Bret is joined by two Chainguard co-founders, CEO Dan Lorenc and Head of Product, Kim Lewandowski, to break down the ins and outs of supply chain security and talk about Chainguard's approach to securing it. We dive into tools, including their new Wolfi Linux distro.We first talk about what that even is, because it's a buzzword right now, and not everyone's on the same page on what securing your supply chain even means in the world of software. Then we jump into base images for containers, and their project Wolfi. We talk a lot about Wolfi in this episode, because it has the potential to change how we build our containers.Streamed live on YouTube on October 13, 2022.Unedited live recording of this show on YouTube (Ep #188)★Topics★Chainguard WebsiteChainguard TwitterChainguard AcademyWolfiWolfi-based imagesSigstore★Dan Lorenc★Dan Lorenc on TwitterDan Lorenc on Linkedin★Kim Lewandowski★Kim Lewandowski on TwitterKim Lewandowski on Linkedin★Join my Community★New live course on CI automation and gitops deploymentsBest coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:54) - Custom intro (02:51) - Main show (03:04) - Introductions (03:24) - How did Chainguard get started? (04:23) - What is a supply chain? (06:30) - First Security Things (08:55) - The article and the base image (12:02) - Wolfi elevator pitch (14:49) - How do packages get into Wolfi? (18:49) - How do Wolfi packages work (21:57) - Chainguard Enforce (26:43) - Question about in-toto (29:08) - Preventing unsigned images in production (30:44) - Blocking vulnerable dependencies with policies (31:39) - Scanning on servers (34:02) - Question (35:53) - Question (37:50) - Getting started with Wolfi (39:57) - Where are they on Github (demo?) (40:50) - Question about vex (43:13) - What else? (43:40) - Chainguard Academy (45:24) - Professional services (49:32) - Wrapping up (49:56) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Nirmal Mehta of AWS and engineering consultant Laura Tacho, for the annual Best of DevOps. We've started this trend of going through the year's best (and worst) of DevOps every December, everyone brings their topics, we mix them all up and try to get through all of it. This year, we came pretty close. We cover many topics in this year's episode, things like desktop GUIs for containers, the return of real-life conferences, Docker reaching a significant milestone, AI, ML, data platforms and much, much more.Streamed live on YouTube on December 8, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #194)★Topics★Full doc of topics (more than we could cover)Year of Desktop GUI’s for Container Dev and Cloud Native MgmtDocker Extensions List Rancher DesktopPodman DesktopLens commercialOpenLensk9s websiteKui websiteDevOps Survey TrendsOpenTelemetry Articles- Transforming IT Departments - Properly Explained and Demoed - Getting StartedKarpenter websiteeBPF and Profiling- Pixie- Parca★Laura Tacho★Laura's websiteLaura's CourseLaura on Twitter★Nirmal Mehta★Nirmal on LinkedinNirmal on MastodonNirmal on Twitter★Join my Community★New live course on CI automation and gitops deployments Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Custom intro (04:25) - Main show (04:45) - Introducing the guests (05:20) - In today's episode (05:52) - The year of desktop GUIs (12:14) - In real life conferences (12:46) - Boom and Bust (13:30) - Will Jenkins go away? (14:39) - GitHub Actions (16:14) - Laura's Rubber-band Theory (19:09) - Revenue and Docker's comeback (21:02) - Other trends (21:11) - DORA report (22:21) - Increased security requirements (24:31) - Jumping on the security bandwagon (25:43) - Security by default (27:04) - Rapid fire Kubernetes happenings (28:06) - Bret's Maven Course (28:15) - Laura's teaching (29:04) - WASM+ Docker (29:38) - Slim.ai (30:29) - Open telemetry (35:37) - Carpenter (37:04) - Lack of staff (37:50) - AI (40:38) - Boosting productivity (44:38) - ML models developed and running in containers (46:14) - Wrapping up (46:40) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Michael Irwin, Sr. Manager for DevRel at Docker, to review and demo our top 2022 new features and announcements from Docker Inc. We run through the very long list in this episode and sadly, had to skip over the smaller, nuance features or subtle changes and focused on the bigger things - a major one being Docker extensions - as well as Docker Hub support for OCI artifacts, like the Helm charts, volume, WASM, Hardened Docker Desktop, tilt.dev and much more.Streamed live on YouTube on December 1,  2022. Includes demos.Unedited live recording of this show on YouTube (Ep #193)★Topics★Docker Blog, "Products" category (most of our topics came from here)Recapping the last year of Docker Desktop (YouTube, September 2022)What's new in Docker Desktop (YouTube, DockerCon 2022, May 2022)What's new in Docker build (YouTube, DockerCon 2022, May 2022)★Michael Irwin★Michael on TwitterMichael's Website★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:53) - Custom intro (03:49) - Main show (04:00) - Welcome to Michael (05:24) - Keeping up with updates to our tools (08:03) - OCI artifacts (09:13) - What are OCI artifacts? (12:46) - WASM (16:35) - DEMO of WASM (23:16) - Question (23:43) - Question (25:42) - Question (27:29) - Question (31:31) - Extensions (34:40) - Question (36:41) - Question (39:37) - Dev Environments (42:51) - Compose v2 (44:54) - Hardened Desktop (49:46) - Tilt (51:17) - Docker Desktop for Linux (53:01) - DSO Website (55:48) - More vulnerabilities every year (58:51) - Moving Dockerd image management to containerd (01:02:29) - Buildkit improvements (01:05:50) - Buildkit's link feature (01:09:59) - Stuff not covered (01:11:50) - Winding down (01:12:23) - Question (01:17:51) - Show and guest calendar (01:18:20) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Brian Christner, a Docker Captain and Chief, Online Gaming for Grand Casino Baden (jackpots.ch), who returns to the show to discuss his top recommended skills for improving your DevOps expertise.Both Bret and Brian have been consultants on and off throughout their careers and also in positions where they needed to hire other engineers - often other DevOps engineers. They share their perspectives on the different types of DevOps roles and the various jobs they need to fill.In this episode, we thought it would be helpful to bring our experience on DevOps jobs and look at the most essential and in-demand skills throughout the industry.Streamed live on YouTube on October 6, 2022.Unedited live recording of this show on YouTube (Ep #187)★Topics★DevOps Foundations CourseEngineering Management Training from Laura TachoAwesome Docker resourcesAwesome Everything Lists on GitHubKubernetes This Month with Nigel PoultonAWS Cloud TrainingContainer Automation Examples by BretDocker