servicemesh

Louis Bailleul is a Chief Enterprise Architect at PGS. After years of running highly-ranked super computers to process PGS’ seismic data, Louis’s team at PGS has lead a transition to Google Cloud. Listen in to learn about HPC in Google Cloud with GKE, and to explore using Kubernetes to do processing on vessels at sea!

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Listen to the KubeCon NA 2022 recap episode

News of the week

• Docker + Wasm
• Istio control plane vulnerability CVE-2022-39278
• KubeFlow joins CNCF as an Incubating Project
• CNCF Backstage course
• CNCF Istio intro course

Links from the interview

• PGS
• A picture of a PGS vessel
• PGS post from 2021 about their supercomputing rankings and transition to Google Cloud
• Top500 List
• Kubernetes Custom Resources (CRDs)
• Scaling Kubernetes to Thousands of CRDs
• Google Cloud Spot Instances
• Google Cloud Preemptible VM Instances
• Google Cloud - Manage capacity and quota
• KubeCon NA 2019: How the Department of Defense Moved to Kubernetes and Istio - Nicolas Chaillan
• Bare Metal K8s Clustering at Chick-fil-A Scale by Brian Chambers, Caleb Hurd, and Alex Crane

In this episode we bring you with us to KubeCon NA 2022 in Detroit, Michigan. We interviewed 15 attendees from various backgrounds and learned some cool insights.

Featuring:

• Mo Khan, Software Engineer, Microsoft.
• Katrina Verey, Senior Staff Production Engineer, Shopify.
• Aishwarya Harpale, Student, Rutgers University.
• Jeffery Sica, Principal Developer Experience Engineer, CNCF.
• Kirsten Schumy, Software Engineer, AWS.
• John-Paul Robinson, HPC Architect, University of Alabama at Birmingham.
• Madhav Jivrajani, Software Engineer, Vmware.
• Leigh Capili, Developer Advocate, Vmware Tanzu.
• Nim Jayawardena, Developer Programs Engineer, Google.
• Charlie Yu, Developer Programs Engineer, Google.
• Ahrar Monsur, Developer Programs Engineer, Google.
• Mickey Boxell, Product Manager, Oracle.
• Eddie Zaneski, Software Engineer, Chainuard.
• Andy Piggott, Chief Product Officer, Section.
• Logan Smith, Director of Business Development, GrafanaLabs.
• Brian Dorsey, Developer Advocate, Google - Shoutout for recommending the microphones for interviews.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

News of the week

• CrowdStrike cryptojacking finding
• Skaffold v2 Generally Available
• GKE Security Posture Dashboard
  • Blog
  • Video
• Cdk8s+ from AWS
  • Blog
  • Project page
• CNCF Sandbox project application information
• Istio becomes a CNCF Incubating project
• Cert-manager becomes a CNCF Incubating project
• Cisco OpenClarity
• Kube-router bug
• Google Cloud Next Wrap-Up
• Microsoft Ignite highlights blog
• Cloud Native SecurityCon
• Linux Foundation partnership with Razom for Ukraine

Links from the interview

• Kubernetes SIG Auth
• Kubernetes SIG API Machinery
• FluxCD
• Online Boutique Sample App
• Kubernetes SIG-CLI
• Cloud Native 101: Motor City Edition by Bob Killen and Jeffrey Sica
• Consumers to Contributors by Brendan O’Leary
• Kubernet-Bees: How Bees Solve the Problems of Distributed Systems
• SchedMD Slurm
• Kube-bind
• Contribute to etcd!
• Cloud Native WASM Day
• Cloud Native SecurityCon
• Backstage (Incubating CNCF Project)
• eBPF
• Cilium (Incubating CNCF Project)
• Acorn Labs
• Vulcan Mind-Meld (Star Trek)
• Kids’ Day at KubeCon NA 2022

After four and a half years hosting this podcast (and almost 9 years at Google) Craig Box is moving on from the latter, which unfortunately means leaving the former. But the show must go on. In this episode Craig introduces new hosts Abdel Sghiouar and Kaslin Fields. We take a small look forward, and then a big look back.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Links from the show

