SIG-Node, with Dawn Chen - a podcast by Adam Glick and Craig Box

Dawn Chen, TL for SIG-Node and the Google Kubernetes Engine node team, joins Craig and Adam this week. She has worked on containers and container schedulers since 2007 - not a typo. We also bring you the news, in part from the echo chamber of Google Cloud Summit in Sydney.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com


• mail: kubernetespodcast@google.com


• twitter: @kubernetespod

Chatter of the week

• Stickers!


• Google Cloud Summit in Hong Kong


• Google Cloud Next in London


• Gartner Symposium Orlando


• KubeCon Shanghai

News of the week

• NetApp acquires StackPointCloud


• Cloud news:
  
  
  
  • Sandbox pods on GKE
    
    
    
    • Signup form
    
    
    
    
  
  
  • Kubernetes tools for Azure Stack
  
  
  • EKS can generate kubeconfig files!
  
  
  
  


• GSoC: katacontainer support in containerd, by Jian Liu


• linkerd 2.0 is GA
  
  
  
  • Thomas Rampelberg tells you how to use it
  
  
  
  


• Cortex added to the CNCF sandbox


• Red Hat OpenShift Service Mesh, based on Istio


• Microservice observability with Istio at Trulia


• Contour 0.6 from Heptio

Links from the interview

• Dawn Chen on GitHub


• The Borg paper


• Process containers (later ‘cgroups’):
  
  
  
  • The first submission of containers to the Linux kernel
  
  
  • Early coverage of process containers
  
  
  • Paul Menage’s 2007 paper “Adding Generic Process Containers to the Linux Kernel”
  
  
  • Dawn’s first job: tracking processes. Each job had its own GID - she would use netlink connection tracking to map processes and threads to GIDs, and, using procfs, figure out CPU and memory usage.
  
  
  • Dawn’s second job: adjusting CPU usage using nice
  
  
  • Today we just use memcg
  
  
  • Fake NUMA - cut a machine into big chunks and assign them to groups of processes.
  
  
  
  


• Linux Plumbers Conference
  
  
  
  • Tim Hockin’s presentation at the Linux Plumbers Conference in 2011, talking about the work Dawn’s team were doing
  
  
  
  


• lmctfy - Let Me Contain That For You
  
  
  
  • In case you don’t get the joke
  
  
  • It’s like runc and containerd
  
  
  
  


• SIG Node
  
  
  
  • Node and lifecycle management
  
  
  • Application management
  
  
  • Container runtimes and kubelet
  
  
  • Node problem detection
  
  
  • Resource management
  
  
  • GPU & TPU
  
  
  • Security isolation
  
  
  • gVisor and Sandbox Pods
  
  
  • Logging and monitoring
  
  
  
  


• Was SIG Node the first SIG?
  
  
  
  • Tied with SIG API Machinery
  
  
  
  


• How did we get to CRI?
  
  
  
  • rktnetes was released with Kubernetes 1.3
  
  
  • Hyper_ containers (now Kata Containers)
  
  
  • LXC and LXD
  
  
  • kubevirt for running VMs instead of containers
  
  
  • OCI
  
  
  • CRI was released with Kubernetes 1.5
  
  
  • containerd and CRI-O
  
  
  
  


• Container RuntimeHandler, so some pods can run with one runtime and some with another

Further episodes of Kubernetes Podcast from Google

Further podcasts by Adam Glick and Craig Box

Website of Adam Glick and Craig Box