Kubernetes Podcast from Google

Copyright: © This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/

Latest Episodes:

Accelerators and GPUs at NVIDIA, with Pramod Ramarao Feb 25, 2020

Show notes

GPUs do more than move shapes on a gamer's screen - they increasingly move self-driving cars and 5G packets, running on Kubernetes. Pramod Ramarao is a Product Manager at NVIDIA, and joins your hosts to talk about accelerators, containers, drivers, machine learning and more.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Printer networking
Adam wants software-defined faucets
- Glowing LED faucet - where does the electricity come from?
- Faucet, a SDN controller

News of the week

Google Cloud launches Application Manager for GKE in Beta
GKE Surge Upgrades GA
GKE Node Locations GA
Anthos Ready Storage qualification
Kafka disaster recovery with Supertubes from Banzai Cloud
- Episode 59, with Janos Matyas
StackRox's State of Container and Kubernetes Security report
Cilium 1.7
- Last week's ode to eBPF, with Leonardo Di Donato
Convox launches multi-cloud
Pangolin, an experimental Kubernetes autoscaler by Damian Peckett
Dell/EMC rack-in-a-box
- Jack-in-the-box
- The Hooli Box
Platform9 now distributed by Promark
- But not Primark
- Episode 88, with Madhura Maskasky
GKE security updates & defense-in-depth strategies
Best practices for enterprise multi-tenancy with GKE
Andrew Allbright contributes to Minikube
Kubernetes Contributor Summit schedule announced
That discount code again again again: KCEUGKP15

Links from the interview

NVIDIA
Graphics Processing Unit (GPU)
Differences between CPU and GPU
The math co-processor
General-purpose computing on GPUs (commonly known as GPGPU)
CUDA, with a C
- NVIDIA CUDA Zone
- CUDA C++
OpenGL and Vulkan, with a K
Kubernetes on NVIDIA GPUs
- NVIDIA on Google Cloud Platform
Device plugins for Kubernetes and scheduling GPUs
- NVIDIA device plugin
- Kubernetes on NVIDIA GPU documentation
NDC Hub for drivers and containers
NVIDIA EGX for Edge computing with Kubernetes
- Pramod's announcement blog
Deep Learning Training vs Inferencing
NVIDIA GPU operator
Pramod Ramarao

eBPF and Falco, with Leonardo Di Donato Feb 18, 2020

Show notes

We dive into the Linux kernel this week with guest Leonardo Di Donato, Open Source engineer at Sysdig. Leonardo works full-time on the Falco project, a runtime security engine that listens to the Linux kernel using eBPF - the extended Berkeley Packet Filter. Leonardo tells the hosts about the architecture of eBPF, how he has used it before and now, and what's coming up for Falco.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

University Challenge: can you guess the computer?
Golf Peaks (Google Play, App Store)
- Desert Golfing

News of the week

Apache Flink v1.10
Linkerd v2.7
Azure Container Registry to require TLS 1.2
CPU limits and aggressive throttling in Kubernetes - Omio Engineering by Fayiz Musthafa from Omio
Kiosk
- Reddit thread with Lukas Gentele
Docker donates the cnab-to-oci library to cnab.io
How-to Guide: Debugging a Kubernetes Application
Nutanix Karbon 2.0
Childcare and COVID-19 at KubeCon EU
- That discount code again again: KCEUGKP15
Red Hat OpenShift is now available for IBM Z and LinuxONE
Why Kubernetes on VMs? by Chip Zoller
Securely Access AWS Services from Google Kubernetes Engine (GKE)
Carbon Relay raises $63 million

Links from the interview

Traditional Linux tracing tools: perf and strace
BPF and eBPF
bpftrace
InfluxDB Cloud
kubectl-trace
The IO Visor project
Sysdig
- Loris Degioanni, co-founder, CTO, and author of Wireshark
Falco
- Sysdig and Falco now powered by eBPF
- Falco joins CNCF Sandbox and moves to incubation
Upcoming KubeCon EU talks by Leonardo:
- Going beyond CI/CD with Prow
- Designing a gRPC interface for kernel tracing with eBPF
Falco community:
Leonardo Di Donato on Twitter

