Kubernetes Podcast From Google

SIG Network is completely rethinking the way you define groupings of applications (Service) and get traffic sent to them (Ingress) by building the Service APIs, a new set of primitives which are better suited to how different groups of users interact with them. Bowei Du is a Tech Lead on GKE and a member of SIG Network who is leading the design and implementation of these new APIs, as well as working on getting Ingress to GA in Kubernetes 1.19. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Christmas trees Magic Puzzles News of the week Google Cloud Next On Air Sign up now Harbor 2.0 Azure introduces 10c/hr uptime SLA and Kubernetes 1.18 in preview Red Hat announces Amazon Red Hat OpenShift Linode Kubernetes Engine is Generally Available VMware to acquire Octarine Venafi to acquire Jetstack cert-manager 0.15 and beyond Episode 75, with James Munnelly Maesh 1.2 Grafana

More gripping than a crime scene in Las Vegas, the Container Storage Interface (CSI) lets vendors interface with Kubernetes. Saad Ali from Google led development of Kubernetes storage, including the CSI and volume subsystem. He joins hosts Adam and Craig for an in-depth look at how storage works in Kubernetes. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Adam’s puzzle How they made The Mandalorian Unreal Engine: Project Spotlight Fraggle Rock: Rock On! Lockdown music videos: Crowded House: Something So Strong Mostar Diving Club: Quiet Hands News of the week IBM Cloud Satellite Google Cloud Buildpacks Anthos for app modernisation via CI/CD and transforming legacy Java applications Azure Container Registry adds dedicated data endpoints Amazon ECR: multi-architecture containers Amazon Cloudwatch adds Prometheus metrics run:AI creates fractional GPU sharing for Kuberne

In celebration of Helm graduating to a top-level CNCF project, Adam and Craig. talk to its creator and primary architect, Matt Butcher of the Deis Labs team at Microsoft Azure. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Adam talks about these baby wipes Craig talks about these baby wipes News of the week Red Hat Virtual Summit news: OpenShift 4.4 OpenShift Serverless OpenShift Virtualization Advanced Cluster Management for Kubernetes Azure Red Hat OpenShift upgraded to v4 OpenShift 4.3 on IBM Power Red Hat Marketplace More ways Red Hat are here to help Azure Kubernetes Service: Windows Server Containers, Private Clusters and Managed Identities now GA Windows Server Containers are GA on GKE too Episode 70, with Patrick Lang Ingress for Anthos Kaggle writes about using it for gRPC Explore Anthos with a sample deployment Celebrating Helm’s graduation The Safe

Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week The cupboard was bare Marmite is not a satisfactory substitute for baking yeast 4D jigsaw puzzles (or a picture, if not for sale in your location) News of the week Anthos for AWS is now Generally Available TechCrunch coverage Eurosys ‘20: Autopilot paper Borg: The Next Generation paper Cluster traces Cloud Foundry becomes more Kubernetes-native with cf-for-k8s Paketo Buildpacks Everything you need to know about them How they fit into the Cloud Native landscape Changes to Kubernetes release cycles for 2020 Aqua Security announce

To celebrate our 100th episode we welcome back our first ever guest, Paris Pittman, open source program manager at Google Cloud and member of the Kubernetes steering committee - among many other roles. Along with hosts Adam and Craig, Paris looks at how the community has changed and how it has stayed the same, and how other projects are able to adopt learnings from Kubernetes. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week 100 episodes! Our introductory blog Our introductory KubeCon keynote News of the week New Tanzu announcements Surge upgrades for GKE Spot and system/user node pools on Azure Kubernetes Service Portworx Essentials OpenShift Container Storage 4.3 Magicpak by Hiromi Ogawa Pluto from Fairwinds Trow featured in the New Stack Using Apache SkyWalking to fix the blind spot of distributed tracing Lyft takes Envoy Mobile to production gRPC and Kotlin Episode 94

