DevOps and Docker Talk: Cloud Native Interviews and Tooling

Bret Fisher
undefined
7 snips
Jul 15, 2022 • 1h 13min

Argo CD Past & Future, with the Creators

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by the co-creators of the Argo project and co-founders of Akuity - Hong Wang and Jesse Suen - to discuss the state of Argo and their new Akuity offering for Argo CD in the Cloud.Chances are, you've heard of one or more of the Argo projects. They include Argo Workflows, Argo CD, Argo Events, and Argo roll-outs. Argo is one of those Kubernetes projects that is so common for teams to choose that it's nearly an assumption that every team is using one of their tools in a cluster or two. Hong Wang and Jessie Suen helped co-create the Argo project years back at Intuit and have now co-founded a growing startup called Akuity. The company is focusing on making the Argo products better and creating SaaS offerings for the Argo tools. In this episode, we get a perspective on where the Argo tools came from and what the team behind it is doing. Streamed live on YouTube on May 26, 2022.Unedited live recording of this show on YouTube (Ep #171).★Topics★Argo CD homepageAkuity homepageAkuity news on more fundingArgo CD in the cloudArgoCon in SeptemberDeclarative setup of Argo CD★Twitter Links★ArgoAkuityJesse SuenHong Wang★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (00:53) - Custom intro (01:42) - Main show (02:02) - Introductions (02:29) - Announced Argo Funding (03:37) - Argo and Akuity (05:22) - The Origin Story (11:16) - How did CD happen? (14:05) - The case of having a GUI (18:11) - Other Argo Products (19:17) - Progressive Delivery (24:00) - Where does Akuity fit in? (26:21) - Outsourcing Infrastructure Tooling (28:03) - Is there a beta? (28:46) - Question: Getting started with Argo and Gitops (30:41) - Why they started Akuity (31:44) - Release cycles and what's next? (32:43) - Demo? (34:47) - More questions (34:51) - Question: Gitops is considered Devops best practice? (36:24) - YAML is the best we've got (38:03) - Nobody is backing out of Gitops (39:12) - Infrastructure Deployment (41:33) - Deployment AND Continuously Monitoring Status (45:16) - Argo CD is currently the Kubernetes dashboard (46:36) - Raw Resources are Not the Ones You're Controlling (49:14) - Argo CD is the first thing you do (50:50) - Question: Argo CD vs Argo CD HA (51:58) - Question: Max Scale Apps to Kubernetes Cluster Count (53:12) - ArgoCon (54:00) - Question: Deploying all Argo Products Together (55:03) - Question: Checking IaC created on Terraform (57:49) - Question: Deploy all ArgoCD Configs Declarative (58:49) - Question: Argo for pre-Kubernetes system (01:02:53) - Question: Upgrading Argo from Old to New (01:04:38) - Question: Adding new clusters to Argo declaratively (01:07:13) - Writeback: Tracking UI changes in Code (01:08:20) - Come back againq (01:10:37) - Question: Triggering Monitoring Alerts (01:11:45) - ArgoCon (01:12:20) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Jul 1, 2022 • 50min

Infrastructure as Code, Patterns and Practices

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by Rosemary Wang, a developer advocate at Hashi Corp. She recently finished a Manning book, titled Infrastructure as Code: Patterns and Practices. They discuss how infrastructure as code fits into DevOps and Gitops, and how you can get started with IaC and run over some important patterns, such as controlling versioning, IaC testing and managing costs.Rosemary worked at ThoughtWorks previously, and it was interesting to hear her experiences on learning from senior engineering, and how pairing and other types of mentorship can help. Streamed live on YouTube on April 28, 2022.Unedited live recording of this show on YouTube (Ep #168).★Topics★Infrastructure as Code: Patterns and Practices, with examples in Python and Terraform ★Rosemary Wang★Rosemary on Twitter ★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (00:53) - Custom intro (03:30) - Main show (03:37) - Introductions (04:26) - The Book (05:43) - Rosemary's background and how the book came about (07:23) - Mentors and Learning (08:45) - Where did the book idea come from? (10:04) - Virtual conferences (11:12) - Upcoming talks? (11:44) - GitOps is a key topic on this show (12:31) - How Rosemary ended up in IaC (13:04) - Everything should be automated (13:59) - How is GitOps introduced in the book? (16:15) - Find an infrastructure provider with a good API (17:06) - Find one tool (17:50) - Ideas last longer than code (18:26) - Do I need to know how to code? (19:28) - Elevator pitch on patterns in the book (21:08) - Testing is opinionated (21:25) - Security and compliance (21:52) - Costs of infrastructure (22:36) - Do it the hard way first (23:11) - Team norming (24:31) - Invest in courses (26:14) - Keep information close to the code (29:32) - Automatic documentation in Terraform (30:12) - GitHub Copilot for documentation (31:32) - Question (35:38) - Tech toil vs Automation (38:08) - Recreate, not restore (40:23) - Question: Terraform Cloud vs Terraform (43:38) - When and where to get the book? (44:46) - Bookstores (45:26) - CCNA tip (48:41) - Winding down (49:25) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Jun 17, 2022 • 59min

