PLAY PODCASTS
DevOps and Docker Talk: Cloud Native Interviews and Tooling

DevOps and Docker Talk: Cloud Native Interviews and Tooling

193 episodes — Page 2 of 4

Ep 143AWS Lambda Containers

Bret and Nirmal are joined by Ken Collins, AWS Serverless Hero and Principal Engineer at Custom Ink to discuss all things Lambda and to dig into the details of running containers in serverless.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Ken and I have known each other for probably 15 years in the local tech scene here in coastal Virginia. And I've always respected him for being a leader in that community, always wanting to talk at a meetup or help in some way. So when he reached out wanting to talk about his company using containers on AWS Lambda, it was an easy sell for me because I knew it would be a great show. And then I learned some of the updates Lambda has had over the years, particularly when it comes to container workflows. We had some great audience questions and no shortage of topics around using modern Lambda and serverless.Live recording of the complete show from September 7, 2023 is on YouTube (Ep. #233).★Topics★Custom Ink tech blogRails and LambdaLambda Web AdapterLambda sidecar pattern in KubernetesThe case for Rails on LambdaLambda RAG OpenAILearn ServerlessCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Ken Collins - Guest Nirmal Mehta - Host (00:00) - Intro (01:27) - What Does Lambda Have to Do with Containers? (10:14) - Is There ARM Available in Lambda? (13:44) - What is Web Adapter? (19:54) - Cold Starts in Kubernetes vs Lambda (31:32) - Patterns for Lambda Communicating with Other Services (40:24) - Using Lambda Simultaneously for HTTP and Sockets (43:30) - What is Lamby? (45:05) - Hiding Function URLs Behind Custom Domain (45:53) - Are There Sample Lambda Project Re pos? You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 20, 202349 min

Ep 142Ephemeral & Preview Environments for Compose and Kubernetes

Bret and Nirmal are joined by Grayson Adkins and Josh Thurman on the show. They are co-founders of Uffizzi, an environments-as-a-service company for Docker Compose and Kubernetes.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾We talk about ephemeral environments in all their forms. You might call them preview environments, developer environments, or pull release environments, which is my favorite way to use these environments-as-a-service. But regardless of the many ways to use ephemeral environments, it's great to see a growing set of tools in the cloud native community for automating the spinning up of fresh environments with Kubernetes manifests, helm charts, or even Docker Compose YAML. Uffizzi is using the open core model, meaning that the core part of their product is open source. Live recording of the complete show from August 24, 2023 is on YouTube (Ep. #231). Includes demos.★Topics★Uffizzi websiteUffizzi Quick StartUffizzi on LinkedInUffizzi's YouTube Channel Creators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Nirmal Mehta - Host Grayson Adkins - Guest Josh Thurman - Guest (00:00) - Intro (01:58) - Uffizzi Elevator Pitch (08:00) - Uffizzi's Typical Customer Workflow (30:11) - Is the preview environment open to the world? (36:18) - When not everything is in Kubernetes (38:52) - Getting started with Uffizzi today (40:45) - Previewing projects that are co-dependent You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 6, 202343 min

Ep 141Codefresh and Argo CD with Dan Garfield

Bret is joined by Dan Garfield of CodeFresh to talk about growth of GitOps as a standard, growth of Argo, and more.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Dan is the Co-founder and Chief Open Source Officer of Codefresh, a CI/CD platform powered by GitOps and Argo. He helped launch the GitOps Working Group and helped lead the creation of the Open GitOps principles. As an Argo Maintainer, Kubernaut, Google Developer Expert, he helps companies and individuals adopt Argo with GitOps and streamline their CI/CD.We take some great questions about how GitOps is different than just triggering deployments and other automation platforms. And we also dig into the four principles of GitOps and how Codefresh uses Argo CD as a part of their CI/CD offering. Live recording of the complete show from July 27, 2023 is on YouTube (Ep. #227). Includes demos.★Topics★CodefreshGitOps CertificationOpenGitOpsArgo CDArgo CD AutopilotCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Dan Garfield - Guest (00:00) - Intro (08:39) - GitOps Guide and Principles (15:17) - What if you don't have Kubernetes? (22:31) - Reusability and Modern Automation (26:54) - ArgoCD Portability (32:27) - Why use GitOps? (41:07) - GitOps Certification with Focus on Argo (43:30) - GitHub Flow or Trunk-based Development (56:23) - Combining Dagger with Argo (58:19) - Deploying Argo CD (58:51) - Argo with local Git repo branch You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Sep 22, 20231h 1m

Ep 140OpenSauced with Brian Douglas

In this episode, Bret and Nirmal talk with Brian Douglas of OpenSauced. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Brian Douglas, of GitHub fame, has founded OpenSauced, a cool web app and community of open source developers finding their next contribution and maybe their next job. Brian has so many stories of working with open source projects and having conversations with leading open source contributors, while previously being a lead developer advocate at GitHub. So we definitely spend time talking through some of those stories and learning some of that we didn't know about GitHub and open source being run on it. We then dig into how to use the OpenSauced platform he's creating to find your next open source project and get noticed by employers. Live recording of the complete show from July 13, 2023 is on YouTube (Ep. #225).★Topics★OpenSauced websiteBlog article: Good first issues don’t existYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Nirmal Mehta - Host Brian Douglas - Guest (00:00) - (00:52) - Introducing Brian Douglas (00:56) - What is OpenSauced? (02:41) - First steps in contributing to open source (22:24) - Starting a relationship with the maintainers and building trust (28:38) - Finding projects to be passionate about (37:37) - Why contribute to open source?

Sep 8, 202353 min

Ep 139Istio Ambient Mesh and Solo.io

Bret and Nirmal welcome Idit Levine, Founder/CEO Solo.io. Idit focuses on Service Mesh, API-GW and Multi-Cloud networking, and security.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Idit has been involved in the Containers/DevOps community for 10+ years, building products from Docker to Envoy to Kubernetes, and now Istio and Cilium. We talk about Istio, Ambient Mesh, Envoy, Zero-Trust Security, Cilium, eBPF, Multi-Cloud and more.This is not the first time we've talked about Solo or Service Mesh. Ambient Mesh is Solo's new product that simplifies the install and infrastructure costs of essentially running Istio. I'm really hopeful that this is going to help a lot more people implement Istio because traditionally, it does have a lot of parts and a lot of costs with the sidecar approach, but this new approach reduces the number of essentially proxies and parts that you're running on each node of your Kubernetes cluster. Live recording of the complete show from June 29, 2023 is on YouTube (Ep. #223).★Topics★Solo.ioIstio Ambient MeshSolo Academy (free courses)Istio Ambient Mesh ebookGloo FabricYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Nirmal Mehta - Host Idit Levine - Guest (00:00) - Intro (06:16) - How did Solo.io start? (23:20) - The difference between service mesh and API gateway (33:12) - Where is service mesh going? (44:10) - Is Ambient Mesh as secure as the sidecar model? (50:28) - Opportunities after adopting Ambient Mesh (55:58) - Phipps compliance (58:03) - Unikernel vs WebAssembly

Aug 25, 20231h 4m

Ep 138Future of Kubernetes with Brendan Burns

Bret and Matt welcome special guest Brendan Burns, CVP Azure Cloud Native & Resource Management, and also a founding member of the Kubernetes project.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Because Brendan is one of the three original co-founders of the Kubernetes project back in 2013 at Google, he's a little bit internet famous in open source and Cloud Native. So I was a little nervous going into this because I had so many questions. We took some live questions as we always do from YouTube live, and I thought it was a really great episode of a little mix of talking about Azure and some of the things you can do with containers, some of the things they're working on, some of the things that he's focused on that we haven't seen yet. We talk about AI and how that relates to some of these things. We even talk about WASM or WebAssembly, one of my favorite topics of the last year, because that's important so it was great to get his perspective. And I think my favorite part of the show is where we really talk about the next layers of abstraction, or maybe even the ways that we can deploy to Kubernetes or make it simpler to manage and deploy to. And that's been a real challenge for the community ever since Kubernetes was created in making it more accessible to more people, without it being so complex to manage and deal with underneath. And Brendan has some really great views on what it's going to take it to get us there.Live recording of the complete show from June 15, 2023 is on YouTube (Ep. #221).★Topics★Ways to run containers on AzureDaprWebAssembly on Azure KubernetesWasmtimeTwelve-Factor AppYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Brendan Burns - Guest (00:00) - Intro (05:27) - Introducing Brendan (11:04) - Advice for starting to run containers (32:47) - Reducing complexity with AI (36:58) - Addressing DevOps fatigue (44:55) - Running WebAssembly on Kubernetes (56:40) - LTS Linux Distributions (01:01:45) - What's next after containers and orchestration?

Aug 11, 20231h 4m

Ep 137Kasten K10 Kubernetes Backups

Bret and Matt welcome Michael Cade, the field CTO at Kasten by Veeam. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾If you've been around servers for a while, you probably have heard of Veeam. It made its debut back in the late 2000's when virtual machines and implementations of VMs were big. I first found out about them back in those days, because it was a great free product for small virtual machine environments and data centers. They've made tons of additional backup and recovery products over those years, and now they have Kasten K10, which is a Kubernetes backup and restore/recovery product. Michael discussed with us the origins of K10 and some of the major features. We get into some demos, which you can check out in the original YouTube live show. Live recording of the complete show from June 1, 2023 is on YouTube (Ep. #219). Includes demos.★Topics★Kasten K10 websiteK10 free for 5 nodesKanisterKasten K10 Walkthough Project on GitHubKasten K10 install configKastenByVeeam YouTube channel You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Michael Cade - Guest (00:00) - Intro (04:40) - Introducing Michael Cade (05:47) - Veeam: then and now (09:55) - How Kasten came to be (16:28) - Complexity and Recovery (21:21) - Backup litmus test (25:19) - Demo (26:43) - Navig8: an open source visualizer for Helm Chart (31:01) - Kanister: an open source project for data management on Kubernetes (33:56) - Incremental backups (39:01) - Label-based backup policies (43:56) - Location profiles (46:13) - Infrastructure profiles (52:09) - Integrate your backup into you GitOps pipeline (54:00) - What about security? (57:14) - Getting started (01:04:30) - Miami conference

Jul 28, 20231h 11m

Ep 136Cycle.io LowOps container platform

Bret and Matt welcome Jake Warner back to the show to talk about LowOps. What does LowOps mean? What can Cycle offer us as an alternative to Swarm and Kubernetes?🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Jake Warner is the CEO and founder of Cycle.io. And I had him on the show a few years ago when I first heard about Cycle and I wanted to get an update on their platform offering. On this show we generally talk about Docker and Kubernetes but I'm also interested in any container tooling that can help us deploy and manage container based applications. Cycles' platform is an alternative container orchestrator as a service. In fact, they go beyond what you would provide normally with a container orchestrator and they provide OS updates, networking, the container runtime, and the orchestrator all in a single offering as a way to reduce the complexity that we're typically faced with when we're deploying Kubernetes. While I'm a fan of Docker swarm due to its simplicity, it still requires you to manage the OS underneath, to configure networking sometimes, and the feature releases have slowed down in recent years. But I still have a soft spot for those solutions that are removing the grunt work of OS and update management and helping smaller teams get more work done. I think Cycle has the potential to do that for a lot of teams that aren't all in on the Kubernetes way, but still value the container abstraction as the way to deploy software to servers.Live recording of the complete show from May 18, 2023 is on YouTube (Ep. #217). Includes demos.★Topics★Cycle.io website@cycleplatform on YouTube You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Jake Warner @ Cycle.io - Guest (00:00) - Intro (04:42) - Introducing the guests (05:34) - What is Cycle? (14:50) - Deploying and staying up to date with Cycle (16:38) - Cycle's own OS and updates (19:29) - Core OS vs Cycle (24:27) - Use multiple providers with Cycle (25:09) - Run Cycle anywhere with infrastructure abstraction layer (26:50) - No latency requirement for the nodes (30:45) - DNS for container-to-container resolution (32:11) - Migration from one cloud provider to another? (33:34) - Roll back and telemetry (35:05) - Full-featured API (39:29) - Cycle data volumes (40:52) - Backups (42:41) - Autoscaling (45:17) - Getting started (46:57) - Control plane and self-hosting (47:15) - Question about moving to Reno (48:16) - Built from revenue and angels; no VC funding