• Adam’s last episode
• Abdelfettah Sghiouar
  • Devoxx MA
  • Cloud Careers Podcast
  • You probably DON’T need a Service Mesh
• Kaslin Fields
  • Containers as cookies
  • Biscuits and gravy
  • Contributor comms
• First-gen stickers
• Second-gen stickers
• Episode 60, with Mark Shuttleworth
• Episode 15, with Dan Ciruli and Jasmine Jaksic
  • Dan on sticker duty
• Episode 30, with Joe Zou
  • A rare team photo
• Music and musicians
  • Kaossilator
  • Episode 191, with DJ Fresh
  • Episode 127, with David Pait
  • Episode 83, with Guinevere Saenger
  • Episode 120, with Melanie Cebula
  • Episode 121, with Ed Huang
• Double guest trivia:
  • Episodes 1 and 100 with Paris Pittman
  • Episodes 62 and 180 with Ricardo Rocha (on a technicality)
• The Adam face
  • Corey Quinn: separated at birth?
• One of many booth meetups
• Follow Craig Box on Twitter
• Follow Adam Glick on LinkedIn

Dan Stein is an engineering manager at General Bioinformatics. Dan Stein is also DJ Fresh, a multi-million selling artist with two UK number one records. Learn about the surprising overlap between these two careers.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod and @craigbox

Chatter of the week

• Trevor Noah stepping down as host of Daily Show
• Follow @craigbox to learn what’s next

News of the week

• Google Cloud adds GPU support to Autopilot
  • Pricing
• CVE-2021-36782 in Rancher
• State of DevOps Report for 2022
• Congratulations to the 27 Summer LFX Program CNCF interns
• Reviewing the 2019 Kubernetes security audit

Links from the interview

• DJ Fresh
• Atari 800 and Atari ST
  • Pong
  • Atari BASIC
• Commodore Amiga
  • OctaMED
• Fatboy Slim and the Atari ST
• Dogs on Acid music forum
• Taylor Hawkins Tribute Concerts
• Abolishing the high tax rate in the UK, or not
• Breakbeat Kaos
  • Hold Your Colour by Pendulum
• Kryptonite by DJ Fresh
• Gold Dust
• Subsequent hits:
  • Louder
  • Hot Right Now
• Kyma (sound design language) and Max/MSP
• We Got Coders
• General Bioinformatics
  • NGS gene sequencing
  • Ensembl
• Hasura
• GraphQL Playground
• NCBI - National Center for Biotechnology Information
• Max Martin
• How Music Works by John Powell
• Learning:
  • Treehouse
  • Udemy
  • 3Blue1Brown
  • Codeacademy
• DJ Fresh’s new single, Higher
• DJ Fresh on Facebook
• Dan Stein on Twitter

Betty Junod, VP of Product Marketing at VMware Tanzu, kindly took up Craig’s challenge to explain the various parts of the Tanzu ecosystem, and how the traditional IT buyer and the modern cloud native really aren’t that different.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod and @craigbox

Chatter of the week

• NASA DART mission
  • Deep Impact
  • Armageddon
• Apparent retrograde motion
• Planets beyond Neptune

News of the week

• Istio sails into the CNCF
• SPIFFE and SPIRE graduate
  • Episode 45, with Andrew Jessup
• Brigade archived
• Sysdig 2022 Cloud Native threat report
  • The nice TeamTNT
  • Episode 188, with Kateryna Ivashchenko
  • Episode 169, with Anna Belak
• Chainguard introduces Wolfi
• workerd, from Cloudflare
• Introducing Palaemon
• Custom org policy for GKE in preview
• Leveraging Kubernetes for an elastic platform at Blablacar by Sebastien Doido

Links from the interview

• VMware
  • History
• Docker
• Solo.io
• VMware Tanzu introduction blog
  • VMware acquires Heptio
  • VMware acquires Pivotal
• Tanzu Mission Control
• Tanzu for Kubernetes Operations
• Tanzu Application Platform
• Tanzu Kubernetes Grid
  • Bring your own host to TKG
• Project Pacific introduction
  • TKG 2.0
• VMware Aria Operations for Applications
• Tanzu Application Service
  • Cloud Foundry
• Open source projects:
  • Velero
  • Antrea
  • Carvel
  • Cartographer
• Michigan cider
• Detroit-style pizza
• Betty Junod on Twitter

