Atlantis: The Terraform Automation Powerhouse Cloud Native Compass podcast

39:32

In this episode David and Laura explore the world of Atlantis, the Terraform automation tool, with special guest Jose (PePe) Amengual, a core contributor and maintainer of the Atlantis project. We discuss the origins, features, and future of Atlantis, along with its role in production engineering and its integration with various VCS systems. 00:00 Introduction 00:14 Terraform Automation and Project Atlantis 00:35 Pepe’s Journey with Project Atlantis 03:40 What is Atlantis? 22:05 Security Aspects of Atlantis 11:09 Future of Atlantis…

1
Java for Serverless Functions 29:37

22 giorni fa29:37

29:37

Java for Serverless Functions In this episode of Cloud Native Compass, hosts Laura and David explore the world of Java for serverless functions with special guest Otávio Santana. Otávio, a seasoned Java developer and Kubernetes expert, shares his insights into the modernization of Java, its ecosystem, and its place in the cloud native landscape. We discuss Java's evolution, the misconceptions surrounding it, and why it remains a powerful tool for developers today. 00:00 Introduction to Java for Serverless Functions 00:07 Meet Otavio Santana: Java Champion and Kubernetes Expert 04:28 Java's Evolution and Modernization 06:12 Java in the Cloud Native Landscape 16:56 Java Ecosystem and Frameworks 18:37 Java's Flexibility and Community Support 28:14 Java in Kubernetes and Future Prospects 29:44 Conclusion and Final Thoughts…

1
Dapr: The Future of Microservices 53:09

29 giorni fa53:09

53:09

Dapr: The Future of Microservices In this episode of Cloud Native Compass, host David Flanagan is joined by Mark Fussell, co-founder and CEO of Diagrid, to discuss the intricacies of Dapr and its role in microservices and distributed systems. They delve into the actor model, the new Dapr Agents, and much more. Creators & Guests David Flanagan - Host Laura Santamaria - Host Mark Fussell - Guest Click here to watch a video of this episode. (00:00) - Introduction (00:09) - Guest Introduction (00:14) - Overview of Dapr and Microservices (00:42) - Exploring Microservices (01:12) - Challenges in Microservices (00:42) - Dapr's Solutions for Microservices (03:25) - The Role of Dapr in Simplifying Microservices (04:17) - Communication and Coordination in Microservices (06:00) - Service Invocation and Pub/Sub in Dapr (33:22) - Component Model in Dapr (22:38) - The Outbox Pattern and Actor Model (39:49) - Dapr Agents and LLM Integration (49:08) - Diagrid's Role with Dapr (52:00) - Conclusion and Sign-Off…

1
Simplifying Kubernetes Adoption Challenges 37:19

5 weeks fa37:19

37:19

Struggling to Learn Kubernetes? Here’s How to Stay MotivatedIn this episode of Cloud Native Compass, host David Flanagan talks with Koray Oksay, a Kubernetes consultant, trainer at Kubermatic, CNCF Ambassador, and organizer of KCD Istanbul. From this episode, you’ll learn how to overcome the challenges of learning new technologies, how to find motivation, and how to use real-world projects to improve skills. The guest shares personal experiences—how he moved from struggling with Perl and Python to using them effectively in production. Don’t miss this chance to learn from a seasoned professional! 00:00 Introduction and Missing Co-Host 00:25 Meet Koray: Background and Experience 01:59 Journey into Kubernetes and Cloud Native 04:55 Challenges in Adopting Kubernetes 06:17 Training and Skill Levels in Kubernetes 12:20 Tools and Best Practices in Kubernetes 17:44 Choosing the Right Tools for Your Needs 19:23 Preferred Tools and Final Thoughts 20:35 Introduction to KKP and Managed Kubernetes 21:10 Public Cloud vs On-Prem Kubernetes Management 21:56 Customization and Freedom in Kubernetes 24:04 Future Technologies in Kubernetes and Cloud Native 25:07 The Complexity of Kubernetes 27:01 Cluster Management Best Practices 33:31 Getting Started with Kubernetes: Tips and Resources 39:23 Final Thoughts and Community Involvement…