Jul 14, 202352 min

Ep 135AWS containers with Corey Quinn

Bret and Matt are joined by Corey Quinn to talk about AWS and containers.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Corey Quinn is the Chief Cloud Economist at the Duckbill Group. You may have seen or heard some of his in-depth AWS content, including his Last Week in AWS newsletter and blog, Corey's podcast Screaming in the Cloud and the AWS Morning Brief, or his highly produced YouTube videos on the Last Week in AWS channel. Corey runs the Duckbill Group, a company of people focused on helping clients understand and manage their cloud spend. If I had to describe Corey in a sentence, he's a quick thinking AWS expert who is one part cloud strategist, and one part sarcasm. The inspiration for this show came from his blog series, focused on all the ways to run containers on AWS, which is to say there's a lot. Dozens of ways, in fact, which I took as a testament to how containers have won the cloud as the primary way to package and deploy software to servers. Now, the hard part for us is to figure out which method we're going to choose for running those containers. We go on lots of tangents, but overall it was a fun conversation and I hope you enjoy this episode.Live recording of the complete show from May 4, 2023 is on YouTube (Ep. #214).★Topics★The Cloud Resume ChallengeLast Week in AWS17 ways to run containers on AWS17 MORE ways to run containers on AWSYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Corey Quinn - Guest (00:00) - Intro (09:36) - 17 Ways to Run Containers on AWS (12:14) - If you're using the cloud, use the cloud! (15:49) - Data loss and it's only on the internet forever (20:15) - Recommended ways to run containers on AWS (25:06) - Biggest burn on people's AWS bills (31:50) - Docker Desktop on top of AWS EC2 in Windows and do you need bare metal? (32:30) - Bare metal required for Hyper-V (34:56) - AWS App Runner (42:43) - Services AWS has dropped (43:56) - Workloads inside the container; where the container should run (46:30) - Building experience...hands-on projects vs getting certifications (57:48) - Migrating. Leaving Kubernetes. (01:03:14) - Chat GPT Star Wars jokes

Jun 30, 20231h 7m

Ep 134Podman In Action: Desktop, Machine, and more

Bret and Matt are joined by Brent Baude and Dan Walsh from Red Hat to talk about the latest with Podman, Quadlet, Podman Desktop and Podman machine, and how it all works with Kubernetes.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Dan Walsh, a Senior Distinguished Engineer at Red Hat, has been working with containers since the beginning. He's a contributor to Docker, Project Atomic, SELinux, and a lot more. He literally wrote the book on Podman. Brent Baude, is a Senior Principal Software Engineer at Red Hat and an architect and a primary maintainer of Podman, and contributes to many of its associated technologies like CRI-O, Buildah, and Skopeo. We go through a lot of tooling in this episode because Red Hat has taken a different stance than Docker in how it delivers its container tooling. You might say they take the approach of the Unix philosophy of every program does one thing well. Most of us know Docker and how it bundles many things related to containers into a single command line and daemon, yet some would prefer to isolate pieces of container management functionality into discreet, smaller programs - one for building images, one for running containers, one for communicating with registries, one for adding a GUI to your container manager, and one for managing the container VM. It's just sort of how I would break down the Podman ecosystem.And while that may seem like a lot of things, it's basically what Docker does for you in a single tool, yet the isolation of these tools is what can make them purpose-fit when you only need a fraction of the functionality of Docker. For example, one of Podman's core tenants is that it tells systemd to run your pods, which is the initialization process on most Linux distributions. In this way, your containers become more like standard system processes, rather than the Docker way of running all containers under the Docker Daemon process itself. Now many of us have heard of the other two original Red Hat container projects, Skopeo and Buildah, but there's now an increasing number of things the Podman ecosystem can do. So I'm grateful to Dan and Brent for coming on to break down the new parts of this toolkit and how we might use them.Live recording of the complete show from April 20, 2023 is on YouTube (Ep. #212).★Topics★Podman WebsitePodman Desktop WebsiteDan Walsh's book, Podman in ActionPodman Machine referenceQuadlet Blog PostPodman and Quadlet Blog PostYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Brent Baude - Guest Dan Walsh - Guest (00:00) - Intro (06:43) - Dan's history with containers (13:09) - The recommended way to get Podman (14:12) - Podman Machine (15:44) - How is Podman Machine installed (19:00) - How is Podman organised (21:39) - Podman Compose explained (27:38) - Podman Desktop (31:09) - Podman and Docker extensions (32:33) - Support for Kubernetes YAML (39:11) - Podman and systemd workloads (45:01) - How to get started with Podman (53:55) - Overlaying networks with Podman

Jun 16, 20231h 0m

Ep 133Falco Logs Suspicious Events on Your K8s and Servers

Bret and his co-host, Matt, are joined by Jason Dellaluce and Luca Guerra from Sysdig to talk about Falco, a tool I recommend for production clusters and knowing about any bad behavior on your servers. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Falco is a security tool I've mentioned multiple times on this show, because I mostly think that a low level security focused logging product is something that every production server needs. The ability to log unexpected events and behaviors on your Linux host is powerful and necessary to be able to audit what's really happening on your infrastructure outside of your app itself. Falco has been a CNCF incubating project for over four years, and I was immediately drawn to it in its early days, because it was container and Kubernetes aware and it could log and alert with default rules for everything, from someone starting a shell inside a container, to a bash history file being deleted, to a container trying to talk to the Kubernetes API. This episode will be useful for those of you new to tools like Falco and for those familiar with its basics, but also wanting to learn about newer features and use cases, which I did some learning on myself in this episode.Live recording of the complete show from April 6, 2023 is on YouTube (Ep. #210).★Topics★Falco websiteFalco on CNCFYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Jason Dellaluce - Guest Luca Guerra - Guest (00:00) - Intro (04:41) - Introducing the guests (07:42) - What is Falco? Why do we need it? (10:17) - What can Falco monitor? (19:28) - How are events logged? (33:16) - Does Falco classify alerts by severity?

Jun 2, 20231h 8m

Ep 132DevPod for Dev Containers

Bret is joined by Lukas Gentele and Rich Burroughs from Loft Labs to look at a new project called DevPod, that supports dev containers and VMs. It works with local Docker instances and AWS, GCP, Azure, and several other cloud providers. The project is compatible with Microsoft's DevContainer standard, which means it works with the VC Code standalone app and VS Code in the browser.Lukas and Rich were on this show last year, showing off vcluster, which allows you to run a full Kubernetes cluster inside an existing Kubernetes namespace. In this episode, we announce the release of DevPod and also go through some demos. I'm already thinking of how I might use it in my own developer workflow.Live recording of the complete show from May 16, 2023 is on YouTube (Ep. #216). Includes demos.★Topics★DevPod websiteDevPod on TwitterCreators & Guests Bret Fisher - Host Beth Fisher - Producer Lukas Gentele - Guest Ruch Burroughs - Guest Cristi Cotovan - Editor (00:00) - Intro (02:49) - Introducing the guests (03:39) - Loft Labs and VCluster (05:46) - Introducing DevPod (10:39) - Why CLI plus GUI? (13:16) - DevPod use case (15:30) - Options for IDEs and port forwarding (18:20) - Using the Microsoft VS Code dev containers features (21:14) - Create dev environments locally or remotely (27:47) - Turning it on and off without having to go to the infrastructure (49:13) - How to get DevPod (50:00) - What's next? Share feedback. (57:12) - This is not a production deployment tool (01:01:27) - Wrap-up

May 26, 20231h 1m

Ep 131Docker 2023 New Stuff

Bret and Matt are joined by two engineers in Docker's leadership - Chief Technology Officer Justin Cormack and Senior Manager of Developer Relations Michael Irwin, to talk about recent Docker Hub changes, as well as their latest product releases.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾We touch on Docker's latest updates and announcements, focusing on the early releases of Docker Scout, Docker plus WebAssembly, and the Telepresence extension for Docker Desktop. We also look at Docker's version 23 release, its first major update in three years, with key changes including BuildKit becoming the default builder, the ability to run alternate containerd shims, and a return to semantic versioning. Other updates include new Swarm features and deprecation of older features, specifically older storage drivers.In the show we also cover Docker's recent announcement and subsequent retraction of a plan to require free Docker Hub organizations to move to different plans.Live recording of the complete show from March 23, 2023 is on YouTube (Ep. #208).★Topics★Docker v23 releaseDocker Hub org changesDocker ScoutTechnical preview of Docker+WasmTelepresence for Docker announcementYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Justin Cormack - Guest Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Michael Irwin 🇺🇦 🕊 - Guest Matt Williams - Host (00:00) - Intro (05:13) - Docker version 23 release (07:54) - Docker's Hub Announcement and Retraction (09:57) - What does telepresence mean with Docker (12:35) - Should I switch to Kubernetes for development? (14:52) - Telepresence elevator pitch (22:47) - Telepresence connection scenarios (25:47) - How to connect with Telepresence? (33:22) - Bret's Jekyll Story (35:29) - What is available free in Scout? (37:32) - Scout is not a point-in-time scan (42:02) - James Buren's Scout Video (42:20) - Anyone can make an extension (44:21) - Favorite extensions (45:36) - Wasm technical preview (47:50) - Bret's interview with Nigel Poulton (50:44) - Question (54:48) - Docker 23 defaults to BuildKit (55:44) - Happy Birthday Docker (57:23) - Wrapping up

May 19, 202358 min

Ep 130Contribute to Kubernetes

Bret and Matt are joined by Chad Crowell of KubeSkills to walk through how you can contribute to Kubernetes open source.🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾 Chad started the kubeskills.com community and podcast to focus on learning Kubernetes by doing and in this episode, he's taking us through a detailed guide on how to get involved in the Kubernetes community.Although Kubernetes and other CNCF projects may seem big and complex with tons of activity, Chad helps us understand how the maturity of the projects and the community make it a much more pleasant onboarding experience for first-time contributors. We go through a wide range of resources and steps to help your first issue or pull request go smoothly.Live recording of this show from March 9, 2023 is on YouTube (Ep. #206).★Topics★Learning K8s by Open Source PDF slidesFirst Timers Only websiteK8s Contributor Community HomepageList of K8s SIGsK8s SlackOpen Sauced websiteK8s Contributors onboarding courseKube Cuddle podcast with Joe BedaLearning K8s Skills You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Cristi Cotovan - Editor Beth Fisher - Producer Matt Williams - Host Chad M. Crowell - Guest (00:00) - Intro (05:02) - Chad's Book (07:28) - Learning platforms (07:54) - Another way to learn (09:01) - SIGs (10:04) - Community or Contributor Experience SIG (12:23) - Volunteers (13:44) - For those who want to start contributing (16:07) - The different tags (17:05) - Good first issues (18:18) - Bret's first Docker fix (19:07) - Who determines the first issues? (20:54) - OpenSauced (21:33) - Finding the next steps after learning (22:16) - Dashboard to track contributions (22:59) - A very friendly community (24:47) - Who's paying for OpenSauced? (25:23) - How to build your rep on the internet (27:14) - Github Flow, Breaking it down (29:41) - Eddie Hub (30:27) - Assign yourself to the issue (31:07) - Compile Kubernetes (32:31) - Tracking the pull request lifecycle (34:01) - Changing the k8s reference issue (37:34) - Kubernetes Slack Channels (38:16) - SIG mailing lists (39:01) - Getting feedback before you do the work (40:35) - How do you give up and issue? (42:10) - Correlating issues with Slack (42:45) - Start with an issue first (43:41) - Random PRs don't go well (45:17) - Onboarding course (46:28) - Cheat sheet (46:43) - What Chad has learned from contributing (48:26) - Online resources (51:05) - Certifications and exams (53:03) - Matt's comment about a podcast (55:05) - Wrap up