Observability by Brain★Brian Christner★Brian on TwitterBrian on LinkedInBrian's Courses Promo Code TRAEFIK50 for 50% offBrian's GitHub Brian's Blog★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:53) - Intro 2 (01:47) - Main show (01:53) - Welcome (03:01) - Brian's corner of the internet (05:37) - Impact of certifications in the hiring process (06:01) - What's your pet project? (06:58) - What lights you up? (08:27) - Sharers rather than Knowers (09:51) - About clouds (16:35) - DevOps are enablers (17:49) - Be replaceable (19:58) - Soft Skills (20:20) - The many hats of Senior DevOps (20:23) - Encouragers (20:36) - Protectors (20:44) - Realistic (21:01) - Protect your team (21:27) - Say no (21:55) - Problem solvers (21:58) - Listeners (23:49) - Question (24:48) - Awesome Docker List (27:46) - DevOps is vast and wide (29:57) - Observability (31:48) - Choose what to measure (32:50) - Junior and Senior DevOps Skillsets (34:53) - Being proactive in measuring (37:03) - Question (38:07) - Use the built-in tools first (41:41) - Quick way to get your hands dirty (47:44) - Security (50:50) - Infrastructure-as-Code (54:51) - Being a generalist or a specialist (56:32) - Enable others to work without needing you (58:13) - Question (58:16) - Getting started with a cloud (01:01:11) - Nigel Poulton (01:01:58) - You can't be responsible for everything (01:03:53) - Are certifications mandatory? (01:06:34) - Deployment checklist question (01:07:22) - Question (01:12:14) - Question (01:13:00) - Announcements (01:15:12) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Rosemary Wang from HashiCorp to show off Vault for Kubernetes, an an open source secrets provider.Rosemary is a return guest and does her usual fantastic job at explaining the complex topics around storing secrets, who needs Vault and why, running Vault on Kubernetes, the Vault storage backend and so much more.Streamed live on YouTube on September 29, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #186)★Topics★Vault websiteHashiCorp CloudRaft storage for Vault, how Raft worksExample repo: HashiCorp Vault for Development Teams★Rosemary Wang★Rosemary on TwitterRosemary on Linkedin★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:54) - Bret intro (01:36) - Main show (01:52) - Course updates (02:12) - Introductions (03:15) - Today's Topic (04:24) - Anyone who doesn't need secret management? (07:13) - Elevator pitch for Vault (09:22) - Handling Rotation and Exit Strategies (11:49) - When do I need Vault? (14:35) - Question about Aquilas (14:54) - Vault is open source (16:50) - We ain't got time for that (17:41) - Can I run Vault on Kubernetes? (18:39) - Question: Where are Secrets Stored? (19:59) - Raft all the things (21:19) - Question: Vault and SSL Certificates (22:31) - Question and Demo (22:56) - Demo intro (23:26) - Demo (23:27) - Question about HSMs (23:50) - Question (24:44) - Question about Unsealed Tokens (27:18) - Question (29:42) - Bret's First Question about Toil (36:33) - Question: Password Managers and Vault (39:44) - Question (41:05) - Question (43:38) - Notes about Vault Agent Sidecar and Authentication (45:15) - Bret's Summary (48:48) - Question about Getting Started (49:44) - Starting with Sealed Secrets (52:30) - Wrap up (53:06) - Getting in touch with Rosemary (53:43) - What's next for Rosemary? (54:31) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Lee Calcote and Nic Jackson, co-authors of the Service Mesh Patterns book, to discuss service mesh for Docker Desktop and Compose apps with the new Meshery extension for Docker desktop.They talk about what service mesh is and go into the new Measure extension for Docker Desktop, which is a CNCF sandbox project. One of its bigger features is to help you try out different service meshes and test them with only a few clicks. They also cover other features of their tools, such as the beta of MeshMap which helps you visualize your clusters and apply better practices to your service mesh.Streamed live on YouTube on September 22, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #185)★Topics★Learn Service MeshMeshery Docker Extension MeshMap Service Mesh Patterns Book★Nic Jackson, Principal Developer Advocate, HashiCorp★Nic on TwitterNic on LinkedinNic Jackson on YouTube Shipyard website★Lee Calcote, Founder and CEO, Layer5★Lee on TwitterLee on Linkedin★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:52) - Bret intro (01:53) - Main show (01:58) - The guests (02:39) - Lee and Layer5 (03:55) - Nick and Hashicorp (05:51) - Lee and Nick (06:54) - Challenges of writing a book (07:37) - Layer5 and Meshery (08:38) - Meshery elevator pitch (10:46) - Service Mesh 101 (11:16) - Retry (12:20) - Observability (13:29) - Question Docker Swarm Supports Docker Extensions? (15:39) - What does service mesh seem like? (16:38) - Platform engineering (23:54) - Distributed systems concerns (25:39) - preparation (26:16) - What would you use Meshery locally for? (27:50) - Mesh map (28:48) - Demo but mostly theoretical (32:45) - Visual designer (33:11) - Catalog of extensions (33:49) - Performance management (37:03) - Installing the extension (37:52) - Close to the end (38:12) - A lot going on online (38:54) - Shipyard (42:26) - Starship (42:44) - Wrapping up (42:55) - Status of the book (49:45) - Closing (50:01) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Liz Rice, Chief Open Source Officer at Isovalent, the makers of Cilium, to discuss Cilium and eBPF. Liz Rice is back to give us more insight into eBPF and the Cilium project. Isovalent is the company that created and manages the Cilium Project, which does an increasing number of things for Kubernetes, including networking, CNI support, security, advanced networking stuff, and observability, as well as other things like load balancing. Liz is one of my go-to experts on how low-level Linux internals work. She's been speaking about container internals since the early days of Docker.Streamed live on YouTube on September 8, 2022.Unedited live recording of this show on YouTube (Ep #183)★Topics★Cilium websiteIsovalent websiteeBPFNetwork Policy Editor★Liz Rice★Liz Rice on TwitterLiz Rice's websiteBooks on Containers, eBPF, Kubernetes and Go★Join my Community★ Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:53) - Bret intro (01:41) - Main interview (01:44) - The merch store (02:39) - More merch talk (04:19) - Introductions (05:16) - What else Liz does (05:26) - Liz's books (06:22) - Brief history of EBPF (07:41) - Kernel modules before EBPF (08:46) - EBPF vs Kernel Modules (09:57) - EBFP is dynamically loaded (11:23) - Performance and Data Transfer (12:35) - Isovalent and Cilium (14:12) - How Cilium started (16:18) - Specific versions of the kernel? (17:32) - Where do we use EBPF in Kubernetes? (18:12) - CNI (20:02) - Question: Where can you start learning EBPF? (23:04) - Question (30:22) - All open source? (31:08) - Question Cilium as a service mesh (32:32) - Enabling certain features (33:39) - Question (34:11) - Question (35:20) - Question (37:21) - Wrapping up Cilium in cloud (38:22) - Offloading programs XDP (40:16) - Question about GUI (42:41) - Question (49:29) - Question (52:10) - EBPF on Windows? (53:13) - How is it implemented? (54:02) - Wrapping up You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Shauli Rozen, CEO and Co-Founder of ARMO, creators of Kubescape. Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer, and image vulnerability scanning.I'm a fan of tools like this and specifically of Kubescape, which I use and recommend to my clients. The scanner can scan your YAML manifests of your Kubernetes resources. It can scan your live Kubernetes clusters. And it can scan the YAML in your Git repos, as well as the images themselves that you're deploying to Kubernetes. As ARMO calls it, it's a single pane of glass into your Kubernetes security. Streamed live on YouTube on September 1, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #182)★Topics★Kubescape's GitHub K8s Security Dashboard ARMO website★Shauli Rozen★Shauli on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us and fellow students on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Main intro (00:53) - Custom intro (02:45) - Main show (02:49) - Introductions (03:43) - The Kubescape project (04:25) - Go to the developers (05:26) - Security low-handing fruit (06:19) - I just want to be a user (09:32) - Kubescape elevator pitch (12:00) - Good learning tool (12:48) - Linting (13:20) - Remediation (14:45) - The SaaS Version (16:19) - Does DevOps not care about security? (18:24) - A gap in terminology (20:31) - Security compliance and guidance (25:58) - GitOps Approach (27:38) - Asking about demo (28:19) - Question (29:21) - Become a contributor (30:55) - Demo intro (31:21) - Demo end part (31:26) - Question (31:56) - Visualizer (33:23) - Question (34:41) - Question (38:55) - Mindset differences (39:49) - Question (42:06) - Question (42:33) - Winding down (43:26) - How to get started (44:26) - Template outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Martin Wimpress and Pieter van Noordennen from Slim.ai to discuss some ways to slim down your Docker images and reduce the attack surface of your containers in the process.Many companies and projects have tried to do similar things before - Slim Images, Alpine Images, Distro List, Build Packs, and even Docker tried a few years back, to create intelligence and guidance around migrating legacy apps into slim production quality images. Those efforts were scrapped in 2019. The dual mandate of generating Docker images - easy to understand and as minimal as possible, with the lowest CVE vulnerability count - was not achieved by any of those projects. Automation and intelligence like Slim.ai is the future of building container images and also the future of complex monoliths and legacy apps with a lot of dependencies.Streamed live on YouTube on July 28, 2022. Includes demos.Unedited live recording of this show on YouTube (Ep #180)★Topics★Docker SlimSlim.ai★Martin Wimpress★Martin Wimpress on Twitter★Pieter van Noordennen★Pieter van Noordennen on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server DevOps FansHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:53) - Custom intro (04:32) - Main show (04:51) - How Slim.ai started (07:07) - Complexities of shipping images (08:53) - DockerSlim (10:27) - Setting the stage for demo (13:02) - Demo intro (13:28) - Demo (13:33) - Bret's Question (22:20) - Different container composition options (23:36) - Demo intro 2 (23:42) - Bret loves Docker Desktop and Extensions (27:28) - Pausing Docker (27:54) - The extension is the same as the SaaS (28:30) - It's free (29:03) - Demo? (29:03) - Distroless and optimized starting points (34:47) - Build engineering nightmare (36:15) - Not just security considerations (39:03) - Understanding dependency differences (40:34) - Question (42:03) - Slim cli (46:08) - Getting started (47:38) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Dmitriy Kalinin and John Ryan, software engineers at VMWare, to show off the many Carvel project tools.Carvel provides a set of reliable, single-purpose, composable tools that aid in your application building, configuration, and deployment to Kubernetes. The Carvel project includes tools for templating, image building and tracking, secrets management, app deploying and more. The tool list includes ytt, kapp, kapp-controller, kbld, imgpkg, vendir, and kwt.Streamed live on YouTube on July 14, 2022.Unedited live recording of this show on YouTube (Ep #178)★Topics★Carvel websiteCarvel on Twitter★Dmitriy Kalinin★Dmitriy Kalinin on Twitter★John Ryan★John Ryan on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:51) - Custom intro (01:50) - Main Show (02:14) - A lot of tools (03:19) - How did Carvel begin? (06:02) - Use the tools differently across all stages (06:59) - Building from the ground up (08:43) - Are the tools independently used? (09:28) - The first Carvel tool (09:42) - ytt (10:57) - kapp (11:57) - What is YTT (15:03) - Creating more consistency? (17:43) - How to use with compose (18:47) - Question about Q (21:40) - Question (24:33) - Question (25:12) - Solve a real problem (26:09) - Don't overcomplicate yourself (28:04) - What problem does Kapp solve? (30:37) - Kapp and Kapp controller (36:39) - Question (37:16) - Rapid fire (37:22) - Kbuild (43:28) - How does image package help? (46:57) - The experimental tools (47:45) - Secret generation (52:47) - Vendor (56:33) - Getting involved (58:06) - Last thoughts (59:20) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret goes through his top recommendations for securing container images, Docker containers and Kubernetes pods.This is a tip-packed show where Bret lists much of what's documented in his courses, starting with the first steps you should take, and the bare security necessities that everyone should be doing. Then he covers more advanced security activities you should consider once the basics are covered.Streamed live on YouTube on July 7, 2022.Unedited live recording of this show on YouTube (Ep #177).