cover art for this show is courtesy of the CNCF and licensed under CC-BY.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the last wee while

News of the recent past

Google Cloud Next:
VMworld
- VMware Tanzu Community Edition
- Cartographer for supply chain choreography
KubeCon + CloudNativeCon
Kubernetes documentary trailer

Links from the interview

Atlanta
AT&T
Delta Air Lines
Avoiding the weeds in the Cloud Native Landscape at KubeCon NA 2018
Q&A with Jasmine James, newest KubeCon co-chair
The selection process for KubeCon NA 2021
Upcoming CNCF events
Co-co-chairs:
- Episode 117, with Constance Caramanolis
- Episode 130, with Stephen Augustus
Keynotes of note:
- Three Developer Experience keynotes from Constance, Jasmine, and Robert Duffy
- A Vulnerable Tale about Burnout by Julia Simon
- The Road to Multicluster by Kaslin Fields
Episode 62, with Ricardo Rocha, Lukas Heinrch and Clemens Lange
Interaction wristbands
Horseback riding and fishing
Jasmine James on Twitter

Podman, with Daniel Walsh and Brent Baude Sep 24, 2021

Red Hat maintains a full set of container tools and libraries, bringing their pedigree in security and operating system engineering. The most notable of those tools, Podman, has had a surge in popularity this month, after Docker announced changes in their subscription model. Daniel Walsh leads the Red Hat containers team, and Brent Baude is the architect and primary maintainer of Podman.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Ira Glass in the wardrobe

News of the week

Links from the interview

Dan Walsh
Brent Baude
SELinux
- Stop Disabling SELinux
- SELinux Sandbox
Project Atomic
Red Hat patches for container registry rejected by Docker
Docker client/server model
Red Hat’s container suite:
Open Container Initiative (OCI)
Podman features:
Podman in Podman
Podman in Kubernetes
Builder in a Boston accent
containerd, CRI-O and Docker in Kubernetes
“Podman Desktop”
Daniel Walsh on Twitter
Brent Baude on Twitter

Prodfiler, with Thomas Dullien Sep 17, 2021

Prodfiler is a new tool that provides fleet-wide full-system continuous profiling. It is in some ways the second act of its co-creator Thomas Dullien, who is an internationally-renowned reverse engineer and vulnerability researcher under the name Halvar Flake. Thomas joins us to discuss his career, what you should profile in a distributed system, and why you can’t sell something with a negative cost.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Crossplane moves to incubation in CNCF:
Backup for GKE
Google Cloud Next session catalog is live
- Register here
Kubernetes multi-cluster panel on October 6
GKE updates: publishing with Private Service Connect, CSI driver for Filestore GA, SSL policies & HTTPS redirects for multi-cluster Ingress
Azurescape: attack on Azure Container Instances by Unit 42 at Palo Alto Networks
CVE-2021-25741 for subpath mount symlink attack (High)
CVE-2020-8561 for webhook response logging (Medium)
NCC Group weighs in on NSA guidance
Snyk raises $530m
- Episode 140, with Kamil Potrec
Sqlcommenter merges with OpenTelemetry
Kubermatic 2.18 and KubeOne 1.3
- Episode 109, with Sebastian Scheele
Tanzu Kubernetes Grid 1.4
5 years of Envoy OSS
- Episode 33, with Matt Klein

Links from the interview

Thomas Dullien/Halvar Flake
Mathematik, with a K
Stages of life vs. maths ability required, by Pearls of Raw Nerdism
Vicky the Viking TV show
Assembly Language Masterclass
GEOS copy protection by Michael Stiel
Time travel debugging
“German hacker denied entrance into US for Black Hat training”
Zynamics acquired by Google
- BinDiff
- BinNavi
Project Zero
“For whom?”, asked R Morris Sr.
optimyze.cloud’s original business model
Introducing Prodfiler
Profiling
The Datacenter As A Computer: An Introduction to the Design of Warehouse-Scale Machines
Google-Wide Profiling: A Continuous Profiling Infrastructure for Data Centers
- Dapper, a Large-Scale Distributed Systems Tracing Infrastructure and Jaeger
The mystery of Kubelet eating CPU and IOPS
Fortran Web Framework: it’s not irrelevant, really!
Halvar Flake on Twitter

ingress-nginx, with Alejandro de Brito Fontes and Ricardo Katz Sep 09, 2021

The most popular Ingress controller for Kubernetes is ingress-nginx, created in 2015 by Alejandro de Brito Fontes. Alejandro stepped down earlier this year, and the project is now maintained by a team including Ricardo Katz. Learn the history and what’s in the new 1.0 release from a pair of South American self-proclaimed sysadmins.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

New Zealand cinema worker left red-faced after voicemail blooper
- Uncensored version on TikTok

News of the week

Amazon EKS Anywhere is GA and EKS Connector is in preview
CNI 1.0.1
Red Kubes makes Otomi self-service features free of charge
Scale down mode and custom policy for Microsoft AKS
k8ssandra moves from Helm to operator
API server tracing in Kubernetes 1.22 by David Ashpole
- Episode 113
How Docker Broke In Half, by Scott Carey]
- Episode 156, with Sebastien Pahl
- Episode 110, with Adrian Ionel

Links from the interview

ingress-nginx
Early computing
History of Ingress
ingress-nginx:
- Alejandro’s proposal for ingress-nginx
- Original PR
- Alejandro’s bare metal cluster - then and now
- Ricardo’s early contributions
- Note that NGINX Inc. have their own Ingress controller, for the open source or commercial versions of NGINX
  - Their comparison of the two versions
Supporting open source:
- Alejandro steps down as ingress-nginx maintainer
  - He actually tried earlier, but no-one else stepped up!
- Core Infrastructure Initiative fund for supporting the Internet
- xkcd on internet dependencies
- Episode 116, with Alex Ellis
The future:
Alejandro de Brito Fontes on Twitter
Ricardo Katz on Twitter

Unicron, with Daniel Megyesi Sep 02, 2021

Adevinta is an online classified ads company, operating many local brands. Daniel Megyesi is a DevOps engineer at Adevinta and maintainer of their central big data and Machine Learning platform, Unicron. Learn why they wanted to replace Mesos, how they aligned their engineering efforts to do so, and the choices that had to be made to provide an easy experience for their data engineers.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

April Fools Proxy
Adevinta, the world’s largest online classifieds group after acquiring eBay’s classifieds division
Spark, Mesos, Chronos, AWS EMR
Introducing Unicron, our big data and Machine Learning platform by Daniel Megyesi
- Not the logo
Gardener
GKE Autopilot
Argo CD and Argo Workfloads
Spark Operator and Luigi
1:8 scale model DeLorean
- 1:2 scale model Terminator
Infrastructure Adventures, Daniel’s blog
Daniel Megyesi on LinkedIn

KEDA, with Tom Kerkhove Aug 26, 2021

KEDA, the Kubernetes Event-Driven Autoscaler, is a project that adds superpowers to the Kubernetes horizontal pod autoscaler, including zero-to-one scaling. Celebrate KEDA reaching Incubation in the CNCF by listening to an interview with maintainer Tom Kerkhove from Codit. But first, learn about Craig’s worst concert experience.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

KEDA moves to CNCF Incubation
Kubescape from ARMO Security
GKE adds OIDC identity provider and gVNIC support
Gloo Mesh 1.1
- Istio security announcement
- Envoy security announcement
Cron jobs and timezones in Kubernetes

Links from the interview

KEDA: Kubernetes Event-Driven Autoscaling
Bruges
Codit
Azure Service Fabric
Azure Cloud Services
Horizontal pod autoscaler
- Custom metrics in HPA (added in Kubernetes 1.6)
Promitor: bridge between Azure Monitor and Prometheus
KEDA announcement from Microsoft
Scaling a deployment
Scalers
Microsoft moves KEDA to the CNCF Sandbox
External scalers
KEP for adding scale-to-zero to HPA
Knative scale to zero
CNCF Sandbox announcement
Versions 1.0 and 2.0
Users
KEDA on GitHub
Tom Kerkhove on Twitter and his blog

Talos, with Andrew Rynhard Aug 19, 2021

Kubernetes lets us manage our infrastructure declaratively, so why do we still manage the underlying OS with a myriad of different text files? And why allow shell and SSH access to a machine that should be immutable? So asked Andrew Rynhard before creating Talos, a Linux distribution built for Kubernetes. He’s now CTO of Talos Systems, a company founded to take it to market.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

40 years of the IBM PC
DONKEY.BAS
Commodore 64
- Wheel of Fortune
- Little Computer People
- C64 vs IBM advertising
- 6502 and derivative CPUs: the C64 used a 6510
- Bender

News of the week

Links from the interview

Talos (the OS)
Linux from Scratch
Talos (the robot)
COSI
Comparing k3s to vanilla Kubernetes on Talos
Talos announcement on Reddit and Hacker News
Talos Systems
- Launch blog
Brazilian jiu-jitsu
COSI announcement from KubeCon EU 2021
Andrew Rynhard on Twitter

Telekom (with a K), with Vuk Gojnic Aug 13, 2021

What is a telecommunications provider, if not a very distributed system? Kubernetes is becoming an important engine for the world’s telcos, especially as they roll out 5G. Vuk Gojnic leads the team rolling out Kubernetes across Deutsche Telekom (the parent company of T-Mobile), and he tells us how the worlds of telco and cloud have converged.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

History of Montenegro
- Balkans region
Postal, telegraph and telephone services
Cafe del Montenegro “archeological remains” (archeological remains of original Cafe del Montenegro)
- CdM today
Crnogorski Telekom
Deutsche Telekom
Crossbar switches
O-RAN Software Community and source code
Network function virtualization
Natural selection
Mobile base station
DSLAM
5G
Das blinkenlights
Das Schiff
OpenStack Ironic
mIRC
Vuk Gojnic on Twitter

Kubernetes 1.22, with Savitha Raghunathan Aug 05, 2021

It’s Kubernetes release day! The team that launched v1.22 of everyone’s favourite cluster management software was led by Savitha Raghunathan, Senior Platform Engineer at MathWorks. Savitha joins host Craig Box to talk contribution, containers and cricket.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Chennai Super Kings
- Stephen Fleming; coach, A/C salesman and Yellow Wiggle
Royal Challengers Bangalore
MathWorks
- MATLAB
- Math vs maths? (Doesn’t actually matter; MATLAB is short for Matrix Laboratory)
Savitha’s first contribution
Kubernetes GitHub workflow and pull request guide
Kubernetes 1.22 release announcement
- Release Team
Loki and WandaVision
Enhancements of note:
1.21 release interview with Nabarun Pal
- Do, Delegate and Defer
Release lead for 1.23: Rey Lejano
In memoriam: Peeyush Gupta
- Donate to Peeyush’s Family Education Fund
Coffee art
Amigurumi
- Savitha’s cat
Savitha Raghunathan on Twitter

Opstrace, with Sebastien Pahl Jul 28, 2021

Sebastien Pahl is a pioneer of container technology, building the predecessor to Docker as a co-founder of Dotcloud. After working at some big tech companies, he’s back to the startup life as co-founder of Opstrace, a fully open source observability distribution, built on top of the tools you know and love.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

EPITECH
Solomon Hykes
- Departure blog
Dotcloud
Y Combinator
$10m funding round
Cloudflare
Mesosphere
- HD-DVD and Betamax
Operator Framework/Operator SDK
Opstrace
- Prometheus
- Cortex
- Grafana
- Loki
Grafana relicensing
OpenMetrics and OpenTelemetry
Matter, for smart home devices
Opstrace on GitHub
Sebastien Pahl on Twitter

Software Supply Chain Security, with Priya Wadhwa Jul 23, 2021

The idea of software supply chain security rocketed into the public consciousness in the last year, with the news that US government agencies had been breached. Priya Wadhwa is a software engineer at Google working on open source security, including projects to secure and verify container deployments. She outlines what is being done to make sure this doesn’t happen to you.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Software supply chain
- Know, Prevent, Fix
Reproducible builds
- Debian Project
SolarWinds hack
US Executive Order on Improving the Nation’s Cybersecurity
Binary Authorization
Provenance, in art and software
in-toto
- “Farm to table”
sigstore
- Announcement blog
- cosign
  - Announcement blog
  - Dan Lorenc’s blog
- Connaisseur
- Rekor
- Fulcio
- Key signing ceremony:
Tekton
Tekton Chains
- Announcement blog, by Priya & Dan
SBOM (Software Bill of Materials)
Open Source Insights
SLSA
- Announcement blog
- GitHub
SupplyChainSecurityCon
sigstore Slack channel
Priya Wadhwa on Twitter

Gatekeeper and Policy Controller, with Max Smythe Jul 15, 2021

Gatekeeper is an open source project which lets you enforce policy in a Kubernetes cluster. It’s also the basis for Policy Controller, a hosted and managed version now available for all GKE users. Max Smythe, a senior SWE at Google, is a maintainer of Gatekeeper and the TL of Policy Controller. He joins us to talk constraints, config and Cruise.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Brian May
Edge of Tomorrow
- The redemption thereof
Chubby
Riak
Gatekeeper
Anthos Config Management
- Config Sync
- Policy Controller
Episode 101, with Tim Hinrichs and Torin Sandall
PodSecurityPolicy is not going GA
- SIG Auth’s replacement proposal
- Using ACM constraints to enforce Pod security
OPA Constraint framework
Policy Controller:
- Creating constraints
- Writing a constraint template
Structural schemas
Design Patterns for Extendable, Scalable K8s Extensions by Rita Zhang and Max Smythe
Max Smythe on Twitter

Komodor, with Itiel Shwartz Jul 09, 2021

Debugging Kubernetes often involves correlating what happened just before something went bad. Itiel Shwartz is a co-founder of Komodor, a startup who builds a platform to help with exactly that. We talk Hebrew names, Hungarian dogs and German car crashes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Jimmy Moore steps out from behind the scenes
Conan O’Brien Needs A Friend
Revisionist History
Letterman reads out Johnny’s jokes
Mythic Quest

News of the week

Links from the interview

Komodor
“Itiel” and “ETL”
Rookout
Forter
Ben Ofiri
Komodor team photo
The Komondor (and image search)
Man Who Looks Like His Dog
Jack Tramiel, co-founder of Commodore International
- The story of the name “Commodore”
Man Who Looks Like His Dog
Single bit-flip renders certificate transparency log invalid
$25 million funding with angel investors
Itiel Shwartz and Komodor on Twitter

SRE for Everyone Else, with Steve McGhee Jun 18, 2021

Steve McGhee worked as an SRE at Google for almost 10 years, then took a job outside the company. He was tasked with recreating “Google Production” and SRE practice from first principals, but with three books, modern cloud providers, and the entire Kubernetes ecosystem to help. How did he do? Learn about that which you can and can’t replace.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Dan’s recent work has come up in episodes 136, 142, and 151, to name but a few
- Episode 39, with Dan Lorenc
Tekton CD
Sigstore
Dan’s Peter Jackson look
Sigstore Root Key Ceremony
IANA Key Signing Ceremonies and changes in the time of COVID

News of the week

GKE news:
- New Tau VMs on Google Cloud and GKE
- Committed use discounts for GKE Autopilot
- Cloud Onboard training for GKE with Kaslin Fields, on June 22
Stackrox/Red Hat State of Kubernetes Security blog post and report
etcd 3.5
SLSA: Supply chain Levels for Software Artifacts
Ensemble, by Tesera
Harbor operator 1.0
Weave GitOps Core
- Episodes 144 and 145, with Alexis Richardson
WSO2 launches Choreo and acquires Platformer
KubeCon EU 2021 transparency report
COVID vaccine required to attend fall 2021 Linux Foundation events
Opinions on Knative positioning by Ahmet Alp Balkan
- Episode 66

Links from the interview

LG Chocolate Phone and the Crazy Frog
Good SRE is the inverse of the XKCD comic on Standards
“Breaking Prod: More than once, I personally made it impossible to use google search from a phone (for a little bit). Like, for everyone on the planet.”
San Luis Obispo, California (SLO)
GIFEE, coined at CoreOS
Rebuilding SRE, from Memory
- Ben Treynor Sloss
Homer Simpson’s Car
Postcards from the future and the crystal ball
- It is against the law to have a sleeping donkey in your bathtub after 7pm
- How To Avoid Huge Ships
Prometheus
Canary releases
- Canary deployments with Istio
SLO Math, by Steve McGhee (SLOconf 2021)
The SRE I Aspire To Be, by Yaniv Aknin (SREcon 2019)
- RAID. a Redundant Array of Inexpensive/Independent Disks
Deployment Archetypes for Cloud Applications, by Brad Calder and Anna Berenberg
Steve McGhee on Twitter

Multi-Instance GPUs, with Kevin Klues and Pradeep Venkatachalam Jun 11, 2021

NVIDIA and Google have teamed up to bring the new Multi-Instance GPU feature, launched with the NVIDIA A100, to GKE. We speak to Kevin Klues from NVIDIA and Pradeep Venkatachalam from Google Cloud on how and why people use GPUs, optimising instance shapes for machine learning, and why less is often more.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Episode 92, with Pramod Ramarao
Dogecoin
Training and inference
12 things that prove Doom will run on literally anything
“It runs Doom” subreddit
CUDA
vGPUs
Multi-Instance GPUs
GKE now supports multi-instance GPUs
7 core MacBook Air GPUs
A100 GPU
16 A100 GPUs on a Google Cloud VM
Running GPUs on GKE
- Node taints for scheduling
NVIDIA Container Toolkit
GCP NVIDIA GPU device plugin
Kubernetes NVIDIA device plugin
GTC 2021 talks:
- A Deep Dive on Supporting Multi-Instance GPUs in Containers and Kubernetes by Kevin and Pradeep
- Gain Competitive Advantage using ML Ops: Kubeflow and NVIDIA Merlin and Google Cloud by Andrew Stein and Maulin Patel (Google) and Davide Onofrio (NVIDIA)
Kevin’s KubeCon talk and slides
Kevin Klues on Twitter

Pixie, with Zain Asgar and Ishan Mukherjee May 13, 2021

Pixie Labs built an observabiity platform for Kubernetes, which uses eBPF to get telemetry without user intervention. They were recently acquired by New Relic, who open sourced the Pixie software. Co-founders Zain Asgar and Ishan Mukherjee join Craig Box to tell the story and talk about what’s next. Guest host Alex Ellis tends his garden.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Putting on a KubeCon, with Colleen Mickey May 06, 2021

A small army of community volunteers is necessary to host a KubeCon, but behind them is a professional events team. Colleen Mickey is Director of Event Services at the Linux Foundation and is responsible for KubeCon + CloudNativeCon, as well as other events like Hyperledger Global Forum and cdCon. She talks to us about hosting, feeding and watering 10,000 people, as well as the change to virtual events.

We also bring the round-up of the KubeCon news, including our famous Lightning Round.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

New Relic and Pixie Labs blogs on Pixie being open sourced
- New Relic joins CNCF as a Platinum Member
Red Hat launches the Stackrox community at stackrox.io
- OpenShift GitOps and OpenShift Pipelines
Snyk’s State of Cloud Native Application Security report announcement and results
OCI Distribution Specification reaches 1.0
Prometheus to launch conformance program
New CNCF sandbox projects:
- Vineyard, an in-memory immutable data manager
- WasmEdge Runtime, a WebAssembly Virtual Machine for cloud, AI, and blockchain applications
- ChaosBlade, an open-source version of Alibaba’s chaos tools
- Fluid, a data and storage abstraction for AI and cloud-native applications
- Submariner, a cross-cluster overlay of overlay networks
- Antrea, a Kubernetes CNI plugin
  - Episode 128, with Antonin Bas
CNCF Edge survey results and free Kubernetes on Edge Training
- Episode 116, with Alex Ellis
Inclusive Naming Initiative receives Honorable Mention at Fast Company’s 2021 World Changing Ideas Awards
- ‘Master,’ ‘Slave’ and the Fight Over Offensive Terms in Computing by Kate Conger of the New York Times
- Episode 130, with Stephen Augustus
Spotify wins CNCF Top End User Award
- Episode 50, with David Xia
- Episode 136, with Lee Mills and Matt Clarke.

Lightning round

Links from the interview

Liqo, with Alex Palesandro Apr 30, 2021

Liqo is short for Liquid Computing. It’s a tool for extending Kubernetes onto others clusters, developed at the Polytechnic University of Turin. Research assistant and Liqo co-creator Alex Palesandro is our guest this week.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Alex Palesandro
Politecnico di Torino
Alex’s thesis
Episode 141, with Daniel Mangum
Episode 142, with Gianluca Arbezzano
Fiat and Stellantis
DAUIN, Department of Control and Computer Engineering
- Netgroup
Crown Labs
- Blender
Liqo
Vint Cerf at 6UK launch in 2010
kubefed
Liqo roadmap
Liqo on GitHub
Alex Palesandro on Twitter

Service Level Objectives and Nobl9, with Brian Singer and Kit Merker Apr 23, 2021

Brian Singer co-founded Orbitera, which was acquired by Google in 2016. During that process he met Kit Merker, who was a PM on GKE and the GCP Marketplace, and the two are now working togther on relability engineering startup Nobl9. We talk about migrating Orbitera to GKE and Google’s SRE platform, and how many 9s are too many.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Episode 94, with Richard Belleville
The G in gRPC stands for:
Not grey, just backlit! Much improved here

News of the week

Links from the interview

Kubernetes 1.21, with Nabarun Pal Apr 15, 2021

Celebrate the release of Kubernetes 1.21 with release team lead Nabarun Pal from VMware. Nabarun talks about choosing between “hardware” and software, additions and removals from Kubernetes 1.21, and how the Kubernetes project has become more welcoming to people outside the USA.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Weaveworks (part 2), with Alexis Richardson Apr 08, 2021

We conclude our two-part conversation with Weaveworks co-founder Alexis Richardson, picking up when the company received Series A investment in December 2014. Since then, they built projects like Scope, Cortex and Flux as well as SaaS offerings based on them. We also look at Alexis’s role in the founding of the CNCF.

Please be sure to listen to the first part before this one!

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Educational YouTubers:
Infrastructure for Entertainment by Justin Garrison at KubeCon NA 2020
Episode 20, with Justin Garrison

News of the week

Links from the interview

Weaveworks (part 1), with Alexis Richardson Mar 31, 2021

We’re trying something new!

In Part 1 of a two-part conversation with Weaveworks co-founder Alexis Richardson, we have a wide ranging conversation about career choices, finance, founding and selling tech companies, and the dangers of being pigeon-holed based on the first project your company releases.

