Cloud Native Computing Foundation KubeCon + CloudNativeCon Europe 2018 (Copenhagen), 14 Nov 2015

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Keynote: Skip the Anxiety Attack - Build Secure Apps with Kubernetes, Jason McGee

Description

Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018 (http://bit.ly/KCCNCNA18) or in Shanghai, November 14-15 (http://bit.ly/kccncchina18).

Keynote: Skip the Anxiety Attack - Build Secure Apps with Kubernetes, Jason McGee, Fellow, IBM

Software development today is more rapid, more distributed and more dynamic. As a developer, you really want to be able to focus your time on creating new solutions. But as much as you might want to ignore it, you still have to ensure the apps you build scale, stay up and stay secure. Developers still need to understand and control the software supply chain: you still need to know who built what. You need to understand if your software is vulnerable, compliant with your processes and regulations, and secure. And you need to know what is running right now, where it is running, and to be able to control when it changes. So the trick is how to spend as little time as possible on these issues so you can focus on building your app. The combination of Kubernetes and Cloud can make that happen for you. At IBM we are focused on helping you focus. The IBM Cloud Container Service, which leverages Kubernetes, provides advanced capabilities for building cloud-native apps, adding DevOps to existing apps, and ultimately relieves the pain around security, scale, and infrastructure management. 

About Jason
Jason McGee, IBM Fellow, is VP and CTO of Container and Microservice Tribe. Jason leads the technical strategy and architecture across all of IBM Cloud, with specific focus on core foundational cloud services, including containers, micro-services, continuous delivery and operational visibility services. Previously Jason has served as Chief Architect of PureApplication System from inception to a mature $100+ million product.
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21! Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.

A

Thank you, so many of us here in the audience are developers in one form or another, we're all using software to solve problems within our businesses. Software development today I think, is more rapid, more dynamic, more distributed than it's ever been.

A

You know we're constantly under pressure to deliver capability as quickly as possible, in whatever context we operate in our companies, we're trying to do that in a world that's more distributed both in our teams and how we operate, and geographically and technically, in how we build those solutions and we're trying to be able to constantly adapt to change. This is stressful right.

A

It's hard to balance these pressures that we're constantly under as a developer, we saw it I find is when you're under that kind of pressure, you're tempted, sometimes to figure out how do I prioritize my work? How do I figure out what I don't have to do right now, so that I can focus on moving forward? And it's often really tempting when you're building software to take some of the hard problems of scalability and availability and security and kind of push them to later in the cycle?

A

To focus first on building my function in my application and worry later about how I'm gonna solve these thorny issues, I, don't know if you've ever had that feeling in the pit of your stomach. When you did this and you got to the end- and you realize that this thing you build, wasn't really gonna work. The way you thought it was, and you're gonna spend every night up, trying to keep it alive and that adding security at the end is a really bad idea that might make you rewrite the whole thing.

A

That's a pretty anxious moment as a developer. So how can we do this differently? You know I, think the trick is: how do we stay focused on the core capability, we're trying to build without falling into the trap of not considering the environment that we ultimately have to run in? How do you balance these two kind of competing demands as a developer and I think?

A

The answer to that is to have a platform that supports you as a developer that tries to take those hard problems and bake them in to the environment you operate in, not so that you don't have to think about them at all, but so that you can be more successful more easily solving those problems. So, as the developer, I think that platform has to enable you to be successful in your continuous integration and delivery that you can set up a process that actually works for you to constantly make change.

A

You need flexible infrastructure so that you can decide where you need to run and take advantage of whether it's public cloud or in your data center take advantage of infrastructure easily. You need security to be built in from the beginning, and you need portability. So you can move your workload where you need to now we're here at cube con, so no surprise, I, think Huber Nettie's is the foundation layer of that platform and I think we're all familiar with the capabilities it provides.

A

Kubernetes I think really gives us that base that we need to be successful, with CI CD, with scalability, with availability and management of those problems within the development lifecycle. But it's kubernetes enough. You know, I think the first problem that we run into when we decide to use cuber Nettie's is how do I actually run kubernetes like how do I have I traded off one problem for another, and that's where I think bringing cloud into the picture is really powerful.

A

Having kubernetes as a service delivered through public cloud allows me as a developer not to have to worry about how to install and run kubernetes, and we saw today with our furnace discussion about the roadmap and the pace of kubernetes.

A

All of these technologies are moving very quickly, so do I have to be the one to manage that I think with services like the IBM cloud container, service and services and other clouds, you can get a kubernetes environment as a developer and be successful very quickly with having a high scale highly available platform for running your apps. But what about security? I think security is actually for a lot of developers. The really hard one because doing security well has a lot of dimensions to it. You need a secure runtime.

A

You need a secure networking within your infrastructure. You need to deal with isolation. You need to protect the traffic coming in to your applications. You need a secure software delivery pipeline so that you know what you're running and whether the software itself has vulnerabilities in it, and you need a secure networking layer that allows the interactions between those to be secure at IBM. We spent a lot of our time. Thinking about how do we help developers, specifically Enterprise developers, be successful, building secure systems?

A

Just to give you a few examples, you know you need visibility into the vulnerabilities of your application stacks. Both software vulnerabilities and human-induced vulnerabilities, like you have bad password rules. You have SSH open in your container, so it's easy to get in. How have you configured your software to be secure and as the developer you want to be able to have someone tell you that, so you have visibility into it. You might even want to use that information to control what you can deploy to production and I.

A

Think projects like the gracias project are going to help us have that kind of policy. You want secure infrastructure things like trusted computing and being able to ensure that the hardware you're running on is hasn't been tampered with, has secure and that you know what you're running and finally, things like sto, which I think has tremendous potential to help give developers the tools they need to control the interactions between their services to ensure secure communication between those services.

A

So there's many tools that are now available as part of the community to help us as developers build secure applications, build scalable and reliable applications at IBM we're delivering those in those capabilities in public cloud, we're delivering those capabilities on-premise as well and private cloud, so that your developers can be successful, building secure apps. Thank you very much.