Cloud Native Compass

Hazel Weakly unpacks open source sustainability through Eleanor Ostrom's commons principles, covering reciprocity, governance, VC funding pitfalls, maintainer burnout, and why web browsers should be treated as...

Pepe Amengual, a core maintainer of Atlantis, joins David and Laura to walk through the Terraform pull request automation server: how it runs plan and apply from PR comments, OpenTofu support, the path to 1.0, and the...

Otavio Santana joins Laura and David to dispel myths about modern Java on Kubernetes. They cover JVM container awareness, GraalVM native compilation for serverless cold starts, and frameworks like Quarkus and Spring.

Mark Fussell, CEO of Diagrid, explains how Dapr's building blocks (pub/sub, state, workflows, virtual actors) tame microservice complexity, and how Dapr Agents extends that same actor and durable-workflow model to...

Koray Oksay (Kubermatic, CNCF Ambassador) joins David to discuss why Kubernetes adoption still trips up teams: skipping container fundamentals, picking between managed services and self-hosted clusters, navigating...

Mikkel Mørk Hegnhøj from Fermyon joins David and Laura to unpack Spin 3.0, WASI 0.3, and the WebAssembly component model. They cover running Wasm on Kubernetes via SpinKube, polyglot components, and built-in...

Kat Cosgrove joins David and Laura to unpack how SIG Release ships Kubernetes: team structure, CI signal, bug triage, press embargoes, maintainer burnout, and why a Kubernetes 2.0 is unlikely.

Jason Hall walks through Chainguard's migration of its image-serving infrastructure from Kubernetes and Knative to Google Cloud Run, covering multi-region Terraform modules, least-privilege IAM, R2 for blob storage, and...

InfluxDB, a time series database, underwent a major rewrite to create InfluxDB 3.0, also known as IOx. The decision to rewrite the database was driven by the need for strict control over memory management and high...

JJ Asgar joins to discuss IBM watsonx.ai and why enterprises distrust today's black-box AI. The conversation covers training data provenance, The Pile, Hugging Face, hallucinations, copyright, and the human problem of...

Liz Rice explains how eBPF lets you safely run programs inside the Linux kernel, why the verifier makes it safer than kernel modules, and how projects like Cilium, Falco, and Pixie are using it for networking, security...

Marino Wijay and Matt Turner unpack Istio Ambient Mesh, walking through ztunnel, HBONE, and waypoint proxies, the trade-offs against sidecars, and how eBPF, CNI plugins, and the Gateway API fit into Istio's...

In this episode, hosts David and Laura, sit down with Laslo Fogas; a self proclaimed WebAssembly sceptic. They discuss the future of Cloud Native and improving the broken developer experience.

Natan Silnitsky shares how Wix operates 2,500+ microservices and 70 billion Kafka events per day. We cover when to choose event-driven over RPC, schema evolution with Confluent Schema Registry and protobuf, Kafka cost...

Marc Boorshtein, CTO of Tremolo Security, explains why long-lived kubeconfig certificates are an anti-pattern, how OIDC and impersonation deliver revocable cluster access, and how workflow identity via OIDC JWTs...