★Topics★Bret's Container Security AMADocker Security DocsDocker Buys AtomistSlim.ai website: Auto-slimming imagesDocker Slim toolKubescape websiteKubernetes Security ContextSeccomp by defaultLint all files with super-linterDatree K8s file scanKubernetes BenchmarkMy GitHub Actions examples: Automate your builds, CVE scans, and moreVideo on building a more secure base imageSnyk security tools websiteTrivy CVE and K8s scansFalco for watching servers for bad behavior★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - Intro (00:52) - Mid-Roll Intro (00:53) - Bret's Intro (01:46) - Main show (02:45) - What should I worry about first? The Basics! (03:47) - Start with images (04:28) - Bret.show/SecurityFirst (05:04) - CVE scanning (05:36) - Dependency scanning (06:28) - Bret's Github with Dependabot (07:25) - OS dependencies with Trivy and Snyk (09:23) - Bret's Talks (10:17) - Alpine is not always good (11:27) - All hands on automation (12:14) - Don't run as root inside the image (14:04) - Question (15:20) - Making slimmer images (15:52) - Atomist (17:19) - DockerSlim (20:48) - Question (22:21) - Question (24:09) - Question (24:36) - Question (24:45) - Question (25:15) - Securing Docker (25:47) - Docker host scanner (26:28) - Falco (26:55) - Just use Docker (28:28) - Question about Windows Containers (30:19) - Maintain your servers (31:12) - Docker in the cloud (32:29) - Always stay on the latest Kubernetes release (33:33) - Kube-bench (34:22) - Tree.io (35:04) - Pod specs (36:08) - Sec comp (37:33) - Security context (38:57) - Privilege escalation (39:50) - Superlinter (40:54) - Question about Fargate (42:35) - Network policies (44:38) - Kubernetes docs article on security context (45:16) - Question (47:43) - Third-party security monitoring (47:57) - Question about volumes (48:45) - Question about Docker subnets (49:30) - Question about secrets (50:17) - Question about subnets 2 (50:48) - Question (53:03) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Marc Campbell of Replicated to discuss the challenges of deploying your software on other people's Kubernetes.Following a discussion of the problems Replicated is solving, they go over all the great open source projects they are developing for deploying, managing, and troubleshooting Kubernetes.Streamed live on YouTube on June 23, 2022.Unedited live recording of this show on YouTube (Ep #175).★Topics★Replicated Replicated OSS Projects Kubernetes TroubleshooterSchema Hero Kubelist podcast, CNCF project leader interviewsEnterprise Ready assessment and podcastkURL - Customize your Kubernetes Installer KOTS - Manage COTS on K8s Find Outdated ImagesUnfork your custom Helm charts ★Marc Campbell★Marc Campbell on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:03) - Template intro (00:53) - Bret intro (03:02) - Main show (03:42) - How Mark Got to Replicated (04:28) - How Replicated Started (05:01) - All projects open source (06:04) - COTS (11:31) - Kubernetes: Limiter or Enabler? (13:06) - Kurl (16:57) - KOTS (20:15) - Not all users are going to be helm experts (21:13) - Unfork (25:08) - Troubleshooting Kubernetes (35:02) - Outdated (40:35) - Their podcasts (41:41) - Schemahero (50:19) - Other tools like kurl? (52:02) - Are teams adopting kots? (54:27) - Question (55:49) - What's next? (57:39) - Winding down (57:48) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Guillaume Tardif and Felipe Cruz of Docker Inc. for a deep dive into Docker extensions.Docker Extensions are a favorite new feature. Guillaume and Felipe are both engineers at Docker and they walk us through how extensions came about, how to install them, and how to submit them to the marketplace.By the time Docker released extensions at DockerCon in May 2022, there were already a dozen solid extensions, including a disk manager, log explorer, and other third-party tools like Portainer, Snyk, and Anchor. Docker extensions will be most helpful to people who use Docker Desktop.Streamed live on YouTube on June 16, 2022.Unedited live recording of this show on YouTube (Ep #174). Includes demos.★Topics★Docker Extensions homepageDocker Extensions announcement at DockerCon 2022Build your first Docker ExtensionSubmit your extension for the MarketplaceVackup, an example custom extensionExtension SDKOther Extension resources★Guillaume and Felipe★Guillaume Tardif on TwitterFelipe Cruz on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Template intro (00:52) - Bret custom intro (03:35) - Main show (03:37) - Main show (03:58) - Felipe intro (04:30) - Guillaume intro (05:32) - Today's topic (06:21) - What are Docker extensions? (08:47) - Question: Are extensions running in their own container? (10:24) - Question: Extensions are in Docker Desktop only? (11:00) - Where it is on the interface (11:27) - Submitting your own extensions to the marketplace (12:45) - Easy to install the extensions (13:16) - A couple extension examples (15:03) - Question: Extension versions and updates (15:34) - Question: Extensions dependent on Docker Desktop version? (16:38) - Sideloading extensions that are not in the marketplace (17:11) - Question: RAM and CPU usage (17:32) - Demos described (18:12) - Demo intro (18:38) - Demo (18:42) - Quick note about Portainer (19:16) - You don't have to remember commands (20:19) - Don't install all extensions at once (20:34) - Do extensions pause with Docker? (21:33) - Very little to learn (22:08) - Bret's backup tool extension isn't done (23:19) - Synchronising extensions across installations (23:55) - Docker roadmap and ideas (24:48) - Question: Security, where is the UI code running? (28:19) - Question: Multi-node Kubernetes clusters (30:26) - Question: Are all extensions open source? (32:01) - Expanding the SDK (32:43) - Bret's drop-down Kubernetes request (33:19) - Extension submission (34:06) - Wrapping up (35:15) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Nirmal Mehta, a Principal Specialist Solution Architect at AWS, and a Docker Captain, to discuss Karpenter, an autoscaling solution launched by AWS in 2021. Karpenter simplifies Kubernetes infrastructure by automating node scaling up and down, giving you "the right nodes at the right time."Autoscaling, particularly for Kubernetes, can be quite a complex project when you first start. Bret and Nirmal discuss how Karpenter works, how it can help or complement your existing setup, and how autoscaling generally works.Streamed live on YouTube on June 9, 2022.Unedited live recording of this show on YouTube (Ep #173). Includes demos.