Pivotal Insights

Security for developers has always been…complex. When you re-design for and move your application to the cloud, there's a new set of security concerns to work with. Adib Saikali's working on a book on this topic, and he discusses it with Coté in this episode. It all starts with the basics of security, and goes from there. Check out the book and read along as Adib finishes it over at Manning (https://www.manning.com/books/securing-cloud-applications), and, find him in Twitter: @asaikali (https://twitter.com/asaikali).

Governments run on just as much software as the private sector, sometimes it can seem like even more! Government agencies feel the need to run their processes on software like any other organization and are starting to prioritize custom written software. Like everyone else, people in government feel the need to get better at software. In this episode, Jeremiah Sanders and Igor Steinberg talk with Coté about the motivations for getting better at software, common barriers, and a little bit of how people get over those barriers. Some selected topics discussed: Getting comfortable with “uncertainty” rather than certainty… accepting “failure,” the need to explore. People are stymied by the interpretation of the rules, not the rules themselves. Empowering people to be more cross functional. What compromises do the people on that small team make? Risks.

Developers rely on all sorts of 3rd party frameworks, packages, and projects for their applications. Ensuring that those components are available, secure, and fit into an organizations overall enterprise architecture can be a challenge. Ramya Sarangarajan joins us in this episode to cover how the VMware Marketplace helps out. Check out the VMware Marketplace yourself (https://marketplace.cloud.vmware.com). Also, follow the marketplace in Twitter (https://twitter.com/vmwmarketplace), if you're into that.

Ben Hale talks about one the foundational concepts in the VMware Tanzu Application Platform, application aware platforms.

Hear Alex Barbato and John Kjell of the VMware Tanzu team discuss why it's important, but still challenging, to secure your software supply chain. Importantly, they focus on the process of building secure software rather than buying it, and explain how new offerings such as Tanzu Application Platform can help automate some of the tedium for developers, operators, and security teams. Learn more: VMware Tanzu (https://tanzu.vmware.com/) VMware Tanzu Labs (https://tanzu.vmware.com/labs) Tanzu Application Platform (https://tanzu.vmware.com/application-platform) Improve Your Cybersecurity with a Secure Software Development Supply Chain (https://tanzu.vmware.com/content/blog/improve-your-cybersecurity-secure-software-development-supply-chain) Implementing DevSecOps in a Federal Agency with VMware Tanzu (https://tanzu.vmware.com/content/blog/implementing-devsecops-federal-agency-vmware-tanzu) Modern Least Privilege and DevSecOps (https://octo.vmware.com/modern-least-privilege-and-devsecops/) What Is DevSecOps? (https://tanzu.vmware.com/devsecops) Secure Supply Chain, with Henri van den Bulk (https://www.tanzutalk.com/222) Follow everyone: VMware Tanzu (https://twitter.com/VMwareTanzu) VMware Tanzu Labs (https://twitter.com/VMwareTanzuLabs) Alex Barbato (https://twitter.com/alexbarbato) John Kjell (https://twitter.com/J0hnKjell) Danielle Burrow (https://twitter.com/dburrow11) Derrick Harris (https://twitter.com/derrickharris)

This episode features highlights from every episode so far, including a mix of VMware Tanzu Labs experts and clients. Because of the show's focus, the topics here range from building your first product as a startup to scaling Kubernetes inside a large organization, and cover industries including retail, financial services, and health care.

