Kubernetes Podcast From Google

Martin Mao and Rob Skillington are co-founders of Chronosphere; CEO and CTO respectively. They both worked on the monitoring team at Uber, where they created M3: a metrics platform with an open source time-series database built for scale. They join Craig and Adam to talk about monitoring, metrics and M3 on the last episode of 2019. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Test message from Delta Airlines News of the week CSI migration and CSI volume snapshots AKS Private Clusters in preview GKE maintenance Windows and exclusions is GA Google Cloud E2 VMs: introduction and understanding dynamic resource management New features in Cloud Run for Anthos Best practices for performing forensics on containers Infrastructure at Cliqz, and introducing Hydra Envoy CVEs Istio security bulletin The Top 3 Service Mesh Developments in 2019 by Zack Jory Istio Service Mesh Exp

Hop on the release train for the fourth and final Kubernetes release for 2019. Release manager Guinevere Saenger joins Adam and Craig. to discuss how a classically trained pianist has a second act as a Kubernetes release team lead. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Craig plays the Oculus Quest: Superhot Epic Roller Coasters Beat Saber Keep Talking and Nobody Explodes Adam sees a play Six News of the week Kubernetes 1.17 is out! Volume snapshot in Beta EKS on Fargate now generally available Tech thread from Onur Filiz Interview with AWS CEO Andy Jassy CNCF DevStats Azure Application Gateway ingress controller launched CloudBees CI/CD SaaS in preview Anthos is CRN’s Hybrid Cloud product of the year Troubleshooting Deployments by Daniele Polencic UNIVAC schematics Building large Kubernetes clusters at LINE CNCF TOC structure and elections uSwitch c

Chaos Engineering is the discipline of experimenting in identifying potential areas of failure before they express themselves in outages. Ana Margarita Medina is a Chaos Engineer and Developer Advocate at Gremlin, a chaos-as-a-service vendor that recently added Kubernetes support. She talks to Adam and Craig about the discipline, and her journey to it. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Shopify’s Black Friday Craig’s Black Friday News of the week AWS announcements: Managed node groups EventBridge support in ECR Sagemaker operators for Kubernetes Eirini 1.0 is here Security considerations for GKE by Maya Kaczorowski Episode 8. with Maya Kaczorowski Managing a multi-site Cassandra cluster on multiple Kubernetes with CassKop / MultiCassKop by Seb Allamand Run Ansible Tower or AWX in Kubernetes or OpenShift with the Tower Operator by Jeff Geerling Everything

Vitess is a cloud native database clustering system for horizontal scaling of MySQL. It was built for YouTube, open sourced, and has recently graduated from the CNCF. Two members of the team who wrote and ran Vitess at YouTube, Jiten Vaidya and Sugu Sougoumarane, are CEO and CTO of PlanetScale; a company they founded to support Vitess commercially. They join Craig and Adam to talk databases. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Our meetup at KubeCon The WeWork booth at KubeCon You Must Build A Boat You Have To Win The Game News of the week Anthos news from Next UK Multi-cluster management with Anthos GitLab Serverless with Cloud Run for Anthos Project Antrea from VMware Managed Istio GA on IBM Kubernetes Service IBM open sources developer tools Kui and iter8 Episode 47 with Kim Lewandowski Solo.io introduces Autopilot Hubble, from Cilium ByteBuilders introduc

Catch all the news (and there is a lot of it!) from KubeCon NA 2019 in this week’s show. We then talk to Vicki Cheung, the conference co-chair, and an Engineering Manager running Kubernetes infrastructure at Lyft. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod News of the week Docker sells its enterprise business: Mirantis press release Docker press release New Google Kubernetes Engine features: Preemptible VMs support is GA Node auto-provisioning is GA Vertical Pod Autoscaling is GA Batch on GKE is in Beta Surge upgrades are in Beta Google Cloud Run is GA Microsoft news: Secure enclave support in AKS Engine Azure Container Registry adds repository scoped permissions Kubernetes Event-Driven Autoscaling (KEDA) is 1.0 GitHub Actions for CNAB bundles & CNAB controller for Kubernetes Episode 61, with Jeremy Rickard and Ralph Squillace Helm 3 released, for real! Istio 1.4 released