Next week we’ll finish the conversation by talking about Weave projects like Flux and Cortex, as well as their SaaS offerings, the founding of the CNCF, and whether Weave built the platform they set out to build when they started 7 years ago.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Replicated, with Grant Miller Mar 24, 2021

Grant Miller is the co-founder and CEO of Replicated, which helps operationalize and scale the delivery of Kubernetes-based apps into the enterprise. We look at what it means to be enterprise software in a SaaS world, and we also get some 2021 predictions from guest host Liz Rice.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Episode 19, with Liz Rice
Episode 133, with Thomas Graf
Cilium talk at DockerCon 2017
Liz’s 2021 predictions from KubeCon NA (Virtual) 2020
Cheese exports are down
Autonomous driving levels
Prince Harry joins a startup
Nick Clegg joins Facebook

News of the week

Links from the interview

SparkPeople
Marc Campbell
look.io acquired by LivePerson
Replicated
Open source from Replicated
EnterpriseReady and the EnterpriseReady Podcast
Kubelist and the Kubelist Podcast
Replicants, replicators and gremlins
Grant Miller and Replicated on Twitter

Tinkerbell, with Gianluca Arbezzano Mar 17, 2021

If you’d like something more tangible than a virtual cloud instance, there’s always (still!) bare metal. Tinkerbell is a project from Equinix Metal to manage bare metal servers at scale, and Gianluca Arbezzano is one of its maintainers. We talk stacks, racks and MACs.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Flux moves to incubation in the CNCF
NetApp Astra goes GA; more information
Fairwinds introduces Saffire
Cosign, by Dan Lorenc
- Episode 39
Komodor beta and swag offer
Announcing Private Clusters on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)
Linkerd 2.10
The Money Section, with thanks to David Pait, guest of Episode 127
- Docker takes $23m in Series “B” funding to get ship done
- Aqua Security takes $135m in Series E at $1b valuation
- Snyk raises $300m in Series E valuing company at $4.7 billion
- Tetrate raises $40m Series B
Is Crossplane the Infrastructure LLVM? by Daniel Mangum
- Episode 141

Links from the interview

PHP. and PHP in 2020
Turin
InfluxData
Episode 91, with Leonardo Di Donato
Dropbox’s exodus from Amazon
Equinix Metal
- Packet acquired by Equinix
Tinkerbell
OpenCompute and Open19
Server terminology:
DIY Board management control for an Intel NUC: power control
Tinkerbell services:
- Tink
- Boots
- OSIE
- Hook
- Hegel
- PB&J
OVH fire
How Tinkerbell Got Its Wings, including joining the CNCF
Tinkerbell community
Episode 136: Backstage, with Lee Mills and Matt Clarke
Gianluca Arbezzano on Twitter and on the web
Tinkerbell on Twitter

Crossplane, with Daniel Mangum Mar 10, 2021

Crossplane lets you automate creation of infrastructure using Kubernetes APIs. Daniel Mangum is a Crossplane maintainer working at its creator Upbound, a TL of Kubernetes SIG Release, and a YouTube streaming star. He chats about tech with host Craig Box, who is helped this week by returning guest Ken Massada from GKE’s Support team.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Security and Snyk, with Kamil Potrec Mar 03, 2021

Kamil Potrec is a Senior Security Engineer at Snyk, working on security around Kubernetes and cloud platforms. He joins the show to discuss how to think about securing your infrastructure, the different arts (and colors) of offensive and defensive security, and what not to lose sleep over.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Offensive unit in American Football
Hand-egg
Red and blue teams
Unreal Tournament
Capture the flag
Kubernetes secrets
- Design document
- Encrypting secrets at the application layer
Antivirus software
Tracer-tee
SolarWinds attack
Reflections on Trusting Trust by Ken Thompson
left-pad deleted from NPM
Snyk Open Source
- The open source parts
Snyk vulnerability database
MITRE CVE database
Kubernetes security at Snyk
Deploy only trusted containers to GKE
Application threat modeling
Kubernetes security best practices, including security context, AppArmor, gVisor etc
CVE-2020-8554: man-in-the-middle attack using ExternalIP services
CVE-2020-14386: packet socket vulnerability with user namespaces enabled
- Earlier related work: CVE-2017-7308 and CVE-2016-8655
- Project Zero writeup
Rewrite it in Rust !
Kamil Potrec on LinkedIn

GKE Autopilot, with Yochay Kiriaty Feb 25, 2021

Today Google Cloud introduced GKE Autopilot, a new mode of operation where you no longer manage or configure nodes, and you pay per-pod, per-second. Craig talks Autopilot with GKE product manager Yochay Kiriaty.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Multi-Cluster Services, with Jeremy Olmsted-Thompson Feb 16, 2021

This week we talk multi-cluster services with Jeremy Olmsted-Thompson, co-chair of the Kubernetes Multicluster SIG, and tech lead on the Google Kubernetes Engine platform team. Guest host Tim Hockin shows us the way.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Istio 1.9
IstioCon 2021 - February 22-26
Mayadata spins out Chaos Native
Cilium Network Policy editor
Kubernetes network policy explained by Dominik Tornow
Trend Micro write-up on container-escaping malware
Dynatrace Cloud Automation and native log support
- Episode 119, with Alois Reitbauer
Shipa 1.2
New GKE, EKS and AKS releases
Tanzu Build Service 1.1
Kubernetes 101 Retrospective by Jeff Geerling
CFP for the eight KubeCon EU pre-days
Designing for SaaS on Kubernetes at Teleport by Virag Mody
Comparing OPA/Gatekeeper and Kyverno by Chip Zoller

Links from the interview

Anthos on VMware
SIG Multicluster
- Federation v2 update
Multi-Cluster Services KEP
- Namespace sameness
- Gateway API (formerly known as Service APIs)
- Istio RFC
Introducing GKE multi-cluster services
- Multi-cluster Ingress
Cluster API
Cluster ID KEP
Jeremy Olmsted-Thompson on Twitter and GitHub

Datadog and the Container Report, with Michael Gerstenhaber Feb 09, 2021

Michael Gerstenhaber is a Director of Product Management at Datadog, and the curator of their annual Container Report. He joins Craig to discuss why they release it, some recent trends, and how it helps people validate their assumptions about technology.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

OPA graduates in the CNCF
- Episode 101, with Tim Hinrichs and Torin Sandall
Docker Distribution donated to the CNCF
Red Hat Quay 3.4 released
- CNCF proposal
Hildegard malware writeup from Unit42
- The original TeamTNT
- Attacking Kubernetes clusters using the Kubelet API by Eduardo Baitello
Jetstack Secure
Traefik
- Using Traefik as an ingress controller with Istio
Kong Konnect is GA
- Kong raises $100M at a $1.4b valuation
Get your KubeCon EU tickets early
Buildpacks vs Dockerfiles by Genevieve L’Esperance
Why Helm never felt like it belonged by Luka Skugor

Links from the interview

iOS and iOS
The Happy Cloud
- Happy Cloud Taps the Cloud to Speed Up Video Game Downloads by Ryan Kim at GigaOM
Datadog
- Live Container monitoring
- Live Process monitoring
Golden signals
Work metrics and resource metrics
Datadog reports:
- Docker adoption
  - 2015
  - 2016
  - 2017
  - 2018
- Container orchestration
  - 2018
- Container Report
  - 2019
  - 2020
KubeCon EU 2019 talk: 10 Ways to Shoot Yourself in the Foot with Kubernetes, #9 Will Surprise You by Laurent Bernaille & Robert Boll
Autopilot: Workload Autoscaling at Google Scale
Snow in NYC
- #17 on the all-time list by inches of snowfall
Michael Gerstenhaber on Twitter

Backstage, with Lee Mills and Matt Clarke Feb 02, 2021

Backstage is a platform for building developer portals, powered by a centralized service catalog. It was built at Spotify and both open sourced and donated to the CNCF in 2020. A Kubernetes plugin was recently added. We talk to maintainers Lee Mills and Matt Clarke from Spotify.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Longhorn 1.1
Vitess 9
Sonobuoy adds reliability scanning
Rapid7 acquires Alcide; Techcrunch reporting
Armo comes out of stealth; VentureBeat reporting
Scaling Kubernetes to 7,500 nodes at OpenAI
Announcing the Linkerd steering committee
The State of Cloud Native Release Orchestration; a report from Vamp
Hunting for malware with Falco
- Episode 39, with Dan Lorenc
Upgrading from Kubernetes 1.11 to 1.18 in a month by Jeff Wolski at WeTransfer
Debugging CrashLoopBackOff by David Giffin from Release
Jeff Brewer has passed
- Intuit CNCF case study

Links from the interview

Siri, Storage and Solutions, with Josh Bernstein Jan 26, 2021

Josh Bernstein has worked at a number of infrastructure roles before recently landing at Google. He talks about migrating Siri from AWS (pre-acqusition) to VMware to Mesos, and Dell EMC’s work building what would become the Container Storage Interface. Guest host Jasmine Jaksic talks with Craig about snowcreatures.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Multi-dimensional pod autoscaling in this week’s GKE release
Hitachi: vacuum cleaners in the 1990s and Kubernetes today
Garnet.ai
kind 0.10
New Google Cloud Run networking features
- Don’t cross the streams
Production Kubernetes from VMware Tanzu.
Serverless for Everyone Else from Alex Ellis
- Episode 116
Chris Aniszczyk’s 2021 predictions
- Episode 134
Priyanka Sharma’s 2021 predictions
- Episode 107
14 LFX interns graduate
Kubernetes honey tokens by Brad Geesaman
Bad pods: privilege escalation by Seth Art
The US Air Force are feeling supersonic

Links from the interview

Apple acquires Siri
Xserve
Siri public introduction
Apple rebuilds Siri backend with Apache Mesos using the J.A.R.V.I.S. framework
Dell EMC
- {code} community
- REX-Ray: announcement and docs
CNCF Governing Board
CI/CD startups to watch:
- Harness
- Armory
- Shipa
Josh Bernstein on Twitter

CNCF and the Linux Foundation, with Chris Aniszcyzk Jan 19, 2021

After building the Eclipse IDE and Twitter’s Open Source office, Chris Aniszcyzk bootstrapped the CNCF, joining its parent the Linux Foundation in 2015. He’s now a VP of DevRel there, as well as CTO at the CNCF and Executive Director of the Open Container Initiative. Chris joins us to share his technology journey and Cloud Native predictions for 2021.

And all that is now And all that is gone And all that’s to come And everything under the sun is in tune But the sun is eclipsed by the moon

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam on LinkedIn

News of the week

Otomi from RedKubes
Nutanix now supports Anthos
Tanzu Advanced is GA
Pivotal Labs is Tanzu Labs
VMware needs a new CEO
New CSI driver for Google Kubernetes Engine
Slim.ai announces seed funding
Grafana Cloud introduces free tier
Sysdig container security usage report (PDF)
63 node Kubernetes cluster using Firecracker by Álvaro Hernández
The definitive guide to Vertical Pod Autoscaling by Povilas Versockas

Links from the interview

ZX Spectrum
- R-Type and Jet Pac
GORILLA.BAS
Gentoo Linux
Java Virtual Machine (JVM)
Eclipse
- Object Technology International
- Erich Gamma
- code9, Chris’s startup
Backstage and Roadie
Twitter OSS
- Pants
- Mesos
- twemproxy
Linux Foundation, and its sub-projects CNCF and OCI
- Services for projects
- Linus Torvalds and Greg Kroah-Hartman
Chris’s Cloud Native predictions for 2021
- Developer experience: Gitpod, GitHub Codespaces or Google Cloud Shell
- Wasm in Envoy
- Wasi, the WebAssembly Systems Interface
Chris Aniszcyzk on Twitter and on the web
- Canada Revenue Agency on Twitter

Cilium, with Thomas Graf Jan 12, 2021

Thomas Graf is the inventor of Cilium and the co-founder of Isovalent. Cilium is a container networking plugin built on top of eBPF, bringing modern SDN technologies to accelerate your pods. Adam and Craig also discuss the many uses of Christmas trees.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Christmas trees:
- Keep clear (mostly)
- Culinary uses
- Discussed in episodes 104 and 111

News of the week

Links from the interview

Akri, with Kate Goldenring Dec 16, 2020

Akri is a recent open source project launched by Microsoft to manage edge devices. Kate Goldenring is a software engineer in Microsoft’s Edge OS team and an Akri maintainer. She joins our final show of 2020 to talk about how to use Kubernetes to manage devices that can’t run Kubernetes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Professor Kris Jordan
Edge Computing
- Edge, computing
Internet of Things
Akri
Announcement blog post
MCU (Microcontroller unit)
Discovery protocols
- ONVIF (Open Network Video Interface Forum)
- udev
- Zeroconf
- OPC UA
TEE (Trusted Execution Environment)
DevicePlugin API and deallocate
#akri on Slack
Akri on GitHub
- Proposals
Moose Protocol
Kate Goldrenring on Twitter

Kubernetes 1.20, with Jeremy Rickard Dec 08, 2020

The final — and raddest — Kubernetes release of 2020 is 1.20. This week, Craig and Adam talk to its release team lead, Jeremy Rickard from VMware. Jeremy talks about migrating to newer Kubernetes versions, sooner or later; what was added, what was deprecated, and what that really means; and what happens when you Google your own nane.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Ready Player Two

News of the week

Links from the interview

KubeCon NA 2020, with Stephen Augustus Nov 18, 2020

Join us for all the news from KubeCon NA 2020, and a conversation with conference co-chair Stephen Augustus. Stephen is a Senior Open Source Engineer on the VMware Tanzu team, a chair of Kubernetes’ SIG Release, and a leader in many other parts of the project, past and present.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

The kākāpō wins Bird of the Year
We’re off for 2 weeks. See you on December 8!

News of the week

Cisco acquires Banzai Cloud
CNCF announces Cloud Native Survey 2020 results
Red Hat: New edge features, industrial AI/ML blueprint and AWS launch
CNCF End User Tech Radar for storage
New End User benefits
Envoy Mobile joins the CNCF
New sandbox projects
- cert-manager
- cdk8s
- Kyverno
- OpenKruise
- Pravega
- SchemaHero
- Tinkerbell
k8ssandra from Datastax
- Episode 98 with Sam Ramji
k0s from Mirantis
Solo.io announces Gloo Mesh Enterprise and rebrands products
- Episode 55, with Idit Levine
Pinniped
Shipa launches Ketch
Kinvolk launches Headlamp
The SPIFFE book “Solving The Bottom Turtle”
- Episode 45, with Andrew Jessup
Anthos Developer Sandbox
GKE ingress features
Ambassador Labs takes in $18m and launches v1.9
Tanzu SQL: Postgres on Kubernetes
Lightning round:
- Accurics extends Terrascan
- AWS adds containers to Lightsail
- Arrikto takes $10m in funding
- Brobridge releases Gravity
- CircleCI runner is GA
- Cloud66 for agencies and multiple database support
- Cloudflare Origin CA cert-manager plugin
- Cloudical Vanillastack
- Cloudify version 5.1
- Codefresh launches GitOps 2.0 features
- Commvault backup-as-a-service
- Diamanti Spektra 3.1 and customer portal
- Dynatrace PurePath 4
- Elastisys Compliant Kubernetes
- The Fairwinds Kubernetes Maturity Model
- Garden takes “seed” funding
- Gremlin adds soundproofing
- Humio Operator
- Instana adds observability tools on Kubernetes
- Intuit runs TurboTax on Kubernetes
- Kioxia announces a new storage offering
- Kubecost adds features for monitoring outside a cluster
- KubeMQ adds automatic network creation
- Kubermatic updates KubeOne to v1.1
- Kubernative SINA
- Kublr 1.19
- Lablup announced Backend.ai 20.09 RC
- Magalix launches KubeAdvisor 2.0
- Mayadata launches Kubera Propel and Kubera Chaos
- Mirantis adds extensions to Lens
- Puppet Labs adds Relay to Puppet Enterprise
- Reblaze announces Curiefense to add WAF to Envoy
- Replicates wants to help you Troubleshoot
- Styra adds new editions to DAS
- Sysdig introduces Kubernetes-native network security (ZTNSK) and partners with IBM Cloud
- TrilioVault for Kubernetes v2.0
- Zerto for Kubernetes
Google Open Source Live Kubernetes

Links from the interview

KubeCon NA 2020
- Episode 117, with Constance Caramanolis
- CNCF Twitch
- SIG Friday: ping Stephen for the current link
Slack
CoreOS
SIG Release
SIG PM (retired)
Kubernetes Enhancement Process
- Receipts process KEP
- Sidecar containers - KEP closed!
- Production readiness review
- Episode 10, with Josh Berkus and Tim Pepper
Release managers
Black Lives Matter announcement banner
- Better announcements
Kubernetes Naming working group
Inclusive Naming project
Dan Kohn memorial
Stephen Augustus on Twitter and on the web

Linkerd, with Thomas Rampelberg Nov 10, 2020

Thomas Rampelberg is a software engineer with Buoyant, creators of Linkerd, and a core maintainer of that project. He is also a co-author of the Service Mesh Interface and co-creator of DC/OS. He joins Craig and Adam to talk about the two former, and pour one out for the latter.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

The BBC on Sean Connery
Noreen Malone on Alex Trebek
Celebrity Jeopardy! highlights from Saturday Night Live
Doomscrolling
Potion Explosion: analog, or digital (Steam, Android, iOS)
KerPlunk!: analog only

News of the week

Links from the interview

D2iQ retires DC/OS
- Kubernetes on Mesos in 2015
The monolith
Buoyant
Linkerd
Finagle
kube-proxy before iptables
Conduit: a new mesh without the JVM, which became Linkerd 2
Linkerd 2-proxy:
- Under the hood of the Linkerd proxy
- Rust
- tokio runtnime and hyper HTTP libraries
- Heartbleed
- CNCF audit
Architecting for Multicluster Kubernetes blog post
Linkerd 2.9
- Service Topology
- Gas station bathrooms
Service Mesh Interface (SMI)
- NGINX Service Mesh
- Flagger
- Kiali
- Spec
Istio WebAssembly support
Kubernetes is a domain-specific database
Tilt and Okteto
Burning Man
Thomas Rampelberg on Twitter

Antrea, with Antonin Bas Nov 03, 2020

For pods to talk to each other in Kubernetes, you need a virtual network. Antonin Bas is a staff engineer at VMware and a maintainer of Project Antrea; a CNI plugin which provides such a network. He talks to Adam and Craig about encapsulation, virtualisation, and 10,000 year old Finnish artifacts.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Over the top Halloween light show
Bird of the Year
Click here to take the Audience Survey: thank you for helping us make a better show for you!

News of the week

Links from the interview

Visual Basic
Professor Nick McKeown, co-founder of Nicira
Barefoot Networks
P4, in the Open Networking Foundation
Software-defined networking
Virtual networking
- VLAN
- VXLAN
The Kubernetes network model
Network plugins:
- Flannel
- Weave Net
- Calico
- Cilium
- kubenet
Antrea
- The Antrea Net
- Antrea, Finland; now Kamennogorsk, Russia
Container Network Interface (CNI)
veth pairs
Open vSwitch (OVS)
NodeIPAM Controller
CNI plugin chaining
Installing Antrea with other CNI plugins
Antrea features:
- Network policy
- IPSEC between nodes
Antrea on GitHub
Antonin Bas on Twitter and GitHub

Pop Punk to Pods, with David Pait Oct 27, 2020

David Pait was a touring musician in pop punk band Sparks The Rescue. Now, he’s an SRE working on Kubernetes at an ad-tech company. How did he get there? And if you’re looking to change careers, how might you? Craig and Adam dig in.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Steam Digital Tabletop Fest
Microsoft Surface (since renamed PixelSense)
Similo
Guess Who?
Click here to take the Audience Survey: thank you for helping us make a better show for you!

News of the week

Cloud Foundry Doubles Down on Kubernetes
Akri, from Microsoft
kube-secret-syncer from Contentful
Grafana Tempo
OpenTelemetry Tracing Spec RC by Morgan McLean
AWS Distro for OpenTelemetry
AWS Load Balancer Controller
Nydus container image service
Robin.io Express, free for life
Verizon Business adds Kubernetes which is powered by Rafay

Links from the interview

Netsertive
Sparks the Rescue
- Vans Warped tour
- David on stage
Munki for Mac software deployment
A considered purchase
Google’s SRE books
eksctl
Velero, fka Heptio Ark
Fixing reuse-values in Helm
Go listen to Hot Mulligan
- Or Taylor Swift, totally up to you
David Pait on Twitter

Research, Steering and Honking, with Bob Killen Oct 20, 2020

Bob Killen is co-chair of Kubernetes’ SIG Contributor Experience and was last week elected to the project’s Steering Committee. He worked in academia for 15 years, latterly working on research projects using Kubernetes, with a focus on computer security. He’s now made the leap to working on Cloud Native full time at Google. Bob joins us to explain why Kubernetes twitter is occasionally full of cartoon geese.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Relive New Zealand’s General Election coverage - 57% of the electorate voted early!
- tl:dr; Jacinda won by a lot
- One NZ electorate had a 421 vote lead on the night
Ballot box in Washington State
Click here to take the Audience Survey: thank you for helping us make a better show for you!

News of the week

Links from the interview

University of Michigan
Little Bobby Tables
- Another Bobby Tables!
2600
Jeff Sica
ARC-TS: Advanced Research Computing — Technology Services
- Great Lakes, the UMich HPC cluster
- Kubernetes the New Research Platform - Lindsey Tulloch, Brock University & Bob Killen, University of Michigan
kube-batch
Volcano
Orchestructure meet-up and Mario Loria
SIG Contributor Experience
- Episode 74, with Jorge Castro
- Episode 100 with Paris Pittman
Kubernetes Steering Committee
HONK
- Untitled Goose Game
- /honk
- Ian Coldwater’s goose-themed talk from KubeCon NA 2019
- honk.ci
- KubeCon NA events:
  - SIG Honk AMA: Ian Coldwater, Duffie Cooley, Brad Geesaman, Rory McCune
  - Having Cloud Native Fun with HonkCTL: Jeff Sica
- SIG Beard: see episode 46, with Aaron Crickenberger
Bob Killen on Twitter

Okteto, with Ramiro Berrelleza Oct 13, 2020

Ramiro Berrelleza is CEO and co-founder of Okteto, a company making developer tools which simplify development on Kubernetes. He joins Adam and Craig to discuss how the open source project and company came about, going through Y Combinator, and the best filling for a Mission burrito.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Survey

Click here to take the Audience Survey. Thank you for helping us make a better show for you!

News of the week

Links from the interview

Okteto
Excitebike
Elasticbox, acquired by CenturyLink
Y Combinator
- Okteto at YC
- W19 demo day
Okteto on GitHub
The name:
El Farolito: cow tongue and Carne Asada
Ramiro Berrelleza on Twitter
Okteto on Twitter

Kubecost, with Webb Brown Oct 06, 2020

When your infrastructure is effectively infinite, you may have to keep an eye on your credit card. Webb Brown started a project that does exactly that - Kubecost, which aims to reduce spend and prevent resource-based outages. He talks to Craig and Adam about the project and the company behind it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Kubecost
Spot instances (AWS) and preemptible VMs (Google Cloud)
DeepMind AI Reduces Google Data Centre Cooling Bill by 40%
Managing your costs on Kubernetes by Karl Stoney at Autotrader
- Episode 52, with Russell Warman and Karl Stoney
FinOps and the FinOps Foundation
Shifting left
Stackwatch
Glacier National Park and Going-to-the-Sun Road
Webb Brown on Twitter

Leader Election, with Mike Danese Sep 29, 2020

Kubernetes makes it easy to run distributed workloads, but how do you make sure that replicas don’t conflict with one another? You elect one as the leader. Mike Danese, chair and TL of Kubernetes SIG Auth, joins a vegan and a carnivore to explain how Kubernetes implements leader election.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

What is a staycation?
What is steak?
- Beefsteak, vegetarian/vegan restaurant
Nachos

News of the week

Chaos Mesh 1.0
Azure news:
- AKS comes to Azure Stack HCI (Preview)
- AKS adds stopping/restarting clusters, Kubernetes 1.19, confidential compute nodes (Preview)
- Bridge to Kubernetes is GA
Istio Steering Committee election results
OpenServiceMesh joins the CNCF Sandbox
Odo 2.0.0 GA
- Odo from Deep Space 9
Determined AI on Kubernetes
Cloud Run for Anthos adds events
KubeAcademy Pro from VMware
KubeCon EU 2020 transparency report
Scholarships for KubeCon NA 2020 are open for application

Links from the interview

Wet labs and dry labs
Threads
- What is the difference between processes and threads?
Mutex or lock
- What is a mutex?
Critical section
Compare-and-swap
Gas station bathroom keys
Futex
Lock server:
- Chubby
- etcd
Optimistic concurrency
Resource versions
Regional clusters in GKE
Leader election
Leader election client in Kubernetes’ client-go
- An example of using it by Carlos Becker
- The new Lease API
Paxos and Raft
Deadlock
Split brain
Mike Danese on Twitter and GitHub

Grafana, with Torkel Ödegaard Sep 22, 2020

Torkel Ödegaard is the creator and project lead of Grafana, and co-founder of Grafana Labs. Learn how Torkel went from modding video games to building a data visualization platform, and co-founding a company that is now offering a complete monitoring service built on Prometheus.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

The 2001 dot-com crash
Rocket Arena mod for Quake 3
Extreme ironing
Tradera
- IT contracting
- The Mythical Man Month
Graphite
Kibana
Grafana
- GitHub
- The history of Grafana UX
Grafana Labs
- Team
Kausal
Cortex
Loki
Crystal Reports
Interesting use cases:
A $50m Series B funding round
Grafana Metrics Enterprise
Recommended reading: Chasm City by Alastair Reynolds
Torkel Ödegaard on Twitter

TiKV, TiDB and PingCAP, with Ed Huang Sep 15, 2020

Ed Huang is co-founder and CTO of PingCAP, creators of the TiDB distributed database and the TiKV key value store. Ed worked on clustering Redis while at Wandou Labs, creating and open-sourcing a tool called Codis. Deciding to focus on this space, he created TiDB and then TiKV, and founded PingCAP. He shares the story behind the projects, bridging the gap between China and the West with open source, and his Desert Island Disc.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Lens 3.6.0
Security groups for Pods on AWS EKS
CNCF End User Technology Radar for Observability
Kotary by CA-GIP
OnePanel and its docs
WebAssembly OCI spec
- Episode 55, with Idit Levine
Red Hat Marketplace by IBM
Stackrox lands $25m in funding
Introducing Nutanix Platform Services by Amit Jain
Confidential Computing on GCP and GKE
New Serverless training course by Alex Ellis
- Episode 116, with Alex Ellis
Jetstack CNI migration notes by Josh Van Leeuwen