In this episode, which first aired in September 2020, VMware's Josh Rosso explains when organizations and teams should look at adopting Kubernetes (hint: it's much more accessible than even a couple years ago), as well as some of the tricks to doing it successfully. Rosso spends his days helping large organizations scale Kubernetes environments, so he knows from whence he speaks. Since this episode aired, VMware Tanzu has updated its product lineup and roadmap to improve the developer experience on Kubernetes, while continuing its investment in alternative cloud native platforms for situations where Kubernetes is not the ideal choice. Learn more: * Announcing VMware Tanzu Application Platform: A Better Developer Experience on any Kubernetes (https://tanzu.vmware.com/content/blog/announcing-vmware-tanzu-application-platform) * Introducing Tanzu Application Platform at SpringOne (https://youtu.be/9kD7wa407K4) [video] * VMware Tanzu Application Service: The Best Destination for Mission-Critical Business Apps (https://tanzu.vmware.com/content/blog/vmware-tanzu-application-service-best-mission-critical-business-apps) * VMware Tanzu (https://tanzu.vmware.com/) * VMware Pivotal Labs (https://tanzu.vmware.com/labs) * The Podlets (https://thepodlets.io/) [podcast] * TGIK (https://tgik.io/) [podcast] Follow everyone on Twitter: * VMware Tanzu (https://twitter.com/VMwareTanzu) * VMware Pivotal Labs (https://twitter.com/pivotallabs) * Josh Rosso (https://twitter.com/joshrosso) * Danielle Burrow (https://twitter.com/DBurrow11) * Derrick Harris (https://twitter.com/derrickharris/)

Among other things, the banking world is looking for new revenue and ways to retain customers. Focusing on customer experience is one way to get there. Shifting to a product-centric way of thinking results in dreaming up new types of “features” and even products to offer existing customers and help retain them - maybe even garnering new customers above the humming churn rate. In this episode, Coté talks with Henri van den Bulk about these drivers and some examples of that product-centric thinking in action. Find Henri in Twitter and LinkedIn: https://twitter.com/hmvandenb https://www.linkedin.com/in/hvandenbulk/

In this episode of Cloud & Culture, Shaun Anderson and Brandon Blincoe of VMware Tanzu Labs share lessons they've learned while helping large retail clients modernize their online and in-store operations. Among other things, they discuss the nuances of inventory management, the best strategies for integrating systems after acquisitions, and the potential benefits of running Kubernetes clusters inside stores.

Coté is joined by Bernard Golden and Jesse Bean to talk about how companies they're talking with are thinking through and approaching digital transformation and modernizing their software strategy. Get Coté's new book for free: https://tanzu.vmware.com/content/ebooks/changing-mindsets-the-missing-ingredient-to-digital-transformation?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=bernard

Right now there's no end of possibilities for technology-driven innovation in healthcare. Coté and JT Perry discussed this state in part one of the conversation, and it part two they go over examples of those innovations. First, they discuss what FHIR (in the US) is and how it creates new opportunities for better patient care. Also, discussed: the software development tool-chain for more innovation in healthcare, at-home devices to reduce hospital stays, and API implementation and management. See part one: https://www.youtube.com/watch?v=Dpac46N5qM&list=PLAdzTaneSPRNuA52_34wh5VTBC-0Rz7U JT in Twitter: https://twitter.com/circlejtp

The US healthcare industry will likely see a lot of changes in the next five years - there's already a lot going on with mergers and new services forced by the pandemic. In this episode, fresh from working in the healthcare industry, JT Perry talks with Coté about all that horizon 2 and 3 stuff. The recent introduction of APIs and data interoperability is one of the more interesting topics. This is part one - in part two, we'll discuss the tools and practices companies can use to be part of this innovation. Mentiond: JT Perry in Twitter: https://twitter.com/circlejtp JT Perry in LinkedIn: https://www.linkedin.com/in/jtperry/

In this episode of Cloud & Culture, Shaun Anderson and Felicia Schwartz of VMware Tanzu Labs explain the state of application modernization among financial services firms. They draw from firsthand knowledge working with large customers to explain the threats these firms face, the opportunities they're trying to capture, and how using processes like the Swift methodology helps them maximize their efforts and even evolve their IT culture.