May 5, 202355 min

Ep 129Windows WSL and Containers in 2023

Bret is joined by fellow Docker Captain Nuno do Carmo to talk about desktop container solutions and the best Docker setup for Windows 11. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Nuno's a Docker Captain, Civo Ambassador, Microsoft MVP, and a big fan of Windows and Cloud Native. I've had him on the show before, because the more you use the Windows Subsystem for Linux and Docker Desktop, the more you'll want to use WSL.Nuno helps answer many questions such as where are the Linux files stored, managing the CPU and memory resources, backing up files in WSL, getting the host Windows Explorer into the Linux filesystem, getting back to the Windows file system from the Linux shell and more!Live recording of this show from February 23, 2023 on YouTube (Ep. #204). Includes demos.★Topics★Nuno's WSL blogBret's Docker Desktop alternatives listRancher Desktop websitePodman Desktop websiteYou can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.comCreators & Guests Bret Fisher - Host Beth Fisher - Producer Cristi Cotovan - Editor Nuno do Carmo - Guest (00:00) - Intro (03:09) - Episode intro (04:44) - Main show (04:56) - Reflecting on the Docker birthday (05:42) - Bret's Maven Course (05:44) - Introducing Nuno (06:51) - All starts with WSL (07:30) - Mac vs Windows (07:50) - WSL1 and WSL2 (10:45) - Question Linux in VM vs WSL (15:08) - Filesystems and performance (16:51) - Setting yourself up for success with WSL (17:54) - WSL not installed by default with Windows (19:33) - Demo start (20:37) - Line endings issue in the past (21:13) - The tooling is WSL-aware (22:17) - VHDx (23:18) - Demo (26:39) - Bret re-explains it (29:18) - Question SSH into WSL (31:29) - Question How do you make a fresh WSL VM? (33:42) - Question What does mount show in Linux (34:54) - Question (35:45) - Taking snapshots with Raft WSL (36:25) - Question distros and VHDx files (38:02) - Deleting or losing your distros (39:34) - Question (42:02) - Ecosystem and options - the spreadsheet (44:28) - Demos (44:35) - Podman desktop (47:17) - Comment on Red Hat on Windows (48:30) - Rancher Desktop (55:36) - Demo (56:07) - Process isolation on Windows

Apr 14, 20231h 4m

Ep 128Calico Networking for Kubernetes and More

Bret is joined by Project Calico's Tomas Hruby from Tigera to dig into Calico CNI features for Kubernetes and beyond. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Calico can be used in a lot of places, including Linux, Windows, containers, bare metal, eBPF or iptables. Many of us learned about it as a CNI option for Kubernetes network and networking policy.Streamed live on YouTube on February 9, 2023.Unedited live recording of this show on YouTube (Ep. #202). Includes demos.★Topics★Project CalicoTigera WebsiteProject Calico on Tigera's WebsiteCreators & Guests Bret Fisher - Host Beth Fisher - Producer Cristi Cotovan - Editor Tomas Hruby - Guest You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - Intro (00:52) - About this episode (03:48) - Main show (03:53) - In today's episode (05:17) - How did Tomas get started with Calico? (05:45) - Projects are typically open source and SaaS (06:24) - Project Calico elevator pitch (07:43) - What can Calico do? (08:50) - The origins of Calico (09:30) - Docker got Kubernetes started (10:42) - Project Calico on Github (11:07) - Open source version is command-line driven (11:21) - Calico and the company behind it (11:45) - What makes Calico unique? (13:11) - EBPF (14:45) - EBPF and Calico (16:45) - Question (20:19) - Demo intro (20:50) - Question (21:35) - Question (22:42) - Question (23:32) - Vulnerabilities and threats (25:45) - Question (29:22) - Calico as service mesh (32:50) - What is Tomas excited about? (34:10) - EBPF real-time tooling

Mar 31, 202340 min

Ep 126Faster Docker Builds with Depot

Bret is joined by Kyle Galbraith and Jacob Gillespie, co-founders of Depot, to discuss their new solution to slow Docker builds. 🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾If you've never dug into some of the details of Dockers BuildKit, that's the engine behind your Docker build command, then this episode is for you. I'm fairly confident that everyone who uses Docker will eventually come upon the problems that Kyle and Jacob were trying to solve with Depot. Their focus is on speeding up your Docker builds by doing them remotely, in a transparent way. They avoid you needing to rethink your workflows and CI automations and provide a CLI tool that's a drop-in replacement for the Docker build command. In this episode, we walked through the problems they can solve today with what I would call a unified shared build cache for your whole team, including your CI and automation tools. The way they are going about speeding up the Docker builds is something I wished Docker had done for us all along. I think it's still early days for the Depot product, but if you're suffering with long build image times it's already mature enough to be something I would consider as a replacement for the traditional Docker engine builds that we're all used to.Streamed live on YouTube on January 12, 2023.Unedited live recording of this show on YouTube (Ep. #198). Includes demos.★Topic Links★Depot websiteDepot on TwitterCreators & Guests Bret Fisher - Host Beth Fisher - Producer Cristi Cotovan - Editor Kyle Galbraith - Guest Jacob Gillespie - Guest You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:10) - Bret's intro (04:41) - Main show (04:50) - Introducing the guests (05:10) - Today's topic (05:24) - Where did the idea for Depot come from? (06:43) - How it started (08:54) - Describing the problems (10:16) - The caching problem (12:06) - Docker caching default and in CI (15:02) - What is cache busting? (16:40) - Being deliberate about your CI environment (17:40) - What problems is Depot trying to solve? (19:44) - Replacing the Docker CLI with Depot (24:30) - Building for multi-platform (29:10) - Question (32:30) - Question (34:31) - Demo intro (35:02) - Modes of hosting (35:46) - Question (36:50) - What else does the UI offer? (40:38) - Getting started with Depot (41:45) - What's on the horizon? (42:47) - Outro

Mar 17, 202342 min

Ep 125Better K8s Prometheus Alerts with Robusta

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Natan Yellin, the co-founder of Robusta.dev to talk Kubernetes and Prometheus monitoring, alerting, and maybe some CPU limit ranting. Robusta tries to fill the gap left by Kubernetes' own AlertManager which has a very specific and not so helpful way of describing events in your cluster. This makes it hard to diagnose the cause of the event and you're left with Google, StackOverflow and an awful lot of head-scratching. Robusta acts as a proxy between AlertManager and your notification platform of choice.In the show we talk about what Robusta is, how to deploy it in your clusters, and Natan also details some of the enhancements in their cloud offering that you can layer on top of that, which has a generous free tier.Streamed live on YouTube on January 5, 2023.Unedited live recording of this show on YouTube (Ep. #197). Includes demos.★Topics★Robusta WebsiteRobusta on GitHubKubeCon - Building a Runbook Automation System for Prometheus and KubernetesStop using K8s CPU limitsRecommended Pod SpecSend Push notifications to your phonePrometheus AlertManagerGrafana LabsKubewatch★Natan Yellin★Natan on TwitterNatan on LinkedIn★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:10) - In today's episode (05:16) - Main show (05:44) - Introducing Natan (06:10) - Alert fatigue (06:46) - Where did the idea for Robusta come from? (10:33) - Someone has to do the job (11:34) - What does Robusta offer? (12:42) - Proxying the alerts and providing context (13:47) - Saving 10 to 30 minutes (16:05) - The open source Robusta repo (16:27) - The need to de-aggregate event data (17:26) - Example or demo (17:56) - Question about observability for microservices (20:55) - Tip 1 Consider using silences (22:06) - Tip 2 Monitor outcomes (22:40) - Don't ignore alerts because of fatigue (25:30) - Sending to different channels based on priority (26:59) - Question about sending messages to destinations (28:34) - Question (29:06) - Installing Robusta (29:59) - Demo set up commands (30:11) - Questions (30:28) - Demo Kubernetes-specific (31:22) - Multi-cluster question (33:49) - What does the SaaS platform do? (35:01) - Demo with SaaS (35:54) - kubectl not recommended (37:20) - Breaking the glass (40:32) - Question about notifications (42:31) - Getting started (43:41) - CPU limiting (44:32) - Soft limits on CPU in Kubernetes (46:52) - Bret's pod spec (51:39) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Mar 4, 202351 min

Ep 124NGINX on Kubernetes, All The Details

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by two pros from the NGINX team, Robert Haynes and Brian Ehlert to break down the various use cases of NGINX on Kubernetes, and help you decide when and where you'll be using it.There's a lot going on around NGINX and I wanted to focus this conversation around NGINX on Kubernetes, and specifically the two ways you can run it for cluster ingress. We also get into some of the advanced scenarios of using NGINX, like caching and web application firewalls (WAF).Many of us are using NGINX somewhere in our clusters. I found it very interesting how Robert, Brian, and the team at F5 spend a lot of time showing customers how they can use it in many ways to avoid deploying additional products on their clusters. I'm a big fan of reducing complexity.Streamed live on YouTube on December 15, 2022.Unedited live recording of this show on YouTube (Ep. #195).★Topics★Intro to K8s networkingK8s + NGINXThe basic Kubernetes Ingress provider of NGINXThe official NGINX team Ingress CRD (more features)Gateway API for K8sMonitoring NGINXMonitoring NGINX with Prometheus★Brian Ehlert★Brian Ehlert on Twitter★Robert Haynes★Robert Haynes on Twitter★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:10) - Custom intro (04:58) - Main show (05:03) - Introductions (05:22) - Today's topic (05:57) - Question: Common NGINX use cases (07:38) - NGINX's web server capabilities (08:28) - Common NGINX on Kubernetes considerations (11:45) - API gateway vs ingress (16:29) - Ingress configurations and policies (18:52) - CRD with ingress project (22:09) - When people adopt Kubernetes (24:50) - Free vs Paid version (29:34) - Question (29:44) - Last-minute risky annotations (34:09) - Validating NGINX configs (37:01) - Avoiding NGINX config manipulation (42:03) - Questions (43:17) - Monitoring in NGINX (44:49) - Prometheus exporter (46:16) - Question about caching (51:56) - Question (53:38) - Wrapping up (56:22) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 17, 202356 min

Ep 123Easy Kubernetes Auth and RBAC with Infra

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Matt Williams of Infra to show off their open source project Infra, which provides easy, centralized RBAC and auth to Kubernetes and more. Infra is a new company taking on simplifying centralized infrastructure, user authentication and permissions. Their open source tool by the same name is quite easy to start with. In this episode, Matt does a great job of explaining the pain points of Kubernetes user management, certificate distribution and revocation, and more pain points that Infra is bringing simplicity to.Streamed live on YouTube on November 10, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #191).★Topics★Infra WebsiteInfra on GitHubAll Day DevOps free conferenceMatt Williams===========Matt on TwitterMatt's YouTube Channel★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:11) - Bret intro (04:10) - Main show (04:25) - Introducing Matt (04:57) - Today on the podcast (05:23) - Infra HQ and Company History (06:09) - How Infra came to be (08:57) - Datadog (10:51) - Infra and open source (12:16) - How Infra can help (12:41) - Core Infra functionality (14:13) - Bad idea (15:05) - Can't revoke certificates (18:28) - Painful Certificate Redistribution (19:28) - Why you need Infra (20:58) - Question (21:55) - Service accounts (22:39) - kubectl and pronunciations (24:14) - Question about OIDC (26:02) - Not just a Kubernetes tool (27:44) - Dealing with Keys is Hard (28:25) - Offboarding can be harder than Onboarding (30:41) - Workflow (31:38) - Demo intro (32:08) - End demo (32:19) - Cloud hosted and self-hosted (32:52) - Providers, Okta (34:19) - Is Infra GIOps Compatible? (37:10) - Quick summary of the demo for audio listeners (39:01) - Dumbed down roles? (40:25) - Question (41:09) - A tool to add to your toolbox (42:55) - Getting started and contributing (43:42) - Question (44:08) - Auditing in the future (45:06) - A Safe and Secure Model (46:09) - Wrapping up (47:59) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 3, 202348 min