★Topics★Starship Shell PromptBret's favorite shell setupKarpenterKarpenter release blogK8s Scheduling ConceptsOther types of autoscalers:Horizontal Pod AutoscalerVertical Pod AutoscalerCluster Autoscaler★Nirmal Mehta★Nirmal on TwitterNirmal on LinkedIn★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com (00:00) - DDT MAIN (00:04) - Intro (00:51) - Custom intro (02:08) - Main Show (02:12) - Introductions (03:12) - Nirmal's Jobs (03:58) - Talking about Kubernetes cluster scaling (05:04) - Who are we addressing? (06:29) - What is Karpenter not addressing? (06:52) - Auto-scaling at pod level (07:40) - Cluster auto-scaling (09:07) - Karpenter is alternate to cluser autoscaler (09:21) - Question (10:11) - Issues Karpenter was created to address (12:29) - What is Karpenter? (13:51) - Selective instance type provisioning (14:47) - Matching deployment definition to instance types (16:08) - Question: Is Karpenter designed only for AWS? (17:13) - Question: Can you auto-scale control plane nodes? (19:21) - The Kubernetes Scheduler (23:14) - Question: Does Karpenter auto-scale down? (25:05) - Question: EKS with Karpenter spot instances (25:58) - Question: Karpenter and AWS auto-scaling groups (26:10) - Question: Installation and provisioning (27:20) - Only affects unschedulable pods (28:49) - Demo intro (29:14) - Demo (29:19) - Scaling Down (30:27) - Keeping your nodes fresh (32:54) - If you want to learn more (33:23) - Goals for 2022 (34:15) - Questions (34:21) - Question: Cost-effective instances (35:35) - Question: Instances to IoC and automatically destroyed? (38:25) - Question: Features being pushed upstream into Kubernetes (40:28) - Question: Rebalancing (44:28) - Scaling down is hard too (46:18) - Question: Horizontal pod auto-scaler trigger Karpenter (47:25) - Question: Specs and Documentation (48:01) - Question: How does it pick instance sizes? (48:55) - Question: Karpenter respects desire to spread workloads (49:29) - Question: EKSAnywhere support (49:50) - Question: How do you pick AMIs? (50:37) - Winding down (52:25) - Wrapping up (52:30) - Outro You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Laura Tacho, an engineering leadership coach, to discuss measuring your team's performance with DevOps metrics (DORA) and the new SPACE framework. Team Performance is one of Bret's favorite topics, and it should be everyone's concern.Laura and Bret discuss soft skills, how to implement DORA DevOps metrics, the new SPACE framework, as well as common pitfalls people make when attempting to implement those measurements. Streamed live on YouTube on June 2, 2022.Unedited live recording of this show on YouTube (Ep #172).★Topics★Laura's course on High-Performing Software TeamsDORA (DevOps Research and Assessment)DORA MetricsDORA DevOps Quick CheckSPACE frameworkGoodhart's lawDeveloper ExperienceDevOps HandbookAccelerate Book★Laura Tacho★Laura's homepage and NewsletterLaura on TwitterLaura on the GitHub blog★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by the co-creators of the Argo project and co-founders of Akuity - Hong Wang and Jesse Suen - to discuss the state of Argo and their new Akuity offering for Argo CD in the Cloud.Chances are, you've heard of one or more of the Argo projects. They include Argo Workflows, Argo CD, Argo Events, and Argo roll-outs. Argo is one of those Kubernetes projects that is so common for teams to choose that it's nearly an assumption that every team is using one of their tools in a cluster or two. Hong Wang and Jessie Suen helped co-create the Argo project years back at Intuit and have now co-founded a growing startup called Akuity. The company is focusing on making the Argo products better and creating SaaS offerings for the Argo tools. In this episode, we get a perspective on where the Argo tools came from and what the team behind it is doing. Streamed live on YouTube on May 26, 2022.Unedited live recording of this show on YouTube (Ep #171).★Topics★Argo CD homepageAkuity homepageAkuity news on more fundingArgo CD in the cloudArgoCon in SeptemberDeclarative setup of Argo CD★Twitter Links★ArgoAkuityJesse SuenHong Wang★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Rosemary Wang, a developer advocate at Hashi Corp. She recently finished a Manning book, titled Infrastructure as Code: Patterns and Practices. They discuss how infrastructure as code fits into DevOps and Gitops, and how you can get started with IaC and run over some important patterns, such as controlling versioning, IaC testing and managing costs.Rosemary worked at ThoughtWorks previously, and it was interesting to hear her experiences on learning from senior engineering, and how pairing and other types of mentorship can help. Streamed live on YouTube on April 28, 2022.Unedited live recording of this show on YouTube (Ep #168).★Topics★Infrastructure as Code: Patterns and Practices, with examples in Python and Terraform ★Rosemary Wang★Rosemary on Twitter ★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Ravi Lachhman, Field CTO at Shipa, to discuss the basics of Shipa application and policy management, and show off the developer experience that Shipa brings to apps running on IaC and GitOps tools like ArgoCD,  Crossplane, Terraform, Kubernetes, and more.Shipa is focused on the layer above the infrastructure where application developers can avoid other Kubernetes manifest tools like Helm or Kustomize, and create a cleaner contract between what their application needs are and how the infrastructure provides them.If you've done Kubernetes YAML long enough, you know that it can get quite complex and verbose, and it requires both infrastructure and developer roles or knowledge to fully configure it. So you kind of got to know both worlds. But Shipa wants to fit in the middle somewhere, not replacing the infrastructure tools like Terraform or Crossplane, but rather working on top of them, providing an easier way to describe your apps from a dev's point of view and how they work on top of your infrastructure. It focuses on the application requirements, not necessarily how those requirements are implemented. Streamed live on YouTube on April 14, 2022.Unedited live recording of this show on YouTube (Ep #166). Includes demos.★Topics★Shipa website Shipa exampleDevOps Days Atlanta★Ravi Lachhman★Ravi on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Erik Veld, Manager, Developer Advocacy at HashiCorp, the creators of Nomad. Nomad is an orchestrator like Kubernetes and Swarm but it has a unique set of features that make it an interesting alternative on multiple levels. It's known for having a much simpler infrastructure design than Kubernetes, and also having a stronger community and feature release cycle then Swarm. Erik talks about the basics of Nomad, the reason it was created and runs through some demos. Streamed live on YouTube April 7, 2022.Unedited live recording of this show on YouTube (Ep #165). Includes demos.★Topics★Nomad website Nomad GitHub page Tech-Nomadic, Run Your Software Anywhere (YouTube) Managing DigitalOcean Kubernetes clusters with Terraform (YouTube)★Erik Veld★Erik on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by David Flanagan, aka Rawkode Academy, from Pulumi to show off how Pulumi infrastructure-as-code can improve GitOps pipelines. Our conversation focused on what GitOps and Pulumi are and how they work together to manage your infrastructure and app deploys. Streamed live on YouTube on March 24, 2022. Unedited live recording of the complete show on YouTube (Ep #164). Includes demos.