Links from the interview

Wandou Labs
Codis clustering for Redis
- twemproxy
Spanner and F1 papers from Google Research
TiDB
TiKV
PingCAP
- CAP theorem
Local Persistent Volumes in Kubernetes and beta launch blog explaining it
TiKV’s CNCF journey:
Chaos Mesh
Wasm and Wasmer
Dark Side of the Moon
Ed Huang on Twitter

Airbnb, with Melanie Cebula Sep 08, 2020

Melanie Cebula is a staff engineer at Airbnb, where she has built a scalable modern architecture on top of cloud native technologies. She regularly shares her knowledge in presentations focusing on cloud efficiency and usability, and today shares the story of Airbnb’s Kubernetes migration with hosts Adam and Craig.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Five days of Kubernetes 1.19:
TiKV graduates from CNCF incubation
cert-manager 1.0
Episode 75, with James Munnelly
Tanzu Build Service is GA
State of Spring report
AWS Bottlerocket is GA on EKS
Kalm (keep Kalm and karry on)
- Developer thread on Reddit
CRAFT from Salesforce (and its GitHub repo)
Introducing Kubernetes CSI sidecar containers from HPE by long-time listener Michael “Data” Mattsson
KubeCon EU Virtual YouTube playlist
CNCF to provide another round of CommunityBridge mentorships
Faster services: no CPU limits by Eric Khun
- Hacker News thread
How GoJek upgrades Kubernetes on GKE by Tasdik Rahman

Links from the interview

Keptn, with Alois Reitbauer Sep 02, 2020

Keptn, a control plane for continuous delivery, came out of the need to install Dynatrace’s software at their customer’s environments. Alois Reitbauer is Chief Technical Strategist at Dynatrace, reponsible for open source, and a co-chair of the CNCF App Delivery SIG. He talks to your hosts about Keptn, observability after deployment, and how owning a 40 year old sports car is more “curation” than “operation”.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Loved: Thinking, Fast and Slow
Unloved: a pile of Sex and the City

News of the week

Anthos Attached Clusters
New Anthos pricing
GKE on The Keyword
Cloudian introduces operator
Canonical introduces Kubernetes 1.19
Portainer CE 2.0
Kuberntes client comparison by Yolan Vloeberghs and Pieter Vincken
Distributed tracing overview by Jonathan Gold

Links from the interview

Dynatrace
OpenTelemetry
OpenMetrics
Keptn
- What it is, how it works, and how to get started
Blogs by Alois:
Micro operations — A new operations model for the micro services age
How your delivery pipeline will become your next big legacy-code challenge
Related CI/CD tools:
- Spinnaker
- Jenkins
- Argo
- Flux
- GitLab
CD Foundation SIG Interoperability
CNCF SIG App Delivery
Alois’s car marque of choice
Alois Reitbauer on Twitter

Kubernetes 1.19, with Taylor Dolezal Aug 25, 2020

Taylor Dolezal is a senior Developer Advocate at Hashicorp and the Kubernetes 1.19 release lead. His desire to give talks and join the CNCF Ambassadors led him to the release team and to his new job. He talks to Adam and Craig about how a TI-83 calculator started him on the path.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubernetes 1.19 release - deferred 24 hours
Istio 1.7 release!
New Istio Steering Committee charter
k3s to join the CNCF Sandbox
New networking features in GKE
Anthos announcements from Google Cloud Next
Google Cloud Code updates
Serverless Framework Knative component
VMware vRealize Operations 8.2
Moving forward from Beta in Kubernetes
Palinurus, from Mailchannels
What’s new in Falco 0.25
AWS Controllers for Kubernetes
- GCP Config Connector
Carvel
Operator SDK reaches 1.0
Thanos and Cortex are both incubating in the CNCF
The Kubernetes Handbook by Farhan Hasin Chowdhury

Links from the interview

Communication and KubeCon, with Constance Caramanolis Aug 18, 2020

Constance Caramanolis is the co-chair of this week’s virtual KubeCon EU, and a principal software engineer at Splunk. Her introduction to Cloud Native came as an Envoy maintainer working at Lyft; she talks to Craig and Adam about communication: techmical, programmatic, in-person and online. We also summarise all the news from KubeCon.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Envoy
Omnition, acquired by Splunk
Splunk acquires Omnition
OpenTelemetry
- Collector
Constance’s talks:
KubeCon NA 2018: Envoy Intro (with Matt Klein)
Velocity 2018: Leveraging Envoy when responding to high-severity incidents
SYN-ACK
Constance’s KubeCon EU keynote
The Five Whys
KubeCon EU agenda
KubeCon NA 2019 puppies
Corgis
Invite a llama
Episode 80, with Vicki Cheung
Greek food:
- Galaktoboureko
- Loukoumades
Stroopwafels
Poutine
Constance Caramanolis on Twitter

Independent Open Source, with Alex Ellis Aug 11, 2020

Alex Ellis created serverless framework OpenFaaS while working a day job. It’s used by some big companies, but he’s resisted the temptation to join one. Instead, he’s offering consulting and seeking sponsorships, building a business from the ground up. He explains the pros and cons of independence to Craig and Adam.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Minikube Redux, with Thomas Strömberg Aug 04, 2020

Since we last spoke about Minikube 18 months ago, the project has gone 1.0, and made large performance and usability improvements. Thomas Strömberg is the manager of the Container DevEx team at Google and a maintainer of Minikube. He talks to Craig and Adam about why system administrators are the best code reviewers, the importance of surveying users, and building bikes made of bamboo.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

OpenSSF launched
Nova from Fairwinds: monitor Helm charts for new releases
Lifebelt by Gustav Westling
Chaos Mesh joins the CNCF Sandbox
As does the Serverless Workflow spec
Announcing Vitess 7
Spinnaker Operator is GA
AKS 2020-07-27 release
GKE r25
Server side encryption for ECR
Project report: Jaeger
- Episode 97 with Yuri Shkuro
How Dropbox migrated from NGINX to Envoy by Alexey Ivanov and Oleg Guba

Links from the interview

Thomas Strömberg
Minikube
Episode 39, with Dan Lorenc
DiRT: Disaster Recovery Testing
- Wheel of Misfortune
Timex Sinclair ZX81
Bringing Minikube to the next Billion Users: Thomas’s talk at KubeCon China 2019
The mini Minikube Survey
Other similar tools:
- Microk8s
- k3d
- kind
Knoppix
Pausing Minikube
Running multiple nodes
Triage Party
Slow Jam
- Space Jam
Bamboo bicycles
- A finished example
- A work in progress
Thomas Strömberg on Twitter

Scheduling, with David Oppenheimer Jul 28, 2020

We finally scheduled some time to talk to David Oppenheimer. David, a software engininer at Google, has been working on scheduling there since 2007, including on both Borg and Omega. That experience naturally led to him working on the Kubernetes scheduler, as well as starting SIG Scheduling.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Last week’s discussion about ice cream pies
Vegemite ice cream, and a friendly reminder that New Zealand is not Australia
- Mutton ice cream is not a thing
A bear in the kiddie pool

News of the week

Google Traffic Director supports proxyless gRPC
New Relic open sources its agents
Lyft drops the Clutch
Conftest joins the Open Policy Agent project
Emissary, from GitHub
VS Code Docker extension can now run containers in Azure Container Instances
Debugging Incidents in Google’s Distributed Systems by Beth Cooper and Charisma Chan
Hashicorp Consul Service on Azure is GA
Gloo Federation for gloo’ing your Gloos together with gloo
The AWS EKS CIS ben chm ark
Changes to Aqua Wave and Aqua Enterprise
Snyk’s developer-first prioritization capabilities
Carbonetes launch PR
Prevasio launch PR
DOMA: domain-oriented microservices architecture at Uber by Adam Gluck

Links from the interview

Papers co-written by David:
- Large-scale cluster management at Google with Borg
- Borg, Omega and Kubernetes
SIG Scheduling
WG Multi-Tenancy
App Engine
Interviews with David’s colleagues on Borg and Omega:
Omega features:
Scheduler features
Two level scheduling
- Mesos optimistic offers
Kubernetes scheduler in Bash
Firmament and integration in Kubernetes via Poseidon
Configuration tools
- kpt
- kustomize
David Oppenheimer on Twitter

Instrumentation and cAdvisor, with David Ashpole Jul 21, 2020

Released on the same day as Kubernetes, cadvisor is a container monitoring daemon that collects metrics and serves them to monitoring tools. It’s built into the Kubelet, and underpins many components in Kubernetes, such as eviction and autoscaling. David Ashpole of Google Cloud is TL of Kubernetes SIG Instrumentation, and the maintainer of cadvisor; he joins Adam and Craig this week to explain where instrumentation fits in the stack, and what you should do as a Kubernetes maintainer vs. a cluster administrator.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

In Craig’s neighbourhood:
Masks
- Archie the Mammoth
National Ice Cream Day
- Carmel
- Caramel

News of the week

GKE Ingress features:
- BackendConfig CRD
- Cloud CDN
- Backend service timeout
- Connection draining timeout
- HTTP access logging
- Identity-Aware Proxy (IAP)
- Session affinity
- User-defined request headers
- Cloud Armor security policies (Beta)
- FrontendConfig CRD (Beta)
- Custom GCLB health checks (Beta)
- SSL policies (Beta)
Exposing services on GKE
OpenShift 4.5
- OKD4
Spring Cloud Data Flow for Kubernetes from VMware; part of the Spring Runtime package
k8spin.cloud is closing and making their code open source
- Review of k8spin from launch
Custom Pod Autoscaler (and docs) by Jamie Thompson
Envoy 1.15 round-up from Tetrate; release notes from the team
Fluent Bit 1.5 summary at the CNCF
k3d v3.0 and new web site
Best practices for creating a highly available GKE cluster
Recommended alerts for AKS
Ingress support added to AWS App Mesh
Platform9 adds new apps to their Managed Kubernetes Service
- Episode 88, with Madhura Maskasky
CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
CVE-2020-8559: Privilege escalation from compromised node to cluster
- Alcide write-up
Threat Alert: Attacker Building Malicious Images Directly on Your Host from Aqua Security
Certified Kubernetes Security Specialist (CKS) coming in November
Sign up for a free pass to Virtual KubeCon EU keynotes
Diving Into Istio 1.6 Certificate Rotation by Christian Posta

Links from the interview

Open Source and the Open Usage Commons, with Chris DiBona Jul 15, 2020

An open source license grants rights on copyright and patents, but not trademarks. Chris DiBona has some ideas on how to address that. He has spent his career in open source, including over 15 years running Google’s Open Source Programs Office, and is one of the directors of the new Open Usage Commons. It launched last week with three projects - Angular, Gerrit and Istio - transferring their trademarks. Chris joins Adam and Craig to talk about Google’s work in open source, and why a new organisation is needed.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

SUSE to acquire Rancher
- Episode 57, with Darren Shepherd
Open Usage Commons:
Operator Framework and Contour accepted into the CNCF
BigQuery Omni
Kubernetes has caught up with YARN according to Datamechanics
Kubernetes networking: why is this so dang hard? by Tim Hockin
- Episode 41
Announcing Kustomize support for Pulumi
Cinderella clusters from Soluble
Google’s Anthos comes to HPE Greenlake
AWS:
AKS adds console RBAC and policy integration
Kublr adds in-place upgrades and external clusters
D2iQ want to teach you

Links from the interview

Scalability, with Wojciech Tyczynski Jul 07, 2020

Before Kubernetes was launched, it could have at most 25 nodes in a cluster. At 1.0, the target was 100. Meanwhile, Borg, Omega and Mesos were all running away at 10,000. What did it take to get Kubernetes to this number, and above? SIG Scalability and GKE Tech Lead Wojciech Tyczynski tells us.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Follow-up:
- Chairs, from Episode 107
- Christmas trees, from Episode 104
- Kids music

News of the week

Links from the interview

Omega
- Episode 43, with Brian Grant
Defining scalability
Original SLOs
- API-responsiveness: 99% of all our API calls return in less than 1 second
- Pod startup time: 99% of pods (with pre-pulled images) start within 5 seconds
Target SLO doc - 25 nodes
Borg - ~10,000 nodes
Sep 2015, Kubernetes 1.0 - 100 nodes
- “Kubernetes Has A Ways To Go To Scale Like Google, Mesos” by Timothy Prickett Morgan
March 2016, Kubernetes 1.2 - 1,000 nodes
July 2016, Kubernetes 1.3 - 2,000 nodes
- Work by Clayton Coleman, guest of Episode 85
March 2017, Kubernetes 1.6 - 5000 nodes
etcd v3 improvements for web scale
Scalability Envelope
Today’s scalability numbers
EndpointSlices
- Episode 104, with Bowei Du
JD.com’s 10,000 node clusters
Alibaba’s 10,000 node clusters
- Episode 95, with Xiang Li
Google’s 15,000 node GKE clusters
Twitter session at the upcoming Google Cloud Next by Reza Motamedi and Maciek Różacki
Poseidon and Firmament
Wojciech Tyczynski:
- GitHub
- LinkedIn

Mirantis, with Adrian Ionel Jul 01, 2020

Over the past 20 years, Mirantis has grown from an outsourcing company for semiconductor engineers to a product company that is the new home of Docker Enterprise. Past and present CEO and “co-founder” Adrian Ionel oversaw Mirantis’s adoption of OpenStack and purchase of Docker’s enterprise business, and he joins the show to discuss them both.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

New CNCF projects:
jFrog ChartCenter
KubeCon “EU” schedule
Gloo 1.4
- Episode 55 with Idit Levine
Frigate by Jacob Tomlinson
Checkov by Bridgecrew
Contour 1.6
ACI and Docker integration now public
gRPC-Web for .NET now GA
- Episode 94, with Richard Belleville
HP Ezmeral
Codefresh raises $27m

Links from the interview

Kubermatic, with Sebastian Scheele Jun 24, 2020

Last week Loodse, the makers of the Kubermatic Kubernetes Platform, made that platform open source, and rebranded their company to match. Co-founder Sebastian Scheele joins us to explain how the company and platform came about, why they’ve made their changes, and what exactly a Loodse was anyway.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubermatic 2.14 now Open Source
HashiCorp Cloud Platform and new versions of Nomad, Terraform and Consul
Flagger 1.0
OpenMatch 1.0
Harbor graduates at the CNCF
SPIFFE and SPIRE move to incubation level
- CNCF post
GKE goes to 15,000 nodes with Bayer Crop Science
Tsunami: extensible network scanning from Google
AWS App Mesh controller for Kubernetes is GA
Dell announces PowerScale storage
Gocker: a mini Docker written in Go by Shuveb Hussain
The Kubernetes Goat by Madhu Akula
Storpool and Sardina launching Kubernetes-as-a-Service
Kubernetes website adopts Docsy
Getting started with Oracle 18c on Kubernetes by Ron Ekins

Links from the interview

Kubermatic (f.k.a. Loodse)
SAP HANA
Julian Hansert
Hamburg and Munich Kubernetes meetups
ContainerDays
Kubermatic Kubernetes Platform
SAP Gardener
Leibnitz
KubeOne
Loodse rebrands to Kubermatic
Kubermatic Kubernetes Platform on GitHub
Sebastian Scheele on Twitter

The Financial Times, with Sarah Wells and Dimitar Terziev Jun 17, 2020

Two years ago, Sarah Wells from the Financial Times gave a KubeCon EU keynote about how the company moved from monolith to microservices, and how her Content and Metadata platform team moved to Kubernetes specifically. She joins hosts Adam and Craig to recap that migration, and what life has been like since. As Sarah has moved to a broader role in charge of all observability for The FT, she also invited Dimitar Terziev, the current platform lead for the CM team, to the conversation.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

kube2hadoop from LinkedIn
Kubera from Mayadata
- Episode 56, with Evan Powell
Linkerd 2.8
- Multi-cluster with Ambassador
Consul 1.8
Intro to Istio Ingress from Banzai Cloud
Cloudflow 2.0.0
- Not the shoe
Google internships go virtual to help Open Source
Introducing the CNCF Technology Radar
CNCF SIG Observability
- Episode 37, with Richard Hartmann
Loft (and Reddit thread)
Jib 2.4 announcement and Jib extensions
Zerto for Kubernetes
AKS 2020-06-08 adds node image upgrade and application gateway ingress controller
Cloudera Data Platform for Private Clouds
Cloudbees introduces DoD compliant CI, now with a CtF to deploy into an environment with an ATO, which meets DISA STIG and NIST RMF security guidelines
- Episode 44, with Tracy Miranda
Microsoft discovers cryptojacking in Kubeflow clusters on Azure
Gokul Chandra writes up Anthos

Links from the interview

Financial Times
- The pink pages
- Subscriber stats
Coronavirus coverage
FT Crossword
KubeCon EU 2018 keynote: “Switching Horses Midstream: The Challenges of Migrating 150+ Microservices to Kubernetes” by Sarah Wells
- Schedule
- Video
- Slides
Monzo microservices graph
CoreOS Fleet
Innovation tokens: Choose Boring Technology by Dan McKinley
Dashing from Shopify
Sarah and Dimitar on Twitter

CNCF: Under New Management, with Priyanka Sharma Jun 10, 2020

After 5 years at the helm of the CNCF, executive director Dan Kohn is stepping down to launch a new Public Health initiative. The new General Manager of the CNCF is Priyanka Sharma, who joins our show today. Priyanka tells Craig and Adam what to expect, talks about virtual events, and gives some hints on how to rename projects.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Frog Leap Studios
- Tubthumping (originally by Chumbawamba)
- Hello (originally by Adele)

News of the week

Links from the interview

Lightstep
OpenTracing
- Episode 97, with Yuri Shkuro
GitLab
- Sid Sijbrandij
CNCF
Events:
CNCF Technical Oversight Committee
- Charter
- Members
CNCF Projects
Other projects: Ollie
Priyanka Sharma on Twitter

CoreDNS, with John Belamaric Jun 02, 2020

In a world where pods (and IP addresses) come and go, DNS is a critical component. John Belamaric is a Senior SWE at Google, a co-chair of Kubernetes SIG Architecture, a Core Maintainer of the CoreDNS project and author of the O’Reilly Media book Learning CoreDNS: Configuring DNS for Cloud Native Environments. He joins Craig and Adam to discuss CoreDNS, the evolution of DNS in Kubernetes, and how name resolution has been made more reliable in recent releases.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Priyanka Sharma replaces Dan Kohn at the CNCF
- Episode 35, with Dan Kohn
Starboard, by Aqua Security
- Episode 19, with Liz Rice
Docker Enterprise 3.1 from Mirantis
Docker and Microsoft; Microsoft and Docker
Velero v1.4
Agones v1.6
- Episode 26, with Mark Mandel and Cyril Tovena
Chef adds Windows container migration for GKE
Red Hat adds Quarkus to Red Hat Runtimes
AWS encrypts Fargate ephemeral disks in v1.4
PlanetScale open sources a Vitess operator
- Episode 81, with Jiten Vaidya and Sugu Sougoumarane
Kubernetes provider for Hashicorp Terraform
Google Vulnerability Reporting Program adds GKE
Tools for debugging apps on Google Kubernetes Engine by Charles Baer and Xiang Shen
How Migrate for Anthos helps modernize Java apps
Helm project journey report
- Episode 102, with Matt Butcher
- Helm 3: the Good, the Bad and the Ugly by Sandor Guba of BanzaiCloud
NIST deployment guidelines for proxy-based Service Mesh by Ramaswamy Chandramouli of NIST and Zack Butcher of Tetrate
The World of kubectl Plugins: a YouTube series by Ahmet Alp Balkan
- Episode 66, with Ahmet Alp Balkan and Luk Burchard

Links from the interview

Domain Name System
Infoblox
Kubernetes Service
- DNS for Serivices and Pods
- Customizing DNS for Kubernetes
CoreDNS; the default DNS server for Kubernetes since 1.11
- Introduction slides
- KEP for CoreDNS in Kubernetes
SkyDNS
Miek Gieben; author of CoreDNS and SkyDNS version 2
Caddy: the HTTP server upon which CoreDNS is based
Dnsmasq
CoreDNS plugins
Node Local DNS cache and KEP
BIND
Unbound DNS resolver
Explanatory blog posts:
- Understanding ndots in Kubernetes
- Racy conntrack and DNS lookup timeouts
Learning CoreDNS: Configuring DNS for Cloud Native Environments by John Belamaric and Cricket Liu
- Cricket Liu and his books
- Book cover: a Comber fish
Policy integration
SIG Architecture
- Production Readiness Review and KEP
A DNS haiku
John Belamaric on Twitter

Cloud Foundry, with Chip Childers May 26, 2020

Over the last 10 years, Cloud Foundry has grown from “open Heroku clone” to “software used at your bank”. The Cloud Foundry Foundation and the CNCF launched within a few months of each other in 2015, and the two worlds are now colliding as Cloud Foundry replatforms on top of Kubernetes. Our guest this week is the Executive Director of the Cloud Foundry Foundation, Chip Childers. He talks to Adam and Craig about foundations, the boredom of infrastructure, and the cost of every line of code you write.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Memorial Day
Spring Bank Holiday
Sundar Day
Cracking the Cryptic: Sudoku solving and more
- 4 million views
- Craig’s favourite: watch Simon’s excitement
- Guardian article
cheat3: Lego puzzle boxes

News of the week

Istio 1.6 released
- Multiple control planes
- WorkloadEntry
Azure Arc for Kubernetes now in preview
New AKS features
GKE introduces Container Threat Detection in Beta
TriggerMesh makes EveryBridge available to EveryOne in Preview
Introducing KES from MinIO
Updates to StackRox Kubernetes security platform
OPA survey results
Styra DAS adds microservices authorization
- Episode 101, with Tim Hinrichs and Torin Sandall
Rancher Academy
Understanding Anthos on Bare Metal from Google Cloud
Snyk partners with Docker and Docker partners with Snyk
Kubernetes Apply vs. Replace vs. Patch by David Dooling from Atomist

Links from the interview

DMTF and DTMF
- 17 year old kids asked to use a rotary phone
Apache CloudStack
- Wikipedia, with history
Apache Software Foundation
- Officers and Project VPs
Cloud Foundry
Boeing B-29 plane
Pivotal Software
Linux Foundation Collaborative Projects
Open Container Initiative
April 2020: Chip Childers, CFF CTO, becomes Executive Director
Episode 98, with Sam Ramji (the founding CEO/Executive Director of the CFF)
Project Eirini: announced by IBM in April 2019
Old architecture: Diego and Garden
KubeCF
- Created at SUSE
- GitHub
cf-for-k8s
- GitHub
Chip Childers on Twitter

Ingress and the Service APIs, with Bowei Du May 20, 2020

SIG Network is completely rethinking the way you define groupings of applications (Service) and get traffic sent to them (Ingress) by building the Service APIs, a new set of primitives which are better suited to how different groups of users interact with them. Bowei Du is a Tech Lead on GKE and a member of SIG Network who is leading the design and implementation of these new APIs, as well as working on getting Ingress to GA in Kubernetes 1.19.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Bowei’s PhD:
- CAP theorem
- TIER project: Technologies and Infrastructure for Emerging Regions
- Delay-tolerant networking (DTN)
Service
EndpointSlices
- Coming to Istio and Knative
Health checks:
- Liveness and readiness at pod level
- Pod Ready++
Ingress
cert-manager
ingress-nginx
TLS is only on port 443
2018 Ingress survey
Conformance profile
Episode 41, with Tim Hockin
Ingress moving to GA in 1.19
Service APIs
- Evolving the Kubernetes Ingress API to GA and beyond by Bowei and Christopher Luciano from IBM
- A sketch of the API
- GatewayClass and StorageClass
- KEP for adding L4
Multi-Cluster Services API proposal
Bowei Du on Twitter

CSI: Storage, with Saad Ali May 12, 2020

More gripping than a crime scene in Las Vegas, the Container Storage Interface (CSI) lets vendors interface with Kubernetes. Saad Ali from Google led development of Kubernetes storage, including the CSI and volume subsystem. He joins hosts Adam and Craig for an in-depth look at how storage works in Kubernetes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam’s puzzle
How they made The Mandalorian
- Unreal Engine: Project Spotlight
Fraggle Rock: Rock On!
Lockdown music videos:
- Crowded House: Something So Strong
- Mostar Diving Club: Quiet Hands