Ep 122Trivy and Tracee, Aqua Security Tools

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Anaïs Urlichs of Aqua Security to talk container and Kubernetes security tools like trivy, kube-bench, tracee, and kube-hunter. I've been using trivy for over four years to scan for known vulnerabilities in my own container images and my clients.We also look at tracee, a new tool that is part of a new generation of tools that use the Linux kernel eBPF feature to investigate what's happening in real time on your servers. Anaïs is great as an explainer of Kubernetes and all cloud native things, and she's the creator of the 100 days of Kubernetes tutorials on her YouTube channel where she breaks down various cloud native topics for beginners. Based on what I've learned in this show from Anaïs, I plan to change how I use trivy so that it's scanning more things and more often in my CI automation pipelines.Streamed live on YouTube on November 3, 2022.Unedited live recording of this show on YouTube (Ep #190)★Topics★Aqua Security ToolsAqua Security on YouTubeTrivyTrivy-Operatorkube-benchtraceekube-hunter★Anaïs Urlichs★Anaïs on TwitterAnaïs' Newsletter Anaïs on YouTube 100 Days of Kubernetes★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansGrab some merch at Bret's Loot BoxHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:10) - Custom intro (04:45) - Main show (04:49) - Introducing Anais (06:47) - Security Tools (07:13) - What is Aqua Security (08:29) - Not all security scanners are made equal (09:39) - What is Trivy? (10:18) - Misconfiguration scanning with Trivy (14:29) - Security vs Disruption (15:23) - Address vulnerabilities in the base image (16:28) - Question: Operator for Trivy (20:08) - Automating the tool (22:02) - Vulnerability fatigue (22:49) - Question: Go and No-go Criteria (26:30) - Tip Toe, Start Small (27:36) - Kube Bench (28:25) - Kube Hunter (30:26) - What is Tracee? (35:56) - What is the roadmap for implementing these tools? (42:14) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jan 20, 202342 min

Ep 121Software Supply Chain Security with Chainguard

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by two Chainguard co-founders, CEO Dan Lorenc and Head of Product, Kim Lewandowski, to break down the ins and outs of supply chain security and talk about Chainguard's approach to securing it. We dive into tools, including their new Wolfi Linux distro.We first talk about what that even is, because it's a buzzword right now, and not everyone's on the same page on what securing your supply chain even means in the world of software. Then we jump into base images for containers, and their project Wolfi. We talk a lot about Wolfi in this episode, because it has the potential to change how we build our containers.Streamed live on YouTube on October 13, 2022.Unedited live recording of this show on YouTube (Ep #188)★Topics★Chainguard WebsiteChainguard TwitterChainguard AcademyWolfiWolfi-based imagesSigstore★Dan Lorenc★Dan Lorenc on TwitterDan Lorenc on Linkedin★Kim Lewandowski★Kim Lewandowski on TwitterKim Lewandowski on Linkedin★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:11) - Custom intro (05:08) - Main show (05:21) - Introductions (05:41) - How did Chainguard get started? (06:40) - What is a supply chain? (08:47) - First Security Things (11:12) - The article and the base image (14:19) - Wolfi elevator pitch (17:06) - How do packages get into Wolfi? (21:06) - How do Wolfi packages work (24:14) - Chainguard Enforce (29:00) - Question about in-toto (31:25) - Preventing unsigned images in production (33:01) - Blocking vulnerable dependencies with policies (33:56) - Scanning on servers (36:19) - Question (38:10) - Question (40:07) - Getting started with Wolfi (42:14) - Where are they on Github (demo?) (43:07) - Question about vex (45:30) - What else? (45:57) - Chainguard Academy (47:41) - Professional services (51:49) - Wrapping up (52:13) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jan 6, 202352 min

Ep 120Best of DevOps 2022

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Nirmal Mehta of AWS and engineering consultant Laura Tacho, for the annual Best of DevOps. We've started this trend of going through the year's best (and worst) of DevOps every December, everyone brings their topics, we mix them all up and try to get through all of it. This year, we came pretty close. We cover many topics in this year's episode, things like desktop GUIs for containers, the return of real-life conferences, Docker reaching a significant milestone, AI, ML, data platforms and much, much more.Streamed live on YouTube on December 8, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #194)★Topics★Full doc of topics (more than we could cover)Year of Desktop GUI’s for Container Dev and Cloud Native MgmtDocker Extensions List Rancher DesktopPodman DesktopLens commercialOpenLensk9s websiteKui websiteDevOps Survey TrendsOpenTelemetry Articles- Transforming IT Departments - Properly Explained and Demoed - Getting StartedKarpenter websiteeBPF and Profiling- Pixie- Parca★Laura Tacho★Laura's websiteLaura's CourseLaura on Twitter★Nirmal Mehta★Nirmal on LinkedinNirmal on MastodonNirmal on Twitter★Join my Community★New live course on CI automation and gitops deployments Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Custom intro (06:42) - Main show (07:02) - Introducing the guests (07:37) - In today's episode (08:09) - The year of desktop GUIs (14:31) - In real life conferences (15:03) - Boom and Bust (15:47) - Will Jenkins go away? (16:56) - GitHub Actions (18:31) - Laura's Rubber-band Theory (21:26) - Revenue and Docker's comeback (23:19) - Other trends (23:28) - DORA report (24:38) - Increased security requirements (26:48) - Jumping on the security bandwagon (28:00) - Security by default (29:21) - Rapid fire Kubernetes happenings (30:23) - Bret's Maven Course (30:32) - Laura's teaching (31:21) - WASM+ Docker (31:55) - Slim.ai (32:46) - Open telemetry (37:54) - Carpenter (39:21) - Lack of staff (40:07) - AI (42:55) - Boosting productivity (46:55) - ML models developed and running in containers (48:31) - Wrapping up (48:57) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Dec 23, 202249 min

Ep 119Docker: What's New from 2022

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Michael Irwin, Sr. Manager for DevRel at Docker, to review and demo our top 2022 new features and announcements from Docker Inc. We run through the very long list in this episode and sadly, had to skip over the smaller, nuance features or subtle changes and focused on the bigger things - a major one being Docker extensions - as well as Docker Hub support for OCI artifacts, like the Helm charts, volume, WASM, Hardened Docker Desktop, tilt.dev and much more.Streamed live on YouTube on December 1, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #193)★Topics★Docker Blog, "Products" category (most of our topics came from here)Recapping the last year of Docker Desktop (YouTube, September 2022)What's new in Docker Desktop (YouTube, DockerCon 2022, May 2022)What's new in Docker build (YouTube, DockerCon 2022, May 2022)★Michael Irwin★Michael on TwitterMichael's Website★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (03:10) - Custom intro (06:06) - Main show (06:17) - Welcome to Michael (07:41) - Keeping up with updates to our tools (10:20) - OCI artifacts (11:30) - What are OCI artifacts? (15:03) - WASM (18:52) - DEMO of WASM (25:33) - Question (26:00) - Question (27:59) - Question (29:46) - Question (33:48) - Extensions (36:57) - Question (38:58) - Question (41:54) - Dev Environments (45:08) - Compose v2 (47:11) - Hardened Desktop (52:03) - Tilt (53:34) - Docker Desktop for Linux (55:18) - DSO Website (58:05) - More vulnerabilities every year (01:01:08) - Moving Dockerd image management to containerd (01:04:46) - Buildkit improvements (01:08:07) - Buildkit's link feature (01:12:16) - Stuff not covered (01:14:07) - Winding down (01:14:40) - Question (01:20:08) - Show and guest calendar (01:20:37) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Dec 16, 20221h 20m

Ep 118Key DevOps Skills for Improving Your Expertise

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Brian Christner, a Docker Captain and Chief, Online Gaming for Grand Casino Baden (jackpots.ch), who returns to the show to discuss his top recommended skills for improving your DevOps expertise.Both Bret and Brian have been consultants on and off throughout their careers and also in positions where they needed to hire other engineers - often other DevOps engineers. They share their perspectives on the different types of DevOps roles and the various jobs they need to fill.In this episode, we thought it would be helpful to bring our experience on DevOps jobs and look at the most essential and in-demand skills throughout the industry.Streamed live on YouTube on October 6, 2022.Unedited live recording of this show on YouTube (Ep #187)★Topics★DevOps Foundations CourseEngineering Management Training from Laura TachoAwesome Docker resourcesAwesome Everything Lists on GitHubKubernetes This Month with Nigel PoultonAWS Cloud TrainingContainer Automation Examples by BretDocker Observability by Brain★Brian Christner★Brian on TwitterBrian on LinkedInBrian's Courses Promo Code TRAEFIK50 for 50% offBrian's GitHub Brian's Blog★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:53) - Intro 2 (04:04) - Main show (04:10) - Welcome (05:18) - Brian's corner of the internet (07:54) - Impact of certifications in the hiring process (08:18) - What's your pet project? (09:15) - What lights you up? (10:44) - Sharers rather than Knowers (12:08) - About clouds (18:52) - DevOps are enablers (20:06) - Be replaceable (22:15) - Soft Skills (22:37) - The many hats of Senior DevOps (22:40) - Encouragers (22:53) - Protectors (23:01) - Realistic (23:18) - Protect your team (23:44) - Say no (24:12) - Problem solvers (24:15) - Listeners (26:06) - Question (27:05) - Awesome Docker List (30:03) - DevOps is vast and wide (32:14) - Observability (34:05) - Choose what to measure (35:07) - Junior and Senior DevOps Skillsets (37:10) - Being proactive in measuring (39:20) - Question (40:24) - Use the built-in tools first (43:58) - Quick way to get your hands dirty (50:01) - Security (53:07) - Infrastructure-as-Code (57:08) - Being a generalist or a specialist (58:49) - Enable others to work without needing you (01:00:30) - Question (01:00:33) - Getting started with a cloud (01:03:28) - Nigel Poulton (01:04:15) - You can't be responsible for everything (01:06:10) - Are certifications mandatory? (01:08:51) - Deployment checklist question (01:09:39) - Question (01:14:31) - Question (01:15:17) - Announcements (01:17:29) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Dec 9, 20221h 17m

Ep 117HashiCorp Vault for Kubernetes

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Rosemary Wang from HashiCorp to show off Vault for Kubernetes, an an open source secrets provider.Rosemary is a return guest and does her usual fantastic job at explaining the complex topics around storing secrets, who needs Vault and why, running Vault on Kubernetes, the Vault storage backend and so much more.Streamed live on YouTube on September 29, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #186)★Topics★Vault websiteHashiCorp CloudRaft storage for Vault, how Raft worksExample repo: HashiCorp Vault for Development Teams★Rosemary Wang★Rosemary on TwitterRosemary on Linkedin★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:11) - Bret intro (03:53) - Main show (04:09) - Course updates (04:29) - Introductions (05:32) - Today's Topic (06:41) - Anyone who doesn't need secret management? (09:30) - Elevator pitch for Vault (11:39) - Handling Rotation and Exit Strategies (14:06) - When do I need Vault? (16:52) - Question about Aquilas (17:11) - Vault is open source (19:07) - We ain't got time for that (19:58) - Can I run Vault on Kubernetes? (20:56) - Question: Where are Secrets Stored? (22:16) - Raft all the things (23:36) - Question: Vault and SSL Certificates (24:48) - Question and Demo (25:13) - Demo intro (25:43) - Demo (25:44) - Question about HSMs (26:07) - Question (27:01) - Question about Unsealed Tokens (29:35) - Question (31:59) - Bret's First Question about Toil (38:50) - Question: Password Managers and Vault (42:01) - Question (43:22) - Question (45:55) - Notes about Vault Agent Sidecar and Authentication (47:32) - Bret's Summary (51:05) - Question about Getting Started (52:01) - Starting with Sealed Secrets (54:47) - Wrap up (55:23) - Getting in touch with Rosemary (56:00) - What's next for Rosemary? (56:48) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Nov 25, 202256 min

