PodCTL - Enterprise Kubernetes

Latest Episodes:

Unifying CoreOS and OpenShift May 08, 2018

Show notes

Show: 34
Show Overview: Brian and Tyler talk with Joe Fernandes (@joefern1, Sr. Director Product Management @OpenShift) and Reza Shafii (@rezaloo, Sr. Director Product Management @OpenShift, formerly @CoreOS) about the CoreOS acquisition and transition, how CoreOS technologies are being integrated into Red Hat platforms, new capabilities for OpenShift, updates on Operators, updates on Container Linux and updates on Quay.
Show Notes:

Topic 1 - Welcome to the show, both of you. Before we get to the announcements and roadmap, let’s do quick introductions and maybe tell us how things have been going since the acquisition of CoreOS was announced at the end of January.
Topic 2 - What have been the core focus areas since the acquisition, both near-term and longer-term? Both in terms of Platforms (OpenShift/Tectonic) and OS (RHEL/Atomic/Container Linux)

Topic 3 - What are the announcements coming out this week, related to the Kubernetes platform? What timelines are important for these announcements?

Operators as a community project (also see PodCTL #33)
Operators for OpenShift
Operators for ISVs
Full Stack Automation (New Installer, New Admin Console)

Topic 4 - What are the announcements coming this week, related to the Linux OS platform? What timelines are important for these announcements?

Red Hat CoreOS
Red Hat Quay

Topic 5 - If you’re a customer (new or existing), or an ISV partner of Red Hat, what are you hoping will be the top few takeaways that they understand after hearing these announcements and seeing the demonstrations?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Operator Framework May 01, 2018

Show notes

Show: 33
Show Overview: Brian and Tyler talk with Brandon Philips (@brandonphilips, Founder/CTO at @CoreOS, Member of Technical Staff at @RedHat) about the announcement of the Operators Framework, how the Operator SDK and Lifecycle Manager will help companies, as well as his experience at CoreOS of developing etcd, Prometheus and Vault operators. We also discussed how the broader ISV ecosystem is beginning to embrace the concept of Operators.
Show Notes:

Topic 1 - Welcome to the show. Tell us about your role within the Kubernetes community, as well as your new role within Red Hat.

Topic 2 - Back at the original KubeCon in Seattle, you introduced the concept of Operators, as “human operational knowledge in software, to reliably manage an application”. Give us the basics of your original thinking behind Operators.

Topic 3 - What is being announced today at KubeCon with the Operator Framework?

Topic 4 - Let’s walk through the 3 core pieces of the Operator Framework

Operator SDK
Operator Lifecycle Management
Operator Metering

Topic 5 - How will the broader community plan a role in Operator Framework?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Container Vulnerability Scanning Apr 19, 2018

Show notes

Show: 32
Show Overview:Tyler and Aaron Delp talk with Liz Rice (@lizrice, Technology Evangelist @AquaSecTeam) about what's easy—and what's not—about finding and patching security vulnerabilities in containers. This is a cross-over show with @TheCloudcastNet podcast.
Show Notes:

Liz’s talk at Velocity Conf - “What’s so hard about container vulnerability scanning?”
Use code CLOUD to get 20% off Velocity or OSCON tickets
Aqua Security Homepage
Liz Rice’s Blog
[Video] Kubernetes, Metadata and You (KubeCon 2017 Austin)

Topic 1 - Welcome to the show Liz. Tell us a little bit about your background and the types of things that you’re working on these days.

Topic 2 - Let’s start with the basics. A container is defined by a file (e.g. Dockerfile) that the user/developer/operator defines. How can a vulnerability get into that file?

Topic 3 - Is it up to the CI/CD system or host OS (where the container runs) or container orchestrator (e.g. Kubernetes) or container registry to figure out if a vulnerability exists?

Topic 4 - How do most container registries today manage vulnerability lists, container scanning and potential mitigations? What are the difficult parts of those tasks?

Topic 5 - Most containers today are Linux containers. Are you seeing anything happening (yet) around how to manage Windows containers vulnerabilities? Is the assumption that Microsoft will fix this through one of their existing tools, or are things happening in the open source community as well?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

PodCTL Basics - Windows Containers & Kubernetes Apr 02, 2018

Show notes

Show Overview: Brian and Tyler discuss the basics of Microsoft Windows Containers and their integration into Kubernetes.
Show Notes:

Topic 1 - Containers on Windows

History of Containers & Windows
How Windows Containers differ from Linux Containers

Topic 2 - Running Windows Containers on Kubernetes

Requirements
Limitations
Development

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Reviewing Kubernetes 1.10 Mar 28, 2018

Show notes

Show: 31
Show Overview: Brian and Tyler talk about the Kubernetes v1.10 release, new features and how they can apply to a broad set of application, security and infrastructure use-cases.
Show Notes:

We discussed some of the new features (Stable, Beta and Alpha) from the Kubernetes 1.10 release. We don't cover every new feature, but we tried to hit the highlights.
Topic 1 - API aggregation is stable

Topic 2 - Container Storage Interface (CSI) - Standardized Storage Support

Topic 3 - A replacement for kube-dns

Topic 4 - GPUs and Expanded support for Performance-Sensitive Workloads

Topic 5 - Pod Security Policy

Topic 6 - Adding Identity to Containers (not just pods)

