In this episode, we spoke to Karthik Satchitanand. Karthik is a principal software engineer at Harness and co-founder and maintainer of LitmusChaos, a CNCF incubated project. We talked about Chaos engineering , the Litmus project and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Kubernetes 1.31 release blog

• Kubernetes 1.31 release episode of the Kubernetes Podcast from Google

• KubeCon NA 2024 Schedule

• Score accepted as a CNCF Sandbox Project

• LitmusChaos

• principlesofchaos.org

• Okteto

• LitmusChaosCon

• community.cncf.io

• Chaos Monkey

• Chapter 5 of “Chaos Engineering” by Casey Rosenthal, Nora Jones, published by O’Reilly, covers DiRT

• LitmusChaos ChaosHub

• Klustered on YouTube

• Rawkode Academy

Guest is Angelos Kolaitis, Angelos is a senior Software Engineer at Canonical working on Kubernetes. He has multiple contributions to open source projects, a highlight of which is his involvement in the Kubernetes Release Team since Kubernetes v1.26.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Gemma2 2b

• AWS deprecates services

• Refreshing the KCD program: a new chapter in community building

• Angelos Kolaitis

• kubernetes 1.31 release blog

• Kat Cosgrove k8s 1.30 release lead

• Kubernetes 1.31 Removals and Major Changes

• KEP-3063 Dynamic Resource Allocation

• Completing the largest migration in Kubernetes history

Guests Thomas Poignant and Todd Baert are Software engineers with long experience working on IAM systems and feature flagging software. Today they are both maintainers and members of the Technical Committee of OpenFeature which is a CNCF incubated project.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Istio service Mesh add-on on Azure Kubernetes Services

The CNCF released their 2023 annual survey

Women Who code closed its doors

Vulnerability in OpenMetadata version 1.31 or lower

Thomas Poignant

• LinkedIn

• Twitter/X

Todd Baert

• LinkedIn

• Twitter/X

OpenFeature

Feature Flagging

Pete Hodgson article on feature flags

Go feature flag

Flagd

FlagSmith

In this episode, release lead Kat Cosgrove walks us through what’s new in Kubernetes 1.30. Recorded at KubeCon EU 2024.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Google Cloud Next Wrap Up Blog

• Amazon EKS extended support for Kubernetes versions now generally available

• Introducing the Windows Operational Readiness Specification

• Kubernetes v1.30: Uwubernetes blog

• A Peek at Kubernetes v1.30

• Release Team Lead Handbook

• Kubernetes Release Team info 

KubeCon EU 2024 was the largest KubeCon yet! Explore the trends and learnings from the event through interviews with attendees.

Featuring:

• Olivia Al-Joundi

• Tabitha Sable

• Sreeram Venkitesh

• Lachlan Evenson

• James Blair

• Ian Coldwater

• Gabriele Bartolini

• Benjamin Koltermann

• Benazir Khan

And additional Guest Host, Mofi Rahman.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Go Workspaces in Kubernetes Blog by Tim Hockin

• Fermyon SpinKube donation announcement

• Istio Announces the Beta Release of Ambient Mode - Blog

• KubeCon EU 2024 CNCF Highlights Blog

• Kubestronaut Program Announcement Blog

• CNCF Udemy Partnership Announcement Blog

• Cloud Native Hacks Winners Blog

• KubeCon NA CFP

• KubeCon CloudNativeCon NA

• Cloud Native Glossary — the Japanese version is live! - Blog

• KuberTENes logo design contest

• KuberTENes.cncf.io

• From Zero to Hero: Scaling Postgres in Kubernetes Using the Power of CloudNativePG - Gabriele Bartolini, EDB

• This Meeting Is Better Than An Email: A Panel Discussion on Facilitating Great Meetings

• SIG Security Update: Growing Together

• Cloud Native Rejekts

• WasmCon 2023 Kubernetes Podcast episode

• Ray on Kubernetes (KubeRay)

Matt Klein is the CTO of bitdrift which is building a Mobile observability platform. Matt is known for being the creator of Envoy, one of the most popular open source proxies in the cloud space. 

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Cloud Native Rejekts

CNCF 2024 Prospectus

KubeCon Paris Guide Abdel co-authored

KubeCon Paris Recommendations Map

Matt Klein:

• Twitter

• LinkedIn

Envoy Proxy

Twitter kicks Android app users out for five hours due to 2015 date bug

NGINX

HAProxy

Matt Klein’s X post about 1 billion pulls for envoy on DockerHub

Envoyproxy on DockerHub

Envoymobile

Rust programming language

Mike Coleman is a developer advocate at Sysdig focused on open source software and spends a lot of time working on the Falco project. We’ll explore how Falco enables runtime security, and celebrate its recent graduation!

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Falco Graduation announcement

Google Gemma Open Model

GitOps Associate Certification (CGOA)

Certified GitOps Associate (CGOA) Exam

Linkerd 2.15 announcement

Linkerd 2.15 stable release announcement

Crossplane 1.15 announcement

Open Source Summit North America Schedule

Cloud Native Security Con North American

Cloud Native Security Con America CFP

Mike Coleman

• LinkedIn

• Twitter

"Docker?!?! But, I’m a sysadmin" - Mike Coleman

Mike Colemane and Bill Gates in an Earthquake

Falco project

• LinkedIn

• Twitter

• Slack

KubeCon NA 2019 CTF

Cryptomining Detection Using Falco

Navigating Open Source Project Hurdles to Achieve Community Enpowerments Aizhamal Nurmamat kyzy & Bob Killen

Wrangle your alerts with open source Falco and the gcpaudit plugin

Falcosidekick

Practical Cloud Native Security with Falco

Certified Kubernetes Security (CKS) exam

Lucas Käldström is a CNCF Ambassador, Kubernetes contributor and expert. Lucas Co-led SIG cluster lifecycle, ported Kubernetes to ARM and shepherded kubeadm from inception to GA. Today Lucas runs three meetup groups in Finland, studies at Aalto University, and, when time allows, contributes to cloud native software as a contractor.

We chatted about Kubernetes API machinery, Chaos, Entropy, and Dishwashers.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Weaveworks shutdown their operations

Weavwork CEO Alexis Richardson post on Linkedin

kubetrain.io

Bytedance KubeAdmiral on GitHub

Bytedance KubeAdmiral Announcement on InfoQ

Strimzi joins the CNCF Incubator

Microsoft new Cost Management tools for Azure

Lucas Käldström

• LinkedIn

• Twitter/X

Kubernetes as a dishwasher

Understanding Kubernetes Through Real-World Phenomena and Analogies - Lucas Käldström

Lucas research thesis

Paper - Large-scale cluster management at Google with Borg

API Machinery

Dr. Stefan Schimanski

KCP - Kubernetes-Like Control Plane

Kubernetes API Conventions

SIG Architecture

Ingress2gateway - Ingress to Gateway Migrator

Promise Theory: Principles and Applications (Mark Burgess, Jan Bergstra)

In Search of Certainty: The Science of Our Information Infrastructure (Mark Burgess)

Sweden Finns

Keynote: Reperforming a Nobel Prize Discovery on Kubernetes - Ricardo Rocha & Lukas Heinrich

Why Service Is the Worst API in Kubernetes, & What We’re Doing About It - Tim Hockin

Gateway API TCP Routes

Community-Powered Kubernetes LTS: Ensuring Stability and Compatibility While Driving Innovation Jeremy Rickard

https://github.com/yannh/kubeconform

Madhav Jivrajani is an engineer at VMware, a tech lead in SIG Contributor Experience and a GitHub Admin for the Kubernetes project. He also contributes to the storage layer of Kubernetes, focusing on reliability and scalability.

In this episode we talked with Madhav about a recent post on social media about a very interesting stale reads issue in Kubernetes, and what the community is doing about it.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Mofi Rahman co-host this episode with Kaslin

• Twitter/X

• LinkedIn

Kubernetes Podcast episode 211

Google announced a new partnership with Hugging Face

RedHat self-managed offering of Ansible Automation Platform on Microsoft Azure

The schedule for KubeCon CloudNativeCon EU 2024 is out

CNCF Ambassador applications are open

The CNCF Hackathon at KubeCon CloudNativeCon EU 2024 CFP is open now

The annual Cloud Native Computing Foundation report for 2023

CNCF's certification expiration period will change to 24 months starting April 1st, 2024.

Sysdig 2024 Cloud Native Security and Usage Report

Madhav Jivrajani

• Twitter/X

• LinkedIn

Priyanka Saggu Interview

Stale reads Twitter/X thread by Madhav

"Kubernetes is vulnerable to stale reads, violating critical pod safety guarantees" - GitHub Issue tracking the stale reads CAP Theorem issue

CMU Wasm Research Center

"A CAP tradeoff in the wild" blog by Lindsey Kuper

"Reasoning about modern datacenter infrastructures using partial histories" research paper

The Kubernetes Storage Layer: Peeling the Onion Minus the Tears - Madhav Jivrajani, VMware

KEP-3157: allow informers for getting a stream of data instead of chunking.

