PodCTL - Enterprise Kubernetes

SHOW: 64

SHOW OVERVIEW: Brian talks with Burr Sutter (@BurrSutter, Director Developer Experience @RedHat) about Project Quarkus (@QuarkusIO), Supersonic Subatomic Java for Kubernetes-native application development. 

SHOW NOTES:

• Try OpenShift 4 - http://try.openshift.com
• Learn OpenShift for FREE (Knative, Istio, Operators, etc.) - http://learn.openshift.com
• Burr Sutter YouTube Channel - https://www.youtube.com/user/burrsutter
• Java inside Docker - https://developers.redhat.com/blog/2017/03/14/java-inside-docker/
• Introducing Project Quarkus - https://developers.redhat.com/blog/2019/03/07/quarkus-next-generation-kubernetes-native-java-framework/
• Quarkus Homepage - https://quarkus.io/
• GraalVM - https://www.graalvm.org/
• Burr's Istio Tutorial - http://bit.ly/istio-tutorial
• Burr's Knative Tutorial - http://bit.ly/knative-tutorial
  
  

SHOW TOPICS:

Topic 1 - Welcome to the show. Tell us a little bit about your world and how it intersects Kubernetes, Developers and Cloud-native application development. 

Topic 2 - Today we’re going to talk about Java and containers. Before we get into the new technologies, let’s talk about what the world of Java in containers (and Kubernetes) looks like today - especially the challenges and tradeoffs from the Java EE world to Kubernetes. (see: “Kubernetes as the New Application Server”, Eps.55 on PodCTL)

Topic 3 - Please introduce us to Project Quarkus. 

• Unifies Imperative and Reactive development models
• Involves both GraalVM and HotSpot
• Fast startup times
• Low memory requirements
• Smaller application and container image footprint 

Topic 4 - So for the Kubernetes or container person, how does this change things? It’s still Java/Quarkus in the container, but it is the smaller/faster aspect that’s interesting, or better interaction with the native Kubernetes patterns?

Topic 5 - What does this mean for today’s Java developer in terms of learning new capabilities or reusing any existing stacks or frameworks? (Eclipse MicroProfile, JPA/Hibernate, JAX-RS/RESTEasy, Eclipse Vert.x, Netty, and more.

Topic 6 - What’s the best way for developers to get the technology or engage with other developers/community around questions? 

Feedback?
Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 63

Show Overview: Brian talks with Carlisia Pinto (@carlisia, Sr. Member of Technical Staff at VMware, OSS Maintainer of Project Velero) about Project Velero (formerly “Ark”), and backing up and migrating applications on Kubernetes. 

Show Notes:

• Try OpenShift 4 - http://try.openshift.com
• Project Velero - https://github.com/heptio/velero
• Repository for Velero community meetings - https://github.com/heptio/velero-community
• Slack Group https://kubernetes.slack.com/messages/C6VCGP4MT
• Twitter - https://twitter.com/projectvelero
• Google group - https://groups.google.com/forum/#!forum/projectvelero
• Velero 0.11 released - https://blogs.vmware.com/cloudnative/2019/02/28/velero-v0-11-delivers-an-open-source-tool-to-back-up-and-migrate-kubernetes-clusters/
• [Blog] Velero with Restic and Rook-Ceph - https://blog.kubernauts.io/backup-and-restore-of-kubernetes-applications-using-heptios-velero-with-restic-and-rook-ceph-as-2e8df15b1487

Show Topics:

Topic 1 - Welcome to the show. Tell us about your background and how you got involved in Project Velero.

Topic 2 - Let’s talk about the Velero Project, which was recently renamed from “Ark”. [From GitHub] “Velero gives you tools to backup and restore your Kubernetes cluster resources and persistent volumes.” It got started in 2017 by engineers at Heptio. Help us understand the scope of the project (backup/recovery, disaster recovery, other).

Topic 3 - Tell us about the architecture behind Velero. 

• Take backups of your cluster and restore in case of loss.
• Copy cluster resources to other clusters.
• Replicate your production environment for development and testing environments.

Topic 4 - Right now it appears that all the “Compatible Storage Provider” targets are public cloud storage services. Is there a framework to allow other storage services to be plugged into Velero?  

Topic 5 - If people want to get involved in Velero, is there a roadmap of things that are coming in future releases, or a wishlist of things that the project would like to see people focus on? 

Feedback?
Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 62

Show Overview: Brian talks with Fabian von Feilitzsch (@fabianismus, Sr. Software Engineer at RedHat) and Shawn Hurley (@shawn_hurIey, Sr. Software Engineer at Red Hat) about Ansible Operators, how they work with Ansible Playbook, on-platform and off-platform usage, and examples to help people learn the new Kubernetes technology.