Due to overwhelming submission numbers, 85% of talks proposed to KubeCon are rejected. Cloud Native Rejekts, a two-day community conference immediately before KubeCon, gives a second chance to some of those talks. Chris Kühl is CEO and co-founder of Kinvolk, a Berlin-based Linux company, who organise events including Cloud Native Rejekts. Hosts Adam and Craig ask him about this, and somehow the discussion includes both Pearl Jam and Mötley Crüe. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Listener meetup at KubeCon: 1.30pm at the Google Cloud Lounge Pineapple Lumps and Jaffas Adam’s TV recommendation of the week: The Expanse News of the week Skaffold is now GA Episode 6 with Matt Rickard VMware Tanzu updates from VMworld Europe Chronosphere founded with $11m investment to commercialise M3 Vitess graduates CNCF and releases v4.0 Azure Monitor Prometheus integration is

KUDO is the Kubernetes Universal Declarative Operator, a toolkit for writing operators for Kubernetes. Gerred Dillon works on KUDO at D2IQ, formerly Mesosphere, and joins Craig and Adam to discuss KUDO, how Mesos frameworks relate to Kubernetes operators, and taking care of chickens. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Little Free Libraries Top moments of 50 years of the Internet by Vint Cert Television network news in NZ 50 years old History of TV in NZ News of the week Sysdig container usage report Longhorn donates to the CNCF Crossplane 0.4 Helm v3.0.0-rc.2 Episode 11 with Vic Iglesias CloudEvents reaches 1.0 Data Center Knowledge: What service meshes are, and why Istio is leading the pack Backyards 1.0 Contour 1.0 Envoy 1.12 New encryption options for Google Kubernetes Engine Azure services now run anywhere with new hybrid capabilities: Announcing Azur

Katharine Berry works in the Engineering Productivity team at Google Cloud, and works in SIG Testing on the Kubernetes project. She joins Adam and Craig to discuss Prow, Pebble and ponies. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week SkyCity Convention Centre Fire A nice dinner out after a conference England knock NZ out of the Rugby World Cup Cards Against Humanity to open a restaurant The Holiday Hole News of the week GKE Release Channels are in Beta GKE usage metering is GA: use it to combat over-provisioning Episode 40 with Madhu Yennamani A new guide for PCI-DSS compliance on GKE Exploring container security: Vulnerability management in open-source Kubernetes Episode 34 with Jordan Liggitt Episode 17 with Jon Pulsifer HPE are set to deliver a Kubernetes platform for data analytics and ML How to bulid a kubectl plugin by Jonas-Taha El Sesiy Episode 66, w

Joe Duffy is the founder and CEO of Pulumi, an open-source cloud development platform. He joins Adam and Craig to explain why a general purpose programming language is a better tool for cloud infrastructure than a domain-specific language (or YAML), and how you can use Pulumi to provision cloud infrastructure and Kubernetes resources alike. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week DevOpsDays Auckland Craig’s talk In which 32 bit apps don’t work on macOS Catalina News of the week Dapr, OAM and Rudr Announcing Dapr, the Distributed Application Runtime Dapr homepage Announcing the Open Application Model Open App Model Ship without a Rudr’s like a ship without a Rudr’s like a ship without a Rudr Red Hat introduces OpenShift 4.2 Goldilocks from Fairwinds Ubuntu 19.10 Episode 60 with Mark Shuttleworth Introducing SPIRE 0.8.2 Episode 45 with Andrew Jessup Istio perfo

cert-manager is a certificate management toolkit for Kubernetes, commonly used to get TLS certificates from Let’s Encrypt. Project founder James Munnelly of Jetstack joins hosts Craig and Adam to explain how how certificates are issued and managed, and how cert-manager automates it all. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Fast food-themed entertainment: Wendy’s Feast of Legends role-playing game KFC dating simulator Burger King Games M.C. Kids Taco Bell’s Tasty Temple Challenge The McDonalds board game KFC virtual escape room training Soda-themed entertainment: Cool Spot Pepsi Invaders Mad Mix: The Pepsi Challenge Stranger Things 3: The Game News of the week Rancher 2.3 released Episode 57, with Darren Shepherd Windows container support and Rancher 2.3 Amazon EKS now has Windows containers generally available Episode 70, with Patrick Lang New on DigitalOcea

