Kubernetes Podcast from Google

Copyright: © This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/

Latest Episodes:

Tinkerbell, with Gianluca Arbezzano Mar 17, 2021

Show notes

If you'd like something more tangible than a virtual cloud instance, there's always (still!) bare metal. Tinkerbell is a project from Equinix Metal to manage bare metal servers at scale, and Gianluca Arbezzano is one of its maintainers. We talk stacks, racks and MACs.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Flux moves to incubation in the CNCF
NetApp Astra goes GA; more information
Fairwinds introduces Saffire
Cosign, by Dan Lorenc
- Episode 39
Komodor beta and swag offer
Announcing Private Clusters on Oracle Cloud Infrastructure (OCI) Container Engine for Kubernetes (OKE)
Linkerd 2.10
The Money Section, with thanks to David Pait, guest of Episode 127
- Docker takes $23m in Series "B" funding to get ship done
- Aqua Security takes $135m in Series E at $1b valuation
- Snyk raises $300m in Series E valuing company at $4.7 billion
- Tetrate raises $40m Series B
Is Crossplane the Infrastructure LLVM? by Daniel Mangum
- Episode 141

Links from the interview

PHP. and PHP in 2020
Turin
InfluxData
Episode 91, with Leonardo Di Donato
Dropbox's exodus from Amazon
Equinix Metal
- Packet acquired by Equinix
Tinkerbell
OpenCompute and Open19
Server terminology:
DIY Board management control for an Intel NUC: power control
Tinkerbell services:
- Tink
- Boots
- OSIE
- Hook
- Hegel
- PB&J
OVH fire
How Tinkerbell Got Its Wings, including joining the CNCF
Tinkerbell community
Episode 136: Backstage, with Lee Mills and Matt Clarke
Gianluca Arbezzano on Twitter and on the web
Tinkerbell on Twitter

Crossplane, with Daniel Mangum Mar 10, 2021

Show notes

Crossplane lets you automate creation of infrastructure using Kubernetes APIs. Daniel Mangum is a Crossplane maintainer working at its creator Upbound, a TL of Kubernetes SIG Release, and a YouTube streaming star. He chats about tech with host Craig Box, who is helped this week by returning guest Ken Massada from GKE's Support team.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Security and Snyk, with Kamil Potrec Mar 03, 2021

Show notes

Kamil Potrec is a Senior Security Engineer at Snyk, working on security around Kubernetes and cloud platforms. He joins the show to discuss how to think about securing your infrastructure, the different arts (and colors) of offensive and defensive security, and what not to lose sleep over.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Offensive unit in American Football
Hand-egg
Red and blue teams
Unreal Tournament
Capture the flag
Kubernetes secrets
- Design document
- Encrypting secrets at the application layer
Antivirus software
Tracer-tee
SolarWinds attack
Reflections on Trusting Trust by Ken Thompson
left-pad deleted from NPM
Snyk Open Source
- The open source parts
Snyk vulnerability database
MITRE CVE database
Kubernetes security at Snyk
Deploy only trusted containers to GKE
Application threat modeling
Kubernetes security best practices, including security context, AppArmor, gVisor etc
CVE-2020-8554: man-in-the-middle attack using ExternalIP services
CVE-2020-14386: packet socket vulnerability with user namespaces enabled
- Earlier related work: CVE-2017-7308 and CVE-2016-8655
- Project Zero writeup
Rewrite it in Rust !
Kamil Potrec on LinkedIn

GKE Autopilot, with Yochay Kiriaty Feb 25, 2021

Show notes

Today Google Cloud introduced GKE Autopilot, a new mode of operation where you no longer manage or configure nodes, and you pay per-pod, per-second. Craig talks Autopilot with GKE product manager Yochay Kiriaty.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Multi-Cluster Services, with Jeremy Olmsted-Thompson Feb 16, 2021

Show notes

This week we talk multi-cluster services with Jeremy Olmsted-Thompson, co-chair of the Kubernetes Multicluster SIG, and tech lead on the Google Kubernetes Engine platform team. Guest host Tim Hockin shows us the way.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Istio 1.9
IstioCon 2021 - February 22-26
Mayadata spins out Chaos Native
Cilium Network Policy editor
Kubernetes network policy explained by Dominik Tornow
Trend Micro write-up on container-escaping malware
Dynatrace Cloud Automation and native log support
- Episode 119, with Alois Reitbauer
Shipa 1.2
New GKE, EKS and AKS releases
Tanzu Build Service 1.1
Kubernetes 101 Retrospective by Jeff Geerling
CFP for the eight KubeCon EU pre-days
Designing for SaaS on Kubernetes at Teleport by Virag Mody
Comparing OPA/Gatekeeper and Kyverno by Chip Zoller

Links from the interview

Anthos on VMware
SIG Multicluster
- Federation v2 update
Multi-Cluster Services KEP
- Namespace sameness
- Gateway API (formerly known as Service APIs)
- Istio RFC
Introducing GKE multi-cluster services
- Multi-cluster Ingress
Cluster API
Cluster ID KEP
Jeremy Olmsted-Thompson on Twitter and GitHub

Datadog and the Container Report, with Michael Gerstenhaber Feb 09, 2021

Show notes

Michael Gerstenhaber is a Director of Product Management at Datadog, and the curator of their annual Container Report. He joins Craig to discuss why they release it, some recent trends, and how it helps people validate their assumptions about technology.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

OPA graduates in the CNCF
- Episode 101, with Tim Hinrichs and Torin Sandall
Docker Distribution donated to the CNCF
Red Hat Quay 3.4 released
- CNCF proposal
Hildegard malware writeup from Unit42
- The original TeamTNT
- Attacking Kubernetes clusters using the Kubelet API by Eduardo Baitello
Jetstack Secure
Traefik
- Using Traefik as an ingress controller with Istio
Kong Konnect is GA
- Kong raises $100M at a $1.4b valuation
Get your KubeCon EU tickets early
Buildpacks vs Dockerfiles by Genevieve L'Esperance
Why Helm never felt like it belonged by Luka Skugor