Applications-as-Code with Shipa

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by Ravi Lachhman, Field CTO at Shipa, to discuss the basics of Shipa application and policy management, and show off the developer experience that Shipa brings to apps running on IaC and GitOps tools like ArgoCD,  Crossplane, Terraform, Kubernetes, and more.Shipa is focused on the layer above the infrastructure where application developers can avoid other Kubernetes manifest tools like Helm or Kustomize, and create a cleaner contract between what their application needs are and how the infrastructure provides them.If you've done Kubernetes YAML long enough, you know that it can get quite complex and verbose, and it requires both infrastructure and developer roles or knowledge to fully configure it. So you kind of got to know both worlds. But Shipa wants to fit in the middle somewhere, not replacing the infrastructure tools like Terraform or Crossplane, but rather working on top of them, providing an easier way to describe your apps from a dev's point of view and how they work on top of your infrastructure. It focuses on the application requirements, not necessarily how those requirements are implemented. Streamed live on YouTube on April 14, 2022.Unedited live recording of this show on YouTube (Ep #166). Includes demos.★Topics★Shipa website Shipa exampleDevOps Days Atlanta★Ravi Lachhman★Ravi on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (02:31) - Bret Custom Intro (05:01) - Main Show (05:41) - Introductions (06:03) - About Ravi (07:16) - Any advice for starting engineers? (10:16) - Never stop learning (11:48) - It's ok to get it wrong the first time (12:20) - It's crucial to create reproducible deployments (13:44) - Infrastructure-as-code (14:50) - Application-as-code vs Infrastructure-as-code (17:26) - Shipa is a two-part thing (18:38) - What does Shipa 'replace'? (21:24) - Is Shipa strictly designed for Kubernetes? (22:28) - One-line developer experience (25:58) - Bret was a diehard swarm fan (28:49) - How flexible is this? (30:50) - Docker can't make pants (31:38) - What Bret was hoping might be implemented (33:23) - Preparing for demo? (33:43) - Bret doesn't want to develop in Kubernetes (35:37) - Demo intro (36:08) - Crossplane (37:41) - Q: Shipa working through Crossplane? (38:02) - Q: How else can I adopt Shipa without Crossplane? (39:03) - Q: Shipa versions - on-prem and SaaS (44:42) - Question: Will it override the YAML of Kubernetes? (49:35) - Devs shouldn't handle so much infrastructure (50:39) - Where else can people get started? (51:06) - Q: OAM and OpenAPI (52:41) - Q: Is AAC similar to OpenAPI? (53:11) - Q: What is Shipa's Roadmap or Vision? (55:29) - Networking is complex (57:26) - Winding down (59:06) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Jun 3, 2022 • 54min

Nomad Orchestration

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by Erik Veld, Manager, Developer Advocacy at HashiCorp, the creators of Nomad. Nomad is an orchestrator like Kubernetes and Swarm but it has a unique set of features that make it an interesting alternative on multiple levels. It's known for having a much simpler infrastructure design than Kubernetes, and also having a stronger community and feature release cycle then Swarm. Erik talks about the basics of Nomad, the reason it was created and runs through some demos. Streamed live on YouTube April 7, 2022.Unedited live recording of this show on YouTube (Ep #165). Includes demos.★Topics★Nomad website Nomad GitHub page Tech-Nomadic, Run Your Software Anywhere (YouTube) Managing DigitalOcean Kubernetes clusters with Terraform (YouTube)★Erik Veld★Erik on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:54) - Bret Custom Intro (02:28) - Main show (03:01) - How Eric got to HashiCorp (04:40) - What tools does he work on at HashiCorp? (06:35) - How did Nomad start? (08:46) - Nomad elevator pitch (10:05) - How things were done before with VMs (11:09) - How does Nomad run? (12:01) - Swarm replacement? (13:26) - Other Nomad use cases for starting with it? (13:50) - Single binary (15:18) - Question (15:58) - What does the name Nomad mean? (16:43) - Demo question (17:11) - Demo intro 1 (17:37) - Question: GUI (18:25) - Question: Running console or not? (18:50) - Question (19:25) - Question: Running in containers? (19:55) - Using the orchestration for non-container workloads (22:51) - What was console doing in the demo? (25:00) - Question: Architecture (26:26) - Intentions (26:33) - Question (27:07) - Namespaces in Nomad (27:27) - Question about console hosted solution (28:58) - What are the pieces I need to run it? (29:31) - How does console run? (30:26) - Host networking or isolation? (31:57) - Languages and dependencies (37:40) - How are you controlling versions? (40:35) - Docker Driver? (41:40) - What other drivers? (42:32) - Question about local dev environments (43:17) - Question about extensions (46:18) - Little demo starting a cluster (47:38) - A little rabbit hole referencing a demo from last week? (48:14) - Question (49:17) - More demos? (49:18) - Demo intro 2 (49:24) - Question (50:03) - Question Lambdas (50:24) - An OS maybe? (50:47) - The last question? (51:56) - Winding down (52:55) - Join the Minecraft server? You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
May 20, 2022 • 45min