When you think of a service mesh, you probably think of “sidecar containers running with each pod”. The Istio team has come up with a new approach, introduced recently as an experimental preview. Google Cloud software engineers Justin Pettit and Ethan Jackson join Craig to explore ambient mesh.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Listening immediately and listening on a 1 year delay
• Death and state funeral of Queen Elizabeth II
• The Queue
  • What the queue says about our relationship with royalty

News of the week

• Cloud Custodian becomes an incubating project
• Anthos VM support
• GKE control plane metrics
• CVE-2022-3172: Aggregated API server can cause clients to be redirected
• CVE-2021-25749: runAsNonRoot logic bypass for Windows containers
• Akuity Platform
  • Episode 172, with Jesse Suen
• Weave GitOps 2022.09
• Coroot Community Edition
• Constellation, by Edgeless Systems
• Register for Google Cloud Next
• Dell and Red Hat expand strategic collaboration

Links from the interview

• Nicira
• Open vSwitch
• Introucing Ambient Mesh
  • Service mesh
• First mention of Ambient in 2018
• No first class support for sidecars in Kubernetes
• Istio working group meeting, August 2021
  • Remote proxy proposal
• HBONE: HTTP/2-based overlay network environment
• mTLS
• HTTP Connect
• GIF
• MASQUE and QUIC
• Get started with Ambient Mesh
• Ambient Mesh Security Deep Dive
• Justin Pettit and Ethan Jackson on Twitter

Kateryna Ivashchenko is a Senior Demand Generation Manager at Teleport, an organizer of community events, and a supporter of the developer community in her home country of Ukraine.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

News of the week

• Introducing Ambient Mesh in Istio
• Istio 1.15
• Linkerd 2.12
  • Linkerd and the Gateway API
• Symbiosis
• Cuber nay-tace
  • Reddit discussion
• VMware Tanzu announcments from VMware Explore
• Isovalent raises $40m Series B
• Kubernetes Blog:
  • PodSecurityPolicy: The Historical Context
  • Pod Security Admission Controller in Stable
  • CSI Inline Volumes have graduated to GA
  • cgroup v2 graduates to GA
• Kubernetes was never designed for batch jobs by Kurt Schelfthout
• 7 years of GKE General Availability

Links from the interview

• Portworx
• Teleport
• 24 February 2022: Russia invades Ukraine
• BeyondCorp
• Teleport open source
• hunter2
• Okta breach
• Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers by Andy Greenberg
• War in Ukraine
• Kateryna’s sister’s T-shirt
• Independence Day
• Chris Lentricchia and Operation Dvoretskyi
• CNCF crowdfunding
• DevOpsDays Kyiv
• International Snack Exchange
• Kateryna Ivashchenko on Twitter

It’s release day! We discuss today’s Kubernetes 1.25 with release team lead Cici Huang, Software Engineer at Google Cloud. What’s in, what’s out, and what is it like to lead a release you are also promoting a feature in?

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Nelson underwater
• England underwater
• A picture of a sheep
• Follow Craig on Twitter for more like that

News of the week

• Kubernetes 1.25 release
• Introducing Acorn
  • Acorn Labs: Rancher Co-Founders’ New Kubernetes Startup by Christine Hall
  • Episode 57, with Darren Shepherd
• GKE updates:
  • New observability metrics
  • GKE Autopilot now default
  • 256 pods per node
• KubeCon schedule published
  • Cloud Native Rejekts
• Scaling Kubernetes to thousands of CRDs by Nic Cope

Links from the interview

• IBM Watson
• Kubernetes Community Awards
• SIG API Machinery
  • Chair & Cici’s hiring manager: Fede Bongiovanni
• Kubernetes 1.25 release team
• Release blog
• Highlights:
  • PodSecurityPolicy is removed; Pod Security Admission is stable
  • cgroups v2
  • KMS v2alpha1
  • CRD valdation experession language
  • Registry change
• Kubernetes 1.24 delay
• Theme and logo
• Envelopes:
  • 1.24 lead: Episode 178, with James Laverack
  • 1.26 lead: Leonard Pahlke
• Cici Huang on GitHub

Three years after they were first proposed, the new Kubernetes Gateway APIs - the evolution of the Ingress API - are in Beta. Rob Scott is a software engineer at Google and a lead on the SIG Network Gateway API project.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Hot hot hot
• Stevenson screen
  • Heathrow Airport
  • Kew Gardens
  • RAF Coningsby

