Show Notes
Bret and Nirmal recorded this special offline episode at KubeCon North America in Salt Lake City. We hung out at the AWS booth to break down the major trends and developments from the conference.
😇 My new GitHub Security workshop has launched! A free 2-hour workshop with hands-on labs to harden your repos and your workflows from common supply chain attacks. I'll cover how attackers are getting in, and then we'll lock down a sample repo so you know what needs to be done to protect your code. You'll leave with a deep understanding of risks and mitigations as well as a list of helpful tools to keep your repos safe, including my new "gasa" tool for scanning your repos and orgs. The event drew a record-breaking 10,000 attendees, with roughly half being first-timers to the Cloud Native ecosystem. Starting with Cloud Native Rejekts and moving through the pre-conference events, we noticed Platform Engineering emerged as the dominant theme, with its dedicated conference track drawing standing-room-only crowds.
The main conference showcased a notable surge in new vendors, particularly in AI and security sectors, representing about a quarter of all exhibitors. We dissect the key engineering trends, ongoing challenges in Cloud Native adoption, and insights gathered from various conferences including ArgoCon, BackstageCon, and Wasm Day. In our 40-minute discussion, we tried to capture the essence of what made this year's KubeCon significant. It's a great listen whether you couldn't attend or if you're a veteran of the Cloud Native community. Watch the video on YouTube. ★Show Links★ Port "VM-like container runtime": Microsoft's Hyperlight Hyperlight Rejekts talk Akcess, easy K8s RBAC CLI Cloud Native Operational Excellence Creators & Guests
Cristi Cotovan - Editor
Beth Fisher - Producer
Bret Fisher - Host
Nirmal Mehta - Host
(00:00) - Intro
(03:38) - KubeCon Rejekts
(04:50) - Better Than Namespaces
(07:17) - Day 0
(08:32) - BackstageCon and Platform Interfaces
(12:35) - Argo CD and Deployment Dashboards
(13:57) - GitOps Bridge: Bridging Infrastructure and GitOps
(14:49) - Kubernetes Resource Orchestrator (KRO)
(16:23) - Fleet Management in Kubernetes
(18:12) - Ford's Approach to Kubernetes Tooling
(19:36) - CNOE: Community-Driven Kubernetes Reference Architectures
(26:21) - AI Integration in Kubernetes Tools
(34:03) - Managing Infrastructure at Scale with Karpenter
(35:13) - KubeCon Highlights and Future Trends
You can also support this podcast by subscribing to my YouTube channel and my monthly newsletter at bret.news! Grab the best coupons for my GitHub, Agents, Docker, and Kubernetes courses. Join my cloud native DevOps community on Discord. Grab some merch at Bret's Loot Box Homepage bretfisher.com
★ Support this podcast ★
More from DevOps and Docker Talk: Cloud Native Interviews and Tooling
Control Plane CEO Doron Grinstein joins me to discuss how they’ve created an AI-native cloud API that virtualizes multi-cloud and hybrid cloud to simplify management and ship faster. Watch the video of this episode.
What does an AI-native CI look like? The Semaphore team joins me to talk about their focus on making your agent harness the gateway to testing, fixing, and deploying your code. Video podcast version here: https://youtu.be/HzXAdtVrW70
OpenChoreo is a “batteries included”, AI-native Kubernetes platform stack for Platform Engineers that combines GitOps, Observability, AI Agents, and Workflows into a custom K8s distribution “super pack” that is managed via Backstage, CLI, API, or MCP. Check out the video podcast version here: https://youtu.be/AqGWjxEfj2g
Michael Irwin of Docker joins me to run through Gordon AI improvements, Docker Hardened Images and what's now free, Docker Sandboxes for running agents in proper isolation, Model Runner updates including MLX support on Mac, MCP Toolkit dynamic discovery, and the newly renamed Docker Agent with its GitHub Action for automating PR reviews and docs checks. Check out the video podcast version here: https://youtu.be/dTF3b36Bq6w
Bret is joined by the founders of Plakar - Julien Mangeard and Gilles Chehade - to nerd out over backup engineering. The kind where you're building your own file formats and cryptographic layers, not just wiring up cron jobs. We get into how Plakar deduplicates and encrypts at the source so your cloud provider never sees your keys. Also, their snapshot model has no chain dependencies, which means you can delete any backup without breaking the others. We had a fun hour of backup horror stories, ransomware pragmatism, where I'm lobbying hard for a Docker volume integration. Check out the video podcast version here: https://youtu.be/OPRK5osKQHI