GitOps with Pulumi

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by David Flanagan, aka Rawkode Academy, from Pulumi to show off how Pulumi infrastructure-as-code can improve GitOps pipelines. Our conversation focused on what GitOps and Pulumi are and how they work together to manage your infrastructure and app deploys. Streamed live on YouTube on March 24, 2022. Unedited live recording of the complete show on YouTube (Ep #164). Includes demos.★ Topics ★PulumiProductK8s OperatorK8sGitOpsLaw of Demeter1Password SSH management★ David Flanagan aka Rawkode Academy★Rawkode Academy, Live weeklyRawkode on Twitter★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Bret custom intro (01:53) - Main show recording (02:44) - What is clustered (03:29) - Fixing clusters challenge (04:28) - Prove your chops (05:03) - The best way to learn (06:57) - What is Pulumi? (11:13) - The GitOps approach (12:54) - People create drift (15:18) - Now we see tooling designed for GitOps (17:09) - Pulumi can help with drift (18:14) - Pulumi provides a better developer experience (20:24) - Difference between operator and resource provider (22:33) - What does the operator replace? (24:27) - Law of Demeter in GitOps (34:13) - Ruby (35:03) - StackOverflow's dev survey (36:16) - Docker container revolution (38:34) - Demo intro (39:04) - Demo (40:45) - Demo ended I think (43:08) - RawKode show (43:53) - Demo stopped and promos (44:44) - Show winding down (45:00) - Template outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
May 6, 2022 • 43min

Docker Desktop for Linux is Here!

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by Anca Iordache and Dave Scott, software engineers at Docker Inc, to talk about why they made Docker Desktop for Linux and how it's different from running the Docker Engine daemon. Streamed live on YouTube on 21 April 2022.Unedited live recording of the complete show on YouTube (Ep #167). Includes demos.We talk about the origins of Docker Desktop for Linux, why it needs to exist, and how it's different than  running Docker Engine on the native host. Docker Desktop for Linux behaves like Mac and windows versions where it uses a VM and we clear up some confusion around that. Further, we talk about some of the functionality with operating it in tandem with Docker Engine on the host so you can run both at the same time and use context to switch between them. ★ Topics ★Download Docker Desktop for LinuxDocker RoadmapDocker Desktop for Linux GitHub IssuesDocker Developer Preview ProgramDocker Community SignupDockerCon 2022★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Show intro (00:53) - Bret intro (01:56) - Main show (02:14) - About Dave (03:15) - About Anca (04:45) - Compose is her favorite (06:16) - Why does Docker Desktop exist? (07:13) - Linux as main desktop os? (08:29) - Docker Desktop Roadmap (09:22) - Was it a popular feature request? (10:01) - Is it in beta? (10:56) - The architecture of Docker Desktop (13:09) - Flexibility for different distros (14:05) - Distro roadmap (16:10) - Host engine dependency (17:28) - Contexts (19:44) - DockerCon plug (19:52) - Demo break intro (20:22) - Question (21:35) - Question extensions (22:02) - Continued demo (22:36) - Anca is back (22:59) - Question which version of Ubuntu was it tested on (24:32) - Another demo notice (24:39) - Demo (24:52) - Question (25:07) - Question on arm64 support (28:24) - Interesting question inside demo (31:15) - Question release cycle (31:37) - Question running both versions on Linux (32:07) - Question about bug reports (32:30) - Nice chat about dev environments (34:05) - Comment devs focus on your application (34:32) - Question what's the next OS (35:02) - Question about dev envs (35:47) - Extensions and dev environments (36:03) - Docker compose v2 vs v1 (37:15) - Wrap up (38:30) - Last minute questions (40:18) - Question (42:12) - DockerCon plug (42:31) - Winding down (42:45) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Apr 22, 2022 • 1h 5min