1
Cloud Server-Side WebAssembly 38:16

7 weeks fa38:16

38:16

In this episode, David and Laura catch up with Mikkel Mørk Hegnhøj from Fermyon to break down the latest in WebAssembly. They’ll cover how it’s changing cloud computing, what’s new with Spin and WASI, and why devs should care. Tune in for some great insights! Click here to watch a video of this episode. Creators & Guests David Flanagan - Host Laura Santamaria - Host Mikkel Mørk Hegnhøj - Guest (00:00) - Introduction to Server-Side WebAssembly (00:25) - Technical Difficulties and Banter (01:01) - Guest Introduction: Mikkel Mørk Hegnhøj (02:00) - WebAssembly Evolution and Spin 3.0 (05:02) - WASI and WebAssembly Components (10:23) - WebAssembly in Kubernetes (16:26) - Spin 3.0 Features and Future Directions (19:25) - Distributed Promises and WebAssembly (19:58) - Frameworks and Programming Languages in WebAssembly (20:58) - Polyglot Development and Experimentation (22:40) - Practical Use Cases for Polyglot Programming (24:37) - Enterprise Benefits of WebAssembly (25:29) - Component-Based Deployment in Kubernetes (28:20) - Developer Experience with Spin and WebAssembly (33:28) - Open Telemetry Integration in Spin V3 (35:50) - Future of Spin and WebAssembly (37:40) - Closing Remarks and Upcoming Events…

1
Navigating Kubernetes: Insights, Challenges, and the Release Cycle with Kat Cosgrove 39:26

11 weeks fa39:26

39:26

In this episode of Cloud Native Compass, hosts David Flanagan and Laura Santamaria dive deep into the complexities of the Kubernetes release cycle with guest Kat Cosgrove. Kat, a sub-project lead for SIGrelease in the Kubernetes project, shares her experiences and discusses issues such as burnout, handling drive-by PRs, and the nuances of managing a fast-moving open source project. They explore the structure of the release team, the challenges of maintaining CI stability, and the ever-evolving nature of contributing to Kubernetes. Alongside tech talk, the trio reminisces about their work history, the challenging debates over project management, and the quirks of maintaining open source projects. Kat also recommends a book, a movie, and an album, providing a well-rounded blend of tech insights and personal favorites. Click here to watch a video of this episode. Featuring David Flanagan - Host Laura Santamaria - Host Kat Cosgrove - Guest (00:00) - Introduction (00:08) - Meet the Hosts and Guest (01:24) - Kubernetes Release Process Overview (03:22) - Challenges in Kubernetes Release Management (04:08) - Team Structure and Roles (06:29) - Open Source Contributions and Burnout (11:06) - Managing CI and Bug Triage (15:28) - Release Delays and External Dependencies (16:51) - Press Embargoes and Publicity (20:46) - AI in Open Source Documentation (22:13) - The Challenges of Open Source Contributions (23:06) - The Auto PEP 8 Incident (23:49) - The Overwhelming Decisions of Maintainers (24:01) - The Etiquette of Open Source PRs (26:39) - Personal Experiences in Open Source (28:56) - The Accidental Involvement in Kubernetes (32:17) - The Chaos of SIG Release (34:31) - Kubernetes 2.0 and Backwards Compatibility (37:07) - Book, Movie, and Album Recommendations (38:51) - Conclusion and Farewell…

1
From Kubernetes to Cloud Run: Chainguard's Journey 56:11

13 weeks fa56:11

56:11

Exploring Cloud Migrations & Infrastructure Strategies with Jason Hall of Chainguard Click here to watch a video of this episode. In this episode of the Cloud Native Compass podcast, hosts David Flanagan and Laura Santamaria chat with Jason Hall, Principal Engineer at Chainguard. They delve into Chainguard's migration from Kubernetes and Knative to Cloud Run, discussing the reasons behind the move, cost considerations, managing technical debt, and best practices for infrastructure management. The conversation also covers the benefits of using Cloud Run, their strategic use of BigQuery for event logging, and insights into least access security models. Tune in to learn more about navigating cloud-native environments and optimizing infrastructure. Creators & Guests David Flanagan - Host Laura Santamaria - Host Jason Hall - Guest (00:00) - Introduction (00:52) - Jason Does Stuff (01:32) - Chainguard's Migration Journey (02:18) - Challenges with Kubernetes and Knative (04:33) - Adopting Cloud Run (12:15) - Multi-Region Deployment with Cloud Run (19:26) - Security and Authorization Practices (27:29) - Operational Decisions and Cost Considerations (33:07) - Debunking Kubernetes Myths (33:24) - The Illusion of Free Services (33:42) - Scaling Challenges and Solutions (37:00) - Convincing Leadership to Address Technical Debt (39:41) - Developer Environments in the Cloud (43:18) - Cloud Run vs. BigQuery Debate (47:20) - Security and Logging Best Practices (52:56) - Future Plans and Focus Areas (54:45) - Final Thoughts and Farewells…