News of the week

• Argo security audit:
  • Argo blog
  • ADA Logics blog
  • Episode 172, with Jesse Suen
• Kubernetes Cluster API integrates continuous fuzzing
  • The report
  • OSS Fuzz
• Cilium 1.12
• GKE Cluster Autoscaler location policy
• The quest for neutrinos
  • Ray traced Quake II

Links from the interview

• Gateway API
• Spire Labs
• Fairwinds
  • rbac-manager
  • Polaris
• Episode 104, with Bowei Du
• Ingress
• Gateway API concepts and role-orientation
  • Roles and resource model
• GatewayClass
• GKE implementation of GatewayClass
• Conformance tests
• Policy attachment
• Gateway
• Routes
• Gateway API goes to Beta
• GRPCRoute
• Gateway Enhancement Proposal (GEP)
• Istio APIs that influenced the Gateway API
• GAMMA Initiative
  • Istio support for Gateway API
  • SMI community joining
• Gateway API on GitHub
• Santa Cruz Moutains
• Rob Scott on Twitter and LinkedIn

Ian Miell is a partner at consultancy Container Solutions, and an author of books on Bash, Git, Terraform and Docker. He explains to Craig how writing - whether runbooks, blog posts, training courses, or “real” books, can help you learn and make your team more effective.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Hot hot hot
• Small pools and larger pools

News of the week

• Gateway API goes to Beta
  • Episode 104, with Bowei Du
  • Istio support for Gateway API
  • SMI community gets behind Gateway API
• Kyverno and Keptn move to incubation
  • Episode 119, with Alois Reitbauer
• Tau T2A Arm VMs now on Google Compute Engine
  • GKE support for Tau T2A Arm nodes
• Kubeshop acquires BotKube
• Exploiting Authentication in AWS IAM Authenticator for Kubernetes by Gafnit Amiga
  • New Vulnerabilities in Kubernetes NGINX Ingress Controller
• CNCF sponsors audit of KubeEdge
  • KubeEdge security threat model
  • Audit report
• Red Hat announces new CEO
• Google Cloud announces new Distinguished Engineer
  • Episode 185, with Clayton Coleman

Links from the interview

• Zwischenzugs
• Business Value, Soccer Canteens, Engineer Retention, and the Bricklayer Fallacy
• Zwischenzug and zugzwang in chess
• Ian’s books:
  • Learn Bash The Hard Way
  • Learn Git The Hard Way
  • Learn Terraform The Hard Way
  • All three in a bundle
  • Docker in Practice
• Tcl
• Why are enterprises so slow?
• Erlang
• Episode 164, with Daniel Walsh
• ‘AWS vs K8s’ is the new ‘Windows vs Linux’
• The Runbooks Project
• ITIL
• Consultancy:
  • Episode 183, with Steve Wade
  • Why it’s great to be a consultant
  • Container Solutions
• Finance topologies:
  • Team Topologies by Manuel Pais and Matthew Skelton
  • If You Want To Transform IT, Start With Finance
  • Conway’s Law
• Ian Miell on Twitter

Why does a car manufacturer own an IT company? How did that IT company end up running 900 Kubernetes clusters, starting at version 0.9? Craig asks these questions and more of Sabine Wolz, Product Manager at Mercedes-Benz Tech Innovation.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Live UK political coverage on the day of recording. As predicted, news happened slightly faster than publication, and at the time of release, Boris Johnson is expected to resign as Conservative Party leader today.
• Shibboleth
• Lord of the Rings TV show moved to UK

News of the week

• GKE Cost Allocation
• CubeFS accepted as CNCF incubating project
• Bare metal deployments for EKS Anywhere
  • Episode 142, with Gianluca Arbezzano
  • Cubernetes
    • Episode 20, with Justin Garrison
• OpenShift Service Mesh 2.2
• Tanzu Mission Control adds FluxCD
• Pixie plugins
• What GKE users need to know about Kubernetes’ new service account tokens, by Taahir Ahmed
• Kubernetes is a red flag signalling premature optimisation, by Jeremy Brown
  • Hacker News discussion
• eBPF Summit 2022