Kubernetes VCluster for "Clusters in Namespaces"

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret is joined by Lukas Gentele and Rich Burroughs of Loft Labs to talk about vcluster, a Kubernetes distribution that can run inside an existing cluster namespace, aka "clusters in clusters." Lukas is the CEO of Loft Labs and Rich is their Senior Developer Advocate. VCluster is quite a universal tool for running fully-fledged Kubernetes clusters for dev and test environments and even potentially in production. In this episode, Lukas and Rich break down a ton of ways vcluster is currently being used and where they see it going in the future. Streamed live on YouTube on March 10, 2022.Unedited live recording of the complete show on YouTube (Ep #162). Includes demos.★Topic Links★Loft LabsVCluster★Lukas Gentele and Rich Burroughs★Lukas Gentele on TwitterRich Burroughs on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Template intro (00:53) - Bret custom intro (02:58) - Main show recording (03:00) - Show starts (03:05) - Introducing the guests (04:01) - What we're talking about today (04:15) - Their background (04:26) - Lukas (05:43) - Loft Labs Elevator Pitch (07:57) - Rich (09:14) - Where did the name Loft come from? (09:44) - Say hi to the regulars in chat (10:09) - VCluster (10:24) - VCluster Origin Story (12:57) - VCluster is open source (13:25) - Is VCluster in CNCF? (14:34) - Q: How does VCluster compare to Kubernetes hierarchy old namespaces? (17:53) - Q: How do you deal with system updates and upgrades? (20:19) - Running not only your own distro (21:39) - Q: Running production workloads in vcluster (24:25) - Less tolerant of an IT overlord (25:53) - The Netflix model (26:21) - Getting out of the developers' way (28:08) - Namespaces are not clusters (29:15) - Demo: Running control plane inside another cluster (32:40) - Bret's Demo Intro (33:11) - Demo ended? (36:14) - VCluster Inception (37:22) - Q: Do workloads persist on restart? (38:44) - Q: How does persistence work on storage? (40:15) - Q: Can VCluster run VCluster? (40:27) - Q: Is there a resource name size limit? (41:52) - Q: Does VCluster create virtual nodes? (46:06) - Q: Quotas or limits or shared memory CPU (48:38) - Q: VClusters inside cloud systems (49:10) - Q: Can virtual nodes have diff. characteristics? (50:28) - Q: Where do you store persistent data? (51:00) - Q: How do you dry run commands with server and client? (51:10) - Q: How well are pods isolated? (53:33) - Q: Access data in nginx pod? (54:24) - Isolated mode feature coming soon (56:17) - Q: What level do tolerations get forced? (58:52) - Q: How do vcluster pods communicate with prime cluster pods? (01:02:50) - Q: Repeated question? (01:03:43) - Show winding down You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Apr 8, 2022 • 1h 11min

Enterprise Kubernetes Barriers

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Bret and his guests - Jamie Duncan and John Osborne, authors of "OpenShift in Action" - talk about Enterprise Kubernetes adoption, the barriers teams encounter and why it's worth solving the hard problems in enterprise teams by standardizing on Kubernetes. Jamie is a customer engineer at Google Cloud and John is chief architect at RedHat. In this episode, we talk a lot about Kubernetes as the new common non-vendor specific infrastructure API. Streamed live on YouTube on March 3, 2022.Unedited live recording of this show on YouTube (Ep. 161).★Topics ★40% off Manning books and products: poddevt19 http://mng.bz/raEEOpenShift in Action Google AnthosKnative EventsHalfemptyKubeVirtKata Containers★John Osborne and Jamie Duncan★John Osborne on TwitterJamie Duncan on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:54) - Bret custom intro (02:03) - Show starts (02:21) - Introductions (04:24) - Showing the book (09:10) - Why is OpenShift special? (12:11) - OpenShift Multi-Cluster Single Pane of Glass (15:00) - Anthos elevator pitch (17:36) - Question (19:45) - Which Kubernetes distribution? (24:03) - Find a balance (25:58) - Laggards on any new project (26:37) - Better hygiene (27:23) - You pay for it one way or another (30:37) - Problem of legacy monolith apps (32:25) - Question: How long container tech will stand? (33:56) - Cloud events (40:05) - Choose a product for a decade (42:09) - Challenges to adoption (43:46) - Most breaches are around misconfiguration (44:56) - Cloud stack and learning curves (45:57) - How long is your skillset valid for? (47:53) - Exhaustion of the projects (48:19) - Build a most-modern environment and up to date (51:58) - Keep code sane with linting (53:30) - Fuzzing with Halfempty (55:36) - Question (59:56) - Question (01:04:46) - Question (01:09:47) - Show winding down You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Mar 25, 2022 • 49min