News of the week

IBM Cloud Satellite
Google Cloud Buildpacks
Anthos for app modernisation via CI/CD and transforming legacy Java applications
Azure Container Registry adds dedicated data endpoints
Amazon ECR: multi-architecture containers
Amazon Cloudwatch adds Prometheus metrics
run:AI creates fractional GPU sharing for Kubernetes
The State of Cloud Native Development: CNCF survey (PDF)
VMware’s State of Kubernetes 2020 (PDF)
Gatekeeper Policy Management from SIGHUP
- Episode 101, with Tim Hinrichs and Torin Sandall
Datastax Astra on GCP and Sam Ramji’s blog
- Episode 98 with Sam Ramji
Introducing PodTopologySpread by Aldo Culquicondor and Wei Huang
Pod Security Policies at Square by Jason Price
Introduction to OpenTelemetry by Ran Ribenzaft
- Episode 97, with Yuri Shkuro
Kubernetes and Istio on the F-16 jet: CNCF case study
GKE logging introduction by Charles Baer and Xiang Shen
Helm and Kustomize, better together
- Helm, with Matt Butcher
- Kustomize, with Phillip Wittrock

Links from the interview

Helm, with Matt Butcher May 05, 2020

In celebration of Helm graduating to a top-level CNCF project, Adam and Craig. talk to its creator and primary architect, Matt Butcher of the Deis Labs team at Microsoft Azure.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam talks about these baby wipes
Craig talks about these baby wipes

News of the week

Links from the interview

Matt Butcher
- Doctor of Philosphy
- Why One Philosopher Left Academia
Celebrating Helm’s graduation
Helm
- A floppy disk
History of Helm
- Introducing Helm
- Why Kubernetes Needs Helm
Deis
- In 2016
The Illustrated Childrens Guide to Kubernetes
k8splace
Deployment Manager for Kubernetes
Skippbox
Bitnami
Helm 3 transition by Matt Fisher
Upgrading from Windows 1.0 to 8.0
Helm charts and Helm Hub
TUF and in-toto
Is there a Helm and Operators showdown?
- Operators blog by Brandon Philips
First Helm Summit
Episode 43, with Brian Grant
Swag
- Helm coffee cup
- Deis socks
- Printed copy of The Illustrated Childrens Guide
- Deis gift satchel
- Tide pen
Deis acquired by Microsoft, 3 years ago
CNAB, Brigade and Krustlet
Techne and Sophia
Matt Butcher on Twitter

Open Policy Agent, with Tim Hinrichs and Torin Sandall Apr 28, 2020

Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

The cupboard was bare
Marmite is not a satisfactory substitute for baking yeast
4D jigsaw puzzles (or a picture, if not for sale in your location)

News of the week

Anthos for AWS is now Generally Available
- TechCrunch coverage
Eurosys ‘20:
Cloud Foundry becomes more Kubernetes-native with cf-for-k8s
Paketo Buildpacks
- Everything you need to know about them
- How they fit into the Cloud Native landscape
Changes to Kubernetes release cycles for 2020
Aqua Security announces Dynamic Threat Analysis
RHEL 8.2 adds new container tools
Red Hat product life cycle changes
Flatcar Linux now supported on VSphere
- Episode 79 with Chris Kühl
sKan from Alcide
kubeletctl from CyberArk
xls-kubectl by Daniele Polencic of Learnk8s
Microsoft’s new reverse proxy
- YARP
Running decades-old games in containers by Misha Brukman
TorchServe and TorchElastic for Kubernetes by Facebook and AWS
- Controller code
Project Astra from NetApp
- Launch video
Styra adds mutating webhooks to Declarative Authorization Service
Simulating clock skew by PingCAP

Links from the interview

Open Policy Agent
Styra
Episode 42 with John Murray
Plate smashing
OASIS XACML
- OPA is… “easier”
The origin of Open Policy Agent and Rego
Founded in 2015: first commit
Donated to the CNCF Sandbox in 2018 and moved to incubation in 2019
Rego configuration language
Running as a Go API
Bundles
Admission controllers in Kubernetes
Existing Kubernetes policies
- NetworkPolicy
- LimitRange
OPA Gatekeeper: Policy and Governance for Kubernetes
OPA and WebAssembly
Hooli examples
Tim Hinrichs and Torin Sandall on Twitter

Kubernetes Community Redux, with Paris Pittman Apr 21, 2020

To celebrate our 100th episode we welcome back our first ever guest, Paris Pittman, open source program manager at Google Cloud and member of the Kubernetes steering committee - among many other roles. Along with hosts Adam and Craig, Paris looks at how the community has changed and how it has stayed the same, and how other projects are able to adopt learnings from Kubernetes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

100 episodes!
- Our introductory blog
- Our introductory KubeCon keynote

News of the week

New Tanzu announcements
Surge upgrades for GKE
Spot and system/user node pools on Azure Kubernetes Service
Portworx Essentials
OpenShift Container Storage 4.3
Magicpak by Hiromi Ogawa
Pluto from Fairwinds
Trow featured in the New Stack
Using Apache SkyWalking to fix the blind spot of distributed tracing
Lyft takes Envoy Mobile to production
gRPC and Kotlin
- Episode 94 with Richard Belleville
Gloo 1.3
Envoy Wasm filters at Banzai Cloud
faasd by Alex Ellis
Kubernetes Fury Distribution 1.1
NeuVector adds Vulnerability and Compliance Explorer
Infra.app adds Linux support
Node Local DNS cache by Povilas Versockas
Cheeky Monkey by Rich Stokes
Anthos: Under The Hood by the Google Cloud Developer Advocacy team
Kubernetes Operators by Jason Dobies and Joshua Wood of Red Hat
Cloud Foundry Platform Certification includes Kubernetes
Announcing the Kubernetes Contributor Communications team
- How to join
Lachlan Evenson joins the Kubernetes steering committee
CFP opens for KubeCon US
Fluentd project journey report
Seven CNCF interns graduate the CommunityBridge program with more to come

Links from the interview

kpt, with Morten Torkildsen Apr 14, 2020

kpt (“kept”) is a new open-source tool for Kubernetes packaging built by Google Cloud. Morten Torkildsen is an engineer at Google, focusing on configuration management and the workloads APIs, and he worked on Kpt. He explains it to Adam, while Craig fills his mind with penguins.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

The Easter Bunny is an Essential Worker in New Zealand
- From the archives: Dragon research (discussed in Episode 53)
Keepers are letting the penguins run loose at Oregon Zoo
- Visiting the Beluga Whale at Shedd Aquarium

News of the week

CNCF projects:
- Volcano joins the Sandbox
- Dragonfly moves to incubation
- Argo moves to incubation
  - Argo CVEs by Matt Hamilton of Soluble
Docker announces Compose specification
Nautilus: a tool for visualising Docker Compose files
- Show HN post
Deis Labs introduces Krustlet:
- Introduction
- Why Rust?
- The Microsoft take
Tekton now in Beta
- Episode 44, with Tracy Miranda
- Episode 47, with Kim Lewandowski
Microsoft publishes attack matrix for Kubernetes
- Detecting a large-scale cryptocurrency mining attack
Huawei announces Mindspore deep learning framework
Service Mesh Hub from Solo
- Technical overview
Mixerless Telemetry in Istio by Zsolt Varga of Banzai Cloud
Amazon launches Fargate platform v1.4.0
- Version primer
- Data plane, under the hood
- Elastic File Server (NFS) support
Rook 1.3
- Write-up by Vanilla Kola
Red Hat:
- OpenShift Commons Gathering, April 27
- Istio on OpenShift in 2020
- Be careful when pulling images by short name
Canonical launches managed apps
When to use Helm and when to use Operators by Matt Butcher
Controlling outbound traffic from Kubernetes by Jack Kleeman and Chongyang Shi at Monzo
API Priority and Fairness Alpha by Min Kim, Mike Spreitzer and Daniel Smith
Hubspot moves Zookeeper to Kubernetes
Graceful shutdown in Kubernetes is not always trivial by Ilya Andreev from Flant
Open Container Initiative icons
Kubernetes Workshop in a Box by Pascal Widdershoven

Links from the interview

kpt
- Announcement
- What does it stand for?
Kubernetes Resource Model
helm template command
kpt apply vs kubectl apply
Configuration as Code
- Brian Grant Twitter thread on kpt
kpt Setters
Domain-specific languages
Examples and Kubernetes examples you can use with kpt
kpt functions
Installing kpt
kpt on GitHub
Morten Torkildsen on Twitter

Cassandra, with Sam Ramji Apr 07, 2020

Apache Cassandra, a scale-out datastore, is becoming more Kubernetes-native. Sam Ramji is Chief Strategy Officer at DataStax, a company that builds Cassandra-based products. He explains how DataStax has pivoted back towards supporting upstream Cassandra, and how they’re making it easier to manage on Kubernetes. As always, we also cover the news of the week, and we look at what is and is not a dinosaur.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

kpt:
- Announcement
- Site
- Contributors:
- Episode 7, with Phillip Wittrock
- Episode 11, with Vic Iglesias
- Episode 29, with Janet Kuo
- Episode 43, with Brian Grant
- Possible meanings, thanks to Daniel Roth and Blender Fox
- What does it really stand for? Please tweet us at @kubernetespod. Wrong answers only!
Kubernetes 1.18 deep-dives:
New GitLab features
- Episode 89, with Marin Jankovski
Rancher 2.4
- Episode 57, with Darren Shepherd
Sidekick, from Minio
Cortex 1.0
Kubernetes CVE-2019-11254
Kubernetes Kapsule: managed clusters from Scaleway
Build your own Kubernetes controller by Nicolas Fränkel
Kubie, by Simon Bernier St-Pierre
Serving repository move from Google to community control
mkit from Darkbit
oneinfra by Rafael Fernández López
Cost savings with Kubernetes by Henning Jacobs
- Episode 38
Planetscale goes multi-cloud
- Episode 81, with Jiten Vaidya and Sugu Sougoumarane
30 days of free training from Google Cloud
Critical vulnerabilty in HAProxy
Well-being tips from the CNCF

Links from the interview

Chief Strategy Officer
Sam at Microsoft
- The West Wing
Apache Cassandra
CAP theorem - Cassandra is AP, eventually consistent
ACID and BASE
NewSQL
The road to Cassandra 4.0 by Patrick McFadin
DataStax
501c3 and 501c6 US organizations
Cloud Foundry Foundation
Cassandra Enhancement Proposals (CEP)
Pluggable storage engines
Instagram’s “Rocksandra” Cassandra fork and Amazon’s Rocksandra fork
Sam Ramji on Twitter

Jaeger, with Yuri Shkuro Mar 31, 2020

Jaeger is a distributed tracing platform built at Uber, and open-sourced in 2016. It traces its evolution from a Google paper on distributed tracing, the OpenZipkin project, and the OpenTracing libraries. Yuri Shkuro, creator of Jaeger and author of Mastering Distributed Tracing, joins Craig and Adam to tell the story, and explain the hows and whys of distributed tracing.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Music from Home:
- Brian May
- Neil Finn
You Don’t Know Jack
Galaxy Trucker
Free books from the Sesame Workshop
The Monster At The End Of This Book

News of the week

Update on the update on the update on KubeCon EU: now 13 to 16 August, and possibly online.
Virtual Rejekts on 1 April
Datastax Cassandra Operator and Management API
- Announcement blog
PromCat: Prometheus Catalog from Sysdig
Evaluating Predictive Autoscaling in Kubernetes by Jamie Thompson
Provision a certificate and key for an application without Istio sidecars by Lei Wang
How to Secure Your Kubernetes Cluster on GKE by Lewis Marshall
Upcoming changes to IP assignment for EKS Managed Node Groups and De-mystifying EKS networking by Nathan Taber
- Updated EKS SLA
Ops tips by Ciro S. Costa: Quality of Service and OOM, and Kubernetes Secrets
Google upgrades to Platinum membership of Cloud Foundry Foundation
CNCF Case Study: Vodafone

Links from the interview

Yuri Shkuro
Open Source at Uber
- Episode 84: Monitoring, Metrics and M3, with Martin Mao and Rob Skillington - another open source project from Uber
Mastering Distributed Tracing - Yuri’s book
Service-Oriented Architecture: Scaling the Uber Engineering Codebase As We Grow by Einas Haddad
What is Distributed Tracing?
Evolving Distributed Tracing at Uber Engineering - Yuri’s blog post
OpenZipkin
TChannel
OpenTracing
- Towards Turnkey Distributed Tracing by Ben Sigelman
Jaeger
Jaeger in Istio and trace context propagation
OpenTelemetry: merging OpenTracing and OpenCensus
- A Brief History of Tracing (So Far) by Ben Sigelman and Morgan McLean
- Jaeger and OpenTelemetry
- Now officially in Beta!
Google Dapper paper
OpenTracing joined CNCF in 2016
What is a jaeger?
- The logo
Red Hat Hawkular
Jaeger joins the CNCF in 2017 and graduates in 2019
Jaeger Analytics
Yuri Shkuro on Twitter

Kubernetes 1.18, with Jorge Alarcon Mar 24, 2020

Kubernetes 1.18 is out - almost! A bug has pushed it back a day. While you’re waiting, release team lead Jorge Alarcon will tell you all about the fit and finish you can expect in the release when it’s out tomorrow. Adam and Craig bring you the other community news of the week, as well as some podcast follow-up.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubernetes 1.18 is out!
- Well, not quite yet: this regression is being fixed
- Enhancement tracker
- Windows features:
  - containerd
  - kubeadm
  - RuntimeClass
  - GMSA
- Ingress API
- kubectl diff and APIServer dry-run
- kubectl debug
CNCF SIG Contributor Strategy
Kong ingress controller and Istio service mesh by Kevin Chen
KubeCF becomes a Cloud Foundry Foundation incubation project
Platform9 adds two new tiers
- And adds free JFrog Private Container Registry
Backyards 1.2
Red Hat adds support for installing OpenShift on top of RHV
Google Cloud Game Servers
Kubei, a new open source runtime vulnerabilty scanner by Portshift
Azure Container Registry adds customer managed keys
AKS adds Ubuntu 18.04
Kubernetes security announcements
- CVE-2020-8551 - kublet
- CVE-2020-8552 - API server
Using Inspektor Gadget to add network policies
okteto push
D2iQ changes CEOs
Spectro Cloud comes out of stealth

Links from the interview

Kubernetes 1.18 release blog
- 1.18.0 announcement e-mail
Computational biology and folding proteins
Data for Democracy
Kubernetes Up and Running by Joe Beda, Kelsey Hightower, and “the other guy”
The Kubernetes Slack
Searchable.ai
- A bit about them
- Home slice
Episode 72, with Lachlan Evenson
- Emeritus Adviser
- Release logo
Sidecar containers
- Tim Hockin’s thoughts on Sidecar Containers not making 1.18
1.19 release lead: Taylor Dolezal
Jorge on Twitter and alejandrox1 on the Kubernetes Slack

etcd, with Xiang Li Mar 17, 2020

If you’re running Kubernetes, you’re running etcd. The distributed key-value store was started as an intern project at CoreOS by Xiang Li, who is still maintaining it but now working on infrastructure at Alibaba. Xiang joins your hosts to discuss.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Getting toilet paper be like
So, stay at home and play with free synth apps!
- Korg Kaossilator: download for Android or iOS
- MiniMoog Model D: download for iOS
iSongs on YouTube

News of the week

vSphere 7 and VMware Tanzu announcements
Docker announces new strategy and roadmap
Hitachi Vantara acquires Containership’s assets
- Containership’s since-removed “goodbye” post
Lens, now from Lakend Labs
KEDA and SMI join the CNCF Sandbox
AWS Bottlerocket blog post and GitHub repo
Enable encryption on App Mesh with custom or ACM certs
EKS supports Kubernetes 1.15
Firecracker thread by Micah Hausler
gVisor thread by Ian Lewis
Kublr adds rolling upgrades
Google Cloud moves to its own ACME certificate provider
GKE Workload Identity is GA
Analysis of Redis operators by Flant
Bank Vaults 1.0 and HSM support by Banzai Cloud
CNCF joins Google Summer of Code
Lifemiles case study
Rancher Labs raises $40m
- Episode 57, with Darren Shepherd

Links from the interview

etcd
- etcd on GitHub
How Kubernetes uses etcd
The history of etcd, including the famous garage
Built to handle upgrading CoreOS Container Linux nodes
Prior art:
- Zookeeper: too much JVM
- Doozer: not enough community
- Chubby: too private to Google
Paxos
- The paper
- Paxos Made Live - An Engineering Perspective
Multi-Paxos
raft
- The paper
Announcing etcd
- Ben and Blake
etcd3 moved from a tree keyspace to flat keyspace
- Latest version: etcd 3.4
etcd and Kubernetes at Alibaba:
- Demystifying Kubernetes as a Service – How Alibaba Cloud Manages 10,000s of Kubernetes Clusters
- Performance optimization of etcd in web scale data scenario
The first etcd operator created by Xiang
Jepsen tests of 0.4.1 and 3.4.3
CNCF to host etcd in December 2018
etcd roadmap
Xiang Li on GitHub
Xiang Li on Twitter

gRPC, with Richard Belleville Mar 10, 2020

Richard Belleville works at Google on gRPC, a high-performance, universal RPC framework. Richard used gRPC before joining Google to work on it; he talks to the hosts about its history and derivation from Google’s internal Stubby, how it works, and how it differs from other RPC and messaging systems.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Castlevania series 3 on Netflix
- Discussed in Episode 27
Bad video game adaptations
Hitchhiker’s Guide to the Galaxy - 42nd anniversary
- Upcoming Hulu TV series

News of the week

Links from the interview

gRPC
- What is gRPC?
- gRPC Basics meetup video: a recent presentation by Richard at the Orchestructure meetup
- RPC vs messaging
- What does the G stand for?
NASA Robotic Mining Challenge
Protocol Buffers
Stubby became gRPC
Abseil: an open source collection of C++ libraries drawn from the most fundamental pieces of Google’s internal codebase
Chubby lock services (the inspiration for etcd)
Bidirectional streaming
- Head-of-line blocking
Polling engines
Swagger/OpenAPI
gRPC + JSON by Carl Mastrangelo
HTTP/2
Supported languages
gRPC Core
gRPC-web
- HTTP/2 trailers
Users
Graduating the CNCF
Richard Belleville on Twitter

Kubeflow 1.0, with Jeremy Lewi Mar 03, 2020

Kubeflow, the Machine Learning toolkit for Kubernetes, has hit 1.0. Google software engineer Jeremy Lewi is a core contributor to Kubeflow and was a founder of the project. He joins the show to discuss what Kubeflow does, and what it means to have hit 1.0.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Over the Road
- Over The Top and its amazing poster
13 Minutes to the Moon
- With soundtrack by Hans Zimmer
- We love our theme music, but its composer has fewer Academy Awards.

News of the week

KubeCon Novel Coronavirus update
- Schedules announced for day 0 events
Kubeflow 1.0 is out
- Google Cloud blog
Kubernetes 1.18-beta.1
- 1.18 features list
- Poor unloved Sidecar Containers
Screwdriver joins CD Foundation
- Episode 44, with Tracy Miranda
Introducing Arkade by Alistair Hey
Install Kubernetes to your Raspberry Pi in 15 minutes by Alex Ellis
Weathervane 2.0 from VMware
AKS: Spot node pools and container scanning
Vulnerable Containers API by Jerry Gamblin
Advanced Persistence Threats: The Future of Kubernetes Attacks by Ian Coldwater and Brad Geesaman
- Episode 65, with Ian Coldwater
Everyone might be Cluster Admin in your Kubernetes cluster by Jeff Geerling
Mirantis acquires Kontena
- Episode 31, with Jari Kolehmainen
CSI driver for Google Cloud Storage by Ofek Lev
Bring your ideas to the world with kubectl plugins by Cornelius Weig
Optimizing I/O intensive containers by Jay Huang

Links from the interview

Accelerators and GPUs at NVIDIA, with Pramod Ramarao Feb 25, 2020

GPUs do more than move shapes on a gamer’s screen - they increasingly move self-driving cars and 5G packets, running on Kubernetes. Pramod Ramarao is a Product Manager at NVIDIA, and joins your hosts to talk about accelerators, containers, drivers, machine learning and more.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Printer networking
Adam wants software-defined faucets
- Glowing LED faucet - where does the electricity come from?
- Faucet, a SDN controller

News of the week

Google Cloud launches Application Manager for GKE in Beta
GKE Surge Upgrades GA
GKE Node Locations GA
Anthos Ready Storage qualification
Kafka disaster recovery with Supertubes from Banzai Cloud
- Episode 59, with Janos Matyas
StackRox’s State of Container and Kubernetes Security report
Cilium 1.7
- Last week’s ode to eBPF, with Leonardo Di Donato
Convox launches multi-cloud
Pangolin, an experimental Kubernetes autoscaler by Damian Peckett
Dell/EMC rack-in-a-box
- Jack-in-the-box
- The Hooli Box
Platform9 now distributed by Promark
- But not Primark
- Episode 88, with Madhura Maskasky
GKE security updates & defense-in-depth strategies
Best practices for enterprise multi-tenancy with GKE
Andrew Allbright contributes to Minikube
Kubernetes Contributor Summit schedule announced
That discount code again again again: KCEUGKP15

Links from the interview

NVIDIA
Graphics Processing Unit (GPU)
Differences between CPU and GPU
The math co-processor
General-purpose computing on GPUs (commonly known as GPGPU)
CUDA, with a C
- NVIDIA CUDA Zone
- CUDA C++
OpenGL and Vulkan, with a K
Kubernetes on NVIDIA GPUs
- NVIDIA on Google Cloud Platform
Device plugins for Kubernetes and scheduling GPUs
- NVIDIA device plugin
- Kubernetes on NVIDIA GPU documentation
NDC Hub for drivers and containers
NVIDIA EGX for Edge computing with Kubernetes
- Pramod’s announcement blog
Deep Learning Training vs Inferencing
NVIDIA GPU operator
Pramod Ramarao

eBPF and Falco, with Leonardo Di Donato Feb 18, 2020

We dive into the Linux kernel this week with guest Leonardo Di Donato, Open Source engineer at Sysdig. Leonardo works full-time on the Falco project, a runtime security engine that listens to the Linux kernel using eBPF - the extended Berkeley Packet Filter. Leonardo tells the hosts about the architecture of eBPF, how he has used it before and now, and what’s coming up for Falco.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

University Challenge: can you guess the computer?
Golf Peaks (Google Play, App Store)
- Desert Golfing

News of the week

Apache Flink v1.10
Linkerd v2.7
Azure Container Registry to require TLS 1.2
CPU limits and aggressive throttling in Kubernetes - Omio Engineering by Fayiz Musthafa from Omio
Kiosk
- Reddit thread with Lukas Gentele
Docker donates the cnab-to-oci library to cnab.io
How-to Guide: Debugging a Kubernetes Application
Nutanix Karbon 2.0
Childcare and COVID-19 at KubeCon EU
- That discount code again again: KCEUGKP15
Red Hat OpenShift is now available for IBM Z and LinuxONE
Why Kubernetes on VMs? by Chip Zoller
Securely Access AWS Services from Google Kubernetes Engine (GKE)
Carbon Relay raises $63 million

Links from the interview

Traditional Linux tracing tools: perf and strace
BPF and eBPF
bpftrace
InfluxDB Cloud
kubectl-trace
The IO Visor project
Sysdig
- Loris Degioanni, co-founder, CTO, and author of Wireshark
Falco
- Sysdig and Falco now powered by eBPF
- Falco joins CNCF Sandbox and moves to incubation
Upcoming KubeCon EU talks by Leonardo:
- Going beyond CI/CD with Prow
- Designing a gRPC interface for kernel tracing with eBPF
Falco community:
Leonardo Di Donato on Twitter

CockroachDB, with Peter Mattis Feb 11, 2020

Peter Mattis is a creator of the CockroachDB open source database and co-founder and CTO of Cockroach Labs. His history in open source goes back to the creation of the GIMP image editor and UI toolkit Gtk at university in 1995, and his history at Google saw him work on storage and build systems. Hosts Craig and Adam ask him about all of the above.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Storm Ciara:

News of the week

Docker Index
Apache Aurora:
containerd Project Journey Report
- Episode 71, with Derek McGowan
CoreOS End-of-Life
- Fedora CoreOS
- Flatcar Linux
  - Episode 79, with Chris Kühl
Developing in Production by Will Sargent at Terse Systems
Thanos Operator from BanzaiCloud
- Kubernetes sidecars in 1.18
Clear Linux OS now Certified Kubernetes
Helm 3 in Real Life by Dawid Ziolkowski
Kubernetes storage patterns by Nitish Tiwari
Integrate Cloud Foundry with Kubernetes using the cf-operator and kubecf
- kubecf
Deploying External OpenStack Cloud Provider with Kubeadm
Frame.io Falco case study
Supporting developers as they scale: a free Kubernetes eBook from DigitalOcean
Register Now: KubeCon + CloudNativeCon EU Day Zero Events
- That discount code again again: KCEUGKP15

