Red Hat OpenShift GitOps Guide to the Galaxy | Red Hat Livestreaming, 23 Feb 2023

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: GitOps Guide to the Galaxy (Ep 54) | GitOps Cookbook

Description

GitOps has become a standard in deploying applications to Kubernetes and many companies are adopting this methodology for their DevOps and cloud-native strategy. The GitOps Cookbook presents useful recipes and examples to follow GitOps practices on Kubernetes. Authors Natale Vinto and Alex Soto Bueno walk you through the necessary steps for successful hands-on applications development and deployment with GitOps.

A

A

So Christian you're fired. You still can't get the timing on this right. Yeah three.

B

Strikes you're out like.

A

That three strikes you're out I'll. Do it next time I'll? Do it next time? um Also you can un, like you, can click the thing again to stop it, so we don't have to live with that. 10 second pause at the end of the something like that anyway, it's all.

B

Awkward I'll one day, I'll get it right. One.

A

Day not today was not that day. um You know we could actually practice this. Maybe we should do that. We.

B

Should do that training right, yeah, exactly.

A

um Okay, good afternoon, gadopsians uh welcome to I, don't even remember episode, 54 of get off's Guide to the Galaxy. um We I'll, let Christian introduce our guests today. um Some folks I hope are joining us from uh a conference.

A

um Maybe maybe we've got new viewers um so last week I was at a conference that was actually here in my hometown of Oakland California um called developer week and um we were there. We were heading out stickers and t-shirts and beer and hamburgers and stuff- um and that was a really really great conference, um sponsored by uh the developers.redhat.com like group um and uh yeah, where, where our guest is joining us from um so uh on that exact note, other things sponsored by uh the red hat are.

A

The developers.redhat.com includes a lot of um a lot of books and media um and resources that we provide to the people in that community and with that I'm going to pass it off to Christian who will introduce Natalie because they actually already knew each other and Natalia and I just met today. Yeah.

B

Yeah, so it's um and also one more thing about that: um the developers um uh Team here at Red Hat they're, the ones that helped me publish my book so um very big kudos to that team. uh Fantastic Team by the way I I've worked with them um yeah, so um Natale here, I think he's on this side of me um is uh uh Rosal, wrote a book right uh wrote a book uh called uh get Ops, cookbook, Natalia and I actually go back yeah right.

B

There, uh Natalia and I actually go back um quite a ways right where both essays uh when um with kubernetes was this weird new thing right and like we were supposedly experts on it. So we used to fly all over the place right. I think we finally met in person in in um it.

C

Was announced at no Vienna in Vienna.

B

um And then um uh you know basically just kept working together as we moved uh to different business units and different roles at red hat, so uh Natalie. Thank you so much for being here, um it I know it's late over there and Natalia is in. You are in Italy, but I think I want to get this right. You are in SEC or Milano Milano, okay, okay, yeah.

C

It's a period of time over here so I'm here with.

B

Mine, that's exactly yeah exactly and I have I have uh you know me and Hillary drinking coffee just because it's like noon I.

C

Like your I, like your Fedora cap and I,.

A

Like it, yeah yeah cup is very nice I'm, a little jealous um my coffee is empty, which is uh tragedy.

A

B

Strong, that's.

A

That's where we're at we're we're we're looking for any remaining caffeinated.

B

Yeah remnants yeah so.

A

Yeah, the remnants, no, it's.

B

uh Natale, thank you. um What's really cool about uh Natalie's book and you know he's going to talk about it, and um you know more in depth is that we actually were writing our respective books at the same time and it was like oh, it's actually kind of cool because, like you get the path to get Ops and once you're done with that, you can actually just like start reading get Up's cookbook with, like you know, my mine was kind of like more overview.

B

You know kind of preparing your your mindset for the practices and like the cookbook is literally what it is right, cookbook all right. These are what the recipes you know that relate to some of these practices, so um so yeah welcome, Natalie and uh and uh tell us a little bit uh about your book in the background and uh who your co-author was all the juicy details.

C

Yeah um first I'm very happy to be in the coolest show for devops in nice right now. I think this is the course show. I'm really happy to be here. uh I know it's late for me, but I could miss that Christian healer, it's a fantastic show um and hi everyone uh I see some friends in the chat. There's also Evan I think you met uh Hillary at the conference of developer week um and Evan did a great githubs demo. uh You have to say that maybe you have to invite also Evan through this.

C

It's a great game. It's a game where you play with car and you have to tap with your phone to move those car and you then you change update the app with using githubs like this, and then it's gonna shake your phone. It's really really cool, really interactive um yeah, but uh really happy to be here, and here I want to tell you this story about how I met Christians, so I know Christian. We wear SSA together, especially solution active for rubber shoes, but then you know what we did I at that time.

C

There wasn't any site relability engineer: there were people that in the data center installing and me and Christian, were installing openshift 3 in a data center in Australia. So we had to do on time, zone ship, yeah,.

B

Although the sun, we did follow the sun literally like handing.

C

Off right yeah, it was from Rel really from Rel and IP pixie boot to openshift and so on. So that's how I met Chris and when I saw Chris and again I said Thank. You thank you for that. One well.

A

I hope that that data center has since updated to openshift 4.

B

I hope so I don't know I hope so yeah I think it's EO I think it's just on this last, like kind of like maintenance tale, I think in a couple months. It's like it's. It's.

A

B

A

Been yeah yeah, it's been, um it's been EOL right, it has. It has been any anybody. Anybody still using openshift three stop um upgrade. um That was recently um one of my past times, so they moved me. I I, talk about this sometimes right. My new. My new role is what they call leadership, um which means I'm very rarely hands on with anything anymore.