Links from the interview

• Mercedes-Benz Tech Innovation
• Mercedes-Benz and Daimler Truck
• How should electric vehicles sound?
• Ulm and its church
• Sabine’s KubeCon keynote
• How to Migrate 700 Kubernetes Clusters to Cluster API with Zero Downtime: Tobias Giese & Sean Schneeweiss
• Game theory
• FOSS Manifesto
• Inner source
• CNCF End User Community
• The promise of flying cars
• Sabine Wolz on LinkedIn

Gone are the days of working at the same company for 50 years. Consultants and contractors bring specialised experience to many companies in short bursts. Steve Wade is an independent Kubernetes consultant and trainer, and he tells us how that became the life for him.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Queen
• Bourton-on-the-Water, fire in the sky
• Model village
• Model village inception

News of the week

• New GKE features:
  • eBPF and IP masquerading in GKE Autopilot
  • Dual stack networking
  • Time-shared GPUs
  • Confidential GKE nodes
• Paralus (by Rafay)
• Furiko (by Shopee)
• New CNCF Sandbox projects:
  • Clusterpedia
  • OpenCost
  • Aeraki Mesh
  • Curve
  • OpenFeature
  • Kubewarden
  • DevStream
• Traefik Hub
• Cyble’s exposed Kubernetes clusters
• Bitnami index FAQ

Links from the interview

• Premier League
• Tesco
• Consultants and IR35
• KSOC
• Indian food
• Steve Wade (1987) on Twitter

As we move further up the stack, we rely on many foundations – including storage. Alex Chircop is co-chair of the CNCF Storage Technical Advisory Group (TAG), as well as founder and CEO of Ondat (formerly StorageOS). Join us to learn why no app is truly stateless, and how data is the new storage.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Crowded House snippets:
  • Distant Sun
  • Sister Madly
  • Don’t Dream It’s Over (you know this one)
  • Weather With You
  • Something So Strong
  • How Will You Go

News of the week

• Kubernetes 2021 annual report and blog post discussing it
• SUSECon news
  • SLSA Level 4
• The State of CD 2022 report
• Introducing OpenCost
  • Spec
  • Episode 124, with Webb Brown
• OSTIF and ADA Logics posts discussing the CRI-O project audit
• Bitnami Helm chart pruning and Reddit discussion
• Upcoming Code of Conduct changes at the CNCF

Links from the interview

• Goldman Sachs on Google Cloud
• Episode 181, with Justin Santa Barbara
• KubeCon EU 2016
• CNCF TAG Storage
• Data on Kubernetes community
• CNCF TAGs
  • CNCF Storage WG talk at KubeCon EU 2019
  • CNCF TAG Storage talk at KubeCon EU 2022
• Kubernetes SIG Storage
  • Xing Yang
  • CSI and COSI
• Quinton Hoole
  • Federation, aka “Ubernetes”
• Whitepapers:
  • Storage
  • Disaster Recovery
• Ondat
  • Updog
• Alex Chircop on Twitter

What is configuration as data, how is different from infrastructure as code, and why can’t anything just be itself anymore? We posed these questions and more to long-time Kubernetes contributor Justin Santa Barbara at KubeCon EU, and this episode is the result. Justin created the kOps project and now leads the team at Google that makes Kubernetes easier to consume.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• #kubecovid
• Alhambra
• La Alhambra
• Cats of the Alhambra

News of the week

• Cloud Native at Microsoft Build
  • Azure Container Apps are GA
  • AKS updates
• Docker acquires Tilt
• Broadcom acquires VMware
  • FT coverage
  • Customer reaction from The Register
• Istio 1.14
• GKE Cost Estimator
• Goodbye to Katacoda
• Take the DORA survey or read the 2021 report

Links from the interview

• FathomDB
  • Meteor acquires FathomDB for its development platform
  • Sherlocking
• OpenStack
• kOps
  • GitHub
• Configuration management tools
• Infrastructure as Code
• JSON, YAML, Proto and INI
• Helm
  • values.yaml
• Kubernetes Resource Model (KRM)
• kustonize
• kpt
• Package management
• Configuration as Data announcement blog
• Porch
• kpt functions
• Backstage
• Config Sync and Config Connector
• Kubernetes component configuration
• Cluster API
• Justin Santa Barbara on Twitter

Live from Valencia, it’s KubeCon EU! Craig talks to conference co-chair and CERN computer scientist Ricardo Rocha about the event, and what it’s like to be in a room full of people again.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• 9am Karaoke

