VMs for Infrastructure or Isolation?

PodCTL - Enterprise Kubernetes

Show: 36
Show Overview: Brian and Tyler talk about the role (pros & cons) of VMs in isolation and security, as well as the broader context of security for containerized applications.
Show Notes:

• [Red Hat] 10 Layers of Container Security
• [Google] Exploring Container Security - An Overview
• [Google] Exploring Container Security Isolation at Different Layers
• [Google] gVisor
• Jess Frazelle “Hard Multi-Tenancy in Kubernetes”
• Jess Frazelle “Security and Echo Chambers”
• Kubevirt and Container-native Virtualization

Topic 1 - Let’s start with the basics. Can you please tell the audience the one command to run to make all containers secure?

Topic 2 - This past week (or 2 weeks) has been a good reminder that there are certain patterns that repeat themselves in emerging technologies and open source: hype (cool demo), binary claims of market dominance and destruction of previous technology (containers vs. VMs), buzzwords of simplicity which go against decades of experience, and then the realities of production environments.

Topic 3 - Let’s talk about where VMs provide value in a container environment, and realities of VMs that people should be aware of in production and in multi-cloud environments.

Topic 4 - Let’s talk briefly about a few of the recent announcements in this space (e.g. gVisor, CNV, etc.)

Feedback?

• Email: PodCTL at gmail dot com
• Twitter: @PodCTL
• Web: http://podctl.com