Abdelfettah Sghiouar (Senior Developer Advocate at Google) shares his insights on three interesting technologies in the cloud-native ecosystem:

1. Actuated: a tool for running isolated GitHub action workers, focusing on ARM architecture.
2. Ray: the Kubernetes AI platform.
3. Argo: a suite of open-source tools for deploying and running applications and workloads on Kubernetes.

Watch the full interview: https://kube.fm/multi-tenancy-community-abdel

In this KubeFM episode, Harsha Koushik, a Security Researcher and Technical Product Manager at Palo Alto Networks, explores the intricacies of Kubernetes security, focusing on the benefits and misconceptions of Distroless container images and the broader aspects of container security.

You will learn:

- The advantages and limitations of Distroless container images.
- Best practices for container security.
- Supply chain security.
- Emerging Kubernetes tools and future projects.

Watch (or listen to) it here: https://kube.fm/abusing-distroless-harsha

🌟 What's the best instance for your Kubernetes cluster?
Check out Learnk8s's Kubernetes Instance Calculator and find out: https://learnk8s.io/kubernetes-instance-calculator

With @Birthmarkb "normal person" Farrell

Nicholas Morey, Senior Developer Advocate at Akuity, discusses his preference for using Kustomize and Helm in his GitOps repository.

He advocates for a pre-rendered deployment method, which involves pre-rendering manifests and storing the true desired state in Git as an artefact rather than relying on GitOps tools like Argo CD to render manifests during application.

Watch the full interview: https://kube.fm/kargo-gitops-nicholas

This interview is a reaction to Jacco's episode https://kube.fm/helm-flawed-jacco

Ivan Pedraza, Principal Engineer at Docker, highlighted the significant challenges posed by knowledge gaps* and complexity in the platform space.

Referencing the CNCF Landscape, Ivan emphasized the need to reduce cognitive load to aid teams in problem-solving and technology adoption.

Watch the full interview: https://kube.fm/simplify-docker-ivan

This interview is a reaction to Ori's episode https://kube.fm/network-policies-ori

Thomas Graf, VP and CTO of Cloud Networking and Security at Isovalent (part of Cisco), joins the debate around multi-tenancy architectures and the decision between sidecar and sidecar-less models.

Thomas suggests that the choice between a sidecar or a sidecar-less architecture, like those offered by Ambient or Cilium Mesh, should be based on specific needs and the balance between resource utilization and potential downsides.

Watch the full interview: https://kube.fm/on-prem-challenges-thomas

This interview is a reaction to William's episode https://kube.fm/service-mesh-william

In this KubeFM episode, Miguel Luna, Principal Product Manager at Elastic, discusses the intricacies of Observability in Kubernetes, including its components, tools, and future trends.

You will learn:

- The fundamental components of Observability: metrics, logs, and traces, and their roles in understanding system performance and health.
- The integration of AI technologies: how AI is shaping the future of Observability in Kubernetes.
- Practical steps for implementing Observability: starting points, what to monitor, and how to manage alerts effectively.

Watch (or listen to) it here: https://kube.fm/observability-kubernetes-miguel

🌟 What's the best instance for your Kubernetes cluster?
Check out Learnk8s's Kubernetes Instance Calculator and find out: https://learnk8s.io/kubernetes-instance-calculator

With @Birthmarkb "Richie Rich" Farrell

Lili Cosic shares her experiences with managing high cardinality in Prometheus metrics, particularly within Kubernetes environments.

Lili highlights the importance of leveraging Prometheus's built-in features to omit and drop unnecessary metrics before ingestion, emphasizing this practice as a highly recommended approach for optimizing observability tooling.

Watch the full interview: https://kube.fm/distrubuted-systems-lili

This interview is a reaction to Mat's episode https://kube.fm/foolproof-gke-mat

Initially drawn to Kustomize for its integration into kubectl and the promise of a new standard in project structuring with bases and overlays, Alexander Block's experience turned to disillusionment.

He found Kustomize limiting and overly complex particularly when compared to simple templating solutions. The requirement to constantly switch contexts and the unnatural project layout forced by Kustomize led him to conclude that, despite its advantages, it was insufficient for his needs.

Watch the full episode: https://kube.fm/kluctl-templating-codablock

Stéphane Estevez, EMEA Observability Market Advisor at Splunk, highlighted a crucial aspect of Kubernetes observability that often goes overlooked: the speed of data collection and processing.

In cloud-native environments, delays between incident detection and auto-remediation due to batch processing can be problematic.

Stephane suggests that future solutions should focus on faster alerting and reporting mechanisms, such as streaming, to enhance the efficiency of Kubernetes metrics collection.

Watch the full interview: https://kube.fm/real-time-o11y-stephane

This interview is a reaction to Mat's episode https://kube.fm/foolproof-gke-mat

Fahd Ekadioin, a Partner Engineer at Google Cloud, highlights Google Kubernetes Engine (GKE) as a superior solution, noting its trajectory towards ease of use with features like Autopilot.

Watch the full interview: https://kube.fm/best-gke-fahd

This interview is a reaction to Mat's episode https://kube.fm/foolproof-gke-mat

In this KubeFM episode, Ángel Barrera discusses Adidas' strategic shift to a GitOps-based container platform management system, initiated in May 2022, and its impact on their global infrastructure.

You will learn:

- The initial state and challenges: Understand the complexities and inefficiencies of Adidas' pre-GitOps infrastructure.
- The transition process: Explore the steps and strategies used to migrate to a GitOps-based system, including tool changes and planning.
- Technical advantages: Learn about the benefits of the pull mechanism, unified configuration, and improved visibility into cluster states.

