Kubernetes Podcast from Google

Copyright: © This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/

Latest Episodes:

Open Source and the Open Usage Commons, with Chris DiBona Jul 15, 2020

Show notes

An open source license grants rights on copyright and patents, but not trademarks. Chris DiBona has some ideas on how to address that. He has spent his career in open source, including over 15 years running Google's Open Source Programs Office, and is one of the directors of the new Open Usage Commons. It launched last week with three projects - Angular, Gerrit and Istio - transferring their trademarks. Chris joins Adam and Craig to talk about Google's work in open source, and why a new organisation is needed.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

SUSE to acquire Rancher
- Episode 57, with Darren Shepherd
Open Usage Commons:
Operator Framework and Contour accepted into the CNCF
BigQuery Omni
Kubernetes has caught up with YARN according to Datamechanics
Kubernetes networking: why is this so dang hard? by Tim Hockin
- Episode 41
Announcing Kustomize support for Pulumi
Cinderella clusters from Soluble
Google's Anthos comes to HPE Greenlake
AWS:
AKS adds console RBAC and policy integration
Kublr adds in-place upgrades and external clusters
D2iQ want to teach you

Links from the interview

Scalability, with Wojciech Tyczynski Jul 07, 2020

Show notes

Before Kubernetes was launched, it could have at most 25 nodes in a cluster. At 1.0, the target was 100. Meanwhile, Borg, Omega and Mesos were all running away at 10,000. What did it take to get Kubernetes to this number, and above? SIG Scalability and GKE Tech Lead Wojciech Tyczynski tells us.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Follow-up:
- Chairs, from Episode 107
- Christmas trees, from Episode 104
- Kids music

News of the week

Links from the interview

Omega
- Episode 43, with Brian Grant
Defining scalability
Original SLOs
- API-responsiveness: 99% of all our API calls return in less than 1 second
- Pod startup time: 99% of pods (with pre-pulled images) start within 5 seconds
Target SLO doc - 25 nodes
Borg - ~10,000 nodes
Sep 2015, Kubernetes 1.0 - 100 nodes
- "Kubernetes Has A Ways To Go To Scale Like Google, Mesos" by Timothy Prickett Morgan
March 2016, Kubernetes 1.2 - 1,000 nodes
July 2016, Kubernetes 1.3 - 2,000 nodes
- Work by Clayton Coleman, guest of Episode 85
March 2017, Kubernetes 1.6 - 5000 nodes
etcd v3 improvements for web scale
Scalability Envelope
Today's scalability numbers
EndpointSlices
- Episode 104, with Bowei Du
JD.com's 10,000 node clusters
Alibaba's 10,000 node clusters
- Episode 95, with Xiang Li
Google's 15,000 node GKE clusters
Twitter session at the upcoming Google Cloud Next by Reza Motamedi and Maciek Różacki
Poseidon and Firmament
Wojciech Tyczynski:
- GitHub
- LinkedIn

Mirantis, with Adrian Ionel Jul 01, 2020

Show notes

Over the past 20 years, Mirantis has grown from an outsourcing company for semiconductor engineers to a product company that is the new home of Docker Enterprise. Past and present CEO and "co-founder" Adrian Ionel oversaw Mirantis's adoption of OpenStack and purchase of Docker's enterprise business, and he joins the show to discuss them both.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

New CNCF projects:
jFrog ChartCenter
KubeCon "EU" schedule
Gloo 1.4
- Episode 55 with Idit Levine
Frigate by Jacob Tomlinson
Checkov by Bridgecrew
Contour 1.6
ACI and Docker integration now public
gRPC-Web for .NET now GA
- Episode 94, with Richard Belleville
HP Ezmeral
Codefresh raises $27m

Links from the interview

Kubermatic, with Sebastian Scheele Jun 24, 2020

Show notes

Last week Loodse, the makers of the Kubermatic Kubernetes Platform, made that platform open source, and rebranded their company to match. Co-founder Sebastian Scheele joins us to explain how the company and platform came about, why they've made their changes, and what exactly a Loodse was anyway.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubermatic 2.14 now Open Source
HashiCorp Cloud Platform and new versions of Nomad, Terraform and Consul
Flagger 1.0
OpenMatch 1.0
Harbor graduates at the CNCF
SPIFFE and SPIRE move to incubation level
- CNCF post
GKE goes to 15,000 nodes with Bayer Crop Science
Tsunami: extensible network scanning from Google
AWS App Mesh controller for Kubernetes is GA
Dell announces PowerScale storage
Gocker: a mini Docker written in Go by Shuveb Hussain
The Kubernetes Goat by Madhu Akula
Storpool and Sardina launching Kubernetes-as-a-Service
Kubernetes website adopts Docsy
Getting started with Oracle 18c on Kubernetes by Ron Ekins

Links from the interview

Kubermatic (f.k.a. Loodse)
SAP HANA
Julian Hansert
Hamburg and Munich Kubernetes meetups
ContainerDays
Kubermatic Kubernetes Platform
SAP Gardener
Leibnitz
KubeOne
Loodse rebrands to Kubermatic
Kubermatic Kubernetes Platform on GitHub
Sebastian Scheele on Twitter