Jorge Castro is a community manager employed by VMware to help keep the Kubernetes project running smoothly. He joins Adam and Craig to talk about the programs run by SIG Contributor Experience, the difference between supporting contributors and end users, and the recent steering committee election. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week The Jordan Luck Band The Exponents Snippets from Who Loves Who The Most, Victoria and Why Does Love Do This To Me News of the week Kubernetes Steering Committee election results Envoy proxy journey report October updates to the StackRox Security Platform Protecting Kubernetes against a Billion Laughs attack by Stackrox Billion laughs attack on Wikipedia Open Source in VMware Tanzu Project Contour moves IngressRoute to HTTPProxy Sloop from Salesforce Kontena Lens: free desktop app GKE master on-prem routing AKS managed identity Env

Daniel Smith is co-Chair and co-TL of SIG API Machinery, as well as TL of the corresponding Google team. Daniel has been working on Kubernetes since before it was open sourced, and is one of the top overall contributors to the codebase. He joins Adam and Craig to discuss CRDs and extensibility. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Old Man’s Journey Rocketman Funeral For A Friend/Love Lies Bleeding Aladdin (2019) Aladdin (1992) News of the week Kubevirt joins the CNCF KubeCon San Diego Contributor Summit ServiceMeshCon 2019 schedule announced GKE Intranode Visibility #KUBE100; hosted k3s from Civo k8s vs k3s by Andy Jeffries Docker: Designing your first application on Kubernetes Docker raising funds IBM launches Apache CouchDB operator 90% of all PaaS and SaaS on IBM Cloud is on Kubernetes Kubecost: Requests and Limits by Webb Brown Kubeadvisor 1.0 from Magal

Kubernetes 1.16 is out, and our guest this week is its release manager, Lachlan Evenson. Lachie is a Principal Program Manager at Microsoft and an Australian living in the US; Craig and Adam are therefore method-interviewing, being this week in those two countries respectively. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week New Zealand: man brings clown to redundancy meeting Cloud Summit Sydney and APIdays Melbourne News of the week Kubernetes 1.16 is released Traefik 2.0 Announcing .NET Core 3.0 gRPC on .NET Core GKE Container Native Load Balancing now GA Google makes €3 billion of data center investment CloudARK’s 5 takeaways from the Helm Summit Crossplane 0.3 Agones 1.0.0 Episode 26 with Cyril Tovena and Mark Mandel Spire TPM plugin from Bloomberg Episode 45 with Andrew Jessup Azure: EKS now GA in Government regions Egress lockdown now GA AKS Periscope open sou

containerd was born from community desire for a core, standalone runtime to act as a piece of plumbing that applications like Kubernetes could use. It sits between command line tools like Docker, which it was spun out from, and lower-level runtimes like runC or gVisor, which execute the container’s code. This week’s guest is Derek McGowan, a Software Engineer at Docker and a containerd maintainer-d. Along with the news of the week, Adam and Craig discuss the many Vancouvers. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Vancouver, Vancouver, and George Vancouver South Bend, North Bend, and Bend Cosmpolis “50 Year Sensation: the Dave McMacken Retrospective” (album art show in Astoria, Oregon) News of the week Istio 1.3 is out Google’s Anthos now incudes Anthos Service Mesh, Cloud Run for Anthos and more Cloud Native Application Bundles hit 1.0 Episode 61 with Ralph Squillace an

Patrick Lang is the co-chair of the Kubernetes Windows SIG. He is a Senior Software Engineer at Microsoft, developing Kubernetes and related open-source projects supporting Windows Server Containers. Patrick joins Adam and Craig to tell the story of how containers came to Windows. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Getting to the Peak Tram News of the week KubeCon 2019 schedule Tim Hockin and Kal Henidak on dual stack IPv4 Building a 5G network live on stage GKE Shielded VM Nodes Mæsh Project Contour 0.15 Contour on Kind TechCrunch video: How Kubernetes Changed Everything Aaron Roydhouse reverse engineers release schedules as 1.15 hits Preview on Azure and Rapid Channel on GKE GKE Scalability best practices The Kubernetes scalability hypercube Cloud Foundry Networking Team Update Building a Continuous Delivery Pipeline for Symphony by Ivan Babenko The