Links from the interview

GIMP, the GNU Image Manipulation Program
- Pre-history
- GTK, the GIMP Toolkit
Inktomi
- Episode 49, with Eric Brewer
Colossus
Bazel
Square Acquires Ex-Googler Team Behind Viewfinder To Help Grow Its NYC Presence
CockroachDB article
Spanner and F1 papers
CAP theorem
Google Cloud Spanner
Ticktock Networks and the HUYGENS paper
Cockroach Labs
Orchestration with Kubernetes
Relicensing CockroachDB
- Business Source License
Geospatial indexing
CockroachDB on GitHub
Peter Mattis on Twitter

GitLab, with Marin Jankovski Feb 04, 2020

GitLab is a single application DevOps platform, including source code management and CI/CD tools for targets including Kubernetes. The application itself runs on Kubernetes, including in its largest installation, the SaaS version at gitlab.com. Marin Jankovski is an Engineering Manager at GitLab, where he was Employee #1. He joins Craig and Adam to talk about migrating to Kubernetes, remaining a monolith, and the company value of radical transparency.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

CNCF TOC election results
HPE acquires Scytale
- Episode 45, with Andrew Jessup
CNCF announces KubeCon EU schedule
- The actual schedule
- That discount code again: KCEUGKP15
Run Windows Server Containers on GKE
- Episode 70, with Patrick Lang
- New Google Cloud certifications address the cloud skills gap
Cisco Hyper-Accelerates Applications in a Hybrid Multicloud Hyper-World
- Updates to Google’s partnership with Cisco
AKS 2020-01-27 release
AWS Container Security Survey by Michael Hausenblas
Infra.app
A bit of Istio before tea-time by Alex Ellis
etcd blog on being tested by Jepsen
- Jepsen blog on testing etcd
How Fluentd collects Kubernetes metadata by Brady Zuo
Troubleshooting Kubernetes OOM by Carlos Arilla
DNS Lookups in Kubernetes by Karan Sharma
Community collaboration on Notary v2 by Justin Cormack
CNCF Speaker’s Bureau: a great resource
MayaData raises $26m
- Episode 56, with Evan Powell

Links from the interview

VMs, Edge, and Platform9, with Madhura Maskasky Jan 28, 2020

Madhura Maskasky is co-founder and VP of Product at Platform9, a company who manage both OpenStack and Kubernetes. She talks to Adam and Craig about the transition from VMs to containers, why OpenStack is still relevant, and what they have to do to be able to offer a 99.9% SLA on cloud-native applications.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Bad news from both Australia Day and Chinese New Year
Schitt’s Creek

News of the week

VMware: Introducing Project Nautilus
- VMware Fusion on GitHub
Google Cloud Config Connector
Octarine open-sources the Kubernetes Common Configuration Scoring System (KCCSS) and kube-scan
KubeNav, by Rico Berger
Permission Manager by SIGHUP
KubeInvaders: gamified chaos engineering
- Whack-a-Pod
- Kubernetes DOOM
CSI inline ephemeral volumes
Reviewing 2019 in Kubernetes docs
- Episode 5, with Zach Corleissen and Jared Bhatti
CSI driver support for Dell/EMC Isilon
CNCF annual report
Sign up for KubeCon EU and get 15% off with discount code KCEUGKP15
TriggerMesh receives $3m seed funding
- Episode 28, with Sebastien Goasguen
AWS lowers EKS price

Links from the interview

Multitenancy at Cruise, with Karl Isenberg Jan 21, 2020

Self-driving cars need self-driving backend infrastructure. Karl Isenberg is the tech lead & manager of the platform team at Cruise, a self-driving car company backed by GM and Honda. He joins hosts Craig and Adam to discuss two years of running multitenant Kubernetes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubernetes bug bounty announcement, funded by the CNCF
GKE CIS Benchmarks deliver security best practices
Octopus: how Kyma does integration testing in Kubernetes
Elastic Cloud on Kubernetes (ECK) now GA
Red Hat OpenShift v4.3 now almost GA
Fedora CoreOS now GA
Istio as an Example of When Not to Do Microservices by Christian Posta
Backyards 1.1 from Banzai Cloud
k3c from Darren Shepherd at Rancher Labs
- Episode 57, with Darren Shepherd
Continuous GitOps by Arun Ramakani
Werf 1.0 by Flant
New Anthos training from Google Cloud
Dauntless case study
KubeDR by Catalogic
Kubernetes on MIPS by Inspur

Links from the interview

Cruise
- We Need To Move Beyond The Car, by CEO Dan Ammann
- Lombard St
Karl’s KubeCon talk
- Slides
- Video
Managing Kubernetes RBAC Groups by Stephen Day
- RBACSync on GitHub
Open-Sourcing Isopod: An Expressive DSL Framework for Kubernetes Configuration by Charles Xu and Dmitry Ilyevskiy
- Isopod on GitHub
Building a container platform at Cruise:
- Part 1: Overview by Karl
- Part 2: Security by Karl and Mike Ruth
- Part 3: Networking by Karl and Buck Wallander
Cruise’s blog
Karl Isenberg on Twitter

Invention, IBM and Istio, with Lin Sun Jan 14, 2020

What do you do next when you have over 150 patents to your name? Write a book, of course! Lin Sun is a Senior Technical Staff Member and Master Inventor at IBM, where she has spent the past 14 years doing software engineering in areas including cloud and open technologies. She has worked on the Istio service mesh since 2017, and is on the Istio steering and technical oversight committees. Lin joins Adam and Craig to discuss invention, making Istio easier to use, and how being a mother has impacted both.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Snow in Seattle

News of the week

Tanka, from Grafana
- Hacker News commentary
- Jsonnet
- ksonnet archived
Configula, from Brendan Burns
- Caligula, from Rome
Falco moves to the CNCF incubator
- Falco’s biggest hit, Rock Me Amadeus
CKAD is now valid for 3 years
Contour 1.1.0
Getting serious about open-source security by Dan Lorenc
- Episode 39, with Dan Lorenc
Designing and Building HA Kubernetes on Bare-Metal
AKS Latency and performance/availability issues due to IO saturation and throttling under load
Kubernetes Networking Demystified by Karen Bruner at StackRox
How to Give Developers Access to Kubernetes During Development by Daniel Thiry
- How to deal with computing resource cost for Kubernetes-based development
Key metrics for monitoring Istio from Datadog
Deploying multiple Istio Ingress Gateways by Peter Jausovec
Big Prometheus by Clay Smith from Monitoring Monitoring
Breaking Changes in Helm 3 (and How to Fix Them) by Jack Morris
Security advantages of pull-based CD pipelines by Alex Kaskasoli
Zero touch authentication on Kubernetes by Peter Wilcsinszky at BanzaiCloud
Vault replication across multiple datacenters on Kubernetes by Nandor Kracser
OpenStack’s Complicated Kubernetes Relationship by Mike Vizard of ContainerJournal
Kubernetes 1.15 security changes in GKE
KubeCon + CloudNativeCon NA 2019 Transparency Report
Zendesk case study

Links from the interview

IBM Master Inventor
Lin’s patents
Her favorites:
- Analyzing email content to determine potential intended recipients
- Ensuring a desired distribution of content in a multimedia document for different demographic groups utilizing demographic information
Istio announcement blog and GlueCon talk from 2017
Lin at the IBM Cloud CTO Office
- IBM Research
- IBM Cloud, formerly known as Bluemix
Bluemix Service Proxy
Amalgam8
Envoy
Istio 1.1, the “9 months” release
- The Sidecar resource, which lets you scope which services are known by a given sidecar to reduce resource usage
Release cadence
Istio 1.4
Mutual TLS
New 1.4 features:
- Auto-mutual TLS
- client-go library
- istioctl analyze
Requirement to declare containerPort removed in 1.3, automatic protocol selection added
User Experience working group
- istioctl add-to-mesh
- istioctl describe-pod
- istioctl install
Steering committee
Technical oversight committee
istiod
- Istio as an Example of When Not to Do Microservices by Christian Posta
- Minion cluster mode
Istio Explained , by Lin and Dan Berg
kui and iter8
Lin Sun on Twitter

OpenShift and Kubernetes, with Clayton Coleman Jan 07, 2020

Five years ago, Clayton Coleman took a bet on a new open source project that Google was about to announce. He became the first external contributor to Kubernetes, and the architect of Red Hat’s reinvention of OpenShift from PaaS to “enterprise Kubernetes”. Hosts Adam Glick and Craig Box return for 2020 with the story of OpenShift, and their picks for Game of the Holidays.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Red Hat OpenShift
- Why Red Hat chose Kubenretes for OpenShift by Joe Fernandes
- Early history of OpenShift
- Comparing OpenShift v2 and v3
Health checks
OpenShift differences from Kubernetes:
Don’t turn off SELinux!
CoreOS
What’s new in OpenShift v4
Operator Framework and operator-lifecycle-manager
Red Hat acquired by IBM
Linux at IBM in the 90s
- The blonde kid
- PowerLinux
PodDisruptionBudget
Clayton Coleman on Twitter

Monitoring, Metrics and M3, with Martin Mao and Rob Skillington Dec 17, 2019

Martin Mao and Rob Skillington are co-founders of Chronosphere; CEO and CTO respectively. They both worked on the monitoring team at Uber, where they created M3: a metrics platform with an open source time-series database built for scale. They join Craig and Adam to talk about monitoring, metrics and M3 on the last episode of 2019.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Test message from Delta Airlines

News of the week

CSI migration and CSI volume snapshots
AKS Private Clusters in preview
GKE maintenance Windows and exclusions is GA
Google Cloud E2 VMs: introduction and understanding dynamic resource management
New features in Cloud Run for Anthos
Best practices for performing forensics on containers
Infrastructure at Cliqz, and introducing Hydra
Envoy CVEs
- Istio security bulletin
The Top 3 Service Mesh Developments in 2019 by Zack Jory
Istio Service Mesh Explained in 5 Minutes by Ram Vennam
Ambassador Edge Stack
Solo.io WebAssembly Hub
- Episode 55, with Idit Levine
Kafka Envoy Protocol Filter
Talos 0.3 beta
AutoTiKV tuning
OpenPolicyAgent’s KubeCon recap
- Episode 42, with John Murray
A first look at Antrea from Alex Brand
TODO: read this article by Patrick DeVivo
Does Testing Kubernetes Conformance Leave You in the Dark? Get Progress Updates as Tests Run by John Schnake
Demystifying Kubernetes as a Service – How Alibaba Cloud Manages 10,000s of Kubernetes Clusters
How Jaeger Helped Grafana Labs Improve Query Performance and Root Out Tough Bugs
Adopting Kubernetes at Quora by Taylor Barrella,
CNCF announces schedule for Bengaluru/Delhi Forums

Links from the interview

M3 website
M3: Uber’s Open Source, Large-scale Metrics Platform for Prometheus
Before: Graphite and its Whisper database
Prometheus
RRDtool
M3 on GitHub: open source from the start
Chronosphere
Rob’s 2019 KubeCon’s talks:
- EU: M3 and Prometheus, Monitoring at Planet Scale for Everyone
- NA: Deep Linking Metrics and Traces with OpenTelemetry, OpenMetrics and M3
Twitter:

Kubernetes 1.17, with Guinevere Saenger Dec 10, 2019

Hop on the release train for the fourth and final Kubernetes release for 2019. Release manager Guinevere Saenger joins Adam and Craig. to discuss how a classically trained pianist has a second act as a Kubernetes release team lead.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Craig plays the Oculus Quest:
Adam sees a play
- Six

News of the week

Links from the interview

Collaborative piano
Ada Developers Academy
- (The LSAT is the Law School Admission Test)
- Ruby on Rails
Samsung SDS Cloud Native Computing Team
Kubernetes at GitHub
GitHub Metal Cloud
#hugops
SIG Contributor Experience
Episode 46, with Aaron Crickenberger
Guinevere speaking at KubeCon about new contributions
“Complaning about how hard it was to contribute” led to the Contributors Guide
Episode 10, with Josh Berkus and Tim Pepper
Kubernetes 1.17 enhancement tracking sheet
- Dual-stack IPv4 and IPv6
- What happened to IPv5?
Poor old sidecar containers slipped again
KubeCon 2019 NA Contributors’ Summit
- Hats
1.17 release team
- 1.18 leads have been announced
Release team shadow program
Release engineering
Guinevere Saenger on Twitter

Chaos Engineering, with Ana Margarita Medina Dec 03, 2019

Chaos Engineering is the discipline of experimenting in identifying potential areas of failure before they express themselves in outages. Ana Margarita Medina is a Chaos Engineer and Developer Advocate at Gremlin, a chaos-as-a-service vendor that recently added Kubernetes support. She talks to Adam and Craig about the discipline, and her journey to it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

AWS announcements:
Eirini 1.0 is here
Security considerations for GKE by Maya Kaczorowski
- Episode 8. with Maya Kaczorowski
Managing a multi-site Cassandra cluster on multiple Kubernetes with CassKop / MultiCassKop by Seb Allamand
Run Ansible Tower or AWX in Kubernetes or OpenShift with the Tower Operator by Jeff Geerling
Everything I know about Kubernetes I learned from a cluster of Raspberry Pis by Jeff Geerling
Prometheus OpenMetrics Integration
Develop a Kubernetes controller in Java by Min Kim and Tony Ado
Running Kubernetes locally on Linux with Microk8s by Ihor Dvoretskyi and Carmine Rimi
- Episode 21, with Ihor Dvoretski
- Episode 60, with Mark Shuttleworth
Linux Foundation Cyber Monday sale
Barrons says Kubernetes is the future of computing by Tae Kim

Links from the interview

Vitess, with Jiten Vaidya and Sugu Sougoumarane Nov 26, 2019

Vitess is a cloud native database clustering system for horizontal scaling of MySQL. It was built for YouTube, open sourced, and has recently graduated from the CNCF. Two members of the team who wrote and ran Vitess at YouTube, Jiten Vaidya and Sugu Sougoumarane, are CEO and CTO of PlanetScale; a company they founded to support Vitess commercially. They join Craig and Adam to talk databases.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Vitess
- About Jiten and Sugu
Graduated from the CNCF
Database shards
Vitess history
- YouTube acquired by Google in 2006
Go; 10 years old
Google storage systems:
- Bigtable
- Colossus
Scaling MySQL in the cloud with Vitess and Kubernetes and Cloud Native MySQL Sharding with Vitess and Kubernetes by Anthony Yeh, Google Cloud
Case studies: Stich Labs, Hubspot, JD.com
Vitess at KubeCon:
- Vitess: Stateless Storage in the Cloud by Sugu Sougoumarane
- Geo-partitioning with Vitess by Deepthi Sigireddi and Jiten Vaidya
- How to Migrate a MySQL Database to Vitess by Sugu Sougoumarane & Morgan Tocker
- Gone in 60 Minutes: Migrating 20 TB from AKS to GKE in an Hour with Vitess by Derek Perkins from Nozzle
Postgres support
PlanetScale
Announcing PlanetScale’s CNDb
The name
- Voltron
- Strong Bad’s advice on naming things
Jiten Vaidya and Sugu Sougoumarane on Twitter

Lyft and KubeCon NA 2019, with Vicki Cheung Nov 19, 2019

Catch all the news (and there is a lot of it!) from KubeCon NA 2019 in this week’s show. We then talk to Vicki Cheung, the conference co-chair, and an Engineering Manager running Kubernetes infrastructure at Lyft.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Cloud Native Rejekts, with Chris Kühl Nov 12, 2019

Due to overwhelming submission numbers, 85% of talks proposed to KubeCon are rejected. Cloud Native Rejekts, a two-day community conference immediately before KubeCon, gives a second chance to some of those talks. Chris Kühl is CEO and co-founder of Kinvolk, a Berlin-based Linux company, who organise events including Cloud Native Rejekts. Hosts Adam and Craig ask him about this, and somehow the discussion includes both Pearl Jam and Mötley Crüe.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Listener meetup at KubeCon: 1.30pm at the Google Cloud Lounge
- Pineapple Lumps and Jaffas
Adam’s TV recommendation of the week: The Expanse

News of the week

Links from the interview

KUDO, with Gerred Dillon Nov 05, 2019

KUDO is the Kubernetes Universal Declarative Operator, a toolkit for writing operators for Kubernetes. Gerred Dillon works on KUDO at D2IQ, formerly Mesosphere, and joins Craig and Adam to discuss KUDO, how Mesos frameworks relate to Kubernetes operators, and taking care of chickens.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

D2IQ (formerly Mesosphere)
Apache Mesos
KUDO
- Controllers
- Operator pattern
Kubebuilder
Operator SDK
Omakase: Japanese for “I will leave that up to you”
Tasks
- Getting started with KUDO
Metacontroller
- Proposal to move under Kubebuilder
- Vitess operator
Tekton
Helm
D2IQ’s Konvoy distribution of Kubernetes
Operators using KUDO:
KUDO proposed to the CNCF
- CNCF SIG Application Delivery
Gerred’s KUDO webinar for the CNCF
Contributing to KUDO
KUDO Slack
Gerred’s bio
- Dry brining a chicken
Gerred Dillon on GitHub

Engineering Productivity and Testing, with Katharine Berry Oct 29, 2019

Katharine Berry works in the Engineering Productivity team at Google Cloud, and works in SIG Testing on the Kubernetes project. She joins Adam and Craig to discuss Prow, Pebble and ponies.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Pulumi, with Joe Duffy Oct 22, 2019

Joe Duffy is the founder and CEO of Pulumi, an open-source cloud development platform. He joins Adam and Craig to explain why a general purpose programming language is a better tool for cloud infrastructure than a domain-specific language (or YAML), and how you can use Pulumi to provision cloud infrastructure and Kubernetes resources alike.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Dapr, OAM and Rudr
Red Hat introduces OpenShift 4.2
Goldilocks from Fairwinds
Ubuntu 19.10
- Episode 60 with Mark Shuttleworth
Introducing SPIRE 0.8.2
- Episode 45 with Andrew Jessup
Istio performance improvements noted by Pablo Moncada Isla
Graboid: first cryptojacking worm for Docker found by Unit42
Analysis of two Kubernetes vulnerabiltiies by Palo Alto Networks
Harbor 1.9
CNCF announces schedules for Forums in Seoul and Sydney
Container Platform Networking at Cruise by Karl Isenberg and Buck Wallander
Sugarkube and cattle clusters

Links from the interview

Pulumi
Joe Duffy’s blog:
- Hello, Pulumi!
- Journey to Pulumi 1.0
WPF (Avalon) and WCF
10 Years of DevOpsDays
Comparisons of Pulumi vs other platforms
TypeScript
Dark programming language
Three business models of Open Source by Peter Levine and Jennifer Li
$ for enterprises and free community edition
AWS and Elasticsearch Inc.
Pulumi on GitHub
Joe Duffy and Pulumi on Twitter

cert-manager, with James Munnelly Oct 15, 2019

cert-manager is a certificate management toolkit for Kubernetes, commonly used to get TLS certificates from Let’s Encrypt. Project founder James Munnelly of Jetstack joins hosts Craig and Adam to explain how how certificates are issued and managed, and how cert-manager automates it all.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Fast food-themed entertainment:
- Wendy’s Feast of Legends role-playing game
- KFC dating simulator
- Burger King Games
- M.C. Kids
- Taco Bell’s Tasty Temple Challenge
- The McDonalds board game
KFC virtual escape room training
Soda-themed entertainment:
Stranger Things 3: The Game

News of the week

Rancher 2.3 released
- Episode 57, with Darren Shepherd
- Windows container support and Rancher 2.3
Amazon EKS now has Windows containers generally available
Episode 70, with Patrick Lang
New on DigitalOcean Kubernetes Service: cluster autoscaling
Elastic Cloud on Kubernetes v1.0.0-beta1 released
MuleSoft releases AnyPoint Service Mesh
- Container Journal interview
Linkerd 2.6
- A guide to distributed tracing with Linkerd
Trackman, open source step-workflow tool from Cloud 66
Puppet announces public beta of Project Nebula
KubeCon NA 2019 contributor summit schedule announced
Kubernetes patterns for capacity planning by Mohamed Ahmed
How Booz Allen Hamilton is helping modernize the Federal Government with Kubernetes
Flant.com compares 11 ingress controllers for Kubernetes
How Zalando manages over 140 Kubernetes clusters by Henning Jacobs
Cluster API Simplifies Execution and Powers Projet Pacific at VMware
Grant Shipley moves from Red Hat/IBM to VMware
- Kubernetes Wild West video game
SUSE moves on from OpenStack and doubles down on Kubernetes
SAP to make HANA database available on Kubernetes

Links from the interview

Jetstack
- The two Matts: founders Matt Bates and Matt Barker
- James’s Jetstack bio
cert-manager
- Docs
- Co-evolved with kube-lego by Christian Simon
How TLS encryption works:
Episode 60, with Mark Shuttleworth, founder of Thawte
LetsEncrypt
cert-manager concepts:
- Issuers and Certificates
- Self-signing issuers
Kubernetes and webhooks:
Kubernetes ingress quick-start tutorial
- Different solver types
- The ingress-shim controller
Other issuer options:
- Vault, internal CA, CertificateRequests
Lets Encrypt is blocking old cert-manager versions
- Edge cases where retry looping would start
v0.11 release notes
Upgrading to v0.11
Getting involved:
James Munnelly on Twitter

Community and Contributor Experience, with Jorge Castro Oct 08, 2019

Jorge Castro is a community manager employed by VMware to help keep the Kubernetes project running smoothly. He joins Adam and Craig to talk about the programs run by SIG Contributor Experience, the difference between supporting contributors and end users, and the recent steering committee election.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

The Jordan Luck Band
The Exponents
Snippets from Who Loves Who The Most, Victoria and Why Does Love Do This To Me

News of the week

Kubernetes Steering Committee election results
Envoy proxy journey report
October updates to the StackRox Security Platform
Protecting Kubernetes against a Billion Laughs attack by Stackrox
- Billion laughs attack on Wikipedia
Open Source in VMware Tanzu
Project Contour moves IngressRoute to HTTPProxy
Sloop from Salesforce
Kontena Lens: free desktop app
GKE master on-prem routing
AKS managed identity
Envoy proxy perforamcne on Kubernetes by Ambassador
Announcing Kubernetes Community Days
WeaveWorks GitOps Manager and WKSctl
Transmogrify Kubernetes APIs by David Young

Links from the interview

About Jorge Castro
- 11th Armored Cavalry Regiment
- John Wick horse scene
- (Ok, Bradley Fighting Vehicles, not horses)
From Ubuntu to Heptio
Community episodes & community managers:
- Episode 27 with Sarah Novotny
- Episode 1 with Paris Pittman
Kubernetes Slack bot
Contributor Experience properties:
- YouTube
  - Office hours (and calendar)
  - Meet our Contributors
- Kubernetes subreddit
- Kubernetes Users mailing list - now archived
- discuss.kubernetes.io
Ask Ubuntu
SIG Contributor Experience
End user content:
Bots fixing bugs, merging and celebrating with no humans needed
- Humans Need Not Apply
WG Kubernetes Infrastructure
Kubernetes Steering Committee
- 2019 Steering committee election
- Election process: no electioneering
- Condorcet method
- Three “chop wood/carry water” winners were elected
  - Jorge himself was also a recipient!
Self-organised community:
- “Kubeyland” Disneyland trip
- Cloud Native Rejekts
Jorge and his many friends all hang out on #sig-contribex on Slack and the kubernetes-sig-contribex mailing list
Jorge Castro on Twitter

CRDs, Extensibility and API Machinery, with Daniel Smith Oct 01, 2019

Daniel Smith is co-Chair and co-TL of SIG API Machinery, as well as TL of the corresponding Google team. Daniel has been working on Kubernetes since before it was open sourced, and is one of the top overall contributors to the codebase. He joins Adam and Craig to discuss CRDs and extensibility.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubevirt joins the CNCF
KubeCon San Diego Contributor Summit
ServiceMeshCon 2019 schedule announced
GKE Intranode Visibility
#KUBE100; hosted k3s from Civo
- k8s vs k3s by Andy Jeffries
Docker: Designing your first application on Kubernetes
Docker raising funds
IBM launches Apache CouchDB operator
90% of all PaaS and SaaS on IBM Cloud is on Kubernetes
Kubecost: Requests and Limits by Webb Brown
Kubeadvisor 1.0 from Magalix
Kubernetes Liveness Probes are Dangerous! by Henning Jacobs

Links from the interview

DevStats says Daniel is number 2 or number 3 contributor to Kubernetes, in either case just behind Tim Hockin from Episode 41
- Either way, someone is wrong on the Internet!
Carina star constellation and having to rename it from that
The Kubernetes API
API Machinery
First proposal for API plugins - issue 991!
Third party resources (deprecated in 1.7)
Operator packaging
Custom Resources
Moving TPRs to CRDs by Nikhita Raghunath
API Aggregator
Extension via webhooks
1.15 release blog talks about CRD extensibility
Daniel’s KubeCon talks:
- Life of an API Request (slides)
- The hand-drawn trilogy:
The Nut That Ties Everything Together
Daniel Smith on Twitter

Kubernetes 1.16, with Lachlan Evenson Sep 24, 2019

Kubernetes 1.16 is out, and our guest this week is its release manager, Lachlan Evenson. Lachie is a Principal Program Manager at Microsoft and an Australian living in the US; Craig and Adam are therefore method-interviewing, being this week in those two countries respectively.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Prison England
Lithium Technologies
Kubernetes 1.0 launch roster
CrashLoopBackOff
Helm Classic
Deis acquired by Microsoft
- Deis Labs
- Episode 61, with Jeremy Rickard and Ralph Squillace
- Phippy and Captain Kube
- Childrens Illustrated Guide to Kubernetes
1.16 release blog
- What Lachie is excited about:
  - Dual stack IPv4/IPv6
  - Endpoint slices
- What he’s looking at in Alpha: Ephemeral containers
  - Distroless
What slipped: Sidecar containers
Breaking old APIs in Kubernetes 1.16
- Deprecation policy
1.16 release team
Emeritus Advisors
KubeCon San Diego session on shadowing in releases
Kubernetes 1.17: run by women
Removing the Test-Infra release role
Release notes from annotated PRs
Community retrospective
Release mascots:
- 1.16 Release patch
- 1.11
- 1.14
Olive Garden
- When you’re here, you’re family
- History of the breadstick
- Cutting people off from unlimited breadsticks
2019 Steering Committee elections are happening
Lachlan Evenson on Twitter

containerd, with Derek McGowan Sep 17, 2019

containerd was born from community desire for a core, standalone runtime to act as a piece of plumbing that applications like Kubernetes could use. It sits between command line tools like Docker, which it was spun out from, and lower-level runtimes like runC or gVisor, which execute the container’s code. This week’s guest is Derek McGowan, a Software Engineer at Docker and a containerd maintainer-d.

