The Cloudcast

Brian talks with (@kelseyhightower; Kubernetes Lead @GoogleCloud) about confusion in the marketplace around Docker “compatibility”. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Kelsey’s Github Page (code, training, workshops, demos) Kelsey on The Hot Aisle (podcast) Kelsey on Kubecast (podcast) Kelsey on Google Cloud Platform (podcast) Show Notes: Topic 1 - Welcome to the show. For anyone that doesn’t know you, tell us about your current role with Google Topic 2 - This tweet created quite a storm yesterday, https://twitter.com/kelseyhightower/status/758790198603845632. It felt like it started as an acknowledgement of the breadth of the ecosystem, but then went sort of sideways. Topic 3 - Break down some of the concepts in play for us - Container Format, Container Runtime, Open Container Initiative (OCI), etc. Topic 4 - Help explain some of this in laymen’s terms for us - isn’t the Docker code open source? Are we getting close to a point where people will have to fork this if they want to use other schedulers? Topic 5 - Shifting gears a little bit - Kubernetes for beginners - where to start? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Aaron and Brian talk with Randy Kilmon (VP of Engineering at @black_duck_sw) about the open source vulnerabilities, securing containers and managing the lifecycle of rapidly changing software. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Black Duck Software Homepage [blog] 3 Steps to Building Container Security [blog] Black Duck’s Open Source Security report Show Notes: Topic 1 - Welcome to the show. Tell us a little bit about your background and your areas of focus at Black Duck Software. Topic 2 - For anyone that’s not familiar with Black Duck, what role does Black Duck play in looking at open source licensing vs. actively helping with security and vulnerabilities? Topic 3 - One of your areas of focus is containers and container security. Obviously containers is top of mind for lots of people. What’s the reality of container security and what are the areas where people should focus their attention? Topic 4 - Let’s talk about “pre-container” (developers) security vs. “post-container” security (operations). What are the “gates” applications should be going through, and where are people making mistakes today? Topic 5 - Can we talk about managing security in the container vs. security in the host? Topic 6 - We have a number of listeners that are going down a journey with containers, either directly (e.g. Docker) or via PaaS platforms (e.g. Cloud Foundry, OpenShift, etc.). What’s your guidance to them? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Allan Leinwand (@leinwand, Chief Technology Officer @ServiceNow) about the key characteristics of an “Enterprise Cloud”, why architecture is important for SaaS applications and how customers can achieve high availability in the cloud. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Service Now Homepage [blog] Introducing the Enterprise Cloud [blog] Why Cloud Architecture Matters [blog] The Quest for Near-Perfect Availability Show Notes: Topic 1 - Welcome to the show. Tell us a little bit about your background (lots of interesting companies and roles) and what you’re focused on at ServiceNow today.  [Maybe talk a little about what excites you about Enterprise apps vs. Consumer apps (e.g. Zynga) Topic 2 - Technologists (mostly IT Ops) tend to be drawn to IaaS services because it looks like their current data center and there are lots of moving parts. SaaS (and to some extent PaaS) gets less attention because SaaS is supposed to hide complexity. What are the basics that many companies miss or don’t understand? Topic 3 - You recently wrote a blog about Enterprise Cloud and Multi-Instance vs. Multi-Tenancy. Don’t things like VMs or Containers provide enough abstraction on compute resources? Topic 4 - What are the realities of Security in a Multi-Instance vs. Multi-Tenancy environment, especially as it relates to audit and compliance and potential hacking? Topic 5 - ServiceNow lives at the intersection of ITIL and DevOps - essentially the transition that many companies are trying to make with their applications and operations. How much of these transitions are the tools/platforms vs. people vs. architectures? Topic 6 - What is your guidance to IT teams and developers as they start using the cloud more, or integrating new applications into their business? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Dan Kohn (@dankohn1, Executive Director of the Cloud Native Computing Foundation) about the role of foundations, the CNCF, the emergence of containers, co-opetition in the marketplace and how web scale technologies are getting used by Enterprise companies. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos CNCF Homepage Dan Kohn named Executive Director of CNCF Show Notes: Topic 1 - You were recently named Executive Director of the CNCF. You have background with the Linux Foundation and strong entrepreneurial experience. Tell us about yourself. Topic 2 - CNCF got started with Kubernetes, but “Cloud Native Computing” is a very broad domain. What’s the charter of CNCF and how should we think about it in relation to the many other foundations that exist today (Cloud Foundry, OpenStack, Open Networking, etc.) Topic 3 - Foundations are tricky because of the balance between technology advances and competitive markets. How do you view your role in helping to structure that balance? Topic 4 - This past week at DockerCon, Docker announced some changes to their technology which will potentially have an impact on Kubernetes and customer choice. Obviously CNCF can’t influence a specific vendor’s approach to the market, but how does leader of a foundation react when the potential market dynamics change? Topic 5 - How often do you expect to get out and talk to end-customers and how does their feedback get incorporated into foundation activities? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Matt Colyer (@mcolyer; Product Manager at @github | Founder of Flagr and Easel) about the evolution of “software is eating the world” - how application development is evolving; how companies are changing the organizations and process; how IT organizations are dealing with open source software and how SaaS applications like GitHub have to evolve. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Github Homepage Github for Business Show Notes: Topic 1 - Welcome to the show. Let’s talk about your background, not only at Github, but also as a developer and entrepreneur prior to Github. Topic 2 - We all know the famous “software is eating the world” quote from Marc Andreessen, but this means that more companies must be building their own software. Let talk about what Github sees from that perspective - establishing software development as a core business competency. (“insourcing”) Topic 3 - It’s been interesting to watch more companies, not just vendors, actively participate in open source communities - not just using the software, but actively contributing to existing projects and starting their own projects. Topic 4 - The public cloud has awesome services available, but not every company feels like they can use the public cloud, so we’re seeing more “on-premises” offerings from public cloud companies. Can you talk about the benefits and challenges of these offerings? Topic 5 - What’s a trend that you’re seeing from smaller companies that you don’t think enough larger business follow today, but could be easily adopted to make them better at software development or just more agile as a business? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Adrian Cockcroft (@adrianco, Technology Fellow at @BatteryVentures) about the recent Battery Ventures Open Source Summit (#BVOSS), trends in open source business models and how VC are thinking about investing in companies that leverage open source software. Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos. Show Links: Podcasts of all discussions from the #BVOSS event will be published in podcast form soon - details TBD Battery Ventures Homepage Adrian’s blog on Battery Ventures “Powered” Battery Ventures Open Source Summit - #BVOSS on Twitter RedMonk discussion of Accel Partners Open Source conference Rob Hirshfeld’s thoughts from the event Are VC’s a Funding Bridge for OSS Projects? Show Notes: Topic 1 - It’s been awhile since you were on last. What are you focus areas these days? Topic 2 - Related to OSS-centric companies, Aaron and I discuss the “will they make any money” question all the time. BV had an event focused on this recently. What was the event? Topic 3 - There seemed to be a theme that OSS projects need to be delivered as-a-service. I saw a tweet that said, “Uber theme at #bvoss today: we need an OSS license that prevents AWS to make money off of our OSS code.” Topic 4 - There were several large end-customers (e.g. - banks) in attendance, talking about their OSS projects. Are they making any significant contributions to these projects, or is this mostly an effort to help them hire developers? Topic 5 - So what were the major takeaways from the conference? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Aaron and Brian talk about the 2016 Mid-Year State of the Cloudcast (and Cloud), what they expect to see in the 2nd half of 2016, why they are interested in the Serverless movement, and why there will be a new serverless-focused podcast soon. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Debunking Serverless Myths The next Big Thing in Cloud Computing A Personal Report from Serverless Conf Serverless could have just been called 'Jeff' WTF is Operations Operational Best Practices Show Notes: VelocityConf is coming soon! Want to register right now? Use code PCCLOUD20 for 30% VelocityConf registration Topic 1 - State of the Cloud - Mid-2016: the dangers of public cloud revenue (lack of) transparency, money still pouring into Cloud-native platforms (too many choices?), the legacy vendors are churning, if crazy valuations crash (Uber, etc.) lead to people eventually falling off the cloud-native bandwagon? Topic 2 - The 2nd-half of 2016 - Expectations: Topic 3 - Why are we curious about Serverless? Topic 4 - What do we know about Serverless? - Go read Sam’s article. He uses the term unit of scale but I also think using the term demarcation point also works. Data Center = server, IaaS = OS, PaaS = Application, Serverless = Application Function - You can not overprovision or underprovision Lambda, it is just there like S3 and is called as needed and autoscales for you. Topic 5 - The JeffCast? Discussing our plans around a Serverless podcast - Serverless + IoT (the next 5-10 years), partnering with others, trying to consolidate some great content Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Kim Weins (@kimweins, VP of Marketing) and Tim MIller (@Miller_Tim, VP of Engineering) at @Rightscale about market adoption of DevOps and Containers, migrating applications to containers, and the challenges of a container-centric deployment to production. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos RightScale State of the Cloud: DevOps report Rightscale “Project Sherpa” blogs - moving apps to containers “Project Sherpa” webinar Show Notes: Want to register for VelocityConf right now? Use code PCCLOUD20 for 20% off registration Topic 1 - Give us a sense of the scope and scale of the Rightscale platform and how involved it is in companies and applications that are leveraging the fast growing public cloud. Topic 1a - What were the biggest takeaways that you observed in the data from the 2016 Cloud / DevOps report? Topic 2 - Why did Rightscale take on “Project Sherpa” in the first place? Topic 3 - What were the initial big hurdles, red flags or things that told you that maybe this wasn’t a good idea? How did you overcome those challenges? Topic 4 - What were some of the lessons you learned through the transition? Did you take a bimodal approach, or was this an “everybody” transition, or was there another people/culture/process approach? Topic 5 - On the dev-side, containers are getting much better understood. How did you manage the ops portion? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Shlomi Ben Haim (@ShlomiBenHaim; CEO of @JFrog) about social software distribution platforms, the challenges of CI/CD systems, how non-tech-centric companies are embracing software cultures and if there are emerging ways to make new software development easier. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos JFrog Homepage JFrog Users Conference (#SwampUp) JFrog Artifactory JFrog Bintray JFrog Xra Show Notes: Want to register for VelocityConf right now? Use code PCCLOUD20 for 20% off registration Topic 1 - Welcome to the show. Tell us a little bit about your journey with JFrog over the last 7 or 8 years. Topic 1a - For anybody that isn’t familiar with all the things that JFrog brings to market, can you give us the high level overview? Topic 2 - There’s lots of talk these days about cloud-native apps and microservices and software eating the world. But I feel like there isn’t enough discussion about getting all that software into production, which is the most important part. How well do companies understand that challenge and what tools are available to help them get better at testing and deploying? Topic 3 - Everybody wants to highlight that software delivery can go faster, but it’s a complicated system with lots of inputs and outputs. Let’s talk a little bit about the key areas where companies need controls in that delivery system - either for managing lots of inputs, or managing security, or making sure that updates don’t break too many things in production. Topic 4 - There are lots of Silicon Valley customers that discuss and use DevOps because their core business is technology. Can you give us some insights into how this evolution to “every business is a software business” outside of technology-centric companies? Topic 5 - Building software is difficult. Are you seeing any trends that show you that there are new ways to make it easiest and more accessible to more companies? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel

Brian talks with Stephen Fink (@sjfink, Distinguished Research Staff Member @IBM) about serverless computing, the architecture of IBM OpenWhisk, the open source community involvement and the use-cases he sees for this emerging technology. Show Links: Get a free book from O'Reilly media or use promo code PCBW for a discount - 40% off Print Books and 50% off eBooks and videos Stephen Fink’s Background at IBM Stephen’s Research Page IBM OpenWhisk OpenWhisk Source Code on GitHub OpenWhisk on IBM BlueMix [Example - video processing] “Dark Vision” [Example - video processing] “Skylink” [Example - “Node Red” coordination for IoT devices] Show Notes: Want to register right now for VelocityConf? Use code PCCLOUD20 for 20% off registration. Topic 1 - Welcome to the show. Give us some of your background in IBM’s Research group. Topic 2 - “Events-based” and “Serverless” are terms that are starting to become more widely used. What types of challenges (use-cases) did you hear from developers that led you to create OpenWhisk? Topic 3 - Let’s talk about the OpenWhisk architecture. The OpenWhisk model consists of three concepts: trigger: a class of events that can happen
 action: an event handler — some code that runs in response to an event
   rule: an association between a trigger and an action
 Topic 3a - What are some of the really important things that people need to know about OpenWhisk? How it is different from other serverless frameworks that are starting to come into the market? Topic 4 - Let’s walk through some of the early use-cases you’ve seen (or built). Topic 5 - OpenWhisk has gotten some attention because it’s open-source. It’s still early, but where do you expect to see the most contribution - core OpenWhisk or at the edges around things that are specific to application factors? Feedback? Email:show at thecloudcast dot net Twitter:@thecloudcastnet YouTube:Cloudcast Channel