CockroachDB, with Peter Mattis Feb 11, 2020

Show notes

Peter Mattis is a creator of the CockroachDB open source database and co-founder and CTO of Cockroach Labs. His history in open source goes back to the creation of the GIMP image editor and UI toolkit Gtk at university in 1995, and his history at Google saw him work on storage and build systems. Hosts Craig and Adam ask him about all of the above.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Storm Ciara:

News of the week

Docker Index
Apache Aurora:
containerd Project Journey Report
- Episode 71, with Derek McGowan
CoreOS End-of-Life
- Fedora CoreOS
- Flatcar Linux
  - Episode 79, with Chris Kühl
Developing in Production by Will Sargent at Terse Systems
Thanos Operator from BanzaiCloud
- Kubernetes sidecars in 1.18
Clear Linux OS now Certified Kubernetes
Helm 3 in Real Life by Dawid Ziolkowski
Kubernetes storage patterns by Nitish Tiwari
Integrate Cloud Foundry with Kubernetes using the cf-operator and kubecf
- kubecf
Deploying External OpenStack Cloud Provider with Kubeadm
Frame.io Falco case study
Supporting developers as they scale: a free Kubernetes eBook from DigitalOcean
Register Now: KubeCon + CloudNativeCon EU Day Zero Events
- That discount code again again: KCEUGKP15

Links from the interview

GIMP, the GNU Image Manipulation Program
- Pre-history
- GTK, the GIMP Toolkit
Inktomi
- Episode 49, with Eric Brewer
Colossus
Bazel
Square Acquires Ex-Googler Team Behind Viewfinder To Help Grow Its NYC Presence
CockroachDB article
Spanner and F1 papers
CAP theorem
Google Cloud Spanner
Ticktock Networks and the HUYGENS paper
Cockroach Labs
Orchestration with Kubernetes
Relicensing CockroachDB
- Business Source License
Geospatial indexing
CockroachDB on GitHub
Peter Mattis on Twitter

GitLab, with Marin Jankovski Feb 04, 2020

Show notes

GitLab is a single application DevOps platform, including source code management and CI/CD tools for targets including Kubernetes. The application itself runs on Kubernetes, including in its largest installation, the SaaS version at gitlab.com. Marin Jankovski is an Engineering Manager at GitLab, where he was Employee #1. He joins Craig and Adam to talk about migrating to Kubernetes, remaining a monolith, and the company value of radical transparency.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

CNCF TOC election results
HPE acquires Scytale
- Episode 45, with Andrew Jessup
CNCF announces KubeCon EU schedule
- The actual schedule
- That discount code again: KCEUGKP15
Run Windows Server Containers on GKE
- Episode 70, with Patrick Lang
- New Google Cloud certifications address the cloud skills gap
Cisco Hyper-Accelerates Applications in a Hybrid Multicloud Hyper-World
- Updates to Google's partnership with Cisco
AKS 2020-01-27 release
AWS Container Security Survey by Michael Hausenblas
Infra.app
A bit of Istio before tea-time by Alex Ellis
etcd blog on being tested by Jepsen
- Jepsen blog on testing etcd
How Fluentd collects Kubernetes metadata by Brady Zuo
Troubleshooting Kubernetes OOM by Carlos Arilla
DNS Lookups in Kubernetes by Karan Sharma
Community collaboration on Notary v2 by Justin Cormack
CNCF Speaker's Bureau: a great resource
MayaData raises $26m
- Episode 56, with Evan Powell

Links from the interview

VMs, Edge, and Platform9, with Madhura Maskasky Jan 28, 2020

Show notes

Madhura Maskasky is co-founder and VP of Product at Platform9, a company who manage both OpenStack and Kubernetes. She talks to Adam and Craig about the transition from VMs to containers, why OpenStack is still relevant, and what they have to do to be able to offer a 99.9% SLA on cloud-native applications.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Bad news from both Australia Day and Chinese New Year
Schitt's Creek

News of the week

VMware: Introducing Project Nautilus
- VMware Fusion on GitHub
Google Cloud Config Connector
Octarine open-sources the Kubernetes Common Configuration Scoring System (KCCSS) and kube-scan
KubeNav, by Rico Berger
Permission Manager by SIGHUP
KubeInvaders: gamified chaos engineering
- Whack-a-Pod
- Kubernetes DOOM
CSI inline ephemeral volumes
Reviewing 2019 in Kubernetes docs
- Episode 5, with Zach Corleissen and Jared Bhatti
CSI driver support for Dell/EMC Isilon
CNCF annual report
Sign up for KubeCon EU and get 15% off with discount code KCEUGKP15
TriggerMesh receives $3m seed funding
- Episode 28, with Sebastien Goasguen
AWS lowers EKS price