Ep 116Service Mesh in Docker Desktop with Meshery

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Lee Calcote and Nic Jackson, co-authors of the Service Mesh Patterns book, to discuss service mesh for Docker Desktop and Compose apps with the new Meshery extension for Docker desktop.They talk about what service mesh is and go into the new Measure extension for Docker Desktop, which is a CNCF sandbox project. One of its bigger features is to help you try out different service meshes and test them with only a few clicks. They also cover other features of their tools, such as the beta of MeshMap which helps you visualize your clusters and apply better practices to your service mesh.Streamed live on YouTube on September 22, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #185)★Topics★Learn Service MeshMeshery Docker Extension MeshMap Service Mesh Patterns Book★Nic Jackson, Principal Developer Advocate, HashiCorp★Nic on TwitterNic on LinkedinNic Jackson on YouTube Shipyard website★Lee Calcote, Founder and CEO, Layer5★Lee on TwitterLee on Linkedin★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:52) - Bret intro (04:10) - Main show (04:15) - The guests (04:56) - Lee and Layer5 (06:12) - Nick and Hashicorp (08:08) - Lee and Nick (09:11) - Challenges of writing a book (09:54) - Layer5 and Meshery (10:55) - Meshery elevator pitch (13:03) - Service Mesh 101 (13:33) - Retry (14:37) - Observability (15:46) - Question Docker Swarm Supports Docker Extensions? (17:56) - What does service mesh seem like? (18:55) - Platform engineering (26:11) - Distributed systems concerns (27:56) - preparation (28:33) - What would you use Meshery locally for? (30:07) - Mesh map (31:05) - Demo but mostly theoretical (35:02) - Visual designer (35:28) - Catalog of extensions (36:06) - Performance management (39:20) - Installing the extension (40:09) - Close to the end (40:29) - A lot going on online (41:11) - Shipyard (44:43) - Starship (45:01) - Wrapping up (45:12) - Status of the book (52:02) - Closing (52:18) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Nov 11, 202252 min

Ep 115Cilium and eBPF with Liz Rice

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Liz Rice, Chief Open Source Officer at Isovalent, the makers of Cilium, to discuss Cilium and eBPF. Liz Rice is back to give us more insight into eBPF and the Cilium project. Isovalent is the company that created and manages the Cilium Project, which does an increasing number of things for Kubernetes, including networking, CNI support, security, advanced networking stuff, and observability, as well as other things like load balancing. Liz is one of my go-to experts on how low-level Linux internals work. She's been speaking about container internals since the early days of Docker.Streamed live on YouTube on September 8, 2022.Unedited live recording of this show on YouTube (Ep #183)★Topics★Cilium websiteIsovalent websiteeBPFNetwork Policy Editor★Liz Rice★Liz Rice on TwitterLiz Rice's websiteBooks on Containers, eBPF, Kubernetes and Go★Join my Community★ Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (03:10) - Bret intro (03:58) - Main interview (04:01) - The merch store (04:56) - More merch talk (06:36) - Introductions (07:33) - What else Liz does (07:43) - Liz's books (08:39) - Brief history of EBPF (09:58) - Kernel modules before EBPF (11:03) - EBPF vs Kernel Modules (12:14) - EBFP is dynamically loaded (13:40) - Performance and Data Transfer (14:52) - Isovalent and Cilium (16:29) - How Cilium started (18:35) - Specific versions of the kernel? (19:49) - Where do we use EBPF in Kubernetes? (20:29) - CNI (22:19) - Question: Where can you start learning EBPF? (25:21) - Question (32:39) - All open source? (33:25) - Question Cilium as a service mesh (34:49) - Enabling certain features (35:56) - Question (36:28) - Question (37:37) - Question (39:38) - Wrapping up Cilium in cloud (40:39) - Offloading programs XDP (42:33) - Question about GUI (44:58) - Question (51:46) - Question (54:27) - EBPF on Windows? (55:30) - How is it implemented? (56:19) - Wrapping up You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 28, 202257 min

Ep 114Kubescape Kubernetes Security with ARMO

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Shauli Rozen, CEO and Co-Founder of ARMO, creators of Kubescape. Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer, and image vulnerability scanning.I'm a fan of tools like this and specifically of Kubescape, which I use and recommend to my clients. The scanner can scan your YAML manifests of your Kubernetes resources. It can scan your live Kubernetes clusters. And it can scan the YAML in your Git repos, as well as the images themselves that you're deploying to Kubernetes. As ARMO calls it, it's a single pane of glass into your Kubernetes security. Streamed live on YouTube on September 1, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #182)★Topics★Kubescape's GitHub K8s Security Dashboard ARMO website★Shauli Rozen★Shauli on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Main intro (00:53) - Custom intro (05:02) - Main show (05:06) - Introductions (06:00) - The Kubescape project (06:42) - Go to the developers (07:43) - Security low-handing fruit (08:36) - I just want to be a user (11:49) - Kubescape elevator pitch (14:17) - Good learning tool (15:05) - Linting (15:37) - Remediation (17:02) - The SaaS Version (18:36) - Does DevOps not care about security? (20:41) - A gap in terminology (22:48) - Security compliance and guidance (28:15) - GitOps Approach (29:55) - Asking about demo (30:36) - Question (31:38) - Become a contributor (33:12) - Demo intro (33:38) - Demo end part (33:43) - Question (34:13) - Visualizer (35:40) - Question (36:58) - Question (41:12) - Mindset differences (42:06) - Question (44:23) - Question (44:50) - Winding down (45:43) - How to get started (46:43) - Template outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 21, 202246 min

Ep 113Slim and Secure Container Images with Slim.ai

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects. Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.Streamed live on YouTube on July 28, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #180)★Topics★Docker SlimSlim.ai★Martin Wimpress★Martin Wimpress on Twitter★Pieter van Noordennen★Pieter van Noordennen on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:53) - Custom intro (06:49) - Main show (07:08) - How Slim.ai started (09:24) - Complexities of shipping images (11:10) - DockerSlim (12:44) - Setting the stage for demo (15:19) - Demo intro (15:45) - Demo (15:50) - Bret's Question (24:37) - Different container composition options (25:53) - Demo intro 2 (25:59) - Bret loves Docker Desktop and Extensions (29:45) - Pausing Docker (30:11) - The extension is the same as the SaaS (30:47) - It's free (31:20) - Demo? (31:20) - Distroless and optimized starting points (37:04) - Build engineering nightmare (38:32) - Not just security considerations (41:20) - Understanding dependency differences (42:51) - Question (44:20) - Slim cli (48:25) - Getting started (49:55) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 14, 202250 min

Ep 112Carvel Tools for Kubernetes

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Dmitriy Kalinin and John Ryan, software engineers at VMWare, to show off the many Carvel project tools.Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. The Carvel project includes tools for templating, image building and tracking, secrets management, app deploying and more. The tool list includes ytt, kapp, kapp-controller, kbld, imgpkg, vendir, and kwt.Streamed live on YouTube on July 14, 2022.Unedited live recording of this show on YouTube (Ep #178)★Topics★Carvel websiteCarvel on Twitter★Dmitriy Kalinin★Dmitriy Kalinin on Twitter★John Ryan★John Ryan on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:51) - Custom intro (04:07) - Main Show (04:31) - A lot of tools (05:36) - How did Carvel begin? (08:19) - Use the tools differently across all stages (09:16) - Building from the ground up (11:00) - Are the tools independently used? (11:45) - The first Carvel tool (11:59) - ytt (13:14) - kapp (14:14) - What is YTT (17:20) - Creating more consistency? (20:00) - How to use with compose (21:04) - Question about Q (23:57) - Question (26:50) - Question (27:29) - Solve a real problem (28:26) - Don't overcomplicate yourself (30:21) - What problem does Kapp solve? (32:54) - Kapp and Kapp controller (38:56) - Question (39:33) - Rapid fire (39:39) - Kbuild (45:45) - How does image package help? (49:14) - The experimental tools (50:02) - Secret generation (55:04) - Vendor (58:50) - Getting involved (01:00:23) - Last thoughts (01:01:37) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Oct 7, 20221h 1m

Ep 111Securing Containers, First Steps in Docker and Kubernetes

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.Streamed live on YouTube on July 7, 2022.Unedited live recording of this show on YouTube (Ep #177).★Topics★Bret's Container Security AMADocker Security DocsDocker Buys AtomistSlim.ai website: Auto-slimming imagesDocker Slim toolKubescape websiteKubernetes Security ContextSeccomp by defaultLint all files with super-linterDatree K8s file scanKubernetes BenchmarkMy GitHub Actions examples: Automate your builds, CVE scans, and moreVideo on building a more secure base imageSnyk security tools websiteTrivy CVE and K8s scansFalco for watching servers for bad behavior★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - Intro (00:52) - Mid-Roll Intro (00:53) - Bret's Intro (04:03) - Main show (05:02) - What should I worry about first? The Basics! (06:04) - Start with images (06:45) - Bret.show/SecurityFirst (07:21) - CVE scanning (07:53) - Dependency scanning (08:45) - Bret's Github with Dependabot (09:42) - OS dependencies with Trivy and Snyk (11:40) - Bret's Talks (12:34) - Alpine is not always good (13:44) - All hands on automation (14:31) - Don't run as root inside the image (16:21) - Question (17:37) - Making slimmer images (18:09) - Atomist (19:36) - DockerSlim (23:05) - Question (24:38) - Question (26:26) - Question (26:53) - Question (27:02) - Question (27:32) - Securing Docker (28:04) - Docker host scanner (28:45) - Falco (29:12) - Just use Docker (30:45) - Question about Windows Containers (32:36) - Maintain your servers (33:29) - Docker in the cloud (34:46) - Always stay on the latest Kubernetes release (35:50) - Kube-bench (36:39) - Tree.io (37:21) - Pod specs (38:25) - Sec comp (39:50) - Security context (41:14) - Privilege escalation (42:07) - Superlinter (43:11) - Question about Fargate (44:52) - Network policies (46:55) - Kubernetes docs article on security context (47:33) - Question (50:00) - Third-party security monitoring (50:14) - Question about volumes (51:02) - Question about Docker subnets (51:47) - Question about secrets (52:34) - Question about subnets 2 (53:05) - Question (55:20) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Sep 23, 202255 min

Ep 110Managing Enterprise Kubernetes with Replicated

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Marc Campbell of Replicated to discuss the challenges of deploying your software on other people's Kubernetes.Following a discussion of the problems Replicated is solving, they go over all the great open source projects they are developing for deploying, managing, and troubleshooting Kubernetes.Streamed live on YouTube on June 23, 2022.Unedited live recording of this show on YouTube (Ep #175).★Topics★Replicated Replicated OSS Projects Kubernetes TroubleshooterSchema Hero Kubelist podcast, CNCF project leader interviewsEnterprise Ready assessment and podcastkURL - Customize your Kubernetes Installer KOTS - Manage COTS on K8s Find Outdated ImagesUnfork your custom Helm charts ★Marc Campbell★Marc Campbell on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Template intro (00:53) - Bret intro (05:19) - Main show (05:59) - How Mark Got to Replicated (06:45) - How Replicated Started (07:18) - All projects open source (08:21) - COTS (13:48) - Kubernetes: Limiter or Enabler? (15:23) - Kurl (19:14) - KOTS (22:32) - Not all users are going to be helm experts (23:30) - Unfork (27:25) - Troubleshooting Kubernetes (37:19) - Outdated (42:52) - Their podcasts (43:58) - Schemahero (52:36) - Other tools like kurl? (54:19) - Are teams adopting kots? (56:44) - Question (58:06) - What's next? (59:56) - Winding down (01:00:05) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Sep 9, 20221h 0m