We discuss how Yapı Kredi Bank has been moving their approach to software from a project mindset to a product mindset. Part of this re-organizing around product lines. To do this, the team analyzed their portfolio of 300+ apps and to define the products. As IT has been evolving, they're now working on transforming their relationship with the business side as well. We also discuss building up bi-directional trust between management and staff, banking security and regulations, and so much more. Enjoy! Mentioned: Taylan in Twitter: https://twitter.com/taylanguney Free books, archives, and help bootstrapping your own transformation: http://TanzuTalk.com

DevSecOps alert! Container security alert! Coté talks with Henri van den Bulk about the ideas of a “secure software supply chain.” When you're building, running, and managing your own software, how you secure your software goes all the way back to development - it shifts left! Henri goes what it means do security governance needed in the development phase through deploying to production. We also discuss thinking about “risk management” in security, a sort of obtuse topic for those of us who aren't security-heads. Mentioned: Henri in Linkedin: https://www.linkedin.com/in/hvandenbulk/ Henri in Twitter: https://twitter.com/hmvandenb Get my books for free: https://tanzu.vmware.com/content/cote?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=henridevsecops Book some time with Tanzu Labs who specializes in bootstrapping your culture change: https://tanzu.vmware.com/office-hours?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=henridevsecops

In this episode of Cloud & Culture, Shaun Anderson of VMware Tanzu Labs walks us through the Swift method—a successful approach to application modernization that he helped create. Through a series of exercises, Swift helps teams identify the target behaviors and goals for their applications, and the optimal approach for delivering them.

Coté is joined by Bernard Golden and Jesse Bean to talk about how companies they're talking with are thinking through and approaching digital transformation and modernizing their software strategy. Get Coté's new book for free (https://tanzu.vmware.com/content/ebooks/changing-mindsets-the-missing-ingredient-to-digital-transformation?utm_source=cote&utm_medium=video&utm_campaign=TanzuTalk&utm_content=bernard).

What's the difference between an API Gateway and a Service Mesh? How do they work together? Why would you use either? Christ Sterling joins Rita and Coté to discuss all that. Mentioned: Spring Cloud Gateway: https://tanzu.vmware.com/developer/guides/spring/scg-what-is/ Chris' Ttech debt book: https://www.goodreads.com/book/show/9277805-managing-software-debt RedMonk videos with Chris: https://www.youtube.com/watch?v=wAMpjc3lSqw Chris in Twitter: https://twitter.com/csterwa GitOps for APIs: https://tanzu.vmware.com/developer/tv/tanzu-tuesdays/0052/

Shopify VP of Engineering Farhan Thawar shares his thoughts on a variety of topics related to managing software teams. He discusses fully remote software teams, pair programming, how to innovate within a company of Shopify's scale, and the benefits of engaging with a team like VMware Tanzu Labs (Thawar was at Pivotal Labs until 2015). He's joined by guest hosts Saad Ahmed and Joe Moore of VMware Tanzu Labs, who also offer their perspectives on what they're seeing in the field.

VMware Tanzu's Ajay Patel talks with Rita and Coté about the history of app servers, SOA, and how we got there to our current cloud native stacks. And, Ajay also lays out the what enterprises are asking for in their app and kubernetes stack and the product strategy Tanzu is putting in place to solve those problems. Plus, we walk down BPE Lane. Mentioned: Ajay in Twitter: https://twitter.com/PatelAjayp

Learn more:VMware TanzuVMware Tanzu LabsState Farm18 Months to Migrate 800 Applications: State Farm's Transformation JourneyFollow everyone:VMware TanzuVMware Tanzu LabsDanielle BurrowDerrick Harris

Learn more:VMware TanzuVMware Tanzu LabsVMware Tanzu Data ServicesRunning Persistent Data in Multi-Cloud ArchitecturesAnalytic Workloads from BI to AI with VMware Tanzu GreenplumFollow everyone:VMware TanzuVMware Tanzu LabsDanielle BurrowDerrick Harris

Episode NotesLearn more:VMware TanzuVMware Tanzu LabsRefactor or lift-and-shift: How to prioritize modernization effortsThree Transformations Powering App ModernizationFollow everyone:VMware TanzuVMware Pivotal LabsAdam BohleDanielle BurrowDerrick Harris

Learn more:VMware TanzuVMware Tanzu LabsShould that be a Microservice? Part 5: Failure IsolationVMware Customer Reliability Engineering for KubernetesMaking Chaos Engineering Real for PCF at T-MobileFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsSean KeeryDanielle BurrowDerrick Harris

When Federal people ask to secure a DevOps app creation and delivery process, what do they mean? Chris Willis joins Coté in this episode to answer that question with a #vmwaretanzu customer example: the Tanzu Build Service, buildpacks, Tanzu Application Service (Pivotal Cloud Foundry), and other components. He covers FIPS encryption requirements, STIGs, working with the authorizing official, and the overall practices and culture-think for securing build pipelines.

Episode NotesLearn more:Application Modernization with Tanzu LabsThree Transformations Powering App ModernizationApp Modernization 101: An Executive's Guide to Shipping Better SoftwareThe 1-Factor App: Using Kubernetes to Get a Jumpstart on ModernizationFollow everyone on Twitter:VMware TanzuVMware Tanzu LabsDanielle BurrowDerrick Harris

What's different about the day in the life of a DevOps Platform pro from an infrastructure pro? In speaking with Joe Hoh of Great American Insurance Company it's all about delivering capabilities instead of objects. The work isn't measured by the number of VMs delivered and tickets fulfilled. It's about adding new capabilities to developers and their business use cases. And that is much more rewarding work. What helps? Embracing the reality of change and making rework easier with a platform. With so much base capability automated, the platform team gets more return on spending time with developers, helping them be successful. "A lot of what DevOps is is educating each other." What did Joe bring to his platform role from infrastructure days? Read the full show notes at: https://tanzu.vmware.com/content/podcasts/from-objects-to-capabilities-joe-hoh-on-infrastructure-team-to-platform-team

Learn more:VMware TanzuVMware Pivotal LabsReliability Engineering for HumansA Quick Guide For Getting Up to Speed on SRESRE in 15 MinutesHow RBC adopted SRE culture to help it embrace cloud-native applicationsA Service-Level What?Getting good at messing up, negotiating SRE error budgets, and small talk topicsSLIs and Error Budgets: What These Terms Mean and How They Apply to Your Platform Monitoring StrategyFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsHannah FoxwellDanielle BurrowDerrick Harris

Learn more:VMware TanzuVMware Pivotal LabsPivotal ActA21Building Products with Nonprofits—Lessons Learned from VMware Pivotal ActSystems Thinking with Pivotal Act: A Tool for Every Software ProjectWhat It's Like Helping Nonprofits Develop Software—and What We All Can LearnFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsA21Danielle BurrowDerrick Harris

In this episode, Coté is joined by Rick Clark and Sophie Seiwald to discuss management challenges of remote working. You know the drill: everyone has been working from home since the spring, taking away all the advantages and habits of working face-to-face. What's new in this conversation is some advice for doing strategy communication, something that's especially important when you're relying on autonomous developer teams. We also discuss keeping people's spirits up and making casual conversations with the boss more like running into each other in the hallway instead of an ominous “we need to talk” meeting. https://www.youtube.com/watch?v=YJsnVTLqTM&list=PLAdzTaneSPRNuA52_34wh5VTBC-0Rz7U&index=8&t=425s

"Cloud computing is a risk management exercise" In this episode, Dormain talks with Kevin L. Jackson, author of "Click to Transform," about the business case for cloud computing. Kevin argues that the real value is in delivering products better, faster, and to more people. In many cases this involves a jump from physical products to virtual experiences. But the technology isn't the hard part; shifting to an ecosystem approach is much harder. What about cost savings in the cloud? Kevin points out that cloud computing will cost more if it's not accompanied by a change in operating models. Read the full show notes here https://tanzu.vmware.com/content/podcasts/the-business-case-for-cloud-computing-with-kevin-jackson