Show Notes:

• Try OpenShift 4 - http://try.openshift.com
• Ansible Operator (GitHub) - https://github.com/operator-framework/operator-sdk/blob/master/doc/proposals/ansible-operator.md
• Ansible Operator - What is it? - https://www.ansible.com/blog/ansible-operator
• An Introduction to Ansible Operators - https://opensource.com/article/18/10/ansible-operators-kubernetes
• Learn Ansible Operators - https://learn.openshift.com/ansibleop/ansible-operator-overview/
• Sample Ansible Operator (from Fabian) - https://github.com/fabianvf/jellyfin-operator

Show Topics:

Topic 1 - There are multiple types of operators: Go, Ansible, Helm. What are the basic things that the Ansible Operator does - in the context of the Operator Framework?

Topic 2 - Are there some basic things that an existing Ansible Playbook should have in order to easily fit into an Ansible Operator? 

Topic 3 - Will Ansible Operator mostly be targeting applications that are automated via Ansible Playbooks, or is it also applicable to infrastructure or security-related playbooks?

Topic 4 - How does an Ansible Operator interact with Ansible Tower, or how due those two worlds co-exist (or not)?

Topic 5 - Are there examples today of Ansible Operators that people can look at or try out? 

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 61

Show Overview: Brian talks with Clayton Coleman (@smarterclayton) and Derek Carr (@derekwaynecarr), Technical Leads of Red Hat OpenShift, about the upcoming architectural changes in version 4.

Show Notes:

• Try OpenShift 4 - http://try.openshift.com
• OpenShift 4 - Features, Functions, Future (Commons Gathering KubeCon 2018) - https://www.youtube.com/watch?v=-xJIvBpvEeE
• The Modern Software Platform - https://blog.openshift.com/the-modern-software-platform/

Topic 1 - Welcome back to the show. Let’s talk about some of the architectural concepts that will exist in OpenShift 4, and why decisions were made.

Topic 2 - OpenShift has always been a flexible/composable/modular platform. How does that evolve in OpenShift 4 (e.g. Operators, Platform + OS, etc.)? 

Topic 3 - OpenShift has evolved since the early 3.x days, when a lot of necessary things weren’t “Kubernetes embedded” (install/upgrade tools, monitoring, scanning, visualization of resources, etc.). OpenShift has been moving to adopt the Kubernetes native elements as they mature (e.g. Prometheus). Can you talk about some of the new Kubernetes native capabilities coming in OpenShift 4 that people should start looking into? (e.g. CRI-O, Cluster-Version-Operator, Machine APIs)

Topic 4 - Let’s come back to the discussion of Operators. We heard alot about Operators for applications (e.g. databases), but are there uses for Operators for things that would be considered more platform-centric (e.g. storage, logging, service mesh, etc.)?

Topic 5 - There are some things happening in the public cloud that make it easier to manage nodes and scaling of nodes. Any interesting stuff coming to OpenShift 4 to help make those elements easier to manage? 

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 60

Show Overview: Brian and new co-host John Osborne (@OpenShiftFed) discuss policies in and around Kubernetes.

Show Notes:

• Try OpenShift 4 - http://try.openshift.com
• OpenShift in Action - https://www.manning.com/books/openshift-in-action
• Kubernetes Policies - https://kubernetes.io/docs/concepts/policy/
• Kubernetes SIGs and Working Groups - https://github.com/kubernetes/community/blob/master/sig-list.md
• Open Policy Agent - https://www.openpolicyagent.org/

Topic 1 - Welcome John Osborne to the show. Let’s talk about your background. 

Topic 2 - We decided to discuss “policy” in Kubernetes. Where do you usually find that discussion begins. If I were to do a Google search, the Kubernetes site highlights “Pod Security Policies” and “Quotas”. 

Topic 3 - What types of tools do you see in production being used to apply and track policy within Kubernetes environments? 

Topic 4 - Grafaes and Kritis are often discussed around policy for “securing Kubernetes software supply chain”. Are these types of projects focused on Kubernetes as a platform, or applications running on Kubernetes, with more of a focus on the CI/CD and Testing pipelines?

Topic 5 - There is a newer framework that’s starting to emerge, called “Open Policy Agent”. What are some of the things that it is focused on? 

Topic 6 - Are there communities within Kubernetes that are focused on policy, if people want to follow discussions or contribute to projects? 

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 59

Overview: Brian Gracely is back as the host of PodCTL for 2019, with some news about changes and improvements to the show.

Show Notes: 

• OpenShift 4 Preview
• PodCTL.com - New PodCTL Website

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://PodCTL.com

Show: 58

Show Overview: Brian and Tyler talk about the announcements, trends and highlights from KubeCon and CloudNativeCon Seattle 2018.