1
InfluxDB 3 & Rust 56:09

1 year fa56:09

56:09

InfluxDB 3.0 Rewrite InfluxDB, a time series database, underwent a major rewrite to create InfluxDB 3.0, also known as IOx. The decision to rewrite the database was driven by the need for strict control over memory management and high performance. The project started as a research endeavor and gradually gained traction within the company. The team decided to build around projects under the Apache Foundation, such as Apache Arrow and Apache Data Fusion. In April 2022, InfluxDB 3.0 was officially announced, aiming to improve performance, scalability, and cost-effectiveness for users. IOx Database Engine The new database engine, IOx, is designed to handle various types of observability and monitoring data, including metrics, traces, and logs. It aims to provide a single store for all these signals, eliminating the need for separate databases. However, querying the data efficiently is still a challenge that the team is working on. The goal is to make IOx the go-to solution for storing and querying observational data, not only for server infrastructure monitoring but also for sensor data use cases. Challenges and Considerations Working with logs, tracing, and structured events in time series databases poses challenges. The dynamic and inconsistent nature of schemas in logs and tracing use cases can make extracting structured fields difficult. Time series databases also have limitations in handling tracing front ends and require an index to map trace IDs to individual traces. While metrics, logs, and traces are the gold standard for observability, there is room for improvement in terms of usability and performance. Flux and Data Fusion Flux, a scripting language developed for InfluxDB 2.0, addresses user requests for more complex query logic and integration with third-party systems. InfluxDB 3.0 incorporates a parser in Rust to translate SQL queries into a Data Fusion query plan, benefiting from the performance optimizations of Data Fusion. However, bringing Flux to InfluxDB 3.0 proved challenging due to the large surface area of Flux and limited time and resources. Updating the Flux engine to use the 3.0 native API could potentially resolve these issues. InfluxDB Development and Open Source Licensing InfluxData is focused on improving the core query engine of InfluxDB and enhancing its capabilities and performance. They have created a separate community fork of Flux to allow collaboration on its development. Paul Dix, the co-founder, believes that true open source should be about freedom and expresses his intention to keep InfluxDB 3 as a permissively licensed project. He discusses the recent license change by HashiCorp and the growing distrust in the developer community towards VC-backed open source projects. Putting InfluxDB into a foundation may not be feasible due to the lack of multiple contributors.…

1
Trust and Validation in AI 43:11

1 year fa43:11

43:11

Here are 5 key takeaways from this episode that you don't want to miss: 1️⃣ The People Problem: Laura Santamaria raises an important concern about verifying AI-generated outputs and tackling the challenge of the "people problem" in AI development. 2️⃣ Verifying Data Authenticity: JJ discusses the challenge of proving that a data blob originated from a specific model and how this issue is being addressed by companies like IBM through pile cleaning and legal penalties. 3️⃣ AI Misconceptions: We debunk some common misconceptions about AI, including the belief that it is an all-knowing fact machine. 4️⃣ Trusted AI: IBM's approach to building trusted models, with dedicated engineers responsible for cleaning and verifying data, is explained. Plus, we discover IBM's partnerships with Hugging Face to leverage the open-source ecosystem. 5️⃣ The Impact of AI: We delve into the potential positive and negative implications of AI, and how the rapid advancement of this technology presents challenges with trust and validation. 💡 Fun Fact: Did you know that 95% of open-source language models are trained on a data set called "the pile," which contains pirated and copyrighted material? Discover why this has implications for copyright and patent laws! As always, the conversation in this episode is engaging and eye-opening. JJ Asghar provides insightful perspectives and sheds light on the future of AI development. Don't miss out on the valuable information shared! Questions We Covered 1. How can the problem of untrusted data in AI models be effectively addressed? 2. Should companies like OpenAI and Microsoft be required to provide their data sets for verification purposes? Why or why not? 3. What are the potential risks and challenges associated with using AI technology without proper regulation? 4. Should AI creations be eligible for copyright protection? Why or why not? 5. How can we ensure the accuracy and trustworthiness of AI-generated data, especially when it comes to extracting information from sources like PDFs? 6. What are some potential positive impacts of AI technology, and how can we maximize its benefits while minimizing its negative implications? 7. How can the rapid advancement of AI technology be balanced with the need for trust and validation? 8. In what ways do copyright and patent laws need to evolve to accommodate AI technology? 9. What are the implications of China having its own set of laws and approaches to technology that may differ from other countries? 10. How can individuals navigate and better understand the AI space in order to make informed decisions and contributions?…