The Financial Times, with Sarah Wells and Dimitar Terziev Jun 17, 2020

Show notes

Two years ago, Sarah Wells from the Financial Times gave a KubeCon EU keynote about how the company moved from monolith to microservices, and how her Content and Metadata platform team moved to Kubernetes specifically. She joins hosts Adam and Craig to recap that migration, and what life has been like since. As Sarah has moved to a broader role in charge of all observability for The FT, she also invited Dimitar Terziev, the current platform lead for the CM team, to the conversation.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

kube2hadoop from LinkedIn
Kubera from Mayadata
- Episode 56, with Evan Powell
Linkerd 2.8
- Multi-cluster with Ambassador
Consul 1.8
Intro to Istio Ingress from Banzai Cloud
Cloudflow 2.0.0
- Not the shoe
Google internships go virtual to help Open Source
Introducing the CNCF Technology Radar
CNCF SIG Observability
- Episode 37, with Richard Hartmann
Loft (and Reddit thread)
Jib 2.4 announcement and Jib extensions
Zerto for Kubernetes
AKS 2020-06-08 adds node image upgrade and application gateway ingress controller
Cloudera Data Platform for Private Clouds
Cloudbees introduces DoD compliant CI, now with a CtF to deploy into an environment with an ATO, which meets DISA STIG and NIST RMF security guidelines
- Episode 44, with Tracy Miranda
Microsoft discovers cryptojacking in Kubeflow clusters on Azure
Gokul Chandra writes up Anthos

Links from the interview

Financial Times
- The pink pages
- Subscriber stats
Coronavirus coverage
FT Crossword
KubeCon EU 2018 keynote: "Switching Horses Midstream: The Challenges of Migrating 150+ Microservices to Kubernetes" by Sarah Wells
- Schedule
- Video
- Slides
Monzo microservices graph
CoreOS Fleet
Innovation tokens: Choose Boring Technology by Dan McKinley
Dashing from Shopify
Sarah and Dimitar on Twitter

CNCF: Under New Management, with Priyanka Sharma Jun 10, 2020

Show notes

After 5 years at the helm of the CNCF, executive director Dan Kohn is stepping down to launch a new Public Health initiative. The new General Manager of the CNCF is Priyanka Sharma, who joins our show today. Priyanka tells Craig and Adam what to expect, talks about virtual events, and gives some hints on how to rename projects.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Frog Leap Studios
- Tubthumping (originally by Chumbawamba)
- Hello (originally by Adele)

News of the week

Rancher Longhorn is GA
Fairwinds Polaris is GA
AKS does new networking things
Kubecost's cluster-turndown saves you money
Solo Developer Portal for Istio
CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
Write-up from "Reeverzax" and "Hach"
Ambassador 1.5 released
Microk8s for Windows and Mac
Finding your GKE logs by Rami Shalom and Charles Baer
Business continuity with Anthos
CNCF Cloud Engineer Bootcamp
CKA program changes
Lessons learned by Noah Kantrowitz of Ridecell

Links from the interview

Lightstep
- Ben Sigelman
- Ben Cronin
- "Spoons"
- Dapper
- Monarch
OpenTracing
- Episode 97, with Yuri Shkuro
GitLab
- Sid Sijbrandij
CNCF
Events:
CNCF Technical Oversight Committee
- Charter
- Members
CNCF Projects
Other projects: Ollie
Priyanka Sharma on Twitter

CoreDNS, with John Belamaric Jun 02, 2020

Show notes

In a world where pods (and IP addresses) come and go, DNS is a critical component. John Belamaric is a Senior SWE at Google, a co-chair of Kubernetes SIG Architecture, a Core Maintainer of the CoreDNS project and author of the O'Reilly Media book Learning CoreDNS: Configuring DNS for Cloud Native Environments. He joins Craig and Adam to discuss CoreDNS, the evolution of DNS in Kubernetes, and how name resolution has been made more reliable in recent releases.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Priyanka Sharma replaces Dan Kohn at the CNCF
- Episode 35, with Dan Kohn
Starboard, by Aqua Security
- Episode 19, with Liz Rice
Docker Enterprise 3.1 from Mirantis
Docker and Microsoft; Microsoft and Docker
Velero v1.4
Agones v1.6
- Episode 26, with Mark Mandel and Cyril Tovena
Chef adds Windows container migration for GKE
Red Hat adds Quarkus to Red Hat Runtimes
AWS encrypts Fargate ephemeral disks in v1.4
PlanetScale open sources a Vitess operator
- Episode 81, with Jiten Vaidya and Sugu Sougoumarane
Kubernetes provider for Hashicorp Terraform
Google Vulnerability Reporting Program adds GKE
Tools for debugging apps on Google Kubernetes Engine by Charles Baer and Xiang Shen
How Migrate for Anthos helps modernize Java apps
Helm project journey report
- Episode 102, with Matt Butcher
- Helm 3: the Good, the Bad and the Ugly by Sandor Guba of BanzaiCloud
NIST deployment guidelines for proxy-based Service Mesh by Ramaswamy Chandramouli of NIST and Zack Butcher of Tetrate
The World of kubectl Plugins: a YouTube series by Ahmet Alp Balkan
- Episode 66, with Ahmet Alp Balkan and Luk Burchard