kind stands for Kubernetes in Docker. Originally built for continuous integration (CI) and testing of Kubernetes itself, kind has found many uses, including acting as a cluster for bootstrapping other clusters. Original author Ben Elder from Google Cloud joins Craig and Adam to talk about it. Want to see Adam’s puzzles? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Adam’s new Seattle office building Example Quick Cryptic from The Times Example USA Today crossword New York Times crossword puzzle case study The NYT mini crossword Craig’s record is 13 seconds! Times for the Times solver blog A puzzle in a tweet The answer Code Golf News of the week Introducing Kubernetes Academy Brought To You By VMware Kubernetes Academy Brought To You By VMware Knative serverless Kubernetes bypasses FaaS to revive PaaS Helm 3 Beta To Helm or not to Helm? by Stepan Stipl Announcing etcd 3.4 by Gyuho Lee and Jingyi Hu Blocking old C

Container Camp is a series of independent conferences, spanning three continents and in their fifth year. “Camp mother” Angie Maguire is the co-organiser, and is also the founder of Ladies of Code. She joins Adam, who is yet to attend a Camp, but actually goes camping, and Craig, who has spoken at Camps in London and Sydney, and prefers hotels. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week The mound is moving The traffic isn’t News of the week VMware buys: Pivotal Carbon Black Intrinsic Greenland VMworld news: Introducing Project Pacific Project Pacific technical overview Reintroducing Project Bonneville? Joe Beda’s take Tanzu, VMware’s approach to modern applications Tanzu Mission Control Splunk acquires SignalFX 2019 Accelerate State of DevOps report Red Hat OpenShift Service Mesh is GA Maistra, the upstream of the operators Cilium 1.6 is out E2E Kubernete

Kubernetes and Docker might not seem the obvious choice for managing virtual macOS instances on hosted Apple hardware. Learn how they were used to build Orka - Orchestration for Kubernetes on Apple - a virtualisation layer for Mac build infrastructure offered by hosting company MacStadium. Craig and Adam ask MacStadium SVP of Software Chris Chapman about Orka, and how Kubernetes is useful in places you might not expect. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Letterboxing Geocaching Orienteering News of the week HTTP/2 security bulletin from Netflix New releases for: Kubernetes Istio Envoy gRPC NGINX And others CNCF archives the rkt project GitHub Actions is now a CI/CD service Announcing preview of GitHub Actions for Azure Kubernetes web UIs in 2019 and Kubernetes Web View by Henning Jacobs Episode 38: Kubernetes Failure Stories, with Henning Jacobs

No matter how you say it, you probably use kubectl all the time. Did you know you can extend it with plugins? Did you know you can find and install those plugins using krew, a plugin manager for kubectl? krew was built by Luk Burchard, a student at TUBerlin, as an intern project. He was supervised by Ahmet Alp Balkan at Google Cloud, and they both join Craig and Adam to discuss it. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Pluots Fox evidence News of the week “Open sourcing” the Kubernetes security audit CyberArk’s penetration testing methodology Docker reverse shells and making it rain shells in Kubernetes by Rory McCune Google Cloud Security Scanner: web application vulnerability scanner for GKE Knative 0.8 release notes Building a Kubernetes platform at Pinterest Octant by VMware Call to participate in the CNCF Survey Direct link Reannouncing the Kubernetes Forum

Ian Coldwater specializes in breaking and hardening Kubernetes, containers, and cloud native infrastructure. A pre-eminent voice in the Kubernetes security community, they are currently a Lead Platform Security Engineer at Heroku. Ian joins Adam and Craig to talk about the offensive and defensive arts. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: kubernetespodcast@google.com twitter: @kubernetespod Chatter of the week Black Hat USA DEFCON Scavenger hunts An example of Spot the Fed An example of the Mystery Challenge News of the week Mesosphere becomes D2iQ Google Cloud launches Migrate for Anthos in Beta Google Cloud Game Servers coming soon Episode 26: Agones, with Mark Mandel and Cyril Tovena Announcing Kubernetes Summits in Seoul and Sydney Security updates of the week CVE-2019-11247: API server allows access to custom resources via wrong scope CVE-2019-11249: kubectl cp (round 3!) IBM and Red Hat: OpenShift on IBM Cloud OpenShift c