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

2018 Kubernetes Trends Mar 19, 2018

Show notes

Show: 30
Show Overview:Brian and Tyler talk about the biggest trends that will shape the Kubernetes community in 2018, with a focus on five critical areas of stability, innovation and experimentation.
Show Notes:

Topic 1 - Open Service Brokers - who is delivering them, who maintains them, how are they evolving, etc.
Topic 2 - Improved Ops Experiences - Operators, Fargate, Container Instances
Topic 3 - Virtualization + Containers - KubeVirt, Kata Containers, does Network Policy overlap SDN/Security
Topic 4 - Developer Experiences - big area of evolution (Istio, Draft, SpringCloud-Kubernetes, Helm v3, Source-to-Image like capabilities)
Topic 5 - Breadth of Supported Applications - Databases, Windows Containers, Serverless,

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Kubernetes Networking Mar 12, 2018

Show notes

Show: 29
Show Overview: Brian and Tyler talk with Marc Curry (@redhatmarc, OpenShift Principal Product Manager, Container Infrastructure) about the basics of Kubernetes networking, CNI plugins, managing Network Policy, granular ingress and egress routing, and how CaaS/PaaS and IaaS are being integrated.
Show News:

Kubernetes becomes a “Graduated Project” in CNCF

Show Notes:

Topic 1 - Welcome to the show. Tell us about your background and some of the areas you focus on now?

Topic 2 - Let’s talk about the basics of Kubernetes networking. Walk us through the core elements from container addressing, pod/cluster networking, and things like ingress/egress routing (direct or through proxies).

Topic 3 - Kubernetes has a standard called “CNI” (Container Networking Interface). What does this do, and how does it interact with various SDN projects/products?

Topic 4 - A recent enhancement to Kubernetes was “Network Policy”. What does this provide, and where does it overlap with some commercial SDN capabilities?

Topic 5 - Let’s talk about inbound and outbound routing of traffic. What are some of the biggest issues that people need to take into consideration (proxies, traffic sources, protocols supported, etc.)?

Topic 6 - What are some of the things you’re working on to bridge the networking between CaaS/PaaS layers and IaaS layers?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Kubernetes Roles & Personas Mar 05, 2018

Show notes

Show: 28
Show Overview: Brian and Tyler talk about Joe Beda's "More Usable Kubernetes" presentation at KubeCon focused on Roles and Personas of Kubernetes environments. They look at how Cluster and Applications are separated, and how Operators and Developers distribute roles, as well as the intersection of those four areas.
Show Notes:

Topics - On today's show, we looked at the four quadrants outlined by Joe Beda in his talk "More Usable Kubernetes" at KubeCon 2017 Austin. He looked at each role and how well the Kubernetes community has addressed that functional area in both tooling and clear definition of the tasks required. We explored where areas are doing well (green) and where there are still areas that need improvement (yellow or red).

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

The Serverless Landscape Feb 26, 2018

Show notes

Show: 27
Show Overview: Brian and Tyler talk about the new Serverless working group and whitepaper from CNCF, the 4 elements of serverless, the difference between serverless and FaaS, and the on-going role of Ops teams in a serverless world.
Show Notes:

CNCF Serverless Whitepaper
Serverless Working Group in the CNCF
Event Specification
Innovate Summit - State of Serverless
Serverless Landscape (via Redpoint VC)
Kubernetes/Serverless Frameworks - Fission, Fn, Kubeless, Nuclio, OpenWhisk, OpenFaaS, Riff (and several others emerging)
Serverless isn’t Simpler
A Twitter Rant about Serverless and Ops
Ansible for Serverless

Topic 1 - Let’s talk about the history of serverless within the CNCF, and maybe within the context of PaaS and Kubernetes.

Topic 2 - When talking about Serverless, there seem to be 4 areas to dissect:

The thing that executes the function (is this a container orchestrator)
The data sources that can be on either side of the function execution
The developer experience (or lack of experience)
Billing/Usage/Metering

Topic 3 - What were your key takeaways from reading the CNCF Serverless whitepaper?

Topic 4 - What about Operations? Do those jobs go away? Are there Ops uses for serverless?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Kubernetes Myths & Misperceptions - Part II Feb 19, 2018

Show notes

Show: 26
Show Overview: Brian and Tyler talk common myths and misperceptions about Kubernetes, container usage, Kubernetes architecture, compatibility, and OSS stats.
Show Notes:

This is Part 2 of a 2-part series. Part 1 was focused on the platform elements of Kubernetes, what applications are good for containers, the scale of microservices, and stateful vs. stateless apps.
Myths & Misperceptions - Part 1 - https://blog.openshift.com/podctl-25-kubernetes-myths-misperceptions-part-i/
Kubernetes Operations (with Brian "Redbeard" Harrington, CoreOS) - https://softwareengineeringdaily.com/2018/01/16/kubernetes-operations-with-brian-redbeard/

Myth/Misunderstanding 1 - Architecture - Kubernetes Multi-Tenancy
Myth/Misunderstanding 2 - Architecture - Kubernetes is only for Operators
Myth/Misunderstanding 3 - What does "GKE Compatible" mean?
Myth/Misunderstanding 4 - Enterprises should run Kubernetes as trunk version
Myth/Misunderstanding 5 - Are OSS stats important? How to interpret them?

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Our TOPPODCAST Picks

Follow Us

Stay Connected

PodCTL – Enterprise Kubernetes

Related Podcasts

Links

Stay Connected