Kubernetes Podcast from Google

This episode is special. We collaborated with the folks behind the Cloud Security Podcast from Google, Anton Chuvakin(LinkedIn)and Tim Peacock, to bring you a joint episode. We had the pleasure to jointly interview Michelle Chubirka, a Cloud Security Developer Advocate. We talked about VM and Container security, debunked some myths about isolation, attack surfaces, immutability of containers, and more.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com

mail: [email protected]

twitter: @kubernetespod

• Nvidia NIM on GKE
• Kubernetes Steering Committee Election Results for 2024
• The schedule for KubeCon and CloudNativeCon India
• Diagrid Catalyst Beta
• Dapr on the Kubernetes Podcast with Salaboy

• Cloud Security Podcast
• Anton Chuvakin
• Tim Peacock
• Michelle Chubirka
• Dora report
• Container Security: It’s All About the Supply Chain - Michele Chubirka
• Software composition analysis (SCA)
• DevSecOps Decisioning Principles
• Kubernetes CIS Benchmark
• Cloud-Native Consumption Principles
• State of WebAssembly outside the Browser - Abdel Sghiouar
• Why Perfect Compliance Is the Enemy of Good Kubernetes Security - Michele Chubirka - KubeCon NA 2024

• Cloud Code
• Skaffold
• Introduction to Distributed ML Workloads with Ray on Kubernetes - Mofi Rahman & Abdel Sghiouar - KubeCon NA 2024

Marvin Beckers is a Team Lead at Kubermatic and a contributor and maintainer of the CNCF Sandbox Project, KCP. KCP is an open source horizontally scalable control plane for Kubernetes-like APIs.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com

mail: [email protected]

twitter: @kubernetespod

• [Docker Blog] Announcing Upgraded Docker Plans: Simpler, More Value, Better Development and Productivity
• [LinuxFoundation Blog] Linux Foundation Announces Intent to Form Developer Relations Foundation
• [Computer Weekly Article] NetApp Insight 2024 - Live show report: day zero

• KCP
• Kubernetes Resource Model (KRM)
• Crossplane

• Cloud Native Maturity Model

Lior Lieberman is a software engineer lead at Google Cloud focusing on GCE, Kubernetes, and Service Mesh. He is a leading contributor to Gateway API and the maintainer of Ingress2gateway.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com

mail: [email protected]

twitter: @kubernetespod

bluesky: @kubernetespodcast.com

• NFTables mode for kube-proxy | Kubernetes
• Kubescape becomes a CNCF incubating project
• Announcing the Beta Release of OpenTelemetry Go Auto-Instrumentation using eBPF | CNCF
• New Phippy Book Guidelines: Enhancing Community Access & Engagement | CNCF

• Lightning Talk: Why Service Is the Worst API in Kubernetes, & What We’re Doing About It - Tim Hockin
• GitHub - kubernetes-sigs/ingress2gateway: Convert Ingress resources to Gateway API resources
• Migrating from Ingress
• Gateway API Inference Extension 0.1.0 release README on GitHub
• kubernetes-sigs/ingate - an Ingress & Gateway API Controller
• GAMMA - https://gateway-api.sigs.k8s.io/mesh/

Fabian Kammel is a Security Architect at ControlPlane, where he helps to make the (cloud-native) world a safer place. In his career, he continuously worked to bring hardware security and cloud-native security closer together. His past projects include:

A cloud-native PKIs for on-road vehicle services secured by enterprise HSMs

An always-encrypted Kubernetes distribution that harnesses the power of Confidential Computing

And more recently securing SPIFFE-based machine identities via hardware attestation.

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com

mail: [email protected]

twitter: @kubernetespod

Confidential Computing Blog from kubernetes.io

Confidential Computing Consortium

Confidential Computing Whitepaper

Intel SGX Enclave

Swap Memory with Kubernetes in Beta in 1.28

Hardware Security Modules

Trusted Platform Modules (TPM)

Envelope Encryption

Confidential Computing Concepts - Confidential Virtual Machine

AMD Secure Encrypted Virtualization (AMD SEV)

AMD Secure Encrypted Virtualization - Secure Nested Paging (AMD SEV SNP)

Trusted Computing Base (TCB)

Remote Attestation

Confidentiality, Integrity, and Availability: The CIA Triad

Intel SGX Enclaves

Confidential Containers (CoCo)

Katacontainers

AWS Firecracker

Joe Beda, Craig McLuckie and Brendan Burns are considered the “co-founders” of Kubernetes; working with the cluster management teams at Google, they made the case that their implementation of the Borg and Omega patterns should become a proper product. Joe and Craig now run Heptio, a company working to bring Kubernetes to the enterprise. Your hosts talk to Joe Beda about the history of Kubernetes, creating a diverse company, and what exactly is wrong with YAML.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

• Minimal Ubuntu
• Sysdig security blog series
• Why Red Hat think Kubernetes is the new application server
• Deep dive blog posts for Kubernetes 1.11:
  • IPVS-Based in cluster load balancing
  • CoreDNS for Kubernetes Cluster DNS
  • Resizing Persistent Volumes
  • Dynamic Kubelet configuration
• Interview transcript blog post for Episode 10 with Josh Berkus and Tim Pepper
• Elastifile announce Kubernetes and Tensorflow integration
• Heptio Ark v0.9.0

• Joe Beda on Twitter
• Heptio
  • Heptio Blog
• 4 years of Kubernetes blog post
• Heptio open source projects:
  • ksonnet
  • Heptio Ark
  • Heptio Sonobuoy
  • Heptio Contour
  • Heptio Gimbal
• What’s wrong with YAML?
  • YAML as machine language
  • Metaparticle
  • kustomize
• TGI Kubernetes video series