DevOps Paradox

#239: In this episode, Ville Aikas and Matt Moore from Chainguard join us for a discussion about open-source projects, distroless containers, and software security. They share their stories about the creation and progress of ChainGuard, offering insights into the way the company operates and contributes to the open-source community. They also delve into the value of improving the signal-to-noise ratio of vulnerability scanners and how this can aid in addressing software security problems. They also explain their commitment to the APK format and its advantages, as well as the significance of Wolfi, their '(un)distro', in maintaining vulnerability-free software environments. Matt's contact information: Twitter: https://twitter.com/mattomata LinkedIn: https://www.linkedin.com/in/mattmoor/ Ville's contact information: Twitter: https://twitter.com/aikasville LinkedIn: https://www.linkedin.com/in/villeaikas/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#238: You might just now be reaching the point of containerizing your workloads and running them in Kubernetes. However, how do you go about accessing those workloads? You might have started with an ingress, because other options seemed like they were too complex. However, you've now crossed the point where you need that complexity. That's where service mesh can help you out. On this episode, we speak with Marino Wijay, Principal Developer Advocate at solo.io, about how service mesh has evolved over time, the challenges of adopting certain models, and the advantages of open-source solutions. We also talk about the differences between sidecar and sidecar-less models, and the circumstances in which either might be appropriate. Marino's contact information: Twitter: https://twitter.com/virtualized6ix LinkedIn: https://www.linkedin.com/in/mwijay/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#237: Darin catches up with Viktor and Whitney Lee just minutes after they've finished up at KubeCon NA 2023. We discuss the good things and bad things that they experienced while in Chicago. Could one of those things be AI? YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#236: As you are heading into budget season for 2025, you're probably trying to figure out how to eliminate as much wasteful cloud spend as you can. But how did you get here? Instead of trying to reduce your cloud spend, maybe you should think about not spending the money in the first place. In this episode, we speak with Anton Grishko, Chief Architect at Profisea Labs, about the necessity of building cost-efficient architectures and how AI is reshaping the FinOps landscape. Anton's contact information: LinkedIn: https://www.linkedin.com/in/antongrishko/ 5 Effective FinOps Methods for Optimizing Your Cloud Costs https://profisealabs.com/blog/article/5-effective-finops-methods-for-optimizing-your-cloud-costs/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#235: In the mid-2000s, Werner Vogels introduced the idea of "you build it, you run it". This concept suggested that the same team responsible for building a product should also be responsible for running and maintaining it. However, despite the initial enthusiasm, we have yet to see this phrase truly materialize in practice. The industry has faced challenges in fully realizing the "build it, run it" philosophy. In this episode, we speak with Kaspar von Grünberg, founder & CEO at Humanitec, about why "shifting left" to the developers really isn't all it's cracked up to be and how instead cleaner abstractions can bridge the gap in understanding between non-technical managers and the developers in the trenches. Kaspar's contact information: Twitter: https://twitter.com/kaspar_official LinkedIn: https://www.linkedin.com/in/kvgruenberg/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#234: The shift to cloud computing has greatly increased the popularity of infrastructure as code. But think about it. Cloud is nothing more than an abstraction on top of bare metal servers. Why can't we just as easily manage our bare metal servers as code as well? In this episode, we speak with Rob Hirschfeld, founder and CEO at RackN, about the challenges and opportunities of managing bare metal servers as code. Rob's contact information: Twitter: https://twitter.com/zehicle LinkedIn: https://www.linkedin.com/in/rhirschfeld/ Website: https://robhirschfeld.com/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#233: When you first start a job, you'll probably be doing good to get paired up with a senior person to walk you through the ropes. What if instead you could sit down and actually run through simulations that were created from actual events? In this episode, we talk with On Freund, Co-Founder and CEO at Wilco, about how Wilco can help not only individuals, but also companies needing to create better onboarding experiences for their employees and even their customers. On's