TFIR: Open Source, Cloud Native & AI/ML

While we would like to think that security is baked in from the start by developers, this is not always the case. Furthermore, security engineers and developers are not always on the same page when it comes to security testing. Code Intelligence aims to tackle this problem with CI Spark, a tool that harnesses AI to help write test code.

In this episode of TFiR: Let’s Talk, Sergej Dechand, CEO and Co-Founder of Code Intelligence, talks about the company and the problem they are trying to solve. He talks about the role of AI in security and how it is being used for fuzz testing. He talks about CI Spark and how it is analyzing code and automating fuzz tests and he takes us through some of the key trends he is seeing in the industry.

While there are a lot of managed Kubernetes services nowadays, one company is differentiating itself by focusing on offering a small-footprint Kubernetes-managed service that can be deployed on the edge. Zededa has partnered with SUSE using EVE-OS and K3s in an effort to help tackle some of the challenges of deploying Kubernetes on the edge.

In this episode of TFiR: Let’s Talk, Michael Maxey, Vice President of Business Development at Zededa, talks about how the company is helping customers deploy workloads to edge devices. He talks about their key focus on small-footprint Kubernetes and how they are helping to tackle some of the challenges associated with this. Since the company has just announced a managed Kubernetes service, he also discusses the benefits of offering customers this option.

In this episode of TFiR: Let’s Talk, Shaun O’Meara, Field CTO at Mirantis, talks about the company’s new open source project k0smotron, and how it is helping enterprises deploy and manage control planes.

In this episode of TFiR: Let’s Talk, Mona Rakibe, Co-Founder and CEO at Telmai, talks about the company and how it is helping companies improve their data quality and investigate anomalies. They go on to talk about the company’s journey so far, some of the key capabilities of the platform, and what sets them apart from competitors.

In this episode of TFiR: Let’s Talk, Martin Phan, Field CTO at CloudCasa by Catalogic, talks about how the company is helping organizations with their data protection needs. He goes on to discuss some of the challenges customers are experiencing and how CloudCasa is helping to address these problems.

In this episode of TFiR: Let’s Talk, Ryan Taylor, VP of Customer Success and Solutions Engineering at Transposit, talks about their new announcement about adding on-call capabilities. He also takes us through the evolution of incident management and what sets Transposit apart from its competitors.

With the growing adoption of Kubernetes, many technologies, including Cloud Foundry, are evolving to embrace this tectonic shift in the industry. Cloud Foundry Foundation (CFF) has been going through a major transformation to embrace this change. However, this change doesn’t necessarily mean that Cloud Foundry is on its way out. On the contrary, like many major technologies, it will continue to serve a wide range of users and customers. What really matters is how Cloud Foundry leaders, including the foundation and companies sponsoring the project, look at this change; how committed they are to the users of this open source project.

In this episode of TFiR Let’s Talk, Swapnil Bhartiya sits down with Catherine McGarvey, Vice President of Software Engineering at VMware and Chris Clark, Program Manager at the Cloud Foundry Foundation, to discuss the state of Cloud Foundry today and how it is evolving as the momentum continues towards Kubernetes. They also discuss VMware’s continued commitment to the project and McGarvey’s recent appointment to the Cloud Foundry’s governing board.

Salt Security recently released the findings of their latest API Security Report, Q3 2022, which the company conducts every six months in line with the shifting currents of the market. In this episode of Let’s Talk, Michelle McLean, VP of Marketing at Salt Security, joins me to deep dive into the report. When she looks back at previous reports, she finds that one thing remains consistent — “We are still seeing a fairly high percentage of folks getting impacted or having at least some form of API security incident in the past 12 months.” Over 94% of companies experienced security incidents in production APIs, even though nothing catastrophic happened to them, with over 20% of companies reporting some sort of data breach as a result of security gaps in APIs.

In this episode of TFiR Let’s Talk from KubeCon + CloudNativeCon EU, Swapnil Bhartiya sits down with Sanjeev Mohan, Principal Analyst at SanjMo, to discuss the key trends he is seeing with data and Kubernetes. Mohan is amazed at how Kubernetes is enabling companies to deploy databases more effectively and efficiently.

“A few years ago, if I were to deploy a database on hundreds of nodes, it would take me days. What if a node went down and I had to reinstall it? Today, what I'm seeing is an extreme scale of databases provisioned literally within hours,” he said.

Observability was one of the hottest topics of discussion at KubeCon this year. Mohan shares his views on its challenges and why he feels organizations need to change how they see the role observability plays in the pipeline.

Jetstack helps businesses to build and operate cloud-native infrastructure with Kubernetes. The company was formed back in 2015, just a year after the Kubernetes open source project was started. Matthew Bates, CTO of Jetstack, sits down with Swapnil Bhartiya in this episode of Let’s Talk from KubeCon + CloudNativeCon EU to introduce the company and its mission.

Jetstack recently released a comprehensive toolkit to help development and security teams secure the software supply chain. Bates feels that this is something we need to take seriously and people need to be made aware of the sophistication of the risks in the attacks they are seeing. He discusses what Jetstack is doing to provide a digestible means to better understand this topic.

On discussing why he thought Kubernetes was such a game changer when it was first released, Bates says, “We felt that this presented a really interesting opportunity to be able to build those systems, and also for enterprises to rethink the way that they develop, build and ship software as well. We thought it was the start of a real shift.”

Besides the opportunities Kubernetes brings, Bates gives some insights into the challenges enterprises face as they try to navigate Kubernetes and cloud-native technologies. One of those challenges, security, continues to be a critical factor to handle. However, Bates feels that security is increasingly being made a priority earlier in the life cycle.

Key highlights from this video interview are:

Bates describes what motivated him to form Jetstack and how the introduction of Kubernetes presented many opportunities for building complex, potentially stateful systems. He discusses what challenges enterprises faced as they looked to understand and embrace the new technology and how Jetstack has been helping.

Bates explains that Jetstack is an advisory and a product company. He goes into depth about the customers they are helping, particularly with very large banks and how Jetstack is helping them understand the challenges and the breadth of the tools in The Cloud Native Computing Foundation (CNCF) to help address them.

The cloud-native ecosystem is evolving, which compared to traditional IT is considerably more complex. Bates discusses the evolution over time they have seen in people consuming Kubernetes and how the ecosystem is maturing.

Security continues to be a critical consideration for cloud with zero-trust remaining complicated to implement. Bates feels that DevSecOps is prioritizing security rather than it being an afterthought. He explains the benefits Kubernetes brings for having the ability to have security built into the platform.