
►
From YouTube: Kuma Community Call - January 20, 2021
Description
Kuma hosts official monthly community calls where users and contributors can discuss about any topic and demonstrate use-cases. Interested? You can register for the next Community Call: https://bit.ly/3A46EdD
A
Good
okay,
so
welcome
to
the
bi-weekly
community
course.
A
And
I
see
that
we
have
a
new
person
here,
hello.
B
A
We
don't
have
much
today.
I
have
just
added
this
upcoming
106
release,
which
we
were
planning
actually
for
today.
It
should
have
been
happening
at
this
very
moment,
but
we
saw
a
couple
of
last
minutes
pr's
coming,
so
we'll
probably
try
to
do
it
tomorrow,
this
time
or
maybe
sometime
early
on
friday,
we'll
see
how
things
are
going,
but.
A
So
if
I'm
not
mixing
the
names
and
the
kuma
and
the
kinkit
kapalias
charlie
you,
you
were
committing
like
two
two
pr's
today
about
the
dns
name
and
what
was
the
other
thing
about
the
proxy.
A
Okay,
okay,
so
then,
then
then
this
will
probably
because
we're
doing
the
release.
Tomorrow
I
saw
that
you
updated
the
dns,
as
as
I
was
suggesting
the
testing
there.
This
will
probably
probably
make
it.
A
We'll
yeah,
we'll
okay
I'll
make
sure
to
to
include
this
and.
A
Other
than
that,
because
I
was,
I
was
actually
going
to
the
to
the
pr's
that
were
merged
since
105,
and
I
noticed
a
lot
of
community
prs
like
community
members
prs,
which
was,
which
is
which
is
great.
Actually
I
mean
I
I
I
was.
I
don't
think
that
we
had
that
that
kind
of
the
diverse
set
of
contributors
in
any
of
our
previous
releases.
This
probably
is
the
first
one
that
you
have.
A
I
don't
know
four
or
five,
like
you
know
very,
very
different
people
from
different
companies,
contributing
which
is
which
says
good
things
about
the.
A
So
I
think
that
that
more
or
less,
of
course,
we
are
mostly
you
know,
people
from
congress
and
also
corey
is
kind
of
a
member
of
the
community.
So
charlie,
would
you
would
you
like
to
to
present
yourself?
I
mean
to
the
extent
that
that
is
comfortable
for
you.
A
D
Yeah,
so
I'm
charlie
walter,
I
work
for
a
startup
called
koyen,
we're
very
early
stage
and
we're
building
a
platform
on
top
of
nomad
from
ashiko
and
we're
in
need
of
the
mesh
for
that
and
looking
around
like
kumar
seemed
to
be
the
most
flexible
to
us
because,
like
no
not
being
tied
to
communities
really
and
so
we're
still
in
experimenting
stage,
but
it
looks
pretty
promising
at
the
moment.
D
Yeah!
That's
that's
about
it.
A
And
thanks
thanks
to
being
proactive
on
the
on
the
contributing
side,
because
I
you
know,
as
with
a
lot
of
the
open
source
projects,
people
are
kind
of
mostly
coming
with
the
demands
pointing
fingers
at
other
products
and
projects
and
saying,
but
you
can
do
this
with
this
other
with
this
other
project.
So
thanks
for
kind
of
approaching
us
directly
with
with
pr
that's,
that's
actually
rare,
but
but
it's
a
great
great
show
of
of
support
for
the
project.
Thanks.
A
Okay:
okay,
that's
that's
good!
Let
us
let
us
know
on
the
on
the
chart
or
even
here
now
in
the
next
course.
If
there
are,
if
there
are
any
any
any
gaps
for
you
for
that
option,
for
the
integration
with
your
rest
of
the
system,
we
are
pretty
much
open.
I
don't
know
if
you,
if
you
have
seen
marco,
he
has
been
sharing
marco.
A
Can
you
post
in
the
in
the
meeting
minutes
the
the
the
link
to
the
this
like
polling
about
the
features
that
that
you
wanted
to
have?
Oh.
B
B
Yes,
yes,
yes,
okay,
yeah
did
you
vote.
A
Okay,
but
yeah
so
I
mean
like
we
are,
we
are
we're
pretty
much
open
and
usually
the
feedback
that
we
get
from
from
the
community
is
great
corey.
I
hope
can
confirm
on
this
that
we
are
trying
to
to
support
to
the
best
of
our
capabilities.
B
E
The
way,
nicole,
I
have
a
question
for
you:
there
was
a
user.
Your
tech
bud
that
said,
would
be
working
on
the
l7
routing
support.
Have
you
ever
heard
back
from
this
person
and
did
he
ever
submit
a
full
request.
A
A
A
A
Okay,
so
can
you
can
you
tell
us
more
about
this.
C
Yeah,
so
fips140-2
is
a
an
ist
standard
around
encryption.
Typically,
this
is
a
requirement
around
govcloud
distributions
or
cloud
installations
of
software,
so
relativity
operates
in
both
commercial
cloud
setting
and
also
in
govcloud,
and
we
have
a
basically
one
of
our
sponsoring.
Agencies
does
have
a
requirement
for
us
to
leverage
encryption
modules
that
are
fips,
140-2
approved
so
envoy,
proxy
itself
does
impl
does
have
support
for
fips
140-2.
C
The
boring
ssl
module
has
the
ability
to
it's
a
feature
you
can
do
when
you
compile
envoy
to
enable
that
functionality
and
typically
to
meet
the
requirements
for
it.
If
you
have
a
fips
approved,
crypto
module
and
you're
using
the
correct
cipher
suite,
you
would
meet
the
requirements
for
fips
140-2.
C
It's
not
specifically
open
openssl
does
have
that.
But
are
you
guys
using?
Oh
the
envoy,
open
ssl?
Are
you
using
standard
envoy.
C
Okay
yeah,
so
the
the
the
standard
envoy
distribution
uses,
boring
ssl
and
it
does
have
a
fips
approved
version.
So
I
have
done
the
research
on
that
and
what
I'm
curious
about
is
if,
in
the
future,
kuma
could
support
building
envoy
with
that
enabled
and
then
support
the
ability
to
select
the
cipher
suites
for
the
mesh.
C
Basically
that's
so
if,
if
we're
able
to
meet
those
requirements,
you
also
have
to
worry
around.
You
have
to
deal
with
your
how
your
certificates
are
actually
generated,
but
that's
something
that
we
could
as
a
consumer
on
our
own,
generate
our
own
ca
certificates
using
our
own
fips
fips,
approved
modules,
so
that
it's
not
something
that
envoy
would
necessarily
have
to
support.
Well,
sorry,
kuma
would
have
to
support
the
generation
part.
C
So
if
it's,
what
we
would
like
to
see
is
if
it
would
be
possible
to
have
that
option
for
the
kuma
distribution
to
support
the
fips,
approved,
fips,
enabled
version
of
envoy
and
then
be
able
to
select
the
different
tls
ciphers.
That
are
that
we
would
need
for
that,
are
fips
approved,
and
then
we
could
then
basically
have
a
fips
approved
kuma
distribution.
A
That
sounds
like
something
that
we
would
want
to
have.
I
mean
I
deliberately
opened
this
one
because
apparently
one
of
the
persons
that
were
part
of
this
project-
and
actually
I
was
in
my
previous
adventures-
I
have
been
part
of
some
similar
discussions
in
the
envoy,
so
I
mean
it's
like
it's.
It's
not
a
new
thing
to
us
and
this
person
is
also
part
of
our
team
in
a
way
now.
A
So
we
we,
we
are
can't
say
close
to
this
thing
about
open
ssl.
I
was
not
aware
about
boeing
ssl
versions.
I
knew
that
there
was
some
efforts,
at
least
like
maybe
a
year
and
a
half
ago,
to
actually
start
to
fight
against
fibs,
but
I'm
not
sure.
So
if
you
have
any
any
links,
any
any
pointers
where
we
can
find
this.
C
Yeah,
so
that's
the
documentation
from
envoy,
and
I
look
to
see
so
it's
the
latest
version
of
envoy,
which
I
know
you
guys
are
moving
towards
and
specifically
so.
This
goes
over
that
if
you
look
there's
a
link
further
that
if
you
want
to
read
about
like
what
it
takes
to
be
fips,
approved
the
security
policy
for
boring
crypto,
that's
the
actual
nist
document.
That
tells
it
like
that.
That's
how
it's
supported,
but
you
can
see
that
it's
it's
a
it's
a
command
line
flag
when
you're
building.
A
C
Yeah
a
big
thing
with
this
like
so
like
we,
we
currently
are
using
istio
and
I'm
more
more
than
like.
We
well
pretty
much
guaranteed
we're
moving
to
kuma
relativity.
Just
because
of
all
the
features
you
guys
already
have
in
the
simplicity
of
kuma
and
the
fips
requirements
have
been,
for
example,
with
istio.
There
was
a
request
in
february
of
2019,
and
there
it
seems
like
the
istio
community
is
not
moving
forward
with
that
at
all.
A
A
There
have
been
some
some
discussions
that
were
going
internally
in
cong
around
building
our
own
invoice.
A
I
I
don't
know,
what's
what
what
I
can
share
here,
but
I
mean
all
these
things
kind
of
add
up
in
a
good,
timely
manner.
Right
I
mean
so
I.
A
That
that
there
will
be
something
around
this
for
sure
in
the
in
the
releases
to
come,
I
don't
have
any
any
timeline
yet,
but
oh
yeah
definitely
totally
understand
considering
I
mean
like
even
before
this
this
discussion
here
we
were
like
looking
into
this
envoy
story
and
what
we
can
do
about
it,
but
now
that
you
bring
this
up
this
additional,
you
know
somehow
incentive
into
trying
to
figure
out,
because
you
know
android
builds
are
not
really
the
trivialist
thing.
Yeah.
C
So
I
looked
at
that
as
well,
because
I
figured
you
know,
that's
that's
more
added
complexity
for
you
guys
to
have
to
to
own
your
own
build
of
envoy.
So
I
did
look
into
that
as
well,
and
there's
an
issue
open
into
with
the
envoy
community
to
provide
a
docker
image
with
envoy
pre-built.
With
that
the
issue
I
went
ahead
and
added
it
as
well,
so
it's
this
is
what
I
found
so
far
around
that
so,
like
the
standard
get
envoy
website
to
get
it.
C
But
this
is
what
I
found
about
people
that
they
were
looking
at.
Having
distribution
images
with
envoy
pre-built
for
fips.
A
Yeah
I
mean
we're
more
or
less
aware
of
all
these.
These
discussions
and
yeah
I
mean,
but
but
again
it's
it's
great-
that
you
bring
diesel
because
we
we
were
mostly
like
you
know,.
A
Trying
to
focus
our
efforts
on
things
that
would
be
more
meaningful
to
the
community
yeah
and,
to
be
frank
at
least,
I
was
not
aware
of
anyone
bringing
the
specific
envoy.
You
know
built
topics,
at
least
I
was
not
aware.
I
don't
know
if,
if
anyone
here
on
the
call
was
aware
of
anything
any
discussions
about
this.
E
So
I
have
a
question
so
in
order
to
support
this
feature,
we'll
we'll
have
to
basically
recompile
envoy
with
a
different
flag.
Is
that
correct?
Yes,.
E
Okay,
I
think
I
think
that
there
is
two
answers
to
this.
There
is
a
short
term
thing
we
can
do
or
you
can
do,
and
there
is
a
long-term
fix,
obviously
long
term.
You
know
we
bundle
envoy
with
with
kuma.
Therefore
we
could
be
bundling
it
in
such
a
way
that
this
is
already
enabled,
but
the
qmdp
process
when
it
starts
envoy.
E
It
just
looks
for
envoy
in
the
path
you
know
in
or
in
the
same
folder
as
where
the
comma
dp
binary
is
so
the
short
term
fix
is
you
can
go
ahead
and
recompile
envoy.
However,
you
like
and
add
it
to
the
path
before
you
start
qmdp,
it's
simple
as
that,
so
you
could
have
a
short-term
fix
that
would
allow
you
to
enable
this
feature
without
us
having
to
recompile
or
rebuild
envoy.
You
know
the
one
that
we
bundle.
C
E
C
E
C
E
It's
decoupled
and
separate
so
as
long
as
you
put
it
in
there
it
will,
it
will
start
the
the
one
that
you
want
to
start.
I
guess.
E
Yes,
so
at
that
point
we
would
probably
want
to
understand
how
we
can
build.
You
know
we
would
probably
want
to
integrate
that
work
with
our
build
process
in
such
a
way
that
yeah
so
yeah
that
that
could
be
an
option.
So
we
can
learn
from
anything
that
you're
doing
around
this,
so
that
it
can
be
incorporated
into
our
own
build
process.
C
Yeah
gotcha
mean
we're
we're
we.
We
luckily
have
a
longer
timeline,
for
we
have
several
months
to
to
work
this
out.
So
would
this
be
better
just
to
like?
Do
you
guys?
Would
you
like
me
to
create
a
a
github
issue,
just
a
feature
request
for
you
to
track
it,
and
then
we
can.
You
can
determine
where
it
fits
in
your
priority
and
then
potentially
we
might
be
able
to
contribute
to
this
takuma.
C
Okay,
so
yeah
I'll
open
a
feature,
request
issue.
I'll
also
add
it
to
the
the
google
doc
you
guys
had
in
the
last
meeting
and
just
added
in
there
for
tracking
purposes,
and
then
you
know
we
can
continue
to
check
in
and
see.
You
know
if
it's
something
that,
depending
on
the
priorities,
you
know
for
what
you're
working
on.
If
we
can
contribute
this
and
do
that
it'd
be
great.
If
not,
you
know
we
can
maybe
work
together
on
it.
E
This
year
we
would
like
to
move
kuma
to
the
incubating
stage
of
cncf
and
as
part
of
that
process,
since
cf
you
know
wants
to
wants
to
know.
You
know
a
few
kind
of
you
know
commute
community
case
studies
on
on
how
people
are
using
it,
and
you
know
you
know
why
they're
using
cuba
and
in
what
capacity
and
so
on
and
so
forth,
would
you
be
interested
in
participating
in
the
due
diligence
that
cncf
does
in
order
to
help
kuma
move
to
incubating.
C
Absolutely
absolutely
yeah.
We
we
we
plan
on
probably
having
a
fairly
large
distribution
with
this
and
and
working
with
so
far
working
with
everyone.
Here,
it's
been
a
great
great
experience,
so
yeah.
I
would
absolutely
love
to
contribute
that.
E
All
right
corey,
if
you
can,
if
on
slack
on
I'm
sorry
on
zoom
or
even
slack
on
the
community
slack,
if
you
could
reach
out
to
me
with
your
email
address,
that'll,
be
great
and
we
can
move
the
conversation
there.
It's
something
that
really
does
not
require.
C
A
Okay,
we
we
are,
we
are
nearing
the
end
of
the
of
the
call
so
charlie.
I
would
like
to
call
because
we
kind
of
ended
like
went
into
this
fifth
discussion,
which
I
hope
it
was
interesting.
B
D
Yeah
that
was
cool
I
can.
I
can
confirm
actually
that
we,
when
we
tried
out,
we
needed
an
android
wheels
wadon
and
we
were
able
to
switch
the
android
from
the
control
plane
quite
easily.
The
data
plane
quite
easily.
B
More
interesting,
so
I
have
a
question
so
have
you
tried
using
quasim
filters
with
this
android
distributions
and
comma
yeah?
Okay,.
A
B
D
A
A
I
mean,
if
you,
if
you're
willing
to
to
share
something
of
of
your
experiments
with
with
us
in
one
of
the
next
calls.
We
definitely
can
kind
of
have
a
time
slot
for
you
to
to
do
that.
It's
again
yeah
as.
B
B
D
Probably
the
I
think
it's
gonna
be
more
interesting
in
the
coming
weeks,
because,
where
we
actually
starting
to
bring
up
more
more
complete
things
and
trying
to
mute
the
multi-site
thing
as
well,
that
is
where,
where
we
want
to
see
where
what
kumarakin
brings
us
on
this
side
as
well,
I'll,
probably
have
a
couple
of
questions,
because
it's
not
super
clear
from
the
docs.
D
How
ingress
is
coming
and
things
like
that,
but
yeah
I'll,
just
ping,
you
on
snack
and
and
figure
out
what
we
need.
E
Great:
hey,
charlie,
how
did
you
get
to
know
kima?
How
did
you
find
out
about
the
project.
D
A
A
D
A
Okay
with
this,
I
guess
if
there
are
no
other
other
topics
that
we
would
like
to
discuss,
I
guess
that
we
can.
We
can
wrap
it
up
here.
I
was.
B
I
just
want
to
add
one
one
more
thing:
that
in
106
there
is
upcoming
feature
for
health
checks.
On
universal,
I
mean
for
probes
that
you
can
do
like
a
health
checking
of
the
service
itself,
so
that
might
be
useful
in
in
your
your
deployment
with
nomad
yeah.