contact information: Twitter: https://twitter.com/onfreund LinkedIn: https://www.linkedin.com/in/onfreund/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#232: More than eighteen months in, Log4J appears to still be a huge problem for many organizations. What if there was a way to make sure those types of problems could be easily bubbled out to the right people at the right time in the tools they are already using? In this episode, we talk with Nir Valtman, CEO and co-founder at Arnica, about how protecting your source code, applications and people will help you minimize your risk. Nir's contact information: Twitter: https://twitter.com/ValtmaNir LinkedIn: https://www.linkedin.com/in/valtmanir/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#231: We never thought that exposing our databases to the public internet was a good thing. However, when we started creating middleware API services that sat in front of those databases, we probably ended up doing almost the exact same type work that we did when we created the database schemas themselves. Somehow or another, we thought this was good, but in reality, it was not the right solution. In this episode, we speak with Tanmai Gopal, CEO and co-founder at Hasura, about how modern web APIs are developed and the role of modern databases in making development more efficient and scalable. Tanmai's contact information: Twitter: https://twitter.com/tanmaigo LinkedIn: https://www.linkedin.com/in/tanmaig/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#230: In today's digital age, it's no secret that relying solely on passwords for security is no longer an effective solution. We all understand the risks associated with using just passwords, but the question remains: what other alternatives do we have at our disposal? What if you could eliminate passwords all together and still make all your communications completely secure? In this episode, we speak with Mike Malone, Founder and CEO at Smallstep, about his background with OpenID and OAuth and how increasing security today doesn’t mean also increasing budgets. Mike’s contact information: Twitter: https://twitter.com/mjmalone LinkedIn: https://www.linkedin.com/in/mmalone/ YouTube channel: https://youtube.com/devopsparadox Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#229: When Kubernetes was first released in September 2014, the only way we could get applications installed to the cluster was by using kubectl apply and big, ugly YAML files. Since that time, many tools have been introduced to help manage application installation into Kubernetes clusters. However, no matter what tool you are using in 2023, under the hood, we’re still just submitting those big, ugly YAML files to the Kubernetes. Once you realize this, things become much clearer. In this episode, we take a stroll down memory lane of how it all started and what you should consider doing today when creating (or maybe not creating) the YAML files for your application. Today’s sponsor: Save 25% on your first Barbaro Mojo order using the code "DevOps25” https://barbaromojo.com/discount/DevOps25 YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#228: The Agile Manifesto is now more than 20 years old. However, even after all this time, instead of helping organizations create and deliver software faster to satisfy customer needs, many times Agile principles are turned into rigid processes that stifle innovation and limit customer satisfaction. Have far have we strayed from the core principles of the manifesto? In this episode, we talk with Paul Stovell, CEO and founder of Octopus Deploy, about the realities of Agile in 2023. Also, find out about the backstory of how Paul was able to snag the octopus.com domain. Paul’s contact information: Twitter: https://twitter.com/paulstovell LinkedIn: https://www.linkedin.com/in/paulstovell/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#227: Imagine this. You walk into your office and your manager pulls you to the side and says “Pack up your belongings. You’ve been made redundant. We wish you the best in your future endeavors.” Just like that, you no longer have a job. In even more extreme cases, just because a company exists today does not mean that it will exist tomorrow. Think about Enron, Blockbuster, Compaq and many others. At this point in history, it’s not if, but when, will you be laid off and what will you do? In this episode, we speak with Dagna Bieda, founder of theMindfulDev.com, about strategies to "layoff-proof" your engineering career, touching on topics like the role of AI in the industry, the importance of mental health, and the impact of our belief systems on our careers. Dagna’s contact information: Twitter: https://twitter.com/dagnabieda LinkedIn: https://www.linkedin.com/in/dagnabieda/ Website: https://www.themindfuldev.com/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#226: Dependency on third-party providers is an