kpt (“kept”) is a new open-source tool for Kubernetes packaging built by Google Cloud. Morten Torkildsen is an engineer at Google, focusing on configuration management and the workloads APIs, and he worked on Kpt. He explains it to Adam, while Craig fills his mind with penguins. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week The Easter Bunny is an Essential Worker in New Zealand From the archives: Dragon research (discussed in Episode 53) Keepers are letting the penguins run loose at Oregon Zoo Visiting the Beluga Whale at Shedd Aquarium News of the week CNCF projects: Volcano joins the Sandbox Dragonfly moves to incubation Argo moves to incubation Argo CVEs by Matt Hamilton of Soluble Docker announces Compose specification Nautilus: a tool for visualising Docker Compose files Show HN post Deis Labs introduces Krustlet: Introduction Why Rust? The Microsoft

Apache Cassandra, a scale-out datastore, is becoming more Kubernetes-native. Sam Ramji is Chief Strategy Officer at DataStax, a company that builds Cassandra-based products. He explains how DataStax has pivoted back towards supporting upstream Cassandra, and how they’re making it easier to manage on Kubernetes. As always, we also cover the news of the week, and we look at what is and is not a dinosaur. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week The return of the brontosaurus We’re going on a bear hunt News of the week kpt: Announcement Site Contributors: Episode 7, with Phillip Wittrock Episode 11, with Vic Iglesias Episode 29, with Janet Kuo Episode 43, with Brian Grant Possible meanings, thanks to Daniel Roth and Blender Fox What does it really stand for? Please tweet us at @kubernetespod. Wrong answers only! Kubernetes 1.18 deep-dives: Topology Manager Server-side

Jaeger is a distributed tracing platform built at Uber, and open-sourced in 2016. It traces its evolution from a Google paper on distributed tracing, the OpenZipkin project, and the OpenTracing libraries. Yuri Shkuro, creator of Jaeger and author of Mastering Distributed Tracing, joins Craig and Adam to tell the story, and explain the hows and whys of distributed tracing. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Music from Home: Brian May Neil Finn You Don’t Know Jack Galaxy Trucker Free books from the Sesame Workshop Google Play Amazon Barnes and Noble Kobo The Monster At The End Of This Book News of the week Update on the update on the update on KubeCon EU: now 13 to 16 August, and possibly online. Virtual Rejekts on 1 April Datastax Cassandra Operator and Management API Announcement blog PromCat: Prometheus Catalog from Sysdig Evaluating Predictive Autosc

Kubernetes 1.18 is out - almost! A bug has pushed it back a day. While you’re waiting, release team lead Jorge Alarcon will tell you all about the fit and finish you can expect in the release when it’s out tomorrow. Adam and Craig bring you the other community news of the week, as well as some podcast follow-up. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Shoe Dog What the fox really says News of the week Kubernetes 1.18 is out! Well, not quite yet: this regression is being fixed Enhancement tracker Windows features: containerd kubeadm RuntimeClass GMSA Ingress API kubectl diff and APIServer dry-run kubectl debug CNCF SIG Contributor Strategy Kong ingress controller and Istio service mesh by Kevin Chen KubeCF becomes a Cloud Foundry Foundation incubation project Platform9 adds two new tiers And adds free JFrog Private Container Registry Backyards 1.2 Red Hat add

If you’re running Kubernetes, you’re running etcd. The distributed key-value store was started as an intern project at CoreOS by Xiang Li, who is still maintaining it but now working on infrastructure at Alibaba. Xiang joins your hosts to discuss. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Getting toilet paper be like So, stay at home and play with free synth apps! Korg Kaossilator: download for Android or iOS MiniMoog Model D: download for iOS iSongs on YouTube News of the week vSphere 7 and VMware Tanzu announcements Docker announces new strategy and roadmap Hitachi Vantara acquires Containership’s assets Containership’s since-removed “goodbye” post Lens, now from Lakend Labs KEDA and SMI join the CNCF Sandbox AWS Bottlerocket blog post and GitHub repo Enable encryption on App Mesh with custom or ACM certs EKS supports Kubernetes 1.15 Firecracker thread by Mic