1
The Magic of eBPF 32:00

2 years fa32:00

32:00

We're back with an exciting new episode of Cloud Native Compass, and this time we're diving deep into the captivating world of eBPF. Join Laura Santamaria, David Flanagan, and special guest Liz Rice as they unravel the mysteries and explore the incredible potential of this powerful technology! In this episode, you will learn: 1. The two parts of eBPF: Discover the kernel program and the user space interaction that make up the magic of eBPF. 2. Programming with eBPF: Explore the different options for writing eBPF programs, from bytecode form to higher-level languages like Rust. 3. Compilers and SDKs: Learn which compilers, like clang GCC and the Rust compiler, support eBPF bytecode and how SDKs can make your interaction with eBPF programs easier. 4. The Evolution of Packet Filtering: Trace the history of packet filtering, from its humble beginnings to the powerful and versatile capabilities of eBPF. 5. The Widespread Adoption: Uncover the sudden rise in eBPF's popularity, its impact on observability and performance, and the role it plays in modern networking. Now, for a fascinating fun fact from the episode: Did you know that eBPF is now considered Turing complete? That's right! With its combination of features, eBPF has surpassed its humble start as a packet filtering tool and has become a full-fledged technology powerhouse. Creators & Guests Laura Santamaria - Host David Flanagan - Host Liz Rice - Guest (01:46) - What is eBPF? (06:45) - The Rise of eBPF (09:40) - Why is eBPF Interesting? (16:00) - Who's using eBPF? (19:20) - eBPF for Developers (24:00) - Troubleshooting eBPF (27:11) - Future of eBPF…

1
Ambient Mesh with Marino Wijay & Matt Turner 49:22

2 years fa49:22

49:22

Curious about Istio's new deployment mechanism, Ambient Mesh? It allows you to use Istio service mesh without relying on sidecar proxies, which brings a bunch of improvements that Marino and Matt share throughout this episode; as well as a ton of deep dive technical implementation details. Creators & Guests Laura Santamaria - Host David Flanagan - Host Marino Wijay - Guest Matt Turner - Guest (00:00) - - Introductions (01:50) - - What Ambient Mesh? (04:15) - - Why Ambient Mesh? (18:20) - - Waypoint Proxy (25:00) - - Trade Offs (34:20) - - Why Not eBPF? (39:50) - - Istio Graduation!…

1
Is WASM the Future? 43:08

2 years fa43:08

43:08

In this episode, hosts David and Laura, sit down with Laslo Fogas; a self proclaimed WebAssembly sceptic. They discuss the future of Cloud Native and improving the broken developer experience. Creators & Guests Laura Santamaria - Host David Flanagan - Host Laszlo Fogas - Guest

1
Event-Driven Architectures at Wix 46:04

2 years fa46:04

46:04

In this episode of the Cloud Native Compass, host David Flanagan interviews Natan from Wix Engineering about event-driven architectures. Natan shares his experience as a software engineer for almost 20 years and how working at Wix has improved his engineering skills. Wix has a powerful website building platform that has enabled people with different skill levels to build websites. They have expanded their reach from self-creators to agencies and web professionals and created a whole ecosystem platform. Wix has around 2,500 microservices in production, even more added every week, and they have a lot of visitors, around 1 billion unique visitors every month, which gives more than 500 billion HTTP requests per day and 70 billion Kafka events produced every day. Let's learn how Natan and Wix build for success at some pretty stagger numbers. Creators & Guests David Flanagan - Host Natan Silnitsky - Guest (00:00) - Introduction (02:25) - The Scale of Wix (08:50) - When & Why Event Driven Architectures (14:45) - Service Mesh (19:30) - Dev & Ops (27:15) - Schema Evolution & Versioning (34:00) - Introducing New Tools (37:15) - Cost Optimisation (44:44) - Plugs (00:00) - Chapter 10 Links https://www.natansil.com/ https://www.wix.engineering/…

1
Kubernetes Security with Identity and OIDC 38:47

2 years fa38:47

38:47

I interview Marc Boorshtein, the CTO of Tremolo Security, an open-source identity management company that focuses on authentication, authorization, identity, and automation. Marc explains that their most popular tool is Open Unison, which allows users to log in to their Kubernetes clusters with whatever authentication system they have, such as LDAP, AD, Okta, or Azure AD. Open Unison also provides secure access to the dashboard and integrates with other cluster management applications. Next up we shift over to the issue of certificate revocation in Kubernetes. Marc explains that Kubernetes doesn't know how to handle certificate revocation, which can be a security risk if a certificate is leaked or an employee leaves the company. He recommends using OpenID Connect or impersonation to access the cluster instead of relying on certificates. Marc also discusses the default time to live on service account tokens issued by the Kubernetes cluster and the importance of not using service account tokens when talking to clusters This episode provides insights into the challenges of identity management with Kubernetes and strives to help you improve the security of your Kubernetes clusters.…