★ Topics ★PulumiProductK8s OperatorK8sGitOpsLaw of Demeter1Password SSH management★ David Flanagan aka Rawkode Academy★Rawkode Academy, Live weeklyRawkode on Twitter★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Anca Iordache and Dave Scott, software engineers at Docker Inc, to talk about why they made Docker Desktop for Linux and how it's different from running the Docker Engine daemon. Streamed live on YouTube on 21 April 2022.Unedited live recording of the complete show on YouTube (Ep #167). Includes demos.We talk about the origins of Docker Desktop for Linux, why it needs to exist, and how it's different than  running Docker Engine on the native host. Docker Desktop for Linux behaves like Mac and windows versions where it uses a VM and we clear up some confusion around that. Further, we talk about some of the functionality with operating it in tandem with Docker Engine on the host so you can run both at the same time and use context to switch between them. ★ Topics ★Download Docker Desktop for LinuxDocker RoadmapDocker Desktop for Linux GitHub IssuesDocker Developer Preview ProgramDocker Community SignupDockerCon 2022★ Join My Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Lukas Gentele and Rich Burroughs of Loft Labs to talk about vcluster, a Kubernetes distribution that can run inside an existing cluster namespace, aka "clusters in clusters." Lukas is the CEO of Loft Labs and Rich is their Senior Developer Advocate. VCluster is quite a universal tool for running fully-fledged Kubernetes clusters for dev and test environments and even potentially in production. In this episode, Lukas and Rich break down a ton of ways vcluster is currently being used and where they see it going in the future. Streamed live on YouTube on March 10, 2022.Unedited live recording of the complete show on YouTube (Ep #162). Includes demos.★Topic Links★Loft LabsVCluster★Lukas Gentele and Rich Burroughs★Lukas Gentele on TwitterRich Burroughs on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret and his guests - Jamie Duncan and John Osborne, authors of "OpenShift in Action" - talk about Enterprise Kubernetes adoption, the barriers teams encounter and why it's worth solving the hard problems in enterprise teams by standardizing on Kubernetes. Jamie is a customer engineer at Google Cloud and John is chief architect at RedHat. In this episode, we talk a lot about Kubernetes as the new common non-vendor specific infrastructure API. Streamed live on YouTube on March 3, 2022.Unedited live recording of this show on YouTube (Ep. 161).★Topics ★40% off Manning books and products: poddevt19 http://mng.bz/raEEOpenShift in Action Google AnthosKnative EventsHalfemptyKubeVirtKata Containers★John Osborne and Jamie Duncan★John Osborne on TwitterJamie Duncan on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Jim Bugwadia joins Bret to discuss Kubernetes policy management and "intelligent guardrails for K8s." Jim is the CEO and co-founder of Nirmata. He's also the founder of Kyverno, an CNCF Sandbox Project and open source project for managing policies in Kubernetes. We talk about what Kyverno is, what it isn't, and what problems it solves. We also talk a bit about Narmada and how it expands on that.If you're in a team using Kubernetes together, controlling settings and standards in your workloads and clusters can be a constant source of frustration unless you have something to govern those policies across all your workloads and clusters.Streamed live on YouTube on Feb 24, 2022.Unedited live recording of the complete show on YouTube (Ep #160). Includes demos.★Topics ★Kyverno is a policy engine designed for Kubernetes. With Kyverno, policies are managed as Kubernetes resources, and no new language is required to write policies. This allows using familiar tools such as kubectl, git, and kustomize to manage policies. Kyverno policies can validate, mutate, and generate Kubernetes resources plus ensure OCI image supply chain security. The Kyverno CLI can be used to test policies and validate resources as part of a CI/CD pipeline.Nirmata "Intelligent Guardrails for Kubernetes." Security, Compliance, and Operational Readiness of Kubernetes Across the EnterpriseSigstore Blog re Sigstore: "Linux Foundation’s Sigstore Aims to Secure Software Supply Chains"OWASP Open Web Application Security Project ★Jim Bugwadia ★Jim on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

In this episode, Bret is joined by Portainer's co-founder and CEO, Neil Cresswell, to get an update on their product. If you haven't heard of Portainer, it's one of the original web apps to manage Docker, then swarm and now Kubernetes. This is one of Bret's top 10 tools for consideration to manage your container environments. Neil will show off the latest from Portainer.io. Streamed live on YouTube on February 3, 2022.Unedited live recording of the complete show on YouTube (Ep #157). Includes demos.★Topics★Portainer Portainer in DigitalOceanPortainer in Multipass★Neil Cresswell★Portainer on Twitter★Join my Community★Best coupons for my Docker and Kubernetes coursesChat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret explores and reviews tools that "might" replace Docker Desktop for those who decide not to pay for the subscription. He goes through the pros and cons of the alternatives. Streamed live on YouTube Jan 27, 2022.Unedited live recording of the complete show on YouTube (Ep 156). Includes demos.Bret's comparison spreadsheet: Docker Desktop Alternatives 2022, single-node for local dev-test"Trilogy" blog articles all about DevOps and DevOps engineeringDocker blog: How Docker Desktop Networking Works Under the HoodDocker blog: File Sharing with Docker DesktopWSL2 on Bret's YouTube Live show #135: Windows 11 WSL2 with Nuno do Carmo Licensing Changes YouTube Live show #138: Docker Desktop Licensing Changescontains.dev: web gooey for breaking up images and looking at the layers and the filesDocker Desktop Linux implementation roadmap in GitHub ★Join my Community ★Best coupons for my Docker and Kubernetes coursesBret's blog posts and other details are available on bretfisher.com Chat with us on our Discord Server Vital DevOps You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Eran Bibi, a co-founder and CPO of Firefly to discuss Cloud and Kubernetes drift, and dealing with unmanaged resources and policy violations in Infrastructure as Code. Streamed live on YouTube on January 13, 2022.Unedited live recording of this show on YouTube (Ep 154). Includes demos. ★Topics ★FireflyBecoming a DevOps Engineer ★Eran Bibi ★Eran Bibi on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