News of the week

• CNCF news from KubeCon EU:
  • SlashData survey
  • 800 members
  • Boeing
  • Coinbase
  • Prometheus Certified Associate
• Google Cloud improves GitOps usability with Config Sync and Porch
  • kpt
  • Other Google news from KubeCon
• Tetragon from Isovalent
• Envoy Gateway
• Infra
  • Ask HN with the creators
• Cloud Foundry launches Korifi
• SUSE NeuVector is open source
• CloudNativePG from EnterpriseDB
  • All the other options
• Assured Open Source Software from Google Cloud
• Recent Guest news:
  • Akuity announces $20m Series A (episode 172)
  • Komodor raises $42 million Series B (episode 153)
  • Deepfence launches Deepfence Cloud (episode 173)

Lightning Round

• Armory announced public early access to their new Continuous Deployment-as-a-Service product
• Aserto announces its ”better together” approach to authorization by bringing together OPA, OCI, and Sigstore
• Bunnyshell Introduces support for multi-repository Terraform with full-stack drift management and GitOps
• Calyptia announces the General Availability of Calyptia for Fluent Bit,
• CAST AI introduces advanced Autoscaler for AKS
• Clastix launches Kamaji, a new open source tool for Managed Kubernetes Service
• CloudCasa by Catalogic expands to support Microosft AKS
• Codenotary combines Community Attestation Service with background vulnerability scanning
• CodeZero Launches Surf, a new developer tool for observability in pre-production Kubernetes environments
• CrateDB introduces Logical Replication
• D2iQ Partners with GitLab
• DataCore Bolt container-native storage software now GA; built on their acquisition of Mayadata
• Datadog launches Application Security Monitoring and support for OpenTelemetry Protocol in the Datadog Agent,
• Deepfactor partners with Synopsys to help developers resolve cloud native supply chain security risks
• env0 enables full-stack IaC deployment and management with native Kubernetes support
• Era Software introduces EraStreams
• Fairwinds Insights unifies DevSecOps with additional shift-left enhancements
• GitLab free tier adds pull-based Kubernetes deployments
• Google announced a new low-cost, high-usage pricing tier for Google Cloud Managed Service for Prometheus
• HCL Technologies launches Kubernetes migration platform
• Kasten by Veeam launches K10 v5.0 released
• Runecast adds CI/CD integration and image scanning
• Lacework introduces new Kubernetes Audit Logs monitoring
• Loft Labs announces a Cluster API provider for vcluster
• NetFoundry embeds zero trust into Prometheus
• New Relic introduces low-overhead Kubernetes monitoring and Pixie plug-in framework
• Pure Storage’s new Database as a Service platform is GA
• Replicated introduces community licensing and pre-flight checks
• SphereEx releases DB-Plus Suite
• Snapt announces security package to run Kubernetes in public cloud
• SPIRE now runs on Windows
• Sysdig launches new Advisor and Sysdig Open Source leverages Falco plugins
• SysEleven unveils MetaKube Operator
• Timescale announces OpenTelemetry Tracing support for Promscale
• Vultr Kubernetes Engine now Generally Available
• Zesty Disk for Kubernetes introduced

Links from the interview

• Episode 62
  • Lukas Heinrich
  • Clemens Lange
• CERN
  • LHC Computing Grid
  • Large Hadron Collider
• Kubeflow
• Data on Kubernetes Community
• CNCF Research User Group
• CNCF TOC
• Volcano moves to incubation
• KubeCon EU 2022
• Episode 165, with Jasmine James
• Selection process report for KubeCon EU
• KubeCon China 2021
• Research track
• Puppies at KubeCon NA 2019
• Code, mountains and flying
• Kubernetes on an F/16
• Ricardo Rocha on Twitter and on the web

Docker CEO Scott Johnston joins us to talk about the announcements from this week’s DockerCon, the transition from an enterprise to a developer tools company, and the Internet’s favourite whale.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Podes and antipodes
  • Side note: Kubernetes needs the concept of an Antipod. BRB, writing a KEP
• Google Cloud Podcasts