1
Migrating to Kubernetes 41:11

2 years fa41:11

41:11

In this episode, Rachel shares her journey into tech and how she ended up in the Kubernetes space. She did not have a traditional IT background, but she was always interested in computers and programming. As soon as she discovered the DevOps philosophy and movement, she knew that it was the right fit for her. She went down the rabbit hole of learning how to use Docker, Ansible, Chef, and Kubernetes, and eventually landed a job at Fairwinds, a Kubernetes-centric company. Rachel discusses the challenges that come with adopting Kubernetes, such as the steep learning curve and the knowledge gap. There are many unknowns if you are not in the Kubernetes space and it can be overwhelming to configure to produce a valuable platform for your teams. Rachel's journey into the tech space and her experience with Kubernetes provide valuable insights into the challenges and benefits of adopting and migrating to Kubernetes. Rachel Sweeney is the tech lead at Built Technologies for their migration to Kubernetes. Prior to that she was a tech lead at Fairwinds, a Kubernetes SaaS and consulting company, and before that she worked at the Pew Research Center creating their Kubernetes cluster and migrating workloads to it. She has been a speaker and panelist at various conferences and events ranging from DevOpsDays Philly to Container Journal, and also wrote a chapter for the O’Reilly title “97 Things Every Cloud Engineer Should Know: Collective Wisdom from the Experts”. Rachel loves traveling, culture, meeting new people, networking, and helping others grow. Feel free to reach out on LinkedIn with a message and connect! Creators & Guests David Flanagan - Host Rachel Sweeney - Guest…

Cloud Native Compass

1
Event Sourcing 45:29

2 years fa45:29

45:29

In this episode, David interviews Frank, a staff engineer at Personio, a big HR company based out of Germany. Frank has been in the industry for close to 15 years and has worked with various programming languages such as PHP, TypeScript, Kotlin, Java, Go, and Rust. Frank's interest in event-driven architecture started when he worked on a project for Schiphol airport. The website needed to ingest flight information as close to real-time as possible, and the only real way to do that for the scale they were at was through an event-based integration. Frank believes that event-driven architecture is the only way to do things for some projects. People Creators & Guests David Flanagan - Host Frank de Jonge - Guest Chapters (00:00) - Introductions (01:45) - The Knowledge of Others (06:35) - A Need for Event-Driven Architectures (10:45) - When to Event Source (19:15) - What is Event Sourcing (24:50) - What is CQRS (27:40) - Crossover of Microservices and Event-Driven (36:45) - Challenges of Event Sourcing (41:40) - Exciting Futures Links - Frank's Twitter - https://twitter.com/frankdejonge - EventSauce - https://eventsauce.io/ - The Knowledge of Others - https://www.youtube.com/watch?v=RdFGGdL5kH8…

Cloud Native Compass

1
Server-Side WebAssembly 49:36

2 years fa49:36

49:36

In this episode of the Cloud Native Compass podcast, the guests discuss WebAssembly and server-side WebAssembly. The guests include Kevin Hoffman, CTO of Cosmonic and creator of the WasmCloud open source project, Connor Hicks, founder and CEO of Suborbital, and Kate Goldenring, senior software engineer at Fermyon. They each share their experiences and paths to working with WebAssembly, with Kevin having experimented with Asm.js and CloudABI before discovering WebAssembly, Connor being drawn to the performance benefits of WebAssembly for a job processing framework, and Kate coming from a Kubernetes background and working on a project called Krustlet, which was an attempt to run WebAssembly instead of containers on Kubernetes. The discussion also covers the WebAssembly Systems Interface (WASI), which was originally created to give WebAssembly modules access to low-level external services like file descriptors and standard out, but is evolving towards a component model where external services are high-level abstractions like web clients, web servers, and key value stores. WASI is defined by WIT interfaces that give access to host resources or other resources that the host can control. Overall, the episode provides insights into the growing use of WebAssembly and server-side WebAssembly in cloud-based applications and the potential benefits they offer. People Creators & Guests Kate Goldenring - Guest Connor Hicks - Guest Kevin Hoffman - Guest David Flanagan - Host Chapters (00:00) - Introductions (01:42) - The Path to WebAssembly (06:35) - What is WASI & Component Model (17:20) - Why WebAssembly? (22:35) - When WebAssembly? (34:00) - WebAssembly Adoption (41:40) - Containers with WebAssembly (47:15) - Shameless Plugs Links - https://twitter.com/KateGoldenring - https://fermyon.com - https://twitter.com/cohix - https://suborbital.dev - https://cosmonic.com…

Cloud Native Compass

1
Cloud, Containers, & Kubernetes 1:05:31

2 years fa1:05:31