Richard Belleville works at Google on gRPC, a high-performance, universal RPC framework. Richard used gRPC before joining Google to work on it; he talks to the hosts about its history and derivation from Google’s internal Stubby, how it works, and how it differs from other RPC and messaging systems. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Castlevania series 3 on Netflix Discussed in Episode 27 Bad video game adaptations Pac-Man (TV series) Super Mario Bros (film) Doom (film) Hitchhiker’s Guide to the Galaxy - 42nd anniversary Upcoming Hulu TV series News of the week Istio 1.5: Release announcement 2020 roadmap Extensibility through WebAssembly in Envoy and the Proxy-Wasm ABI Solo.io’s WebAssemblyHub Google Cloud’s new strategy for the telecommunications industry Managed Kubernetes pricing comparison HPE Container Platform is Generally Available Contour 1.2

Kubeflow, the Machine Learning toolkit for Kubernetes, has hit 1.0. Google software engineer Jeremy Lewi is a core contributor to Kubeflow and was a founder of the project. He joins the show to discuss what Kubeflow does, and what it means to have hit 1.0. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Over the Road Over The Top and its amazing poster 13 Minutes to the Moon With soundtrack by Hans Zimmer We love our theme music, but its composer has fewer Academy Awards. News of the week KubeCon Novel Coronavirus update Schedules announced for day 0 events Kubeflow 1.0 is out Google Cloud blog Kubernetes 1.18-beta.1 1.18 features list Poor unloved Sidecar Containers Screwdriver joins CD Foundation Episode 44, with Tracy Miranda Introducing Arkade by Alistair Hey Install Kubernetes to your Raspberry Pi in 15 minutes by Alex Ellis Weathervane 2.0 from VMw

GPUs do more than move shapes on a gamer’s screen - they increasingly move self-driving cars and 5G packets, running on Kubernetes. Pramod Ramarao is a Product Manager at NVIDIA, and joins your hosts to talk about accelerators, containers, drivers, machine learning and more. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Printer networking HP JetDirect USB Type B The mess that is USB Type-C The solution Adam wants software-defined faucets Glowing LED faucet - where does the electricity come from? Faucet, a SDN controller News of the week Google Cloud launches Application Manager for GKE in Beta GKE Surge Upgrades GA GKE Node Locations GA Anthos Ready Storage qualification Kafka disaster recovery with Supertubes from Banzai Cloud Episode 59, with Janos Matyas StackRox’s State of Container and Kubernetes Security report Cilium 1.7 Last week’s ode to eBPF, with Leonardo

We dive into the Linux kernel this week with guest Leonardo Di Donato, Open Source engineer at Sysdig. Leonardo works full-time on the Falco project, a runtime security engine that listens to the Linux kernel using eBPF - the extended Berkeley Packet Filter. Leonardo tells the hosts about the architecture of eBPF, how he has used it before and now, and what’s coming up for Falco. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week University Challenge: can you guess the computer? Golf Peaks (Google Play, App Store) Desert Golfing News of the week Apache Flink v1.10 Linkerd v2.7 Azure Container Registry to require TLS 1.2 CPU limits and aggressive throttling in Kubernetes - Omio Engineering by Fayiz Musthafa from Omio Kiosk Reddit thread with Lukas Gentele Docker donates the cnab-to-oci library to cnab.io How-to Guide: Debugging a Kubernetes Application Nutanix Karbon 2.0 Chi

Peter Mattis is a creator of the CockroachDB open source database and co-founder and CTO of Cockroach Labs. His history in open source goes back to the creation of the GIMP image editor and UI toolkit Gtk at university in 1995, and his history at Google saw him work on storage and build systems. Hosts Craig and Adam ask him about all of the above. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Storm Ciara: Trampoline Leaves Big jets News of the week Docker Index Apache Aurora: Proposal to archive Summary from Stephan Erb New GitHub repo announcement containerd Project Journey Report Episode 71, with Derek McGowan CoreOS End-of-Life Fedora CoreOS Flatcar Linux Episode 79, with Chris Kühl Developing in Production by Will Sargent at Terse Systems Thanos Operator from BanzaiCloud Kubernetes sidecars in 1.18 Clear Linux OS now Certified Kubernetes Helm 3 in Real Li