News of the week

• DockerCon 2022
  • Docker Extensions
  • Docker Desktop for Linux
  • Late breaking news: Docker acquires Nestybox
• Spot VMs now on GCE and GKE; spot pods now on GKE Autopilot
• Fully managed Linkerd with Buoyant Cloud
• Sign up for CDcon and save 40% by using the code CdCon22AMEET40
• AWS adds Kubernetes resource view
• Deploying Kubernetes clusters in absurd languages by Lee Briggs

Links from the interview

• Docker
• DockerCon ‘22
• DockerCon ‘14, the announcement of Kubernetes
• Return or Revenge?
• Scott’s history
  • Four degrees from Stanford, including an MSMSE
  • Sun and Netscape
    • Java Servlets and J2EE
    • Moore’s Law and Metcalfe’s Law
      • Standard on the Internet
      • Tom Lyon
  • Loudcloud/Opsware and a16z
  • Puppet
• Scott joins Docker in 2014
• The monorepo
• The Soul of a New Machine
• Docker Swarm
• Messages from the future and the Google crystal ball
• Open Cotainers Initiative
• Docker Desktop for Apple Silicon Macs
• virtiofs for Mac
• $2.1 billion valuation
• Moby Project
  • Moby
  • Ice Cube
• The Dockershim saga, as reported throughout the episodes:
  • Don’t panic about Docker
  • Dockershim deprecation FAQ
  • Mirantis will support the Dockershim
  • But seriously, don’t worry about the Dockershim
  • Dockershim is, like, proper gone
• The puns and joke section
  • Docker is krilled to see you
  • Billy T James
  • Beached Az. Can’t eat chups!
• Docker Extensions
  • CNCF Landscape or Magic Eye?
• Docker Desktop for Linux
• Multi-arch on Docker Hub
• Docker roadmap
• Scott Johnston on Twitter

Gaze into the stars with Kubernetes 1.24 release team lead, James Laverack. James is a software engineer turned solutions engineer at Jetstack, and explains the difference between the two roles, as well as how he found his home in SIG Release and what to expect in 1.24.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• IMDB and MusicBrainz
• SheetOps
• xlskubectl by Daniele Polencic

News of the week

• Kubernetes 1.24
• Metaflow on Kubernetes
• KubeVela 1.3
• SocketCAN X Kubernetes
• ARMO raises $30m
• Aqua’s 2022 Cloud Native Threat Report
• CVE-2021-25746 in ingress-nginx
  • About the fix
  • Episode 162, with Alejandro de Brito Fontes and Ricardo Katz
• Plain Kubernetes Secrets are fine, by Mac Chaffee

Links from the interview

• Bristol
• Box
• Life as a Solutions Engineer at Jetstack
  • “I don’t think your job is to code anymore, you just talk to people all day.”
• Minecraft operator
• Improbable’s etcd operator
• Intro to the Kubernetes 1.24 release process
• Kubernetes 1.24
  • Full release notes
  • Dockershim is, like, proper gone
    • cri-dockerd
    • containerd
    • CRI-O
  • Beta APIs Off by Default
  • Release artifacts are signed, with experimental support for verifying them
    • Increased supply chain security for Kubernetes
    • SLSA
    • Episode 167, with Rey Lejano
    • Episode 174, with Santiago Torres-Arias
  • Storage Capacity tracking and Volume Expansion
  • Storage plugin migration
    • Azure Disk
    • OpenStack Cinder
  • gRPC liveness and readiness probes
  • Avoiding collisions in IP ranges
• Release theme and logo
• 1.25 release team
• Go 1.18 error delays 1.24 release
• James Laverack on Twitter

Big week for Istio! Craig talks to Mitch Connors, Istio user experience working group lead and IstioCon program committee co-chair, about the project and the conference. Mitch talks to Craig about the news that Istio has been proposed to the CNCF.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• 40th anniversary of the ZX Spectrum
• Some soothing YouTube channels:
  • Adrian’s Digital Basement
  • Jan Beta
  • RMC - The Cave
  • Mark Fixes Stuff
• Some conference talks about the Commodore 64:
  • Rich Code for Tiny Computers
  • DevOps for the Commodore 64
• DevOps for the ZX Spectrum
• Manic Miner
  • Play online