inescapable reality of modern operations. However, expecting third-party providers to solve everything for you is highly unrealistic. Even if you had all the money in the world, you probably still would have issues with your operations. In this episode, we break down an article that discusses what level of support and services we should expect from third-party providers. Cloud Dependencies Need to Stop F—ing Us When They Go Down https://thenewstack.io/cloud-dependencies-need-to-stop-f-ing-us-when-they-go-down/ Today’s sponsor: Save 25% on your first Barbaro Mojo order using the code "DevOps25” https://barbaromojo.com/discount/DevOps25 YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#225: How did Kubernetes become the predominant choice for modern-day DevOps teams? From changing how applications run to reshaping security parameters, learn how this open-source platform continues to turn heads. In today’s episode, we talk with Craig Box, VP of Open Source and Community at Armo, as he uncovers the secrets behind Kubernetes. From Google's original vision for the tool to its unexpected rise in popularity within the DevOps community, we'll explore Kubernetes' improbable journey. Also, we’ll get insights into managing potential security issues, and learn how Kubescape is transforming Kubernetes' security landscape. Craig’s contact information: Twitter: https://twitter.com/craigbox LinkedIn: https://www.linkedin.com/in/crbnz/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#224: Are boot camps and CS degrees always necessary for landing a job? Or, can hands-on learning through eLearning platforms bridge that gap? In today’s episode, we speak with Lane Wagner, creator of boot.dev, to learn about the obstacles new developers face on their journey to becoming proficient back-end developers. Lane’s contact information Twitter: https://twitter.com/wagslane LinkedIn: https://www.linkedin.com/in/wagslane/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#223: Maybe you’ve been in the tech space for years and you’re ready to get into open source. On the other hand, you may be fresh out of school and you’re trying to build your CV. What project should you start to work on? The answer is easier than you think. In this episode, we speak with Dotan Horovits, Principal Developer Advocate at Logz.io, on topics ranging from running an in-person event to the proper way to engage in open source communities. Dotan’s contact information: Twitter: https://twitter.com/horovits LinkedIn: https://www.linkedin.com/in/horovits/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#222: Where do you start when you are having performance bottlenecks in your application? You might start looking at a log or a dashboard. What if there was a better way? In this episode, we speak with Kursat and Fatih, co-founders of Ddosify, about how the standard way of analysis will become a thing of the past. Kursat’s contact information: Twitter: https://twitter.com/kursat_aktas_ LinkedIn: https://www.linkedin.com/in/kursataktas/ Fatih’s contact information Twitter: https://twitter.com/fatihbaltaci_ LinkedIn: https://www.linkedin.com/in/fatihbaltaci/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#221: As an application developer, how often do you receive spreadsheets of findings from your security team? Do you drop everything you’re doing and work your way through the 57,239 findings during your existing sprint? Our guess is probably not. Even if you did, how would you know where to start? Just because a finding is marked as critical does not mean that it’s exploitable. In this episode, we speak with Ravid Circus, CPO at Seemplicity, about how you should be handling and remediating these security problems. Hint: it’s not by using spreadsheets, but rather it needs to be in your day to day work. Ravid’s contact information: LinkedIn: https://www.linkedin.com/in/ravid-circus-302a8/ YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/

#220: DevOps has revolutionized software development and operations, enabling organizations to deliver software faster, with improved quality and collaboration. But as with any significant transformation, implementing DevOps comes with its own set of challenges. In this episode, we focus on the top challenges faced during the implementation of DevOps. From cultural resistance to finding skilled labor at a price you’re willing to pay, we'll explore the hurdles that can hinder DevOps adoption. Today’s sponsor: Save 25% on your first Barbaro Mojo order using the code "DevOps25” https://barbaromojo.com/discount/DevOps25 YouTube channel: https://youtube.com/devopsparadox/ Books and Courses: Catalog, Patterns, And Blueprints https://www.devopstoolkitseries.com/posts/catalog/ Review the podcast on Apple Podcasts: https://www.devopsparadox.com/review-podcast/ Slack: https://www.devopsparadox.com/slack/ Connect with us at: https://www.devopsparadox.com/contact/