KEP 2340: Consistent Reads from Cache

Journey Through Time: Understanding Etcd Revisions and Resource Versions in Kubernetes - Priyanka Saggu, KubeCon NA 2023

Kubernetes API Resource Versions documentation

Guest is Bill Mulligan. Bill is Community Pollinator at Isovalent working on Cilium and eBPF. We learned how to properly pronounce Isovalent and what it actually means. We also spoke in depth about eBPF, Cilium, network function in Kubernetes and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

The Kubernetes legacy Linux package repositories are going away in January 2024

Kubernetes 1.29 is now available on GKE in the Rapid Channel

The Vmware Tanzu Application Catalog is fully compliant with the SLSA Level 3

AWS extended support for Kubernetes minor versions pricing update

The Kubernetes Contributor Summit Paris CFP is Open, closes Feb 4th

KubeCon and CloudNativeCon EU 2024 co-located events agenda is live

The Cloud Native Glossary is now available in French

Blixt a new experimental LoadBalancer based on the Gateway API and eBPF

Bill Mulligan:

• LinkedIn

• Twitter/X

Covalent bonds on Wikipedia

Isovalent Hybridization on Wikipedia

Isovalent company site

BPF - Berkeley Packet Filtering

eBPF project site

Fast by Friday: Why eBPF is Essential - Brendan Gregg

GKE Dataplane V2

Cilium project site

Hubble documentation

Cilium Service Mesh

Cilium annual report

Cilium Certified Associate (CCA)

CCA Study Guide from Isovalent on GitHub

Istio Certified Associate (ICA)

Certified Kubernetes Administrator (CKA)

Certified Kubernetes Application Developer (CKAD)

Kubernetes and Cloud Native Associate (KCNA)

Resources to prepare for the CCA certification

Isovalent library

The World of Cilium

Cisco acquired Isovalent

Developing eBPF Apps in Java

BGP in eBPF

This week’s guests are Johnny Horvi and Frode Sundby from NAVs (Norwegian Labour and Welfare Administration) platform team. We talked about NAIS. A kubernetes-based team centric platform aiming at providing the tools needed to deploy and operate apps easily.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Kubernetes 1.29 features:

• https://kubernetes.io/blog/2023/12/14/cloud-provider-integration-changes/

• https://kubernetes.io/blog/2023/12/20/contextual-logging-in-kubernetes-1-29/

• https://kubernetes.io/blog/2023/12/19/pod-ready-to-start-containers-condition-now-in-beta/

• https://kubernetes.io/blog/2023/12/19/kubernetes-1-29-taint-eviction-controller/

• https://kubernetes.io/blog/2023/12/18/read-write-once-pod-access-mode-ga/

• https://kubernetes.io/blog/2023/12/18/kubernetes-1-29-feature-loadbalancer-ip-mode-alpha/

• https://kubernetes.io/blog/2023/12/15/kubernetes-1-29-volume-attributes-class/

• https://kubernetes.io/blog/2023/12/15/csi-node-expand-secret-support-ga/

Kubernetes 1.29 release lead Interview

Cisco acquired Isovalent

Cilium 2023 Annual report

KubeCon and CloudNativeCon Paris 2024 Hackathon

• https://www.cncf.io/blog/2023/12/20/kubecon-cloudnativecon-europe-hackathon-challenges-brought-to-you-by-the-united-nations/ 

• https://events.linuxfoundation.org/kubecon-cloudnativecon-europe/

• https://unite.un.org/ 

• https://sdgs.un.org/goals

OpenFeature incubated as a CNCF project

Guests:

• Johnny Horvi

• Frode Sundby

Nais

• Nais.io

• Twitter/X

• Github

NAV

JBoss

IBM Websphere

Apache Mesos

Nais on GitHub

In this episode we interviewed Priyanka Saggu, Kubernetes v1.29 release lead and SIG ContribEx Tech Lead. We spoke about the release, the new features and enhancements, and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Kyverno completes third-party security audit

Google Deepmind Introduction to Gemini

Google launches Gemini - The Verge

Linux Foundation Newsletter: November 2023

• High Performance Software Foundation (HPSF) Founding Announcement

• App Defense Alliance joins Joint Development Foundation under the Linux Foundation

Open Source Summit North America 2023 CFP (closes January 14, 2024)

Kubernetes v1.29 release information page on k8s.dev

Removals, Deprecations, and Major Changes in Kubernetes 1.29

Release Blog - Kubernetes v1.29: Mandala

Breaking changes

• KEP 2395: Removing In-Tree Cloud Providers
  (SIG Cloud Provider, Beta)

• Kubernetes v1.28 on the Kubernetes Podcast from Google - discussion of removal of in-tree storage plug-ins

Major Changes

• KEP 1287: In-Place Update of Pod Resources
  (SIG Node, Alpha)

• Support in-place Pod vertical scaling in VPA

• KEP 753: Sidecar Containers
  (SIG Node, Beta)

Stable

• KEP 3299: KMS v2 Improvements OR KMSv2
  (SIG Auth)

• SIG Etcd on the Kubernetes Podcast from Google

• KEP 2485: ReadWriteOncePod PersistentVolume Access Mode
  (SIG Storage, SIG Scheduling)

• KEP 727: Kubelet Resource Metrics Endpoint
  (SIG Instrumentation)

• “The Kubelet Summary API is a source of both Resource and Monitoring Metrics. Because of it’s dual purpose, it does a poor job of both.”

Beta

• KEP 2799: Reduction of Secret-based Service Account Tokens
  (SIG Auth)

Alpha

• KEP 3866: nftables kube-proxy backend
  (SIG Network)

• [KCSNA 2023] Iptables the end of an era - Dan Winship, Antonio Ojea

Kaslin’s blog about “Out of Tree” Kubernetes

In this episode we interviewed Priyanka Saggu, Kubernetes v1.29 release lead and SIG ContribEx Tech Lead. We spoke about the release, the new features and enhancements, and more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Kyverno completes third-party security audit

Google Deepmind Introduction to Gemini

Google launches Gemini - The Verge

Linux Foundation Newsletter: November 2023

• High Performance Software Foundation (HPSF) Founding Announcement

• App Defense Alliance joins Joint Development Foundation under the Linux Foundation

Open Source Summit North America 2023 CFP (closes January 14, 2024)

Kubernetes v1.29 release information page on k8s.dev

Removals, Deprecations, and Major Changes in Kubernetes 1.29

Release Blog - Kubernetes v1.29: Mandala

Breaking changes

• KEP 2395: Removing In-Tree Cloud Providers
  (SIG Cloud Provider, Beta)

• Kubernetes v1.28 on the Kubernetes Podcast from Google - discussion of removal of in-tree storage plug-ins

Major Changes

• KEP 1287: In-Place Update of Pod Resources
  (SIG Node, Alpha)

• Support in-place Pod vertical scaling in VPA

• KEP 753: Sidecar Containers
  (SIG Node, Beta)

Stable

• KEP 3299: KMS v2 Improvements OR KMSv2
  (SIG Auth)

• SIG Etcd on the Kubernetes Podcast from Google

• KEP 2485: ReadWriteOncePod PersistentVolume Access Mode
  (SIG Storage, SIG Scheduling)

• KEP 727: Kubelet Resource Metrics Endpoint
  (SIG Instrumentation)

• “The Kubelet Summary API is a source of both Resource and Monitoring Metrics. Because of it’s dual purpose, it does a poor job of both.”

Beta

• KEP 2799: Reduction of Secret-based Service Account Tokens
  (SIG Auth)

Alpha

• KEP 3866: nftables kube-proxy backend
  (SIG Network)

• [KCSNA 2023] Iptables the end of an era - Dan Winship, Antonio Ojea

Kaslin’s blog about “Out of Tree” Kubernetes

Ohad Maislish is the CEO and co-founder of env0 and part of the founding team for the OpenTofu project. Before env0, Ohad was the CEO and founder of Arno Software, a cloud infrastructure services company, and Capester, a startup that empowered citizens in smart cities worldwide. Over the course of this career, Ohad has also served in different technical and management roles at Ravello Systems, eToro, and VMware. He was also the youngest developer at Microsoft Israel at the age of 17, after starting his bachelor's degree at the age of 14.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

The Kubernetes Removals and Major Changes blog for v1.31

Google Cloud Announced GKE Extended support

Bob Killen has joined as a Senior Technical Program Manager

Microsoft announced general availability of Microsoft Azure Container Storage

CNCF Glossary Turkish edition

Ohad Maislish

• LinkedIn

• Twitter/X

IaC Podcast

OpenTofu

OpenTofu Day

OpenTofu Manifesto

OpenTofu announcement

OpenTofu state encryption

OpenTofu 1.8 early evaluation of variables

ValKey

AWS Support for ValKey

KubeCon EU Co-lo: Atlantis and OpenTofu: The Future of Open-Source IaC

Abdel chatting on the IaC Podcast at kubeCon Paris 24

OpenTofu State and Plan Encryption

IaC Podcast

This episode Kaslin went to KubeCon North America In Chicago. She spoke to folks on the ground, asked them about their impressions of the conference, and collected a bunch of cool responses.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Google researchers discover 'Reptar,’ a new CPU vulnerability

Reptar by Tavis Ormandy

Tim Hockin: Kubernetes Needs a Complexity Budget

Kubernetes' Tim Hockin on a decade of dominance and the future of AI in open source 

Keynote: A Vision for Vision - Kubernetes in Its Second Decade - Tim Hockin

Open and Secure: A Manual for Practicing Thread Modeling to Assess and Fortify Open Source and Security

Announcing our latest book release: a comprehensive security guide to assess and fortify open source security

CNCF LLM Starter Pack

Crossplane

Web Assembly

Intro to Kubernetes Gateway API

 SIG ContribEx Comms Team Rap by Bart Farrell

Jesper Larsson is a Freelance PenTester. Jesper works with a hacker community called Cure53. Co-organizes SecurityFest in Gothenburg, Sweden. Hosts Säkerhetspodcasten or The Security Podcast. Jesper is also a Star on Hackad, a Swedish TV Series about hacking.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Kubernetes Removals, Deprecations, and Major Changes in Kubernetes 1.29

Introducing SIG etcd

etcd, with Marek Siarkowicz and Wenjia Zhang (The Kubernetes Podcast from Google)

WebAssembly (WASM) and OpenShift: A Powerful Duo for Modern Applications

Linux Foundation Events

Pass the torch in ContribEx #7603

Cure53 Hacker Community

Säkerhetspodcasten

Hackad TV Show on IMDB

SecurityFest Gothenburg

Falco by Sysdig

Wolfi by Chainguard

The Untold Story of NotPetya, the Most Devastating Cyberattack in History

The Untold Story of NotPetya, the Most Devastating Cyberattack in History

Fabian Kammel is a Security Architect at ControlPlane, where he helps to make the (cloud-native) world a safer place. In his career, he continuously worked to bring hardware security and cloud-native security closer together. His past projects include:

* A cloud-native PKIs for on-road vehicle services secured by enterprise HSMs

* An always-encrypted Kubernetes distribution that harnesses the power of Confidential Computing

* And more recently securing SPIFFE-based machine identities via hardware attestation.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Confidential Computing Blog from kubernetes.io

Confidential Computing Consortium

Confidential Computing Whitepaper

Intel SGX Enclave

Swap Memory with Kubernetes in Beta in 1.28

Hardware Security Modules

Trusted Platform Modules (TPM)

Envelope Encryption

Confidential Computing Concepts - Confidential Virtual Machine

AMD Secure Encrypted Virtualization (AMD SEV)

AMD Secure Encrypted Virtualization - Secure Nested Paging (AMD SEV SNP)

Trusted Computing Base (TCB)

Remote Attestation

Confidentiality, Integrity, and Availability: The CIA Triad

Intel SGX Enclaves

Confidential Containers (CoCo)

Katacontainers

AWS Firecracker

Guests are Marek Siarkowicz , Senior Software Engineer in Google Cloud, Tech Lead of SIG-etcd   AND Wenjia Zhang, Engineering Manager in Google Cloud, Co-Chair of SIG-etcd, Google. We spoke about the project, the recent change to become a Special Interest Group and how to learn etcd.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Co-host this week is Mofi Rahman [X, LinkedIn]. Cloud Developer Advocate at Google

Karpenter graduated to Beta

The Kubernetes SIG Network announced release 1.0 of the Gateway API

Ingress2gateway new CLI to migrate from Ingress to Gateway

The Call for Proposals for KubeCon EU 2024 will close on Nov 26, 2023

etcd

Meaning of etcd

etcd history from CoreOs

Raft paper

On the Hunt for Etcd Data Inconsistencies by Marek Siarkowicz - [youtube]

Lessons Learned From Etcd the Data Inconsistency Issues by Marek Siarkowicz - [youtube]

The first pancake rule

etcd as a Kubernetes sig

The Case for SIG-ifying etcd

CNCF Contributor License Agreements (CLA)

Kubernetes Prow

Contributor Experience Special Interest Group

Kubernetes Watch

Go Serialization and Deserialization

Cilium with external etcd

Certified Kubernetes Administrator

etcd mentorship program

etcd @kubecon NA 2023

Kubernetes considerations for large clusters

Operating etcd clusters for Kubernetes

Kueue

etcd on the podcast

The Heartbleed Bug

XKCD meme about dependency

WasmCon took place in BELLEVUE, WASHINGTON on Sept 6-7 2023. Kaslin and Mia from our advocacy team went down there and spoke to some folks at the conference to get their impression of the event.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Mia Villaseñor:

• Twitter/X

• LinkedIn

Cilium Graduated

Docker AI apps tools

Kubernetes steering committee election results

CRI-O moved to Kubernetes owned repository

CNCF TOC voted to archive the SMI project

WasmCon 2023

Guests

• Dan Wilson

• Hood Chatham

• Brendan Irvine-Broque

• Josh Berkus

• Kevin Zheng

• Sid Hussmann

• Dawn Parzych

• Daiki Akasaka

• Radu Matei

• Dan Mihai Dumitriu

• Russell Ashi

• Chris Madison

• Brooks Townsend

Open Policy Agent

V8

Gapfruit OS

WASI Capabilities

Trusted Compute Group

Trusted Platform Module (TPM)

Jnode

Midokura WASM Runtime

Cosmonic Cloud

CNCF WasmCloud

Wasm Components Model

WASI

WasmTime
SQLite in Wasm talk at WasmCon

AI and Wasm talk at WasmCon

Envoy and Wasm

The WIT format

Cloudflare RU workers

Wasm and Kubernetes

Wasm and Kubernetes case study

Doom on Cloudflare workers with Wasm

Wasm and bosch by Emily Ruppel

Dynamic Linking Python

Dynamic Linking in Wasm from Wasm I/O 23

Podcast episode#208 with Phil estes

Podcast episode#203 with Justin Cormack

This week we explore what’s new in Istio with core maintainers John Howard and Keith Mattix

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Announcing Linkerd 2.14: Improved enterprise multi-cluster, Gateway API conformance, and more!

• Amazon to invest up to $4 billion in AI startup Anthropic

• KubeCon EU 2024 CFP is open until November 26th

• CNCF Security Slam

• NEW Certification: Istio Certified Associate (ICA)

• npm packages caught exfiltrating Kubernetes config, SSH keys

• Kubernetes Native Sidecars in Istio (Blog from Istio)

• Kubernetes v1.28: Introducing native sidecar containers

• Argo Workflows

• Apache Airflow

• Envoy Proxy

• Istio Ambient Mesh

• Introducing Rust-Based Ztunnel for Istio Ambient Service Mesh

• eBPF

• Kernel TLS

• HTTP Based Overlay Network Environment (HBONE)

• KubeCon EU 2023: “Future of Service Mesh - Sidecar or Sidecarless or Proxyless?” - Idit Levine & Yuval Kohavi, Solo.io; Keith Mattix II, Microsoft; Eric Van Norman, IBM; John Howard, Google

• Istio Ambient Waypoint Proxy Made Simple

• kiali.io

• Kubernetes Gateway API (Istio)

• Getting Started with Istio and Kubernetes Gateway API

• Istio Desitination Rule

• Announcing Istio's graduation within the CNCF

• Istio sails into the Cloud Native Computing Foundation (CNCF Blog)

This week we explore the history of containers, particularly containerd, with Phil Estes.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Notary Project announces a major release! (Blog) 

• Kubernetes Legacy Package Repositories Will Be Frozen On September 13, 2023 (Blog)

• Gateway API v0.8.0: Introducing Service Mesh Support (Blog)

• Amazon VPC CNI now supports Kubernetes Network Policies (Blog)

• Introducing VMware Tanzu Developer Portal: Empowering Developers with Enterprise-Grade Backstage

• Google Cloud Next page

• Google Cloud Next Blogs

• Google Cloud Post-Next Videos

• KubeCon NA 2023 Schedule

• Rig.dev startup (Blog)

• Docker

• Containerd

• Chroot (archlinux wiki)

• Linux namespaces (Linux man page)

• runC announcement (2015)

• runC on Github

• Containerd project creation announcement (2016)

• Containerd donation to CNCF announcement (2017)

• Containerd graduation announcement (2019)

• Container Runtime Interface (CRI)

• Kubernetes SIG Node

• Dockershim debacle (kubernetes.io blog)

• Dockershim deprecation FAQ (kubernetes.io blog)

• Mirantis-owned cri-dockershim on Github

• Open Container Initiative (OCI)

• Cloud Native Computing Foundation (CNCF)

• CoreOS (“What was CoreOS” blog by RedHat)

• Rkt (“What is Rkt” blog by RedHat)

• Kinvolk

• BlaBlaCar

• BlaBlaCar Case Study on Google Cloud

• gRPC

• gVisor

• Kata Containers

• Docker && WASM with Justin Cormack (Docker CTO) on the Kubernetes Podcast from Google

• WasmEdge (A Wasm runtime)

• CRI-O (lightweight container runtime for Kubernetes)

• Containerd scope and principles

• nerdctl: Docker-compatible CLI for containerd

• Docker Buildkit

• github.com/container-image, github.com/container-storage

• Podman

• Skopeo

• Firecracker microvms

• Intel Clear Containers

• Hyper.sh

• Open Infrastructure Foundation

• OpenStack

• Cloud Native Rejekts

• “Face off: VMs vs. Containers vs Firecracker” by Alex Ellis at Cloud Native Rejekts EU 2023

• Keynote: Reperforming a Nobel Prize Discovery on Kubernetes - Ricardo Rocha & Lukas Heinrich

• Keynote: CERN Experiences - Ricardo Rocha & Clenimar Filemon

• Jesse Frazelle’s container escape challenge used to be at contained.af, but it doesn’t seem to exist anymore.

• Containers from Scratch - Liz Rice at GOTO 2018 (there are a bunch of recordings of this talk)

• Mirantis-owned cri-dockershim on Github

Guest is Grace Nguyen. Kubernetes 1.28 release lead and student at the University of Waterloo. Grace had to juggle exams and community work to bring Kubernetes 1.28 to life. We will get to know grace and learn what work went into release, where the theme come from and what's special about it

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Docker Desktop 4.22 is live

• The CNCF announced the End User Technical Advisory Board

• The Go community released v1.21

• Configu raised a $3M pre-seed round

• Grace Nguyen

• LinkedIn

• X

• Kubernetes SIG-Security

• Kubernetes 1.28 Planternetes

• API Awareness of SideCars

• Native SideCar containers in Istio

• pkgs.k8s.io: Kubernetes Community-Owned Package Repositories

• Expanding support skew between control plane and node components

• Non-Graceful node shutdown

• Pod replacement policy for Jobs (alpha)

• Match conditions for admission webhooks

• Feature graduations and deprecations in Kubernetes v1.28

• Kubernetes 1.28 webinar. Sept 6th 2023 9am PDT

• Kubernetes 1.29 PR to assemble team

• Kubernetes 1.29 shadow program is open

• Kubernetes 1.27 release lead Xander Grzywinski

• Beta support for enabling swap space on Linux

• SideCars handling is the most popular issue on kubernetes tracker

• Reddit conversation about native SideCars

• Native SideCars explained

Guests are Wesley Hales and Max Bruce are co-founders of LeakSignal. LeakSignal is an American startup which is building a set of tools and products to detect and prevent data exfiltration in Service Meshes and proxies supporting Envoy and proxy-wasm.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Dragonfly v2.0.1 is released

• Redhat Terraform Provider for ROSA Preview

• Microsoft Azure Operator Nexus

• Hashicorp Adopts BSL Blog

• Open Source Security Foundation S2C2F

• Kubernetes and Cloud Native events Q4, 2023

  • WasmCon on Sept 6 and 7 in Bellevue, Washington

  • The Open Source Summit EU on Sept 19 to 21 in Bilbao, Spain

  • GRPC Conf on Sept 20 in Sunnyvale, California

  • Virtual IstioCon on Sept 25 and 26.

  • KubeCon, Cloud NativeCon And Open Source Summit China on Sept 26 to 28 in Shanghai, China

  • PromCon EU on Sept 28 and 29 in Berlin, Germany

  • KubeCon and CloudNativeCon NA on Nov 6 to 9 in Chicago, Illinois.

  • KubeDay India On December 8 in Bangalore

  • KubeDay Singapore on December 12

• Fermyon added SQL Database support and custom domains to their Wasm Cloud Platform

• Exposed Kubernetes Clusters are everywhere

• LeakSignal

• LeakSignal GitHub

• OpenShift

• Apigee

• Keyhouse

• Spiffe

• WebSockets

• gRPC

• Wasm

• Envoy

• Nginx

• AWS Lambda

• Proxy Wasm

• Istio Proxy Wasm

• Apisix

• Istio

• Prometheus

• PCI Compliance

• Cloud Armor

• Blog post about Cloud Armor WAF capabilities

• Akamai

• eBPF

• Envoy Mobile

“The State of Kubernetes Cost Optimization,” is a recent report based on research into best practices for running Kubernetes clusters. If you’re running your workloads as efficiently as possible, your costs will be optimal too. The report reviews the data and offers recommendations on tools and techniques you can use to optimize your Kubernetes clusters. We talk with two of the report’s creators, Fernando Rubbo and Kent Hua, to learn more.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

- CNCF Istio Graduation blog

- Istio’s blog about CNCF Graduation

- CNCF Blog on Flux v2 GA release

- Redhat Blog on Kubevirt 1.0

- Pulumi blog on v4.0 of their Kubernetes Provider

- VMware Wasm Labs blog on serverless with wasm

- CNCF announcement of over 30 new members 

- VMware docs on self-hosted Tanzu

- The State of Kubernetes Cost Optimization report

- “Sharing the inaugural State of Kubernetes Cost Optimization report” blog

- Resource Management for Pods and Containers (Kubernetes Documentation)

- Google Site Reliability Engineering (SRE) books

- Google Cloud Managed Service for Prometheus

Mauricio Salatino is a software engineer at Diagrid working on the Dapr project but also serves as a chair for the newly formed App Development Working Group under the TAG App Delivery for the CNCF. He also serves as a member of the steering committee for Knative and the Keptn project.  Mauricio authored a book about Platform Engineering on Kubernetes for Manning and co-authored some books on Jboss. He used to work for Red Hat and VMware. 

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• ArgoCD announced that ArgoRollouts now supports version 1.0 of the Kubernetes Gateway API

• Gateway API Supported providers

• Google has released Gemma 2

• Dapr (Distributed Application Runtime)

• JBoss

• Overview of JNDI (Java Naming and Directory Interface)

• Secrets Management Overview on Dapr

• Knative

• Java Spring Boot

• App Development Working Group (Cloud Native Computing Foundation)

• Spring AI

• Langchain

• Dapr and service meshes

• Istio

• Vcluster

• Testcontainers

This week we speak to GKE Project Manager, Nicholas Eberts, about Platform Engineering. He draws from his considerable experience both with the Cloud Native community and working with businesses to set up their cloud platforms to explore the trend.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

- Kubernetes binary distribution via CDN at dl.k8s.io

- OpenShift Service Mesh version 2.4

- AWS Signer

- KubeCon CloudNativeCon North America 2023 registration

- KubeCon CloudNatieCon and Open Source Summit China 2023 registration

- Kubernetes Bill of Materials CLI from KSOC Labs

  -  Blog

  - GitHub

- CNCF Blog "Version after version: how the open source project Kubernetes releases its software"

Nicholas Eberts:

- Twitter

- LinkedIn

- Abdel tweeting about Platform Engineering

- "DevOps is dead, long live Platform Engineering" tweet

- DORA (DevOps Research and Assessment)

- Charity Majors on the Hacking the Org Podcast

- Charity Majors on the DevInterrupted Podcast

- Open Service Broker

- CNCF Landscape

- Google Bard

This week we speak to Justin Cormack the CTO of Docker. We talked about WASM (or WebAssembly Modules), Docker support for running WASM apps and the future of the technology.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

WASMCon 2023:

• CFP

• Event

Kyverno Project 1.10

Intro to Cilium course

Microsoft Azure Linux is GA

CNCF Glossary German edition is live

Google C3 Machine family is available for GKE

ChainGuard move from Github Registry to self-hosted

Amazon Pull through cache on AWS container registry

Justin Cormack:

• Twitter

• LinkedIn

Docker

WebAssembly

Docker+WASM

asm.js

asmjs.org

V8 Javascript engine

Google Sandboxing

WebGPU

ByteCode Alliance

Containerd

Mesos

WASM Edge

In this episode we bring you with us to KubeCon EU 2023 in Amsterdam, Netherlands. We interviewed several attendees about their experience at the conference.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Featuring:

• Adnan Hodzic

• Anisoara-Ionela

• Dominique Top

• Ixchel Ruiz

• Livia-Maria Ciobanu

• Magarita Manterola

• Mark Mandel

• Peter O’Neill

• Whitney Lee

• Zoe Steinkamp

Kubernetes SIG Infra migrating some CI jobs to AWS

Kubernetes 1.26 now Generally Available on GKE

Software Supply Chain Security startup Stacklock, by Craig McLuckie and Luke Hinds raised 17.5M$

Kubernetes SIG Testing End to End Testing Best Practices update

Knative version 1.10 release

KubeDay Israel schedule

Kubernetes, Resistance is Futile - Adnan Hodzic, ING

Choose Your Own Adventure: The Treacherous Trek to Development - Whitney Lee, VMware & Viktor Farcic, Upbound

Agones + Quil;kin: Kubernetes Game Server Orchestration and UDP Service Mesh - Mark Mandel, Google Cloud

Open Policy Agent

eBPF

Build Your Own Path in the Cloud Native Ecosystem - Rich Burroughs, Loft Labs & Kaslin Fields, Google (Whitney mentioned learning about eBPF in this talk)

Google Cloud Anthos

PlayStation and Kubernetes: How to Solve a Problem Like Real-Time

Story of Our Transition to a Custom Kubernetes Operator for an API Gateway - Vincent Behar, Ubisoft

CNCF TAG App Delivery

Cloud Native Buildpacks

Kuberoke

Xander Grzywinski is a Senior Open Source Product Manager at Microsoft and the Kubernetes 1.27 release lead.

We interviewed Xander to explore some highlights from the release, and discuss a bit about what it’s like to work with the release team.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Traefik Labs Launches Traefik Hub

Software Supply Chain Security Assessment:

• Prometheus

• Argo CD

CNCF Spring 2023 Cloud Native Ambassadors

Updates to the Auto-refreshing Official CVE Feed

What’s New in Red Hat OpenShift Virtualization 4.12

Azure Kubernetes upgrades and Long Term Support

KubeCon SHANGHAI, CHINA is back on Sept 26-28, 2023

• CFP Closes on June 18, 2023

KubeCon NA takes place on Nov 6-9, 2023 in Chicago, Illinois

• CFP Closes on June 18, 2023

KubeCon EU 2024 takes place on Mar 19-22 in Paris, France

Introducing Sessionize: a new CFP platform for CNCF events

Manage Amazon EKS Clusters with New VMware Tanzu Mission Control Features

Google Cloud turned profit for the first time according to the earning call of Q1 2023

Xander Grzywinsk:

• Twitter

• LinkedIn

Pod Security Policies

KEP 753: Sidecar containers

Kubernetes 1.27 Release team

Kubernetes 1.27: Chill Vibes

Freeze k8s.gcr.io image registry

Kubernetes Vertical Pod Autoscaler

Kubernetes Removals and Major Changes In v1.27

Kyverno — verify Kubernetes control plane images

Kubernetes 1.27: StatefulSet PVC Auto-Deletion (beta)

Kubernetes 1.27: Query Node Logs Using The Kubelet API

Kubernetes 1.27: Efficient SELinux volume relabeling (Beta)

Kubernetes 1.27: StatefulSet Start Ordinal Simplifies Migration

Kubernetes 1.27: Introducing An API For Volume Group Snapshots

Kubernetes 1.27: Quality-of-Service for Memory Resources (alpha)

Kubernetes 1.27: Vertical Pod Autoscaler supporting in-place updates

Kubernetes 1.27: Server Side Field Validation and OpenAPI V3 move to GA

Kubernetes 1.27: More fine-grained pod topology spread policies reached beta

Kubernetes 1.27: Single Pod Access Mode for PersistentVolumes Graduates to Beta

Kubernetes 1.27: HorizontalPodAutoscaler ContainerResource type metric moves to beta

GKE Workload rightsizing

Paris Pittman is a Senior Program Manager at the Open Source Program office at Apple. A Prominent Kubernetes and CNCF member who served many roles with a focus on community and governance. Paris was on some key milestones for this show. First appearance was on Episode 1 and later on Episode 100. So we could not be happier to have Paris back in Episode 200. We discussed how Paris got started with community work and how the experience has been. Paris shared with us some words of wisdom on the power of working with others and the importance of moving on.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

KCD Amsterdam Retro

AWS announced Data on EKS

Kubecon EU 2023 “Security Village”

Podman desktop released version 0.14

Keycloak joined CNCF as an incubating project

Kubernetes v1.27 code name Chill Vibes was released

The CNCF “Cloud Native Explorers” - Amsterdam Edition

CNCF white paper on Platforms for Cloud Native Computing

GKE Autopilot is now the default mode of operations for new clusters

Paris Pittman:

• Linkedin

• Twitter

• Mastodon (@paris@hachyderm.io)

OSCON 2016

Sarah Novotny

Kaslin is a new chair of SIG contribX

In this episode we bring you with us to Southern California Linux Expo, or SCaLE20x in Pasadena, California. We interviewed several attendees about their experience at the conference.

Featuring:

• Robin Phantomhive, attendee at SCaLE and community member

• Mofi Rahman, Developer Advocate at Google

• Fatima Sarah Khalid, Dev Evangelist at GitLab

• Bryan Behrenshausen, Open Source Program Manager at GitLab

• Laura Santamaria, Geek with an achievement streak at Dell

• Jeff Deifik, Cybersecurity at Aerospace Corp

• Jill Bryant Ryniker of LWDW and the Destination Linux Podcast

• Bill Schouten of Tux Digital and the Sudo Show Podcast

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Chainguard contributes Rekor Search Project to Sigstore

• Docker and Ambassador Labs Announce Telepresence for Docker, Improving the Kubernetes Development Experience

• Docker, Inc. Celebrates 10th Anniversary With Alliances

• Oracle Cloud Infrastructure to Increase the Reliability, Efficiency, and Simplicity of Large-Scale Kubernetes Environments at Reduced Costs

• cdCon / GitOpsCon Schedule

• Crossplane Security Audit

• Crossplane completes fuzzing security audit

• Improving Security by Fuzzing the CNCF landscape

• Report

• Destination Linux Podcast

• LWDW

• LinuxChix LA

• Sudo Show Podcast

• Tux Digital

• Creating a cluster with kubeadm

David Flanagan is a developer, educator and technology enthusiast with a special interest for Kubernetes and Cloud Native technologies. David is the founder of Rawkode Academy, an online platform aiming at teaching kubernetes to developers.

One of the popular shows on RawKode is Klustered. Where david invites people to fix broken kubernetes clusters, learn a thing or two and have a laugh

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Istio Ambient Mesh merged into the main branch

Kubernetes 1.27 changes and removals

k8s.gcr.io to registry.k8s.io redirect

Preview support for pod sandbox on Azure Kubernetes Services

Katacontainers

Docker apologies for handling Free Teams deprecation

Schedule for CNCF-hosted and colocated events is up

Kubernetes WithOut Kubelet

CrowdStrike Discovers First-Ever Dero Cryptojacking Campaign Targeting Kubernetes

David Flanagan

• Twitter

• Linkedin

• RawKode Academy

• Klustered

How Spotify Accidentally Deleted All its Kube Clusters with No User Impact - David Xia

You probably DON'T need a service mesh

Klustered episode with Abdel and Marek

Docker first release at PyCon 2013

KubeHuddle 2023 Toronto

Kubernetes Failure Stories

Kubelete runOnce flag

Cilium Hubble

Telnet Talkers

Teamrock

MUD's

eBPF

Emily Fox is a security engineer @Apple Cloud Services, a CNCF Technical Oversight Committee member and co-chair for a bunch of CNCF events including recently the Cloud Native Security Conference in Seattle.

We had a chance to talk to Emily about the first edition of the CNSC 2023, her involvement with the CNCF community. Her role as a security engineer and some career discussions.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

KubeEdge v1.13.0 released on January 18, 2023, achieves SLSA 3 compliance

SLSA 3 compliance

KubeVela brings software delivery control plane capabilities to CNCF Incubator

GKE Updates:

• Balanced compute classes are now offered in GKE Autopilot

• GKE Autopilot now supports exposing randomly assigned host ports for pods

• GKE has started offering ephemeral storage with local SSDs

• Added support for Windows Server 2022 nodes

AWS announced the availability of AKS anywhere on Snowball Edge Devices

Sysdig released their 6th annual Cloud Native Security and Usage Report.

Rebooting the Cloud Native Hamburg community group

KubeCon EU Amsterdam Schedule

Katacoda Kubernetes tutorials shutdown

LFX Internships for WASMEdge

Kubernetes Community Days (KCDs):

• Upcoming CFP deadlines:

• KCD Italy CFP closes February 20 2023 (in-person)

• KCD Czech + Slovak CFP closes March 1, 2023 (in-person)

• KCD Bangaluru CFP closes March 20, 2023 (in-person)

• KCD Zurich CFP closes March 31, 2023 (in-person)

• KCD Colombia CFP closes March 31, 2023 (in-person)

•  Check out upcoming KCDs that might be in your region:

  • Sponsorship opportunities are available

  • Donation Prospectus available for review

• KCD Israel 2023, Mar 23, 2023

• KCD LA, Mar 9, 2023

• KCD Pakistan (Islamabad), February 20, 2023

• KCD Netherlands (Amsterdam), February 23-24, 2023

• KCD France (Paris), March 7, 2023

• KCD Los Angeles, March 9-10, 2023

• KCD Ukraine Virtual Fundraiser, March 16, 2023

Emily Fox:

• Twitter

• Linkedin

Cloud Native Security Con Youtube Playlist

How to Secure Your Supply Chain at Scale - Hemil Kadakia & Yonghe Zhao, Yahoo

eBPF

CIA Triad

Waterfall development

Cloudcareers.dev podcast

Rory McCune on twitter

Software Supply Chain Security

Emily Fox on SBOM

Emily Fox on SDLC

Shift Left Security: Best Practices for Getting Started

Episode 196 with Benjamin Elder

CNSC 2023 seattle guests

• David Wolf

• Eric Knauer

• Liz Rice

• Mitch Connors  

• Josh Knarr

• Nick Young

• Taylor Dolezal

Frederick Kautz on SPIFFE/SPIRE

Chris Aniszczyk's Blog

The Falco Project

Cilium Tetragon

Pixie

Aviatrix

Keylime

Google Anthos

Beyond Cluster-Admin: Getting Started with Kubernetes Users and Permissions - Tiffany Jernigan

Standardization & Security - A Perfect Match - Ravi Devineni & Vinny Carpenter, Northwestern Mutual

CSI Container: Can You DFIR It? - Alberto Pellitteri & Stefano Chierici, Sysdig

Cloud Native Security Con Eu 2023

CNCF TOC

Benjamin Elder is a Senior Software Engineer at Google, a Kubernetes SIG Testing Chair & Tech Lead, and a Kubernetes Steering Committee member. In this episode we got to chat with Benjamin about the new kubernetes registry migration from k8s.gcr.io to registry.k8s.io. We also had an opportunity to discuss the community, the various SIG's (Special Interest Groups) Benjamin is involved with the amount of work needed to drive the project forward.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

Google Developer Experts program.

ChatGPT.

OpenAI Case Study.

Kubernetes Jobs API.

Job Tracking, to Support Massively Parallel Batch Workloads, Is GA in kubernetes 1.26.

Stateful apps on Kubernetes.

Kelsey Hightower's take on Databases on Kubernetes twitter space.

Kubernetes Resources Model

Linkerd published a 2022 recap

The CNCF Cloud Native Maturity Model

The CNCF Cloud Native Maturity Model website

Using Amazon EKS with Google Workspace identities

CNCF Ambassador 2.0 program

Cloud Native Security Con NA 2023 (website - recordings)

The CNCF important updates for KubeCon + CloudNativeCon 2023 and co-located events

Kubernetes 1.26 news:

• https://kubernetes.io/blog/

• Eviction policy for unhealthy pods guarded by PodDisruptionBudgets:https://kubernetes.io/blog/2023/01/06/unhealthy-pod-eviction-policy-for-pdbs/

• Retroactive Default StorageClass: https://kubernetes.io/blog/2023/01/05/retroactive-default-storage-class/

• Alpha support for cross-namespace storage data sources: https://kubernetes.io/blog/2023/01/02/cross-namespace-data-sources-alpha/

• Advancements in Kubernetes Traffic Engineering: https://kubernetes.io/blog/2022/12/30/advancements-in-kubernetes-traffic-engineering/

• Job Tracking, to Support Massively Parallel Batch Workloads, Is Generally Available: https://kubernetes.io/blog/2022/12/29/scalable-job-tracking-ga/

• CPUManager goes GA: https://kubernetes.io/blog/2022/12/27/cpumanager-ga/

• Pod Scheduling Readiness: https://kubernetes.io/blog/2022/12/26/pod-scheduling-readiness-alpha/

• Support for Passing Pod fsGroup to CSI Drivers At Mount Time: https://kubernetes.io/blog/2022/12/23/kubernetes-12-06-fsgroup-on-mount/

• GA Support for Kubelet Credential Providers: https://kubernetes.io/blog/2022/12/22/kubelet-credential-providers/

• Introducing Validating Admission Policies: https://kubernetes.io/blog/2022/12/20/validating-admission-policies-alpha/

• Device Manager graduates to GA: https://kubernetes.io/blog/2022/12/19/devicemanager-ga/

• Non-Graceful Node Shutdown Moves to Beta: https://kubernetes.io/blog/2022/12/16/kubernetes-1-26-non-graceful-node-shutdown-beta/

• Alpha API For Dynamic Resource Allocation: https://kubernetes.io/blog/2022/12/15/dynamic-resource-allocation/

• Windows HostProcess Containers Are Generally Available: https://kubernetes.io/blog/2022/12/13/windows-host-process-containers-ga/

• We're now signing our binary release artifacts!: https://kubernetes.io/blog/2022/12/12/kubernetes-release-artifact-signing/

Benjamin Elder

• LinkedIn

• Github

• Twitter

Kubernetes Steering Committee

Kubernetes SIG Testing

Kubernetes IN Docker (KIND)

Benjamin on the podcast episode 96

Paris Pittman

• LinkedIN

• Twitter

Kubernetes registry move from k8s.gcr.io to registry.k8s.io

• Archeio is the tool used to redirect to GCR or S3 depending on the client.

• The design of how requests are handled.

• Doc detailing the background of this migration.

Kubernetes SIG Contributor Experience

Kubernetes Slack channel

Leonard Pahlke is not only the Release Lead for Kubernetes v1.26, he's also a co-chair of the CNCF TAG for Environmental Sustainability and a student working toward a Master's Degree in Computer Science at the Hamburg University of Applied Sciences. In this episode, Leonard talks with us about Open Source contribution, environmental sustainability, and Kubernetes v1.26.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

The 1.23 Release team (where Kaslin was a comms shadow)

Shoutout to Kunal Kushwaha, another Kubernetes contributor who started out as a student, and who advocates for students in the community via his YouTube channel & more.

KubeCon EU 2023 (which will have a student track as part of the schedule)

KubeCon Diversity and Inclusion Scholarships

Kubernetes Removals, Deprecations, and Major Changes in 1.26

AWS ReInvent 2022

AWS YouTube Channel

Control Plane Logs added for GKE

Gateway Controller for Single Clusters reaches GA for GKE

Prometheus Turns 10

Prometheus Training

Prometheus Documentary by HoneyPot

Move to registry.k8s.io

Leak Signal Micro-waf

CNCF Maintainer Track changes

Leonard Pahlke’s Blog

Leonard Pahlke blog about contribution: Start Contributing to Open Source Projects

Leonard Pahlke CNCF WG Environmental Sustainablity Blog Post

TAG Environmental Sustainability GitHub

Specific 1.26 changes mentioned:

• Kubernetes 1.26: We're now signing our binary release artifacts!
• Kubernetes 1.26: Windows HostProcess Containers Are Generally Available
• CEL for Admission Control KEP
• In-tree Storage Plugin to CSI Migration - Azurefile
• In-tree Storage Plugin to CSI Migration - vSphere
• In-tree storage plugin removals for GlusterFS and OpenStack, and more, are outlined in the “Kubernetes Removals, Deprecations, and Major Changes in 1.26” blog

Kubernetes Enhancement Proposals (KEPs)

Kubernetes v1.26 Electrifying Release Blog

List of Kubernetes SIGs

Kubernetes Release Team Shadow program

Charity Majors is the co-founder and CTO of honeycomb.io. She pioneered the concept of modern Observability, drawing on her years of experience building and managing massive distributed systems at Parse (acquired by Facebook), then subsequently at Facebook, and at  Linden Lab building Second Life. She is the co-author of Observability Engineering and Database Reliability Engineering (O'Reilly). She loves free speech, free software and single malt scotch. 

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• CNCF Blog: Vitess 20 is now Generally Available

• Vitess Blog: Announcing Vitess 20

• Anthropic Blog: Claude 3.5 Sonnet

• KubeCon India 2024 CFP

• Apps on Azure Blog: Announcing support of OCI v1.1 specification in Azure Container Registry

• VMware Tanzu Blog: Announcing VMware Tanzu Greenplum 7.2: Powering Your Business with Enhanced Performance and Advanced Capabilities

• VMware Tanzu Blog: Join the public beta for GenAI on Tanzu Platform today!

• CNCF: Adobe End User Journey Report

• Honeycomb.io

• O’Reilly Book: Observability Engineering

• O’Reilly Book: Database Reliability Engineering

• Charity’s blog site: charity.wtf

• Charity Blog: Questionable Advice: “My boss says we don’t need any engineering managers. Is he right?”

• Daniel H. Pink book: “Drive: The Surprising Truth About What Motivates Us”

• In which, “He examines the three elements of true motivation—autonomy, mastery, and purpose-and offers smart and surprising techniques for putting these into action in a unique book that will change how we think and transform how we live.”

• Charity blog on Stack Overflow: “Generative AI is not going to build your engineering team for you”

• In which she talks about how the tech industry is an apprenticeship industry.

• Charity Majors in the Google Cloud Next 2024 Developer Keynote

• honeycomb.io blog: “How Time Series Databases Work—And Where They Don't” by Alex Vondrak

• honeycomb.io blog: “Why Observability Requires a Distributed Column Store” by Alex Vondrak

• CNCF Kubernetes Community Days (KCDs)

• CNCF Kubernetes Community Days (KCDs) on GitHub

• Julia Evans Blog

• Wizard Zines by Julia Evans

• “Help! I Have a Manager!” zine by Julia Evans

• Aja Hammerly aka “thagomizer” blog

• “The Toaster Parable”

• “Manager Toolkit: Manage The Person In Front Of You”

• “Manager Toolkit: Useful Manager Phrases for 1:1s”

• “Manager Toolkit: You Talk, I Type”

Louis Bailleul is a Chief Enterprise Architect at PGS. After years of running highly-ranked super computers to process PGS’ seismic data, Louis’s team at PGS has lead a transition to Google Cloud. Listen in to learn about HPC in Google Cloud with GKE, and to explore using Kubernetes to do processing on vessels at sea!

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Listen to the KubeCon NA 2022 recap episode

• Docker + Wasm
• Istio control plane vulnerability CVE-2022-39278
• KubeFlow joins CNCF as an Incubating Project
• CNCF Backstage course
• CNCF Istio intro course

• PGS
• A picture of a PGS vessel
• PGS post from 2021 about their supercomputing rankings and transition to Google Cloud
• Top500 List
• Kubernetes Custom Resources (CRDs)
• Scaling Kubernetes to Thousands of CRDs
• Google Cloud Spot Instances
• Google Cloud Preemptible VM Instances
• Google Cloud - Manage capacity and quota
• KubeCon NA 2019: How the Department of Defense Moved to Kubernetes and Istio - Nicolas Chaillan
• Bare Metal K8s Clustering at Chick-fil-A Scale by Brian Chambers, Caleb Hurd, and Alex Crane

In this episode we bring you with us to KubeCon NA 2022 in Detroit, Michigan. We interviewed 15 attendees from various backgrounds and learned some cool insights.

Featuring:

• Mo Khan, Software Engineer, Microsoft.
• Katrina Verey, Senior Staff Production Engineer, Shopify.
• Aishwarya Harpale, Student, Rutgers University.
• Jeffery Sica, Principal Developer Experience Engineer, CNCF.
• Kirsten Schumy, Software Engineer, AWS.
• John-Paul Robinson, HPC Architect, University of Alabama at Birmingham.
• Madhav Jivrajani, Software Engineer, Vmware.
• Leigh Capili, Developer Advocate, Vmware Tanzu.
• Nim Jayawardena, Developer Programs Engineer, Google.
• Charlie Yu, Developer Programs Engineer, Google.
• Ahrar Monsur, Developer Programs Engineer, Google.
• Mickey Boxell, Product Manager, Oracle.
• Eddie Zaneski, Software Engineer, Chainuard.
• Andy Piggott, Chief Product Officer, Section.
• Logan Smith, Director of Business Development, GrafanaLabs.
• Brian Dorsey, Developer Advocate, Google - Shoutout for recommending the microphones for interviews.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• CrowdStrike cryptojacking finding
• Skaffold v2 Generally Available
• GKE Security Posture Dashboard
  • Blog
  • Video
• Cdk8s+ from AWS
  • Blog
  • Project page
• CNCF Sandbox project application information
• Istio becomes a CNCF Incubating project
• Cert-manager becomes a CNCF Incubating project
• Cisco OpenClarity
• Kube-router bug
• Google Cloud Next Wrap-Up
• Microsoft Ignite highlights blog
• Cloud Native SecurityCon
• Linux Foundation partnership with Razom for Ukraine

• Kubernetes SIG Auth
• Kubernetes SIG API Machinery
• FluxCD
• Online Boutique Sample App
• Kubernetes SIG-CLI
• Cloud Native 101: Motor City Edition by Bob Killen and Jeffrey Sica
• Consumers to Contributors by Brendan O’Leary
• Kubernet-Bees: How Bees Solve the Problems of Distributed Systems
• SchedMD Slurm
• Kube-bind
• Contribute to etcd!
• Cloud Native WASM Day
• Cloud Native SecurityCon
• Backstage (Incubating CNCF Project)
• eBPF
• Cilium (Incubating CNCF Project)
• Acorn Labs
• Vulcan Mind-Meld (Star Trek)
• Kids’ Day at KubeCon NA 2022

After four and a half years hosting this podcast (and almost 9 years at Google) Craig Box is moving on from the latter, which unfortunately means leaving the former. But the show must go on. In this episode Craig introduces new hosts Abdel Sghiouar and Kaslin Fields. We take a small look forward, and then a big look back.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Adam’s last episode
• Abdelfettah Sghiouar
  • Devoxx MA
  • Cloud Careers Podcast
  • You probably DON’T need a Service Mesh
• Kaslin Fields
  • Containers as cookies
  • Biscuits and gravy
  • Contributor comms
• First-gen stickers
• Second-gen stickers
• Episode 60, with Mark Shuttleworth
• Episode 15, with Dan Ciruli and Jasmine Jaksic
  • Dan on sticker duty
• Episode 30, with Joe Zou
  • A rare team photo
• Music and musicians
  • Kaossilator
  • Episode 191, with DJ Fresh
  • Episode 127, with David Pait
  • Episode 83, with Guinevere Saenger
  • Episode 120, with Melanie Cebula
  • Episode 121, with Ed Huang
• Double guest trivia:
  • Episodes 1 and 100 with Paris Pittman
  • Episodes 62 and 180 with Ricardo Rocha (on a technicality)
• The Adam face
  • Corey Quinn: separated at birth?
• One of many booth meetups
• Follow Craig Box on Twitter
• Follow Adam Glick on LinkedIn

Dan Stein is an engineering manager at General Bioinformatics. Dan Stein is also DJ Fresh, a multi-million selling artist with two UK number one records. Learn about the surprising overlap between these two careers.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod and @craigbox

• Trevor Noah stepping down as host of Daily Show
• Follow @craigbox to learn what’s next

• Google Cloud adds GPU support to Autopilot
  • Pricing
• CVE-2021-36782 in Rancher
• State of DevOps Report for 2022
• Congratulations to the 27 Summer LFX Program CNCF interns
• Reviewing the 2019 Kubernetes security audit

• DJ Fresh
• Atari 800 and Atari ST
  • Pong
  • Atari BASIC
• Commodore Amiga
  • OctaMED
• Fatboy Slim and the Atari ST
• Dogs on Acid music forum
• Taylor Hawkins Tribute Concerts
• Abolishing the high tax rate in the UK, or not
• Breakbeat Kaos
  • Hold Your Colour by Pendulum
• Kryptonite by DJ Fresh
• Gold Dust
• Subsequent hits:
  • Louder
  • Hot Right Now
• Kyma (sound design language) and Max/MSP
• We Got Coders
• General Bioinformatics
  • NGS gene sequencing
  • Ensembl
• Hasura
• GraphQL Playground
• NCBI - National Center for Biotechnology Information
• Max Martin
• How Music Works by John Powell
• Learning:
  • Treehouse
  • Udemy
  • 3Blue1Brown
  • Codeacademy
• DJ Fresh’s new single, Higher
• DJ Fresh on Facebook
• Dan Stein on Twitter

Betty Junod, VP of Product Marketing at VMware Tanzu, kindly took up Craig’s challenge to explain the various parts of the Tanzu ecosystem, and how the traditional IT buyer and the modern cloud native really aren’t that different.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod and @craigbox

• NASA DART mission
  • Deep Impact
  • Armageddon
• Apparent retrograde motion
• Planets beyond Neptune

• Istio sails into the CNCF
• SPIFFE and SPIRE graduate
  • Episode 45, with Andrew Jessup
• Brigade archived
• Sysdig 2022 Cloud Native threat report
  • The nice TeamTNT
  • Episode 188, with Kateryna Ivashchenko
  • Episode 169, with Anna Belak
• Chainguard introduces Wolfi
• workerd, from Cloudflare
• Introducing Palaemon
• Custom org policy for GKE in preview
• Leveraging Kubernetes for an elastic platform at Blablacar by Sebastien Doido

• VMware
  • History
• Docker
• Solo.io
• VMware Tanzu introduction blog
  • VMware acquires Heptio
  • VMware acquires Pivotal
• Tanzu Mission Control
• Tanzu for Kubernetes Operations
• Tanzu Application Platform
• Tanzu Kubernetes Grid
  • Bring your own host to TKG
• Project Pacific introduction
  • TKG 2.0
• VMware Aria Operations for Applications
• Tanzu Application Service
  • Cloud Foundry
• Open source projects:
  • Velero
  • Antrea
  • Carvel
  • Cartographer
• Michigan cider
• Detroit-style pizza
• Betty Junod on Twitter

When you think of a service mesh, you probably think of “sidecar containers running with each pod”. The Istio team has come up with a new approach, introduced recently as an experimental preview. Google Cloud software engineers Justin Pettit and Ethan Jackson join Craig to explore ambient mesh.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Listening immediately and listening on a 1 year delay
• Death and state funeral of Queen Elizabeth II
• The Queue
  • What the queue says about our relationship with royalty

• Cloud Custodian becomes an incubating project
• Anthos VM support
• GKE control plane metrics
• CVE-2022-3172: Aggregated API server can cause clients to be redirected
• CVE-2021-25749: runAsNonRoot logic bypass for Windows containers
• Akuity Platform
  • Episode 172, with Jesse Suen
• Weave GitOps 2022.09
• Coroot Community Edition
• Constellation, by Edgeless Systems
• Register for Google Cloud Next
• Dell and Red Hat expand strategic collaboration

• Nicira
• Open vSwitch
• Introucing Ambient Mesh
  • Service mesh
• First mention of Ambient in 2018
• No first class support for sidecars in Kubernetes
• Istio working group meeting, August 2021
  • Remote proxy proposal
• HBONE: HTTP/2-based overlay network environment
• mTLS
• HTTP Connect
• GIF
• MASQUE and QUIC
• Get started with Ambient Mesh
• Ambient Mesh Security Deep Dive
• Justin Pettit and Ethan Jackson on Twitter

Kateryna Ivashchenko is a Senior Demand Generation Manager at Teleport, an organizer of community events, and a supporter of the developer community in her home country of Ukraine.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Introducing Ambient Mesh in Istio
• Istio 1.15
• Linkerd 2.12
  • Linkerd and the Gateway API
• Symbiosis
• Cuber nay-tace
  • Reddit discussion
• VMware Tanzu announcments from VMware Explore
• Isovalent raises $40m Series B
• Kubernetes Blog:
  • PodSecurityPolicy: The Historical Context
  • Pod Security Admission Controller in Stable
  • CSI Inline Volumes have graduated to GA
  • cgroup v2 graduates to GA
• Kubernetes was never designed for batch jobs by Kurt Schelfthout
• 7 years of GKE General Availability

• Portworx
• Teleport
• 24 February 2022: Russia invades Ukraine
• BeyondCorp
• Teleport open source
• hunter2
• Okta breach
• Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin’s Most Dangerous Hackers by Andy Greenberg
• War in Ukraine
• Kateryna’s sister’s T-shirt
• Independence Day
• Chris Lentricchia and Operation Dvoretskyi
• CNCF crowdfunding
• DevOpsDays Kyiv
• International Snack Exchange
• Kateryna Ivashchenko on Twitter

It’s release day! We discuss today’s Kubernetes 1.25 with release team lead Cici Huang, Software Engineer at Google Cloud. What’s in, what’s out, and what is it like to lead a release you are also promoting a feature in?

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Nelson underwater
• England underwater
• A picture of a sheep
• Follow Craig on Twitter for more like that

• Kubernetes 1.25 release
• Introducing Acorn
  • Acorn Labs: Rancher Co-Founders’ New Kubernetes Startup by Christine Hall
  • Episode 57, with Darren Shepherd
• GKE updates:
  • New observability metrics
  • GKE Autopilot now default
  • 256 pods per node
• KubeCon schedule published
  • Cloud Native Rejekts
• Scaling Kubernetes to thousands of CRDs by Nic Cope

• IBM Watson
• Kubernetes Community Awards
• SIG API Machinery
  • Chair & Cici’s hiring manager: Fede Bongiovanni
• Kubernetes 1.25 release team
• Release blog
• Highlights:
  • PodSecurityPolicy is removed; Pod Security Admission is stable
  • cgroups v2
  • KMS v2alpha1
  • CRD valdation experession language
  • Registry change
• Kubernetes 1.24 delay
• Theme and logo
• Envelopes:
  • 1.24 lead: Episode 178, with James Laverack
  • 1.26 lead: Leonard Pahlke
• Cici Huang on GitHub

Three years after they were first proposed, the new Kubernetes Gateway APIs - the evolution of the Ingress API - are in Beta. Rob Scott is a software engineer at Google and a lead on the SIG Network Gateway API project.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Hot hot hot
• Stevenson screen
  • Heathrow Airport
  • Kew Gardens
  • RAF Coningsby

• Argo security audit:
  • Argo blog
  • ADA Logics blog
  • Episode 172, with Jesse Suen
• Kubernetes Cluster API integrates continuous fuzzing
  • The report
  • OSS Fuzz
• Cilium 1.12
• GKE Cluster Autoscaler location policy
• The quest for neutrinos
  • Ray traced Quake II

• Gateway API
• Spire Labs
• Fairwinds
  • rbac-manager
  • Polaris
• Episode 104, with Bowei Du
• Ingress
• Gateway API concepts and role-orientation
  • Roles and resource model
• GatewayClass
• GKE implementation of GatewayClass
• Conformance tests
• Policy attachment
• Gateway
• Routes
• Gateway API goes to Beta
• GRPCRoute
• Gateway Enhancement Proposal (GEP)
• Istio APIs that influenced the Gateway API
• GAMMA Initiative
  • Istio support for Gateway API
  • SMI community joining
• Gateway API on GitHub
• Santa Cruz Moutains
• Rob Scott on Twitter and LinkedIn

Ian Miell is a partner at consultancy Container Solutions, and an author of books on Bash, Git, Terraform and Docker. He explains to Craig how writing - whether runbooks, blog posts, training courses, or “real” books, can help you learn and make your team more effective.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Hot hot hot
• Small pools and larger pools

• Gateway API goes to Beta
  • Episode 104, with Bowei Du
  • Istio support for Gateway API
  • SMI community gets behind Gateway API
• Kyverno and Keptn move to incubation
  • Episode 119, with Alois Reitbauer
• Tau T2A Arm VMs now on Google Compute Engine
  • GKE support for Tau T2A Arm nodes
• Kubeshop acquires BotKube
• Exploiting Authentication in AWS IAM Authenticator for Kubernetes by Gafnit Amiga
  • New Vulnerabilities in Kubernetes NGINX Ingress Controller
• CNCF sponsors audit of KubeEdge
  • KubeEdge security threat model
  • Audit report
• Red Hat announces new CEO
• Google Cloud announces new Distinguished Engineer
  • Episode 185, with Clayton Coleman

• Zwischenzugs
• Business Value, Soccer Canteens, Engineer Retention, and the Bricklayer Fallacy
• Zwischenzug and zugzwang in chess
• Ian’s books:
  • Learn Bash The Hard Way
  • Learn Git The Hard Way
  • Learn Terraform The Hard Way
  • All three in a bundle
  • Docker in Practice
• Tcl
• Why are enterprises so slow?
• Erlang
• Episode 164, with Daniel Walsh
• ‘AWS vs K8s’ is the new ‘Windows vs Linux’
• The Runbooks Project
• ITIL
• Consultancy:
  • Episode 183, with Steve Wade
  • Why it’s great to be a consultant
  • Container Solutions
• Finance topologies:
  • Team Topologies by Manuel Pais and Matthew Skelton
  • If You Want To Transform IT, Start With Finance
  • Conway’s Law
• Ian Miell on Twitter

In this episode, we talk to three active leaders who have been around since the very beginning of Kubernetes. We explore how Kubernetes has changed since its inception, with a particular focus on current efforts in Open source Kubernetes to support AI/ML style workloads.

Maciej Szulik is currently taking a seat in the Kubernetes Steering Committee. He’s also leading Special Interests Groups responsible for kubectl, workload and batch controllers. Maciej has been contributing to Kubernetes since the early days, jumping from one area to another where help was needed. He authored the first version of audit and helped shape its current one, as well as touched multiple other places in apimachinery. He was also responsible for designing and implementing Job and CronJob controllers. In kubectl he was responsible for the plugin mechanism and several major refactors to simplify the code. Since May 2024 he joined the ranks of Production Readiness Review (PRR) approvers helping ensure high production standards for the future of Kubernetes releases. 

Clayton Coleman is a long-time Kubernetes contributor, having helped launch Kubernetes as open source, being on the bootstrap steering committee, and working across a number of SIGs to make Kubernetes a reliable and powerful foundation for workloads.  At Red Hat he led OpenShift’s pivot onto Kubernetes and its growth across on-premise, edge, and into cloud.  At Google he is now focused on enabling the next generation of key workloads, especially AI/ML in Kubernetes and on GKE.

Dawn Chen has been a Principal Software Engineer at Google cloud since May 2007. Dawn has worked on an open source project called Kubernetes before the project was founded. She has been one of tech leads in both Kubernetes and GKE, and founded SIG Node from scratch. She also led Anthos platform team for the last 4 years, and mainly focuses on the core infrastructure. Prior to Kubernetes, she was the one of the tech leads for Google internal container infrastructure -- Borg for about 7 years. Outside of work, she is a wife, a mother of a 16-year old boy and a good friend. She enjoys reading, cooking, hiking and traveling.

Do you have something cool to share? Some questions? Let us know:

- web: kubernetespodcast.com

- mail: kubernetespodcast@google.com

- twitter: @kubernetespod

• Kubernetes 1.31 Code Freeze is on July 9th

• Kubernetes Working Group Batch

• Kubernetes Working Group Serving

• Blog: Introducing Indexed Jobs (2021)

• Docs: Kubernetes Jobs

• KEP: Elastic Indexed Jobs

• Docs: Kubernetes CronJobs

• KubeCon EU 2021: The Long, Winding and Bumpy Road to CronJob’s GA - Maciej Szulik, Red Hat & Alay Patel, Red Hat

• KubeCon EU 2018: Writing Kube Controllers for Everyone - Maciej Szulik, Red Hat (Beginner Skill Level)

• Kubernetes Working Group Device Management

• Kubernetes Enhancement Proposal process README

• DockerCon 2014: The announcement of Kubernetes at DockerCon

• Blog: AI & Kubernetes (by Kaslin)

• Kueue - “Kueue is a cloud-native job queueing system for batch, HPC, AI/ML, and similar applications in a Kubernetes cluster.”

• Whitepaper: Large-scale cluster management at {Google} with {Borg}

• Email: “Containers: Introduction” - An email introducing the concept of Linux containers to the Linux community

• Blog - “Scaling Kubernetes to 7,500 nodes” - OpenAI

• Ray on Kubernetes

Why does a car manufacturer own an IT company? How did that IT company end up running 900 Kubernetes clusters, starting at version 0.9? Craig asks these questions and more of Sabine Wolz, Product Manager at Mercedes-Benz Tech Innovation.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Live UK political coverage on the day of recording. As predicted, news happened slightly faster than publication, and at the time of release, Boris Johnson is expected to resign as Conservative Party leader today.
• Shibboleth
• Lord of the Rings TV show moved to UK

• GKE Cost Allocation
• CubeFS accepted as CNCF incubating project
• Bare metal deployments for EKS Anywhere
  • Episode 142, with Gianluca Arbezzano
  • Cubernetes
    • Episode 20, with Justin Garrison
• OpenShift Service Mesh 2.2
• Tanzu Mission Control adds FluxCD
• Pixie plugins
• What GKE users need to know about Kubernetes’ new service account tokens, by Taahir Ahmed
• Kubernetes is a red flag signalling premature optimisation, by Jeremy Brown
  • Hacker News discussion
• eBPF Summit 2022

• Mercedes-Benz Tech Innovation
• Mercedes-Benz and Daimler Truck
• How should electric vehicles sound?
• Ulm and its church
• Sabine’s KubeCon keynote
• How to Migrate 700 Kubernetes Clusters to Cluster API with Zero Downtime: Tobias Giese & Sean Schneeweiss
• Game theory
• FOSS Manifesto
• Inner source
• CNCF End User Community
• The promise of flying cars
• Sabine Wolz on LinkedIn

Gone are the days of working at the same company for 50 years. Consultants and contractors bring specialised experience to many companies in short bursts. Steve Wade is an independent Kubernetes consultant and trainer, and he tells us how that became the life for him.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Queen
• Bourton-on-the-Water, fire in the sky
• Model village
• Model village inception

• New GKE features:
  • eBPF and IP masquerading in GKE Autopilot
  • Dual stack networking
  • Time-shared GPUs
  • Confidential GKE nodes
• Paralus (by Rafay)
• Furiko (by Shopee)
• New CNCF Sandbox projects:
  • Clusterpedia
  • OpenCost
  • Aeraki Mesh
  • Curve
  • OpenFeature
  • Kubewarden
  • DevStream
• Traefik Hub
• Cyble’s exposed Kubernetes clusters
• Bitnami index FAQ

• Premier League
• Tesco
• Consultants and IR35
• KSOC
• Indian food
• Steve Wade (1987) on Twitter

As we move further up the stack, we rely on many foundations – including storage. Alex Chircop is co-chair of the CNCF Storage Technical Advisory Group (TAG), as well as founder and CEO of Ondat (formerly StorageOS). Join us to learn why no app is truly stateless, and how data is the new storage.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• Crowded House snippets:
  • Distant Sun
  • Sister Madly
  • Don’t Dream It’s Over (you know this one)
  • Weather With You
  • Something So Strong
  • How Will You Go

• Kubernetes 2021 annual report and blog post discussing it
• SUSECon news
  • SLSA Level 4
• The State of CD 2022 report
• Introducing OpenCost
  • Spec
  • Episode 124, with Webb Brown
• OSTIF and ADA Logics posts discussing the CRI-O project audit
• Bitnami Helm chart pruning and Reddit discussion
• Upcoming Code of Conduct changes at the CNCF

• Goldman Sachs on Google Cloud
• Episode 181, with Justin Santa Barbara
• KubeCon EU 2016
• CNCF TAG Storage
• Data on Kubernetes community
• CNCF TAGs
  • CNCF Storage WG talk at KubeCon EU 2019
  • CNCF TAG Storage talk at KubeCon EU 2022
• Kubernetes SIG Storage
  • Xing Yang
  • CSI and COSI
• Quinton Hoole
  • Federation, aka “Ubernetes”
• Whitepapers:
  • Storage
  • Disaster Recovery
• Ondat
  • Updog
• Alex Chircop on Twitter

What is configuration as data, how is different from infrastructure as code, and why can’t anything just be itself anymore? We posed these questions and more to long-time Kubernetes contributor Justin Santa Barbara at KubeCon EU, and this episode is the result. Justin created the kOps project and now leads the team at Google that makes Kubernetes easier to consume.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: kubernetespodcast@google.com
• twitter: @kubernetespod

• #kubecovid
• Alhambra
• La Alhambra
• Cats of the Alhambra

• Cloud Native at Microsoft Build
  • Azure Container Apps are GA
  • AKS updates
• Docker acquires Tilt
• Broadcom acquires VMware
  • FT coverage
  • Customer reaction from The Register
• Istio 1.14
• GKE Cost Estimator
• Goodbye to Katacoda
• Take the DORA survey or read the 2021 report

• FathomDB
  • Meteor acquires FathomDB for its development platform
  • Sherlocking
• OpenStack
• kOps
  • GitHub
• Configuration management tools
• Infrastructure as Code
• JSON, YAML, Proto and INI
• Helm
  • values.yaml
• Kubernetes Resource Model (KRM)
• kustonize
• kpt
• Package management
• Configuration as Data announcement blog
• Porch
• kpt functions
• Backstage
• Config Sync and Config Connector
• Kubernetes component configuration
• Cluster API
• Justin Santa Barbara on Twitter