Show Notes: 

• OpenShift 4 Preview
• Etcd Donated to CNCF
• Envoy Graduates in CNCF
• Heptio acquired for $550M
• CNCF Project Health

Trends: 

• From 1500 people (2016) to 8000 people (2018) 
• Less focus on Kubernetes, more focus up the stack (Istio, Knative)
• Many companies focused on developer tools - Atomist, Pulumi, Windmill, Microsoft

Other Tidbits: 

• AWS published an ECS, EKS, Fargate Roadmap - https://github.com/aws/containers-roadmap/

Announcements:

• A list of KubeCon 2018 Seattle Announcements 
• All the Slides and Videos from KubeCon 2018 (Seattle)

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 57

Show Overview: Brian and Tyler talk about a significant security bug in Kubernetes, the recently announced Kubernetes 1.13 release, and the upcoming KubeCon event in Seattle.

Show Notes: 

• Kubernetes Privilege Escalation Flaw  - https://www.redhat.com/en/blog/kubernetes-privilege-escalation-flaw-innovation-still-needs-it-security-expertise
• Kubernetes 1.13 Release Announcement - https://kubernetes.io/blog/2018/12/03/kubernetes-1-13-release-announcement/
• What’s new in Kubernetes 1.13 - https://coreos.com/blog/whats-new-kubernetes-113
• OpenShift Commons Gathering Seattle (preview)- https://blog.openshift.com/openshift-commons-gathering-preview-your-personal-prelude-to-kubecon-seattle/

Kubernetes 1.13 Features

• Kubeadm is now GA
• CSI (Container Storage Interface) is now GA
• Core-DNS is now GA, replacing kube-dns (as default)
• Alpha - support for device monitoring plugins
• Stable - Kubelet Device Plugin Registration
• Stable - Topology Aware Volume Scheduling
• Beta - APIServer DryRun
• Beta - Kubectl Diff
• Beta - Raw Block Device with Persistent Volume

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 56

Show Overview: Brian and Tyler talk with Mike Kostersitz, (@huskyat, Principal Program Manager (@huskyat) in Core Networking for Microsoft) about the basics of Windows containers, the differences between Linux and Windows containers, considerations for deployments, commons questions about Windows containers and the interaction between Red Hat and Microsoft Kubernetes engineering.  

Show Notes: 

• Managing Windows containers with Red Hat OpenShift Container Platform - Part I of Blog Series
• About Windows Containers 
• OpenShift in Azure
• Why Red Hat and Microsoft are Bringing Managed OpenShift to Azure

Topic 1 - From a Windows perspective (OS, Application), talk us through how you typically explain Windows Containers to other people? What are some of the important technologies, or changes to Windows?

Topic 2 - If someone has a Windows (.NET) application today, how would they go about getting into a Container/Kubernetes environment today, and in the near future?

Topic 3 - What are you finding is different between Kubernetes with Linux containers, and Kubernetes with Windows containers?

Topic 4 - You're in the process of writing a series of blogs about OpenShift + Windows containers. You've been working with both the Microsoft and Red Hat teams in getting this supported with OpenShift. What are some of the things you're seeing either Developer Preview customers? 

Topic 5 - What are some of the questions that you're getting from people interested in Windows Containers and Kubernetes? (normal and unusual)

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com

Show: 55

Overview: Brian and Tyler talk about how existing application developers and PlatformOps teams can map existing applications and framework services into a more distributed set of services that run in containers on Kubernetes and OpenShift. 

Show Notes: 

• Why Kubernetes is the New Application Server (blog)
• Kubernetes: Your Next Java Application Server (video and demo from @burrsutter)

We mentioned last week that we’re moving into the 3rd Era of Kubernetes (automated ops, automated apps), with the 2nd Era being about getting a broader set of applications on Kubernetes. Today we thought we’d talk about some design patterns, especially for anyone that’s transitioning from existing applications, and how some of those concepts map to the evolving Kubernetes eco-system.

Topic 1 - At the core of this statement about “Kubernetes is the New Application Server” is three things: 

1. Some explanation about why containers are a useful packaging mechanism to avoid the difference between developer environments and production environments (package dependencies, etc.)
2. How to mentally map between the more monolithic frameworks that are widely used today, and more distributed concepts that align more with Kubernetes and containers.
3. Even within a language like Java, there are now variants (JakartaEE, Microprofile, Node, SpringBoot, etc.) and developers might not want to embed all functionality within the application, if it can be offloaded to platform services.

Topic 2 - It walks through the 10 elements that either map to Kubernetes, an OpenShift service, or emerging functionality in Istio (or maybe Knative)

1. Discover (Service Discovery)
2. Invocation of the Application
3. Elasticity / Scaling
4. Resilience
5. CI/CD Pipeline Integration
6. Authentication
7. Logging
8. API Mgmt and Integrations

Feedback?

Email: PodCTL at gmail dot com
Twitter: @PodCTL
Web: http://podctl.com