Adam and Craig end the year by talking to Jordan Liggitt, the member of the Kubernetes Product Security Team who fixed the recent critical security vulnerability in the Kubernetes API server. We also take a look at the news from KubeCon.

This is our last episode for 2018. Thank you for your support this year, and we’ll be back on the 8th of January!

Do you have something cool to share? Some questions? Let us know:

web: kubernetespodcast.com
mail: kubernetespodcast@google.com
twitter: @kubernetespod

News of the week

etcd donated to the CNCF
- Chubby paper
- Raft paper
- Blog post on the relationship between Kubernetes and etcd by Gyuho Lee and Joe Betz
Istio:
- Geekwire: Has Istio become the new cloud-native darling?
- Google launches Istio on GKE
- VMware NSX Service Mesh
- Aspen Mesh open beta
- In other service mesh news: A10 Secure Service Mesh
Knative:
Oracle Cloud Native Framework
Microsoft:
Digital Ocean Kubernetes now open to everyone
Linode Kubernetes CLI
- Terraform scripts
VMware closes its acquisition of Heptio
- For $550M
- Dell will go public again
Quickfire Kubernetes security news
Grafana Loki
- Thanos: Prometheus at scale
Maestro – A declarative, no-code approach to Kubernetes Day 2 Operators
rbacsync
PlanetScale announces funding
- TechCrunch article

Links from the interview

Jordan’s suggested KubeCon talks to watch:
- Kelsey Hightower’s keynote, “Kubernetes and the path to serverless”
- Julia Evans’ keynote, “High Reliability Infrastructure Migrations”
OpenShift before Kubernetes in 2014
Kubernetes Product Security Team
CVE-2018-1002105: proxy request handling in kube-apiserver can leave vulnerable TCP connections
Answering questions on Stack Overflow
Jordan Liggitt on Twitter, GitHub, Slack or Stack Overflow

Kubernetes CVE-2018-1002105, with Jordan Liggitt

Kubernetes Podcast from Google

Kubernetes CVE-2018-1002105, with Jordan Liggitt