Kubernetes Policy Management with Kyverno and Nirmata

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾Jim Bugwadia joins Bret to discuss Kubernetes policy management and "intelligent guardrails for K8s." Jim is the CEO and co-founder of Nirmata. He's also the founder of Kyverno, an CNCF Sandbox Project and open source project for managing policies in Kubernetes. We talk about what Kyverno is, what it isn't, and what problems it solves. We also talk a bit about Narmada and how it expands on that.If you're in a team using Kubernetes together, controlling settings and standards in your workloads and clusters can be a constant source of frustration unless you have something to govern those policies across all your workloads and clusters.Streamed live on YouTube on Feb 24, 2022.Unedited live recording of the complete show on YouTube (Ep #160). Includes demos.★Topics ★Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources, and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources plus ensure OCI image supply chain security. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.Nirmata "Intelligent Guardrails for Kubernetes." Security, Compliance, and Operational Readiness of Kubernetes Across the EnterpriseSigstore Blog re Sigstore: "Linux Foundation’s Sigstore Aims to Secure Software Supply Chains"OWASP Open Web Application Security Project ★Jim Bugwadia ★Jim on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Bret custom intro (01:53) - Sponsorship (01:55) - The Guest (02:23) - How Jim got to Nirmata (06:11) - Their focus (07:17) - What is policy management? (10:17) - What's in scope? (10:32) - Demo (13:13) - Demo intro (13:43) - Demo (13:55) - What things aren't covered? (15:37) - What will be enhanced in the future? (18:47) - Demo (19:06) - Nirmata and Kyverno (20:30) - Demo (22:38) - What does the adoption look like? (23:13) - Demo (23:36) - Open source or Saas First? (24:41) - What's the future of Nirmata? (30:09) - Where to look besides Nirmata? (31:08) - Demo about sigstore (36:58) - Questions (37:02) - Question: Calico network policies (38:43) - Question: Start with Kyverno? (41:54) - Questions rapid fire (41:57) - Question: Likely to be merged into Kubernetes? (42:52) - Question (45:47) - Comment about bandwidth and podcast (47:03) - Where to go? (48:36) - Template outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com
undefined
Mar 11, 2022 • 1h 4min

Container Management with Portainer

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course.https://courses.bretfisher.com/waitlist 🍾In this episode, Bret is joined by Portainer's co-founder and CEO, Neil Cresswell, to get an update on their product. If you haven't heard of Portainer, it's one of the original web apps to manage Docker, then swarm and now Kubernetes. This is one of Bret's top 10 tools for consideration to manage your container environments. Neil will show off the latest from Portainer.io. Streamed live on YouTube on February 3, 2022.Unedited live recording of the complete show on YouTube (Ep #157). Includes demos.★Topics★Portainer Portainer in DigitalOceanPortainer in Multipass★Neil Cresswell★Portainer on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:55) - Bret custom intro (02:08) - Live show (02:56) - How did Portainer come about? (07:26) - Portainer elevator pitch (08:52) - How long has Portainer been around? (09:43) - Open Source or Community Edition (10:35) - How do you run it? (11:18) - Portainer vs Swarm (16:05) - Demo Multipass (17:49) - Where does Portainer run? (18:47) - Demo (21:21) - Question (22:23) - Question + Demo (23:37) - Metrics are not stored (25:04) - Demo (25:47) - What stores is Portainer available in? (26:32) - Templates (27:30) - Question comparing to Rancher (29:47) - Demo (30:22) - What is gitops? (31:51) - Don't put Kubernetes on the internet (33:10) - Application deployment (34:12) - Demo in response to question (35:47) - The change window + question (38:28) - Question, sort of (40:40) - Protections and read-only (42:21) - Question (42:37) - Question (49:40) - Questione (50:44) - Question (51:33) - What good is a CLI? (52:22) - Creating clusters on cloud providers (55:17) - Docker and Kubernetes at the edge (58:38) - Podcast, events (59:26) - What's coming up? (01:00:42) - Show winding down You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app