Links from the interview

Domain Name System
Infoblox
Kubernetes Service
- DNS for Serivices and Pods
- Customizing DNS for Kubernetes
CoreDNS; the default DNS server for Kubernetes since 1.11
- Introduction slides
- KEP for CoreDNS in Kubernetes
SkyDNS
Miek Gieben; author of CoreDNS and SkyDNS version 2
Caddy: the HTTP server upon which CoreDNS is based
Dnsmasq
CoreDNS plugins
Node Local DNS cache and KEP
BIND
Unbound DNS resolver
Explanatory blog posts:
- Understanding ndots in Kubernetes
- Racy conntrack and DNS lookup timeouts
Learning CoreDNS: Configuring DNS for Cloud Native Environments by John Belamaric and Cricket Liu
- Cricket Liu and his books
- Book cover: a Comber fish
Policy integration
SIG Architecture
- Production Readiness Review and KEP
A DNS haiku
John Belamaric on Twitter

Cloud Foundry, with Chip Childers May 26, 2020

Show notes

Over the last 10 years, Cloud Foundry has grown from "open Heroku clone" to "software used at your bank". The Cloud Foundry Foundation and the CNCF launched within a few months of each other in 2015, and the two worlds are now colliding as Cloud Foundry replatforms on top of Kubernetes. Our guest this week is the Executive Director of the Cloud Foundry Foundation, Chip Childers. He talks to Adam and Craig about foundations, the boredom of infrastructure, and the cost of every line of code you write.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Memorial Day
Spring Bank Holiday
Sundar Day
Cracking the Cryptic: Sudoku solving and more
- 4 million views
- Craig's favourite: watch Simon's excitement
- Guardian article
cheat3: Lego puzzle boxes

News of the week

Istio 1.6 released
- Multiple control planes
- WorkloadEntry
Azure Arc for Kubernetes now in preview
New AKS features
GKE introduces Container Threat Detection in Beta
TriggerMesh makes EveryBridge available to EveryOne in Preview
Introducing KES from MinIO
Updates to StackRox Kubernetes security platform
OPA survey results
Styra DAS adds microservices authorization
- Episode 101, with Tim Hinrichs and Torin Sandall
Rancher Academy
Understanding Anthos on Bare Metal from Google Cloud
Snyk partners with Docker and Docker partners with Snyk
Kubernetes Apply vs. Replace vs. Patch by David Dooling from Atomist

Links from the interview

DMTF and DTMF
- 17 year old kids asked to use a rotary phone
Apache CloudStack
- Wikipedia, with history
Apache Software Foundation
- Officers and Project VPs
Cloud Foundry
Boeing B-29 plane
Pivotal Software
Linux Foundation Collaborative Projects
Open Container Initiative
April 2020: Chip Childers, CFF CTO, becomes Executive Director
Episode 98, with Sam Ramji (the founding CEO/Executive Director of the CFF)
Project Eirini: announced by IBM in April 2019
Old architecture: Diego and Garden
KubeCF
- Created at SUSE
- GitHub
cf-for-k8s
- GitHub
Chip Childers on Twitter

Ingress and the Service APIs, with Bowei Du May 20, 2020

Show notes

SIG Network is completely rethinking the way you define groupings of applications (Service) and get traffic sent to them (Ingress) by building the Service APIs, a new set of primitives which are better suited to how different groups of users interact with them. Bowei Du is a Tech Lead on GKE and a member of SIG Network who is leading the design and implementation of these new APIs, as well as working on getting Ingress to GA in Kubernetes 1.19.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Bowei's PhD:
- CAP theorem
- TIER project: Technologies and Infrastructure for Emerging Regions
- Delay-tolerant networking (DTN)
Service
EndpointSlices
- Coming to Istio and Knative
Health checks:
- Liveness and readiness at pod level
- Pod Ready++
Ingress
cert-manager
ingress-nginx
TLS is only on port 443
2018 Ingress survey
Conformance profile
Episode 41, with Tim Hockin
Ingress moving to GA in 1.19
Service APIs
- Evolving the Kubernetes Ingress API to GA and beyond by Bowei and Christopher Luciano from IBM
- A sketch of the API
- GatewayClass and StorageClass
- KEP for adding L4
Multi-Cluster Services API proposal
Bowei Du on Twitter

CSI: Storage, with Saad Ali May 12, 2020

Show notes

More gripping than a crime scene in Las Vegas, the Container Storage Interface (CSI) lets vendors interface with Kubernetes. Saad Ali from Google led development of Kubernetes storage, including the CSI and volume subsystem. He joins hosts Adam and Craig for an in-depth look at how storage works in Kubernetes.

Do you have something cool to share? Some questions? Let us know: