Platform Engineering Playbook Podcast

By vibesre

The Platform Engineering Playbook Podcast is where AI meets open-source infrastructure knowledge—and you're part of the editorial process. Every episode is researched, scripte

... more

· Technology

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Platform Engineering Playbook Podcast:

How many episodes does Platform Engineering Playbook Podcast have?

The podcast currently has 66 episodes available.

Platform Engineering Playbook Podcast episodes:

December 21, 2025 CNPE (Certified Cloud Native Platform Engineer) Certification Study Guide
The CNPE (Certified Cloud Native Platform Engineer) exam launched November 11, 2025 at KubeCon Atlanta, becoming the first hands-on platform engineering certification in five years. This deep dive covers exam format, all five domains, and a complete study guide.
Key Points:
• CNPE is hands-on: 17 tasks in 2 hours, 64% pass score
• Five domains: GitOps/CD (25%), Platform APIs (25%), Observability (20%), Architecture (15%), Security (15%)
• BACK stack: Backstage, Argo CD, Crossplane, Kyverno
• Golden Kubestronaut requires CNPE after March 2026
• Career impact: Platform engineer salaries $160K-$220K
Resources:
• Episode page: https://platformengineering.org/podcasts/00066-cnpe-certification-study-guide
• CNPE Exam: https://training.linuxfoundation.org/certification/certified-cloud-native-platform-engineer/
• CNCF Platforms White Paper: https://tag-app-delivery.cncf.io/whitepapers/platforms/
#CNPE #PlatformEngineering #Kubernetes #CNCF #Certification #DevOps #CloudNative #ArgoCD #Crossplane #Backstage #Kyverno
...more
19min
December 20, 2025 Kubernetes 1.35 Timbernetes Deep Dive: Breaking Changes, In-Place Resize GA, Gang Scheduling
Kubernetes 1.35 "Timbernetes" dropped on December 17, 2025, fundamentally changing how we operate clusters. This deep dive covers the 60 enhancements, 3 breaking changes that will bite you if unprepared, and in-place pod resize graduating to GA after six years of development.
What You'll Learn:
• Breaking Changes: cgroup v1 REMOVED (not deprecated), containerd 1.x EOL, IPVS deprecated
• In-Place Pod Resize GA: Resize CPU/memory without pod restart - 6 years from KEP to stable
• Pod Certificates Beta: Native kubelet-managed mTLS for zero-trust pod-to-pod auth
• Gang Scheduling Alpha: Native all-or-nothing scheduling for AI/ML distributed training
• Alpha Features: Node Declared Features, Partitionable Devices, Extended Toleration Operators
• Practical Upgrade Checklist: What to audit and test before upgrading
Resources:
• Episode page: https://platformengineering.org/podcasts/00065-kubernetes-1-35-timbernetes-deep-dive
• Kubernetes 1.35 Release Blog: https://kubernetes.io/blog/2025/12/17/kubernetes-v1-35-release/
• KEP-1287 In-Place Resize: https://github.com/kubernetes/enhancements/issues/1287
• KEP-4317 Pod Certificates: https://github.com/kubernetes/enhancements/issues/4317
#Kubernetes #K8s #PlatformEngineering #DevOps #CloudNative #Timbernetes #ContainerOrchestration #InPlaceResize #GangScheduling #AI #ML
...more
20min
December 20, 2025 Terraform Stacks + Native Monorepo Support: HashiCorp's Answer to IaC Complexity
No more copy-paste configs. No more manual state management. Terraform just went component-based.
HashiCorp released native monorepo support and Terraform Stacks to GA on September 25, 2025. This is the biggest architectural shift since Terraform modules. Instead of directory-per-environment with duplicate configurations, you define components once and deploy multiple times with isolated state.
We explain components (lifecycle-aware resource groups in .tfstack.hcl files), deployments (isolated instances with separate state), orchestration rules (context-aware automated approvals), linked stacks (declarative cross-stack dependencies), migration paths from Terragrunt, and when platform teams should adopt.
NEWS SEGMENT:
• Terraform Stacks + Monorepo (GA Sept 2025): Component-based architecture, orchestration rules, basic functionality in free tier
https://www.hashicorp.com/blog/terraform-adds-native-monorepo-support-stack-component-configurations-and-more
• Pulumi IaC Including Terraform/HCL (Private Beta, GA Q1 2026): Direct Terraform state file support, native HCL, credits for HashiCorp costs
https://www.pulumi.com/blog/all-iac-including-terraform-and-hcl/
• vLLM v0.13.0: 442 commits from 207 contributors, NVIDIA Blackwell Ultra support, DeepSeek optimizations (5.3% throughput gains)
https://github.com/vllm-project/vllm/releases/tag/v0.13.0
• Amazon EC2 AZ ID API Support: Consistent Availability Zone IDs across all AWS accounts, eliminates manual zone mapping
https://aws.amazon.com/about-aws/whats-new/2025/12/amazon-ec2-availability-zone-id-api-support/
• GPT-5.2-Codex (Dec 18, 2025): 56.4% SWE-Bench Pro, 64% Terminal-Bench 2.0, invite-only cybersecurity capabilities
https://openai.com/index/gpt-5-2-codex/
LINKS:
• Platform Engineering Playbook: https://platformengineeringplaybook.com
• Episode Page: https://platformengineeringplaybook.com/podcasts/00064-terraform-stacks-native-monorepo
• Full Script: https://github.com/platformengineeringorg/platform-engineering-playbook/blob/main/docs/podcasts/scripts/00064-terraform-stacks-native-monorepo.txt
• Terraform Stacks Explained: https://www.hashicorp.com/blog/terraform-stacks-explained
#terraform #terraformstacks #hashicorp #iac #infrastructureascode #platformengineering #devops #terragrunt #pulumi
...more
18min
December 19, 2025 95% Fewer CVEs, $0 Cost: Docker Just Open-Sourced Enterprise Security
Supply chain attacks cost $60 billion in 2025. Docker just made the solution free.
On December 17, Docker released 1,000+ hardened container images under Apache 2.0—previously a paid offering. Independent penetration testing by SRLabs confirmed 95% CVE reduction and found NO root escapes or container breakouts. These images use distroless runtime: no shell, no package manager, no attack surface.
We break down how distroless actually works (why removing /bin/sh matters), SLSA Level 3 cryptographic provenance, SBOM/VEX for killing alert fatigue, multi-stage build migration patterns, debugging without a shell (kubectl debug), and how Docker compares to Chainguard Wolfi, Google distroless, and Red Hat UBI.
NEWS SEGMENT:
• First Linux Kernel Rust CVE (CVE-2025-68260): Race condition in Android Binder's unsafe block. DoS only, no RCE. Greg Kroah-Hartman: "totally expected and normal."
https://www.phoronix.com/news/First-Linux-Rust-CVE
• GitHub Actions 39% Price Cut: Self-hosted billing postponed indefinitely after backlash. 96% of customers unaffected.
https://resources.github.com/actions/2026-pricing-changes-for-github-actions/
LINKS:
• Platform Engineering Playbook: https://platformengineeringplaybook.com
• Episode Page: https://platformengineeringplaybook.com/podcasts/00063-docker-hardened-images-free-security
• Full Script: https://github.com/platformengineeringorg/platform-engineering-playbook/blob/main/docs/podcasts/scripts/00063-docker-hardened-images-free-security.txt
• Docker Blog: https://www.docker.com/blog/docker-hardened-images-for-every-developer/
#docker #containers #security #kubernetes #platformengineering #devops #supplychainsecurity #distroless #sbom #slsa
...more
19min
December 18, 2025 Kubernetes 1.35 "Timbernetes" - The End of the Pod Restart Era
Kubernetes 1.35 is here, and it changes everything about pod lifecycle management. In this episode, we break down the release that finally lets you scale pods without restarting them.
In This Episode:
- In-Place Pod Vertical Scaling goes GA - adjust CPU/memory without pod restarts
- Breaking changes: cgroup v1 removed, containerd 1.x EOL, IPVS deprecated
- Pod Certificates (beta) for native workload identity without cert-manager
- 60 enhancements: what matters for platform teams
- Practical upgrade checklist and timing guidance
News Segment:
- Docker makes 1,000+ hardened container images free (95% CVE reduction)
- GitHub Actions pricing changes (up to 39% reduction) coming January 2026
- First Linux Kernel Rust CVE announced (CVE-2025-68260)
- KubeVirt completes OSTIF security audit (15 findings, strong architecture)
Resources:
- K8s 1.35 Release: https://kubernetes.io/blog/2025/12/17/kubernetes-v1-35-release/
- Full show notes: https://platformengineering.org/podcasts/00062-kubernetes-1-35-timbernetes
Duration: ~15 minutes
Speakers: Jordan & Alex
...more
16min
December 17, 2025 40,000x Fewer Deployment Failures: How Netflix Adopted Temporal
Netflix reduced their deployment failures by 40,000x using Temporal. In this episode, we break down how they achieved this remarkable improvement and what it means for your platform engineering practice.
In This Episode:
- Netflix's deployment reliability problem: 4% failure rate from transient cloud operations
- What is durable execution? Write code as if failures don't exist
- Temporal vs AWS Step Functions vs Apache Airflow vs Cadence comparison
- Netflix's Spinnaker/Clouddriver implementation with 2-hour fix-forward window
- When Temporal is (and isn't) the right choice for your organization
Key Stats:
- Deployment failures: 4% → 0.0001% (40,000x improvement)
- Temporal valuation: $2.5B with 183,000+ weekly active developers
- 600% growth in developer adoption over 18 months
Resources:
- Netflix Tech Blog: https://netflixtechblog.com/how-temporal-powers-reliable-cloud-operations-at-netflix-73c69ccb5953
- Temporal.io: https://temporal.io/
- Full show notes: https://platformengineering.org/podcasts/00061-netflix-temporal-deployment-reliability
...more
18min
December 16, 2025 Kubernetes: Helm vs Crossplane vs kro (Honest Comparison)
48% of Kubernetes users struggle with tool choice. That's nearly half of us paralyzed by options. So when AWS adopted kro alongside Argo CD, we had to ask: is this the Goldilocks solution we've been waiting for?
In this episode, Jordan and Alex tackle the composition tool landscape with an honest decision framework. We dive deep into CEL expressions, resource graph mechanics, and GitOps integration. We also give Viktor Farcic's criticism a fair hearing, and explain exactly when kro makes sense - and when it doesn't.
News Segment:
• Shai-Hulud npm supply chain attack postmortem - 500+ packages, 25K repos
• Ingress-nginx retirement - March 2026, 3 months away
• Netflix Maestro 100x faster through full rewrite
Main Topics:
• The Goldilocks problem: Helm (too simple?), Crossplane (too complex?), kro (just right?)
• CEL expressions deep dive: syntax, operators, and functions
• Resource graph mechanics: topological sorting and dependency inference
• GitOps integration: how kro works with Argo CD and Flux
• Viktor Farcic's criticism and our honest response
• Migration paths and real-world use cases
Resources:
• Episode page: https://platformengineering.org/podcasts/00060-kro-goldilocks-kubernetes-composition
• kro GitHub: https://github.com/kubernetes-sigs/kro
• CNCF Blog: https://www.cncf.io/blog/2025/12/15/building-platforms-using-kro-for-composition/
• AWS EKS Capabilities: https://aws.amazon.com/blogs/aws/announcing-amazon-eks-capabilities-for-workload-orchestration-and-cloud-resource-management/
• InfoQ Analysis (Viktor Farcic): https://www.infoq.com/news/2025/02/kube-resource-orchestrator/
• Spectro Cloud 2024 Survey: https://www.spectrocloud.com/news/spectro-cloud-releases-2024-state-of-production-kubernetes
News Segment Links:
• Shai-Hulud npm Attack Postmortem: https://trigger.dev/blog/the-shai-hulud-2-0-attack-postmortem
• Ingress-nginx Retirement: https://github.com/kubernetes/ingress-nginx/issues/12094
• Netflix Maestro 100x Faster: https://netflixtechblog.com/maestro-netflixs-workflow-orchestrator-ee13a06f9c78
#kubernetes #platformengineering #kro #crossplane #helm #devops
...more
23min
December 15, 2025 Platform Engineering 2025 Year in Review
2025 was the year platform engineering grew up—and got a reality check. AI entered infrastructure in ways we couldn't ignore. Industry consensus finally emerged on what platforms should actually do. And Cloudflare went down six times to remind us that concentration risk isn't just theoretical.
In this special year-in-review episode, we look back at the ten stories that defined platform engineering in 2025:
✅ AI-native Kubernetes arrived (DRA GA, AI Conformance v1.0)
✅ Platform engineering reached consensus—but 70% still fail
✅ Infrastructure concentration risk became undeniable (AWS + Cloudflare)
✅ IngressNightmare exposed 43% of cloud environments
✅ Open source sustainability crisis (60% maintainers unpaid)
✅ GPU waste: 13% average utilization = $4,350/month wasted per GPU
✅ Service mesh sidecar era ended (Istio Ambient GA)
✅ IaC consolidation (IBM + HashiCorp, CDKTF deprecated)
✅ Gateway API became the standard
✅ Agentic AI entered platform engineering
Top 5 Takeaways for 2026:
1. AI infrastructure is now standardized—architect to avoid lock-in
2. Platform engineering has a definition—use it
3. Concentration risk is real—multi-region, multi-cloud, multi-CDN
4. Open source needs funding—$2K/dev/year recommendation
5. GPU waste is the new cloud waste—DRA and time-slicing are table stakes
Show notes: https://platformengineeringplaybook.io/podcasts/00059-platform-engineering-2025-year-in-review
...more
20min
December 14, 2025 Okta's GitOps Journey - Scaling ArgoCD from 12 to 1,000 Clusters
In five years, Okta scaled Auth0's private cloud from 12 to 1,000+ Kubernetes clusters using ArgoCD. At KubeCon 2025, engineers Jérémy Albuixech and Kahou Lei shared their hard-won lessons. This episode breaks down the challenges, solutions, and practical wisdom for scaling GitOps to enterprise levels.
Full episode page: https://platformengineeringplaybook.com/podcasts/00058-okta-gitops-argocd-1000-clusters
In this episode, we cover:
- The 83x scaling journey: from 12 clusters in 2020 to 1,000+ in 2025
- Five major challenges at scale: controller degradation, centralized bottlenecks, application explosion, global latency, observability gaps
- Five key solutions: controller sharding, ArgoCD Agent hub-spoke model, Application Sets templating, progressive rollouts, purpose-built observability
- When to implement sharding (hint: 100+ clusters is the threshold)
- The ArgoCD UI degradation wall at 1,000 applications
- Six lessons learned including "GitOps doesn't solve organizational problems"
- Practical guidance for teams at 10-50, 100-500, and 500+ cluster scales
Plus news on Helm v4.0.4/v3.19.4 releases, Zero Trust in CI/CD Pipelines guide, 1 billion row migration without downtime, Microsoft Azure HorizonDB, and the Platform Engineering State 2026 report.
Sources:
- The New Stack: How Okta Scaled From 12 to 1000 Kubernetes Clusters With Argo CD
- ITNEXT: How We Load Test Argo CD at Scale: 1,000 vClusters with GitOps
- Red Hat: Multi-cluster GitOps with the Argo CD Agent
- KubeCon + CloudNativeCon Atlanta 2025: "One Dozen To One Thousand Clusters" by Jérémy Albuixech and Kahou Lei
#DevOps #PlatformEngineering #GitOps #ArgoCD #Kubernetes #MultiCluster #CNCF #KubeCon #CloudNative #SRE
...more
16min
December 13, 2025 Platform Engineering Team Structures That Work
Ninety percent of organizations now have platform teams, but most just renamed their ops team and expected different results. This episode breaks down the team sizes, reporting structures, and interaction patterns backed by DORA 2025 data that separate successful platform teams from glorified ticket handlers.
Full episode page: https://platformengineeringplaybook.com/podcasts/00057-platform-engineering-team-structures
In this episode, we cover:
- DORA 2025 shows 90% of orgs have platforms, 76% have dedicated teams—when done right, 8% individual productivity boost and 10% team productivity boost
- Optimal team size is 6-12 people (Spotify squads, Microsoft 5-9)—small enough for ownership, large enough for complete capabilities
- Reporting structure matters: companies with 100+ engineers need dedicated platform leader to shield from competing priorities
- Team Topologies interaction patterns: start Collaboration mode while building, evolve to X-as-a-Service when mature
- Success metrics: self-service rate >90%, developer happiness tracking, DORA metrics for consuming teams
- Anti-patterns to avoid: rebranding without role change, underinvestment after launch, skill concentration trap, Field of Dreams (building without validation)
Plus news on Sim (Apache 2.0 n8n alternative), Docker Hub credential leaks (10K+ images exposed), Meta's BPF-LSM replacing SELinux, Litestream VFS for S3, GitHub login failures, and GPT-5.2 launch.
Sources:
- DORA 2025 Report: https://dora.dev/
- Team Topologies: https://teamtopologies.com/
- Spotify Engineering Culture: https://engineering.atspotify.com/
- Backstage: https://backstage.io/
#DevOps #PlatformEngineering #TeamTopologies #DORA #EngineeringLeadership #DevEx #InternalDeveloperPlatform #SRE #CloudNative
...more
18min

FAQs about Platform Engineering Playbook Podcast:

How many episodes does Platform Engineering Playbook Podcast have?

The podcast currently has 66 episodes available.