Links from the interview

iOS and iOS
The Happy Cloud
- Happy Cloud Taps the Cloud to Speed Up Video Game Downloads by Ryan Kim at GigaOM
Datadog
- Live Container monitoring
- Live Process monitoring
Golden signals
Work metrics and resource metrics
Datadog reports:
- Docker adoption
  - 2015
  - 2016
  - 2017
  - 2018
- Container orchestration
  - 2018
- Container Report
  - 2019
  - 2020
KubeCon EU 2019 talk: 10 Ways to Shoot Yourself in the Foot with Kubernetes, #9 Will Surprise You by Laurent Bernaille & Robert Boll
Autopilot: Workload Autoscaling at Google Scale
Snow in NYC
- #17 on the all-time list by inches of snowfall
Michael Gerstenhaber on Twitter

Backstage, with Lee Mills and Matt Clarke Feb 02, 2021

Show notes

Backstage is a platform for building developer portals, powered by a centralized service catalog. It was built at Spotify and both open sourced and donated to the CNCF in 2020. A Kubernetes plugin was recently added. We talk to maintainers Lee Mills and Matt Clarke from Spotify.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Longhorn 1.1
Vitess 9
Sonobuoy adds reliability scanning
Rapid7 acquires Alcide; Techcrunch reporting
Armo comes out of stealth; VentureBeat reporting
Scaling Kubernetes to 7,500 nodes at OpenAI
Announcing the Linkerd steering committee
The State of Cloud Native Release Orchestration; a report from Vamp
Hunting for malware with Falco
- Episode 39, with Dan Lorenc
Upgrading from Kubernetes 1.11 to 1.18 in a month by Jeff Wolski at WeTransfer
Debugging CrashLoopBackOff by David Giffin from Release
Jeff Brewer has passed
- Intuit CNCF case study

Links from the interview

Siri, Storage and Solutions, with Josh Bernstein Jan 26, 2021

Show notes

Josh Bernstein has worked at a number of infrastructure roles before recently landing at Google. He talks about migrating Siri from AWS (pre-acqusition) to VMware to Mesos, and Dell EMC's work building what would become the Container Storage Interface. Guest host Jasmine Jaksic talks with Craig about snowcreatures.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Multi-dimensional pod autoscaling in this week's GKE release
Hitachi: vacuum cleaners in the 1990s and Kubernetes today
Garnet.ai
kind 0.10
New Google Cloud Run networking features
- Don't cross the streams
Production Kubernetes from VMware Tanzu.
Serverless for Everyone Else from Alex Ellis
- Episode 116
Chris Aniszczyk's 2021 predictions
- Episode 134
Priyanka Sharma's 2021 predictions
- Episode 107
14 LFX interns graduate
Kubernetes honey tokens by Brad Geesaman
Bad pods: privilege escalation by Seth Art
The US Air Force are feeling supersonic

Links from the interview

Apple acquires Siri
Xserve
Siri public introduction
Apple rebuilds Siri backend with Apache Mesos using the J.A.R.V.I.S. framework
Dell EMC
- {code} community
- REX-Ray: announcement and docs
CNCF Governing Board
CI/CD startups to watch:
- Harness
- Armory
- Shipa
Josh Bernstein on Twitter

CNCF and the Linux Foundation, with Chris Aniszcyzk Jan 19, 2021

Show notes

After building the Eclipse IDE and Twitter's Open Source office, Chris Aniszcyzk bootstrapped the CNCF, joining its parent the Linux Foundation in 2015. He's now a VP of DevRel there, as well as CTO at the CNCF and Executive Director of the Open Container Initiative. Chris joins us to share his technology journey and Cloud Native predictions for 2021.

And all that is now And all that is gone And all that's to come And everything under the sun is in tune But the sun is eclipsed by the moon

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Adam on LinkedIn

News of the week

Otomi from RedKubes
Nutanix now supports Anthos
Tanzu Advanced is GA
Pivotal Labs is Tanzu Labs
VMware needs a new CEO
New CSI driver for Google Kubernetes Engine
Slim.ai announces seed funding
Grafana Cloud introduces free tier
Sysdig container security usage report (PDF)
63 node Kubernetes cluster using Firecracker by Álvaro Hernández
The definitive guide to Vertical Pod Autoscaling by Povilas Versockas

Links from the interview

ZX Spectrum
- R-Type and Jet Pac
GORILLA.BAS
Gentoo Linux
Java Virtual Machine (JVM)
Eclipse
- Object Technology International
- Erich Gamma
- code9, Chris's startup
Backstage and Roadie
Twitter OSS
- Pants
- Mesos
- twemproxy
Linux Foundation, and its sub-projects CNCF and OCI
- Services for projects
- Linus Torvalds and Greg Kroah-Hartman
Chris's Cloud Native predictions for 2021
- Developer experience: Gitpod, GitHub Codespaces or Google Cloud Shell
- Wasm in Envoy
- Wasi, the WebAssembly Systems Interface
Chris Aniszcyzk on Twitter and on the web
- Canada Revenue Agency on Twitter

Cilium, with Thomas Graf Jan 12, 2021

Show notes

Thomas Graf is the inventor of Cilium and the co-founder of Isovalent. Cilium is a container networking plugin built on top of eBPF, bringing modern SDN technologies to accelerate your pods. Adam and Craig also discuss the many uses of Christmas trees.

Do you have something cool to share? Some questions? Let us know: