Open at Intel: Recent Episodes
Open at Intel
The Open at Intel podcast covers open source innovation and Intel’s commitment to an open ecosystem as we build the future together. Join us for critical conversations about security, AI, IoT, edge computing, Linux, and more, bringing together some of the best minds from Intel and the open source community.
In this episode, we hear from Melissa McKay, Head of Developer Relations, who discusses her involvement in open source communities, especially Jenkins and OPEA. She highlights the significance of AI in today's technology landscape, touching on its increasing prevalence and integration into various processes. The discussion also covers the challenges and opportunities AI brings, including security concerns and the need for standardization through projects like the Open Platform for Enterprise AI (OPEA). Melissa provides insights into learning and adapting to new technological trends, emphasizing the importance of having a safe environment for experimentation and continuous learning. 00:00 Introduction and Welcome02:39 Involvement with Jenkins and Community Support03:58 AI and Its Growing Impact07:52 Challenges and Security in AI09:24 Adapting to New Technologies21:06 Encouragement for Community Involvement Guest: Melissa McKay is passionate about Java, DevOps and Continuous Delivery. She is currently Head of Developer Relations for JFrog and a member of the Technical Steering Committee of the Open Platform for Enterprise AI (OPEA). Melissa has been recognized as a Java Champion and a Docker Captain, is an international speaker, and is co-author of the O'Reilly title, DevOps Tools for Java Developers.
In this episode, we hear from Andrey Velichkevich, a key contributor to the Kubeflow project, an ecosystem of open source projects to streamline the AI and ML lifecycle on Kubernetes. Andrey shares his extensive experience with the project, explains the various components and their use cases, and discusses the community's focus on accessibility and collaboration. They cover the project's evolution, the unique challenges and solutions offered, and the importance of engaging new contributors through initiatives like Google Summer of Code. The conversation highlights the future roadmap for Kubeflow, the significance of cross-project collaboration, and the key to creating a supportive and rewarding contributor environment.
00:00 Introduction and Greetings
00:14 Overview of the Kubeflow Project
01:20 Kubeflow's Ecosystem and Components
02:54 Target Audience and Use Cases
05:12 Future Roadmap and Goals
09:38 Community Engagement and Contributions
19:09 Conclusion and Final Thoughts
Guest:Andrey Velichkevich is a member of Kubeflow Steering Committee and a co-chair of Kubeflow AutoML and Training WG. Additionally, Andrey is an active member of the CNCF WG AI. He is one of the authors of the CNCF AI white paper and he is helping with various AI initiatives from the CNCF community.
In this episode, we hear from Janikiram MSV, an industry analyst and advisor based in Hyderabad, India, who specializes in AI agents and cloud native technology. We spoke about the evolution of AI agents, from chatbots to personalized AI assistants, and their advancement to AI agents that can access data, utilize APIs, and perform tasks autonomously. The discussion also covers the impact of these technologies on various fields, especially for developers, through examples like app modernization and AI-driven tools. We address important considerations such as authentication, authorization, and the future role of junior developers in an AI-augmented world. This episode sheds light on how AI agents can significantly transform workflow efficiency across multiple domains.
00:00 Introduction
00:56 Evolution of AI Agents
06:10 Impact on Developers and IT Operations
07:17 Authentication and Authorization Challenges
09:41 Future of AI in Development
20:19 Advice for Junior Developers
22:23 Conclusion and Future Discussions
Guest:
Janakiram MSV is an an industry analyst, strategic advisor, and a practicing architect. Through his speaking, writing, and analysis, he helps businesses take advantage of emerging technologies.
In this episode recorded at KubeCon in London, Cailyn Edwards, a security engineer at Okta, shares her unique journey from a rough guide and farmer to a security professional. Based in Canada, she discusses her dual life of securing platforms in her day job and co-chairing Kubernetes SIG Security in her community role. Cailyn emphasizes the importance of diverse backgrounds in the security field for better risk evaluation and shares tips on entering this realm, regardless of one's starting point. The conversation also touches on challenges like open source sustainability, economic pressures, and leveraging AI in coding, along with practical advice for new contributors to cloud-native technologies.
00:00 Welcome
00:31 Meet Kaylin: From Farmer to Security Engineer
03:35 The Importance of Diverse Perspectives in Security Risk Assessment
05:07 Understanding SIG Security in Kubernetes
09:24 Challenges in Open Source Contributions
17:03 Identity and Security in the Cloud Native World
21:35 Final Thoughts
In this episode, Danielle Tal and Thilo Fromm join us to discuss Flatcar Linux. They introduce Flatcar as a Linux operating system designed specifically for containers and Kubernetes workloads, highlighting its automation, self-healing capabilities, and security features. They emphasize how Flatcar simplifies operations for startups and large companies alike by automating OS provisioning and maintenance. We discussed contributor engagement and the project's involvement with the CNCF. They also share intriguing use cases, like a Kubernetes cluster running on a tractor fleet, and stress the importance of community contributions, not just in code but in evangelism and documentation. 00:00 Introduction01:05 What is Flatcar?02:01 Flatcar's Automation and Self-Healing Capabilities04:10 User Experience and Testing05:06 Ideal Users and Use Cases10:36 Community and Contributions13:38 Getting Started with Contributions16:59 Impact and Future Directions19:58 Conclusion and Final Thoughts Guest:Danielle Tal is a Program Manager at Microsoft and an integral part of the team responsible for maintaining Flatcar Container Linux. The team is contributes to Linux OS distributions and Linux Security within Azure and other upstream projects. With a background in supporting diverse enterprise cloud applications as a support engineer, Danielle has transitioned into a management role, overseeing Docker EMEA support before joining the Flatcar team.
Thilo Fromm is an engineering manager and works on Community Linux distributions and Linux Security at Azure. Thilo's team helps maintaining Flatcar Container Linux. He has given talks at FOSDEM, FrOSCon, KubeCon, Open Source Summit, Cloud-Native Rejekts, and various meetups like Kubernetes Community Days.
Thilo started his career in embedded systems with hardware design and roll-your-own /from scratch embedded Linux, kernel and plumbing level development, and later virtualisation. After working for various cloud providers in engineering and management positions, he went full cloud native in 2019. Nowadays Thilo works on operating systems for cloud-native environments with a special focus on Flatcar Container Linux.
In this episode, Michael Lieberman, Co-founder and CTO of Kusari, walks us through the intersection of open source software and security. We discuss Mike's extensive involvement in OpenSSF projects like SLSA and GUAC, which provide essential frameworks for securing the software development life cycle (SDLC) and managing software supply chains. He explains how these tools help verify software provenance and manage vulnerabilities. Additionally, we explore regulatory concerns such as the Cyber Resilience Act (CRA) and the vital role of the recently released Open SSF Security Baseline (OSPS Baseline) in helping organizations comply with such regulations. Mike also shares insights into the evolution of open source security practices, the importance of reducing complexity for developers, and the potential benefits of orchestrating security similarly to Kubernetes. We conclude with a look at upcoming projects and current pilots aiming to simplify and enhance open source security. 00:00 Introduction and Guest Welcome00:19 Mike's Background and Role in Open Source01:35 Exploring SLSA and GUAC Projects04:57 Cyber Resiliency Act Overview06:54 OpenSSF Security Baseline11:29 Encouraging Community Involvement18:39 Final Thoughts Resources:OpenSSF's OSPS Baseline
GUAC
SLSA
KubeCon Keynote: Cutting Through the Fog: Clarifying CRA Compliance in C... Eddie Knight & Michael Lieberman
Guest:Michael Lieberman is co-founder and CTO of Kusari where he helps build transparency and security in the software supply chain. Michael is an active member of the open-source community, co-creating the GUAC and FRSCA projects and co-leading the CNCF’s Secure Software Factory Reference Architecture whitepaper. He is an elected member of the OpenSSF Governing Board and Technical Advisory Council along with CNCF TAG Security Lead and an SLSA steering committee member.
Tim Irnich from SUSE shares his work with Edge computing, focusing on the telecommunications industry. He highlights the importance of standardization and interoperability across the industry, specifically focusing on the widespread adoption of Linux and Kubernetes. Tim also elaborates on Project Sylva, an initiative under the Linux Foundation, aimed at creating a standardized stack for the European telco operators. We also discuss challenges and opportunities presented by the vast array of open source projects within the CNCF landscape and the potential for AI to enhance network efficiency and reliability. The episode provides a comprehensive look into the collaborative efforts and technological advancements shaping the telecom sector.
00:00 Welcome
01:14 Open Source Adoption in the Telco Industry
02:14 Challenges and Standardization in Telco Networks
04:35 Curating Reliable Stacks for Telco
06:11 Project Silva: An Open Source Initiative
18:55 AI in the Telecom Industry
22:11 Conclusion and Final Thoughts
Tim Irnich is the product manager for SUSE Edge for Telco, an open source based horizontal telco cloud solution. He is also a member of the Board of Directors at the LF Europe Sylva Project. Tim has been active in telco related open source communities such as LF Networking, OPNFV, OpenDaylight, OpenStack/OpenInfra for over a decade and held positions on several committees including the LFN TAC, TSC and Board of Directors in OPNFV and OpenDaylight. Before joining SUSE in 2018, Tim worked at Ericsson, where he ran the open source and ecosystem program for Ericsson's cloud business unit and helped found Ericsson's open source development arm that is today known as Ericsson Software Technologies.
In this episode, David Aronchick, CEO and Co-founder of Expanso discusses his experiences and insights from working with Kubernetes since its early days at Google. David shares his journey from working on Kubernetes to co-founding Kubeflow and his latest project, Bacalhau, which focuses on combining compute and data management in distributed systems. Highlighting the challenges of data processing and privacy, particularly in edge computing and regulated environments, David emphasizes cost-saving benefits and the importance of local data processing. Throughout, privacy and regulatory concerns are underscored along with solutions for efficient and secure data handling.
00:00 Introduction and Welcome
00:23 Early Days of Kubernetes
01:05 Kubernetes Community and Evolution
02:23 AI, ML, and KubeFlow
03:40 Current Work and Data Challenges
08:20 Privacy and Security Concerns
14:21 Real-World Applications and Benefits
20:42 Conclusion
Learn more about Intel® Liftoff for Startups: https://www.intel.com/content/www/us/en/developer/tools/oneapi/liftoff.html
Learn more about our collaboration with Expanso in the Open Platform for Enterprise AI (OPEA) project: https://opea.dev
Guest:David Aronchick, Founder and CEO at Expanso, formerly led open source machine learning strategy at Azure, managed Kubernetes product development at Google, and co-founded Kubeflow. Previous roles at Microsoft, Amazon, and Chef.
In this episode, we sit down with Victor Nagy of GitLab to discuss his role and GitLab's initiatives. Victor details the transition from using a custom solution to integrating Flux for smoother application deployment. Victor also talks about GitLab's commitment to the open source community, contributions to Flux, and becoming a potential maintainer. We also touch on what makes developer tools great, developer experience, and developments in AI and security, highlighting the rapid pace of innovation in these fields.
00:00 Introduction and Guest Introduction
00:36 Key Open Source Projects: Flux and GitLab
01:17 Choosing Flux
03:42 Community Contributions and Future Plans
05:35 Deployment and Product Management
12:31 GitLab's Comprehensive Platform and Differentiators
18:38 Security and AI
19:43 Conclusion and Final Thoughts
In this episode, Marlow Warnicke, lead for the Slinky project, and Tim Wickberg, CTO of SchedMD, join us to discuss their work integrating HPC scheduler Slurm with Kubernetes. They provide background on Slurm's origins, its open source nature, and its evolution into Slinky to address Kubernetes's limitations in scheduling AI and HPC workloads. The discussion touches on the unique challenges in the MLOps space, the need for fine-grained resource control, and their collaborative efforts with various communities to enhance Kubernetes's efficiency. They also share the roadmap for Slinky and avenues for community collaboration and contribution.
00:00 Introduction and Guest Introductions
00:39 Overview of Slurm and Its Evolution
01:44 The Fusion of Slurm and Kubernetes: Slinky
04:14 Challenges in Kubernetes Scheduling
09:07 Unique Challenges in MLOps
12:58 Community Collaboration and Future Plans
16:41 Getting Involved and Final Thoughts
Katherine Druckman sat down with Sarah Christoph, lead maintainer of Porter, and Karen Chu, community manager for Helm, to discuss the realities of maintaining open source projects. We discussed the challenges maintainers face, including burnout, community building, and the importance of human interactions in sustaining projects. The conversation highlights strategies for creating sustainable workflows, such as documentation and contributor ladders, and the essential role of positive feedback and community support in maintaining morale. The episode also underscores the protective and inclusive nature of the open source community, shining a light on mentorship and the personal growth it fosters.
00:00 Introduction
02:30 Challenges in Open Source Maintenance
03:43 Maintainer Burnout and Coping Strategies
08:10 Building Sustainable Open Source Projects
10:37 The Importance of Community and Mentorship
12:41 Recognizing and Crediting Contributors
14:14 The Human Connection in Open Source
21:22 Final Thoughts
Guests:Karen Chu Sarah Christoff
In this episode, we hear from Megan Knight, Director of Software Communities at Arm. Megan shares her experiences with open source projects, particularly focusing on the Yocto project which helps build custom Linux distributions. She discusses the challenges of community management, maintaining contributor motivation, and the impact of policy changes on open source projects. The discussion also touches on the importance of corporate support in sustaining open source contributions. 00:00 Introduction and Welcome00:52 The Yocto Project: Building Custom Linux Distributions01:33 Managing Open Source Communities04:20 Motivations and Challenges in Open Source Contributions05:18 Conflict Resolution in Open Source Projects06:59 Unexpected Use Cases in Open Source10:03 Sustainability and Training in Open Source18:07 The Future of Open Source in Automotive19:18 Conclusion Guest:Megan Knight is the Director of Software Communities at Arm where she delightfully works with the upstream. She holds various positions on project boards including Yocto Project, UXL Foundation, Zephyr Project, and OpenSSF. Prior to Arm, she led the IoT and Automotive open source engagement portfolio at Amazon Web Services and served as the Amazon representative on critical dependency open source project boards. She got her start in open source working at The Linux Foundation with the Linux Kernel and Linux Plumbers communities.
Join us as we sit down with Austin Parker, Director of Open Source at Honeycomb.io to discuss observability with OpenTelemetry, explaining its importance in cloud native software and discussing the OpenTelemetry project's growth and community contributions. He shares insights on the evolution and adoption of Open Telemetry, its impact on the software industry, and the collaborative nature of its development.
00:00 Introduction
00:45 Understanding OpenTelemetry
02:48 The Importance of Observability
05:01 Challenges and Innovations in Observability
09:36 The OpenTelemetry Community
12:12 Challenges with Vendor Lock-In
14:29 Encouraging New Contributions
18:07 Recognizing Community Contributions
20:24 Final Thoughts
Guest:Austin Parker is Director of Open Source at honeycomb.io, an OpenTelemetry maintainer and governance member, author of several books, and all around great person.
In this episode, we caught up with Abdel Sghiouar, a Developer Advocate at Google and the co-host of The Kubernetes Podcast. Abdel shared the latest developments in Kubernetes and AI applications, highlighting the unique challenges of running machine learning models on Kubernetes, particularly focusing on scalability and the context window in large language models. We also discussed the importance of working groups in overcoming these challenges and emerging concerns in AI security.
00:00 Introduction and Welcome Back
00:20 Abdel's Role and Podcast
00:36 Kubernetes and Cloud Native Space
01:14 AI and MLOps Discussion
02:20 Challenges with Large Language Models
04:48 Kubernetes Working Groups
05:55 Security Concerns in MLOps
09:48 Exploring Solutions and Community Interaction
18:23 Conclusion
Guest:Abdel Sghiouar is a Cloud Developer Advocate @Google Cloud. His focus areas are GKE/Kubernetes, Service Mesh and Serverless. Abdel started his career in datacenters and infrastructure in Morocco before moving to Google's largest EU datacenter in Belgium. Then in Sweden he joined Google Cloud Professional Services and spent 5 years working with Google Cloud customers on architecting and designing large scale distributed systems before turning to advocacy and community work. You can follow him at @boredabdel.
Consultant Emily Omier discusses her work with open source companies on product strategy and positioning. She explains the unique challenges and opportunities such companies face, particularly the tension between commercial offerings and open source projects. Emily highlights the importance of solid product strategy, shares her process from customer interviews to leadership workshops, and addresses common misconceptions and struggles companies encounter. Additionally, she touches upon the strategic reasons for open-sourcing software.
00:00 Introduction and Guest Background
00:16 Understanding Product Strategy in Open Source
01:58 Engaging with Companies at Different Stages
03:10 Workshop and Internal Knowledge Surfacing
04:16 Differentiating Open Source and Commercial Offerings
07:09 Common Struggles and Misunderstandings
10:35 Community Building and Its Importance
14:21 Open Sourcing Projects: Reasons and Benefits
17:28 Experience at All Things Open
18:07 Conclusion and Upcoming Events
Guest:Emily Omier is a consultant who helps open source startups accelerate growth with killer positioning. She also hosts The Business of Open Source, a podcast about building open source companies and is the founder of Open Source Founders Summit, a business-focused conference for leadership of open source companies.
In this episode, we sit down with Luke Hinds, CTO of Stacklok and creator of Sigstore, to learn from his extensive background in open source security. Luke shares insights into his journey and passion for security, highlighting the thrill of the 'cat and mouse' dynamics. He discusses Stacklok’s project, Minder, a software supply chain platform designed to streamline security while boosting developer productivity. Luke also touches on Trusty, another Stacklok initiative aimed at assessing the security risks of open source packages using data science. The conversation expands to the impact of AI on code contributions and developer identity, reflecting on the evolving dynamics in software development and security. Finally, Luke shares thoughts on the ongoing challenges and opportunities in bridging the gap between operations and engineering to maintain robust security in fast-paced development environments.
00:00 Introduction
02:29 Personal Reflections on Security
04:14 Introduction to Stacklok and Minder
05:02 Minder's Features and Capabilities
07:38 Target Audience and Use Cases for Minder
10:41 Balancing Security and Developer Productivity
13:00 The Importance of Seamless Security
13:52 Introduction to Trusty: Understanding Open Source Security Risks
14:45 Analyzing Malicious Packages and Developer Contributions
18:06 The Role of Developer Identity in Open Source Projects
19:20 AI's Impact on Code Development and Security
20:10 Challenges and Future Directions in Developer Identity
23:31 Concluding Thoughts and Future Conversations
Guest:Luke Hinds is the CTO of Stacklok. He is the creator of the open source project sigstore, which makes it easier for developers to sign and verify software artifacts. Prior to Stacklok, Luke was a distinguished engineer at Red Hat.
Deb Bryant discusses her career journey and the significant role of open source software in public policy, particularly in the US and Europe. She highlights her work with the Open Source Initiative, Oregon State University, and Red Hat, emphasizing the importance of open source in government operations and cybersecurity. Deb also addresses the challenges and evolution of open source policies, the critical need for sustainability in open source projects, and her current focus on AI's impact on the ecosystem. She concludes by advocating for harmonized international regulations and human-centered AI approaches.
00:00 Introduction
00:44 Government and Open Source Software
01:38 Experiences in the Private Sector
02:14 Open Source in Public Policy
04:31 Cybersecurity and Open Source
07:42 Sustainability in Open Source
15:05 Future of Open Source and AI
18:53 Conclusion and Final Thoughts
Guest:Deb Bryant, Director, US Policy and Founder, Open Policy Alliance
Open Source Initiative
Throughout her career, Deborah has lent her voice to supporting open source projects and developers, building bridges between academia, industry, non-profits, and government along the way. Today she provides guidance to open source foundations seeking to support public policy development in open technology domains. She has worked in emerging technology and has been an advocate of free and open source software and the community that makes it so since the 1990s.
Deborah is board director emeritus at the Open Source Initiative (OSI); serves on the DemocracyLab board; serves on the advisory boards of Open Source Elections Technology Foundation and the OASIS Open Project, and as an advisor to the Brandeis University Open Technology Management program. She also represents OSI as a member of the Digital Public Goods Alliance. For eight years prior to her reentry into the nonprofit world, she led one of the world’s largest open source program offices (OSPO) at Red Hat where her global team was responsible for the company’s strategy and stewardship in open source software communities. While at Red Hat she served on the Eclipse Foundation board for two years.
Deborah’s published academic research includes the Use of Open Source in Cybersecurity in the Energy Industry and Collaborative Models for Creating Software in the Public Sector.
In this episode, Andreea Munteanu of Canonical discusses Data Science Stack, an out-of-the-box machine learning environment solution. Emphasizing the industry's shift to Kubernetes and cloud native applications, she outlines her vision for accessible and secure open source AI. The conversation also covers the importance of community contribution, challenges faced by data scientists, and the future of AI being open source.
00:00 Introduction
01:50 Data Science Stack Introduction
03:31 Community and Collaboration
06:30 Getting Started with Generative AI
08:56 Andreea's Journey into Data Science
10:59 The Future of AI and Open Source
14:57 Encouraging Open Source Contributions
17:28 Conclusion and Final Thoughts
Guest:Andreea Munteanu helps organizations drive scalable transformation projects with open source AI. She leads AI at Canonical, the publisher of Ubuntu. With a background in data science across industries like retail and telecommunications, she helps enterprises make data-driven decisions with AI.
In this episode, Andrew Brown, founder of Exam Pro, joins the podcast to discuss his background in educational technology and his current endeavors in teaching tech certifications and coding boot camps. Andrew shares his excitement about generative AI and how developers can stay updated with rapidly evolving innovations like Deepseek and the Open Platform for Enterprise AI (OPEA), the importance of understanding foundational concepts, and the role of open models in democratizing AI technology. The conversation also covers the relevance of deploying custom models, integrating reliable educational strategies, and ensuring developers have the knowledge to use AI applications effectively. Andrew shares insights on his courses and offers practical advice for developers keen on diving into generative AI. 00:00 Introduction and Guest Welcome00:19 Andrew Brown's Background and Current Work01:10 Exciting Trends in Tech Education02:20 Deep Dive into Generative AI05:23 DeepSeek and AI Model Costs07:44 Challenges and Opportunities in AI Development09:22 Open Source AI and Developer Training11:00 Practical Advice for Aspiring Developers13:00 Challenges and Opportunities in AI Development18:34 Conclusion and Final Thoughts Resources:FREE GenAI Boot CampExam Pro Resources on GitHubAndrew on GitHubGuest:Andrew Brown is the founder of Exam Pro where he creates training materials for developers. He also creates free cloud certification courses for freeCodeCamp.
In this episode, Henrik Blixt, a product manager at Intuit and Argo maintainer, shares his experiences and insights into managing platform engineering teams that handle Kubernetes, service mesh, API gateways, and more. He emphasizes the importance of product management within platform engineering and discusses his involvement with the CNCF's end user technical advisory board. Henrik also highlights the significance of open source in his professional journey and details the ongoing initiatives and advancements within the Argo project. 00:00 Introduction and Guest Welcome00:53 Discussion on Argo and Developer Tools01:41 Open Source Community Involvement02:06 CNCF End User Technical Advisory Board03:11 Reference Architectures and Initiatives08:18 Challenges and Solutions for End Users13:20 Argo Project Insights16:03 The Importance of Product Management17:16 Conclusion and Final Thoughts Guest:Henrik Blixt leads a Product Management team responsible for the Intuit core platform, where he defines the strategy and direction that has shaped Intuit’s cloud native platform based on CNCF projects like Kubernetes, Envoy, Istio, Prometheus, Argo (and many more!) that’s used by 7000 developers and serving over 100M users.
Being a passionate member of the open source community for almost 30 years, from Linux through OpenStack and Kubernetes, Henrik is currently focused on the Argo project as a core maintainer. He also represents Intuit across other committees, like the CNOE project and the broader Linux Foundation, where he shares experiences and best practices from Intuit’s use of open source, making sure end users are heard and their pain points understood.
He loves engaging with the community and has been a prolific speaker and event program committee member across ArgoCon, GitOpsCon, Kubecon over the years. A native of Sweden, earning his B.Sc in information systems from the University of Gothenburg, he now resides in California with his family.
Joshua Alphonse discusses the potential of small language models, highlighting their efficiency and applicability in various domains such as financial compliance and multimedia processing. The conversation also touches upon the intersection of creativity and technology, AI's role in the future of multimedia, and the significance of open source models. Joshua emphasizes the importance of eliminating biases in AI and the exciting advancements in agentic AI and spatial AI, projecting how these innovations might shape the tech landscape in the coming years.
00:00 Introduction and Welcome
00:09 Joshua's Background and Experience
00:34 Current Projects and Innovations
03:04 The Importance of Small Language Models
06:14 Open Source and AI Ethics
10:13 Future of AI and Exciting Developments
12:20 Challenges and Controversies in AI
17:47 Conclusion and Final Thoughts
Guest:Joshua Alphonse is Head of Product at PremAI. Joshua has spent his time empowering developers to create innovative solutions using cutting-edge open-source technologies. Previously, Joshua worked at Wix, leading Product and R&D engagements for their Developer Relations Team, and at Bytedance he successfully created content, tutorials, and curated events for the developer community.
In this episode, we celebrate Free and Open Source Software Month this February by chatting with some of Intel’s own open source software and community enthusiasts, Arun Gupta and Shirley Bailes, about open source, its business value, and how to unlock innovation through openness. Arun discusses his book, 'Fostering Open Source Culture,' detailing his journey from past experiences at major tech companies to the process and inspiration behind writing the book. The conversation covers the importance of fostering an open source culture, including the roles of various companies and foundations. Shirley shares her first-time author experience, emphasizing the role of foundations in maintaining a sustainable open source ecosystem. The discussion touches on the benefits of corporate engagement in open source, the challenges of proving ROI, and the critical need for a new generation of contributors. Arun and Shirley highlight real-world case studies and provide practical advice for companies looking to embrace and invest in open source culture.
00:00 Introduction
00:33 Arun Gupta’s Journey in Open Source
03:23 Shirley Bailes on First-time Authorship
04:42 The Role of Foundations in Open Source
07:17 Leadership in Open Source Foundations
11:27 The Business Case for Open Source
15:40 The Importance of Community and Collaboration
25:18 Conclusion and Book Information
Resources:Episode Transcript
Guests:Shirley Bailes has been involved in developer communities and building open source programs for over 15 years. She is the Director of Software Ecosystem Strategy in Intel’s Office of the CTO, where she leads thought leadership and strategic initiatives to accelerate startup innovation and developer ecosystem growth. She previously led open source programs at AWS and served as Co-President of the Women at Amazon Global Board. Arun Gupta is Vice President and General Manager of Developer Programs at Intel Corporation. He is an open source strategist, advocate, and practitioner for over two decades. He has taken companies such as Apple, Amazon, and Sun Microsystems through systemic changes to embrace open source principles. He is the elected chair of the CNCF GB and elected Chair of the OpenSSF GB. He has delivered technical talks in 45+ countries and authored multiple books. He is a fitness and kindness enthusiast.
In this episode, we speak with Udi Hofesh and Itiel Schwartz from Komodor about their roles and the mission of their company. Komodor aims to simplify Kubernetes at scale by providing tools for managing, troubleshooting, and optimizing Kubernetes clusters. They discuss the unique features of Komodor, including their approach to using AI to address Kubernetes issues and their involvement in open source projects like Helm Dashboard. The conversation also touches upon the new native integration for managing Kubernetes add-ons and the future direction of the company.
00:00 Introduction and Guest Introduction
00:27 What is Komodor?
00:59 Challenges in Kubernetes
01:32 Komodor's Unique Solutions
02:27 Target Audience and Developer Relations
06:56 Open Source Contributions
14:09 AI Integration in Komodor
18:47 New Features and Future Plans
Guests:Itiel Shwartz, CTO and Co-founder, KomodorUdi Hofesh, DevRel, Komodor
In this episode, Sarah Gran and Brandon Pitman from the Internet Security Research Group (ISRG) dive into their projects, Divvi Up and Let's Encrypt. They discuss the creation and impact of Divvi Up, a privacy-preserving metrics aggregation service, and its role in protecting individual data while providing valuable insights to organizations. They share the journey from collaborating with Google and Apple on COVID-19 exposure notifications to enhancing privacy for Firefox users. The conversation also explores the importance of TLS certificates provided by Let's Encrypt and the challenges and advancements in the realm of online privacy.
00:00 Introduction and Guest Introductions
01:22 Overview of DivviUp
02:29 Privacy Concerns and Data Security
06:18 Real-World Applications and Examples
11:28 Technical Details and Protocols
19:53 Open Source and Community Involvement
20:39 Conclusion and Final Thoughts
Guests:Sarah Gran is the Vice President of the Brand and Donor Development team at Internet Security Research Group (ISRG), the nonprofit entity behind Let's Encrypt, the world's largest certificate authority. Sarah joined ISRG in early 2016, shortly after the Let’s Encrypt launch and has helped it become a household name in software development. Sarah has also helped to shape ISRG’s latest projects, one focused on bringing memory-safe code to security-sensitive software, called Prossimo, anda privacy-respecting metrics service, called Divvi Up.Sarah is an independent member of the Tor Project’s Board of Directors. Previously, Sarah worked as a Vice President at Edelman SF and Deutsch NY in brand and communications strategy groups.Brandon Pitman is the Senior Software Engineer for Divvi Up and has a Master’s in Computer Science from Georgia Tech. Prior to ISRG, they worked at Google on a variety of Security, Privacy, and Green Energy projects. Bran came to ISRG to be a part of improving the privacy stance of the Internet as a whole.
In this episode, Katherine Druckman speaks to Alex Scammon, who leads the Open Source Program Office (OSPO) at G Research. Alex discusses the company's significant contributions to open source projects and their unique operating model. He covers the success of Armada, a CNCF sandbox project for multi-cluster batch scheduling, and the considerable efforts of G Research’s OSPO, which includes 30 engineers dedicated to direct open source contributions. Alex also shares insights on the benefits of supporting open source projects, the complexities of project prioritization, and the collaborative efforts in the open source community. The episode emphasizes the importance of sustainable open source involvement and offers a glimpse into G Research's mission to use AI and ML tools to drive financial market predictions.
00:00 Introduction and Guest Welcome
00:08 Overview of Alex's Role and OSPO
03:27 Importance of Open Source Contributions
04:37 Prioritizing Projects and G Research
07:27 Challenges and Collaboration
12:43 Personal Journey in Open Source
18:09 Encouraging Open Source Contributions
Guest:Alex Scammon: Currently, I'm leading a large and intrepid band of open-source engineers engaged in a number of philanthropic upstream contributions on behalf of G-Research. All of our work centers around open-source data science and machine learning tools and the MLOps and HPC infrastructure to support those tools at scale. We're almost certainly hiring.... As part of this work, I'm also leading a discussion around batch scheduling on Kubernetes as the chair of the CNCF's Batch Working Group. Please reach out if this is an area of interest for you -- we'd love to have more voices at the table!
In this episode, Mark Abrams discusses his role at SUSE as a domain solution architect specializing in edge computing. He shares insights on leveraging Kubernetes for edge solutions, the evolution of the open source community, and the importance of contributing to open source projects. They also touch upon the complexities and opportunities in cloud native technologies, the impact of AI, and future developments in edge computing and the open source ecosystem.
00:00 Introduction and Setting the Scene
00:50 Mark's Role and Interests at KubeCon
02:08 Discussing the New Book: Cloud Native Edge Essentials
03:43 The Evolution of Kubernetes and Cloud Native
05:58 Challenges and Solutions in Edge Computing
08:01 Open Source Community and Contributions
14:42 Future of Edge and AI Integration
20:20 Conclusion and Final Thoughts
Guest:Mark Abrams has been involved in developing and delivering technology solutions for over 25 years. Mark has broad experience ranging from writing code for backend services, embedded systems, and user interfaces to managing and building technical teams and field activities around pre-sales engineering. Mark founded and led a technology enterprise using distributed methodologies before the modern day cloud existed. Mark was a part of the original team that brought k3s - the lightweight kubernetes - to market. Mark is currently a proud member of the Domain Solutions Architect's team at SUSE.
In this episode, Katherine speaks with Nick Vidal, Community Manager at the Open Source Initiative (OSI), about his role and the organization's work in defining open source AI. Nick shares insights into the challenges and discussions surrounding AI, software licenses, and the necessity for clear definitions and community consensus. He also elaborates on the Clearly Defined project aimed at securing the software supply chain and the importance of community feedback in evolving the OSI's stance on open source AI.
00:00 Introduction and Guest Introduction
00:37 Nick Vidal's Role at OSI
01:04 Community Involvement and Challenges
03:43 Defining Open Source AI
06:21 Handling Feedback and Criticism
13:14 Overview of Open Source AI Definition
16:16 Future Plans and Community Involvement
18:09 Closing Remarks and Invitation to Join
Resources:The Open Source AI Definition
Guest:Nick Vidal is Community Manager at the Open Source Initiative and former Outreach Chair at the Confidential Computing Consortium from the Linux Foundation. Previously, he was the Director of Community and Business Development at the Open Source Initiative and Director of Americas at the Open Invention Network.
In this episode, Daniel Valdivia, an engineer from MinIO, discusses his participation at KubeCon and his work in Kubernetes integrations and AI initiatives. We discussed the significance of object storage standardization via the Open Platform for Enterprise AI (OPEA), emphasizing the flexibility and scalability of MinIO's offerings. Daniel highlights MinIO's contributions to open source projects like PyTorch and Spark and shares insights on new hardware technologies like PCIe Gen 5. Daniel also announces the launch of MinIO's new AI store, designed to empower enterprises to efficiently manage exascale infrastructure and AI pipelines.
00:00 Introduction
00:13 Meet Daniel Valdivia: Engineer at Minio
00:24 The Importance of Kubernetes Integrations
00:43 Intel's Open Platform for Enterprise AI
00:58 MinIO's Unique Object Storage Solutions
01:56 Community Participation and Contributions
02:18 Ensuring Compatibility with AI Hardware
03:20 The Role of OPEA in Enterprise AI
05:56 Open Source Contributions and Challenges
09:12 Future of AI and Hardware Innovations
13:23 Big Announcement
14:40 Conclusion and Final Thoughts
Guest:Daniel Valdivia is an engineer with MinIO where he focuses on Kubernetes, ML/AI and VMware. Prior to joining MinIO, Daniel was the Head of Machine Learning for Espressive. Daniel has held senior application development roles with ServiceNow, Oracle and Freescale. Daniel holds a Bachelor of Engineering from Tecnológico de Monterrey, Campus Guadalajara and Bachelor of Science in Computer Engineering from Instituto Tecnológico y de Estudios Superiores de Monterrey.
In this episode, Jack Cable, Senior Technical Advisor at CISA, discusses the agency's role in securing the technology ecosystem, particularly focusing on open source software security. Jack explains what CISA is, its mission to protect critical infrastructure, and the significance of the 'Secure by Design' initiative. The conversation covers the collaboration efforts with the open source community, resources available for developers, and the importance of integrating security into software development. Jack also shares his personal journey into cybersecurity and emphasizes empowering developers to enhance security measures from the start.
00:00 Introduction
00:45 What is CISA?
01:26 CISA's Mission and Mandate
02:51 CISA's Role in Open Source Security
03:55 Collaborations and Initiatives
05:18 Open Source as Critical Infrastructure
07:11 Secure by Design and Developer Resources
10:41 Jack Cable's Journey into Cybersecurity
12:52 Empowering the Open Source Community
17:11 Bridging the Gap Between Developers and Security Communities
19:24 Conclusion and Final Thoughts
Resources:Secure by Design
CISA on Open Source Security
Guest:Jack Cable is a Senior Technical Advisor at CISA, where he helps lead the agency’s work on open source software security and Secure by Design. At CISA, Jack authored CISA’s Open Source Software Security Roadmap and has co-led community efforts to standardize the security of package repositories. Prior to that, Jack worked as a TechCongress Fellow for the Senate Homeland Security and Governmental Affairs Committee, advising Chairman Gary Peters on cybersecurity policy, including election security and open source software security. There, Jack was the principal author of the Securing Open Source Software Act. He previously worked as a Security Architect at Krebs Stamos Group. Jack also served as an Election Security Technical Advisor at CISA, where he created Crossfeed, a pilot to scan election assets nationwide. Jack is a top bug bounty hacker, having identified over 350 vulnerabilities in hundreds of companies. After placing first in the Hack the Air Force bug bounty challenge, he began working at the Pentagon’s Defense Digital Service. Jack holds a bachelor’s degree in Computer Science from Stanford University and has published academic research on election security, ransomware, and cloud security.
In this engaging conversation at the All Things Open conference, Tim Spann, Principal Developer Advocate at Zilliz, discusses the importance of community collaboration in advancing AI technologies. He emphasizes the need for diverse perspectives in solving complex problems and highlights his work with the Milvus open source vector database. Tim also explains the evolving landscape of retrieval augmented generation (RAG) and its applications and shares insights into the future of AI development. The conversation concludes on a lighter note with Tim describing his creative use of Milvus in a fun Halloween project to catalog and identify ghosts.
00:00 Introduction
00:41 Meet Tim Spann: Principal Developer Advocate
01:35 The Importance of Community in AI
02:56 Advanced RAG and Multimodal Models
06:17 The Future of Agentic RAG
09:04 Challenges and Excitement in AI Development
13:35 Building AI the Right Way
17:50 Fun with AI: Capturing Ghosts
19:24 Conclusion and Final Thoughts
Guest:Tim Spann is a Principal Developer Advocate for Zilliz and Milvus. He works with Apache NiFi, Apache Kafka, Apache Pulsar, Apache Flink, Flink SQL, Apache Pinot, Trino, Apache Iceberg, DeltaLake, Apache Spark, Big Data, IoT, Cloud, AI/DL, machine learning, and deep learning. Tim has over ten years of experience with the IoT, big data, distributed computing, messaging, streaming technologies, and Java programming. Previously, he was a Principal Developer Advocate at Cloudera, Developer Advocate at StreamNative, Principal DataFlow Field Engineer at Cloudera, a Senior Solutions Engineer at Hortonworks, a Senior Solutions Architect at AirisData, a Senior Field Engineer at Pivotal and a Team Leader at HPE. He blogs for DZone, where he is the Big Data Zone leader, and runs a popular meetup in Princeton & NYC on Big Data, Cloud, IoT, deep learning, streaming, NiFi, the blockchain, and Spark. Tim is a frequent speaker at conferences such as ApacheCon, DeveloperWeek, Pulsar Summit and many more. He holds a BS and MS in computer science.
In this episode, Matt Butcher, CEO of Fermyon and a creator of the Helm project, returns to discuss his work with Helm—a nearly ubiquitous project in Kubernetes management. Matt provides insights into Helm's evolution from version 2 to version 3 and shares his vision for Helm 4. He emphasizes the importance of maintaining stability while embracing necessary changes and highlights the role of community contributions in open source projects like Helm. The conversation covers the new features and architectural changes planned for Helm 4, as well as how individuals can get involved in its development. Matt reflects on the significance of fostering a supportive and inclusive community and encourages new contributors to join the effort, noting the current opportune moment to influence Helm's future.
00:00 Introduction
00:37 The Helm Project
01:08 WebAssembly and Spin 3
01:54 Helm's Evolution and Future
04:22 Philosophy Behind Helm 4
11:35 Community Involvement and Contribution
18:46 Encouraging New Contributors
Guest:Matt Butcher is co-founder and CEO of Fermyon, the serverless WebAssembly in the cloud company. He is one of the original creators of Helm, Brigade, CNAB, OAM, Glide, and Krustlet. He has written or co-written many books, including Learning Helm and Go in Practice. He is a co-creator of the Illustrated Children’s Guide to Kubernetes series. These days, he works mostly on WebAssembly projects such as Spin, Fermyon Cloud and Bartholomew. He holds a Ph.D. in Philosophy. He lives in Colorado, where he drinks lots of coffee.
In this episode, Ann Schlemmer, CEO of Percona, discusses the company's 18-year journey rooted in open source principles, customer-centric approaches, and performance enhancements. She describes Percona's solutions for major databases like MySQL, MongoDB, Postgres, and their recent venture into the Redis space with the Valkey project. Anne emphasizes the importance of offering open source alternatives to proprietary licenses, maintaining trust and value with customers, and the need for businesses to contribute to and sustain the open source community. She also touches on the future of open source business models, the impact of security considerations, and how the open source ecosystem can adapt and evolve in the coming years.
00:00 Introduction and Welcome
00:14 Overview of Percona
01:33 Importance of Open Source Alternatives
02:45 Challenges in the Open Source Database Landscape
06:43 Percona's Community Contributions
09:01 Sustainability and Governance in Open Source
15:36 Future of Open Source Business Models
19:55 Unexpected Uses and Innovations
In this episode, Katherine Druckman interviews Dotan Horvits, a CNCF ambassador involved in the cloud native and open source community. Dotan shares insights on his passion for DevOps, observability, and his podcast 'Open Observability Talks.' He discusses his recent focus on CI/CD observability within the CNCF realm, the value and challenges of standardizing observability in release pipelines, and the role of AI in future observability improvements. The conversation also touches on the importance of developer experience, the evolving landscape of observability, and upcoming advancements in projects like Jaeger and Prometheus. Dotan emphasizes the importance of open source collaboration and invites listeners to get involved in related communities and projects.
00:00 Introduction
00:29 Dotan's Background and Experience
02:49 Current Projects and Passions
03:05 CI/CD Observability and OpenTelemetry
08:06 Developer Experience and Productivity
13:49 The Impact of AI on Observability
20:48 Future of Observability and Industry Trends
Guest:Dotan Horovits lives at the intersection of technology, product and innovation. With over 20 years in the hi-tech industry as a software developer, a solutions architect and a product manager, he brings a wealth of knowledge in cloud and cloud-native solutions, DevOps practices and more.
Horovits is an international speaker and thought leader, as well as an Ambassador of the Cloud Native Computing Foundation (CNCF). He runs the successful OpenObservability Talks podcast, where he evangelizes on Observability in IT systems using popular open source projects such as Prometheus, OpenSearch, Jaeger and OpenTelemetry.
In this episode, we have an insightful discussion with Carol Chen from Red Hat at the All Things Open conference. Carol, who works in the Open Source Program Office at Red Hat, shares her experiences and insights on her ongoing project, InstructLab, a collaboration with IBM aimed at applying open source methods to building and training large language models. The conversation covers the importance of democratizing AI, reducing the fear and misconceptions surrounding AI technology, and making AI tools and concepts more accessible and understandable for everyone, including those who are not tech-savvy. Carol also discusses the social responsibility associated with AI development, emphasizing the need for transparency and community collaboration.
00:00 Introduction and Welcome
00:17 Carol's Background and Role at Red Hat
01:00 AI and Open Source
03:13 Challenges and Opportunities in AI
06:43 InstructLab: Making AI Accessible
12:09 Personal Journey into AI
15:37 AI Ethics and Open Source
Guest:Carol Chen is a Community Architect at Red Hat, supporting and promoting various upstream communities such as InstructLab, Ansible and ManageIQ. She has been actively involved in open source communities while working for Jolla and Nokia previously. In addition, she also has experiences in software development/integration in her 12 years in the mobile industry. Carol has spoken at events around the world, including DevConf.CZ in Czech Republic and OpenInfra Summit in China. On a personal note, Carol plays the Timpani in an orchestra in Tampere, Finland, where she now calls home.
In this episode, Dan Applequist of Samsung explores the intersection of open source security and web development. Drawing from his extensive experience with the World Wide Web Consortium (W3C) and initiatives like Open Source Security Foundation (OpenSSF) and C2PA, Dan discusses the challenges and opportunities of uniting the open source security community with web developers. Emphasis is placed on the critical importance of mobile security, considering the sensitive information on mobile devices and industry best practices such as OWASP guidelines. The conversation also highlights the importance of security education, referencing resources like OpenSSF Security 101 and OWASP's global meetups. Additionally, media authenticity through protocols like C2PA and the role of organizations such as the BBC in this domain are discussed. The episode concludes with recommendations for developers to enhance their security practices through continuous learning and community engagement. 00:00 Introduction00:25 Dan's Role at Samsung and Open Source Contributions00:45 Web Standards and Privacy Initiatives04:20 Bridging Web Development and Open Source Security08:08 Challenges in Web and Mobile Security09:26 The Importance of Mobile Security11:40 Threat Models and Security Concerns12:05 Protecting Yourself and Your Data12:38 Web Security Best Practices13:46 Challenges for Web Developers15:28 Open SSF and W3C Collaboration17:36 Expanding Security Education19:44 The Importance of Media Authenticity22:25 Final Thoughts and Future Discussions Resources:* W3C SWAG Group: https://www.w3.org/community/swag/ - and GitHub repo https://github.com/w3c-cg/swag with meeting minutes * Last year's W3C / OpenSSF/ OWASP / OpenJS "Secure the Web Forward" workshop: https://www.w3.org/2023/03/secure-the-web-forward/ (includes videos of all talks and workshop report) * W3C Ethical Web Principles https://www.w3.org/TR/ethical-web-principles/ * W3C Privacy Principles https://www.w3.org/TR/privacy-principles/ * W3C Security & Privacy self-check https://www.w3.org/TR/security-privacy-questionnaire/
Guest:Dan Appelquist is Open Source Strategist at Samsung Open Source Group. He is a web & mobile industry veteran and long-time participant and leader in open source and open standards. He has been co-chair of the W3C Technical Architecture Group for the last ten years. He was an early web pioneer and "dot-com CTO." He's led efforts at Vodafone, Telefónica, Samsung and the UK Government relating to open standards and the open web. You may find him on the Fediverse at @torgo@mastodon.social.
In this episode, we welcomed back Christopher Robinson, aka CRob, to discuss his extensive work in the Open Source Security Foundation (OpenSSF). We chatted about the importance of open source software security, detailing the various initiatives aimed at improving security standards. CRob shares insights into the working groups and projects within OpenSSF, focusing on their efforts to educate developers and security researchers. We also touched on the upcoming SOSS Fusion event, and its role in fostering community engagement and collaboration in open source security. We encourage listeners to join these endeavors and contribute to solving significant security challenges.
00:00 Welcome Back, CRob!
00:52 Diving into Open Source Security
01:20 Understanding the OpenSSF
04:18 Key Personas in Open Source Security
09:44 Educational Resources for Developers
12:17 Getting Involved with OpenSSF Projects
15:27 Upcoming Event: SOSS Fusion
17:47 The Value of Open Source Events
21:48 Final Thoughts and Future Plans
Resources:OpenSSF
SOSS Fusion
Guest:Christopher Robinson (aka CRob) is the Director of Security Communications at Intel Product Assurance and Security. CRob is a 41st level Dungeon Master and a 24th level Securityologist. He has worked at several Fortune 500 companies with experience in the Financial, Medical, Legal, and Manufacturing verticals, and spent 6 years helping lead the Red Hat Product Security team as their Program Architect.
CRob has been a featured speaker at Gartner’s Identity and Access Management Summit, RSA, BlackHat, DefCon, Derbycon, the (ISC)2 World Congress, and was named a "Top Presenter" for the 2017 and 2018 Red Hat Summits. CRob was the President of the Cleveland (ISC)2 Chapter, and is also a children's Cybersecurity Educator with the (ISC)2 Safe-and-Secure program. He holds a Certified Information Systems Security Professional (CISSP) certification, Certified Secure Software Lifecycle Professional (CSSLP) certification, and The Open Group Architecture Framework (TOGAF) certification. He is heavily involved in the Forum for Incident Response and Security Teams (FIRST) PSIRT SIG, collaborating in writing the FIRST PSIRT Services Framework, as well as the PSIRT Maturity Assessment framework. CRob is also the lead/facilitator of the Open Source Security Foundation (OpenSSF) Vulnerability Disclosures and OSS Developer Best Practices working groups as well as a Technical Advisory Committee (TAC) member.
He enjoys hats, herding cats, and moonlit walks on the beach.
In this episode, Steven Batifol, a Developer Advocate at Zilliz, discusses his role in fostering the MLOps community, the significance of vector databases like Milvus, and the importance of open source ecosystems. We covered the excitement of developing creative demos, the challenges facing developers in the AI space, and the rapid advancements in LLMs and AI agents. We even learn some trivia about Germany and fax machines! 00:00 Introduction00:16 Developer Advocacy01:02 The MLOps Community in Berlin01:51 Joining Zilliz and Working with Milvus04:46 Fun and Creative Demos10:21 Challenges in the AI/ML Community13:00 The Importance of Open Source17:02 Upcoming Open Source Summit Presentation20:14 Future of AI and LLMs24:24 Conclusion Guest:Stephen Batifol is a Developer Advocate at Zilliz. He previously worked as a Machine Learning Engineer at Wolt, where he created and worked on the ML Platform, and previously as a Data Scientist at Brevo. Stephen studied Computer Science and Artificial Intelligence. He is a founding member of the MLOps.community Berlin group, where he organizes Meetups and hackathons. He enjoys boxing and surfing.
Katherine Druckman talks to fellow Intel Open Source Evangelist Ezequiel Lanza about building and deploying AI applications using Retrieval Augmented Generation. We break down RAG concepts and processes involved in providing additional context to general AI models for specialized use cases.
Guest:
Passionate about helping people discover the exciting world of artificial intelligence, Ezequiel Lanza is a frequent AI conference presenter and the creator of use cases, tutorials, and guides that help developers adopt open source AI tools.
Katherine speaks with Demetris Cheatham, the Chief of Staff to the CEO of GitHub, about her unique perspective on the open source landscape. The discussion covers her experiences in various sectors and the impactful 'All In' project created to elevate developers from underrepresented backgrounds. They highlight the significance of community, the power of relationships, and the pivotal role of natural language and AI in making coding more accessible globally. The talk also addresses critical challenges like the digital divide, funding for diversity programs, and the importance of evolving diversity, equity, and inclusion efforts in tech.
00:00 Introduction
00:26 Connecting Through Open Source
02:02 Role and Responsibilities at GitHub
05:06 Diversity and Inclusion Initiatives
09:16 Challenges in Computer Science Education
12:51 Equity and Systemic Change
16:21 The Journey to a Billion Developers
24:07 Building Relationships in Open Source
31:37 Final Thoughts and Takeaways
Sitting on GitHub’s Executive Leadership team, Demetris Cheatham is currently the Chief of Staff for the CEO of GitHub, where she acts as the CEO’s trusted partner to move all of software development forward. Demetris is particularly passionate about the evolving nature of open source in the age of AI. Before her time as COS to the CEO, Demetris was Senior Director for Diversity, Inclusion and Belonging Strategy at GitHub, the Global Diversity and Inclusion at Lead at Red Hat, and was the first woman and youngest Executive Director to lead the National Bar Association, the United States’ oldest and largest international network of over 65,000 predominantly African-American attorneys and judges.
Ezequiel Lanza and Katherine Druckman from Intel's Open Ecosystem team chat with Daniel Whitenack, founder and CEO of Prediction Guard. They discuss the importance and implementation of guardrails for securing generative AI platforms and cover the operational challenges and security considerations of running AI models, the concept of responsible AI, and practical advice for integrating guardrails into AI workflows. Additionally, the conversation touches on multi-model integrations, open source contributions, and the significance of vendor-neutral frameworks in achieving a secure and efficient AI ecosystem.
00:00 Introduction
01:28 What is Prediction Guard?
03:31 Understanding Guardrails in AI
06:49 Security Risks and Responsible AI
13:30 Open Source and Model Security
19:00 Open Platform for Enterprise AI
20:26 Contributing to Open Source Projects
27:12 Final Thoughts
Guest:
Daniel Whitenack (aka Data Dan) is a Ph.D. trained data scientist and founder of Prediction Guard. He has more than ten years of experience developing and deploying machine learning models at scale, and he has built data teams at two startups and an international NGO with 4000+ staff. Daniel co-hosts the Practical AI podcast, has spoken at conferences around the world (ODSC, Applied Machine Learning Days, O’Reilly AI, QCon AI, GopherCon, KubeCon, and more), and occasionally teaches data science/analytics at Purdue University.
Taylor Dolezal from the Cloud Native Computing Foundation discusses his role as the Head of Ecosystem, working closely with end-users implementing CNCF projects. He shares his open source origin story, tracing back to high school programming experiences. We touched on community dynamics, experiences with project forks, and the evolving landscape of AI and its intersection with open source. We also discuss the importance of sustainability in open source communities and the critical role of vendor neutrality.
00:00 Introduction
01:45 Open Source Origin Story
11:04 Project Forks and Community Dynamics
17:20 HashiCorp and OpenTofu: A Fork in the Road
19:46 Navigating the AI Frontier
23:28 The Challenges of AI Standardization
26:17 The Importance of Vendor Neutrality
28:02 Balancing Priorities in Open Source
29:51 Sustaining Open Source Communities
Guest:Taylor Dolezal navigates the cloud native universe with a knack for puns and a keen eye for psychology. Living in the heart of LA, he blends tech innovation with mental insights, one punny cloud at a time. Avid reader, thinker, and cloud whisperer.
In this episode, we chat with Luis Villa, co-founder of Tidelift, about everything from supporting open source maintainers to coding with AI. Luis, a former programmer turned attorney, shares stories from his early days of discovering Linux, to his contributions to various projects and organizations including Mozilla and Wikipedia. We discussed the critical importance of open source software, the challenges faced by maintainers, including burnout, and how Tidelift works toward compensating maintainers. We also explore broader themes about the sustainability of open source projects, the impact of AI on code generation and legal concerns, and the need for a more structured and community-driven approach to long-term project maintenance.
00:00 Introduction
03:20 Challenges in Open Source Sustainability
07:43 Tidelift's Role in Supporting Maintainers
14:18 The Future of Open Source and AI
32:44 Optimism and Human Element in Open Source
35:38 Conclusion and Final Thoughts
Guest:Luis Villa is co-founder and general counsel at Tidelift. Previously he was a top open source lawyer advising clients, from Fortune 50 companies to leading startups, on product development, open source licensing, and other matters.
Luis is also an experienced open source community leader with organizations like the Wikimedia Foundation, where he served as deputy general counsel and then led the Foundation’s community engagement team. Before the Wikimedia Foundation, he was with Greenberg Traurig, where he counseled clients such as Google on open source licenses and technology transactions, and Mozilla, where he led the revision of the Mozilla Public License.
He has served on the boards at the Open Source Initiative and the GNOME Foundation, and been an invited expert on the Patents and Standards Interest Group of the World Wide Web Consortium and the Legal Working Group of OpenStreetMap.
Recent speaking engagements include RedMonk’s Monki Gras developer event, FOSDEM, and as a faculty member at the Practicing Law Institute’s Open Source Software programs.
Luis holds a JD from Columbia Law School and studied political science and computer science at Duke University.
In this episode, Madelyn Olson, a representative of the Valkey project and an AWS employee, joins us to discuss the life of an open source maintainer and the experiences surrounding the launch of the Valkey project. We cover the pivotal moments that led to the creation of Valkey, a Redis fork, following the Redis license change. Madeline also shares insights on the challenges and pressures of being a maintainer, strategies to manage burnout, and the significance of creating a community-driven, open source project. The episode highlights the technical advancements and future directions for Valkey, working to leverage modern hardware, manage large clusters, and expand the extension ecosystem.
00:00 Introduction
00:48 Redis License Change and Birth of Valkey
06:17 Maintainer Life and Burnout
14:54 Forking a Repository: When and Why
19:30 Community-Driven Open Source Projects
21:32 Future of Valkey and Closing Remarks
Guest:Madelyn Olson is a co-creator and maintainer of Valkey, a high-performance key-value datastore, and Principal Engineer at Amazon Web Services (AWS). She focuses on building secure and highly reliable features, with a passion in working with open-source communities.
In this episode, Intel's open source AI evangelist Ezequiel Lanza and Dave Nielsen from IBM join the discussion to talk about the AI Alliance, a collaborative initiative formed by IBM and Meta in December 2023. We discussed the importance of openness in AI, how it fosters innovation, community involvement, and ensures AI remains safe and trustworthy. We also covered the significance of community in technology development, and upcoming events such as the Open Source AI Demo Night showcasing innovative AI applications. The episode emphasizes the role of open models in making technology more accessible globally.
00:00 Introduction
00:43 What is the AI Alliance?
04:48 The Importance of Openness in AI
11:47 AI for Good and Community Involvement
15:28 Upcoming Events and How to Get Involved
Guests:Dave Nielsen represents IBM as the head of community at the AI Alliance, which brings together compute, data, tools, and talent to accelerate and advocate for open innovation in AI. Prior to IBM, Dave led community programs at companies like MongoDB, Harness, Redis and PayPal. Dave is known for creating community events, such as CloudCamp, and for writing the book PayPal Hacks.Passionate about helping people discover the exciting world of artificial intelligence, Ezequiel Lanza is a frequent AI conference presenter and the creator of use cases, tutorials, and guides that help developers adopt open source AI tools.
In this episode, John Kjell, Director of Open Source at TestifySec, discusses his involvement in various open source projects and the intricacies of maintaining such projects. John sheds light on his work with the CNCF and OpenSSF, and the impact of tools like Witness, Archivista, and SLSA. He outlines the challenges maintainers face, especially around security, and offers insights into balancing professional and personal responsibilities. John also explores the significance of community, inclusivity, and a secure developer identity in open source ecosystems.
00:00 Introduction and Guest Background
01:20 Maintainer Burnout and Security Challenges
04:41 Balancing Multiple Projects and Personal Life
07:15 Security Risks in Smaller Projects
10:13 Developer Identity and Reputation
19:37 Open Source Origin Story and Community Involvement
24:11 Optimism for the Future of Open Source Security
Resources:Enhancing Open Source Security: Introducing Siren by OpenSSF – Open Source Security Foundation
Security at Every Step: Why Software Supply Chains Are Critical
Guest:John Kjell is responsible for open source at TestifySec, a software supply chain security startup. He is a maintainer for the Witness and Archivista sub-projects under in-toto. Additionally, John is an active contributor to CNCF's TAG Security and multiple projects within the OpenSSF. Before TestifySec, John was an engineering leader at VMware, helping to bring supply chain security features to the Tanzu Application Platform.
In this episode, Devin Stein, founder of Dosu, shares his journey from being an active open source user and maintainer to solving maintainer burnout with Dosu, a GitHub app designed to automate and streamline open source project management. He discusses key pain points faced by maintainers, the innovative use of LLMs to enhance task automation, and his partnership with the CNCF to support various projects. Stein reflects on the broader impact of AI in open source maintenance, emphasizing the potential to enhance efficiency and community engagement while preserving the human element in open source development.
00:00 Introduction
02:21 Challenges Faced by Open Source Maintainers
06:53 How Dosu Works
11:39 Partnership with the CNCF
16:39 Future of Open Source and AI
Guest:Devin Stein is the CEO and Founder of Dosu. Prior to Dosu, Devin was an early engineer and leader at various startups. Outside of work, he is an active open source contributor and maintainer.
Sarah Christoff discusses her experiences and challenges as an open source maintainer with a focus on her work with the Porter and Zarf projects. Sarah shares insights into the frustrations and isolation often felt by maintainers, and emphasizes the importance of community and human connections in navigating these roles. We chatted about of Porter and its function in simplifying complex DevOps tool integrations. Additionally, Sarah talks about Zarf, a project recently donated to the OpenSSF aimed at facilitating air-gapped Kubernetes deployments.
00:00 Introduction01:29 Challenges of Being an Open Source Maintainer03:12 The Human Element in Software Development05:45 Advice for Aspiring Maintainers08:42 The Porter Project11:10 The Zarf Project13:09 The Importance of Community in Open Source15:31 Women in Tech and Role Models21:45 Animal Rescue and Community Building26:10 Final Thoughts and Hot Takes on Open Source Guest:Sarah Christoff is a software engineer at Defense Unicorns who loves making complex code more digestible. She is the self-proclaimed founder of the Leslie Lamport fan club. When she's not bugbusting, she is running her animal rescue and competing in triathlons. She believes code should be like cats: intelligent, fluffy, and easy to take care of.
Matt Ray, the community manager for the CNCF sandbox project OpenCost, discusses their cloud and Kubernetes cost monitoring technology. He covers the capabilities of OpenCost in tracking cloud expenses and its new feature for monitoring carbon costs. Matt elaborates on the project's origin, its open source community, and the collaborative effort with other companies like Grafana and Microsoft. The conversation covers the community's growth, contribution processes, and OpenCost's goals for becoming more diverse and integrated with other technologies. Matt also reflects on the increasing interest in cost monitoring and his personal journey in the open source community. 00:00 Introduction to Matt Ray and OpenCost01:09 OpenCost's Origins and CNCF Contribution02:25 OpenCost vs. KubeCost: Defining the Boundaries03:35 Adoption and Integration of OpenCost04:30 Community Contributions and Project Growth07:00 Flexibility and Use Cases of OpenCost13:58 Becoming a Committer and Maintainer14:47 Community Engagement and Participation15:25 Future Plans and Focus16:39 Carbon Cost and Plugin Architecture17:53 Personal Journey in Open Source Guest:Matt Ray has been active in Open Source and DevOps communities for over two decades and has spoken at and helped organize many conferences and meetups. He is currently the Senior Community Manager at Kubecost for the CNCF Sandbox Project OpenCost. He has worked in and with enterprises and startups across a wide variety of industries including banking, retail, and government. He currently resides in Sydney, Australia after relocating from Austin, Texas. He co-hosts the Software Defined Talk podcast and is active on Mastodon, GitHub, and too many Slacks.
Andres Aguiar joins us to discuss OpenFGA, an open source project for managing fine-grained authorization. Andres covers the challenges in implementing authorization and the importance of using precise access controls to enhance security. He outlines the project's journey, use cases, and how it can be integrated into different software environments. The conversation highlights the community's contributions, the roadmap for OpenFGA, and the potential of AI in improving security through centralized logging and anomaly detection.
00:13 Meet Andres and OpenFGA
01:48 Project Maturity and Community
02:55 Adoption and Use Cases
04:43 Contributions and Integrations
05:59 Understanding Relationship-Based Access Control
16:13 Future Roadmap and AI Potential
Guest:Andres Aguiar has spent his 20+ year career building tools for developers, wearing different hats. He’s been working on the identity space for the last 6 years, and is currently the Product Manager for OpenFGA.
We spoke with Edoardo Dusi from Sparkfabrik about Edoardo's career path from a backend software engineer specializing in Drupal to his current role in Developer Relations (DevRel). He shared his experiences and the importance of community involvement when working with open source software. He highlighted the supportive nature of open source communities and provided advice for newcomers. We also covered the work of the Open Source Security Foundation (OpenSSF) and the significance of security in open source projects.
00:00 Welcome and Introduction 01:03 Sparkfabrik and Drupal
02:01 Exploring KubeCon
02:56 Getting Involved in Open Source
06:10 Challenges in Modern Open Source
08:37 Joining OpenSSF
11:21 Importance of Security in Open Source
13:01 European Perspectives on Security
14:14 The Role of Big Tech in Open Source
14:36 Community Contributions and Impact
16:34 Navigating the Contribution Process
21:24 Advice for New Open Source Contributors
25:47 The Human Side of Software Development
Guest:Edoardo Dusi is a Developer Relations Engineer at SparkFabrik, a company that helps organisations build digital products with open source technologies. He has a strong software developer and team leader background, working on various projects and platforms. He is passionate about creating and sharing content that educates and inspires other developers, such as tech talks, videos, podcasts, conferences, and more. He enjoys connecting with the developer community and promoting the benefits of open source software.
Divya Mohan of SUSE discusses her role in in the open source community, highlighting the significance of documentation in software development, drawing from her experiences in the Kubernetes SIG Documentation group and her previous roles. The discussion spans topics like the impact of poorly documented code, the challenges of maintaining comprehensive documentation in open source projects, and advice for fledgling project maintainers. Divya shares her enthusiasm for WebAssembly and its potential to revolutionize software development through inclusivity and standardization, challenging the traditional write-once-run-anywhere paradigm. We conclude with insights on the formation and mission of the Bytecode Alliance and the future prospects of WebAssembly. 00:00 Introduction01:26 Role and Responsibilities at SUSE04:25 Importance of Documentation08:19 Challenges in Documentation and Code Commenting12:21 Single Maintainer Projects and Documentation Advice14:47 Challenges in Maintaining Documentation17:53 Introduction to Bytecode Alliance18:12 WebAssembly: Beyond the Web19:00 The Role of Standards in WebAssembly21:55 The Future of WebAssembly28:34 Conclusion and Final Thoughts Guest:Divya Mohan is a Senior Technical Evangelist at SUSE, where she contributes to Rancher’s cloud native open source projects. She co-chairs the documentation for the Kubernetes & LitmusChaos projects & has previously worked extensively in the systems engineering space during her tenure with HSBC & IGate Global Solutions Pvt Ltd. A co-creator of the KCNA exam & a CNCF ambassador, she is invested in making technical communities & technologies more accessible & inclusive.
In this episode, we dive into Codium, an AI-powered coding platform designed to assist developers throughout the software development lifecycle, especially in testing, code review, and documentation. Dedy Kredo, one of Codium's co-founders, explains the unique features and benefits of the platform, comparing it to other tools like GitHub Copilot. The discussion also touches on Codium's adaptability for test-driven development and its flexible deployment options, highlighting the importance of security and configuration. Additionally, the significance of the Intel Ignite startup program and the impact of AI hype on Codium's rapid growth are discussed. Listeners will gain insights into Codium's open-core model and open-source projects, including the Alpha Codium research project.
00:00 Introduction
00:13 What is Codium?
01:35 Comparison with Other AI Coding Tools
03:01 Test-Driven Development and Codium
05:40 Customization and Configuration
08:17 Deployment Options and Security
11:11 Intel Ignite Program Experience
13:45 Impact of AI Hype on Business
17:02 AI-Assisted Development and Semi-Automation
17:43 Improving Code Quality and Productivity
18:33 Challenges and Opportunities in AI for Software Development
20:27 Adopting AI Tools in Development Teams
24:07 Open Source Projects and Community Engagement
28:11 Conclusion and Future Prospects
Guest:Dedy Kredo is the Co-Founder and Chief Product Officer of CodiumAI, leading the product and engineering teams to empower developers to build software faster and more accurately through the use of artificial and human intelligence.
Before founding CodiumAI, he served as VP of Customer Facing Data Science at Explorium, where he built and led a talented data science team and played a key role in the company's growth from seed to series C.
Previously, he was the founder of an online marketing startup, growing it from a bootstrapped venture to millions in revenue. Before that, he spent seven years in Colorado and California as a product line manager at VMware's management business unit. During this time, he worked closely with Fortune 500 companies and successfully launched several new products to market.
We had a fun chat with Abdel Sghiouar of Google about his work in the Kubernetes world, being a cloud native road warrior, and his thoughts on where the ecosystem goes from here. Abdel shares his transition from a data center role at Google to consulting and finally into developer relations, emphasizing the importance of in-person interactions and learning from community engagements. He reflects on Kubernetes' evolution, its application beyond traditional computing environments, and the shift towards more developer-friendly infrastructure management tools. We also explore the cultural and technological shifts within the tech community, stressing the perpetual relevance of foundational computing skills, the potential of emerging technologies like WASM, and the critical nature of security in development practices.
00:00 Welcome and Intro
01:45 From Data Centers to Kubernetes
04:25 The Evolution and Impact of Kubernetes
07:40 Navigating the Kubernetes Ecosystem and Community Growth
13:52 Addressing the Complexity of Kubernetes for Newcomers
15:20 Fundamentals to Cloud Transition
17:29 The Never-Ending Journey of Learning and Adaptation
20:49 The Future of Tech: Kubernetes, AI, and Beyond
24:51 The Simplicity Behind Complex Tech Solutions
26:19 Looking Ahead
Guest:Abdel Sghiouar is a Cloud Developer Advocate @Google Cloud. His focus areas are GKE/Kubernetes, Service Mesh and Serverless. Abdel started his career in datacenters and infrastructure in Morocco before moving to Google's largest EU datacenter in Belgium. Then in Sweden he joined Google Cloud Professional Services and spent 5 years working with Google Cloud customers on architecting and designing large scale distributed systems before turning to advocacy and community work. You can follow him at @boredabdel.
Niki Manoledaki and Stephanie Hingtgen from Grafana discuss their open source community roles and contributions toward environmental sustainability. Niki serves as a co-chair of the Green Reviews Working Group within the CNCF Environmental Sustainability Technical Advisory Group, focusing on promoting energy and carbon efficiency. Stephanie works on both the open source Grafana project and Grafana Cloud, emphasizing the value of contributing to open source. We discuss the importance of energy consumption metrics in technology, the use of Kubernetes for event-driven auto-scaling through KEDA, and efforts to enhance operational and environmental efficiency. Nkik and Stephanie share insights on scaling applications, the relationship between cost reduction and environmental sustainability, and introduce several projects like Karpenter and Kepler.
00:00 Introduction to Grafana's Community Engagement
01:40 Exploring Environmental Sustainability in Tech
04:30 Diving into Open Source Contributions and Projects
05:26 Scaling and Autoscaling: Insights and Challenges
12:56 Cost vs. Environmental Sustainability
19:06 Personal Journeys into Open Source Software
21:24 Closing Thoughts on Open Source and Sustainability
ResourcesHow Grafana Labs switched to Karpenter to reduce costs and complexities in Amazon EKS
GuestsNiki Manoledaki is a software engineer, environmental sustainability advocate, keynote speaker, meetup organiser, and community facilitator. She advocates for environmental sustainability in the CNCF as a Lead of the CNCF Environmental Sustainability TAG where she co-chairs the Green Reviews WG.Stephanie Hingtgen is a Senior Software Engineer II at Grafana Labs. As a member of the Grafana as a Service team, her focus has been on orchestrating thousands of Grafana instances in Kubernetes for Grafana Cloud. Her previous experience includes developing a private cloud platform to provision Kubernetes resources for engineers at Comcast.
We spoke with Jimmy Zelinskie, Co-founder of AuthZed, about his significant history in the cloud native ecosystem and open source community. We learn about his start writing BitTorrent software in college and his eventual startups including AuthZed, which develops SpiceDB. SpiceDB, inspired by Google's internal Zanzibar system, aims to democratize complex authorization solutions for various applications. The discussion also covers the evolution of Kubernetes, the role of open source in fostering innovation, and the significance of community collaboration in addressing common challenges in authorization and secure system design. Jimmy's experience showcases the benefits of open source for solving intricate problems and his commitment to making sophisticated technology accessible to a broader audience.
00:00 Introduction
00:14 The Buzz of KubeCon
00:50 Introducing Jimmy: From BitTorrent to Kubernetes Pioneer
03:41 The Journey of SpiceDB: From Concept to Adoption
06:43 Navigating the Authorization Ecosystem
11:55 The Future of Authorization: Innovations and Roadmap
14:32 Personal Insights: Open Source Journey and Product Management
19:08 KubeCon Highlights and Kubernetes API Proxy Announcement
Guest:Jimmy Zelinskie is a software engineer and product leader with the goal of empowering the world through the democratization of software through open source development. He's currently the CPO and cofounder of authzed where he's focused on bringing hyperscaler best-practices in authorization software to the industry at large.
At CoreOS, he helped pioneer the cloud-native ecosystem by starting and contributing to many of its foundational open source projects. After being acquired by Red Hat, his focus shifted to the enablement and adoption of cloud-native technologies by mature enterprise stakeholders. To this day, he still contributes to cloud-native ecosystem by building the future on top of these technologies and maintaining standards such as Open Container Initiative (OCI).
We explore the importance of good user experience (UX) in open source software with Máirín "Mo" Duffy from Red Hat. Sharing her journey from an OG Linux contributor to her studies in Human-Computer Interaction, Moe highlights how her academic and professional path has been shaped by the intent to make open source software more accessible and user-friendly. She shares the unique challenges of integrating UX practices into open source development, the relationship between software developers and UX designers, and the impact of UX on software usability and adoption. Moe discusses her work on Podman Desktop, a tool aimed at simplifying Kubernetes environments for developers, and emphasizes the significance of education and accessibility in open source tools for the next generation of developers. The conversation also touches on the potential roles and benefits of AI in enhancing UX and solving human-centric problems within technology.
00:00 Welcome to KubeCon Fishbowl: A Dive into UX in Open Source
01:06 The Journey from Linux Enthusiast to UX Pioneer
04:20 Embracing Open Source Tools for Accessible Design
05:57 The Unique Challenges of UX Design in Open Source
08:57 Podman Desktop: Bridging Developers and Kubernetes
15:33 Exploring the Impact of Cloud Native Training on New Graduates
16:29 The Power of UX in Open Source Development
17:47 Practical Steps to Start in UX Design
20:28 The Role of UX in Software Development and Adoption
26:17 Leveraging AI for UX Design and Beyond
Guest:Máirín "Mo" Duffy is a Sr. Principal Interaction Designer at Red Hat. A recipient of the O’Reilly Open Source Award, Máirín has over 15 years of expertise in UX & design working upstream in FLOSS communities. Her portfolio is wide-ranging, from OS management tools; to OS infra UIs; to the cloud-based medical image processing project, ChRIS; to the developer-oriented Podman Desktop. She has an M.S. in Human-Computer Interaction and a B.S. in Computer Science from Rensselaer Polytechnic Institute.
Stephen Augustus, Head of Open Source at Cisco, and Liz Rice, Chief Open Source Officer at Isovalent, discuss Cisco's acquisition of Isovalent, which has closed since recording, bringing together two teams with long-standing expertise in open source cloud native technologies, observability, and security. The two share their excitement about working together, emphasizing the alignment of Isovalent with Cisco's security division and the potential enhancements this acquisition brings to open source projects like Cilium and eBPF. They explore the implications for the open source community, and the continuous investment and development in these projects under Cisco's umbrella. We discuss the ways this merger could innovate security practices, enhance infrastructure observability, and leverage AI for more intelligent networking solutions.
00:00 Welcome and Introduction
00:22 Cisco's Acquisition of Isovalent
00:53 The Excitement and Potential of the Acquisition
02:14 Strategic Alignment and Future Vision
04:03 Open Source Commitment and Community Impact
06:53 The Road Ahead: Integration and Innovation
19:49 Exploring AI and Future Technologies at Cisco
26:03 Reflections and Closing Thoughts
Resources:Cilium, eBPF and Beyond | Open at Intel (podbean.com)
The Art of Open Source: A Conversation with Stephen Augustus | Open at Intel (podbean.com)
Guests:Liz Rice is Chief Open Source Officer with eBPF specialists Isovalent, creators of the Cilium cloud native networking, security and observability project. She was Chair of the CNCF’s Technical Oversight Committee in 2019-2022, and Co-Chair of KubeCon + CloudNativeCon in 2018. She is also the author of Container Security, published by O’Reilly.
She has a wealth of software development, team, and product management experience from working on network protocols and distributed systems, and in digital technology sectors such as VOD, music, and VoIP. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, competing in virtual races on Zwift, and making music under the pseudonym Insider Nine.Stephen Augustus is a Black engineering director and leader in open source communities. He is the Head of Open Source at Cisco, working within the Strategy, Incubation, & Applications (SIA) organization.
For Kubernetes, he has co-founded transformational elements of the project, including the KEP (Kubernetes Enhancements Proposal) process, the Release Engineering subproject, and Working Group Naming. Stephen has also previously served as a chair for both SIG PM and SIG Azure.
He continues his work in Kubernetes as a Steering Committee member and a Chair for SIG Release.
Across the wider LF (Linux Foundation) ecosystem, Stephen has the pleasure of serving as a member of the OpenSSF Governing Board and the OpenAPI Initiative Business Governing Board.
Previously, he was a TODO Group Steering Committee member, a CNCF (Cloud Native Computing Foundation) TAG Contributor Strategy Chair, and one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference.
He is a maintainer for the Scorecard and Dex projects, and a prolific contributor to CNCF projects, amongst the top 40 (as of writing) code/content committers, all-time.
In 2020, Stephen co-founded the Inclusive Naming Initiative, a cross-industry group dedicated to helping projects and companies make consistent, responsible choices to remove harmful language across codebases, standards, and documentation.
He has previously held positions at VMware (via Heptio), Red Hat, and CoreOS.
Stephen is based in New York City.
We talked to Roman Yegorov, Director of Solution Engineering at Granulate, now a part of Intel. Roman discusses Granulate's role in Intel's strategy to monetize software through acquisitions aimed at enhancing its software portfolio with a focus on AI/ML and performance optimization. He highlights Granulate's expertise in improving application performance across platforms and their open source profiler, gProfiler, which aids developers in optimizing code efficiency. Roman shares insights into the potential environmental benefits of optimized coding, and the future goals of expanding educational resources on code profiling. Additionally, Roman recounts his career transition from networking to software and emphasizes the importance of fun and engagement in technical training. The conversation concludes with an emphasis on Granulate's holistic solutions for VMs, Kubernetes, and big data, encouraging community participation and contributions to their projects.
00:28 The Intel Acquisition: Granulate's New Chapter
01:18 Granulate's Performance Improvement Mission
01:45 Open Source and Community Engagement at KubeCon
02:48 The Evolution of GProfiler
04:53 Future Plans and Environmental Impact
08:32 From Networking to Software
10:02 The Art of Technical Training and Keeping It Fun
14:38 Explaining Gprofiler with Legos
17:34 Granulate's Holistic Solution and Community Invitation
Dawn Foster, Director of Data Science for the CHAOSS Project, joins us to discuss the pressing issue of open source project health and sustainability. Dawn offers a look into the CHAOSS Project, aimed at improving open source project health through analytics and metrics. She emphasizes the importance of community participation, the challenges of maintaining project health, especially in the face of single organization dominance, and the issue of contributor sustainability. Dawn also touches on her academic research on the Linux kernel, exploring communication and collaboration within the project. The conversation underlines the significance of strategic contributor engagement from businesses to ensure the longevity and success of open source projects that are vital to their operations.
00:00 Introduction
00:17 Open Source and Data Science
02:25 the CHAOSS Project
03:22 Identifying and Addressing Project Health Red Flags
05:33 The Elephant Problem: Navigating Single Organization Dominance
09:32 CHAOSS Project Tools: Augur and GrimoireLab
12:56 The Importance of Data and Privacy in Open Source Communities
13:55 Insights from Research on the Linux Kernel Collaboration
21:24 The Future of Open Source: Sustainability and Viability
27:47 Closing Thoughts on Contributor Sustainability
Resources:Home - CHAOSS
Guest:Dr. Dawn Foster works as the Director of Data Science for CHAOSS where she is also a board member / maintainer. She is co-chair of CNCF TAG Contributor Strategy and an OpenUK board member. She has 20+ years of experience at companies like VMware and Intel with expertise in community, strategy, governance, metrics, and more. She has spoken at over 100 industry events and has a BS in computer science, an MBA, and a PhD. In her spare time she enjoys reading science fiction, running, and traveling.
In our conversation at KubeCon in Paris, Jonah Kowall of Aiven discusses his extensive background in observability, his role at Aiven overseeing product management, and his active involvement in open source projects such as Jaeger, OpenSearch, and OpenTelemetry. We also touch on software licensing and Redis's shift to proprietary software. We explore the challenges of maintaining project sustainability, attracting new contributors, and the importance of cross-project collaboration within the open source community. The discussion encapsulates the vibrant dynamics of open source development, the evolving landscape of observability tools, and underscores the collective endeavor to foster innovation and sustainability in this space.
00:00 Introduction
01:19 Deep Dive into Jaeger: The Observability Tool
02:21 Exploring OpenSearch and Its Ecosystem
03:27 The Impact of Licensing Changes on Open Source
06:20 The Challenge of Sustaining Open Source Projects
09:36 Fostering New Contributors and Community Engagement
12:30 Observability Trends and the Future of Open Source
19:25 Enhancing Collaboration in the Open Source Ecosystem
20:55 Final Thoughts and Advice for Aspiring Contributors
Resources:Jaeger: open source, distributed tracing platform (jaegertracing.io)
OpenTelemetry
OpenSearch
Guest:Jonah Kowall, computer scientist and open-source contributor to OpenSearch, Jaeger, OpenTelemetry. A technical leader across startups to large enterprises specialized in operations, security, and performance. Led Gartner research on monitoring. Product leadership at AppDynamics, Cisco (post-acquisition), Kentik, Logz.io, and is current the head of product management at Aiven building tomorrow’s open source data platform for everyone.
Loris Degioanni, CTO and founder of Sysdig, shares his open source story, from his work on Wireshark to pioneering cloud native security platforms with Sysdig and Falco. Sysdig is a universal system visibility tool with native support for containers, while Falco, now under the CNCF, provides real-time anomaly detection in containers and Kubernetes. We discuss the evolution of network security with the advent of containers and Kubernetes, highlighting the shift from packet-based to system call-based security through eBPF technology. He also underscores the importance of community collaboration in enhancing security measures and is optimistic about the role of open source in shaping the future of security.
00:00 Welcome and Introduction
01:34 The Evolution of Sysdig and Falco
02:37 Connecting the Dots: From Wireshark to Falco
04:37 eBPF Technology
09:18 Falco's Impact and Unexpected Uses
11:24 The Importance of Runtime Security Detection
13:11 Empowering Developers for Better Security
17:41 Excitement in the Open Source AI Ecosystem
21:04 Closing Thoughts and Future of Security
Guest:Loris Degioanni (he/him) is the Chief Technology Officer and founder of Sysdig. He is also the creator of the popular open source troubleshooting tool, sysdig, and the open source container security tool Falco. Prior to founding Sysdig, Loris co-created Wireshark, the open source network analyzer, which today has 20+ million users. Loris holds a PhD in computer engineering from Politecnico di Torino and lives in Davis, California.
Cassandra Chin, a college student and instructor at CNCF Kids Day, shares her experience teaching children about programming and hardware using Raspberry Pis. The workshop, themed around 'Phippy', a giraffe mascot, aims to introduce over a hundred kids to basic programming concepts and practical hardware applications. Cassandra explains the structure of her workshop, which involved a game designed to teach children coding and hardware integration in an engaging way. She also discusses her plans for future workshops, her educational background in computer science, and her views on open source software and the importance of introducing technology to children at an early age.
00:00 Introductions
00:18 Inspiring the Next Generation with Open Source
00:46 Diving into the CNCF Kids Day Experience
01:03 Raspberry Pi Workshops
06:45 Looking Ahead: AI and ML for Kids
11:05 Future Aspirations and Open Source Perspectives
14:17 Exploring New Interests and Advocacy
Guest:Cassandra Chin is a keynote speaker, book author, children's workshop instructor, and in her spare time, a college student getting a computer science degree. She has been teaching technology kids workshops at international conferences since she was 13 years old and is passionate about helping allow women, minorities, and underprivileged students to learn about technology.
Marlow Weston discusses her role at Intel, focusing on Kubernetes resource management and optimization, and her role as the environmental sustainability technical advisory group chair within the Cloud Native Computing Foundation (CNCF). Marlow highlights the importance of considering power usage in data centers and the shift toward green energy sources. We cover her journey into open source, the power of collaboration within the CNCF community, and the collective effort to optimize computing from both a performance and environmental perspective.
00:00 Introduction to Marlo's Role in the Cloud Native Community
00:16 Marlo's Work at Intel and Involvement with CNCF
03:49 Open Source and Community Engagement
07:31 The Importance of Environmental Sustainability in Computing
08:23 Aligning Missions: Intel, CNCF, and the Broader Impact
16:18 Advice for Aspiring Open Source Contributors
Resources: Keynote: Environmental Sustainability in the Cloud Is Not a Mythical Creature - Frederick Kautz, TestifySec; Rimma Iontel, Red Hat; Tammy McClellan, Microsoft; Marlow Weston, Intel; Niki Manoledaki, Grafana Labs
CNCF Environmental Sustainability TAG Updates and Information - Marlow Weston, Intel & Niki Manoledaki, Grafana Labs
Guest:Marlow Weston is a Cloud Software Architect working on resource management for Kubernetes at Intel. She also is a chair for the CNCF Environmental Sustainability TAG. Marlow has expertise in resource management, the AI/ML Kubernetes cloud compute ecosystem, embedded systems, high performance compute system tools, kernel drivers, tracing libraries, and security. Marlow's interests lie in optimizing the cloud native ecosystem for both performance and sustainability.
Amber Graner shares her experiences in the open source community, beginning with her early days in open source, her experiences with Linux New Media, and her eventual role at Canonical. She emphasizes the importance of community, documentation, and the non-code contributions that are essential for project success.
00:00 Introductions
00:44 The Evolution of Women in Open Source
05:14 Beyond Coding in Open Source
12:49 The Ongoing Journey Towards Inclusivity
16:15 Fostering a New Generation of Open Source Enthusiasts
21:02 The Power of Community and Mentorship in Open Source
26:30 Navigating Challenges and Leadership in Open Source
30:26 The Critical Role of Transparency and Trust
36:24 Contributing Beyond Code: Expanding the Definition of Technical
Guest:Amber Graner’s personal open source journey started in 2009 when she started blogging about Ubuntu. Since then she’s written for Ubuntu User Magazine, co-authored The Official Ubuntu Book (6th & 7th edit.) and served as a technical reviewer for Jono Bacon’s Art of Community. She was the first Community Manager for Linaro (Linux on ARM) and went on to help architect and manage the Open Compute Project (OCP) Foundation Community where she later became the Operations Director from there she went to Corelight to become the Director of Community for the Zeek Project and later was the VP of Community and Marketing at Arrikto Inc. Currently, Amber is the Open Source Evangelist and Community manager at HPE, for the Ezmeral software products.
Amber actively mentors new leaders in open source on how to build their community or project of interest and encourages everyone around her to participate, support, and learn about Kubeflow and Open Source software and hardware. With a smile and a sense of humor, Amber reminds people that there is a place for everyone in an open source community – regardless of technical skill level (or lack thereof). She is constantly looking for people, places, and events within open source communities that help inspire others to communicate, collaborate and contribute to those communities.
We spoke with Vigith Maurice, a principal engineer at Intuit and the co-creator of Numaproj, during the booth crawl at KubeCon. Vigith introduces Numaproj, a streaming platform designed for real-time analytics, machine learning inference, and ease of use across various developer disciplines. Recently released as version 1.0, Numaproj aims to make streaming accessible to all, requiring no new learning for those familiar with Kubernetes. With a few external contributors and usage within Intuit, the project seeks to expand its adoption and get community feedback.
00:00 Introduction
00:26 Overview of Numaproj
00:52 The Challenges and Solutions in Streaming
02:45 Community Contributions and Future Needs
03:38 Real-world Applications
06:27 Unexpected Uses
07:40 Closing Remarks and Future Expectations
Guest:Vigith Maurice is a co-creator of Numaproj, and Principal Software Engineer for the Intuit Observability and Analytics team in Mountain View, California. One of Vigith's current day-to-day focus areas is on the various challenges in building scalable data and AIOps solutions for both batch and high throughput systems. He is pivotal in building the streaming platform to ease data engineering. Previously, he has been a key driver for Intuit's journey to Big Data-first. He also led various engineering initiatives at Yahoo!
We chatted with Ilan Rabinovich, a co-founder of the Southern California Linux Expo (SCaLE), about the significance of Kubernetes as an open source success story and the rise of containers and adoption of Kubernetes. Rabinovich provides insights into the Scale Conference, explaining its unique energy, blend of commercial and non-commercial content, and its welcoming atmosphere for newcomers and experts in open source. The decision process for adding new tracks, based on popular trends in the tech world and attendees' feedback, is also explained. The discussion concludes with Rabinovich recounting personal anecdotes on impactful moments of running the SCaLE Conference and details on its upcoming event in Pasadena, California, from March 14th through the 17th.
00:00 Introduction and KubeCon Experience
00:32 Kubernetes: The Open Source Success Story
01:48 Introducing Ilan Rabinovich and the SCaLE Conference
02:29 The Unique Personality of SCaLE
04:21 The Evolution of SCaLE and Its Impact
04:50 Deciding on New Tracks
07:46 The Impact of Scale on the Community
Resources:
Guest:
Ilan Rabinovich is a co-founder of the Southern California Linux Expo (SCaLE) and a long-time Linux and open source advocate. He previously led product and technical marketing at Datadog and now advises and consults with early-stage companies on their product and open source strategies.
Ryan Wallner and Brad Maltz of Dell joined us to share their work furthering best practices in DevOps and Platform Engineering and advocating for open source development within Dell. We discuss the importance of adapting to technical and cultural changes within organizations, the evolving notion of what it means to be "full-stack," and the rise of Kubernetes and the evolving cloud-native landscape.
00:00 Introduction and Guest Backgrounds
00:32 The Role of DevRel in Open Source
01:40 Balancing Community and Product Management
02:00 The Importance of Advocacy and Education
08:35 The Developer Experience and the Role of Platform Engineering
11:31 The Challenges and Skills Needed in Platform Engineering
20:18 The Ubiquity of Kubernetes and the Complexity of the Cloud Native Landscape
23:33 Closing Thoughts and Reflections
Guests:Ryan Wallner is a Lead Developer Advocate at Dell Technologies and host of the Kubernetes Bytes podcast. Ryan is a cloud native and Kubernetes enthusiast, husband, and dad of fearless daughter. Ryan enjoys adventure moto riding, hiking, mountain biking.Brad Maltz is the Sr. Director of DevOps and Developer Relations Ecosystems at Dell Technologies, focusing on delivering DevOps technologies and a developer-oriented user experience with the Dell portfolio. He leads a team that is connecting Dell to the community to enable our customers on their journey to becoming mature DevOps organizations. Brad has been in the industry for over 20 years driving innovation and solutions across the strategic technology landscape.
With experience across multiple verticals such as healthcare, finance, biotech, education, government and manufacturing, Brad has been able to help customers with a multitude of problems up and down the technology stack.
Kedasha Kerr, a GitHub Developer Advocate, shares her non-traditional path into the world of coding, inspired by a FreeCodeCamp post on Instagram. Kadesha shares her insights on the importance of empathy in the tech sector as well as tips for beginners starting with GitHub. She emphasizes the potential of tools such as GitHub Actions in maximizing efficiency and encourages more women to get into coding. The conversation touches on the role of a developer advocate at GitHub and provides tips on optimizing one's GitHub profile as a working resume. Finally, Kadesha speaks about her excitement about engaging beginners in open source development.
00:00 Introduction and Personal Backgrounds
00:35 Journey into Coding and Developer Advocacy
02:01 The Importance of Coding and Non-Technical Backgrounds
02:53 Empathy and Impact in Tech
04:40 Advice for Aspiring Developers
07:49 Exploring GitHub Features and Tools
17:43 The Role of GitHub in Developer Identity
21:42 Excitement for Open Source and Final Thoughts
Resources:There’s an Action for that! Exploring the Possibilities of GitHub Actions
Guest:Kedasha Kerr is a Developer Advocate at GitHub where she enjoys sharing the lessons she’s learned from her time as an engineer and from her day job talking with other engineers at GitHub and in the wider developer community.
Prior to her transition to the world of tech, she worked as a social worker in various government agencies. She finds joy in helping others learn about the tech industry and loves sharing her experience as a software developer.
When she’s not building software, you can find her in the kitchen cooking up her favorite Jamaican dishes. You can find her on Instagram & Tiktok at @itsthatladydev
We spoke with Lisa-Marie Namphy, a CNCF ambassador, who runs a large San Francisco Bay Area user group focusing on open source technologies like Kubernetes. Lisa shares her experience running meetups, her focus on delivering valuable content, and her perspective on inclusivity in the tech community. The conversation also explores how she balances corporate interests with community values and talks about the importance of consistency in meetups. Lisa is excited about the role of AI in open source and talks about the challenges related to data and security. Lastly, she gives her advice on measuring success in developer relations.
00:00 Introduction and Acknowledgements
00:00 The Busy Life at KubeCon
01:11 Introducing Lisa Marie Namphy
01:39 The Evolution of OpenStack Meetup
04:27 The Challenges and Opportunities of Tech Meetups
05:03 The Many Hats of Lisa-Marie Namphy
05:31 The Importance of Community in Open Source
07:08 The Role of Meetups in Community Building
13:56 The Balance Between Commercial Interests and Community Needs
25:07 The Importance of Measuring Success in DevRel
Guest:Lisa-Marie Namphy is a developer advocate and community architect, and a CNCF Ambassador with 20+ years of experience primarily at Cloud Native, Analytics, and Enterprise Software companies and start-ups. Lisa organizes and runs the SF Bay Cloud Native Containers User Group (one of the world’s largest CNCF user groups), personally hosting meetups for the past 10 years. In her “day job” Lisa runs the Developer Relations program at Cockroach Labs. For 10 years prior Lisa led marketing, open source, and developer advocacy teams across Portworx, HPE and HP Software. Lisa is an advocate and frequent speaker for Diversity & Inclusion initiatives and open source technology, a writer, an avid sports fan, and loves wine and dogs.
Rosemary Wang of HashiCorp, author of Infrastructure as Code, Patterns and Practices, talks about her experience in the open source world, and her passion for infrastructure as code. She discusses automation and common pitfalls, as well as the need to explore 'break glass scenarios' in case automation goes wrong.
00:00 Introduction and Welcome
00:00 Open Source Conferences
00:52 Automation and Infrastructure as Code
01:19 Exploring the Concept of 'Break Glass' Scenarios
03:48 Common Pitfalls in Automation
06:31 The Importance of Auditing and Inspecting Automation
08:02 Advice for Early Career Engineers
18:16 Introduction to the Book 'Infrastructure as Code Patterns and Practices'
Guest:As the author of “Infrastructure as Code, Patterns and Practices”, Rosemary Wang works to bridge the technical and cultural barriers between infrastructure, security, and application development. She has a fascination for solving intractable problems as a contributor, public speaker, writer, and advocate of open source infrastructure tools. When she is not drawing on whiteboards, Rosemary debugs stacks of various infrastructure systems on her laptop while watering her houseplants.
Kapil Thangavelu, CTO and co-founder of Stacklet.io and the leading force behind an open source project called Cloud Custodian, talks about his journey in open source, beginning with his transition from Windows to dabbling in Linux, marking his shift toward open source development. He talks about the creation and development of Cloud Custodian while at Capital One, highlighting how the cloud management tool has grown to adopt multiple cloud providers like Microsoft Azure, Google Cloud Platform (GCP), Oracle, and Tencent Cloud. He gives credit to the tool's vast community of over 400 contributors, and thousands of users, and attributes its success to welcoming contributions, not only in the form of code but also in essential non-code contributions like documentation. He ends the conversation by addressing the future of open source, expressing concern over changes in licenses and tailoring open source projects to fit into a more commercial, rather than a community-based landscape.
00:00 Introduction
02:05 The Genesis of Cloud Custodian
05:48 Expanding Cloud Custodian to Multiple Platforms
06:21 The Versatility and Use Cases of Cloud Custodian
14:11 The Challenges and Future of Open Source
17:28 Closing Remarks and Reflections
Resources:Cloud Custodian - State of the Mop
Guest:Kapil Thangavelu is a Co-Founder and CTO at Stacklet, building products to help companies be well managed in the cloud. He started his career in open source working on Zope and Plone (CMS) communities as a consultant. Over the last decade he’s spent time building open source projects and accelerating cloud innovation at Canonical, Capital One, and Amazon.
Barton George of Dell joins us to discuss his involvement with 'Project Sputnik', an initiative created about 11 years ago aimed at making Dell hardware more appealing to developers. The project involved making pre-installed Linux laptops available to consumers.
Our conversation touched on the community's loyalty, support, and critiques, which have significantly influenced Dell's approach. Notably, Barton highlighted the crucial turning point in Dell's market strategy of veering towards high-end hardware while preserving the open source platform, enabling synergy between corporate dynamics and grassroots community efforts.
00:00 Introduction and Event Impressions
00:58 Barton George's Journey in Open Source
02:17 The Birth of Project Sputnik
07:33 The Role of Community
11:23 The Future of Linux Laptops
20:53 Conclusion and Final Thoughts
Guest:Barton George has been involved with Linux and open source for over 15 years. For the last 10+ years he has been at Dell Technologies where, beyond Linux and open source, he has focused on cloud native computing and devops. Currently Barton is a member of Dell’s developer relations team. In addition to his day job, Barton is the founder and lead of Project Sputnik, a line of Ubuntu-powered developer laptops and workstations. Born and raised in Honolulu, Hawaii, Barton is a single father of three teenagers. He and his children happily reside just outside Austin, Texas.
Whitney Lee and Victor Farcic discuss their unique approach to educating others about the Cloud Native Computing Foundation's (CNCF) landscape through their interactive presentations and YouTube project 'You Choose.' The pair explain how they incorporate live audience voting to determine the 'chosen' technologies implemented in their ongoing demos. Their fun approach helps newcomers in the field make informed decisions on the tools to use, and to understand how these various tools can integrate with each other. They talk about their previous talks and excitement for possible future events where they'll continue their interactive sessions.
00:00 Introduction and Meeting the Guests
00:33 Discussing the Concept of Rejekts Conference
01:45 The Popularity and Impact of Rejekts<
02:46 The Experience of Attending KubeCon
03:59 Getting to Know the Guests Outside of KubeCon
06:38 The Idea Behind a 'Choose Your Own Adventure'
09:36 The Origin and Format of the 'You Choose' Streaming Show
13:59 The Excitement of Live Voting
15:50 The Thrill of Live Demos
17:32 The Future: Security Talk
20:13 The Overwhelming Cloud Native Landscape
21:29 The Upcoming YouTube Series
23:12 The Aftermath of KubeCon
Resources:Cloud Native Rejekts
You Choose series
Guests:Whitney Lee is a lovable goofball who enjoys understanding and using tools in the cloud native landscape. Creative and driven, Whitney recently pivoted from an art-related career to one in tech. She is active in the open source community, especially around CNCF projects focused on developer productivity. You can catch her lightboard streaming show ⚡️ Enlightning on Tanzu.TV. And not only does she rock at tech - she literally has toured playing in the band Mutual Benefit on keyboards and vocals.
Viktor Farcic is lead rapscallion at Upbound, a member of the Google Developer Experts, CDF Ambassadors, and GitHub Stars groups, and a published author.
He is a host of the YouTube channel DevOps Toolkit and a co-host of DevOps Paradox.
Lin Sun, Director of Open Source at Solo.io, is an influential figure in the cloud-native world. We spoke at All Things Open and she shared insights into her experiences and contributions in the open source community. Discussing her prominent role in the Istio project, she shares how Istio fits into the landscape of cloud-native service mesh, offering connectivity, security, and observability. She also highlights the launch of Istio Ambient Service Mesh, which reduces the complexity of Sidecar. Venturing into the world of AI, Lin envisions a future where AI assists in coding and improves software security while predicting a transition to a more conversational interaction with technology. She emphasizes the importance of human supervision in AI's development and its usefulness in making developers more efficient.
00:00 Introduction and Guest Welcome
00:29 Discussing Open Source Contributions and Community
01:53 Deep Dive into Istio and Service Mesh
02:49 Roles and Responsibilities in the Istio Community
04:24 Journey into Open Source Contributions
06:52 Advice for New Open Source Contributors
09:36 Exciting Updates in Istio
14:14 Exploring the Potential of AI in Open Source
19:33 Closing Remarks and Future Expectations
Resources:Istio Ambient Service Mesh Made Easy
Guest:Lin Sun is the Director of Open Source at Solo.io and an ex-CNCF ambassador. She has worked on Istio service mesh since 2017 and serves on the Istio Technical Oversight Committee. Previously, she was a Senior Technical Staff Member and Master Inventor at IBM for 15+ years. She is the author of the book “Istio Ambient Explained” and has more than 200 patents to her name.
Phil Estes, a principal engineer at AWS and a key contributor to the containerd project, discusses the evolution and roadmap of containerd, its relationship to Docker, and its journey to being a fully open source project under the Cloud Native Computing Foundation (CNCF).
00:00 Introduction and Guest Background
00:41 The Evolution of Container Runtimes
02:48 The Impact of Docker and Kubernetes
06:07 The Birth and Growth of containerd
09:13 The Role of the CNCF in Open Source Projects
11:09 Challenges and Opportunities in Open Source Contribution
18:49 The Importance of Mentorship in Open Source
23:47 Conclusion and Final Thoughts
Guest:Phil Estes is a Principal Engineer for Amazon Web Services (AWS), focused on core container technologies that power AWS container offerings like Fargate, EKS, and ECS. Phil is an active contributor and maintainer for the CNCF containerd runtime project, and participates in the Open Container Initiative (OCI) as the member of the Technical Oversight Board (TOB). He is also a current member of the 2023 CNCF Ambassador class and enjoys speaking on container technology topics and events worldwide.
Fen Aldrich, a Developer Advocate with Equinix, talks about their open source partner program and giving back to the open source community. Fen highlights collaborative relationships they've established with key projects, serving as a testing ground and leveraging their surplus of hardware and network resources. We discussed that appreciating the human aspect of tech is crucial, as all technical systems ultimately depend on human innovation and interaction. We also nerd out a bit about the basics of networking and the technology underneath the magic we all take for granted.
00:00 Introduction
02:57 Deep Dive into Networking Basics
09:33 Exploring the Importance of Corporate Open Source Contributions
19:54 Understanding the Interconnectedness in Open Source
Guest:Fen Aldrich is a Developer Advocate at Equinix Metal and an organizer for DevOpsDays events in the northeast US. Passionate about Resilience Engineering and Mental Health in the tech industry, they believe that every technology problem is ultimately, when you get right down to it, a people challenge. Find their work at speaking.crayzeigh.com, and connect on twitter @crayzeigh or mastodon @crayzeigh@hachyderm.io
Emily Fox joins us to discuss her role as Security Lead in Emerging Technologies at Red Hat and her involvement in the open source community as Chair of the Cloud Native Computing Foundation's Technical Oversight Committee. She discusses her team's research focusing on refining Sigstore and working on remote attestation and her career journey from working as a Creative Director in an entertainment company to becoming a Developer Security Lead for the National Security Agency. The conversation further touches on the need for better diversity, accessibility, and the imperative of a supportive community within the open source ecosystem. Lastly, she shares her perspectives on developer experience, its challenges, and the need for empathy and kindness as we navigate post-pandemic life.
00:00 Introduction and Guest Background
00:24 Role and Responsibilities at Red Hat
01:46 Involvement in Open Source and Cloud Native Computing Foundation
03:07 Journey from Creative Director to Tech Ecosystem
06:09 Challenges in Open Source Project Security
08:03 Improving Security Practices in Software Development
09:22 Expanding Security Expertise in Developers
11:23 Security in AI and Machine Learning
15:24 Importance of Diversity and Inclusion in Tech
18:40 Improving Developer Experience in Open Source
21:00 Closing Thoughts and Parting Words
Guest:Emily Fox is a DevOps enthusiast, security unicorn, and advocate for Women in Technology. She promotes the cross-pollination of development and security practices. She has worked in security for over 13 years to drive a cultural change where security is unobstructive, natural, and accessible to everyone. Her technical interests include containerization, least privilege, automation, and promoting women in technology. She holds a BS in Information Systems and an MS in cybersecurity. Serving as chair on the Cloud Native Computing Foundation’s (CNCF) Technical Oversight Committee (TOC) and co-chair for KubeCon+CloudNativeCon China 2021, Europe 2022, North America 2022, Europe 2023, and CloudNativeSecurityCon 2023, she is involved in a variety of open source communities and activities.
Ricardo Sueiras, an Open Source advocate at AWS, sheds light on his 20-year journey with OSS. He speaks about some challenges he faced in integrating open source software into a conservative company and developing an understanding and advocacy team for open source technology there. Sueiras talks about his interest in teaching and sharing about open source, his experience with DJing and Apache Airflow, a workflow orchestrator. Referencing AWS project Cedar, an open source domain-specific language for authorization, Sueiras explains its use, function, and process of development. He also discusses the versatility enabled by open source, allowing users to tweak things as needed.
00:00 Introduction and Meeting
00:32 Journey into Open Source
02:21 Overcoming Resistance to Open Source
02:50 Educating Legal and Procurement Teams about Open Source
03:16 Building an Advocacy Team for Open Source
05:43 The Story of DJ Tasty Taste
10:16 Exploring Cedar: An Open Source Project
16:33 Apache Airflow: A Workflow Orchestrator
20:32 Conclusion and Future Plans
Resources:AWS open source newsletter
Airflow container orchestration demo (GitHub)
Guest:Ricardo Sueiras
Over 30 years spent working in the technology industry, and over 20 years working with open source. I help customers solve business problems with open source technologies and cloud. Currently I am a Developer Advocate at AWS focusing on open source.
In this KubeCon interview, Keith Mattix, engineering lead at Microsoft, talks about his experience and involvement in the open source community and the Istio project. He discusses his work in upstream service mesh and related technologies in the Kubernetes networking space. The conversation delves deeply into the evolution of open source offerings, highlighting the development and application of the Gateway API and the GAMMA Initiative. Maddox shares his vision for the future of these projects and talks about the value that developments in the open source ecosystem bring to end users.
00:00 Introduction and Guest Background
01:26 Role and Involvement in Open Source
01:55 Understanding Service Mesh
05:18 Istio's Journey in CNCF
07:19 Benefits of Open Source Collaboration
09:58 Gateway API Version 1.0 and Its Importance
13:55 Collaboration with the Gateway API Community
14:23 Future Goals for Gateway API
14:49 The Need for Standardization in Mesh Implementations
16:07 The Importance of User Adoption
16:43 Excitement for Open Source
18:09 The Impact of Infrastructure Improvements
20:10 The Importance of Kubernetes
21:51 Closing Remarks and Future Aspirations
Guest: Keith Mattix is a Senior Engineer on the Open Service Mesh team at Microsoft Azure. As a maintainer of the Service Mesh Interface CNCF project, Keith is a founding lead of the GAMMA initiative under Kubernetes SIG Network. Keith has written a lot of code that’s led to some interesting side quests, and he’s passionate about sharing those lessons and experiences with others. His love of distributed systems is eventually consistent.
In this interview, Fiona Whittington, a representative from Major League Hacking (MLH), discusses the organization's mission to empower the next generation of developers. With a community of over 150,000 developers each year, MLH is influencing the future of technology by helping their members gain hands-on experience with open source development. Fiona shares that while interest in open source is at an all-time high, many students face the barrier of getting started. The conversation concludes with Fiona’s advice for community leaders to show value and encourage contributions from people at any skill level.
00:00 Introduction and Guest Presentation
00:28 Understanding Major League Hacking (MLH)
02:00 Barriers to Open Source Contribution
03:41 Addressing Imposter Syndrome in Tech
05:08 The Importance of Non-Code Contributions
07:57 The Evolution of Open Source
11:49 The Future of Open Source
12:16 Advice for Newcomers to Open Source
13:42 Personal Journey into Open Source
17:37 The Gap Between Classroom and Industry
18:08 Hacktoberfest
19:18 Conclusion
Guest:Fiona Whittington is the Director of Strategic Initiatives at Major League Hacking (MLH), where she supports 150,000 aspiring technologists each year. In college, she founded the award-winning nonprofit TechTogether (acquired 2022) credited in part for increasing the representation of women in collegiate hackathons globally by 18%. Her work for TechTogether has been featured in the New York Times, Washington Post, and Boston Globe. Fiona previously worked in marketing at Red Hat and Armored Things (now Lambent).
Amid the bustling atmosphere of KubeCon, podcast hosts Adam and Jarod share insights from their experiences podcasting for a technical audience. They also share their interests, among them software, business, and the lives of individuals involved in open source projects.
00:00 Introduction and KubeCon Experience
00:22 Podcasting Journey and Evolution
00:53 The Birth and Growth of a Podcast Network
05:57 The Art of Podcasting and Engaging with Guests
08:23 Excitement in the Open Source World
20:43 The Impact and Future of Podcasting
Resources:Podcasts for developers |> Changelog
Guests:Jerod Santo co-hosts The Changelog, crashes JS Party, and takes out the trash (his old code) once in a while.
Adam Stacoviak is the Founder and Editor-in-Chief of Changelog.
Christine Abernathy, a long-time open source community leader, discusses her involvement with the Open Source Security Foundation (OpenSSF) and her interest in the intersection of security and AI. Abernathy notes the potential dangers and exploits that AI and machine learning can face and suggests strategies to mitigate risks.
00:00 Introduction and Guest Background
00:18 Discussion of the Intersection of Security and AI/ML
00:55 Exploring the Role of the Open Source Security Foundation
01:50 The Process of Creating a Talk on AI and Security
03:17 Security Concerns Specific to AI and Machine Learning
08:58 Methods for Mitigating Security Risks in AI
16:13 The Role of Government Regulation in Data Privacy
19:37 The Importance of Education in Data Security
20:34 The Value of Participation in Foundations like OpenSSF
Resources:Fortifying the Future: Tackling Security Challenges in AI/ML Applications | PPT (slideshare.net)
Guest:Christine Abernathy is an open source community leader who has been instrumental in growing open source presence for companies like F5 and Facebook. Prior roles included Developer Advocate Parse, Facebook Platform and Partner Engineer, Mobile. Before Facebook, Christine headed up engineering at Mshift, a mobile banking software provider, delivering iOS/Android apps and mobile browser-based products. Prior experiences include co-founding Clickmarks, a mobile and enterprise middleware provider.
In this episode, host Katherine Druckman chats with Nikhita Raghunath, a Staff Software Engineer at VMWare leading the Kubernetes engineering team. Nikhita shares her journey into open source contribution, her experiences with Kubernetes, and the importance of diversifying roles in open source communities beyond coding. She also discusses the challenges many face when contributing to open source, from time constraints to language barriers, and provides practical advice on navigating these hurdles.
The conversation takes an exciting turn as Nikhita expresses her enthusiasm about the intersection of AI and cloud native technology and their potential to benefit each other. She concludes the episode with valuable advice for new contributors, emphasizing the importance of personal research and initiative when approaching open source projects. This episode is a must-listen for those interested in open source contribution, Kubernetes, and the future of AI in cloud native technology.
00:00 Introduction and Guest Background01:23 Journey into Programming03:29 Getting Involved in Open Source12:27 Challenges in Open Source Contribution16:43 Advice for New Contributors18:59 Addressing Limitations in Open Source Communities22:00 Exciting Developments in Open Source Technology24:32 Final Thoughts and Advice for New Contributors Guest:Nikhita Raghunath is a senior member of technical staff at VMware, a member of the Kubernetes Steering Committee, and is responsible for the overall governance of the Kubernetes project. She is also a Cloud Native Computing Foundation (CNCF) Ambassador and an international public speaker.
In this conversation from the All Things Open Conference, Miško Hevery, known as the creator of Angular and currently the CTO at Builder.io, explains what Builder.io does and the role of the Qwik JavaScript framework in web development. He describes how Builder.io enhances existing infrastructures with a drag-and-drop capability using Qwik and Qwik's performance-oriented features.
00:00 Introduction and Guest Background
00:15 Understanding Builder.io
02:09 Exploring Qwik
02:51 The Problem of Hydration in Web Development
03:36 How Qwik Addresses Hydration and Performance Issues
04:07 The Importance of Lazy Loading
13:04 The Role of AI in Web Development
16:11 The Qwik Community and Its Evolution
17:40 Advice for Potential Qwik Users
19:13 Preview of AllThingsOpen Talk
20:47 Conclusion and Final Thoughts
Resources:Qwik Documentation
Guest:As CTO, Miško Hevery oversees the technology division that powers the Builder.io applications and software. Before joining Builder.io, he created Open Source platforms for Google, including Angular, AngularJS and was co-creator of Karma. While at Google, he focused on improving testing culture and than transitioned to focusing on improving the web.
Miško started his career designing digital circuits and moved to databases, full-stack development and finally, front-end frameworks, giving him a unique perspective. He understands all of the layers from the web down to a transistor. In addition to Google, he worked for tech powerhouses Adobe Systems and Sun Microsystems.
He holds an MS/BS from Rochester Institute of Technology and an MBA from Santa Clara University.
In this podcast, Isovalent's Liz Rice discusses her involvement with several open source projects, such as the Cilium project and the eBPF platform. With the graduation of Cilium in the CNCF, Liz explains its networking and security capabilities and how it benefits the cloud-native ecosystem. She also dives into eBPF and discusses the implications of AI. The talk concludes with an exploration about open source communities, recommendations regarding emerging trends in the open source world, and Liz's anticipation for the future of Cilium and the impact of eBPF.
00:00 Introduction and Guest Background
01:10 Understanding Cilium and its Role in Networking
02:15 Exploring the Origins and Impact of eBPF
04:21 Insights into the eBPF Summit and Community Events
08:00 The Role of Open Source in Technology Development
12:40 The Intersection of AI and Open Source
18:21 Future Developments in Cilium and Open Source
21:02 Conclusion and Final Thoughts
Guest:Liz Rice is Chief Open Source Officer with eBPF specialists Isovalent, creators of the Cilium cloud native networking, security and observability project. She was Chair of the CNCF’s Technical Oversight Committee in 2019-2022, and Co-Chair of KubeCon + CloudNativeCon in 2018. She is also the author of Container Security, published by O’Reilly.
She has a wealth of software development, team, and product management experience from working on network protocols and distributed systems, and in digital technology sectors such as VOD, music, and VoIP. When not writing code, or talking about it, Liz loves riding bikes in places with better weather than her native London, competing in virtual races on Zwift, and making music under the pseudonym Insider Nine.
Stephen Augustus, the Head of Open Source at Cisco, shares his experiences and insights about contributing to and maintaining open source projects including Kubernetes and OpenSSF Scorecard. Stephen highlights the importance of building sustainable practices and the value of having product, program, and project management skills in open source projects. Discussions delve into the inner workings of the Kubernetes project, the role and functionality of the OpenSSF Scorecard, and the process of incorporating new contributors and projects. He further emphasizes the importance of transparency and intentionality in corporations' involvement in open source projects.
00:00 Introduction and Guest Background
00:22 Stephen's Journey into Open Source and Kubernetes
05:41 The Success Factors of Kubernetes
06:09 Maintaining the Maintainers: The Balance of Work in Open Source
06:28 The Role of Corporations in Open Source
09:03 The Overwhelming Nature of Open Source Contribution
10:10 The Impact of Kubernetes on Other Open Source Projects
10:59 The Increasing Complexity in Full Stack Development
12:29 The Importance of Open Source Project Management
20:27 OpenSSF Scorecard
Guest:Stephen Augustus is a Black engineering director and leader in open source communities.He is the Head of Open Source at Cisco, working within the Strategy, Incubation, & Applications (SIA) organization.
For Kubernetes, he has co-founded transformational elements of the project, including the KEP (Kubernetes Enhancements Proposal) process, the Release Engineering subproject, and Working Group Naming. Stephen has also previously served as a chair for both SIG PM and SIG Azure.
He continues his work in Kubernetes as a Steering Committee member and a Chair for SIG Release.
Across the wider LF (Linux Foundation) ecosystem, Stephen has the pleasure of serving as a member of the OpenSSF Governing Board and the OpenAPI Initiative Business Governing Board.
Previously, he was a TODO Group Steering Committee member, a CNCF (Cloud Native Computing Foundation) TAG Contributor Strategy Chair, and one of the Program Chairs for KubeCon / CloudNativeCon, the cloud native community’s flagship conference.
He is a maintainer for the Scorecard and Dex projects, and a prolific contributor to CNCF projects, amongst the top 40 (as of writing) code/content committers, all-time.
In 2020, Stephen co-founded the Inclusive Naming Initiative, a cross-industry group dedicated to helping projects and companies make consistent, responsible choices to remove harmful language across codebases, standards, and documentation.
He has previously held positions at VMware (via Heptio), Red Hat, and CoreOS.
Stephen is based in New York City.
Join Katherine Druckman as she dives into the whimsical world of Kubernetes with Karen Chu and Matt Butcher, the creative minds behind the "Illustrated Children's Guide to Kubernetes." Discover how a playful presentation with stuffed animals evolved into a beloved book series simplifying complex tech concepts. Listen as they introduce their latest character's adventure into the speedy realm of WebAssembly (Wasm). From the origins of Phippy the giraffe to their shared love of Drupal, this episode is a delightful journey through the intersection of technology, creativity, and community. Don't miss out on this fun-filled tech talk!
Resources:Fermyon Presents: Phippy’s Field Guide to Wasm
Phippy & Friends
Guests:Karen Chu is the Head of Community at Fermyon, where she’s building the community around the next wave of cloud computing. As a long time open source contributor in the cloud native ecosystem, she spent her previous life at Microsoft Azure focused on creating inclusive and welcoming spaces around Kubernetes, Helm, Brigade, DeisLabs, the Cloud Native Computing Foundation (CNCF), andthensome. Together with Matt Butcher, she created The Illustrated Children’s Guide to Kubernetes book series. When she’s not connecting dots in the community, you can find her pursuing photography, making ceramics, cooking, and sipping on chai in NYC.Matt Butcher is co-founder and CEO of Fermyon, the serverless WebAssembly in the cloud company. He is one of the original creators of Helm, Brigade, CNAB, OAM, Glide, and Krustlet. He has written or co-written many books, including Learning Helm and Go in Practice. He is a co-creator of the Illustrated Children’s Guide to Kubernetes series. These days, he works mostly on WebAssembly projects such as Spin, Fermyon Cloud and Bartholomew. He holds a Ph.D. in Philosophy. He lives in Colorado, where he drinks lots of coffee.
In this insightful podcast, Katherine Druckman chats with marketing expert Swarna Podilla about the delicate dance of balancing open source community and enterprise interests. Swarna shares her rich experience in various marketing roles, emphasizing the importance of clear communication, understanding organizational goals, and avoiding common pitfalls like the "bait and switch" policy. This conversation offers valuable insights for anyone at the crossroads of open-source projects and enterprise marketing.
Guest:Swarna Podila (she/her) is a seasoned product marketer and marketing leader. She has been a successful technology product marketer for open source and enterprise products at various stages of product life cycle for over two decades. Hailing from an engineering background and with a strong penchant for communities, she drives people-first and community-first marketing initiatives to benefit communities and enterprises alike.
In this engaging interview, Katherine Druckman and Jono Bacon delve into the world of open source community building. They discuss the importance of bridging gaps, valuing non-code contributions, and pushing the boundaries of collective potential. Jono shares success stories from Blender, opensource.com, and the CNCF, while also highlighting the need for better collaboration and breaking biases within the open source community. With a touch of humor and a glimpse into pop culture, this conversation leaves you inspired and excited about the future of open source.
Resources:The Importance of Community, Jono Bacon, Community Leadership Core
Guest:Jono Bacon is a leading community and collaboration speaker, author, and podcaster. He is the founder of Jono Bacon Consulting which provides community strategy/execution, workflow, and other services. He previously served as director of community at GitHub, Canonical, XPRIZE, and OpenAdvantage. His clients include Huawei, GitLab, Microsoft, Intel, Google, Sony Mobile, Deutsche Bank, Santander, HackerOne, Mattermost, SAP, FINOS Foundation, The Executive Center, data.world, Creative Commons, and others. He is the author of ‘People Powered: How communities can supercharge your business, brand, and teams’ and The Art of Community, a columnist for Forbes and opensource.com, founder of the Community Leadership Summit, founder of Conversations With Bacon, and co-founder of Bad Voltage. He is an advisor to AlienVault, Moltin, data.world, Mycroft, Open Networking Foundation, and Open Cloud Consortium.
Katherine Druckman and Ezequiel Lanza, Intel Open Source Evangelists, chat with Melinda Thielbar, Vice President, Data Science at Fidelity Investments. This lively discussion covers pressing issues in fairness evaluation to ensure that AI models work equally well for everyone.
Resources:The Search For Transparency And Accountability In The Age Of AI-RAI & XAI As Essential Tools, Ezequiel Lanza, Intel
Jurity: State of the Art Open Source Software for AI Fairnessevuation, Melinda Thielbar, Fidelity Investments
Jurity: Fairness & Evaluation Library
Guests:Melinda Thielbar is a researcher and statistical software developer with over twenty years of industry experience. Her career ranges from statistics education to developing algorithms for commercial software to Hollywood script consulting. She co-founded Research Triangle Analysts, a 501(c)(3) not-for-profit focused on education and training for people working in analytics and data science in the Raleigh-Durham area. She works as a Practice Lead for Data Science in Fidelity Investments’ Workplace Investing business.Passionate about helping people discover the exciting world of artificial intelligence, Ezequiel Lanza is a frequent AI conference presenter and the creator of use cases, tutorials, and guides that help developers adopt open source AI tools.
In this episode of the Open at Intel podcast, host Katherine Druckman sits down with Nithya Ruff, the head of Amazon's Open Source Program Office. They discuss the importance of upstream contributions, improving collective security posture, and the fast-paced world of AI. Nithya shares insights on how Amazon embraces open source across the company, making it easy for developers to work with open source and ensuring the platform is open source-friendly for customers. They also explore the concept of ownership in open source and the responsibilities that come with it. Nithya emphasizes the need for companies to be good citizens of the open source community and highlights the role of organizations like the OpenSSF in coordinating efforts and creating standards. They discuss the challenges of prioritizing resources for upstream work and share practical advice on how to approach it. The conversation also touches on the importance of security in open source, especially in the context of AI, and the need for collaboration and standardization in this rapidly evolving field. Throughout the episode, Nithya and Katherine express their enthusiasm for open source and their optimism in its ability to solve complex problems and drive innovation.
Guest: Nithya A. Ruff is the Head of Amazon’s Open Source Program Office. Open Source has proven to be one of the world’s most prolific enablers of innovation and collaboration and Amazon’s customers increasingly value open source innovation and the and cloud’s role in helping them adopt and run important open source services. She drives open source culture and coordination inside of Amazon and engagement with external communities. Prior to Amazon, she started and grew Comcast and Western Digital’s Open Source Program Offices. Open Source Program Offices are a critical part of a company’s digital transformation and innovation journey. Nithya has been director-at-large on the Linux Foundation Board for the last 5 years and in 2019 was elected to be Chair of the influential Linux Foundation Board. She works actively to advance the mission of the Linux Foundation around building sustainable ecosystems that are built on open collaboration. She is a passionate advocate and a speaker for opening doors to new and diverse people in technology and can often be seen speaking and writing on this topic. Nithya graduated with an M.S. in Computer Science from NDSU and an MBA from the University of Rochester, Simon Business School and is an aspiring corporate board director and governance enthusiast. You can follow her on twitter @nithyaruff and you can find her on https://www.linkedin.com/in/nithyaruff/
In this special bonus episode, Melissa Evers, Vice President in the Software and Advanced Technology Group and General Manager of the Strategy to Execution organization at Intel, shares valuable insight on open source citizenship, giving back to the community, her own open source journey, and what's on the horizon.
Guest:Melissa Evers is Vice President in the Software and Advanced Technology Group and General Manager of the Strategy to Execution organization at Intel Corporation where she is responsible for a portfolio of transformative software capabilities including Intel’s open source strategy.
Melissa holds a bachelor’s degree in engineering from the University of Texas at Austin and an MBA degree from the university’s McCombs School of Business. An active champion of diversity and inclusion, as well as a certified coach, Melissa frequently coaches leaders across the industry.
Microsoft Cloud Security Advocate, Sarah Young, joins us to talk about good security hygiene, security tooling, and how to think like a hacker.
Guest:Sarah Young has worked in security since before it was cool. She loves to connect and engage with security communities all over the globe. Security affects every single one of us and it is Sarah's firm belief that everyone can (and should) know things about security to keep themselves (both on a professional and personal level) safe from security threats.
Even as a developer or technologist, adopting a marketing mindset can help you create magic in your communities and projects.
Open source marketing and community leader, Lori Lorusso, joins us to give us some tips for improving communication, getting the word out, and capturing that special sauce that leads to success.
Guest:Lori Lorusso has a passion and enthusiasm for working with the developer community and has traveled across the globe speaking at and attending conferences and community events advocating on behalf of developers. Lori was elected 2023 Marketing Chair of the CNCF, appointed Chair of the CDF Outreach Committee, is the program chair of cdCon, and is active in the OpenSSF outreach committee. She is a co-organizer of VJUG and frequently volunteers to support other JUGs at virtual and in person events. She co-hosts the CD Pipeline on behalf of the CDF with TechstrongTV. She is committed to helping open source and other tech communities grow and adapt in our ever changing environment.
Whitney Lee, Staff Technical Advocate at VMware and CNCF Ambassador, appreciates the value of good developer experience and smooth app delivery.
Whitney joins us to talk through Internal Developer Platforms (IDPs), and how implementation best practices and clear communication make platform teams and developers happy. We also explored evaluating products in the immense cloud native landscape, GitOps, and more.
Resources
⚡️Enlightning by VMWare Tanzu
You Choose - DevOps Toolkit Channel
Cloud Native Live - CNCF
Guest:Whitney Lee is a lovable goofball who enjoys understanding and using tools in the cloud native landscape. Creative and driven, Whitney recently pivoted from an art-related career to one in tech. She is active in the open source community, especially around CNCF projects focused on developer productivity. You can catch her lightboard streaming show ⚡️ Enlightning on Tanzu.TV. And not only does she rock at tech - she literally has toured playing in the band Mutual Benefit on keyboards and vocals.
Ashley Wolf, Open Source Program Office Director at GitHub, joins us to share lessons learned at GitHub.
As the home of so much open source code, GitHub has a unique view of the open source ecosystem. Ashley shares her own take on the role of an OSPO, trends in open source software development, and the tools her team gives back to the community.
Resources:
github-ospo repo on GitHub
Stale Repos GitHub Action
Guest:Ashley Wolf is the Director of Open Source Programs at GitHub. She runs initiatives and programs to empower developers to be successful with open source. She is also passionate about helping companies participate in the open source community. Prior to joining GitHub, Ashley led the Yahoo (acquired by Verizon) open source program office. Ashley also serves on the steering committee for the TODO Group.
Intel Ethernet and open source have been making history for decades. Doug Boom and Kevin Bross join us for a history lesson and a look toward future innovation.
If you drive a car, use a phone, or travel to Mars, chances are you'll encounter foundational ethernet technology Kevin and Doug have helped foster. We take a deep and nerdy dive into the world of open source software and ethernet and learn how it impacts all our our lives.
Resources: Westport Channel: Intel® Ethernet Network Adapter E810-XXVDA4T
Logan Beach: Intel® Ethernet Network Adapter E810-CQDA2T
Guests:
Doug Boom is a Principal Engineer at Intel Ethernet. Heading into his 29th year at Intel Ethernet, Doug has done it all when it comes to Ethernet. Driver writer, product technical lead, architect, people and project management, he has lately been doing custom implementations with Intel Ethernet partners. His code is in everything from soda machines, enterprise ethernet switches, lottery kiosks, ultrasound machines, cars, planes, trains and even rovers on Mars. He has over 20 patents, and has invented technologies used in billions of dollars of solutions. He’s had code in the Linux kernel since the old 2.4 days, but for reasons he can’t explain, his favorite distro is Ubuntu. Doug is an Ethernet evangelist, you can see him talk about Ethernet basics at this YouTube link and history and some product stories at this YouTube link. Doug writes fiction, makes board games and plays video games in his spare time.
Kevin W. Bross is an Intel Principal Engineer and modular systems architect in Intel’s Network and Edge Group (NEX). Over the past 30+ years at Intel, he has held a variety of engineering and marketing roles at Intel, including defining bladed systems products, architecting Intel's first M2M/IoT gateway product, working on the development/trials of 64-antenna Massive MIMO cellular base stations, and architecting Intel’s first three timing-related network adapters. Kevin is currently working on 5G infrastructure and system design for Intel reference designs and numerous customer systems.
Guest Host:
Chris Norman
An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.
Building upon existing technology is at the heart of much technical innovation and is the essence of open source culture, and embracing our history provides invaluable perspective.
Kat Cosgrove, a lead developer advocate at Dell and Kubernetes release team member, joins us to talk DevOps culture, reinventing ourselves and our technology, and how to get involved in projects like Kubernetes.
Guest:
Kat Cosgrove
In her role as a Lead Developer Advocate at Dell, Kat focuses on the growth and nurturing of open source through authentic contribution. In particular, her specialties are approachable 101-level content and deep dives on the history of technology, with a particular focus on DevOps and cloud native. She has served on the Kubernetes release team since v1.22.
When she’s not at a conference, she spends her time playing video games, watching horror movies, or reading science fiction, but her current hyperfixation is film photography. She lives in Scotland with her cat, Espresso, who is the real brains behind the operation and actually ghostwriting all of her tweets.
Cisco's Michael Chenetz, host of the Cloud Unfiltered podcast, joins us to talk through security challenges unique to Kubernetes, and the journey to the cloud native ecosystem for everyone from beginners to veterans.
Resources:
Overview of Cloud Native Security
Guest:
Michael Chenetz is the head of technical product marketing and has lead cloud strategy in the CTO org for Cisco. Michael has consulted for many fortune 500 companies in Networking, Security, and Cloud. Michael is the host of the popular podcast, Cloud Unfiltered that discusses trends in cloud native technologies. You can find Michael speaking at most major cloud native events and online media outlets.
Guest Host:
Chris Norman
An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.
Jessica Marz, Director of Intel's Open Source Program Office, discusses the role of the OSPO in securing the software supply chain and the role she plays in encouraging good open source citizenship.
Guest:
Jessica Marz Director of Open Source Program Office
An expert at explaining legal concepts to software developers and software development concepts to lawyers, Jessica is responsible for defining and managing Intel’s open source approval policies and practices. She’s also an avid arts-and-crafter known for her creative reuse of materials.
The open source software ecosystem has always faced tough challenges related to community, governance, and scalability. More than ever before, much conversation about open source struggles is devoted to the security of the software supply chain, especially when considering the unique challenges of a distributed, often anonymous, community-based development team.
Josh Bressers, VP of Security at Anchore, fellow podcaster and Open SSF volunteer, joins us to talk about why, despite these challenges, open source isn't broken and how to address the very human aspects of open source security and communities.
Resources:
Avoiding the success trap: Toward policy for open-source software as infrastructure
I am not a supplier
All About SBOMs: The Software Bill of Materials
Open Source: The Nerd Version of Formula One
XKCD: Dependency
Guest:
Josh Bressers is the Vice President of Security at Anchore. Josh has helped build and manage product security teams for open source projects as well as several organizations. Josh is the co-lead of the OpenSSF SBOM Everywhere project and co-hosts the Open Source Security Podcast and the Hacker History Podcast. He also is the co-founder of the Global Security Database project to bring vulnerability identification into the modern age.
Jorge Castro of the Cloud Native Computing Foundation joins us to geek out on taking the desktop cloud native with immutable Linux, talk open source community sustainability, and have a lot of fun along the way.
Resources:
Universal Blue
The Cloud Native Linux Desktop Model (video)
Architecture Of The Immutable uBlue Linux (video)
The Cloud Native Landscape
Guest:
Jorge O. Castro is a community manager, specializing in Open Source.
He's basically a cat herder – a combination of engineering, developer relations, and user advocacy.
Jorge graduated with a degree in Telecommunications from Michigan State University and rode with the 11th Armored Cavalry Regiment for four years. He first entered the technology field at SAIC and then moved to system administration at the School of Engineering and Computer Science at Oakland University in Rochester Hills, Michigan.
Jorge then joined Canonical to work on Ubuntu for about 10 years before moving to Heptio to work on Kubernetes. Heptio was then acquired by VMware in December 2018. He's currently at the CNCF working on developer relations.
Guest Host:
Chris Norman
An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.
In this episode, we dive deep into the concept of attestation as it relates to building trust in our software and systems.
Marcela Melara and Vinnie Scarlata take us on a technical tour of both software and remote attestation and how these relate to ideas we've covered previously with software supply chain security and confidential computing. We talk trust and integrity, standards and projects, and share some best practices.
Guests:Dr. Marcela Melara is a research scientist in the Security and Privacy Group at Intel Labs. Her current work focuses on developing solutions for high-integrity software supply chains and building trustworthy distributed systems. She has several publications and patents filed related to her research, and leads a number of internal, academic and open-source efforts on software supply chain security. Prior to joining Intel, she received her PhD in Computer Science from Princeton University and did her undergraduate studies at Hobart and William Smith Colleges. She is a Siebel Scholar, a member of Phi Beta Kappa, and her research on CONIKS was awarded the Caspar Bowden PET Award. Outside of work, Marcela is an avid gardener, bookworm, hiker, and gamer.
Vinnie Scarlata is a Principal Engineer in the Security & Privacy Research lab in Intel Labs. He is one of the architects for Intel® Software Guard Extensions and Trust Domain Extensions, and has 20+ years of research experience in various areas of security, e.g. Trusted Computing, Trusted Execution Environments (TEE), Attestation, Recoverable Platforms, Runtime Integrity, and Key Management. He has been granted 50+ patents and co-authored several papers. Vinnie received a MS in Information Security from Georgia Tech and a BS in Computer Science from the University of Massachusetts, Amherst.
Evaluating security risk associated with open source software projects can be a complex or even daunting task, but an Open Source Security Foundation project called OpenSSF Scorecard helps put some order and automation into the process.
In this episode, we chat with one of OpenSSF Scorecard's contributors, Brian Russell of Google, and Ryan Ware, Director of Open Source Security at Intel, about the problems Scorecard addresses, and how it might help improve the experience of developers and consumers of open source software. We'll take a deep dive into the automated security checks, how to use the data, and how to include Scorecards in a workflow.
Links* SCaLE 20x presentation: How do you trust your open source software?
Guests:Brian Russell is a Product Manager on Google’s Open Source Security Team. He focuses on software supply chain security and is actively involved in the OpenSSF Scorecards project. In his spare time, Brian enjoys 3D printing and Atari video game programming.
Ryan Ware recently returned to Intel to focus on Open Source Software (OSS) security. He is currently helping drive Intel’s efforts in the Open Source Security Foundation (OpenSSF). Ryan is an industry veteran who has always worked at the intersection of open source software and security, be it implementing security features in open source software stacks, using open source software to find security vulnerabilities in software and hardware, or helping teams utilize OSS in a secure way.
In this episode, we discuss best practices for evaluating and consuming open source software with Ryan Ware, director of open source security at Intel. Ryan will share his wisdom earned over decades working with open source software security.
GuestRyan Ware recently returned to Intel to focus on Open Source Software (OSS) security. He is currently helping drive Intel’s efforts in the Open Source Security Foundation (OpenSSF). Ryan is an industry veteran who has always worked at the intersection of open source software and security, be it implementing security features in open source software stacks, using open source software to find security vulnerabilities in software and hardware, or helping teams utilize OSS in a secure way.
This episode explores an open source software vulnerability scanner called cve-bin-tool, which scans binaries and component lists in your project and reports back known vulnerabilities based on data from NIST’s National Vulnerability Database (NVD) list of Common Vulnerabilities and Exposures (CVEs).
My guest is Dr. Terry Oda, a security researcher at Intel and the lead maintainer of cve-bin-tool.
This episode continues our confidential computing conversation from our previous episode. Mona Vij, principal engineer at Intel Labs, leads Intel's efforts on the Gramine project, which is a library OS that allows for running unmodified applications and, among other things, solves the problem of running applications out-of-the-box on Intel SGX-enabled hardware. We'll dive into Gramine, a Confidential Computing Consortium Project, and discuss easing the path to running in a trusted execution environment.
Guest: Mona Vij is a Principal Engineer and Cloud and Data Center Security Research Manager at Intel Labs, where she focuses on Scalable Confidential Computing for end-to-end Cloud to Edge security. Mona received her Master’s degree in Computer Science from University of Delhi, India.
Mona leads the research engagements on Trusted execution with a number of universities. Her research has been featured in journals and conferences including USNIX OSDI, USENIX ATC and ACM ASPLOS, among others. Mona's research interests primarily include trusted computing, virtualization, device drivers and operating systems.
What is confidential computing? Learn about protecting data in use with confidential computing powered by open source software with two people working at the forefront of this technology through open collaboration within the Confidential Computing Consortium.
Dan Middleton, a principal engineer at Intel, and Dave Thaler, a software architect at Microsoft, share their work with Confidential Computing and their efforts to further this technology via the Confidential Computing Consortium. Learn about confidential computing, the problems it solves, and how you can get involved.
Guests:Dan Middleton is a Principal Engineer with over 20 years at intel. He has been privileged to develop and release products in emerging areas including SaaS, Computational Imaging, Blockchain, and Confidential Computing. As an open source leader, he has represented Intel in projects including the Confidential Computing Consortium, The Open Source Security Foundation, CNCF CoCo, and Hyperledger. Dan currently leads Confidential Computing pathfinding in IPAS/S3 (Security Software and Services). Dan is currently the Chair of the CCC’s Technical Advisory Council.
Dave Thaler is a Software Architect at Microsoft, where he works on open source and standards, including Confidential Computing. Dave has over 25 years of standards body experience and currently chairs the IETF group on Software Update for IoT, and is a member of the Confidential Computing Consortium's Technical Advisory Council which he previously chaired for 3 years. He also previously served as a member of the Internet Architecture Board (IAB) for 11 years.
Marcella Malara, a research scientist in the security and Privacy Research Group at Intel Labs, and Bruno Dominguez, a chief technology officer in the financial services industry practice and a salsa project contributor share their deep knowledge about software supply chain Security, a subject on everyone's minds today.
Guests:Dr. Marcela Melara is a research scientist in the Security and Privacy Group at Intel Labs. Her current work focuses on developing solutions for high-integrity software supply chains and building trustworthy distributed systems. She has several publications and patents filed related to her research, and leads a number of internal, academic and open-source efforts on software supply chain security. Prior to joining Intel, she received her PhD in Computer Science from Princeton University and did her undergraduate studies at Hobart and William Smith Colleges. She is a Siebel Scholar, a member of Phi Beta Kappa, and her research on CONIKS was awarded the Caspar Bowden PET Award. Outside of work, Marcela is an avid gardener, bookworm, hiker, and gamer.
Bruno Domingues is a Chief Technology Officer in Financial Services Industry practice (SMG), where he is responsible for technical direction and pathfinding across Intel’s product portfolio. He serves as the champion for Digital Transformation in the Financial Services domain.
Before joining Intel in 2007, Bruno worked with Microsoft. He was a pioneer in the FSI vertical practice back in the ’90s and developed a rich ecosystem of partners around the Microsoft platform to solve the most challenging industry’s problems.
With over 23 years of experience in applying technologies. Bruno developed a deep understanding of the financial industry mojo: Have worked with regulators to help banks ramp up on Basel II and III, architected mission-critical trading-desks operation, and inter-banking national-wide online payment system in different markets and regions in the World. In the last 15 years, Bruno has been focused on cloud adoption in the financial services industry, as it is a unique industry with unique requirements.
Bruno also has served as IEEE Computer Society chairman (R9), Academic Liaison Director with CMG, and Board Advisor for Fintechs.
Intel Open Source Evangelist Chris Norman hosts this special bonus episode, a Q&A with Intel's Dan Williams.
A chance encounter with open source software during an high-school internship put Dan Williams on a path to become Principal Engineer on the team responsible for Intel’s persistent memory (PMEM) enabling in the Linux* kernel.
Here he talks about the “janitorial” aspect of maintainers, what he’s seen in 17 years of commits, his take on the discontinuation of the Intel Optane as well as his new role as chair on the Technical Advisory Board (TAB) at the Linux Foundation.
Read the full Q&A: https://community.intel.com/t5/Blogs/Tech-Innovation/open-intel/Dan-Williams-Kernels-of-Wisdom/post/1446111
SBOM stands for Software Bill of Materials, and this humble but critically important document is getting a lot of airtime recently, especially after United States Executive Order 14028 issued strong guidance on requiring SBOMS for government software acquisitions.
Alexios Zavras of Intel's Open Ecosystem Group and Kate Stewart of the Linux Foundation are SBOM experts who are active contributors to the SPDX SBOM standard, one popular format currently in use.
In this interview, they walk us through some key background and useful information all developers should understand about SBOMs.
Guests:Alexios ZavrasChief Open Source Compliance Officer, Intel Corp.Alexios is part of the Open Source Program Office (OSPO) at Intel. He has 40 years’ experience in Free and Open Source software and is an evangelist of all things Open. A software licensing expert, he is an active participant in the Software Package Data Exchange (SPDX), OpenChain, and the TODO Group. He frequently speaks at industry and academic conferences, including the Open Source Leadership Summit, FOSDEM, and CopyleftConf. He holds a PhD in Computer Science after having studied in Greece and the USA.Kate StewartVP, Dependable Embedded Systems, The Linux Foundation.Kate Stewart works with the safety, security and license compliance communities to advance the adoption of best practices into embedded open source projects.She was one of the founders of SPDX (which is now ISO/IEC 5962:2021), and remains active in specification evolution and adoption. Since joining The Linux Foundation, she has launched the ELISA and Zephyr Projects, as well as supporting other embedded projects. With over 30 years of experience in the software industry, she has held a variety of roles and worked as a developer in Canada, Australia, and the US and for the last 20 years has managed software development teams in the US, Canada, UK, India, and China.
Christopher Robinson, also known as “CRob,” is the Director of Security Communications at Intel. In this role, Robinson handles crisis communications, training and security and incident communications. Half of the team behind the engaging security video series Chips and Salsa, he is also heavily involved in open source security communities and acts a technical advisor for the Open Source Security Foundation* (OpenSSF).
CRob shares his insights with Open Ecosystem Evangelist Katherine Druckman on the current threat landscape and finding joy in security work.
Guest:Christopher Robinson (aka CRob) is the Director of Security Communications at Intel Product Assurance and Security. CRob is a 41st level Dungeon Master and a 24th level Securityologist. He has worked at several Fortune 500 companies with experience in the Financial, Medical, Legal, and Manufacturing verticals, and spent 6 years helping lead the Red Hat Product Security team as their Program Architect.
CRob has been a featured speaker at Gartner’s Identity and Access Management Summit, RSA, BlackHat, DefCon, Derbycon, the (ISC)2 World Congress, and was named a "Top Presenter" for the 2017 and 2018 Red Hat Summits. CRob was the President of the Cleveland (ISC)2 Chapter, and is also a children's Cybersecurity Educator with the (ISC)2 Safe-and-Secure program. He holds a Certified Information Systems Security Professional (CISSP) certification, Certified Secure Software Lifecycle Professional (CSSLP) certification, and The Open Group Architecture Framework (TOGAF) certification. He is heavily involved in the Forum for Incident Response and Security Teams (FIRST) PSIRT SIG, collaborating in writing the FIRST PSIRT Services Framework, as well as the PSIRT Maturity Assessment framework. CRob is also the lead/facilitator of the Open Source Security Foundation (OpenSSF) Vulnerability Disclosures and OSS Developer Best Practices working groups as well as a Technical Advisory Committee (TAC) member.
He enjoys hats, herding cats, and moonlit walks on the beach.
Intel Open Source Evangelist, Katherine Druckman, speaks with Intel open source security experts John Whiteman and John Andersen about threat modeling. Threat modeling should be step one in any security conversation, so please join us as we jump down the rabbit hole!
Guests:John Andersen lives life with curiosity. His current focus is around leveraging threat model and architecture information to facilitate automated context aware decentralized gamification / continuous improvement of the security lifecycle / posture of open source projects.John L. Whiteman is a security researcher for Intel Corporation and a part-time adjunct cybersecurity instructor at the University of Portland in Oregon. He taught the UC Berkeley's Extension Cybersecurity Bootcamp. John was also a technical editor and proofreader for the latest (ISC)2 CCSP Official Study and Exam Guides published by Sybex/Wiley. He holds a MSCS from Georgia Institute of Technology, BSCS from Portland State University, and a BA in Asian Studies from the University of Maryland University College Global Campus in Japan. He has multiple security certifications including CISSP and CCSP. He is a U.S. Navy veteran who honorably served as a surface sonar technician and shipboard instructor. You can hear him host the OWASP PDX security podcast. He grows wasabi and brews kombucha for world peace.