Hello, Paul Aswany here from Enterprise Strategy Group.
I'm joined by Melinda and John and we're here to talk about
KubeCon and cloud native con North America. This is the CNCS
flagship conference for adopting technologists for open source
and cloud native communities across the industry. But when we
talked about the the keynote, and we talked about the themes
of the event, Gen AI modernization, containerization,
sustainability, security, edge computing and platform
engineering are really the key themes that the organizations
that we're talking about throughout the entire event. So
Melinda, I'd like to transition over to you and what are your
thoughts about cybersecurity? Yeah, and I just will play on
that theme of Gen AI was a really big theme for the
keynotes, they highlighted how cloud native is really the
scaffolding of the AI movement. All the players are building on
are helped by Kubernetes, open AI, hugging face and video.
They're all built on Kubernetes. And the key theme overall is how
do you apply more automation to move faster. And this
cybersecurity implication that's exciting is how to use AI to get
the right answers without needing as much time and helping
with that efficiency. The show in general is impressed with the
customers in the community. So you have vendors with developers
working on open source projects and contributing. And then you
have end users who are using Kubernetes, Kubernetes. And
cloud native tools and technologies like Boeing
discovery, discover these huge brands, Volvo Spotify,
BlackRock, there's an emphasis on how you can build security
into the infrastructure. And that's really what's exciting to
me is you can build these clusters, they're auto updated.
They're auto scaling, they're all patching without the
developers having to do things. They're enabling distributed
tracing, and services. And that is really important for building
security and reliability into everything that you do combining
controls and policies to have that control while enabling
scale. And I also wanted to mention software supply chain
security. Of course, this is a big part of the community
efforts. So they had some executive changes with open SSF.
They have OSS experts, but they're really looking for
security people, right. They have operations people, they
have software developers, that they really want security people
more involved. So security teams, everybody get more
involved in and track these projects. They also want to
partner with regulators. So they're meeting with the White
House, they're meeting with Sisa, and NIST, all these really
important groups to make sure that software supply chains are
and the software and all the components open source and the
software components are secure. So you know, a lot of great
announcements to help developers develop safe and secure. Yeah,
from an observability standpoint, there were two main
stories at the show. The first was simply open telemetry. And
that standard, which allows for a common tooling base for
instrumenting, cloud native applications so that the
telemetry data, it comes out in a standard format, since most of
our clients use 10 1215, different observability tools in
order to get a you know, a view of the full stack, having a
standard way of delivering that data for all of the various
flavors of things will solve a major major problem. So that was
a big story. The second big story is around e BPF. And some
of the things the extended Berkeley packet filtering the
ability to tap into the Linux kernel to get telemetry data
about your application. I saw perhaps 30 Different
applications of ebp f being applied to things like cost
management, being able to look at CPU usage time, being able to
take that information, pairing it up with publicly available
energy and carbon output from power companies to be able to
get a more accurate view of what is the environmental footprint,
what's the electric usage was the carbon footprint of my
specific micro service. So you know, getting that level of
granularity was pretty amazing. And then I saw some additional
work with Kepler, which is based on ebpf, which specifically
collects energy and information that is important for green
software initiatives. So we got this brand new bit of
visibility, that should make observability much more
powerful, much more easy to use, and give a much more complete
view, not just of application and micro services performance,
but of impact of those activities. So I came away from
the show, really excited about you know, hey, we've actually
got the tools to solve more or less existential problems.
And it's great to see that, you know, software is able to do
that, that software developers can make a massive impact on the
environmental footprint. And so, you know, again, just super
happy about what I saw. And I definitely am looking forward to
the future in the CN CF. Thanks, Shawn. That was really
insightful. And when we talk about observability, we talk
about the context of how developers and platform
engineering is working right. When we look at the
modernization effort, we see that there was improvements at
this event, all throughout the the CI CD pipeline, right from
build to to release to operations, Day Zero, day one,
day two, we saw that the theme was heavily focused around
platform engineering, there wasn't a vendor out there that
wasn't talking about platform engineering, and how developers
and DevOps can work better together with the platform
engineering teams make it all work. I love how it ties into
cybersecurity, too, because when you can tie that all in together
and operationalize these things, you get more of that efficiency,
right? Absolutely, absolutely. I think what was once said by by
an analyst, it's if you go slower, you actually go faster.
So that's kind of the the approach of looking at security.
So I think your your key there Melinda with that. But the key
themes that they they really focused on that I was my
takeaway was around that migration and modernization
efforts, we were seeing that in our own research, we see that
88% of production applications, new production applications are
running on containerization, and microservices. While we also
don't want to forget the context around edge computing, because
that was a key area of focus as well. Portability, and
application portability was very key. And then the other factor
is Gen AI and AI, right, we saw that Gen AI is was was touched
on everything right. But specifically with our research,
we're seeing from a developer perspective, 51% of respondents
indicate that they're using Gen AI to generate code. And 45% of
respondents are using the that Gen AI to improve code. And I
have to also bring up WebAssembly, because WebAssembly
is kind of a key focus for that future state of where
organizations are going. And it's not surprising as we see
39% of respondents are using web assembly today, in their in
their organizations for that cloud native approach. So lots
to talk about here. Lots of think about, we only touched on
some of the highlights from the event. And there's definitely a
lot more to consider and talk about. So reach out to us here
or talk to us on social and we'll continue the conversation
and discussion. And with that. Thank you and have a great day.