Ep 109Docker Extensions: Using and Building Them

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Guillaume Tardif and Felipe Cruz of Docker Inc. for a deep dive into Docker extensions.Docker Extensions are a favorite new feature. Guillaume and Felipe are both engineers at Docker and they walk us through how extensions came about, how to install them, and how to submit them to the marketplace.By the time Docker released extensions at DockerCon in May 2022, there were already a dozen solid extensions, including a disk manager, log explorer, and other third-party tools like Portainer, Snyk, and Anchor. Docker extensions will be most helpful to people who use Docker Desktop.Streamed live on YouTube on June 16, 2022.Unedited live recording of this show on YouTube (Ep #174). Includes demos.★Topics★Docker Extensions homepageDocker Extensions announcement at DockerCon 2022Build your first Docker ExtensionSubmit your extension for the MarketplaceVackup, an example custom extensionExtension SDKOther Extension resources★Guillaume and Felipe★Guillaume Tardif on TwitterFelipe Cruz on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:52) - Bret custom intro (05:52) - Main show (05:54) - Main show (06:15) - Felipe intro (06:47) - Guillaume intro (07:49) - Today's topic (08:38) - What are Docker extensions? (11:04) - Question: Are extensions running in their own container? (12:41) - Question: Extensions are in Docker Desktop only? (13:17) - Where it is on the interface (13:44) - Submitting your own extensions to the marketplace (15:02) - Easy to install the extensions (15:33) - A couple extension examples (17:20) - Question: Extension versions and updates (17:51) - Question: Extensions dependent on Docker Desktop version? (18:55) - Sideloading extensions that are not in the marketplace (19:28) - Question: RAM and CPU usage (19:49) - Demos described (20:29) - Demo intro (20:55) - Demo (20:59) - Quick note about Portainer (21:33) - You don't have to remember commands (22:36) - Don't install all extensions at once (22:51) - Do extensions pause with Docker? (23:50) - Very little to learn (24:25) - Bret's backup tool extension isn't done (25:36) - Synchronising extensions across installations (26:12) - Docker roadmap and ideas (27:05) - Question: Security, where is the UI code running? (30:36) - Question: Multi-node Kubernetes clusters (32:43) - Question: Are all extensions open source? (34:18) - Expanding the SDK (35:00) - Bret's drop-down Kubernetes request (35:36) - Extension submission (36:23) - Wrapping up (37:32) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Aug 26, 202237 min

Ep 108Kubernetes Autoscaling with Karpenter

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Nirmal Mehta, a Principal Specialist Solution Architect at AWS, and a Docker Captain, to discuss Karpenter, an autoscaling solution launched by AWS in 2021. Karpenter simplifies Kubernetes infrastructure by automating node scaling up and down, giving you "the right nodes at the right time."Autoscaling, particularly for Kubernetes, can be quite a complex project when you first start. Bret and Nirmal discuss how Karpenter works, how it can help or complement your existing setup, and how autoscaling generally works.Streamed live on YouTube on June 9, 2022.Unedited live recording of this show on YouTube (Ep #173). Includes demos.★Topics★Starship Shell PromptBret's favorite shell setupKarpenterKarpenter release blogK8s Scheduling ConceptsOther types of autoscalers:Horizontal Pod AutoscalerVertical Pod AutoscalerCluster Autoscaler★Nirmal Mehta★Nirmal on TwitterNirmal on LinkedIn★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:51) - Custom intro (04:25) - Main Show (04:29) - Introductions (05:29) - Nirmal's Jobs (06:15) - Talking about Kubernetes cluster scaling (07:21) - Who are we addressing? (08:46) - What is Karpenter not addressing? (09:09) - Auto-scaling at pod level (09:57) - Cluster auto-scaling (11:24) - Karpenter is alternate to cluser autoscaler (11:38) - Question (12:28) - Issues Karpenter was created to address (14:46) - What is Karpenter? (16:08) - Selective instance type provisioning (17:04) - Matching deployment definition to instance types (18:25) - Question: Is Karpenter designed only for AWS? (19:30) - Question: Can you auto-scale control plane nodes? (21:38) - The Kubernetes Scheduler (25:31) - Question: Does Karpenter auto-scale down? (27:22) - Question: EKS with Karpenter spot instances (28:15) - Question: Karpenter and AWS auto-scaling groups (28:27) - Question: Installation and provisioning (29:37) - Only affects unschedulable pods (31:06) - Demo intro (31:31) - Demo (31:36) - Scaling Down (32:44) - Keeping your nodes fresh (35:11) - If you want to learn more (35:40) - Goals for 2022 (36:32) - Questions (36:38) - Question: Cost-effective instances (37:52) - Question: Instances to IoC and automatically destroyed? (40:42) - Question: Features being pushed upstream into Kubernetes (42:45) - Question: Rebalancing (46:45) - Scaling down is hard too (48:35) - Question: Horizontal pod auto-scaler trigger Karpenter (49:42) - Question: Specs and Documentation (50:18) - Question: How does it pick instance sizes? (51:12) - Question: Karpenter respects desire to spread workloads (51:46) - Question: EKSAnywhere support (52:07) - Question: How do you pick AMIs? (52:54) - Winding down (54:42) - Wrapping up (54:47) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Aug 12, 202254 min

Ep 107Beyond DevOps DORA Metrics

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Laura Tacho, an engineering leadership coach, to discuss measuring your team's performance with DevOps metrics (DORA) and the new SPACE framework. Team Performance is one of Bret's favorite topics, and it should be everyone's concern.Laura and Bret discuss soft skills, how to implement DORA DevOps metrics, the new SPACE framework, as well as common pitfalls people make when attempting to implement those measurements. Streamed live on YouTube on June 2, 2022.Unedited live recording of this show on YouTube (Ep #172).★Topics★Laura's course on High-Performing Software TeamsDORA (DevOps Research and Assessment)DORA MetricsDORA DevOps Quick CheckSPACE frameworkGoodhart's lawDeveloper ExperienceDevOps HandbookAccelerate Book★Laura Tacho★Laura's homepage and NewsletterLaura on TwitterLaura on the GitHub blog★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:52) - Custom Intro (04:54) - Main show (05:12) - Introductions (05:56) - How Bret and Laura Met (06:24) - What's Changed for Laura in the Last Couple of Years (08:06) - Today's Topic and Conundrum (09:31) - Laura's Course (12:34) - Laura's Newsletter (15:28) - Latest Newsletter Topic - Firing People (16:45) - Firing People is Not Talked About Enough (17:45) - Choose Your Boss, Not Your Job (18:56) - DevOps Metrics (19:29) - What is DORA? (21:33) - Google Acquired DORA (22:04) - The Wide Chasm of Teams (22:46) - Productivity vs Performance (26:41) - The SPACE framework (30:48) - Developer Experience (DX) (34:02) - The Journey: Where Do You Start? (38:46) - Question: Productivity for In-House vs Contractor Teams (40:19) - Question: Building DORA Teams from Scratch (42:02) - Making Life Easier for Your Team (45:40) - Performance Also Includes Quality (46:21) - Defficiencies will expose themselves (48:06) - Work Backwards from CD (49:59) - What is a High-Performing Development Team? (51:40) - It's not only about the new people onboarding (52:34) - Goodhart's Law (56:20) - Demo/Example (58:40) - Question: DORAvs DevSecOps, Agile, LEAN (01:00:25) - No need for automated tracking to start (01:02:53) - Question: Handling Retraining and Candidates Leaving (01:06:59) - Question: Security as a Product (01:11:00) - Wrapping Up (01:12:01) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jul 29, 20221h 12m

Ep 106Argo CD Past & Future, with the Creators

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by the co-creators of the Argo project and co-founders of Akuity - Hong Wang and Jesse Suen - to discuss the state of Argo and their new Akuity offering for Argo CD in the Cloud.Chances are, you've heard of one or more of the Argo projects. They include Argo Workflows, Argo CD, Argo Events, and Argo roll-outs. Argo is one of those Kubernetes projects that is so common for teams to choose that it's nearly an assumption that every team is using one of their tools in a cluster or two. Hong Wang and Jessie Suen helped co-create the Argo project years back at Intuit and have now co-founded a growing startup called Akuity. The company is focusing on making the Argo products better and creating SaaS offerings for the Argo tools. In this episode, we get a perspective on where the Argo tools came from and what the team behind it is doing. Streamed live on YouTube on May 26, 2022.Unedited live recording of this show on YouTube (Ep #171).★Topics★Argo CD homepageAkuity homepageAkuity news on more fundingArgo CD in the cloudArgoCon in SeptemberDeclarative setup of Argo CD★Twitter Links★ArgoAkuityJesse SuenHong Wang★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (00:53) - Custom intro (01:42) - Main show (02:02) - Introductions (02:29) - Announced Argo Funding (03:37) - Argo and Akuity (05:22) - The Origin Story (11:16) - How did CD happen? (14:05) - The case of having a GUI (18:11) - Other Argo Products (19:17) - Progressive Delivery (24:00) - Where does Akuity fit in? (26:21) - Outsourcing Infrastructure Tooling (28:03) - Is there a beta? (28:46) - Question: Getting started with Argo and Gitops (30:41) - Why they started Akuity (31:44) - Release cycles and what's next? (32:43) - Demo? (34:47) - More questions (34:51) - Question: Gitops is considered Devops best practice? (36:24) - YAML is the best we've got (38:03) - Nobody is backing out of Gitops (39:12) - Infrastructure Deployment (41:33) - Deployment AND Continuously Monitoring Status (45:16) - Argo CD is currently the Kubernetes dashboard (46:36) - Raw Resources are Not the Ones You're Controlling (49:14) - Argo CD is the first thing you do (50:50) - Question: Argo CD vs Argo CD HA (51:58) - Question: Max Scale Apps to Kubernetes Cluster Count (53:12) - ArgoCon (54:00) - Question: Deploying all Argo Products Together (55:03) - Question: Checking IaC created on Terraform (57:49) - Question: Deploy all ArgoCD Configs Declarative (58:49) - Question: Argo for pre-Kubernetes system (01:02:53) - Question: Upgrading Argo from Old to New (01:04:38) - Question: Adding new clusters to Argo declaratively (01:07:13) - Writeback: Tracking UI changes in Code (01:08:20) - Come back againq (01:10:37) - Question: Triggering Monitoring Alerts (01:11:45) - ArgoCon (01:12:20) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jul 15, 20221h 12m