Along with the news of the week, Adam and Craig discuss the many Vancouvers.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Vancouver, Vancouver, and George Vancouver
South Bend, North Bend, and Bend
Cosmpolis
“50 Year Sensation: the Dave McMacken Retrospective” (album art show in Astoria, Oregon)

News of the week

Istio 1.3 is out
Google’s Anthos now incudes Anthos Service Mesh, Cloud Run for Anthos and more
Cloud Native Application Bundles hit 1.0
- Episode 61 with Ralph Squillace and Jeremy Rickard
Nominations for the annual CNCF Community Awards
Bloomberg hits 90% utilization with Kubernetes
Mistakes that “cost” thousands by Gajus Kuizinas
Kubernetes Edge working group publishes whitepaper
Isopod, by Cruise
Pulumi 1.0
5 RBAC mistakes you must avoid (number 4 will shock you)
OpenShift 4.2 disconnected install
Red Hat Quay 3.1
Microsoft AKS brings Scale Sets and Standard LB to GA
- Upstream kernel bugs
Amazom EKS adds cluster tagging and IAM roles for service accounts
Deep dive into AWS Fargate by Abhisheck Ray from Amazon
Kong introduces Kuma, “universal service mesh”
Google introduces Cloud Dataproc for Kubernetes
Apache Flink operator from Google Cloud
Container runtime security bypasses on Falco by Mark “Antitree” Manning
Rafay Systems lands $8m in Series A funding

Links from the interview

containerd
Original announcement
The many meanings of ‘container runtime’
kubelet and Container Runtime Interfaces
runC, gVisor, Kata Containers, and the Windows Host Compute Service (HCS)
ctr debug tool
containerd’s graduation from the CNCF
containerd shim API
rkt announced in 2014 with appC spec
Open Container Initiative
- libcontainer, which became runC
Web Assembly (WASM)
BuildKit
1.3.0 releases are coming
Contribution opportunities:
- Reporting issues
- Plugin ecosystem
Derek McGowan and containerd on Twitter

Windows Server Containers, with Patrick Lang Sep 11, 2019

Patrick Lang is the co-chair of the Kubernetes Windows SIG. He is a Senior Software Engineer at Microsoft, developing Kubernetes and related open-source projects supporting Windows Server Containers. Patrick joins Adam and Craig to tell the story of how containers came to Windows.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Getting to the Peak Tram

News of the week

KubeCon 2019 schedule
- Tim Hockin and Kal Henidak on dual stack IPv4
- Building a 5G network live on stage
GKE Shielded VM Nodes
Mæsh
Project Contour 0.15
- Contour on Kind
TechCrunch video: How Kubernetes Changed Everything
Aaron Roydhouse reverse engineers release schedules as 1.15 hits Preview on Azure and Rapid Channel on GKE
GKE Scalability best practices
- The Kubernetes scalability hypercube
Cloud Foundry Networking Team Update
Building a Continuous Delivery Pipeline for Symphony by Ivan Babenko
The Cult of Kubernetes and Hacker News discussion

Links from the interview

Windows Server containers
Windows Server Core and Nano Server
Sessions on Windows
Docker and Windows partnership announced in 2014
Active Directory
Group Managed Service Accounts (GMSA)
- GMSAs for Windows containers
Windows network namespaces
Host Networking Service and Virtual Filtering Platform
GMSA integration with Kubernetes
GPU acceleration in Windows Containers
Batch files!
Patching:
Docker for Windows
Get started with Windows containers
Windows Server Containers in preview on AKS, EKS or GKE
SIG Windows and their Slack channel
Patrick Lang on GitHub

kind, with Ben Elder Sep 03, 2019

kind stands for Kubernetes in Docker. Originally built for continuous integration (CI) and testing of Kubernetes itself, kind has found many uses, including acting as a cluster for bootstrapping other clusters. Original author Ben Elder from Google Cloud joins Craig and Adam to talk about it.

Want to see Adam’s puzzles? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Ben’s GSoC proposal and first Kubernetes project: use iptables for proxying instead of userspace
kind webpage
- Documentation
kind on GitHub
Privileged containers
kubernetes CI
Cluster API
IPv6 on kind
End to end testing
Running Kubernetes in a CI pipeline by Loodse
Cluster API logo - it’s turtles all the way down
kubeadm
cluster-api-provider-docker
Other tools:
- kinder
- kindest
Shoutouts to:
- Antonio Ojea from SUSE
- James Munnelly from JetStack
- SIG Cluster Lifecycle
Ben Elder on Twitter

Container Camp, with Angie Maguire Aug 27, 2019

Container Camp is a series of independent conferences, spanning three continents and in their fifth year. “Camp mother” Angie Maguire is the co-organiser, and is also the founder of Ladies of Code. She joins Adam, who is yet to attend a Camp, but actually goes camping, and Craig, who has spoken at Camps in London and Sydney, and prefers hotels.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

VMware buys:
- Pivotal
- Carbon Black
- Intrinsic
- Greenland
VMworld news:
- Introducing Project Pacific
- Project Pacific technical overview
  - Reintroducing Project Bonneville?
- Joe Beda’s take
- Tanzu, VMware’s approach to modern applications
- Tanzu Mission Control
Splunk acquires SignalFX
2019 Accelerate State of DevOps report
Red Hat OpenShift Service Mesh is GA
- Maistra, the upstream of the operators
Cilium 1.6 is out
E2E Kubernetes testing with GitHub Actions
Why does developing on Kubernetes suck?
- Hacker News says it doesn’t
CNCF Google Summer of Code projects

Links from the interview

Container Camp
Ladies of Code
- Women Who Code
- Black Girls Code
Container Camp videos on YouTube
- Craig’s talk from London in 2016
- Kaggle talk from San Francisco in 2016
IPFS Camp
Digital nomads
Angie’s Netflix recommendations:
Container Camp and Angie Maguire on Twitter

Orka, with Chris Chapman Aug 20, 2019

Kubernetes and Docker might not seem the obvious choice for managing virtual macOS instances on hosted Apple hardware. Learn how they were used to build Orka - Orchestration for Kubernetes on Apple - a virtualisation layer for Mac build infrastructure offered by hosting company MacStadium. Craig and Adam ask MacStadium SVP of Software Chris Chapman about Orka, and how Kubernetes is useful in places you might not expect.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Letterboxing
- Geocaching
- Orienteering

News of the week

HTTP/2 security bulletin from Netflix
- New releases for:
  - Kubernetes
  - Istio
  - Envoy
  - gRPC
  - NGINX
- And others
CNCF archives the rkt project
GitHub Actions is now a CI/CD service
- Announcing preview of GitHub Actions for Azure
Kubernetes web UIs in 2019 and Kubernetes Web View by Henning Jacobs
- Episode 38: Kubernetes Failure Stories, with Henning Jacobs
k3sup by Alex Ellis
- Episode 57: Rancher Labs, with Darren Shepherd
Evolving Istio’s APIs, by Sandeep Parikh and Louis Ryan
- Episode 58: Istio 1.2, with Louis Ryan
- Istio 1.3 release branch cut
Intel GPU Plugin for Kubernetes by Brian Carey
Kubernetes Gated Deployments at GoDaddy
CNCF now has 100 end user members
VMware, Pivotal and Dell:
Helm Summit EU 2019

Links from the interview

MacStadium
Orka
Conference presentation videos from Chris:
- macOS in a Docker container for development - MacADUK 2019
- Announcing Orka - AltConf 2019
Mac OS X Lion supports running additional OS X instances (up to two)
- 10.7 EULA (PDF)
Device test labs
Docker for Mac
Virtual Command, Chris’s prior company acquired by MacStadium
The orca
kubevirt
Mac hardware:
- Mac Pro (2013) - the “trashcan”
  - The MacStadium sled
- Mac Pro 2019 - the return of the “cheesegrater”
- T2 security chip
- MacStadium in WWDC 2018 keynote
- Inside the MacStadium data center
JenkinsWorld 2019
- Orka plugin for Jenkins
Docker for Mac in macOS on Docker
MacStadium on Twitter

kubectl Plugins and krew, with Ahmet Alp Balkan and Luk Burchard Aug 13, 2019

No matter how you say it, you probably use kubectl all the time. Did you know you can extend it with plugins? Did you know you can find and install those plugins using krew, a plugin manager for kubectl? krew was built by Luk Burchard, a student at TUBerlin, as an intern project. He was supervised by Ahmet Alp Balkan at Google Cloud, and they both join Craig and Adam to discuss it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

kubectl overview
Extend kubectl with plugins
Sample CLI plugin
Write your own kubectl subcommands and The case for a kubectl plugin manager by Ahmet Alp Balkan
kustomize becoming a kubectl sub-command
kubectl access-matrix (a.k.a. rakkess, as a stand-alone binary)
krew
krew plugin index
Ahmet’s recruitment tweet
Luk’s first day at Google
Ahmet Alp Balkan:
- Web
- Twitter
Luk Burchard:
- Web
- Twitter

Attacking and Defending Kubernetes, with Ian Coldwater Aug 06, 2019

Ian Coldwater specializes in breaking and hardening Kubernetes, containers, and cloud native infrastructure. A pre-eminent voice in the Kubernetes security community, they are currently a Lead Platform Security Engineer at Heroku. Ian joins Adam and Craig to talk about the offensive and defensive arts.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Red teams and penetration testing
Fuzzing
Attacking Helm’s Tiller
Black-box and white-box testing
DevSecOps: guard rails, not gates
OWASP - the Open Web Application Security Project
The math behind calculating security risk
CVSS score
etcd: encrypt it at rest!
Admission control
Technologies for isolation:
- AppArmor
- Seccomp
- gVisor
- Firecracker (not yet supported with Kubernetes)
“Kubernetes is powerful, and it’s insecure by design”
- Ian and Duffie Cooley’s BlackHat talk
- Cloud doesn’t make it better!
Threat modelling
hostpath - “a powerful escape hatch”
- Trail of Bits blog: understanding Docker container escapes
Recommended watching:
- Ship of Fools by Ian Coldwater (slides)
- Hacking and Hardening Kubernetes by Example by Brad Geesaman (slides)
- A Hackers Guide to Kubernetes and the Cloud by Rory McCune (and his upcoming Black Hat training)
- DIY Pen Testing for your Kubernetes Cluster by Liz Rice (our guest on episode 19)
Ian Coldwater on Twitter

Cloud Code, with Sarah D'Angelo and Patrick Flynn Jul 30, 2019

Cloud Code provides everything you need to write, debug, and deploy Kubernetes applications, including extensions to IDEs such as Visual Studio Code and IntelliJ. Joining Craig and Adam are Sarah D’Angelo, a UX Researcher, and Patrick Flynn, an engineering lead, both on the Cloud Code team at Google.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Economics of Kubernetes, with Owen Rogers Jul 23, 2019

Owen Rogers is a Research Vice President at 451 Research, co-leading the cloud team. He gained a PhD in the economics of cloud computing in 2013. Owen joins Craig and Adam to discuss the economics of cloud computing generally, and Kubernetes specifically.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Apollo Guidance Computer Restoration
- Summary from Wall Street Journal
CyberSquirrel1 global threat map
Jellyfish attach power station

News of the week

IBM launches Kabanero
Pivotal launches PAS for Kubernetes
Weave Flux joins the CNCF
Windows Container Unconference on Friday July 26th:
- Sign up
- Leave questions if you can’t attend
Spinnaker for GCP launched
Linkerd 2.4
Architecting with GKE course, free for podcast listeners!
Deep dive into Virtual Kubelet by Brian Goff
SIG Usability forming
Cloud Provider SIGs moving to sub-projects
Azure Monitor for containers adds Prometheus support
Kubernetes API deprecations in 1.16

Links from the interview

Large Hadron Kubernetes at CERN, with Ricardo Rocha, Lukas Heinrich, and Clemens Lange Jul 16, 2019

Back in 2012, CERN announced one of its most important achievements; the discovery of the Higgs boson. This work led to the 2013 Nobel Prize in Physics. Ricardo Rocha, Lukas Heinrich and Clemens Lang of CERN redid the data analysis on top of Kubernetes this year, which Ricardo and Lukas demonstrated at a keynote at KubeCon EU. All three join Adam and Craig for a short physics lesson and a view into computing at the largest scale, for particles at the smallest.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

50th anniversary of the launch of Apollo 11 by NASA’s Astronomy Picture of the Day, and as reported by CBS News in real time
LEGO Saturn V - mid-completion
47th annual Seafair Milk Carton Derby
- Adam’s pictures, including the Saturn V rocket

News of the week

IBM announced it has closed its acquisition of Red Hat
Hashicorp Consul 1.6
Benchmarking best practices for Istio by Megan O’Keefe, Mandar Jog and John Howard
IPv6 enhancement proposal for Kubernetes
- Now passing tests!
Architecting with Google Kubernetes Engine specialization
Weave Ignite
Cloud Native CI/CD with OpenShift Pipelines
k3v
Avoid time-of-measurement bias with Prometheus
- Prometheus client tracer for Ruby

Links from the interview

Cloud Native Application Bundles, with Jeremy Rickard and Ralph Squillace Jul 09, 2019

The Cloud Native Application Bundle is a spec for packaging distributed apps, developed by Microsoft with support from Docker and Pivotal. Jeremy Rickard, a senior software engineer at Microsoft Azure, and Ralph Squillace, principal PM for open source/developer user experience at Microsoft Azure, join Craig and Adam to discuss it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Bloons TD 6 - made in New Zealand!
Full Throttle Remastered

News of the week

Kiali 1.0 (and 1.1!) released
Dockerfile best practices by Tibor Vaas
Managed CockroachDB on Kubernetes by Josh Imhoff
To run or not to run a database on Kubernetes: what to consider, by Benjamin Good
Backyards: Istio multi-cluster, the easy way by Banzai Cloud
- Episode 59 with Janos Matyas
KubeCon EU Transparency Report

Links from the interview

Cloud Native Application Bundles
The spec
- Bundle descriptor
- The invocation image
Chris Crone’s “intro to CNAB” talk
MSI, aka Windows Installer
Duffle (and on GitHub)
- Example VM driver
Libraries
- cnab-go
- pycnab by Gareth Rushgrove
- libcnab-rust
Porter (and on GitHub)
Docker apps and Application in Docker Enteprise
Helm and Helm 3
Deis Labs
Unexpected uses:
- Adding extra verbs by Darren Pulsipher
- CNAB bundle for WSL distros by Nuno do Carmo
Twitter:

Ubuntu, with Mark Shuttleworth Jul 02, 2019

Mark Shuttleworth is the founder of Ubuntu and CEO of its parent company Canonical. Ubuntu is the Linux distribution of the Cloud. You can use it inside your containers, or you can use it as your node OS. Canonical packages Kubernetes for both the edge (MicroK8s) and the server (Charmed Kubernetes). Oh, and aside from that, Mark was the first African in space, spending 8 days on the International Space Station in 2002. Craig and Adam ask Mark about how this all happened, and how it has changed his perspective on technology.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Wicked, the musical
+LIVE+, the band
- Craig’s video clips: All Over You, Run To The Water, Lightning Crashes

News of the week

Links from the interview

Mark Shuttleworth
Thawte
Soyuz TM-34 mission to the International Space Station
Ubuntu
- Wikipedia
- no-name-yet.com: Mark announces his intention to launch a Linux distribution at EuroPython 2004
Getting Ubuntu down to 30mb
Snaps
MicroK8s
- Charmed Kubernetes for larger-scale deployments
- OpenEBS, and Episode 56 with Evan Powell
Anthos
Sunrise and sunset from the ISS
Mark Shuttleworth on Twitter

Banzai Cloud, with Janos Matyas Jun 25, 2019

Banzai Cloud is a cloud-native software company that builds Pipeline, a managed Cloud Native application and devops platform, featuring tools for managing multi- and hybrid-cloud Kubernetes deployments. Pipeline is open source, and Banzai Cloud has many other interesting open-source projects, including a Kubernetes distribution, and operators for things like Vault, Kafka and Istio. Adam and Craig talk to its co-founder and CTO, Janos Matyas, who is based in Budapest, but is spiritually of Oahu, Hawaii.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Is this what childrens music has become?
Dogs That Look Like Their Owners
- Runner-up
- Winner

News of the week

Links from the interview

Banzai Cloud
Pipeline
- GitHub
Cloud pricing info
Telescopes
Banzai PKE for Azure and AWS
Operators:
- CoreOS’ Operator Framework and SDK
- Bank-Vaults and source
- Logging Operator and source
- Kafka Operator and source
- Istio Operator and source
The Banzai Pipeline surf spot
- Not related to the art of small trees
- Telescopes surf spot
Janos Matyas on Twitter

Istio 1.2, with Louis Ryan Jun 18, 2019

Istio 1.2 has been released. Louis Ryan is a core contributor to Istio and a member of its Technical Oversight Committee, in his role as Principal Engineer at Google Cloud. He talks to Craig and Adam about his history with API infrastructure and the service mesh, and the history and future of the Istio project.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Istio 1.2
HAProxy 2.0
New Docker Desktop for Windows with WSL 2 coming
Facebook peels the lid off Tupperware
Wind River adds Docker and Kubernetes support for the edge
Banzai Cloud adds Istio to Pipeline
Apple joins the CNCF as a Platinum member
Modernize IT 2019 digital conference from Google Cloud

Links from the interview

Istio service mesh
Louis Ryan’s talk at QCon
gRPC
Sidecar pattern
Core features of Istio
amalgam8 from IBM in 2016
What is a service mesh?
Envoy Proxy
Istio 1.2 release notes
- Snow Leopard: 0 new features
- The original announcement of Istio 0.1
The upcoming Istio operator
Common misconceptions:
- Design goals
- Community
Related episodes:
Louis Ryan on Twitter

Rancher Labs, with Darren Shepherd Jun 11, 2019

Darren Shepherd builds the Cloud at Rancher Labs, a company making entirely open source Kubernetes tooling, from the enterprise to the edge. This week Craig and Adam will finally learn how to pronounce ‘k3s’ and ‘k3OS’.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Day of the Tentacle at The Digital Antiquarian
- Remastered, on sale at gog.com
Vigil Files (Android)

News of the week

Reflections on the Fifth Anniversary of Kubernetes
- Happy birthday from Mum and Dad
- I’m Tim Hockin, a top level Kubernetes maintainer. AMA!
Orka, from MacStadium
- Introductory video from AltConf
Five enterprise takeaways from KubeCon EU by Platform9: number 4, the SOA Tikka Masala, will shock you
11 salary statistics for Kubernetes jobs from The Enterpriser’s Project
- Want to work for Google? E-mail us!

Links from the interview

Rancher Labs
RKE
Longhorn
- OpenEBS used to be based on Longhorn
Darren’s Rancher shirt
k3s - “Lightweight Kubernetes. 5 less than k8s.”
- How do you pronounce the “k3s”?
k3OS
Rio
Darren Shepherd on Twitter

OpenEBS, with Evan Powell Jun 04, 2019

Evan Powell is the CEO and chairman of MayaData, the corporate sponsor of OpenEBS, which has just joined the CNCF Sandbox. He talks to Adam and Craig about Cloud Native storage, chaos engineering for stateful workloads, and the stubbornness of hybrid clouds.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Cricket and rugby on the same day
Poseidon’s Anchor bass
Black Mirror and The Rain
- Don’t go out in the pouring rain

News of the week

Docker bug allows reading/writing host files
- Advisory by Aleksa Sarai
- Duo Security writeup
Kubernetes bug allows containers to run as root
Palo Alto Networks announces intention to buy Twistlock
- TechCrunch coverage
- CVEs found by Twistlock Labs
Kubernetes Node.js client library 0.9.0
- List of client libraries
NVIDIA EGX
CKA now valid for 3 years
Microsoft news:
- AKS available in South Africa North
- OCI types and Helm 3 charts in Azure Container Registry
- Azure Monitor supports Windows Server nodes

Links from the interview

OpenEBS
- On GitHub
Now a CNCF Sandbox project
A year later: updating Container Attached Storage by Evan Powell
MayaData
KUBEMOVE (and on GitHub)
NDM, the Node Disk Manager
Evan’s talk at SDC 2017 with Homer Simpson references
New storage technologies:
- Optane/3D XPoint for DRAM-like storage
- NVME over Fabrics
- SPDK
- Fast fabrics
Litmus (and on GitHub)
- Chaos Monkey and Simian Army
- Weave Scope
The mule logo: OpenEBS, MayaData

Solo.io, with Idit Levine May 28, 2019

Solo.io was founded in 2017 by this week’s guest, Idit Levine. She talks to Craig and Adam about API gateways, service meshes, and lots of project names with two O’s in them.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Casa Battlo
Picasso Museum
Dali Museum and Theatre in Figueres
MoPOP in Seattle
- The “Beaker Sane” t-shirt
A bottle of Sortilege whisky
- Gifted to us by Francois LeMessier
- Shared with the community at KubeCon

News of the week

Announcing SMI
- SMI Spec website
CNAB and Virtual Kubelet updates from Microsoft
Banzai Cloud Kafka Operator
Razee: multi-cloud CD from IBM
Couchbase Autonomous Kubernetes Operator 1.2
Rio, a MicroPaaS from Rancher Labs
Atlassian Software for Kubernetes from Praqma
Kyma goes 1.0
Intuit win the CNCF End User Award
CapitalOne make their Kubernetes platform available

Links from the interview

Solo.io
Gloo
- Envoy Proxy
SuperGloo
SMI
GlooShot
Service Mesh Hub
Flagger by Weaveworks
Chaos Debugging talk from KubeCon EU; discussing Loop
Knative
- Using Gloo in Knative
Idit Levine on Twitter

Tech, Life, and KubeCon EU, with Bryan Liles May 21, 2019

Bryan Liles is a Senior Staff Engineer at VMware, the program co-chair for this week’s KubeCon EU, a sought-after speaker, and a minority in an industry with few people who look like him. He shares his story with Craig and Adam, who also bring you the week’s news from KubeCon EU and beyond.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

VMware acquires Bitnami and Bitnami is acquired by VMware
- Bitnami’s application catalog
Knative 0.6 is out
- New API proposal
GKE Sandbox: bring defense in depth to your pods
Stackdriver Kubernetes Monitoring is GA
Helm 3 preview
- Episode 11 with Vic Iglesias
GKE announces Release Channels
- Docs
Windows Server containers in Preview:
Bring your own subnet to AKS
Lyft bug bounty program
Velero 1.0
Digital Ocean Kubernetes is GA
Kubernetes apps on GCP Marketplace
Terraform Cloud Remote State Management
CNCF adds 42 new members
Cloud Native Logging with Fluentd
OpenTracing + OpenCensus = OpenTelemetry
OpenEBS joins the CNCF
Lightning round:
- Harbor 1.8
- Supergiant Kubernetes Toolkit 2.1.0
- Ambassador 0.7
- Mirantis BYOD
- MiniKF from Arrikto
- Gravity 6.0
- Cloud 66 Maestro
- k8up from VSHN

Links from the interview

Optiva and Arctiq, with Dan Dyer and Kyle Bassett May 14, 2019

Dan Dyer is Senior Vice President of Technical Product Management at Optiva, a provider of business support services to the telecommunications industry. Optiva have been moving services to Kubernetes, and with the help of Kyle Bassett and team from Arctiq, a cloud-native consultancy, kicking the tyres of Anthos and GKE On-Prem. Adam and Craig learn about this journey from Dan and Kyle, and discuss dragons and foxes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Baby foxes
Aaron Crickenberger interview on the Kubernetes blog
Dragon research

News of the week

Links from the interview

AutoTrader UK, with Russell Warman and Karl Stoney May 07, 2019

AutoTrader UK were an early adopter of Istio. Adopting it to meet GDPR requirements for encrypted traffic, Head of Infrastructure and Operations Russell Warman and lead engineer Karl Stoney have gone on to use it to reduce resource usage, and thus cost, as well as uncover bugs in their applications. They talk to Craig about it, while Adam serves his country.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Microsoft and Red Hat announce KEDA
- ZDNet coverage
Updates from Microsoft: AKS virtual nodes GA, DevSpaces GA, Policy in Preview
Remote development with VS Code
DockerCon:
- Docker Enterprise 3.0
- Docker Foundation
Monzo Response:
Velero v1.0.0-beta.1 is out
Grafana dashboards for Kubernetes administrators by Povilas Versockas
KubeCon EU Diversity Lunch and Hack
Red Hat Quay v3
Rook 1.0
- Episode 36 with Jared Watts
5G Depends on Kubernetes in the Cloud, according to Steven J. Vaughan-Nichols
- He also says Airship 1.0 marries Kubernetes and OpenStack for 5G’s good
- Airship 1.0 release notes

Links from the interview

Autotrader UK
Craig, Russell and Karl in the studio
Craig’s 1993 Vauxhall Cavalier
GCP Case study
Mutual TLS encryption in Istio
Onramp to Istio: An Adoption Story Google Cloud Next session with Dan Ciruli, Russell Warman and Karl Stoney
Managing your costs on Kubernetes: Karl’s blog post
Istio 1.1 feature: Sidecar resources
- Reduced CPU cycles by 90%
15,000 releases per year
Russell Warman and Karl Stoney on Twitter

KeyBank, with Gabe Jaynes Apr 30, 2019

Gabe Jaynes is a DevOps Architect at KeyBank, an American retail bank. KeyBank were an early adopter of containers, and Gabe talks about the reasons they undertook this transformation. Craig and Adam also celebrate our first birthday and spoil the concept of spoilers.