News of the week

• Istio has applied to join the CNCF
• Istio mode in Tanzu Service Mesh
• KubeVirt moves to Incubation phase in CNCF
• New sandbox projects:
  • OpenFunction, from Kubesphere
  • Teller, from Spectral Ops
  • Sealer, from Alibaba
• Chainguard Enforce
  • Episode 47, with Kim Lewandowski
• EKS Blueprints
• Unit 42 finds serious vulnerabilities in AWS log4shell hotfix
• Tanzu State of Kubernetes report
• Go article in the Communications of the ACM
• Please support DevOpsDays Kyiv

Links from the interview

• Istio
  • What is Istio?
  • ServiceMeshCon 2019
• F5 Networks
• Merkle tree
  • Merkel tree
  • Sparse Merkle tree
  • When was the last time you implemented a linked list?
• Envoy proxy
• istioctl wait
• Istio working groups
• Sidecar containers proposal
• Anthos Service Mesh
  • Managed control and data plane
• IstioCon 2022
  • Mitch and Lin’s keynote
• Istio has applied to join the CNCF
  • Pull request to the CNCF TOC
• Prusa i3
  • The frankenprinter
  • RepRap
• Mitch Connors on GitHub
  • Mitch Conner from South Park
• Mitch Connors on Twitter

Divya Mohan is a Technical Writer with SUSE, a CNCF Ambassador, co-chair of Kubernetes SIG Docs, and a mentor to new contributors. Learn how her love of language and learning led her from production support to the core of the community.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

News of the week

• Volcano moves to incubation stage in CNCF
• Nephio
  • Automating cloud native networks
  • Announcement press release
• Improving secure software supply chain by Asra Ali and Laurent Simon, Google Open Source Security Team
• Docker SBOM
  • When the moon hits your eye like a big pizza pie, that’s Anchore
• Talos Linux 1.0
  • What’s new in Talos 1.0
  • Episode 159, with Andrew Rynhard
• Grafana raises Series D
• Tanzu Application Platform v1.1
• Kubernetes 1.24 delayed
  • But seriously, don’t worry about the Dockershim
• Ever Forward also delayed

Links from the interview

• From zero to WIP: How I transitioned from being a sys admin working on legacy middleware to sailing the cloud native seas
• Hindi, Marathi, Malayalam; just 3 of the 22 scheduled languages of India
• IGATE
• HSBC
• Middleware
  • Episode 175, with Bruno Andrade
• SIG Docs
  • Kubernetes Community Days Bengaluru
  • SIG Contributor Experience
  • Kubernetes and Cloud Native Associate (KCNA)
  • Season of Docs
  • Summer of Code
  • How to contribute to Kubernetes docs
  • Arsh Sharma
• LitmusChaos, founded by Uma Mukkara and Karthik Satchitanand
• Divya joins SUSE
  • Hayden Barnes
• The Friday Four
• Divya’s writing on WebAssembly
• Divya Mohan on Twitter

Bruno Andrade is founder and CEO of Shipa, delivering applications and policy “as code” to Kubernetes with a SaaS model. We discuss founding companies in Canada vs the USA, abstractions for deploying apps, and whether Kubernetes will really ever disappear.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

Chatter of the week

• Jimmy Fallon and Jimmy Kimmel
  • One show
  • The other show
  • One behind-the-scenes video
  • Another one
• Ron Gilbert does not like April Fools
  • Just kidding: Return to Monkey Island
  • “If I ever get to make another Monkey Island, I’m going to announce it on April 1st.”

News of the week

• Grafana Mimir
  • FAQ/Interview with the CEO
  • Hacker News discussion
• Can Grafana run Doom?
• Open source StackRox is now available
  • GitHub link
• Dagger
  • Public launch announcement
  • Series A finance round
  • CUE
• Fermyon introduces Spin
  • Episode 102, with Matt Butcher
• Google Distributed Cloud Edge
• IstioCon 2022 program announced
• PlatformCon 2022
• Chainguard: It’s all about that base image by John Speed Meyers and Zack Newman
• Docker raises $105m Series C
  • TechCrunch coverage
• Garden.io raises $16m Series A
  • VentureBeat coverage
• The Ever Forward container ship is still not going forward

Links from the interview

• Shipa
• IBM WebSphere and WebSphere Application Server
• Juniper acquires HTBASE
• Shipa launch press release
• Ketch
  • Announcement blog
• Why Kubernetes Will Disappear
• The English way
• Bernese mountain dog
• Application CRD
• Application API for Kubernetes
• Sidecar containers
• Bruno Andrade on Twitter