In this episode, Jake Warner, founder of Cycle joins Bret to discuss and demo Cycle.io, a Kubernetes alternative to run your containers and reduce your DevOps complexity. In the background, it uses your cloud of choice, deploys a custom OS (using LinuxKit), and handles all the complexity of storage, backups, proxies, and networking. Streamed live on YouTube on Jan 6, 2022.Unedited live recording of this show on YouTube (Ep #153). Includes multiple demos. ★Topics ★Cycle.io Linuxkit on GitHubCycle Podcast: https://www.cycle.io/podcasts ★Find Jake ★On Twitter @JakeWarner ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Control your testing in containers with your code! Bret's guest, Sergei Egorov, walks us through testcontainers.org and AtomicJar for using API's to control Docker from Go, Java, Python, Node, Rust, Scala, and more. Streamed live on YouTube on December 9, 2021.Unedited live recording of this show on YouTube (Ep 149). ★Topics ★TestcontainersTestcontainers on GitHub Company behind TestcontainersTestcontainers Cloud blog ★Sergei Egorov ★Sergei on Twitter ★Join my Community ★Best coupons for my Docker and Kubernetes coursesFollow me on Patreon and support this show!Chat with us on our Discord Server, Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Liz Fong-Jones from honeycomb.io joins Bret in this episode to discuss and demo their platform and Kubernetes Observability. Streamed live on YouTube on December 2, 2021.Unedited live recording of this show on YouTube (Ep 142). Includes demos.★Topics★Honeycomb.ioFree eBook Observability EngineeringOpenTelementryPixie12FactorSqlcommenter★Guest Liz Fong-Jones★Liz on TwitterLiz on Twitch★Join my Community★Best coupons for my Docker and Kubernetes courses Follow me on Patreon and support this show!Chat with us on our Discord Server, Vital DevOpsHomepage bretfisher.com You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret talks with Alex Ellis, Founder of OpenFaaS, about all things "containers on arm." They cover Apple's M1 arm processor, Raspberry Pi arm images, Docker Desktop and arm, Kubernetes clustering, Alex's new Netbooting workshop, and more. Streamed live on YouTube on Apr 1, 2021.Unedited live recording of this show on YouTube (Ep 142) ★Topics ★The past, present, and future of K8s on Pi on YouTube5 Years of Raspberry Pi clusters blogRetroPie.org.ukInlets on GitHubNetbooting workshop for Raspberry PiFaasd on GitHubServerless for everyone elseGH Action example for multi-platform buildArkade ★Alex Ellis ★Website Homepage On Twitter YouTube channelSponsor Alex's work on GitHub You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Friend and fellow Docker Captain, Viktor Farcic, joins Bret to talk about all things DevOps Automation and Crossplane. Streamed live on YouTube Oct 7, 2021, Ep 142.Unedited live recording of this show on YouTube (Ep 142)Upbound, the company behind CrossplaneCrossplaneKOTSViktor on YouTube "DevOps Toolkit"Viktor on Twitter You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

The topic is the new Gateway API and Kubernetes Ingress. Bret met with Mark Church, Product Manager of GKE Networking at Google. They talked in detail and took questions from the YouTube chat. Streamed live on YouTube Apr 8, 2021, Ep 119.Unedited live recording of this show on YouTube (Ep 119)An Introduction: What is the Gateway API?Join the communityMark Church on Twitter @ChurchOfMark You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Automating container deployments with GitOps is the topic of this podcast with Bret's guest, Nirmal Mehta. At the time of the show (March 2021), Nirmal was a Distinguished Engineer and Director at Booz Allen Hamilton. He is also a Docker Captain. Streamed live on YouTube Mar 4, 2021, Ep 114.Unedited live recording of this show on YouTube (Ep 114) ★Topics and Links★Guide to GitOps from weaveworks GitOps origins; a blog from weaveworks: What DevOps is to the Cloud, GitOps is to Cloud NativeFlux CDArgo CDSwarm Sync for Docker Swarm GitOpsYouTube Live Show (Ep 113) where Bret talks about, and gives a demo of, Crossplane YouTube Live Show (Ep 142) where Bret and Viktor Farcic cover DevOps Automation with CrossplaneControl GitHub GitOps through "branch protection rules"DevOpsDaysNirmal Mehta on Twitter @normalfaults You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Docker Captain and Engineering Consultant Laura Tacho joins Bret and they go through all their favorite topics and tech things of 2021. Streamed live on YouTube Dec 16, 2021, Ep 150.Unedited live recording on YouTube (Ep #150)Log4Shell info from SANS Institute on YouTubeLog4Shell info from Docker blogHashiCorp IPO Bill Gates Year in Review "Reasons for Optimism After a Difficult Year"GitHub blog "GitHub Actions: Reusable Workflows are Generally Available"Dig into your Docker images contains.devWebAssembly in 100 seconds on YouTubeModern Finance podcast "Side Chain Scaling with Sandeep Nailwal, Co-Founder of Polygon"My First Million podcastDocker blog: "Faster Multi-Platform Builds: Dockerfile Cross-Compilation Guide" You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret talks with Stack Overflow legend and Docker Captain, Brandon Mitchell. They talk about (and demo) “regclient” his new project for managing registries remotely via API, and all that’s happened over the last year with Docker registries and Docker Hub. It's worth watching the demos on YouTube. Streamed live on YouTube Jan 21, 2021, Ep 108.Unedited live recording on YouTube (Ep #108)An earlier YTL show about Docker Hub (Ep #89)Brandon on StackOverflowregclient on GitHubregistry spec on GitHubBrandon's videos and presentations on GitHub You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret is joined by Komodor CTO and co-founder Itiel Shwartz to talk about Kubernetes troubleshooting and using their new app to highlight changes and alerts in your clusters. Check out the unedited video version on YouTube to experience the demo. https://youtu.be/zGA6ZwdYM5AStreamed live on YouTube on March 11, 2021, Ep 115.Unedited live recording on YouTube Ep 115; check it out to see the demosKomodor K8s troubleshootingkubectl cheat sheetTroubleshooting deployments flowchart You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Docker announced Compose v2 at DockerCon 2021. Bret goes through all the new stuff you didn't know about. If you're a fan of composing (his fav docker tool), this podcast reviews what docker's done over the last two years to make it so much better! This is another episode pulled from the archive that's still quite relevant. Streamed live on YouTube Jun 10, 2021, Ep 126.Unedited live recording on YouTube Ep 126 ★Topics ★Compose V2 is a Docker Plug-in (written in Go)Compose Spec (no more yaml versions)Service ProfilesCompose ls (list all running compose projects)BuildKit by defaultCompose cp (copy files in/out)Compose convertCompose up to ACI and ECSCompose up to KubernetesCompose command aliases ★Links ★GitOps Days 2021 - Day 1 (June 9, 2021) video on YouTube GitOps Days 2021 - Day 2 (June 10, 2021) video on YouTubeCompose CLI on GitHub Compose Spec on GitHubDocker Plugins installer (GitHub)My Shell SetupBuilding with Buildx  You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