Ep 105Infrastructure as Code, Patterns and Practices

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Rosemary Wang, a developer advocate at Hashi Corp. She recently finished a Manning book, titled Infrastructure as Code: Patterns and Practices. They discuss how infrastructure as code fits into DevOps and Gitops, and how you can get started with IaC and run over some important patterns, such as controlling versioning, IaC testing and managing costs.Rosemary worked at ThoughtWorks previously, and it was interesting to hear her experiences on learning from senior engineering, and how pairing and other types of mentorship can help. Streamed live on YouTube on April 28, 2022.Unedited live recording of this show on YouTube (Ep #168).★Topics★Infrastructure as Code: Patterns and Practices, with examples in Python and Terraform ★Rosemary Wang★Rosemary on Twitter ★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (00:53) - Custom intro (04:10) - Main show (04:17) - Introductions (05:06) - The Book (06:23) - Rosemary's background and how the book came about (08:03) - Mentors and Learning (09:25) - Where did the book idea come from? (10:44) - Virtual conferences (11:52) - Upcoming talks? (12:24) - GitOps is a key topic on this show (13:11) - How Rosemary ended up in IaC (13:44) - Everything should be automated (14:39) - How is GitOps introduced in the book? (16:55) - Find an infrastructure provider with a good API (17:46) - Find one tool (18:30) - Ideas last longer than code (19:06) - Do I need to know how to code? (20:08) - Elevator pitch on patterns in the book (21:48) - Testing is opinionated (22:05) - Security and compliance (22:32) - Costs of infrastructure (23:16) - Do it the hard way first (23:51) - Team norming (25:11) - Invest in courses (26:54) - Keep information close to the code (30:12) - Automatic documentation in Terraform (30:52) - GitHub Copilot for documentation (32:12) - Question (36:18) - Tech toil vs Automation (38:48) - Recreate, not restore (41:03) - Question: Terraform Cloud vs Terraform (44:18) - When and where to get the book? (45:26) - Bookstores (46:06) - CCNA tip (49:21) - Winding down (50:05) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jul 1, 202250 min

Ep 104Applications-as-Code with Shipa

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Ravi Lachhman, Field CTO at Shipa, to discuss the basics of Shipa application and policy management, and show off the developer experience that Shipa brings to apps running on IaC and GitOps tools like ArgoCD, Crossplane, Terraform, Kubernetes, and more.Shipa is focused on the layer above the infrastructure where application developers can avoid other Kubernetes manifest tools like Helm or Kustomize, and create a cleaner contract between what their application needs are and how the infrastructure provides them.If you've done Kubernetes YAML long enough, you know that it can get quite complex and verbose, and it requires both infrastructure and developer roles or knowledge to fully configure it. So you kind of got to know both worlds. But Shipa wants to fit in the middle somewhere, not replacing the infrastructure tools like Terraform or Crossplane, but rather working on top of them, providing an easier way to describe your apps from a dev's point of view and how they work on top of your infrastructure. It focuses on the application requirements, not necessarily how those requirements are implemented. Streamed live on YouTube on April 14, 2022.Unedited live recording of this show on YouTube (Ep #166). Includes demos.★Topics★Shipa website Shipa exampleDevOps Days Atlanta★Ravi Lachhman★Ravi on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Intro (03:11) - Bret Custom Intro (05:41) - Main Show (06:21) - Introductions (06:43) - About Ravi (07:56) - Any advice for starting engineers? (10:56) - Never stop learning (12:28) - It's ok to get it wrong the first time (13:00) - It's crucial to create reproducible deployments (14:24) - Infrastructure-as-code (15:30) - Application-as-code vs Infrastructure-as-code (18:06) - Shipa is a two-part thing (19:18) - What does Shipa 'replace'? (22:04) - Is Shipa strictly designed for Kubernetes? (23:08) - One-line developer experience (26:38) - Bret was a diehard swarm fan (29:29) - How flexible is this? (31:30) - Docker can't make pants (32:18) - What Bret was hoping might be implemented (34:03) - Preparing for demo? (34:23) - Bret doesn't want to develop in Kubernetes (36:17) - Demo intro (36:48) - Crossplane (38:21) - Q: Shipa working through Crossplane? (38:42) - Q: How else can I adopt Shipa without Crossplane? (39:43) - Q: Shipa versions - on-prem and SaaS (45:22) - Question: Will it override the YAML of Kubernetes? (50:15) - Devs shouldn't handle so much infrastructure (51:19) - Where else can people get started? (51:46) - Q: OAM and OpenAPI (53:21) - Q: Is AAC similar to OpenAPI? (53:51) - Q: What is Shipa's Roadmap or Vision? (56:09) - Networking is complex (58:06) - Winding down (59:46) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jun 17, 202259 min

Ep 103Nomad Orchestration

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Erik Veld, Manager, Developer Advocacy at HashiCorp, the creators of Nomad. Nomad is an orchestrator like Kubernetes and Swarm but it has a unique set of features that make it an interesting alternative on multiple levels. It's known for having a much simpler infrastructure design than Kubernetes, and also having a stronger community and feature release cycle then Swarm. Erik talks about the basics of Nomad, the reason it was created and runs through some demos. Streamed live on YouTube April 7, 2022.Unedited live recording of this show on YouTube (Ep #165). Includes demos.★Topics★Nomad website Nomad GitHub page Tech-Nomadic, Run Your Software Anywhere (YouTube) Managing DigitalOcean Kubernetes clusters with Terraform (YouTube)★Erik Veld★Erik on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:54) - Bret Custom Intro (02:28) - Main show (03:01) - How Eric got to HashiCorp (04:40) - What tools does he work on at HashiCorp? (06:35) - How did Nomad start? (08:46) - Nomad elevator pitch (10:05) - How things were done before with VMs (11:09) - How does Nomad run? (12:01) - Swarm replacement? (13:26) - Other Nomad use cases for starting with it? (13:50) - Single binary (15:18) - Question (15:58) - What does the name Nomad mean? (16:43) - Demo question (17:11) - Demo intro 1 (17:37) - Question: GUI (18:25) - Question: Running console or not? (18:50) - Question (19:25) - Question: Running in containers? (19:55) - Using the orchestration for non-container workloads (22:51) - What was console doing in the demo? (25:00) - Question: Architecture (26:26) - Intentions (26:33) - Question (27:07) - Namespaces in Nomad (27:27) - Question about console hosted solution (28:58) - What are the pieces I need to run it? (29:31) - How does console run? (30:26) - Host networking or isolation? (31:57) - Languages and dependencies (37:40) - How are you controlling versions? (40:35) - Docker Driver? (41:40) - What other drivers? (42:32) - Question about local dev environments (43:17) - Question about extensions (46:18) - Little demo starting a cluster (47:38) - A little rabbit hole referencing a demo from last week? (48:14) - Question (49:17) - More demos? (49:18) - Demo intro 2 (49:24) - Question (50:03) - Question Lambdas (50:24) - An OS maybe? (50:47) - The last question? (51:56) - Winding down (52:55) - Join the Minecraft server? You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jun 3, 202254 min

Ep 102GitOps with Pulumi

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by David Flanagan, aka Rawkode Academy, from Pulumi to show off how Pulumi infrastructure-as-code can improve GitOps pipelines. Our conversation focused on what GitOps and Pulumi are and how they work together to manage your infrastructure and app deploys. Streamed live on YouTube on March 24, 2022. Unedited live recording of the complete show on YouTube (Ep #164). Includes demos.★ Topics ★PulumiProductK8s OperatorK8sGitOpsLaw of Demeter1Password SSH management★ David Flanagan aka Rawkode Academy★Rawkode Academy, Live weeklyRawkode on Twitter★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Bret custom intro (01:53) - Main show recording (02:44) - What is clustered (03:29) - Fixing clusters challenge (04:28) - Prove your chops (05:03) - The best way to learn (06:57) - What is Pulumi? (11:13) - The GitOps approach (12:54) - People create drift (15:18) - Now we see tooling designed for GitOps (17:09) - Pulumi can help with drift (18:14) - Pulumi provides a better developer experience (20:24) - Difference between operator and resource provider (22:33) - What does the operator replace? (24:27) - Law of Demeter in GitOps (34:13) - Ruby (35:03) - StackOverflow's dev survey (36:16) - Docker container revolution (38:34) - Demo intro (39:04) - Demo (40:45) - Demo ended I think (43:08) - RawKode show (43:53) - Demo stopped and promos (44:44) - Show winding down (45:00) - Template outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

May 20, 202245 min

Ep 101Docker Desktop for Linux is Here!

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Anca Iordache and Dave Scott, software engineers at Docker Inc, to talk about why they made Docker Desktop for Linux and how it's different from running the Docker Engine daemon. Streamed live on YouTube on 21 April 2022.Unedited live recording of the complete show on YouTube (Ep #167). Includes demos.We talk about the origins of Docker Desktop for Linux, why it needs to exist, and how it's different than running Docker Engine on the native host. Docker Desktop for Linux behaves like Mac and windows versions where it uses a VM and we clear up some confusion around that. Further, we talk about some of the functionality with operating it in tandem with Docker Engine on the host so you can run both at the same time and use context to switch between them. ★ Topics ★Download Docker Desktop for LinuxDocker RoadmapDocker Desktop for Linux GitHub IssuesDocker Developer Preview ProgramDocker Community SignupDockerCon 2022★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Show intro (00:53) - Bret intro (01:56) - Main show (02:14) - About Dave (03:15) - About Anca (04:45) - Compose is her favorite (06:16) - Why does Docker Desktop exist? (07:13) - Linux as main desktop os? (08:29) - Docker Desktop Roadmap (09:22) - Was it a popular feature request? (10:01) - Is it in beta? (10:56) - The architecture of Docker Desktop (13:09) - Flexibility for different distros (14:05) - Distro roadmap (16:10) - Host engine dependency (17:28) - Contexts (19:44) - DockerCon plug (19:52) - Demo break intro (20:22) - Question (21:35) - Question extensions (22:02) - Continued demo (22:36) - Anca is back (22:59) - Question which version of Ubuntu was it tested on (24:32) - Another demo notice (24:39) - Demo (24:52) - Question (25:07) - Question on arm64 support (28:24) - Interesting question inside demo (31:15) - Question release cycle (31:37) - Question running both versions on Linux (32:07) - Question about bug reports (32:30) - Nice chat about dev environments (34:05) - Comment devs focus on your application (34:32) - Question what's the next OS (35:02) - Question about dev envs (35:47) - Extensions and dev environments (36:03) - Docker compose v2 vs v1 (37:15) - Wrap up (38:30) - Last minute questions (40:18) - Question (42:12) - DockerCon plug (42:31) - Winding down (42:45) - Outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

May 6, 202242 min

Ep 100Kubernetes VCluster for "Clusters in Namespaces"

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Lukas Gentele and Rich Burroughs of Loft Labs to talk about vcluster, a Kubernetes distribution that can run inside an existing cluster namespace, aka "clusters in clusters." Lukas is the CEO of Loft Labs and Rich is their Senior Developer Advocate. VCluster is quite a universal tool for running fully-fledged Kubernetes clusters for dev and test environments and even potentially in production. In this episode, Lukas and Rich break down a ton of ways vcluster is currently being used and where they see it going in the future. Streamed live on YouTube on March 10, 2022.Unedited live recording of the complete show on YouTube (Ep #162). Includes demos.★Topic Links★Loft LabsVCluster★Lukas Gentele and Rich Burroughs★Lukas Gentele on TwitterRich Burroughs on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Template intro (00:53) - Bret custom intro (02:58) - Main show recording (03:00) - Show starts (03:05) - Introducing the guests (04:01) - What we're talking about today (04:15) - Their background (04:26) - Lukas (05:43) - Loft Labs Elevator Pitch (07:57) - Rich (09:14) - Where did the name Loft come from? (09:44) - Say hi to the regulars in chat (10:09) - VCluster (10:24) - VCluster Origin Story (12:57) - VCluster is open source (13:25) - Is VCluster in CNCF? (14:34) - Q: How does VCluster compare to Kubernetes hierarchy old namespaces? (17:53) - Q: How do you deal with system updates and upgrades? (20:19) - Running not only your own distro (21:39) - Q: Running production workloads in vcluster (24:25) - Less tolerant of an IT overlord (25:53) - The Netflix model (26:21) - Getting out of the developers' way (28:08) - Namespaces are not clusters (29:15) - Demo: Running control plane inside another cluster (32:40) - Bret's Demo Intro (33:11) - Demo ended? (36:14) - VCluster Inception (37:22) - Q: Do workloads persist on restart? (38:44) - Q: How does persistence work on storage? (40:15) - Q: Can VCluster run VCluster? (40:27) - Q: Is there a resource name size limit? (41:52) - Q: Does VCluster create virtual nodes? (46:06) - Q: Quotas or limits or shared memory CPU (48:38) - Q: VClusters inside cloud systems (49:10) - Q: Can virtual nodes have diff. characteristics? (50:28) - Q: Where do you store persistent data? (51:00) - Q: How do you dry run commands with server and client? (51:10) - Q: How well are pods isolated? (53:33) - Q: Access data in nginx pod? (54:24) - Isolated mode feature coming soon (56:17) - Q: What level do tolerations get forced? (58:52) - Q: How do vcluster pods communicate with prime cluster pods? (01:02:50) - Q: Repeated question? (01:03:43) - Show winding down You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Apr 22, 20221h 5m