GitLab is a single application DevOps platform, including source code management and CI/CD tools for targets including Kubernetes. The application itself runs on Kubernetes, including in its largest installation, the SaaS version at gitlab.com. Marin Jankovski is an Engineering Manager at GitLab, where he was Employee #1. He joins Craig and Adam to talk about migrating to Kubernetes, remaining a monolith, and the company value of radical transparency. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Little Free Libraries Original discussion Simon Weckert’s Google Maps hack The canonical hand-cart Google responds News of the week CNCF TOC election results HPE acquires Scytale Episode 45, with Andrew Jessup CNCF announces KubeCon EU schedule The actual schedule That discount code again: KCEUGKP15 Run Windows Server Containers on GKE Episode 70, with Patrick Lang Ne

Madhura Maskasky is co-founder and VP of Product at Platform9, a company who manage both OpenStack and Kubernetes. She talks to Adam and Craig about the transition from VMs to containers, why OpenStack is still relevant, and what they have to do to be able to offer a 99.9% SLA on cloud-native applications. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Bad news from both Australia Day and Chinese New Year Schitt’s Creek News of the week VMware: Introducing Project Nautilus VMware Fusion on GitHub Google Cloud Config Connector Octarine open-sources the Kubernetes Common Configuration Scoring System (KCCSS) and kube-scan KubeNav, by Rico Berger Permission Manager by SIGHUP KubeInvaders: gamified chaos engineering Whack-a-Pod Kubernetes DOOM CSI inline ephemeral volumes Reviewing 2019 in Kubernetes docs Episode 5, with Zach Corleissen and Jared Bhatti CSI driver support

Self-driving cars need self-driving backend infrastructure. Karl Isenberg is the tech lead & manager of the platform team at Cruise, a self-driving car company backed by GM and Honda. He joins hosts Craig and Adam to discuss two years of running multitenant Kubernetes. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Patch Critical Cryptographic Vulnerability in Microsoft Windows Clients and Servers Interpretive meme version Support for Windows 7 has ended: don’t use it for internet banking Stefanie Stuber’s uncommon The Voice performance News of the week Kubernetes bug bounty announcement, funded by the CNCF GKE CIS Benchmarks deliver security best practices Octopus: how Kyma does integration testing in Kubernetes Elastic Cloud on Kubernetes (ECK) now GA Red Hat OpenShift v4.3 now almost GA Fedora CoreOS now GA Istio as an Example of When Not to Do Microservices by

What do you do next when you have over 150 patents to your name? Write a book, of course! Lin Sun is a Senior Technical Staff Member and Master Inventor at IBM, where she has spent the past 14 years doing software engineering in areas including cloud and open technologies. She has worked on the Istio service mesh since 2017, and is on the Istio steering and technical oversight committees. Lin joins Adam and Craig to discuss invention, making Istio easier to use, and how being a mother has impacted both. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Snow in Seattle News of the week Tanka, from Grafana Hacker News commentary Jsonnet ksonnet archived Configula, from Brendan Burns Caligula, from Rome Falco moves to the CNCF incubator Falco’s biggest hit, Rock Me Amadeus CKAD is now valid for 3 years Contour 1.1.0 Getting serious about open-source security by Dan Lorenc

Five years ago, Clayton Coleman took a bet on a new open source project that Google was about to announce. He became the first external contributor to Kubernetes, and the architect of Red Hat’s reinvention of OpenShift from PaaS to “enterprise Kubernetes”. Hosts Adam Glick and Craig Box return for 2020 with the story of OpenShift, and their picks for Game of the Holidays. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Arrods Minesweeper Kaboom Simon Tatham’s Mines Snake NIBBLES.BAS AI playing Snake News of the week Google describe its BeyondProd cloud native security paradigm: BeyondProd: How Google moved from perimeter-based to cloud-native security BeyondProd whitepaper Protecting programmatic access to user data with Binary Authorization for Borg Binary Authorization for Borg whitepaper Episode 8 with Maya Kaczorowski VMware completes acquisition of Pivotal Covera