Please say hello and 🎂🎁!

twitter: @kubernetespod
mail: kubernetespodcast@google.com

Chatter of the week

Avengers: Endgame easter egg in Google search (no spoilers)
- The spoilers that Craig beeped out
Throne of Games (no spoilers)
Gorogoa
“I desire a conversation. Will you talk to me?”

News of the week

DockerHub breached: change your password
k3os, the Kubernetes Operating System
- Rancher OS
Multi-cluster service mesh overview by Andrew Jenkins
Containing our enthusiasm: All the Kubernetes security news from Google Cloud Next ‘19 by Maya Kaczorowski and Anne Bertucio
- Episode 008
How You Can Help Localize Kubernetes Docs by Zach Corleissen
- Episode 005
Hardware Accelerated SSL/TLS Termination in Ingress Controllers using Kubernetes Device Plugins and RuntimeClass by Mikko Ylinen
EmpowHER Reception Renamed EmpowerUs For KubeCon + CloudNativeCon Europe 2019

Links from the interview

Spotify, with David Xia Apr 23, 2019

Spotify were early adopters of Docker, and wrote their own deployment tool to run it in production. David Xia from the Spotify platform team talks about Spotify’s engineering, challenges, how Helios worked, and migrating from it to Kubernetes. Adam and Craig also give a round up of the week’s news, in the form of a question.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Spotify
- This podcast on Spotify
- Spotify open source utilities on GitHub
Helios
- 2014 introduction video with Rohan Singh
Apollo: Java libraries for microservices
GKE Usage Metering: Whose line item is it anyway? with Madhu Yennamani and Yang Guan from Google, and David Xia from Spotify
- Episode 40 with Madhu Yennamani
GCP Firewall Enforcer
David Xia on Twitter

Live from Google Cloud Next '19, with Eric Brewer Apr 16, 2019

Live from Google Cloud Next ‘19 the KPfG team presents a fireside chat with Eric Brewer, our first guest with their own Wikipedia page. Eric devised the CAP theorem for distributed systems, based on his work at early search company Inktomi and UC Berkeley. He was the person who announced Kubernetes to the world almost 5 years ago, and has been working on Google’s cluster and compute infrastructure since 2011.

How did you like the live show format? Please let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Anthos:
- Everything You Want To Know About Anthos - Google’s Hybrid And Multi-Cloud Platform by Janakiram MSV
- New Google Cloud Service’s Key Selling Point: It Works Great With AWS and Azure by Jonathan Vanian
- Google Cloud makes some strong moves to differentiate itself from AWS and Microsoft by Ron Miller
Fluentd graduates to top level project in CNCF
Speakers for KubeCon China ‘19 announced
AKS to South Central, South and Central
The Fargate Illusion, by Lee Briggs
- Fargate and EKS roadmap
OpenStack Stein launches with improved Kubernetes support
New GKE features from Next session videos:
Process ID limiting for stability improvements in Kubernetes 1.14

Links from the interview

Eric Brewer:
- Wikipedia
- Twitter
- UCB
Inktomi
- DEC SRC, working on AltaVista
- Inktomi’s wild ride: A Personal View of the Internet Bubble - Eric presenting at the Computer History Museum in 2008
CAP theorem
- Cat theorem
- Spanner, TrueTime and the CAP theorem
Application Modernization and the Decoupling of Infrastructure, Services and Teams
- Our revised title
President Clinton with Eric
Eric’s interview on theCUBE at Next

Anthos Migrate, with Issy Ben-Shaul Apr 09, 2019

Anthos (previously known as Cloud Services Platform) has just gone GA at Google Cloud Next. One of its new features is Anthos Migrate, a tool for migrating monolithic apps directly to containers. Issy Ben-Shaul is a Director of Software Engineering at Google Cloud and led the team building Anthos Migrate. He talks to Craig and Adam about it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam enjoyed:

Umbrella Academy on TV
Hearthstone on the computers
Jarrod Alonge in his ears
- Death metal in water wings

Craig enjoyed:

Saturday
2/3 of “On The Basis Of Sex”

News of the week

Anthos from Google Cloud
Project Eirini updates bring Kubernetes to Cloud Foundry
OPA graduates to the CNCF incubator
CRI-O joins the CNCF incubator
Buildpacks: defense against the Docker arts
Local persistent volumes in Kubernetes - PVC pipes!
Istio 1.1.2 out for the Envoy CVEs:
- NUL parsing bug
- Path normalisation bug
Why Rainforest moved from Heroku to GKE
Enabling RBAC for Groups in GKE
Metalkube 🤘
Krew moves to SIG-CLI
New gVisor website

Links from the interview

Anthos Migrate & Velostrata
Next sessions:
- Anthos Migrate: On-Prem to Cloud-Native on GKE
- Real World Customer Migration with Cardinal Health and Atos
Anthos
Issy Ben-Shaul on Twitter

Tekton, with Kim Lewandowski Apr 02, 2019

Tekton brings Kubernetes-style resources for declaring CI/CD-style pipelines. Kim Lewandowski is the Google Cloud product manager who recently announced it. She talks to Adam about the project while Craig sneaks in some vacation at the cafes of New Zealand.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Register for the Kubernetes Podcast from Google Cloud Live session!
Craig has a lovely afternoon at the Cable Bay Cafe
Auckland Kubernetes Meetup - thanks everyone!
Adam reads Origin by Dan Brown
- Renowned Author Dan Brown, one of Craig’s favourite newspaper columns of all time

News of the week

Minikube releases v1.0.0
- Episode 39, with Dan Lorenc
- Running Kubernetes locally on Linux with Minikube by Ihor Dvoretski
Uber open-sources Peloton
Square build a service mesh with Envoy and gRPC
AWS App Mesh is GA
Tetrate Q
- Star Trek Q
The Service Mesh Era: Istio’s role in hybrid and multi-cloud by Megan O’Keefe
Merging OpenTracing and OpenCensus
kubectl cp vulnerability and CSI portmap vulnerability
Brigade 1.0 from Deis & Microsoft
Debugging an intermittent connection reset in kube-proxy by Yongkun Gui
Register for the Kubernetes 1.14 webinar
Meet the Ambassador: Paris Pittman
Four key tips on how to do massive scale with Kubernetes by Reda Benzair

Links from the interview

Tekton
- Open Source Leadership Summit
- A tektōn is a Greek artisan or craftsman
Formerly known as Knative Pipeline
GitHub repo
Triggermesh Aktion
In Defense of YAML
Continuous Delivery Foundation
Contributing to Tekton
Kim Lewandowski on Twitter

Kubernetes 1.14, with Aaron Crickenberger Mar 26, 2019

Kubernetes 1.14 is out! Your hosts talk to release manager Aaron Crickenberger of Google Cloud about the release process, working with Kubernetes Enhancement Proposals (KEPs), cat t-shirts, and being bearded on face vs. at heart.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Aaron Crickenberger
- Co-founder of SIG Testing
- Member of the Kubernetes steering committee
- Blackhawk flight simulator but it’s in a container
- Aaron’s soundcloud page
  - Hugh Pagdham
Release lead
Aaron’s podcast recording cat t-shirt
Episode 10, with Josh Berkus and Tim Pepper
New in 1.14:
LTS Working Group
Cryptonomicon by Neal Stephenson: the suit and the beard
Aaron Crickenberger on Twitter

SPIFFE, with Andrew Jessup Mar 20, 2019

SPIFFE is the Secure Production Identity Framework for Everyone. Craig hates the name. Andrew Jessup, co-founder and VP of Product at Scytale (with a C) tells him and Adam why they should look past that and how Jason Bourne fits into the world of Cloud Native.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Victim Support Official Page: Christchurch Shooting Victims’ Fund
The Small Screw Phenomenon from The Book of Ultimate Truths by Robert Rankin

News of the week

Links from the interview

SPIFFE
Scytale
- The scytale
Joe Beda’s Gluecon talk
Application Layer Transport Security, which Andrew and Joe refer to as “LOAS”
The Bourne Identity
Istio Citadel
Scytale Enterprise
Andrew Jessup on Twitter

Continuous Delivery Foundation, with Tracy Miranda Mar 12, 2019

Today Google and CloudBees, along with 20 other companies, launch the Continuous Delivery Foundation (CDF). Tracy Miranda is the Director of Open Source Community at CloudBees, who coordinated donating Jenkins and Jenkins X to the CDF. She talks to Adam and Craig about why it the CDF been formed, and what to expect in this space in the future.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

John Wilkes’ series of simulations
Kubernetes Podcast from Google Cloud Next - live show at Google Cloud Next!

News of the week

Links from the interview

CloudBees
- Kohsuke Kawaguchi
- The population of Greece
Jenkins
Jenkins X
- Throwing an X
- Throwing an axe
Tekton
Spinnaker
Continuous Delivery Summit at KubeCon EU in May
CDF members
Fastlane, continuous delivery for mobile, is on Tracy’s wishlist
Tracy Miranda on Twitter or at tracymiranda.com

Borg, Omega, Kubernetes and Beyond, with Brian Grant Mar 05, 2019

Brian Grant joined the Borg team in 2009, and went on to co-found both Omega and Kubernetes. He is co-Technical Lead of Google Kubernetes Engine, co-Chair of Kubernetes SIG Architecture, a Kubernetes API approver, a Kubernetes Steering Committee member, and a CNCF Technical Oversight Committee member, where he’s sponsored 11 CNCF projects. Your hosts talk to him about all those things.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Sunset from Mauao (Mount Maunganui)
Russian Doll on Netflix
- Edge of Tomorrow sequel back on

News of the week

Links from the interview

Policy and Config Management, with John Murray Feb 26, 2019

Kubernetes has a number of mechanisms to enforce policy: some built-in, like quota and NetworkPolicy; some extensions or add-ons like OPA. John Murray, a product manager at Google Cloud, joins Craig and Adam to talk about policy and configuration, and introduce the new CSP Config Management tool launched to Beta along with the new Cloud Services Platform.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Google brings Cloud Services Platform to Beta
- Application Modernization and the Decoupling of Infrastructure Services and Teams by Eric Brewer and Jennifer Lin
Developer preview of OpenShift v4
Knative v0.4
Update to Azure DevOps Projects support for Azure Kubernetes Service
The service mesh era: Securing your environment with Istio by Samrat Ray of Google Cloud
Cloud Native DevOps with Kubernetes by John Arundel and Justin Domingus
- Get it free* from NGINX
All new Reddit services run on Kubernetes
Breaking Docker via runC by Yuval Avrahami of Twistlock
Secure Kubernetes with Vault by Bjorn Wenzel
Migrating from Heroku to GKE
How to prepare for a Kubernetes interview
Adding “containers” to Linux

Links from the interview

Ingress, with Tim Hockin Feb 19, 2019

The history of Borg influences the history of Kubernetes in many ways: Google has different teams handle “get traffic to a cluster” and “serve traffic”, so Kubernetes has a conceptual split here too. Tim Hockin, Kubernetes co-founder, Google principal engineer and former Borg/Omega team leader, joins Adam and Craig to explain the history and future of the Ingress API, why it’s taken so long to get to v1, and how it might evolve in the future.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Intelligence Squared: Can an AI change your mind?
Robot or Not: Is your AI a robot?

News of the Week

Arm joins the CNCF
Cilium 1.4 is released
- Installing on GKE
Lightboard: week
- Managed Knative on IBM Kubernetes Service
- Brendan Burns’ videos for Microsoft Azure
New EKS regions
- New EKS CNI plugin
Kubernetes Day India schedule announced
- Liz Rice on episode 19
The Information on Kubernetes (subscription or e-mail address required)

Links from the interview

Hello, my name is Tim Hockin, and I pronounce “kubectl” as “kubectl”
lmctfy, Google’s open source container tool
- Episode 22 with Dawn Chen
Kubernetes network concepts: Service and Ingress
Annotations
NGINX ingress
Google Cloud BackendConfig
Heptio Contour
IngressRoute
Istio v1alpha3 API
KEP to move Ingress to v1 (GA)
T-shirt logos
- Tim’s favourites: Brushstrokes and Pixels
- Craig’s favourite is the paint splash
Tim Hockin on Twitter

GKE Usage Metering, with Madhu Yennamani Feb 12, 2019

The new GKE Usage Metering feature lets you find out how much your tenants or applications cost to run. Your hosts talk to Madhu Yennamani, product manager at Google Cloud, about usage metering, and how new GKE features are implemented.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the Week

News of the week

Links from the interview

Minikube, with Dan Lorenc Feb 05, 2019

Minikube is a tool that makes it easy to run Kubernetes locally, by running a single-node Kubernetes cluster inside a VM on your desktop or laptop. Craig and Adam talk to author and maintainer Dan Lorenc from Google Cloud, and in the wake of the Super Bowl, discuss how “football” means something different to each of them.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Spark Operator for Kubernetes now in Beta
- IBM Cloud Databases report on the Operator Pattern
New members in the CNCF TOC
- Alexis Richardson from Weaveworks
- Brendan Burns from Microsoft
- Joe Beda from VMware
- Matt Klein from Lyft
- Xiang Li from Alibaba
- Kelsey Hightower from Google
Google Kubernetes Engine usage metering
Advanced application deployments and traffic management with Istio on GKE
- GitHub repo
- Megan’s development workflow for Kubernetes
Ambassador 0.5.0
- API Gateways are going through an identity crisis
Kubernetes as an API standard; looking toward a Rust implementation

Links from the interview

Dan leads a team working on:
Minikube was helped in the early days by Localkube from RedSpread, who were acquired by CoreOS (who were acquired by Red Hat, who were acquired by IBM)
- There was also Boot2docker, but Kubernetes didn’t like Docker-in-Docker much back then
Guide for developing Minikube
Other similar projects:
- Microk8s
- Docker Desktop
Things it was hard to get working:
- Load balancers; solved via tunneling
- Persistent volume provisioning, solved with a custom hostpath provisioner
Minikube Roadmap
Dan Lorenc on GitHub and on the web

Kubernetes Failure Stories, with Henning Jacobs Jan 29, 2019

You learn so much more from failure than success. Henning Jacobs, head of Developer Productivity at Zalando, joins Adam and Craig to share his own stories of failure, and talk about what he has learned by reading stories from others.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Kubernetes Failure Stories blog post
- GitHub repo
- Hacker News post
Zalando
A Million Ways to Crash Your Cluster
- Original version of the talk from the Dusseldorf meetup
Tacoma Narrows Bridge collapse
Nordstrom talk at KubeCon NA 2017
Serverless Failure Stories
Startup scripts used to just kill the Docker daemon
90 days of EKS in production: configuration options you need to set
CPU throttling
Facebook oomd
John Wilkes: only make new mistakes
Henning Jacobs on Twitter

Prometheus and OpenMetrics, with Richard Hartmann Jan 22, 2019

Richard Hartmann is a member of the Prometheus Team and the founder of the OpenMetrics project, which aims to replace SNMP with a modern format for transmitting metrics. He joins your hosts to discuss both projects, and how Cloud Native technology can improve the datacenter.

No soup for you! Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Lego collecting delivers huge and uncorrelated market returns

News of the week

Knative 0.3 released
Service Mesh Day; March 28-29, San Francisco
FoundationDB Record Layer
Tumblr open sources Kubernetes tools
gVisor presentation by Adin Scannel
Aleksa Sarai on tar in oci
Detect overspending by measuring idle Kubernetes resources
- Karl Stoney’s post on managing costs on Kubernetes
SQL Server on GKE and AlwaysOn Availability Groups
Namely’s Crash Course in Running Istio
Kubernetes failure stories
- Zalando
- Target
9 security best practices
Google remains the top contributor to CNCF projects, even if you were to remove Kubernetes!

Links from the interview

Space.net
- Swiss Army Chainsaw
Prometheus
- Built by ex-Googlers at Soundcloud
- Better than MRTG and rrdtool
- Cortex, Thanos, InfluxData for persisting Prometheus data long-term
Manage multiple DCs
Grafana for visualising data
- Variables for templating
PromQL
OpenMetrics
- A new Lingua Franca for monitoring and tracing that isn’t SNMP
  - Export SNMP to Prometheus format
- Transforming the Prometheus Exposition Format into a Global Standard; Richard’s PromCon talk
- End goal: write an RFC
- GitHub repo
- Prometheus 2.5 has experimental OpenMetrics support
QUIC becomes HTTP/3
Get involved with the Prometheus community
Richard Hartmann on Twitter

Rook, with Jared Watts Jan 15, 2019

Rook is a cloud native storage orchestrator and a controller for storage systems such as Ceph. Jared Watts has been working on Rook since the start, first at Quantum, and then at Upbound. He talks to Craig and Adam about storage, chess, and premium-rate telephone numbers.

Does anyone actually read the show notes? Turns out a few of you do. Thank you for listening and reading!

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Tabletop Simulator (a computer game)
Happy (a televisual programme)

News of the week

Kubernetes Day India from the CNCF
Vertical Pod Autoscaling in GKE in Beta
- Vertical Pod Autoscaler in OSS
Announcing TriggerMesh Knative Lambda Runtime (KLR)
- Episode 28 with Sebastien Goasguen
krew, the package manager for kubectl plugins
Monitoring Kubernetes, by Sean Porter of Sensu on the CNCF Blog
Istio 1.1 update
- Episode 15 with Jasmine Jaksic and Dan Ciruli
Kubernetes authorization via Open Policy Agent by Stefan Bueringer

Links from the interview

Symform; Jared’s first startup, peer-to-peer cloud storage
- Totally unlike KaZaA
- Where Jared first met open source, through the Mono project
- Acquired by Quantum
  - Craig explicitly remembers owning a Quantum Bigfoot (though that one wasn’t his first hard drive)
Rook, a cloud native storage orcestrator
- SIG Storage and the Volume abstraction
- Started with support for Ceph
- Also now supports CockroachDB, Minio, NFS, Apache Cassandra
- But not Gluster - for now at least
- Added to the CNCF Sandbox in January 2018, and moved to incubating in August
Upbound; founded by Bassam Tabbara
Container Storage Interface 1.0.0
Rook on GitHub
Queen Storage
Jared Watts on Twitter and the Rook blog
- Why you might have had to pay 90c per minute to tweet Jared

Cloud Native Computing Foundation, with Dan Kohn Jan 08, 2019

The Cloud Native Computing Foundation was formed to create a vendor-neutral home for Kubernetes. Now with over 30 projects, we kick off 2019 by talking to Dan Kohn, Executive Director of the CNCF, and hearing his views on projects, licenses and conferences.

Please reach out and say hello:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Platform9’s KubeCon survey
Security notices:
- Dashboard custom certificates
- API server proxying

Links from the interview

Cloud Native Computing Foundation
- Dan Kohn
Linux Foundation
- Jim Zemlin
- Other projects: Lets Encrypt, Hyperledger, Node.js Foundation
- Fellows: Linus Torvalds and Greg Kroah-Hartman
- CNCF members and Governing Board
Getting people on board with Open Source
- Crossing the Chasm (a book by Geoffrey A. Moore)
- Why Software Is Eating The World (an article by Marc Andreessen)
CNCF projects
- Project list
- Interactive landscape and trail map
- Licenses
  - Why Dan (& the CNCF) Recommnds Apache 2.0
  - “Shared source”: Redis and the Commons Clause; MongoDB and the Server Side Public Licence
- What would Dan like to see in the CNCF?
  - Istio and Knative
- Technical Oversight Committee Principles say it’s OK for overlapping projects
Certification
- For people: Certified Kubernetes Administrator and Certified Kubernetes Application Developer; curriculum
- For distributions: Software Conformance
KubeCon + CloudNativeCon
- China
  - Based on the End User Conference in 2017
  - Co-hosted with the Open Source Summit in 2019
- US
  - 27 co-located events
Dan Kohn on Twitter

Kubernetes CVE-2018-1002105, with Jordan Liggitt Dec 17, 2018

Adam and Craig end the year by talking to Jordan Liggitt, the member of the Kubernetes Product Security Team who fixed the recent critical security vulnerability in the Kubernetes API server. We also take a look at the news from KubeCon.

This is our last episode for 2018. Thank you for your support this year, and we’ll be back on the 8th of January!

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Envoy, with Matt Klein Dec 11, 2018

The Envoy proxy, a universal data plane for Cloud Native, has just graduated as the third top-level project in the CNCF. Craig and Adam talk to its author, Matt Klein from Lyft, about modern load balancing for microservices and pragmatically avoiding “second system” syndrome.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections
Microsoft Connect();
- AKS virtual nodes are in preview
- Virtual Kubelet joins CNCF
- GPU support for ACI
- ACS to be retired in favour of AKS
- Cloud Native Application Bundle
DockerCon EU 2018:
- Docker releases Compose operator for Kubernetes
  - Available on GitHub
- Docker Desktop Enterprise
Hashicorp Vault 1.0
Upbound introduce Crossplane
- Available on GitHub
- GitLab moving to GKE
Rook 0.9.0 — available you-guessed-where
MicroK8s from Canonical:

Links from the interview

Envoy
- Recently graduated to top-level project at the CNCF
- Built at Lyft
- Replaces libraries like Finagle and Hystrix
- Introduction to modern network load balancing and proxying
Envoy contributors
Istio, built on Envoy
Turning down the VC money: Why Matt isn’t starting an Envoy company
Service mesh data plane vs. control plane
Matt Klein on Twitter
Matt’s blog

MetalLB, with David Anderson Dec 04, 2018

If you’re running on-prem, and you say set up a Service type=LoadBalancer, what happens? Does your cluster call your NOC and have them order you a Juniper router? MetalLB is a popular answer to that question. Your hosts discuss load balancing with MetalLB’s author, Google Cloud SRE David Anderson.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Kubernetes 1.13 released
- Critical vulnerability in all Kubernetes versions
Kubernetes is the most popular skill in tech, according to Indeed’s Hiring Lab
Envoy graduates to a full CNCF project
AWS re:Invent
Istio on GKE released
Agones 0.6.0 released
- Episode 26 with Mark Mandel and Cyril Tovena

Links from the interview

MetalLB
- BGP and OSPF
- Katran, a load balancer from Facebook
David Anderson on Twitter

Kontena Pharos, with Jari Kolehmainen Nov 27, 2018

Kontena Pharos is a Kubernetes distribution which “just works”, even on bare metal. Adam and Craig talk to Kontena’s CTO, Jari Kolehmainen on the decisions required to distribute Kubernetes and heating your house with bare metal.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Kontena
- About
Kontena Pharos
- 2.0 release announcement
CoreOS Matchbox for PXE boot
Heating houses with nerd power
Jari Kolehmainen on Twitter

Tencent, with Joe Zou Nov 20, 2018

In some ways, China has a parallel Internet to the West. Is that Internet powered by Kubernetes? Of course! Joe Zou, PaaS Product Center Director at Tencent Cloud, talks to Craig and Adam about Kubernetes in China.