The topic is automating your K8s YAML validation. Bret’s guest is Eyar Zilberman, co-founder of Datree and they go through various tools and their pros and cons and help you understand why automated validation is vital as you automate your Kubernetes deployment pipeline. Streamed live on YouTube Nov 11, 2021, Ep 146.Unedited live recording on YouTube (Ep 146)DatreeKubeconformpre-commithttps://github.com/yannh/kubeconformhttps://pre-commit.com/Eyar's article about K8s schema validationOpen an issue for questions on k8s schema kubectl --dry-run=client bug Datree's CLI tool to ensure K8s manifests and Helm charts follow best practices Check CRDs and schema with Datree  You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Apple's move to Arm processors will change software development for everyone... or will it?Apple has moved towards an Arm processor. They don't call it Arm, they call it Apple Silicon, or M1 but underneath that, the architecture of the CPU is Arm 64-bit compatible. Streamed live on YouTube Jan 7, 2021, Ep 106.Unedited live recording on YouTube Ep 106 ★Corrections ★"Windows RT" isn't a thing anymore, and the Windows 10 on Arm (WoA) is getting better, with x64 emulation (MS version of Rosetta 2) in pre-betaAArch64 or ARM64 is the 64-bit extension of the ARM architectureMicrosoft is indeed designing its own Arm chips for future Surface and serversWindows 10 Arm works in Parallels M1 beta on macOSAWS Arm instances are now on Gen 2, as of May 2020, with up to 40% better performance-per-dollar than old Gen 1 Arm, AMD, and Intel ★Topics ★MX1 and future of Apple Silicon (Arm) on YouTubeQEMU: emulate one CPU architecture on anotherMulti-arch support in Docker Desktop in docker docsBuild multi-arch images with buildx in docker docsManifest commands for multi-arch images in docker docsHardcode platform in Compose files in docker docsAlex Ellis blog, lots of Arm + Docker infoMy shell setupSetup QEMU on Linux serverson stereolabs.comon GitHub You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Bret talks about linting with Super-Linter and also GitHub Action's new Reusable Workflows beta! Streamed live on YouTube Sep 30, 2021, Ep 141.Unedited live recording on YouTube (Ep 141) ★Topics ★Linting Q&ASuper-Linter 101Example GitHub Action RepoDependabot for GHALinter config filesCustomize Super-LinterReusable Workflows ★Links ★Super-Linter GitHubExample Workflow in Bret's GitHubEditorconfigReusable Workflows Workflow TemplatesHacktoberfest from DigitalOcean You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Alex Chalkias of the Canonical MicroK8s project joins Bret and they dive into this easy and powerful Kubernetes distribution that had some major updates in 2020, including high availability. Since the interview, the open-source community around Microk8s has been releasing versions regularly, including keeping the Kubernetes versions up to date and continuing to add new add-ons to their one-line install list. It's getting quite impressive at this point, including kata containers, open EBS, and the KEDA (Kubernetes Event-driven Autoscaling) event-driven auto-scaling. Streamed live on YouTube on November 12, 2020, Ep 101.Unedited live recording on YouTube Ep 101Microk8s websiteCanonical Ubuntu Kubernetes web pageMultipass install pageUbuntu YouTubeCharmhub website You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

My guest is Ben Arent, Developer Relations Engineer at Teleport. Teleport allows engineers and security professionals to unify access for SSH servers, Kubernetes clusters, web applications, and databases across all environments. In this episode, we talk about why it exists, the problems it solves, and how it's implemented. Streamed on YouTube Sept 29, 2021, Ep 139.Unedited Live recording on YouTube (Ep 139)Teleport websiteTeleport GitHubTeleport Wormhole announcementBen's TwitterTeleport Twitter You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Phil Estes from AWS joins Bret to talk about containerd/state of the project, Docker Desktop alternatives and how developers are using containerd, OpenSSF, and supply chain security, and how containers will play a role. There's a lot of stuff covered here! Streamed on YouTube Sept 23, 2021.Unedited Live recording on YouTubecontainerd runtimeLima macOS containerd VMdocker-friendly CLI for containerd and moreOpenSSF SecurityAllstar GitHub Security Bot You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Zaid Sabih, the founder of zSecurity, talks with Bret about cyber security, pentesting, ethical hacking, and career choices. There's even some fun conversation about the hacking from The Matrix and Mr. Robot. Streamed on YouTube on October 29, 2020.Unedited live recording from YouTubezSecurity's TwitterzSecurity's YouTubeZaid Sabih Udemy pagezSecurity's websiteDocker and k8s and container security bret.show/securityfirst You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Darren Shepherd, co-founder of Rancher Labs, joins Bret to talk about Rancher's latest projects and all things Kubernetes. They covered so many topics like k3s, RKE2, Rio, Swarm, Fleet, OPA, Kyverno, etcd, k3OS, Compose, Longhorn, KubeVirt, and more. Streamed on YouTube on October 22, 2020.Unedited Live recording with demos on YouTubeDarren Shepherd TwitterRancher websiteRancher Course Trainingk3sup in GitHubFleet in GitHubKyverno in GitHubRancher RioAdrian Goins YouTubeArtifact Hub Arkade Alex Ellis on GitHubNetshoot Nicolaka on GitHub You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

Docker Captain Viktor Farcic of https://codefresh.io talks about GitOps automation and workflows using the Argo project tools. Streamed live on YouTube on October 1, 2020.Unedited live recording on YouTubeViktor's YouTube channel DevOps ToolkitDigital Ocean's HacktoberfestViktor's website, books and coursesArgo CD and GitOpsGoogle Cloud Run and Rapid GitOps Q&A You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com

I'm joined by fellow Docker Captain Nuno do Carmo to talk about WSL2 for Windows 10 and Windows 11. Nuno's a Docker Captain, CNCF Ambassador, and Microsoft MVP. Streamed on YouTube on August 12, 2021.Unedited live recording with demos on YouTubeDemos start at 00:43:08 in the showNuno on Twitter (one of) Nuno's blogs Install WSL on Windows 10 Blog: WSL2 design internals Windows Terminal  You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!Grab the best coupons for my Docker and Kubernetes courses.Join my cloud native DevOps community on Discord.Grab some merch at Bret's Loot BoxHomepage bretfisher.com