Watch (or listen to) it here: https://kube.fm/platform-gitops-angel

🌟 Hardened Flux CD + 0 CVEs + SLSA + SBOMs
ControlPlane Enterprise for Flux CD enhances the security and stability of Kubernetes deployments through comprehensive security assurance. Learn more: https://control-plane.io/enterprise-for-flux-cd/?utm_source=kubefm

With @Birthmarkb "one of the hosts" Farrell

Frederic Branczyk, the CEO and Founder at Polar Signals, shares his perspective on the future of AI, emphasizing its subtle yet significant impact on augmenting human capabilities rather than replacing them.

Watch the full interview: https://kube.fm/future-configuration-frederic

Mircea-Pavel Anton, an MLOps Engineer, highlights Talos's advantage in having a much smaller image and lacking SSH, which significantly reduces the attack surface.

Interaction with the OS is done via an API, limiting an attacker's potential actions if they compromise the system.

Watch the full episode: https://kube.fm/talos-mircea

Jonathan Battiato, a Staff SDE at EDB, discusses the challenges and advancements in running data on Kubernetes.

He highlights the importance of trust as the primary obstacle, followed by concerns about reliability, availability, and locality.

Jonathan believes the community is progressing towards enabling everyone to run data on Kubernetes, with various storage drivers like Longhorn and Portworx addressing these critical elements.

Watch the full interview: https://kube.fm/trust-data-kubernetes-jonathan

This interview is a reaction to Steven's episode https://kube.fm/operators-steven

Edward Vielmetti, Developer Partner Manager at Equinix, discusses the unique aspects of running Kubernetes on bare metal.

Ed emphasizes the complexity of understanding the layers that build up to a Kubernetes cluster and suggests using a home lab to explore and gain hands-on experience.

Watch the full interview: https://kube.fm/innovation-bare-metal-ed

This interview is a reaction to Mathias's episode https://kube.fm/bare-metal-kubernetes-mathias

In this KubeFM episode, Kensei Kanada discusses Tortoise, an open-source project he developed to tackle Kubernetes resource optimizations.

You will learn:

- The complexities of resource optimization in Kubernetes, including the challenges of managing HPA, VPA, and manual tuning of resource requests and limits
- How Tortoise automates resource optimization by replacing HPA and VPA, reducing the need for manual intervention and continuous tuning
- The technical implementation of Tortoise, including its use of Custom Resource Definitions (CRDs) and how it interacts with existing Kubernetes components

Watch (or listen to) it here: https://kube.fm/tortoise-kensei

🌟 What's the best instance for your Kubernetes cluster?
Check out Learnk8s's Kubernetes Instance Calculator and find out: https://learnk8s.io/kubernetes-instance-calculator

With @Birthmarkb "But that's not Kubernetes" Farrell

Ben Hirschberg, ARMO's CTO, discusses the evolution of their approach to handling Kubernetes secrets.

Initially, they mapped secrets as environment variables but later transitioned to mapping them as files.

Watch the full interview: https://kube.fm/network-security-ben

This interview is a reaction to Mac's episode https://kube.fm/kubernetes-secrets-mac

Mohamed Hamdan Faris S M, a Cloud Development Engineer, highlighted the importance of scaling CoreDNS in large Kubernetes clusters.

Faris emphasized that while increasing CoreDNS replicas and implementing a Horizontal Pod Autoscaler (HPA) are essential initial steps, they are merely stopgap solutions. For a more robust approach, he recommended considering advanced solutions like Cluster Proportional Autoscaler and NodeLocal DNSCache.

Watch the full episode: https://kube.fm/coredns-scaling-farris

Chase Christensen, Staff Solutions Engineer at TileDB, discusses the potential of ambient service meshes and their advantages over traditional sidecar models.

Chase highlights the benefits of decoupling services from sidecars, noting the challenges of managing sidecar vulnerabilities and the complexities of operationalization.

Watch the full interview: https://kube.fm/streamlining-mlops-chase

This interview is a reaction to William's episode https://kube.fm/service-mesh-william

Sam "Frenchie" Stewart, CEO at Ensignia, discusses the importance of secrets management in organizational security.

He highlights the incremental steps from having secrets hard-coded in source control to using tools like TruffleHog to identify and transfer them into Kubernetes secrets.

Frenchie advocates for practical and easy-to-use security measures and recommends using shorter-lived credentials to minimize the impact of inevitable leaks.

Watch the full interview: https://kube.fm/secure-policy-frenchie

This interview is a reaction to Mac's episode https://kube.fm/kubernetes-secrets-mac

Alexandre Souza, a senior platform engineer at Getir, explores the challenges of over-provisioning and under-provisioning and discusses strategies for optimizing resource allocation using tools like Horizontal Pod Autoscaler (HPA) and Vertical Pod Autoscaler (VPA).

You will learn:

- How to set appropriate resource requests and limits to balance application performance and cost-efficiency in large-scale Kubernetes environments.
- Strategies for implementing and configuring Horizontal Pod Autoscaler (HPA), including scaling policies and behavior management.
- The differences between CPU and memory management in Kubernetes and their impact on workload performance.

Watch (or listen to) it here: https://kube.fm/hpa-at-scale-alex

🌟 This episode is sponsored by VictoriaMetrics. Start a free trial for VictoriaMetrics enterprise today https://victoriametrics.com/products/enterprise/?utm_campaign=LearnK8s&utm_medium=podcast&utm_source=Learnk8s

With @Birthmarkb "Peter Pan" Farrell