Links from the interview

Multitenancy at Cruise, with Karl Isenberg Jan 21, 2020

Show notes

Self-driving cars need self-driving backend infrastructure. Karl Isenberg is the tech lead & manager of the platform team at Cruise, a self-driving car company backed by GM and Honda. He joins hosts Craig and Adam to discuss two years of running multitenant Kubernetes.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Kubernetes bug bounty announcement, funded by the CNCF
GKE CIS Benchmarks deliver security best practices
Octopus: how Kyma does integration testing in Kubernetes
Elastic Cloud on Kubernetes (ECK) now GA
Red Hat OpenShift v4.3 now almost GA
Fedora CoreOS now GA
Istio as an Example of When Not to Do Microservices by Christian Posta
Backyards 1.1 from Banzai Cloud
k3c from Darren Shepherd at Rancher Labs
- Episode 57, with Darren Shepherd
Continuous GitOps by Arun Ramakani
Werf 1.0 by Flant
New Anthos training from Google Cloud
Dauntless case study
KubeDR by Catalogic
Kubernetes on MIPS by Inspur

Links from the interview

Cruise
- We Need To Move Beyond The Car, by CEO Dan Ammann
- Lombard St
Karl's KubeCon talk
- Slides
- Video
Managing Kubernetes RBAC Groups by Stephen Day
- RBACSync on GitHub
Open-Sourcing Isopod: An Expressive DSL Framework for Kubernetes Configuration by Charles Xu and Dmitry Ilyevskiy
- Isopod on GitHub
Building a container platform at Cruise:
- Part 1: Overview by Karl
- Part 2: Security by Karl and Mike Ruth
- Part 3: Networking by Karl and Buck Wallander
Cruise's blog
Karl Isenberg on Twitter

Invention, IBM and Istio, with Lin Sun Jan 14, 2020

Show notes

What do you do next when you have over 150 patents to your name? Write a book, of course! Lin Sun is a Senior Technical Staff Member and Master Inventor at IBM, where she has spent the past 14 years doing software engineering in areas including cloud and open technologies. She has worked on the Istio service mesh since 2017, and is on the Istio steering and technical oversight committees. Lin joins Adam and Craig to discuss invention, making Istio easier to use, and how being a mother has impacted both.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Snow in Seattle

News of the week

Tanka, from Grafana
- Hacker News commentary
- Jsonnet
- ksonnet archived
Configula, from Brendan Burns
- Caligula, from Rome
Falco moves to the CNCF incubator
- Falco's biggest hit, Rock Me Amadeus
CKAD is now valid for 3 years
Contour 1.1.0
Getting serious about open-source security by Dan Lorenc
- Episode 39, with Dan Lorenc
Designing and Building HA Kubernetes on Bare-Metal
AKS Latency and performance/availability issues due to IO saturation and throttling under load
Kubernetes Networking Demystified by Karen Bruner at StackRox
How to Give Developers Access to Kubernetes During Development by Daniel Thiry
- How to deal with computing resource cost for Kubernetes-based development
Key metrics for monitoring Istio from Datadog
Deploying multiple Istio Ingress Gateways by Peter Jausovec
Big Prometheus by Clay Smith from Monitoring Monitoring
Breaking Changes in Helm 3 (and How to Fix Them) by Jack Morris
Security advantages of pull-based CD pipelines by Alex Kaskasoli
Zero touch authentication on Kubernetes by Peter Wilcsinszky at BanzaiCloud
Vault replication across multiple datacenters on Kubernetes by Nandor Kracser
OpenStack's Complicated Kubernetes Relationship by Mike Vizard of ContainerJournal
Kubernetes 1.15 security changes in GKE
KubeCon + CloudNativeCon NA 2019 Transparency Report
Zendesk case study