Thanks to our translator, Rae Wang.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Workloads API and KubeCon, with Janet Kuo Nov 13, 2018

On the eve of the first KubeCon in China, your hosts talk to co-chair and Google software engineer Janet Kuo about the program, and her work with SIG Apps.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

VMware acquires Heptio:
- VMware blog
- Heptio blog
- Madrona blog (one of their investors)
- Pivotal blog
Cisco integrates on-prem Kubernetes with Amazon Web Services
Kontena launches Pharos 2.0
Nabla Containers v0.2
The Kubernetes API Server by Dominik Tornow and Andrew Chen
CNI Plugins for Kubernetes by Steven Acreman
The Beginners Guide to the CNCF Landscape
IceCubeCon from Mesosphere
- Tweet us your puns!

Links from the interview

SIG Apps
KubeCon China 2018
- Episode 19 with co-chair Liz Rice
- Talks on genetics and bicycles
Janet Kuo on Twitter

TriggerMesh, with Sebastien Goasguen Nov 06, 2018

TriggerMesh is a new serverless management platform built on top of Knative. Co-founder Sebastien Goasguen joins Adam and Craig to discuss serverless, and potential trips to space.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

James Acaster: Live or on Netflix
Card game Gloom
PC game Grim Fandango
We’re on Spotify!
Peter Benjamin’s list of Kubernetes resources

News of the week

Links from the interview

Sebastien’s books: CloudStack, Docker, and Kubernetes Cookbooks
Background:
Kubeless, built with Nguyen Anh-Tu
Other projects: Fission, Riff, Nuclio
Knative
- Knative Build system
- Istio
TriggerMesh
Sebastien Goasguen on Twitter

Evolution of the Kubernetes Community, with Sarah Novotny Oct 30, 2018

Sarah Novotny is Head of Open Source Strategy at Google Cloud and a board member of the Linux Foundation (the parent of the CNCF). She joins Craig and Adam to talk about the evolution of the Kubernetes community, governance models and Codes of Conduct, and how nascent open source communities can learn from it.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

IBM enters into agreement to acquire Red Hat:
OpenShift Container Platform 3.11
- Introducing Red Hat OpenShift Container Engine
IBM Container Service now available in Milan, Italy
Mirantis Cloud Platform Edge
Mesosphere Kubernetes Engine
Kubedex On-Prem and Dolos
gRPC-Web has gone GA
Whose Pod Is It Anyway?
FoundationDB Summit announced
CNCF planning “Global South” outreach

Links from the interview

OSCON
- Announcement of Kubernetes 1.0
- Announcement of the CNCF
Raven Rock - a book Sarah read while setting up the CNCF
Conway’s Law
Paxos and Byzantine Generals
CNCF Code of Conduct
We Don’t Do That Here by Aja Hammerly
Sarah’s 2017 KubeCon NA talk
Hiding behind a Viewmaster
- Julian Cash, photographer
Find Sarah:
- at KubeCon China or Kubecon NA
- as sarahnovotny on Twitter or LinkedIn

Agones, with Cyril Tovena and Mark Mandel Oct 23, 2018

Ubisoft and Google Cloud have extended Kubernetes to support dedicated game servers. Cyril Tovena, a Technical Lead from Ubisoft in Montreal, and Mark Mandel a Developer Advocate at Google Cloud, lead the project. They talk to Adam and Craig about what they had to do, the Agones community, and how you can apply it to your Enterprise Software.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Pub quiz success

News of the week

Kubernetes v2 Provider for Spinnaker
KubeCon NA Contributor Summit
The Forrester New Wave™: Enterprise Container Platform Software Suites, Q4 2018
Kubernetes Steering Committee election resutls
Kubernetes High Availability, by Dominik Tornow from SAP and Andrew Chen from Google Cloud
Kubernetes Deep Dive by Nigel Poulton on A Cloud Guru, from listener mail
1.12 Release Retrospective by Tim Pepper from VMware
Admiralty’s Multicluster Controller
- The Lord High Admiral
Best practices for building Kubernetes Operators and stateful apps by Palak Bhatia and Jun Xiang Tee from Google Cloud
Pulumi raises $15M

Links from the interview

GKE Container-Native Load Balancing, with Ines Envid and Neha Pattan Oct 16, 2018

GKE container-native load balancing enables Google Cloud load balancers to target Pods directly, rather than the VMs that host them, and to evenly distribute their traffic. Product manager Ines Envid and staff software engineer Neha Pattan explain how.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam meets Orlando
Craig meets a Banksy

News of the week

GKE Private Clusters are GA
Announcing Cloud NAT and Container-Native Load Balancing
Amazon Elastic Container Service for Kubernetes now supports dynamic admission controllers
Fast Kubernetes development with Skaffold 0.16.0
New Cloud Foundry support for Kubernetes
Managing Kubernetes from O’Reilly; sign up for a free e-book version courtesy of Heptio
Days of Kubernetes 1.12 Past: Volume snapshots, RuntimeClass and topology-aware volume provisioning
Kubedex: GKE vs EKS vs AKS vs IKS vs ACCSK
New Relic acquires Coscale

Links from the interview

GKE container-native load balancing:
- Launch blog post
- Documentation
Configuring services with an annotation to preserve source IP
VPC-native clusters with Alias IPs
Network Endpoint Groups

Spinnaker, with Steven Kim Oct 10, 2018

Steven Kim is an engineering manager at Google, based in New York City, working on the Spinnaker project. In a companion piece to last week’s episode about CI and CD, Steven talks to Craig and Adam about how Spinnaker evolved from VMs to Kubernetes and support for other cloud native technologies.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Steven Kim on Twitter
Spinnaker
- Slack
- Forums, please don’t troll
- Spinnaker Summit

Continuous Integration and Continuous Delivery, with Andrew Phillips and Lars Wander Oct 02, 2018

Andrew Phillips (PM) and Lars Wander (Software Engineer) from Google Cloud talk to Adam and Craig about the difference between CI and CD, and how to apply these processes to your release and rollout processes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Scott Pilgrim vs. the World

News of the week

Links from the interview

The New Stack suggests the best CI/CD tool for Kubernetes doesn’t exist
Weaveworks named the category of GitOps
Jenkins X; Kubernetes-friendly Jenkins
Spinnaker
- Kubernetes v2: Manifest support
- Spinnaker Slack
Lars Wander
Andrew Phillips

SIG-Node, with Dawn Chen Sep 26, 2018

Dawn Chen, TL for SIG-Node and the Google Kubernetes Engine node team, joins Craig and Adam this week. She has worked on containers and container schedulers since 2007 - not a typo. We also bring you the news, in part from the echo chamber of Google Cloud Summit in Sydney.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Dawn Chen on GitHub
The Borg paper
Process containers (later ‘cgroups’):
- The first submission of containers to the Linux kernel
- Early coverage of process containers
- Paul Menage’s 2007 paper “Adding Generic Process Containers to the Linux Kernel”
- Dawn’s first job: tracking processes. Each job had its own GID - she would use netlink connection tracking to map processes and threads to GIDs, and, using procfs, figure out CPU and memory usage.
- Dawn’s second job: adjusting CPU usage using nice
- Today we just use memcg
- Fake NUMA - cut a machine into big chunks and assign them to groups of processes.
Linux Plumbers Conference
- Tim Hockin’s presentation at the Linux Plumbers Conference in 2011, talking about the work Dawn’s team were doing
lmctfy - Let Me Contain That For You
- In case you don’t get the joke
- It’s like runc and containerd
SIG Node
- Node and lifecycle management
- Application management
- Container runtimes and kubelet
- Node problem detection
- Resource management
- GPU & TPU
- Security isolation
- gVisor and Sandbox Pods
- Logging and monitoring
Was SIG Node the first SIG?
- Tied with SIG API Machinery
How did we get to CRI?
Container RuntimeHandler, so some pods can run with one runtime and some with another

Kubernetes SIG-PM, with Ihor Dvoretskyi Sep 19, 2018

This week, your hosts talk to Ihor Dvoretskyi, Developer Advocate at the Cloud Native Computing Foundation, about SIG-PM, the Special Interest Group for Kubernetes Program, Product and Project Management.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter

News of the week

Links from the interview

Ihor Dvoretskyi on Twitter or GitHub
SIG-PM - Program, Product and Project Management
SIG-PM Intro Talk from KubeCon EU 2018

Cloud Native Patterns for Ops, with Justin Garrison Sep 12, 2018

Justin Garrison is both a student and a teacher. A senior systems engineer in the media industry, he has boiled his experience and wisdom, as well as that of his co-author Kris Nova, into the book Cloud Native Infrastructure. He talks to Craig and Adam about the Kubernetes community and the process of writing.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter

News of the week

Cisco Hybrid Cloud Platform for Google Cloud is now generally available
- Enter the Cisco & Google Cloud Challenge! Win things!
Consul + Kubernetes from Hashicorp
Open Match announced by Google Cloud and Unity
- Agones 0.4.0 released
Couchbase Autonomous Operator
Amazon EKS now available in Ireland
- Google Cloud now available in Finland
Platform9 introduces spot instance arbitrage
External DNS 0.5.6 released
Red Hat on Kubernetes and application servers

Links from the interview

mintCast, which featured Justin a long time ago
Cloud Native Infrastructure book: website and O’Reilly
- The Economics of Writing a Technical Book
Justin’s last KubeCon talk: Let’s Build Kubernetes, With a Spreadsheet and Volunteers!
Justin Garrison on Twitter and GitHub
- Dashiell, rothgar/v2
Justin’s blog

kube-hunter and KubeCon, with Liz Rice Sep 05, 2018

Liz Rice from Aqua Security builds penetration testing tools for Kubernetes by day, and runs the KubeCon program by night. Adam and Craig dig into both topics.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter

Adam went to Battle Ground Lake State Park
Adam and Craig are both going to Google Cloud Next in Tokyo (September 19-20)
Craig is also going to Google Cloud Summits in Singapore (September 13), Sydney (September 26) and Hong Kong (October 10)

News of the week

Links from the interview

Supporting Kubernetes, with Ken Massada Aug 28, 2018

What does it take to support Kubernetes for other users? Kenneth Massada, a lead for GKE support at Google Cloud, tells Craig and Adam his story.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter

Adam lives in Seattle, which is on fire
Craig baked some tasty cookies
- Using this recipe
- But not using Vegemite, British Marmite or New Zealand Marmite, which are three totally separate things. Only one of which is nice.
  - Hint: it’s the last one

News of the week

2018 Kubernetes Steering Committee Elections
Binary Authorization on Google Kubernetes Engine
kube-hunter from Aqua Security
- Video
- Blog
Kubernetes issues and solutions from Alexander Lukyanchenko at Avito
Cilium 1.2 released
- Accelerating Envoy with the Linux Kernel
James Lee’s blogs on Kubernetes networking
Amazon EKS supports GPU-Enabled EC2 instances

Links from the interview

etcd is hard:
- Configuration flags
- OpenAI suggestions on scaling Kubernetes to 2,500 nodes includes a separate events database
- Kubernetes docs on configuring and upgrading etcd
- Tina and Fred from Google SRE also discussed etcd on Episode 9
- (Or use GKE, where we do it all for you)
Other hard concepts:
- apiVersion: is hard
- spec: is hard
- Liveliness and readiness probes - don’t make them the same!
- Joe Beda thinks of YAML as machine code in Episode 12
What would Ken like to see changed in Kubernetes?
- Affinity and anti-affinity rules and topology keys
Kenneth Massada on Twitter
- Or summon him with a GCP support case!

Shopify and Security, with Jon Pulsifer Aug 21, 2018

Jon Pulsifer is a Production Security Engineer at Shopify, and Canada’s biggest Kubernetes fan. Adam and Craig dig into why, and what Adam’s new mode of transport is going to be.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter

Sling TV using Kubernetes
- Tesla using Kubernetes?
MITMproxy, Charles and Fiddler
- Intercept HTTP traffic exiting a docker container
Adam has a lot of EconoLodge points
- Not as many as Software Defined Talk hosts Matt Ray and Michael Coté
- Craig thinks he should spend them on the Pepsi jet as seen in this wonderful video

News of the week

Service Networking in a Hybrid Infrastructure by Praveen Shukla from GoJek
KubeCon and CloudNativeCon China
- Craig’s session
7 best practices for operating containers by Théo Chamley from Google Cloud
kustomize on Homebrew for macOS
Understanding the Container Storage Interface (CSI) by Anoop Vijayan Maniankara
The Istio 1.0 Release Stream or jump straight to the part with Dan Ciruli from episode 15

Links from the interview

Royal Canadian Navy - Canadian Forces NOC
SANS institute and instructors
Jon Pulsifer is a Production Security Engineer at Shopify
Shopify’s adopting Kubernetes and Google Cloud
The evolution of Kubernetes security
- Before RBAC, you used to have to mount an empty directory over the service account to disable access to it
- seccomp and AppArmor
- RBAC
- PodSecurityPolicy
- gVisor and Kata Containers
- Planning for Secure Container Isolation in Kubernetes
- RuntimeClass enhancement proposal
Binary Authorization
- Launch blog post
- Kritis - open source reference implementation of Binary Authorization (the judge)
- Grafaes - API spec for Container Analysis API
- Shopify Voucher, a tool that creates attestations for Binary Authorization and prevents the deployment of images that don’t meet Shopify’s security requirements.
- Jon’s talk on Binary Authorization at Google Cloud Next: Securing the Software Supply Chain
Shopify’s $25,000 Kubernetes bug bounty payout
- What is a server-side request forgery?
Getting started with security by reading kubesec.io
Around Ottawa
Jon Pulsifer on Twitter

Descartes Labs, with Tim Kelton Aug 14, 2018

Tim Kelton is co-founder and cloud architect for Descartes Labs. Prior to starting Descartes Labs, he was a R&D engineer for 15 years at Los Alamos National Laboratory, working on problem areas such as deep learning, space systems, nuclear non-proliferation, and counterterrorism. Tim talks to Craig and Adam about the use of Kubernetes and Istio in geopolitics, machine learning and food supply.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Cloud Native Computing Foundation Announces Prometheus Graduation
OpenMetrics project accepted into CNCF Sandbox
An Exciting New Direction for the Kubic project
Demystifying RBAC in Kubernetes
Kubebuilder 1.0 scaffolds (with a C) Kubernetes APIs and operators
- Getting Started
- GitHub
Operator Lifecycle Management - it’s operators all the way down

Links from the interview

Descartes Labs
Beowulf clusters (a Slashdot meme)
Omega and Borg papers
Mountain biking in Sedona
Descartes Labs Python client
SRE books:
- Site Reliability Engineering
- The Site Reliability Workbook - free until August 23
Descartes Labs talks from Cloud Next ‘18:
- SRE Quality Operations for Your Services Using the Istio Service Mesh & Stackdriver - with Tim Kelton and Jay Judkowitz from Stackdriver Service Monitoring
- How Computers See the Earth: A ML Approach to Understanding Satellite Imagery with Kyle Story
- Building Multi-Tenancy ML Applications with GKE and Istio to Better Understand the Earth with Tim Kelton and Sam Skillman
Descartes Labs GeoVisual Search - find the squares on the globe that look most like a given square
Tim Kelton on Twitter

Istio, with Jasmine Jaksic and Dan Ciruli Aug 07, 2018

Istio has hit 1.0, and there’s no-one better to tell you about it than Jasmine Jaksic and Dan Ciruli from Google Cloud. Adam and Craig bring you this, as well as the news from the ecosystem.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Announcing Istio 1.0
SRE Quality Operations for Your Services Using the Istio Service Mesh and Google Stackdriver, featuring Tim Kelton from Descartes Labs (who presented at the Toronto event two years ago, and has been using Istio in production since 0.2)
Google’s Cloud Services Platform
- Kubernetes Podcast episode 13 on Cloud Services Platform with Aparna Sinha
- (It’s Dan’s favorite episode so far)
Istio à la carte; a presentation by Dan
Istio and the future of service meshes; an article by Jasmine
The Istio project:
- The URL (The IP address is 104.198.14.52)
- Community page, listing Google Groups
- Rocket Chat for users
- Twitter
Jasmine Jaksic and Dan Ciruli on Twitter

Knative, with Oren Teich Jul 31, 2018

One of the most interesting announcements from Google Cloud Next was Knative, a framework for building serverless products on top of Kubernetes. Craig and Adam talk to Google Director of Product Management, Oren Teich, about the launch.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Google’s Cloud Services Platform:
- Recapping GKE On-Prem and Knative
- Cloud Services Platform session video with Chen Goldberg and Aparna Sinha
- Google Cloud Build
- GitHub integration
Knative analysis:
- Joe Beda’s TGI Kubernetes on Knative
- Using the Knative build system by itself
Visual descriptions:
- Kubernetes: the theme park analogy
- The Kubernetes Comic
Kubernetes blog posts:
- KubeVirt: Extending Kubernetes with CRDs for Virtualized Workloads
- Feature highlight: CPU Manager

Links from the interview

Oren Teich on Twitter
About Knative:
Google Cloud Next videos:
- Serverless at Google Cloud, with Oren Teich
- High-level video intro to GKE Serverless add-on and Knative, with DeWitt Clinton and Ryan Gregg
  - Request early access to the Serverless add-on for GKE
- Developer video intro to Knative, with Ville “Fifth Beatle” Aikas and Mark Chmarny
  - Mark’s Knative samples
IBM “Zed Series”

Google Cloud Services Platform, with Aparna Sinha Jul 24, 2018

Learn about the announcements from Google Cloud Next, including GKE On-Prem, Cloud Services Platform, and Istio 1.0. Google’s product management lead for Kubernetes and CNCF governing board member Aparna Sinha joins Adam and Craig to discuss what’s new.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Aparna Sinha on Twitter
- Google Power Women Of The Cloud
Cloud Services Platform:

Kubernetes Origins, with Joe Beda Jul 18, 2018

Joe Beda, Craig McLuckie and Brendan Burns are considered the “co-founders” of Kubernetes; working with the cluster management teams at Google, they made the case that their implementation of the Borg and Omega patterns should become a proper product. Joe and Craig now run Heptio, a company working to bring Kubernetes to the enterprise. Your hosts talk to Joe Beda about the history of Kubernetes, creating a diverse company, and what exactly is wrong with YAML.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Minimal Ubuntu
Sysdig security blog series
Why Red Hat think Kubernetes is the new application server
Deep dive blog posts for Kubernetes 1.11:
Interview transcript blog post for Episode 10 with Josh Berkus and Tim Pepper
Elastifile announce Kubernetes and Tensorflow integration
Heptio Ark v0.9.0

Links from the interview

Helm, with Vic Iglesias Jul 10, 2018

Helm and its Charts help you manage Kubernetes applications. Vic Iglesias, a Solutions Architect at Google Cloud, is a maintainer of the Helm charts repository. He talks to Craig and Adam about how people are using Helm, and where the project is going.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Kubernetes 1.11, with Josh Berkus and Tim Pepper Jul 03, 2018

A special extended episode going deep on the process of releasing Kubernetes, and this week’s 1.11 release in particular. Hear from Josh Berkus from Red Hat and Tim Pepper from VMware, release manager and shadow release manager for Kubernetes 1.11, on how a release team is put together, the good and the bad of 1.11, and how Kubernetes is like a pastry oven.

Don’t you think it’s about time you said hello?

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Kubernetes 1.11 released
- Google’s summary of Kubernetes 1.11
VMware Kubernetes Engine
Google Cloud Filestore, for hosted NFS on GKE
- Apply for early access
The plan for Helm 3
Consul Connect service mesh

Links from the interview

SIG-Release
- 1.11 Release Team
- 1.12 Release Team
Release calendar for 1.11
Feature branches
SIG-Scalability
- Performance tests
- CI Signal role
Breaking changes in release notes
- Priority and preemption enabled by default
- JSON decoders should be case sensitive
Bug triage lead
Growing In Your Contributor Role from Tim at KubeCon EU
Last Week in Kubernetes Development from Josh

Josh Berkus

Tim Pepper

SRE, with Tina Zhang and Fred van den Driessche Jun 26, 2018

Craig and Adam from the Kubernetes Podcast talk to Tina and Fred from Google Cloud Site Reliability Engineering (SRE) about managing GKE and what lessons you can take to your own clusters.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Stories from the Playbook, Tina and Fred’s talk from KubeCon Copenhagen
The Google SRE Book

Security, with Maya Kaczorowski Jun 19, 2018

On this week’s Kubernetes Podcast, your hosts talk to Maya Kaczorowski from Google Cloud about Kubernetes security, and look at announcements from Microsoft, Docker, Cisco and Spotify.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Kromtech article on cryptojacking
Security scanning tools:
- Clair
- MicroScanner
Kubernetes secrets
- Use an KMS provider for data protection
- Hashicorp Vault and Kubernetes
Cluster hardening guides:
Exploring Container Security blog series
- Overview by Maya Kaczorowski
- Node and container operating systemes by Aditya Kal and Dan Lorenc
- Digging into Grafeas container image metadata by Felix Glaser and Wendy Dembowski
- Protecting and defending your Kubernetes Engine network, by Manjot Pahwa, Ahmet Alp Balkan and Bowei Du
- Running a tight ship with Kubernetes Engine 1.10 by Aaron Small and Vic Iglesias
- Using Cloud Security Command Center (and five partner tools) to detect and manage an attack by Maya Kaczorowski and Andy Chang
- Isolation at different layers of the Kubernetes stack by Tim Allclair and Maya Kaczorowski
@MayaKaczorowski on Twitter

Kustomize, with Phillip Wittrock Jun 12, 2018

This week on the Kubernetes Podcast from Google, Craig and Adam give you the low down on new GKE features and talk to Phillip Wittrock about Kustomize.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Kustomize
Phillip Wittrock and Jeff Regan on GitHub

Skaffold, with Matt Rickard Jun 05, 2018

On this weeks Kubernetes Podcast, Adam and Craig talk to Matt Rickard about Skaffold.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Microsoft to acquire GitHub for $7.5bnby
- New CEO is Nat Friedman, previously of Ximian and Xamarin
- Huge uptick in GitLab migrations - over 100,000 repositories migrated
Istio 0.8 released
VPC native clusters in Google Kubernetes Engine
Kustomize:
- Launch blog post
- Kustomize on GitHub
How to get your talk accepted at KubeCon
- Shanghai CFP
- Seattle CFP

Links from the interview

Kubernetes Documentation, with Zach Corleissen and Jared Bhatti May 29, 2018

This week, Craig and Adam bring the news from Google Kubernetes Engine and elsewhere, and talk to SIG-Docs leads Zach Corleissen (from the CNCF) and Jared Bhatti (from Google).

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Guests:

Links:

Stackdriver Kubernetes Monitoring, with JD Velasquez May 22, 2018

On this weeks Kubernetes Podcast, your hosts talk to JD Velasquez from Google Cloud about Stackdriver Kubernetes Monitoring; a new product that brings first-class Kubernetes monitoring and Prometheus support to the Stackdriver monitoring and observability suite.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Stackdriver Kubernetes Monitoring:

gVisor, with Nicolas Lacasse and Yoshi Tamura May 15, 2018

On this weeks Kubernetes Podcast, Adam and Craig talk to Nicolas Lacasse and Yoshi Tamura from Google Cloud about gVisor, a user-space kernel, written in Go, that implements a substantial portion of the Linux system surface. It provides an isolation boundary between the application and the host kernel and integrates with Docker and Kubernetes, making it simple to run sandboxed containers.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

gVisor:

Kubeflow, with David Aronchick May 08, 2018

Craig and Adam bring you the news from KubeCon and an interview with Kubeflow product manager David Aronchick from Google.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

Links from the interview

Kubeflow:
- GitHub
- Slack
- Twitter
- Mailing list
David Aronchick on Twitter

Kubernetes Community, with Paris Pittman Apr 30, 2018

In this first episode your hosts introduce the show, give an update to the news of the week, and interview Kubernetes community manager Paris Pittman.

Do you have something cool to share? Some questions? Let us know: