Kubernetes Podcast from Google

After four and a half years hosting this podcast (and almost 9 years at Google) Craig Box is moving on from the latter, which unfortunately means leaving the former. But the show must go on. In this episode Craig introduces new hosts Abdel Sghiouar and Kaslin Fields. We take a small look forward, and then a big look back.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Adam's last episode
• Abdelfettah Sghiouar
  • Devoxx MA
  • Cloud Careers Podcast
  • You probably DON'T need a Service Mesh
• Kaslin Fields
  • Containers as cookies
  • Biscuits and gravy
  • Contributor comms
• First-gen stickers
• Second-gen stickers
• Episode 60, with Mark Shuttleworth
• Episode 15, with Dan Ciruli and Jasmine Jaksic
  • Dan on sticker duty
• Episode 30, with Joe Zou
  • A rare team photo
• Music and musicians
  • Kaossilator
  • Episode 191, with DJ Fresh
  • Episode 127, with David Pait
  • Episode 83, with Guinevere Saenger
  • Episode 120, with Melanie Cebula
  • Episode 121, with Ed Huang
• Double guest trivia:
  • Episodes 1 and 100 with Paris Pittman
  • Episodes 62 and 180 with Ricardo Rocha (on a technicality)
• The Adam face
  • Corey Quinn: separated at birth?
• One of many booth meetups
• Follow Craig Box on Twitter
• Follow Adam Glick on LinkedIn

Dan Stein is an engineering manager at General Bioinformatics. Dan Stein is also DJ Fresh, a multi-million selling artist with two UK number one records. Learn about the surprising overlap between these two careers.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod and @craigbox

• Trevor Noah stepping down as host of Daily Show
• Follow @craigbox to learn what's next

• Google Cloud adds GPU support to Autopilot
  • Pricing
• CVE-2021-36782 in Rancher
• State of DevOps Report for 2022
• Congratulations to the 27 Summer LFX Program CNCF interns
• Reviewing the 2019 Kubernetes security audit

• DJ Fresh
• Atari 800 and Atari ST
  • Pong
  • Atari BASIC
• Commodore Amiga
  • OctaMED
• Fatboy Slim and the Atari ST
• Dogs on Acid music forum
• Taylor Hawkins Tribute Concerts
• Abolishing the high tax rate in the UK, or not
• Breakbeat Kaos
  • Hold Your Colour by Pendulum
• Kryptonite by DJ Fresh
• Gold Dust
• Subsequent hits:
  • Louder
  • Hot Right Now
• Kyma (sound design language) and Max/MSP
• We Got Coders
• General Bioinformatics
  • NGS gene sequencing
  • Ensembl
• Hasura
• GraphQL Playground
• NCBI - National Center for Biotechnology Information
• Max Martin
• How Music Works by John Powell
• Learning:
  • Treehouse
  • Udemy
  • 3Blue1Brown
  • Codeacademy
• DJ Fresh's new single, Higher
• DJ Fresh on Facebook
• Dan Stein on Twitter

Betty Junod, VP of Product Marketing at VMware Tanzu, kindly took up Craig's challenge to explain the various parts of the Tanzu ecosystem, and how the traditional IT buyer and the modern cloud native really aren't that different.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod and @craigbox

• NASA DART mission
  • Deep Impact
  • Armageddon
• Apparent retrograde motion
• Planets beyond Neptune

• Istio sails into the CNCF
• SPIFFE and SPIRE graduate
  • Episode 45, with Andrew Jessup
• Brigade archived
• Sysdig 2022 Cloud Native threat report
  • The nice TeamTNT
  • Episode 188, with Kateryna Ivashchenko
  • Episode 169, with Anna Belak
• Chainguard introduces Wolfi
• workerd, from Cloudflare
• Introducing Palaemon
• Custom org policy for GKE in preview
• Leveraging Kubernetes for an elastic platform at Blablacar by Sebastien Doido

• VMware
  • History
• Docker
• Solo.io
• VMware Tanzu introduction blog
  • VMware acquires Heptio
  • VMware acquires Pivotal
• Tanzu Mission Control
• Tanzu for Kubernetes Operations
• Tanzu Application Platform
• Tanzu Kubernetes Grid
  • Bring your own host to TKG
• Project Pacific introduction
  • TKG 2.0
• VMware Aria Operations for Applications
• Tanzu Application Service
  • Cloud Foundry
• Open source projects:
  • Velero
  • Antrea
  • Carvel
  • Cartographer
• Michigan cider
• Detroit-style pizza
• Betty Junod on Twitter

When you think of a service mesh, you probably think of "sidecar containers running with each pod". The Istio team has come up with a new approach, introduced recently as an experimental preview. Google Cloud software engineers Justin Pettit and Ethan Jackson join Craig to explore ambient mesh.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Listening immediately and listening on a 1 year delay
• Death and state funeral of Queen Elizabeth II
• The Queue
  • What the queue says about our relationship with royalty

• Cloud Custodian becomes an incubating project
• Anthos VM support
• GKE control plane metrics
• CVE-2022-3172: Aggregated API server can cause clients to be redirected
• CVE-2021-25749: runAsNonRoot logic bypass for Windows containers
• Akuity Platform
  • Episode 172, with Jesse Suen
• Weave GitOps 2022.09
• Coroot Community Edition
• Constellation, by Edgeless Systems
• Register for Google Cloud Next
• Dell and Red Hat expand strategic collaboration

• Nicira
• Open vSwitch
• Introucing Ambient Mesh
  • Service mesh
• First mention of Ambient in 2018
• No first class support for sidecars in Kubernetes
• Istio working group meeting, August 2021
  • Remote proxy proposal
• HBONE: HTTP/2-based overlay network environment
• mTLS
• HTTP Connect
• GIF
• MASQUE and QUIC
• Get started with Ambient Mesh
• Ambient Mesh Security Deep Dive
• Justin Pettit and Ethan Jackson on Twitter

Kateryna Ivashchenko is a Senior Demand Generation Manager at Teleport, an organizer of community events, and a supporter of the developer community in her home country of Ukraine.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Introducing Ambient Mesh in Istio
• Istio 1.15
• Linkerd 2.12
  • Linkerd and the Gateway API
• Symbiosis
• Cuber nay-tace
  • Reddit discussion
• VMware Tanzu announcments from VMware Explore
• Isovalent raises $40m Series B
• Kubernetes Blog:
  • PodSecurityPolicy: The Historical Context
  • Pod Security Admission Controller in Stable
  • CSI Inline Volumes have graduated to GA
  • cgroup v2 graduates to GA
• Kubernetes was never designed for batch jobs by Kurt Schelfthout
• 7 years of GKE General Availability

• Portworx
• Teleport
• 24 February 2022: Russia invades Ukraine
• BeyondCorp
• Teleport open source
• hunter2
• Okta breach
• Sandworm: A New Era of Cyberwar and the Hunt for the Kremlin's Most Dangerous Hackers by Andy Greenberg
• War in Ukraine
• Kateryna's sister's T-shirt
• Independence Day
• Chris Lentricchia and Operation Dvoretskyi
• CNCF crowdfunding
• DevOpsDays Kyiv
• International Snack Exchange
• Kateryna Ivashchenko on Twitter

It's release day! We discuss today's Kubernetes 1.25 with release team lead Cici Huang, Software Engineer at Google Cloud. What's in, what's out, and what is it like to lead a release you are also promoting a feature in?

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Nelson underwater
• England underwater
• A picture of a sheep
• Follow Craig on Twitter for more like that

• Kubernetes 1.25 release
• Introducing Acorn
  • Acorn Labs: Rancher Co-Founders' New Kubernetes Startup by Christine Hall
  • Episode 57, with Darren Shepherd
• GKE updates:
  • New observability metrics
  • GKE Autopilot now default
  • 256 pods per node
• KubeCon schedule published
  • Cloud Native Rejekts
• Scaling Kubernetes to thousands of CRDs by Nic Cope

• IBM Watson
• Kubernetes Community Awards
• SIG API Machinery
  • Chair & Cici's hiring manager: Fede Bongiovanni
• Kubernetes 1.25 release team
• Release blog
• Highlights:
  • PodSecurityPolicy is removed; Pod Security Admission is stable
  • cgroups v2
  • KMS v2alpha1
  • CRD valdation experession language
  • Registry change
• Kubernetes 1.24 delay
• Theme and logo
• Envelopes:
  • 1.24 lead: Episode 178, with James Laverack
  • 1.26 lead: Leonard Pahlke
• Cici Huang on GitHub

Three years after they were first proposed, the new Kubernetes Gateway APIs - the evolution of the Ingress API - are in Beta. Rob Scott is a software engineer at Google and a lead on the SIG Network Gateway API project.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Hot hot hot
• Stevenson screen
  • Heathrow Airport
  • Kew Gardens
  • RAF Coningsby

• Argo security audit:
  • Argo blog
  • ADA Logics blog
  • Episode 172, with Jesse Suen
• Kubernetes Cluster API integrates continuous fuzzing
  • The report
  • OSS Fuzz
• Cilium 1.12
• GKE Cluster Autoscaler location policy
• The quest for neutrinos
  • Ray traced Quake II

• Gateway API
• Spire Labs
• Fairwinds
  • rbac-manager
  • Polaris
• Episode 104, with Bowei Du
• Ingress
• Gateway API concepts and role-orientation
  • Roles and resource model
• GatewayClass
• GKE implementation of GatewayClass
• Conformance tests
• Policy attachment
• Gateway
• Routes
• Gateway API goes to Beta
• GRPCRoute
• Gateway Enhancement Proposal (GEP)
• Istio APIs that influenced the Gateway API
• GAMMA Initiative
  • Istio support for Gateway API
  • SMI community joining
• Gateway API on GitHub
• Santa Cruz Moutains
• Rob Scott on Twitter and LinkedIn

Ian Miell is a partner at consultancy Container Solutions, and an author of books on Bash, Git, Terraform and Docker. He explains to Craig how writing - whether runbooks, blog posts, training courses, or "real" books, can help you learn and make your team more effective.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Hot hot hot
• Small pools and larger pools

• Gateway API goes to Beta
  • Episode 104, with Bowei Du
  • Istio support for Gateway API
  • SMI community gets behind Gateway API
• Kyverno and Keptn move to incubation
  • Episode 119, with Alois Reitbauer
• Tau T2A Arm VMs now on Google Compute Engine
  • GKE support for Tau T2A Arm nodes
• Kubeshop acquires BotKube
• Exploiting Authentication in AWS IAM Authenticator for Kubernetes by Gafnit Amiga
  • New Vulnerabilities in Kubernetes NGINX Ingress Controller
• CNCF sponsors audit of KubeEdge
  • KubeEdge security threat model
  • Audit report
• Red Hat announces new CEO
• Google Cloud announces new Distinguished Engineer
  • Episode 185, with Clayton Coleman

• Zwischenzugs
• Business Value, Soccer Canteens, Engineer Retention, and the Bricklayer Fallacy
• Zwischenzug and zugzwang in chess
• Ian's books:
  • Learn Bash The Hard Way
  • Learn Git The Hard Way
  • Learn Terraform The Hard Way
  • All three in a bundle
  • Docker in Practice
• Tcl
• Why are enterprises so slow?
• Erlang
• Episode 164, with Daniel Walsh
• 'AWS vs K8s' is the new 'Windows vs Linux'
• The Runbooks Project
• ITIL
• Consultancy:
  • Episode 183, with Steve Wade
  • Why it's great to be a consultant
  • Container Solutions
• Finance topologies:
  • Team Topologies by Manuel Pais and Matthew Skelton
  • If You Want To Transform IT, Start With Finance
  • Conway's Law
• Ian Miell on Twitter

Why does a car manufacturer own an IT company? How did that IT company end up running 900 Kubernetes clusters, starting at version 0.9? Craig asks these questions and more of Sabine Wolz, Product Manager at Mercedes-Benz Tech Innovation.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Live UK political coverage on the day of recording. As predicted, news happened slightly faster than publication, and at the time of release, Boris Johnson is expected to resign as Conservative Party leader today.
• Shibboleth
• Lord of the Rings TV show moved to UK

• GKE Cost Allocation
• CubeFS accepted as CNCF incubating project
• Bare metal deployments for EKS Anywhere
  • Episode 142, with Gianluca Arbezzano
  • Cubernetes
    • Episode 20, with Justin Garrison
• OpenShift Service Mesh 2.2
• Tanzu Mission Control adds FluxCD
• Pixie plugins
• What GKE users need to know about Kubernetes' new service account tokens, by Taahir Ahmed
• Kubernetes is a red flag signalling premature optimisation, by Jeremy Brown
  • Hacker News discussion
• eBPF Summit 2022

• Mercedes-Benz Tech Innovation
• Mercedes-Benz and Daimler Truck
• How should electric vehicles sound?
• Ulm and its church
• Sabine's KubeCon keynote
• How to Migrate 700 Kubernetes Clusters to Cluster API with Zero Downtime: Tobias Giese & Sean Schneeweiss
• Game theory
• FOSS Manifesto
• Inner source
• CNCF End User Community
• The promise of flying cars
• Sabine Wolz on LinkedIn

Gone are the days of working at the same company for 50 years. Consultants and contractors bring specialised experience to many companies in short bursts. Steve Wade is an independent Kubernetes consultant and trainer, and he tells us how that became the life for him.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Queen
• Bourton-on-the-Water, fire in the sky
• Model village
• Model village inception

• New GKE features:
  • eBPF and IP masquerading in GKE Autopilot
  • Dual stack networking
  • Time-shared GPUs
  • Confidential GKE nodes
• Paralus (by Rafay)
• Furiko (by Shopee)
• New CNCF Sandbox projects:
  • Clusterpedia
  • OpenCost
  • Aeraki Mesh
  • Curve
  • OpenFeature
  • Kubewarden
  • DevStream
• Traefik Hub
• Cyble's exposed Kubernetes clusters
• Bitnami index FAQ

• Premier League
• Tesco
• Consultants and IR35
• KSOC
• Indian food
• Steve Wade (1987) on Twitter