Links from the interview

IBM Master Inventor
Lin's patents
Her favorites:
- Analyzing email content to determine potential intended recipients
- Ensuring a desired distribution of content in a multimedia document for different demographic groups utilizing demographic information
Istio announcement blog and GlueCon talk from 2017
Lin at the IBM Cloud CTO Office
- IBM Research
- IBM Cloud, formerly known as Bluemix
Bluemix Service Proxy
Amalgam8
Envoy
Istio 1.1, the "9 months" release
- The Sidecar resource, which lets you scope which services are known by a given sidecar to reduce resource usage
Release cadence
Istio 1.4
Mutual TLS
New 1.4 features:
- Auto-mutual TLS
- client-go library
- istioctl analyze
Requirement to declare containerPort removed in 1.3, automatic protocol selection added
User Experience working group
- istioctl add-to-mesh
- istioctl describe-pod
- istioctl install
Steering committee
Technical oversight committee
istiod
- Istio as an Example of When Not to Do Microservices by Christian Posta
- Minion cluster mode
Istio Explained , by Lin and Dan Berg
kui and iter8
Lin Sun on Twitter

OpenShift and Kubernetes, with Clayton Coleman Jan 07, 2020

Show notes

Five years ago, Clayton Coleman took a bet on a new open source project that Google was about to announce. He became the first external contributor to Kubernetes, and the architect of Red Hat's reinvention of OpenShift from PaaS to "enterprise Kubernetes". Hosts Adam Glick and Craig Box return for 2020 with the story of OpenShift, and their picks for Game of the Holidays.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

News of the week

Links from the interview

Red Hat OpenShift
- Why Red Hat chose Kubenretes for OpenShift by Joe Fernandes
- Early history of OpenShift
- Comparing OpenShift v2 and v3
Health checks
OpenShift differences from Kubernetes:
Don't turn off SELinux!
CoreOS
What's new in OpenShift v4
Operator Framework and operator-lifecycle-manager
Red Hat acquired by IBM
Linux at IBM in the 90s
- The blonde kid
- PowerLinux
PodDisruptionBudget
Clayton Coleman on Twitter

Monitoring, Metrics and M3, with Martin Mao and Rob Skillington Dec 17, 2019

Show notes

Martin Mao and Rob Skillington are co-founders of Chronosphere; CEO and CTO respectively. They both worked on the monitoring team at Uber, where they created M3: a metrics platform with an open source time-series database built for scale. They join Craig and Adam to talk about monitoring, metrics and M3 on the last episode of 2019.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

Chatter of the week

Test message from Delta Airlines

News of the week

CSI migration and CSI volume snapshots
AKS Private Clusters in preview
GKE maintenance Windows and exclusions is GA
Google Cloud E2 VMs: introduction and understanding dynamic resource management
New features in Cloud Run for Anthos
Best practices for performing forensics on containers
Infrastructure at Cliqz, and introducing Hydra
Envoy CVEs
- Istio security bulletin
The Top 3 Service Mesh Developments in 2019 by Zack Jory
Istio Service Mesh Explained in 5 Minutes by Ram Vennam
Ambassador Edge Stack
Solo.io WebAssembly Hub
- Episode 55, with Idit Levine
Kafka Envoy Protocol Filter
Talos 0.3 beta
AutoTiKV tuning
OpenPolicyAgent's KubeCon recap
- Episode 42, with John Murray
A first look at Antrea from Alex Brand
TODO: read this article by Patrick DeVivo
Does Testing Kubernetes Conformance Leave You in the Dark? Get Progress Updates as Tests Run by John Schnake
Demystifying Kubernetes as a Service – How Alibaba Cloud Manages 10,000s of Kubernetes Clusters
How Jaeger Helped Grafana Labs Improve Query Performance and Root Out Tough Bugs
Adopting Kubernetes at Quora by Taylor Barrella,
CNCF announces schedule for Bengaluru/Delhi Forums

Links from the interview

M3 website
M3: Uber's Open Source, Large-scale Metrics Platform for Prometheus
Before: Graphite and its Whisper database
Prometheus
RRDtool
M3 on GitHub: open source from the start
Chronosphere
Rob's 2019 KubeCon's talks:
- EU: M3 and Prometheus, Monitoring at Planet Scale for Everyone
- NA: Deep Linking Metrics and Traces with OpenTelemetry, OpenMetrics and M3
Twitter:

Kubernetes 1.17, with Guinevere Saenger Dec 10, 2019

Show notes

Hop on the release train for the fourth and final Kubernetes release for 2019. Release manager Guinevere Saenger joins Adam and Craig. to discuss how a classically trained pianist has a second act as a Kubernetes release team lead.

Do you have something cool to share? Some questions? Let us know: