Container Vulnerability Scanning

PodCTL - Enterprise Kubernetes

#Google #Tech News #Red Hat OpenShift #Tech #News #Industries #Podcasting Education #Kubernetes #Openshift #CONTAIN #Docker #Cloudnative #Application #DevOps #Cloud Computing #AWS #Azure #Red Hat

17:27

Why do so many of us get nervous when public speaking? Communication expert Lawrence Bernstein says the key to dealing with the pressure is as simple as having a casual chat. He introduces the "coffee shop test" as a way to help you overcome nerves, connect with your audience and deliver a message that truly resonates. After the talk, Modupe explains a similar approach in academia called the "Grandma test," and how public speaking can be as simple as a conversation with grandma. Want to help shape TED’s shows going forward? Fill out our survey ! Become a TED Member today at ted.com/join Hosted on Acast. See acast.com/privacy for more information.…

7 years ago 25:45

MP3•Episode home

Show: 32
Show Overview:Tyler and Aaron Delp talk with Liz Rice (@lizrice, Technology Evangelist @AquaSecTeam) about what's easy—and what's not—about finding and patching security vulnerabilities in containers. This is a cross-over show with @TheCloudcastNet podcast.
Show Notes:

Liz’s talk at Velocity Conf - “What’s so hard about container vulnerability scanning?”
Use code CLOUD to get 20% off Velocity or OSCON tickets
Aqua Security Homepage
Liz Rice’s Blog
[Video] Kubernetes, Metadata and You (KubeCon 2017 Austin)

Topic 1 - Welcome to the show Liz. Tell us a little bit about your background and the types of things that you’re working on these days.
Topic 2 - Let’s start with the basics. A container is defined by a file (e.g. Dockerfile) that the user/developer/operator defines. How can a vulnerability get into that file?

Topic 3 - Is it up to the CI/CD system or host OS (where the container runs) or container orchestrator (e.g. Kubernetes) or container registry to figure out if a vulnerability exists?

Topic 4 - How do most container registries today manage vulnerability lists, container scanning and potential mitigations? What are the difficult parts of those tasks?

Topic 5 - Most containers today are Linux containers. Are you seeing anything happening (yet) around how to manage Windows containers vulnerabilities? Is the assumption that Microsoft will fix this through one of their existing tools, or are things happening in the open source community as well?

Feedback?

89 episodes

Container Vulnerability Scanning

PodCTL - Enterprise Kubernetes

455 subscribers

published 7 years ago

MP3•Episode home

Liz’s talk at Velocity Conf - “What’s so hard about container vulnerability scanning?”
Use code CLOUD to get 20% off Velocity or OSCON tickets
Aqua Security Homepage
Liz Rice’s Blog
[Video] Kubernetes, Metadata and You (KubeCon 2017 Austin)

Topic 3 - Is it up to the CI/CD system or host OS (where the container runs) or container orchestrator (e.g. Kubernetes) or container registry to figure out if a vulnerability exists?

Topic 4 - How do most container registries today manage vulnerability lists, container scanning and potential mitigations? What are the difficult parts of those tasks?

Feedback?

89 episodes

#Google #Tech News #Red Hat OpenShift #Tech #News #Industries #Podcasting Education #Kubernetes #Openshift #CONTAIN #Docker #Cloudnative #Application #DevOps #Cloud Computing #AWS #Azure #Red Hat

All episodes

1
PodCTL is back! Season 2 teaser. 1:44

5 years ago1:44

1:44

SEASON 2 - Trailer ABOUT THE SHOW: It's been a few months, but it's good to back with our Kubernetes community. Since there are so many things happening around the Kubernetes community, and many people are new, we decided to move to a "season" format. Each season will include 8-10 episodes, around 12-15 minutes, that will allow the audience to progressively learn more about a specific focus area. In Season 2, we're going to get back to the basics of Kubernetes, both from a technology and business perspective. FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E1 - What is Kubernetes? 13:52

5 years ago13:52

13:52

SEASON 2 - EPISODE 1 ABOUT THE SHOW: In this show, we look at the core architecture of Kubernetes, and what is included within the Kubernetes project. SHOW LINKS: Kubernetes Homepage CNCF Homepage FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com

1
S2:E2 - What challenges can Kubernetes solve? 11:24

5 years ago11:24

11:24

SEASON 2 - EPISODE 2 ABOUT THE SHOW: In this show, we look at the why technologists and business leaders are choosing to use Kubernetes to help solve new business challenges. We highlight the various types of use-cases that can be enabled by the core technologies within Kubernetes. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E3 - How does Kubernetes get created? 11:56

5 years ago11:56

11:56

SEASON 2 - EPISODE 3 ABOUT THE SHOW: In this show, we look at the how Kubernetes is created as an open source projects, with contributions from hundreds of engineers, and governance by the CNCF. We explore the frequency of releases, and how new features are categorized and updated. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E4 - How does Kubernetes get released? 11:34

5 years ago11:34

11:34

SEASON 2 - EPISODE 4 ABOUT THE SHOW: In this show, we discuss the frequency of Kubernetes releases, as well as the differences between upstream project releases and vendor-created distributions (or cloud services). We also discuss why all variations of Kubernetes are not running the same version, and why this might create challenges for companies using Kubernetes. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E5 - What's included in Kubernetes? 10:21

5 years ago10:21

10:21

SEASON 2 - EPISODE 5 ABOUT THE SHOW: In this show, we explore one of the most misunderstood topics surrounding Kubernetes - what is actually included in the upstream project? We also explore how this often creates gaps for companies that want to use Kubernetes as part of their application platform. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E6 - What's not included in Kubernetes? 12:52

5 years ago12:52

12:52

SEASON 2 - EPISODE 6 ABOUT THE SHOW: In this show, we look at what is not included in the upstream Kubernetes project, and why the add-on elements can create differences between different implementations that use Kubernetes as the orchestration engine for containerized applications. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
S2:E7 - What skills are needed for Kubernetes? 13:39

5 years ago13:39

13:39

SEASON 2 - EPISODE 7 ABOUT THE SHOW: In this show, we explore the technical skills that are most frequently needed to be success in either operating a Kubernetes platform, or building applications that use Kubernetes. SHOW LINKS: Kubernetes Homepage CNCF Homepage Business stories of companies using Kubernetes FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podctl.com…

1
DevOps for Dummies 26:23

5 years ago26:23

26:23

SHOW: 75 SHOW OVERVIEW: Chris talks with Emily Freeman (@editingemily, Ops Advocacy Manager, Microsoft) about the biggest challenges faced in cloud adoption and DevOps culture changes. SHOW NOTES: OpenShift Homepage - http://openshift.com Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com Emily Freeman's Homepage DevOps for Dummies (book) SHOW TOPICS: Topic 1 - What is an Ops Advocacy Manager? Topic 2 - What are some of the biggest challenges you and your team are facing in cloud and more specifically container adoption amongst those you help? Topic 3 - You wrote DevOps for Dummies which is wonderful. Now you’re working on a new project? 97 Things Every Cloud Engineer Should Know. Care to tell us more about that? Topic 4 - The tech job train and its long term impact FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
Introduction to Java Quarkus for Kubernetes 29:00

5 years ago29:00

29:00

SHOW: 76 SHOW OVERVIEW: Chris talks with Daniel Oh ( @danieloh30 , Principal Technical Product Marketing Manager, Red Hat) about new innovation in deploying Java applications on Kubernetes, with Quarkus. SHOW NOTES: OpenShift Homepage - http://openshift.com Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com Quarkus Homepage Understanding Java Quarkus (videos) SHOW TOPICS: Topic 1 - Quarkus: What is it, how does it save developers so much time, and how do folks get started Topic 2 - Java developers are in demand across the planet and the Java language is evolving at the speed of cloud-native. How do you stay sharp on the skills you need and stay aware of the new things in the ecosystem? Topic 3 - Does this change the reality of Java development on containers? Will Quarkus help developers feel more comfortable using Java as serverless apps on immutable infrastructure (i.e. Kubernetes/OpenShift)? How does Quarkus change the reality for developers? Topic 4 - Does Quarkus help Spring Boot apps and Spring Developers with Kubernetes/OpenShift? Topic 5 - How does Quarkus unify imperative and reactive applications? FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
Digging into OnCallOps 36:13

6 years ago36:13

36:13

SHOW: 74 SHOW OVERVIEW: Chris talks with Matt Stratton (@mattstratton, DevOps Advocate, PagerDuty) about how to better manage OnCall Rotations, integrating DevOps concepts with OnCall, and suggestions about better organizing to handle alerting and observability. SHOW NOTES: OpenShift Homepage - http://openshift.com Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com Matty Stratton - DevOps Talks Arrested DevOps (podcast) - Matty Stratton is a co-host SHOW TOPICS: Topic 1 - Since you work at PagerDuty, how does PagerDuty use PagerDuty? Topic 2 - What are some interesting uses of PagerDuty you’ve seen out in the wild? Topic 3 - You’ve built on call rotations. You’ve got your scars. One thing I’ve noticed is discussions about alert fatigue. Do you have any suggestions around how organization can better handle on call and alerting in general? ( “Fight, Flight, or Freeze - Releasing Organizational Trauma” ) Topic 4 - DevOps at 10. For me, DevOps crossing into that double-digit year number seems to have increased awareness of it and its potential for orgs not embracing it. What have you seen in terms of organizations embracing DevOps? What are Matt’s highlights of DevOps after ten years? Topic 5 - You're writing an article on SysAdvent website called “15 Ways to Make On-Call More Fun” ; It’s supposed to be published around December 3rd. Watch https://sysadvent.blogspot.com/ for this year’s stuff. FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
KubeCon NA 2019 Contributor Summit & Event Preview 25:11

6 years ago25:11

25:11

SHOW: 73 SHOW OVERVIEW: Chris talks with Marky Jackson (@markyjackson5, Senior Software Engineer, Sysdig) about the KubeCon Contributor Summit, their experiences contributing to the Kubernetes community, and involvement of the military veterans in open source communities. SHOW NOTES: OpenShift Homepage - http://openshift.com Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com Kubernetes Contributor Summit Kubernetes New Contributor Workshop SHOW TOPICS: Topic 1 - Welcome to the show. This time next week we’ll be getting ready for a busy day in San Diego at KubeCon NA 2019. What are you doing at the conference? Topic 2 - Contributor Summit: Can you explain what this is, who should attend, and why it’s being put together? Topic 3 - A lot of people feel intimidated by Kubernetes. But, every year the new contributor workshop fills up quickly. Why do you think that is? Topic 4 - The day we’re recording this is Veterans’ Day. There are a number of veterans working in the Kubernetes community. What is it about Kubernetes that brings Veterans to the project? Topic 5 - Inviting more Military members active duty, reserve or retired. We want to hear from you. We need you because... FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
Building a Cloud-native Kubernetes Platform 37:28

6 years ago37:28

37:28

SHOW: 72 SHOW OVERVIEW: Brian talks with Joe Fernandes (@JoeFern1, VP of Product Management, Red Hat Cloud BU) about Red Hat's experience with Kubernetes, innovating upstream and integrating products, OpenShift 4 cloud-like architectural changes, allowing developers to be productive, and new ways to create a better customer experience. SHOW NOTES: OpenShift Homepage - http://openshift.com Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com OpenShift Commons - http://commons.openshift.org OpenShift Blog (Joe Fernandes) - https://blog.openshift.com/author/joefernandes/ SHOW TOPICS: Topic 1 - Welcome to the show. Let’s start by talking about your experience at Red Hat in managing OpenShift. Topic 2 - We talk a lot about Kubernetes on this show obviously. Tell us how you and the OpenShift product team first got involved with Kubernetes. Topic 2a - Give the audience a sense of what it takes to build (and continue to maintain) not just a commercially-supported Kubernetes distribution, but all the on-going integrations to make it a production application platform. Topic 2b - What are some of the things needed to evolve a platform from “just running containerized apps” to one that is intelligent enough to manage many different types of applications? Topic 3 - There is always some Twitter chatter that Kubernetes is too complicated and nobody should run Kubernetes except the 3 major public cloud providers. What types of things has OpenShift needed to do to be able to run “like a managed cloud platform”? Topic 4 - When you get “above” Kubernetes, you have to start thinking about how developers will interact with the platform. This is where there are a lot of opinions, and many new innovations/projects. How does OpenShift think about “building on the platform”? Topic 5 - Part of “the cloud experience” is being able to gather information about how the platform is used, in order to make better product decisions. The public cloud does this behind the scenes for every customer. Can OpenShift do anything to help create better customer experiences? FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
The Intersection of DevOps and Kubernetes 28:02

6 years ago28:02

28:02

SHOW: 71 SHOW OVERVIEW: Brian talks with Chris Short (@ChrisShort, Technical Marketing @RedHat, CNCF Ambassador, writes at DevOps’ish) about DevOps 10th birthday, how Kubernetes helps DevOps, and the exciting news that Chris will be co-hosting PodCTL. SHOW NOTES: Try OpenShift 4 - http://try.openshift.com Learn OpenShift - http://learn.openshift.com Red Hat announces Global Transformation Office - https://www.redhat.com/en/blog/introducing-red-hat-global-transformation-office Chris’ DevOps’ish Homepage (subscribe to the newsletter) - https://devopsish.com/ SHOW TOPICS: Topic 1 - Welcome to the show. Let’s talk a little bit about your background and the plethora of things you’re working on these days. DevOps’ish: Weekly newsletter covering cloud-native, DevOps, open source, and industry news Cloud Native Ambassador: Our Super Bowl is coming up (KubeCon) Ansible Operators (get your stickers at KubeCon) OpenShift team helping customers getting their clusters up and running Topic 1a - BIG NEWS! Chris Short is joining the show to be a new co-host. Topic 1b - MORE BIG NEWS! Kevin Behr, Jabe Bloom, John Willis, Andrew Clay Shafer are joining Red Hat to create the Global Transformation Office Topic 2 - A couple of weeks ago, the DevOps community (and DevOps Days) celebrated its 10yrs anniversary. You’ve been involved in that community for a number of years. What are the big trends happening around DevOps these days? (have we figured out the difference between DevOps and SRE?) Topic 3 - One of the common challenges that companies often talk about it scaling Agile/DevOps across their company. What are some of the things you’re seeing that enable success? What are some of the common mistakes that companies make in trying to scale? Topic 4 - We tend to talk about Kubernetes quite a bit on this show. As you’re beginning to work with Kubernetes more, are you finding that it helps in scaling Agile and DevOps? Topic 5 - You’re going to be hosting a number of the PodCTL shows going forward. What are some of the topics that you hope to cover in 2019 and 2020? FEEDBACK? Email: PodCTL at gmail dot com Twitter: @PodCTL Web: http://podcast.podctl.com…

1
Introduction to GitOps 20:44

6 years ago20:44