Ep 99Enterprise Kubernetes Barriers

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret and his guests - Jamie Duncan and John Osborne, authors of "OpenShift in Action" - talk about Enterprise Kubernetes adoption, the barriers teams encounter and why it's worth solving the hard problems in enterprise teams by standardizing on Kubernetes. Jamie is a customer engineer at Google Cloud and John is chief architect at RedHat. In this episode, we talk a lot about Kubernetes as the new common non-vendor specific infrastructure API. Streamed live on YouTube on March 3, 2022.Unedited live recording of this show on YouTube (Ep. 161).★Topics ★40% off Manning books and products: poddevt19 http://mng.bz/raEEOpenShift in Action Google AnthosKnative EventsHalfemptyKubeVirtKata Containers★John Osborne and Jamie Duncan★John Osborne on TwitterJamie Duncan on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:54) - Bret custom intro (02:03) - Show starts (02:21) - Introductions (04:24) - Showing the book (09:10) - Why is OpenShift special? (12:11) - OpenShift Multi-Cluster Single Pane of Glass (15:00) - Anthos elevator pitch (17:36) - Question (19:45) - Which Kubernetes distribution? (24:03) - Find a balance (25:58) - Laggards on any new project (26:37) - Better hygiene (27:23) - You pay for it one way or another (30:37) - Problem of legacy monolith apps (32:25) - Question: How long container tech will stand? (33:56) - Cloud events (40:05) - Choose a product for a decade (42:09) - Challenges to adoption (43:46) - Most breaches are around misconfiguration (44:56) - Cloud stack and learning curves (45:57) - How long is your skillset valid for? (47:53) - Exhaustion of the projects (48:19) - Build a most-modern environment and up to date (51:58) - Keep code sane with linting (53:30) - Fuzzing with Halfempty (55:36) - Question (59:56) - Question (01:04:46) - Question (01:09:47) - Show winding down You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Apr 8, 20221h 11m

Ep 98Kubernetes Policy Management with Kyverno and Nirmata

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Jim Bugwadia joins Bret to discuss Kubernetes policy management and "intelligent guardrails for K8s." Jim is the CEO and co-founder of Nirmata. He's also the founder of Kyverno, an CNCF Sandbox Project and open source project for managing policies in Kubernetes. We talk about what Kyverno is, what it isn't, and what problems it solves. We also talk a bit about Narmada and how it expands on that.If you're in a team using Kubernetes together, controlling settings and standards in your workloads and clusters can be a constant source of frustration unless you have something to govern those policies across all your workloads and clusters.Streamed live on YouTube on Feb 24, 2022.Unedited live recording of the complete show on YouTube (Ep #160). Includes demos.★Topics ★Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources, and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources plus ensure OCI image supply chain security. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.Nirmata "Intelligent Guardrails for Kubernetes." Security, Compliance, and Operational Readiness of Kubernetes Across the EnterpriseSigstore Blog re Sigstore: "Linux Foundation’s Sigstore Aims to Secure Software Supply Chains"OWASP Open Web Application Security Project ★Jim Bugwadia ★Jim on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Bret custom intro (01:53) - Sponsorship (01:55) - The Guest (02:23) - How Jim got to Nirmata (06:11) - Their focus (07:17) - What is policy management? (10:17) - What's in scope? (10:32) - Demo (13:13) - Demo intro (13:43) - Demo (13:55) - What things aren't covered? (15:37) - What will be enhanced in the future? (18:47) - Demo (19:06) - Nirmata and Kyverno (20:30) - Demo (22:38) - What does the adoption look like? (23:13) - Demo (23:36) - Open source or Saas First? (24:41) - What's the future of Nirmata? (30:09) - Where to look besides Nirmata? (31:08) - Demo about sigstore (36:58) - Questions (37:02) - Question: Calico network policies (38:43) - Question: Start with Kyverno? (41:54) - Questions rapid fire (41:57) - Question: Likely to be merged into Kubernetes? (42:52) - Question (45:47) - Comment about bandwidth and podcast (47:03) - Where to go? (48:36) - Template outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Mar 25, 202248 min

Ep 97Container Management with Portainer

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾In this episode, Bret is joined by Portainer's co-founder and CEO, Neil Cresswell, to get an update on their product. If you haven't heard of Portainer, it's one of the original web apps to manage Docker, then swarm and now Kubernetes. This is one of Bret's top 10 tools for consideration to manage your container environments. Neil will show off the latest from Portainer.io. Streamed live on YouTube on February 3, 2022.Unedited live recording of the complete show on YouTube (Ep #157). Includes demos.★Topics★Portainer Portainer in DigitalOceanPortainer in Multipass★Neil Cresswell★Portainer on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:55) - Bret custom intro (02:08) - Live show (02:56) - How did Portainer come about? (07:26) - Portainer elevator pitch (08:52) - How long has Portainer been around? (09:43) - Open Source or Community Edition (10:35) - How do you run it? (11:18) - Portainer vs Swarm (16:05) - Demo Multipass (17:49) - Where does Portainer run? (18:47) - Demo (21:21) - Question (22:23) - Question + Demo (23:37) - Metrics are not stored (25:04) - Demo (25:47) - What stores is Portainer available in? (26:32) - Templates (27:30) - Question comparing to Rancher (29:47) - Demo (30:22) - What is gitops? (31:51) - Don't put Kubernetes on the internet (33:10) - Application deployment (34:12) - Demo in response to question (35:47) - The change window + question (38:28) - Question, sort of (40:40) - Protections and read-only (42:21) - Question (42:37) - Question (49:40) - Questione (50:44) - Question (51:33) - What good is a CLI? (52:22) - Creating clusters on cloud providers (55:17) - Docker and Kubernetes at the edge (58:38) - Podcast, events (59:26) - What's coming up? (01:00:42) - Show winding down You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Mar 11, 20221h 4m

Ep 96Docker Desktop Alternatives

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret explores and reviews tools that "might" replace Docker Desktop for those who decide not to pay for the subscription. He goes through the pros and cons of the alternatives. Streamed live on YouTube Jan 27, 2022.Unedited live recording of the complete show on YouTube (Ep 156). Includes demos.Bret's comparison spreadsheet: Docker Desktop Alternatives 2022, single-node for local dev-test"Trilogy" blog articles all about DevOps and DevOps engineeringDocker blog: How Docker Desktop Networking Works Under the HoodDocker blog: File Sharing with Docker DesktopWSL2 on Bret's YouTube Live show #135: Windows 11 WSL2 with Nuno do Carmo Licensing Changes YouTube Live show #138: Docker Desktop Licensing Changescontains.dev: web gooey for breaking up images and looking at the layers and the filesDocker Desktop Linux implementation roadmap in GitHub ★Join my Community ★Best coupons for my Docker and Kubernetes coursesBret's blog posts and other details are available on bretfisher.com Chat with us on our Discord Server Vital DevOps (00:00) - DDT MAIN (00:54) - Custom Intro (03:49) - Beginning of show (08:15) - Starts showing spreadsheet (08:21) - Added "note" about spreadsheet (08:44) - Back to show (01:14:07) - Start the finish (01:14:22) - Template outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 28, 20221h 14m

Ep 95Catch IaC Drift with Firefly

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Bret is joined by Eran Bibi, a co-founder and CPO of Firefly to discuss Cloud and Kubernetes drift, and dealing with unmanaged resources and policy violations in Infrastructure as Code. Streamed live on YouTube on January 13, 2022.Unedited live recording of this show on YouTube (Ep 154). Includes demos. ★Topics ★FireflyBecoming a DevOps Engineer ★Eran Bibi ★Eran Bibi on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - Intro (00:42) - Bret custom intro (02:06) - Live show (02:56) - Eran's background (04:51) - A new set of challenges (06:04) - Why create Firefly? (09:43) - How Firefly started (10:14) - The Drift: What is it? (13:51) - Bret brought down Netflix (14:39) - Who is to blame? (17:45) - Comment and question (19:16) - Put changes in code (19:53) - Question (23:28) - Bret's dream (24:39) - Demo (25:02) - The four asset categories in Firefly (28:37) - Example (31:21) - What other IaC does it support? (34:23) - Question (38:35) - Question from Bret (42:48) - Question from chat (44:35) - Demo (46:57) - Question (50:06) - New features coming? (51:25) - Show winding down (51:56) - Team in chat answering questions (52:47) - Template outro You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 18, 202252 min

Ep 94Containers as a Service with Cycle.io

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾In this episode, Jake Warner, founder of Cycle joins Bret to discuss and demo Cycle.io, a Kubernetes alternative to run your containers and reduce your DevOps complexity. In the background, it uses your cloud of choice, deploys a custom OS (using LinuxKit), and handles all the complexity of storage, backups, proxies, and networking. Streamed live on YouTube on Jan 6, 2022.Unedited live recording of this show on YouTube (Ep #153). Includes multiple demos. ★Topics ★Cycle.io Linuxkit on GitHubCycle Podcast: https://www.cycle.io/podcasts ★Find Jake ★On Twitter @JakeWarner ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template Intro (00:42) - Custom Intro (01:41) - Live Show (05:55) - Question (08:06) - Question (12:17) - Question (14:53) - Question (20:15) - Demo (20:45) - Question (20:58) - Question (24:51) - Question (26:32) - Demo (30:02) - Question (31:16) - Question (33:02) - Another Demo (35:33) - Question (36:43) - Question (37:09) - (41:55) - Question (46:29) - Question (48:42) - Question You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 11, 202252 min

Ep 93Testcontainers: Using Code to Control Docker for Testing

🙌 The Agentic DevOps Guild has launched! It's a training + community + mentorship program for engineers wanting to learn the latest CI/CD automation and dive into Agentic DevOps. Meetups are happening now, with new course videos dropping every few weeks. Join the Guild and become your team's leader in AI for infrastructure automation https://www.bretfisher.com/theguild 🍾Control your testing in containers with your code! Bret's guest, Sergei Egorov, walks us through testcontainers.org and AtomicJar for using API's to control Docker from Go, Java, Python, Node, Rust, Scala, and more. Streamed live on YouTube on December 9, 2021.Unedited live recording of this show on YouTube (Ep 149). ★Topics ★TestcontainersTestcontainers on GitHub Company behind TestcontainersTestcontainers Cloud blog ★Sergei Egorov ★Sergei on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server, Vital DevOpsHomepage bretfisher.com (00:00) - Template intro (00:43) - Bret custom intro (02:08) - Live show (03:41) - Sergei's and AtomicJar's Background (05:20) - About the Test Containers project (10:07) - How does Test Containers work? (12:48) - Dangling containers (18:09) - About AtomicJar (28:00) - Question (29:34) - Question (41:10) - Question: Starting with test containers (43:40) - What is coming next? (45:19) - Question (46:44) - A little bit about Lima (50:18) - Show winding down (52:02) - Does Sergey have a 'best of tech'? (52:02) - Sergey and Bret love Notion You can also support this podcast by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Feb 4, 202252 min