The New Stack Podcast

In the race to make this weird, wild world of distributed, containerized applications compatible with the virtualized infrastructure upon which most enterprises depend, perhaps no project has made more progress than Kata Containers.  The product of collaboration between the Hyper.sh project and Intel’s Clear Containers, Kata aims to pair individual containers with hypervisors, creating that direct link with the hardware that typifies first-generation virtualization, and isolating host Linux kernels from one another.

Google’s recent gVisor project follows a similar path, creating a minimal Linux kernel for the container hosts that reduces the likelihood of exploit.

Some folks contend these architectures may render many of the more aggressive security systems being conceived for containerized environments unnecessary or redundant.  But in a conversation for The New Stack Makers, Aqua Security co-founder and CTO Amir Jerbi told us he believes that even the mode of process isolation gVisor and Kata introduce, would carry with it into practice some security challenges.  Try orchestrating a microservices environment with isolated instances in a multi-tenant environment, he suggests, and see what happens.

Back in May, the world's biggest Kubernetes users and contributors gathered in Denmark for KubeCon Europe. One of the topics we were keen to see addressed by this meeting of the minds was the future of Kubernetes, and the CNCF as a whole.

To find out just what is being done to prepare the Kubernetes project for the long haul, we sat down with Jaice Singer DuMars, open source software governance program manager at Google, Aparna Sinha, group product manager for Kubernetes at Google, and Dan Kohn, executive director of CNCF.

Watch on YouTube: https://youtu.be/sUEsQS9vl4Y

Back in May, the world's biggest Kubernetes users and contributors gathered in Denmark for KubeCon Europe. One of the topics we were keen to see addressed by this meeting of the minds was the future of Kubernetes, and the CNCF as a whole.

To find out just what is being done to prepare the Kubernetes project for the long haul, we sat down with Jaice Singer DuMars, open source software governance program manager at Google, Aparna Sinha, group product manager for Kubernetes at Google, and Dan Kohn, executive director of CNCF.

Watch on YouTube: https://youtu.be/sUEsQS9vl4Y

InSpec is a tool for compliance and security testing. It started around operating systems and traditional VMs, and has grown into the security space as a result. Now, it has expanded beyond that. At this year's ChefConf held recently in May, TNS Founder Alex Williams sat down with Dominik Richter, Senior Product Manager at Chef, andAnnie Hedgpeth, Cloud Automation Engineer at 10th Magnitude.

On today's episode of The New Stack Makers, the trio dove into the discussion of how InSpec fills a gap in today's DevOps workflow, and the project's goals for the future.

Watch on YouTube: https://www.youtube.com/watch?v=PotvNcL6voc

InSpec is a tool for compliance and security testing. It started around operating systems and traditional VMs, and has grown into the security space as a result. Now, it has expanded beyond that. At this year's ChefConf held recently in May, TNS Founder Alex Williams sat down with Dominik Richter, Senior Product Manager at Chef, andAnnie Hedgpeth, Cloud Automation Engineer at 10th Magnitude.

On today's episode of The New Stack Makers, the trio dove into the discussion of how InSpec fills a gap in today's DevOps workflow, and the project's goals for the future.

Watch on YouTube: https://www.youtube.com/watch?v=PotvNcL6voc

As organizations look to DevOps as a means to achieve digital transformation, they realize they must accelerate the end-to-end software delivery process, and also make it safer.  

“It can seem like a boil-the-ocean type of problem. That makes it hard to figure out how you’re going to incrementally derive value from it,” said Andrew Phillips, a product manager in Google Cloud Platform’s DevOps division, in this episode of The New Stack Makers.

By separating the developer feedback cycle from the rollout process, organizations can find a manageable starting point. Tools like Spinnaker were built for this purpose, Phillips said, “to provide an abstraction so that development teams can have a simplified experience, while still providing the operations teams with the ability to manage and tweak and define it in exactly the way that makes the most sense for the organization.”

As organizations look to DevOps as a means to achieve digital transformation, they realize they must accelerate the end-to-end software delivery process, and also make it safer.  

“It can seem like a boil-the-ocean type of problem. That makes it hard to figure out how you’re going to incrementally derive value from it,” said Andrew Phillips, a product manager in Google Cloud Platform’s DevOps division, in this episode of The New Stack Makers.

By separating the developer feedback cycle from the rollout process, organizations can find a manageable starting point. Tools like Spinnaker were built for this purpose, Phillips said, “to provide an abstraction so that development teams can have a simplified experience, while still providing the operations teams with the ability to manage and tweak and define it in exactly the way that makes the most sense for the organization.”

There is no single, best set of tools for continuous integration / continuous development (CI/CD) with Kubernetes — each organization will use the tools that are best suited for its specific use case. For this reason, the Cloud Native Computing Foundation (CNCF) does not advocate for one toolset over another when it comes to building, deploying and managing applications on Kubernetes, says Ihor Dvoretskyi, developer advocate at the CNCF. However, they do analyze what integrations and support are needed in the Kubernetes core and identify CI/CD trends in the process.

“The hardest thing [about running on Kubernetes] is gluing all the pieces together. You need to think more holistically about your systems and get a deep understanding of what you're working with,” said Chris Short, a DevOps consultant and CNCF ambassador. “There [must be] a greater understanding of what your business is considering key metrics, or some people call it true north, and bringing that into the operations and development world more closely.”

In this podcast, we talk with Dvoretskyi and Short about the trends they’re seeing in DevOps and CI/CD with Kubernetes, the role of the Kubernetes community in improving CI/CD and some of the challenges organizations face as they consider the plethora of tools available today.

There is no single, best set of tools for continuous integration / continuous development (CI/CD) with Kubernetes — each organization will use the tools that are best suited for its specific use case. For this reason, the Cloud Native Computing Foundation (CNCF) does not advocate for one toolset over another when it comes to building, deploying and managing applications on Kubernetes, says Ihor Dvoretskyi, developer advocate at the CNCF. However, they do analyze what integrations and support are needed in the Kubernetes core and identify CI/CD trends in the process.

“The hardest thing [about running on Kubernetes] is gluing all the pieces together. You need to think more holistically about your systems and get a deep understanding of what you're working with,” said Chris Short, a DevOps consultant and CNCF ambassador. “There [must be] a greater understanding of what your business is considering key metrics, or some people call it true north, and bringing that into the operations and development world more closely.”

In this podcast, we talk with Dvoretskyi and Short about the trends they’re seeing in DevOps and CI/CD with Kubernetes, the role of the Kubernetes community in improving CI/CD and some of the challenges organizations face as they consider the plethora of tools available today.

At KubeCon + CloudNativeCon in Copenhagen in early May, we caught up with Red Hat's newest CTO, Brandon Philips, to discuss the state of CoreOS and containers as a whole. Philips and his team were acquired by Red Hat back in January, and the pairing has focused a good amount of Linux thought leadership onto the Kubernetes project. In Copenhagen, he and Diane Mueller, director of community development at Red Hat, sat down to talk about what it's been like merging the CoreOS and Red Hat teams.

The CoreOS team, and Red Hat overall, has been working closely with the CNCF to expand the capabilities of Kubernetes for enterprise users. One big part of this effort has been the Kubernetes Operators Project, said Philips.

Watch on YouTube: https://youtu.be/en4yHnjfi-s