A

um It's like uh design, specify and then pass off to others for implementation, and so um I can still be found. Answering questions in the openshift subreddit um and I'll. Give you um I'll give you brownie points. If you figure out, which one is me and I, don't even Christian knows my Reddit username, not my real one. I have one for work, but I have a personal one too I.

B

I know I know the Twitter one. So if it's the same, if it's similar.

A

B

Okay, then I do nothing.

A

Not so credit, if you guess which red, which Reddit user answering questions in the open shift, subreddit is me, um and there was a thread recently where somebody was talking about that they inherited some sort of openshift deployment and they didn't know how to access it or like how to get into it, and it wasn't documented or anything and a lot of the responses were it's probably openshift. Three new get and install 4.12 um and uh yeah.

A

So, if you're still for whatever reason on openshift three, uh please please don't um you're, not gonna have a fun time. There's not going to continue to be support.

B

Security, too right because.

A

B

1.11 I think yeah.

A

Yeah, just just just uh we we, you have access to all of the resources through various Red Hat channels. Please please, please contact somebody. We will help you I think uh mock.

A

There's a mock Mike here, yeah, open ocp3 is done. Reach out. If you need assistance is getting off of it. Yes, all of that anybody would be happy to help um so I um I have to make at least one really bad joke about eating. Get Ops for lunch.

A

um So, oh God, okay, D4, no, don't um I mean no Katie's great. Yes, um anyway. So, let's it's Holly. Let's get back to your book! Let's eat some get ups for lunch. Tell us what we need to know about your cookbook.

C

Right on um hey, Hillary, I want to say uh first, there are people in a time zone that this show is fantastic. I, say people from Moscow Pakistan wow, so their time zone is more later than me, so kudos to you all and uh and now I want to come back to what Christians say so I think this book, The Heat Of github's cookbook.

C

uh It's really nicely connected to other books that we have uh and developer.com like the one that Christian wrote and I say that because, uh for instance, a Christian book you can find the link uh from from this page. You can find all the books available, the getting it Ops is really kind of uh uh has the narrative or why he talks. What are the best practices? What how you should structure your directory? How should you structure your reports?

C

So it's a kind of design pattern for githubs and kind of introduction uh for architectural introduction and then I think the github's group book go straight to the code. Okay, I know the theory. I know how I had to do that. But now uh show me show me the code again like a new store. Show me the code show me how I can do that and but I want to tell you also this. uh The key tops.

C

Cookbook is it's it's created with a climax I, don't know if people like it or not, so we wrote the book with this in mind. You start with the the fundamental which is get then you move to container. So we go through the chapter where you learn how to use podman build a podman in podman kaniko build packs. So all this cool technology to create content right so we are assuming content is the fundamental unit before you arrive to you, know, Argo CD or any gitops implementation.

C

Let's start from the foundation, containers get right and then we move it in the other shutter. We have other important tools for mostly using inkidops workload, which are customized and held again. Those live uh alone, so you can use customize without key tops. You can use help without githubs. Githubs is just a methodology right, it's an approach, but we want to create this climax, no customize M and then you arrive in our let's say: Red Dot, opinionated, cicd, read that opinion. United cicd is a cloud native cicd.

C

In this case it's tecton, so you have a CI part which is implemented by tecton in this case. So chapter 6 goes into a list of receipts about tecton, so how you can create your um example for Java pipeline, how you do your unitary test, how you insert customize and help inside the text on how you use tecton app for for creating multiple text on tasks um so that that we we arrive at chapter seven, finally, to uh gitops tool. So in this case again is a Reddit opinionated way, so it's tactone, plus Argo CD.

C

You know that git Ops is an approach, so an open source implementation to be orgasitic about flux. Who could be anything right? um We're focusing on Argo CD, so chapter 7, chapter 8 are the chapter for argosity and while chapter 7, it's an introductionary to Argo CD. How do you deploy an application? How you use customized, how you use?

C

L right on chapter eight goes a little bit in advance of technique and I want to say that earlier in chapter 8 mention explicitly Christian book uh mentioned Christian Hernandez, like it's a famous and I, didn't say that you can see. Yes, please download the book and you see I mentioned Christian uh in the first part of the book, because it's really again it's true. It's nicely connected to the getting the jobs book and with the book here, you can start implementing your receipt right uh on that. So chapter 8 is Advanced.

C

uh So when you call it that I I'm talking about application sets or um we're talking about secret, very hot topic right, uh how do you manage secret I I, followed the show here at the at the github's Guide to the Galaxy? uh You know we are many options in the book.

C

We go through seal it secret and extend the secret, and we think external ticket is the best way to handle it, because it's an agnostic, API right, the touch, many identity and sorry many uh secret management store um and, yes, I, think chapter 7 and chapter eight are really the chapter that for the argosity receipt right advantacity, but before going to there, we we we have outlined this part really from begin from the beginning to the most advanced technique,.

B

Yeah, what I really liked and uh arslan I, hopefully I'm pronouncing your name right, we'll get to your uh your comment in a second. But what I really liked about the approach of the book um is that you started at code and containers right, and so um you know uh you know a lot of the times. You know me coming from an admin background.

B

um You know Hillary being an SRE like we think about like the application, as is as it's running and taking care of it. You know at runtime right keeping the lights on making sure you know. If you're working at a company wait a minute making money, you.

A

Just like completely blew past 11 years of quality engineering and software delivery. In my career, like what.

B

The heck is but the but like, but it starts, though my point being is that it starts at the application right. It starts like get UPS kind of at least from inception. You know, obviously it's evolving, but at Inception it's all about, like kubernetes, taking advantage of kubernetes right and taking advantage of those reconciliations. But yes, you had the 10 years of quality. It doesn't even make it to the running State without going through you first. So like yeah,.

A

Right absolutely.

B

Right um so, um but yes, I, like I like how you start off as like, it begins with Git and podman right or you know, get Docker whatever you may be using because you know that's honestly, you know if you want to say where does get up start, it starts kind of like right there right it's it. It starts at the at the developer, building a building and container.

B

um So we got a comment by arslan. So hopefully uh he says we appreciate we can have more information using Jenkins and Argo City the get UPS way, I believe your book, you mentioned you, you had a chapter on tecton and Argo City I, think that can be translating into Jenkins right. It's still kind of like the similar idea, you're using tecton for the build aspect in or Argo City for the deploy aspect think maybe go a little bit deeper on that on that chapter, yeah.

C

um uh You're right Christiana, it's talk about Cloud native cicd, so we're not talking about Jenkins uh I mean not Jenkins. We could mention Jenkin X, but Jenkin X is tecton and yet right.

A

Yeah, it is I, was gonna, say, Jenkin, X, Red Hat had uh contributors to help create that project and Jenkins is actually just it's just tecton. Under the hood. It's.

C

Just stacked on 100 the hood so we're talking about Cloud native cicd, because this book, if you, if you hey, have the hard copy by the way here, uh looks nice. And if you read this uh subtitle here, there's written kubernetes is Automation in practice.

C

So it's really focused on kubernetes right, while J, whereas Jenkins is agnostic, can run in virtual machine. Actually Jenkins is is architectured for really for virtual machine right it. It came from the traditional work while pectin is really designed for containers and uh kubernetes. That's why we put the focus back to our Salon point.

C

The the the the structure is still valid if you use Jenkins for the CI part, so you build your container your golden image right and then you you, let Jenkins do some operation like um you know using uh I, don't know in the book. You use a text on task to use customize to update the the kubernetes Manifest stored on git to you know to reflect the new change in the app. Maybe you can use the same approach in in Jenkins yeah.

A

um Oh, um the um Christian is telling me my sound's a little distorted. Well, that is unfortunate. It was great earlier today, so I, don't know what happened. uh Oh well, I can't I can't right, yeah yeah, you know what my cat was actually literally over here, playing with the cords and cables on my desk earlier so I'm gonna blame the cat.

A

Oh well, sorry, folks, that that that's a bummer um you can do git commits with Jenkins I've done that a lot.

A

um So if you can do a commit to a git repo which you can with Jenkins, um then you can get Argo CD to pick up those changes and do the CD pieces or anything else. That's watching the git repo to do whatever action is required. So put the thing in the registering, if you're using a local registry. Yes, you can get Jenkins to do that. um It's just um it's just bash scripts that you orchestrate really at the end of the day, yeah.

B

It's well I think Gerald's Gerald's on um Gerald said bash is the new language of get UPS, which is kind of funny, um because it's.

A

Always been the language of good.

B

Ops I'm, sorry what new yeah it's it's it's the um yeah, because just you know it's just you're dropping to a shell. It's like okay, I'll, just drop it to a shock and do whatever I want at that point. Yeah yeah! So what's um uh uh not to plug my book because it's about uh Natalia's book, but I kind of talk about and I kind of borrowed um this.

B

This from conversations I had with Gerald um about like trying to marry uh asynchronous task with synchronous tasks right so like the traditional like Jenkins, you know, CI CD, uh even with tecton right, is very, um uh very synchronous. Right, like it's very like one thing waits for another. You can do uh dag right, so you can do the um dependencies on one another whereas get up whereas get UPS is kind of like it's asynchronous right. Like you just kind of like what did Gerald say in one of his blogs. Is fire and forget right?

B

Is it's like you kind of like you know you do a commit and, like you, don't really get any information back from Argo CD or any really get up? It's like it. It just.

B

um You know when the reconciliation Loop happens it it just happens so kind of like to your point, Hillary you're, saying that, like you have just Jenkins just do a commit. You know, instead of doing the actual deploy, do a commit to a git, repo and then kind of Argo City you know uh takes it over I mean I. Guess you couldn't write like a tecton task or Jenkins job or whatever to kind of monitor like you know, actually do curls right again, you're dropping to the.

A

Bathroom, no girls, don't do that. You can I mean you. You can and tell me if my audio is better because I fest with the dials, but you can.

B

Yeah but you can, but you don't yeah.

A

Don't don't do that, um like you can't like don't if you need to have better insights or whatever um uh observability as your friend right, there are so many things that you can get you don't just have to get like alerts and problems out of your observability. I cannot I, keep trying to explain this to people. uh Observability isn't just what you need to care about. If things are bad, it's what you need to care about! It's it's like! It should be a snapshot of your of your state right.

A

Yes, your observability should be a snapshot of your state at that time, your application State your deployment States, whatever use some observability solution for those things.

A

um It also gets us down to things like Dora metrics, which I think we're actually going to do. A um a show on later and later, the quarter in the summer um is Dora. Metrics is something I'm, living and breathing right now um so, uh and there are tools for those and anyway, so the point is: is there are tools for these things and ecosystems around them and ways to ways to get that information?

A

If you have to do a curl, because you need some sort of awareness into your CI pipeline, fine, do it yeah, there's, there's always a reason to do the thing that I'm, like no don't do, there's always a good case for some things.

B

A

Always a caveat: don't do that except for when, um but no uh this is. That is that's, that's those are the times where you're looking at implementing observability Solutions, implementing solutions that give you Dora devops metrics. Those are the things that you're going to want.

B

Yeah it's it's kind of like um that's. Why grafana and Prometheus exist right, like you know, that's you.

A

Know or or whatever other.

B

Metrics provider observability, you know it's. It's uh yeah. We've built the monolith before that's why we that's we're trying to get away from Jenkins right, like yeah.

A

B

Like whole thing so yeah.

A

And I've I talked about this um I talked about this. When we did our talk at um get Alps con last year in Valencia right, um the the thing about modern architectures is they're more observable.

B

Yes, yes, yes, yeah, there's, there's I think almost too much data.

A

Yeah now you have to put in filtering now you have to start filtering your data so that you're only getting the most useful. That's always been true, though. It's just actually easier to understand how much data we have, but that's always been true. Yeah.

A

um Our son also has a question about tecton. uh How can we integrate signed gpg git commit via tecton? um That's something that they've been struggling with. I actually don't know. I haven't used tecton a whole much well.

C

uh With pipeline has a code I think you can sign just a comment on your Source control manager like GitHub, and so it each thing is decided connected to a techton action.

B

Yeah, so you may you mentioned: uh do you talk about pipeline as code in your in your book? No.

C

Unfortunately, that wasn't really ready at that time was a kind of a blading edge attack, so I couldn't uh provide anything uh nicely working, but yeah I think attacked on sorry Tech on Pipeline, as a code is really cool technology and for people familiar, you know we get up and GitHub action or or you know or function like you know, slash test, slash, CI, slash, retest, it's the same thing you can use the the same structure and and each application repository has its own pipeline in a subfolder called that tecton, where you've sold this pipeline.

C

So I think it's really good way to define uh pipelines per microservice or per app, but also it's uh not force suggests recommend you to go into a a git workflow like you do. A change is on your branch and then you do a prerequis rather than committing straight to main or master, um and when the pipeline, when the pull request open tacked on Pipeline as a code will will create a task we'll create the pipeline, so you can test it.

C

Everything is fine, and only when everything is fine, you can merge to uh to the to the main branch. So I think it's a very cool practice. Unfortunately, I couldn't add in the book in time. You know, technology is super fast I mean yeah. I need to write the version two now.

B

Yeah yeah exactly well. Actually me and Gerald are kind of uh chatting about this. A little bit. It's like you, you get halfway through a book and you're like well like half the stuff. You know I mentioned I have to go back and, like you know, modify it like you're, literally modifying it as it's almost going to publish, because it's just like it technology goes. You know like um one of the things or a couple of things. It's kind of interesting people always ask me about well, can Argo City do this?

B

Can organ City do not like that's really a CI task and, and then really like tecton, has um a lot of these features. Kind of like built-in, like pipeline as code, there's also tecton chains right for, like Supply uh security supply chain.

B

um You know for for signing uh your uh either containers or your packages that you're building uh signing your deployments. um You know verify with um with six store. You know that that sort of thing. So that's um uh uh that's, that's something! That's that's really really cool uh about tecton right like it's because it's like you know, we focus on get Ops, but it's like you know. That's you know, devops is so much more and there's so much more.

B

That comes before, like the actual get-ups uh aspect of it um that uh but some technologies that are that's really cool.

C

I I, like the point from arceland like when tecton pushed the yaml, took it. So maybe some task that we customize change the the Manifest. The comment should be verified but isn't like when you configure your user and you configure your user, paying us uh sign having the signature for your user isn't automatically attached to that commit if you are using the personal uh access token foreign.

C

But you know it could be generic when you have your git user um configured with signature right, yeah.

A

So and I really wish we had somebody uh in the in the comments from our secure supply chain team at Red Hat, because they would they would know this so much better than I do um because I'm so far onto the upside now. But the answer to that is basically yes, but I think that what we're talking about is um anything an automated process.

A

Authenticating with the signature and um they're, probably talking about two jumps back right, so the process might be signed. But what did what did the? What initiated the process and was that also signed? That's I'm, inferring I could be completely wrong um and tell me but I think that's the issue, and so that's that's one of the things where um I think I think tal has the answer here.

C

Right on, if you load the gpg key in your user and uh and then at the git conflict with the gpg to the to the task but well, the techton task will read the secret that you attach to a service account running the pipeline. So.

B

You realize Mount.

C

That git config into a kubernetes secret and then you attach the secret to the service, account running the pipeline. Yeah.

A

As I say, the the passphrase should exist depending on exactly how you're doing this it might exist as an environment variable that gets referenced um instead of somebody having to manually put it in every time. So.

B

I think white cosine is actually pretty cool right because it just it does that verification, like you just say, verify this for me um versus trying to verify the signature yourself right, because you've already uploaded those keys right to to six stores so um but but uh to Hillary to your point. Yeah. If you just want to do a gpg, you can just load the passphrase or I I've um I've ran it. I've ran gpg keys without without a passphrase right for for things like this yeah yeah.

A

B

You don't want to do that, but um it's.

A

Yeah it's um or at this point we're like coming up with ways to hack around this problem and I'm. Not ha you know we're not hands on keyboard before we're doing this. This is like arm share coding, automation here um so uh on at run time on the CLI for the passphrase yeah, you should still be able to automate that and have a script that responds to the prompt to the passphrase with an environment variable. That's probably one of the best ways to do that. um There's, probably better ways.

A

Honestly, there's probably better ways: somebody's got to know this better than I do, but that's that's probably what I would do in the situation where um what you're talking about but I'm, also still thinking about Jenkins, and we were talking also about tecton, so it should still work roughly the same, um but yeah.

B

Chains, I believe, can automate it for you. I.

A

Think so I think so yes um and it's either a kubernetes secret or some sort of other environment variable that get that can get loaded and ex and then utilize during run time.

C

Cool then change his Tech preview right and right now in you know for Red Dot openshift, um so it's gonna be available soon, as ga nice yeah.

B

Yeah I posted the link down there, so um in the chat. So if can you memorize that that link? This is why you tune in live. So that way you can just copy and paste the links.

A

But I'm like getting ready to copy paste that link I'm, trying to let it get it to. Let me click the thing instead of just display the thing it's very. It was not happening for me, but.

B

A

I'll make uh that's why I showed it thought it was gonna display it, but yeah I'll, Make christian slack me that later or I'll re-watch the stream and pull it out of the the restream comments. Yeah.

B

And pause it and yeah all the restroom comments. Yeah yeah.

A

um So cool using an environment variable something yeah. Let us know, please what you do there um I'm very interested like hit us up on Twitter or on like uh the kubernetes slack or the cncf slack, or something tell us what worked tell us. What we didn't know um tell me that I was wrong.

A

I love what I'm wrong, because it means I had an opportunity to learn a new thing um but yeah, um and if anybody knows better than uh my armchair uh guessing here um as to as to the best pattern, uh also tell me when I was wrong: I will happily I can't know all the things. I really can't know all the things anymore. Yeah.

B

Not anymore, no once.

C

There's too many things, one Tech was easy.

B

When Tech was as easy as racking a.

C

Server FTP.

B

Yeah FTP, your coach.

A

Okay, I have it in our talk right in our talk, I asked, who has deployed code to production with FTP right and like I, put up my hand and like three other hands went up and I was like okay super, like SFTP sure, but FTP no I'm, like man, I, worked at some interesting startups. Y'all.

C

A

Later I asked the audience he's like okay, so who here has Daisy chained Jenkins jobs together, like you have a Jenkins job and it triggers another one with triggers another one which does all and eventually get all through the things right and I end up the same, and you know the same hands went up.

A

I, looked at the audience and I was like some of you all are making me feel very old and you can actually leave that's fine. They have, they don't know how good they've had it.

B

Yeah exactly back in my day, this was harder.

A

Yeah yeah you're welcome.

B

Yeah for sure so um I'm going to actually found the the link. So um the book we're talking again uh Natalia here is talking about his get Ops cookbook I am pasting. The link to the book.

A

Cool, so while you do that, I was gonna. Ask Natalie in your opinion. What's the like? Don't miss thing about about your book.

C

It depends, it depends. uh The the smartest answer is. It depends because if you want to start really from scratch, I think you have to read all the book. It's um it's. It's a must, but if you are I I think this chat is really Advanced. uh Maybe you can jump straight to the tecton and Argo CD chapters or chapter 678. Those are the more juicy for those Advantage people.

C

Let's say you can find receipt useful receipt for uh most common use cases right, um so I recommend 678 for advanced folks people that would like to get more about. You know also new Cool Tech about creating container or Helm customize. You can go to chapter three four five uh again. It's not you know for containers. Is uh all the oci toolkits, it's a it's a Jeep for Java, it's uh there's mechanical there's build pack, there's a uh ship right as well.

C

um There are many technology to build containers that maybe you are not aware of. So it could be a good rehearsal or technique of building container image.

A

B

Good, so the second half of your book, saying like if you've, already kind of familiar with um like if you already have done cicd if you're kind of familiar with Cloud native tools, like all right cool, like you, can just maybe focus on the second half kind of like the more advanced topics there. Yes,.

C

Yes, definitely and I will uh Michael outer and I would like to mention Alex Soto Bueno, which is a developer, advocating read that we were thinking. This was kind of a starting point for people that would like to you know really get started with github's methodology, github's approach after they.

C

After you know the theory, you can start doing something, but you know for I think the the advantage of case is really advanced cases, the servers separate or a second edition or a separate uh book, because this I think this is um a kind of a introduction with most common useful receipt for Argo, CD and tecton um to to your point Christian. So yeah go straight to the second half.

C

If you are expert, uh you will find things like sync waves books uh or secret management, I'm reading a book again, because I can recall everything um you know, um application said those piece of code copy and pass you can uh by the way the book is, is meant for a mini Cube. We tested the boot for mini Cube and I, wanted to tell this sealer increase and Christian. When you write a book with code, you have to fix the version right- and you say: okay I'm, installing rpcd version x, uh Argo, CG, robot version.

C

Why and you have to fix the bread, the the infrastructure, let's say so we're targeting a certain version of mini cube, a certain version of argosity assertion version of techtone.

C

um But in this way this is universal and stay. uh You know, reproducible, let's say in one year you wanna, you have the book, somebody give you books at the conference and you have the book right in one year or two years. It's still working because the versions are is fixed and the platform is the agnostic. The book is tailored for mini Cube, so any kubernetes will work any any any kubernetes.

C

Where you have sufficient permission to install uh you know article CD and techton um uh you you need to have this kind of cluster admin or a sufficient permission other than that the book is really tailored for all kubernetes.

A

That's awesome um so.

B

Kind of like also um when you're like building these containers like if you build them from openshift they'll, run on kubernetes just fine, so it's kind of cool to be able to like, like you, know, test on Mini Cube and then deploy it to openshift you're. Like oh, hey like it, you know it works.

A

Similar, so it's gonna work so much it's not necessarily going to work, though. Okay, because I've done this when I'm tired right, you can go from openshift to kubernetes. You cannot go from minicube to openshift, necessarily because if the container image you're using hasn't removed the root user, it will not run, um then it goes back to openshift's built-in security context and the the things that we enforce to guarantee that um the you know Security First, is, is really part and parcel with with how openshift behaves.

A

So just remember that, because I have completely grabbed the wrong postgres image, because I was what was it was like. You know one of my ever building demos, I'm building demos at 10 o'clock at night right and I'm, a tired person. My day starts at seven in the morning like 10 o'clock at night, I'm ready to be asleep, so I've done this and then I sat there and scratched my head. Why does this not work? Everything's, perfect, there's, no, limiting issues with my yaml. This should be fine.

A

Let's go check the logs and I go and check the logs, and it's like oh I'm, an idiot there's a root user. In this image. Let me go get the one from red hat right. So then everything was perfect. Yeah, so don't forget that it will work uh openshift, all of its built-in security context, stuff portable back to vanilla, kubernetes of some kind. The other way no guarantees um I.

B

Usually say it I usually say it like when someone says hey, it works on kubernetes, but not on openshift I go no, that's not the problem. The problem is you built the container wrong right.

C

B

Mean and then and then I wait for them to prove me wrong and they go back and they go. Oh actually, you know you're right like if I just you know make this a little bit more secure. It runs just fine yep.

A

Yep most important feature in openshift by far built-in security contexts. uh I'll wait for somebody to prove me wrong. I though I don't I know people love the GUI. The GUI was nice, but I'll wait for somebody to prove me wrong.

A

um So uh Natalie we've got a little bit more than 15 minutes left I, I'm gonna. Ask you the most important question: I could ever ask you what book should I write.

C

Well, that's a good question um and I'm I'm sure there are plenty of the side thrill a bit the engineering books.

C

um Maybe there are there aren't many book. uh You know what I think. What a book really should tell is a is a is a good story, and this good story comes from the experience. All the things you're saying today right, oh I had this issue. How I have done this? If you share this in the book, it's going to be really valuable.

C

um I, don't know how you put the title of this book, but sharing the experiences from uh you know you you find the title, but sharing your experiences on what you did is really it's really, it's really nice. It's really.

A

Good I I have a great title for a book, but it's not stream appropriate.

B

um We'll tweet about it, I guess yeah.

A

No I can't even tweet about it, like it's really not appropriate, so some people know a lot of people who I think pay attention to the stream, because I mention it time to time. I am what is I'm I'm self-taught right, I did not I have never taken a computer science course in my life, that is, that is an important thing. I graduated high school and I went to work um and and now I'm a principal engineer at red hat, and that's that's pretty cool right.

A

I can't complain about about that um one of the things and it has gotten so much better over the years, but one of the things that was so rough for me in self-teaching was reading, documentation and reading examples and the use of Foo and Bar and at one point I looked at my husband I was like what the is Foo and what the is bar and like. Where did this come from like? Please?

A

Can we please anchor our code examples to like real world use cases, things that tell stories things that help me understand what these pieces are supposed to mean, and that is literally the book. I want to write with that title without the expletives bleeped out about how to write a useful code example for somebody to understand it, because the person you're writing for should be the person that you should expect to have no previous context, not the person who already knows the things you know.

A

um So that's the book I always think about writing and then I'm, like oh man, that's an intimidating book to write I'm not doing that I'm, not smart enough to write that book yeah. So somebody please write that book. I'll.

B

Buy it I'll buy it yes and you'll. You'll put it in the back. I think also um the the way and I think that's kind of like the way the tally approached the get UPS cookbook because, like the the word of the cookbook right, whereas like my book, is more like the theory of flavor profiles versus a cookbook right, I think most people want the cookbook because they like no like I I, want to know like how to do.

B

Xyz give me the recipe versus, like you know, like it's fine to know what flavors go together, but like I just want to be able to deploy this here. So I think um you know, that's that's uh one of the cool things about having that kind of format. Right, like you know, just just teach me like you know how to make that thing.

B

um So it's that's. That's uh that's kind of cool here or.

A

Something I've never seen the username bacon Fork join our stream chat before so I think, uh potentially new viewer or one-time viewer whatever it is. uh Yes, so many nonsense variables, I hate them all they're terrible they're, not helpful. uh Don't do that if you're writing an example or you're writing documentation. Please do not do that. That is awful, um but also bacon. Fork is an amazing, username and I am sad. I didn't think of it.

B

Bacon Fork! That's so is that a fork you can eat after you're done using it.

A

I have so many questions and I want all of the answers.

B

Yes, exactly exactly cool cool, so um so yeah! So let's, let's round this off a little bit to talking about uh talking about kubecon, right, I, believe all three of us will be there. Oh.

A

B

Are you, are you.

A

I am I'm gonna, be there I booked yesterday, yeah.

B

Yeah so Natalia, are you gonna, be there you're in Italy? It's short drive to Amsterdam.

C

Yeah yeah, yeah I think I will be there. Yeah we're gonna be at the booth with uh with Daniel and uh Kevin. uh So yeah we're.

B

Gonna happy hitters, nice yeah get Daniel o and Natalie yeah.

C

Hillary myself.

B

You can you, can you can ask us questions one-on-one.

C

You can't miss it.

B

Though we don't know.

A

I I didn't sign up for booth, Duty I'm, not I'm, coming because um I'm, a member of the kubernetes community code of conduct. Oh okay- and we have a panel discussion- hey guys, submit I posted it on Twitter um and I will post it again submit your questions for the kubernetes code of conduct committee, because we are really um wanting to provide that human face to this kind of nebulous entity.

A

um So submit your questions. We can't answer specifics on specific issues, but we can talk broadly about how we look at things what it means to be on the committee part of the committee um Etc. So do that. But that's that's! Actually. Why I'm going to be there and not I haven't actually signed up for any sort of birth, Duty yeah, no one's! No one has cornered me into it, Jen uh so until they uh until they until they make me I, don't actually have any boost shifts, but I'll be around you'll.

A

Be able to find me um bonus points if you find me and I have get up Skype the Galaxy stickers with me, because that's the thing I bring to conferences.

C

I want it and a Christian we we gotta do go. We gotta do the overshift coffee break cubecon Edition, so we're gonna stream from cubecon and we're gonna find Hillary whatever she's, not at the booth.

B

Where is, she will find her yeah outside.

C

Whatever we're gonna stream, it I'm.

A

Very probably going to on I'm staying the weekend. I, don't know if you guys are staying, we could have stayed in the weekend and um I do I. Do Hema historical European, martial arts, um which I had a competition. This last weekend and I got out. I got body slammed and fell to the ground and it really hurt, but anyway um so I the person who I take Hema, which is uh it's just it's a sword guys it's a big two-handed sword. It's really fun.

A

um The person who I take keema from his instructor has a class, has a um he's. The 11th like 11th, ranked Hema competitor in the world and he's just outside of Amsterdam, so I'm I'm gonna, try I emailed him. I'm gonna try and go to a class of his over that weekend. So you could find me potentially uh at the conference. You could find me potentially at a sword, fighting class. uh You.

B

Know, that's that's pretty good, so I, um so I'm actually I'll actually be at both uh kubecon and and Argo. Argo Khan um and uh I have a talk uh for um for kubecon right. I'll get up saved our lives right, so we're gonna um something we're doing the get Ops Community uh with the flux guys are gonna bring in some like end users.

B

You know uh on the Argo CD side, I'm gonna bring in some end users to see um uh talk about, like you know, get ups and like how we implemented it so check it out. I posted the link down there um and you can catch either. What either one of us I am personally excited for Amsterdam.

B

um It's gonna be my second time there, but the first time I I went there, wasn't nearly long enough. um I'm a museum geek, so I visited like I, think four or five museums. When I was there and I was like there's so many museums here, um absolutely love it. um I also had oh Natalia I. Think I'm gonna put you on mute, I. Think I had it some of the best Italian food I think I've had in Amsterdam, um but it was, it was uh um I. Haven't been to Milan yet so that's.

C

Why I asked to the coupon folks to do kubecon, European, Milano, I'm I hope they accept this, like uh you know this, this um for the next cubecon Europe I really hope they select Milano, let's see so we can bring you all to the original right uh food. The good one.

B

Yeah he got the spy handler yeah um so.

A

B

Yeah, that's fine, I mean it's two-hander, um yeah.

A

Zweinhander it's a two: it is. It does two-handed, it's not exactly a great sword, although great swords might fall into that because um specifically the German here matters, because the style of fencing that we are recreating is German um and there are there's several German systems, the one that I'm primarily learning is called the Meyer system, um and um that is like late German, uh swordsmanship and so uh yeah I I I have um I'll try.

A

My friend has this great video clip from one of my matches where I technically lost the exchange, because he hit me first in the arm, but I smacked the guy on the head real good, so um I'll try and get some of the some of the footage of uh of it up. um I.

B

Also in real life, that means you would have won because, but he would have died so.

A

B

Winner at that point, yeah exactly.

A

Exactly but it's this is we're fencing for points here. It's a competitive sport, so technicalities matter uh that was a really really fun exchange. There was also um I'll try to post some of the things you can watch me lose terribly, but I've only been doing it for like eight months, and most people have been doing it for a couple years before they compete. So I was very proud of myself, um but I also bought a sharp sword.

A

um That means like a real one that can do damage and it is a hand and a half sword, um so I do I. Do my training sword, which is called a Fetter meaning feather, is, um is this? Why hander it's it's the two-handed, it's about um about four feet, long for people who are across the pond.

A

That is um what is it a yard as a as a meter right, yeah, a meter and a third one, 1.3 meters, roughly um so um wow yeah we completely derailed and I got I got talking about swords, I love, I, love, this sport, it's one my best friend and it's how she met her husband over 10 years ago. um They they finally dragged me into it, and now I will not shut up about swords, so I'm just.

B

Like the worst, you get to have a stream about swords, I think you would that would that would be.

A

The get off Sky to Hima I might do something.

B

Yeah I'll think of that yeah, so uh let's yeah so I want to kind of round this off uh talking about kind of some of the so like Natalia you're from the um um you know, developers bu at Red Hat. uh You guys not only do like some of these books and some of these trainings, but you guys actually do um distinct. uh Labs right like live Labs, um something with with detonation. Can you talk a little bit about um the the the Argo CD one, the the getups um Dev Nation I?

B

Think you but I think you guys call it Howell I! Believe it's what it's called.

C

Yes, um we have a really really great event coming on and you you put the link thanks uh Gerald, uh which is also in the chat, will deliver an official key tops Workshop uh next week. um This Workshop is part of the definition. Events definition is a is a branding from Reddit developer, doing a developer, uh oriented the workshop and and kind of activities, and from today we had. For instance, we had the Orient interviewing some of the some some customers using operation, githubs and hey.

C

There was a customer showing their immigration to authorship three to opposite four. um So coming coming back to the point, almost.

B

C

Yeah yeah, you see this these people doing great stuff with tecton, with Argo CD, when they're literally doing a really really cool stuff they're using a standal secret. So you see the valley that and pattern implemented in the real production life. So that's fantastic, and this was today but next week Gerald will do the argosity workshop.

C

um It is full out, but in case uh any free spot arrives. We will open again the registration. You can attend this Workshop. In any case, we will do it um again and for for next time, so you what you have to do is just register at that Nation I read that developer and stay tuned for on all our events coming either virtually and in person.

C

um So um I put the link in the chat here in the product chat Chris and you can you can send that um if you wanna hear uh you wanna, listen to anything about definition, events like the Argo cd1. uh This is the place to register and um yeah. That's it and looking forward to see Jared in action for a Dev, Nation, github's Workshop,.

B

Yeah and it's it's kind of- and this is Free by the way so like sign up, get some free training not only on openshift but using openshift get Ops, which is Argo CD uh jwhb, you asked um is the Argo CD Workshop focused on usage with openshift I, believe the answer is yes, we're gonna be uh they're, going to be using Argo CD with openshift. A lot of that stuff gets easily translated if you're using um some other kubernetes distribution right, um and so uh that's kind of like what the what the workshop is.

C

Yeah so kind of universal, it's overshift key tops is the Argo City installed there, but the structures are valid for any Ergo City and the source of those instructions is the tutorial that you also wrote right in caracode, and then we related into instruct so really the the the exercise as valid for any open shift.

C

uh Sorry for any argosity, but the specific Workshop we're using overshift key tops like a a version of argosity um and we're we're letting the the the attendees use the openshift experience, but again the technology and the extraction are valid for any argosity.

C

At that version, of course, yeah.

B

Yeah cool cool yeah and uh generally he saw it on chat. So he's uh I have like a internal running, joke, I, say Gerald Ops right because, as you know, what's um I I think Gerald and I are kind of Kindred Spirits right because like as opinionated as as I am Gerald is also opinionated right and so I I in a way, I respect that so um you know, even when our opinions differ from time to time um so uh and and yet it's another.

B

Yet another essay that uh when I was an essay we worked together. I still remember the time. I think I was writing in the back seat of his like Mazda, which is which was supposed to be a two-seater I. Don't know how I fit back there, um but there we go I, think I. Think I was in Montreal when I went there, I'm not sure my memory is shot Gerald. So if I got any of that wrong, let me know.

C

B

Yeah he's he's yeah he's a Vancouver, but I think we we visited a customer in Montreal.

C

B

Think I think Canada is a region like it's just one big region. They don't have like East or West.

C

It is Big yeah, RX8.

B

Yeah, yes, oh, it was Toronto yeah, RX8 yeah and it was suicide doors. Yes, I. Remember that and like I had to like with my backpack I was like crunched up in the back uh driving to lunch. It was really cool. I.

A

Can imagine that I I can see that you're, not that big, a dude I could see how you could squeeze.

B

And I did Squeeze yeah and, like I had my um anyways anyways, it was in Toronto. That's right! That's right! It was in Toronto now that.

A

I, don't remember, I was gonna, say Christian you're, not opinionated, I've, never known you to have an opinion. Unlike you, what.

B

A

Like me, having an opinion, yeah.

B

We're completely flexible right.

A

Right, yeah exactly and never never opinionated, never prescriptive.

B

Yeah, uh so cool cool, all right, awesome, so uh yeah, so we dropped all the links there. um If you missed any of the links you're watching the recording, if you're on YouTube, it should be in the in the chats there. So um if, if not, you can bug us on Twitter, um let me see here you can find um the mermaid on Twitter right, uh dropping Hillary's uh Twitter handle there. You can find me on Twitter as well right. There's my handle uh there. The king like get Ops Kingpin there and then Natale.

B

If you want to fall, you'll, always see all three of us talking to each other. So it's.

A

It's it's true. We basically just talked to each other I think. uh Maybe you guys probably talk to each other or other people. More I literally only have a Twitter for this stream and for work. I, don't do a whole lot with it occasionally I. Remember it's there and I try to do something: social, but really I'm, just not a public social media person. um So that's what it is. um Twitter LinkedIn follow um I want to thank you Natalie for coming on, especially because it is again late.

A

I want to thank our viewers, who are so late. I know tell is in Israel we had Pakistan represented today. We had we had the whole globe here today. It was really cool.

C

um The coolest show I told you.

A

um And once again our chat was very active, so thank you folks for keeping the chat active. It makes us smile. uh You could see us in in the replays where we're laughing at things that came up in the chat, we're trying to trying to be polite, but we're laughing at your commentary, so most appreciated um I, don't have anything else. uh As you know it's. This was a perfect stream to to use my usual sign off for because we talked about this uh once again.

A

Folks choose your technical debt, wisely I will say goodbye I'll, let Christian do his thing. I think he's ending the string, I'm hands off keyboard and we'll catch you in two weeks.

B

Yeah we'll catch you two weeks and see if I do it I, do it right all right thanks.

C

Before we close uh I want to say, if you want to try the cookbook example, you can go into our interactive Labs on the portal. I put the link in the chat Christian. So those are the labs available already pre-built made by Christian about how to use article City and opportunity tops, but there's a lab called The overshoot, Playground, it's an it's an empty airplane ship where you can install uh objectives or run all the exercises from the book. If you like to just.

B

Cool look at that we're getting we're even giving you uh um an open shift. Cluster.

C

For you, yeah, we'll.

B

Give you also clusters, yes, sweet awesome, all right so uh so again, thank you. Natale thank.

C

You everyone, it's a pleasure, cheers ciao.

B