What platform operations and “platform as a product” means, how it differs from existing ops, and why it's so. Also, some “therefore, do these things” tactics. Original video: https://www.youtube.com/watch?v=5ROovjWTcng

Episode NotesLearn more:VMware TanzuVMware Pivotal LabsPivotal ActBuilding Products with Nonprofits—Lessons Learned from VMware Pivotal ActDesign-led Solutions for Humanitarian AidFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsEllie EreiraDanielle BurrowDerrick Harris

As the saying goes, before you judge or criticize someone (or a team), you should walk a mile in their shoes. In this week's episode, Dormain sits down with Adam Furtado (Twitter: AdamSFurtado), who recently went from leading product development teams at Kessel Run (a division of the United States Air Force), to walking a mile in the platform teams shoes. What has he learned? Have a listen and read the show notes here: https://tanzu.vmware.com/content/podcasts/sympathy-for-the-platform-team-with-adam-furtado-of-kessel-run

Jorge Castro explains how the kubernetes community works, the different parts, how to get involved, and what developers should know about it. Also, see the interview video: https://youtu.be/c1OVw8Pt7dY

Learn more:VMware TanzuVMware Pivotal LabsResources for Remote Software TeamsGuides and Tips for Remote Agile DevelopmentFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsJoe MoorePaul SullivanDanielle BurrowDerrick Harris

We cover interesting finds from the 2020 survey: popular Spring Frameworks in us, how many apps are containerized, and kubernetes plans.

Learn more:VMware TanzuVMware Pivotal LabsNeed to Kickstart Your Digital Transformation? Start By Changing Your POVAgile: The Way to Develop Great SoftwareWhat Makes a Great Product ManagerFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsDanielle BurrowDerrick Harris

Originally broadcast live: https://www.twitch.tv/videos/748574487?filter=archives&sort=time

Learn more:VMware TanzuVMware Pivotal LabsThe Podlets [podcast]TGIK [podcast]Follow everyone on Twitter:VMware TanzuVMware Pivotal LabsJosh RossoDanielle BurrowDerrick Harris

In this episode, Rick and I discuss something I've been thinking about recently: kubernetes as an enterprise architecture. As we open up with, kubernetes people like to call it an "API," which always seems weirds to me as a former programmer. But, there's something important that they're getting to: a standard set of interfaces, processes, and data formats that comes together to define a programming and operations model. You know: an enterprise architecture. Also, Rick tell us what his weird Twitter handle means.

Sometimes you feel like a microservice, sometimes you feel like a monolith. In this episode, Coté talks with Nate Schutta about his new book Responsible Microservices: when to use them, when to use a service mesh, the (false?) hope of polyglot programming, monolithic shaming, and giant zucchinis.

Learn more:VMware TanzuVMware Pivotal LabsFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsJackie Ros AmableDanielle BurrowDerrick Harris

This year's SpringOne conference is packed with great talks. In this episode, Rita and Coté tell you their picks. Go to SpringOne.io to register and attend for free!

In part one, Rohit showed how to analyze and sort an application portfolio to find apps that should be modernized first. In part two, we discuss the process of breaking down a monolith. It starts by making sure that everyone agrees on goals and objects.

Learn more:VMware TanzuVMware Pivotal LabsAlluceoIntermountain Healthcare Launches New Company, Expanding Access to Proven Mental Health Integration ApproachFollow everyone on Twitter:VMware TanzuVMware Pivotal LabsAlluceoLaurie GomerDanielle BurrowDerrick Harris

This week Coté talks with Jen Handler about two of the sessions she'll be in at the SpringOne conference. They're both on product management walking through some of the key functions product managers do with a few real world examples. They also discuss Nancy Drew, The Hardy Boys, and the Murder She Wrote/Magnum PI cross-over.

Whatever you want to call it, “legacy” software is a problem. In one of our recent surveys, 76% of executives said they are too invested in legacy applications to change how they do software. It can seem hard, but fixing that blocker is possible. As with all things in software, there is no quick fix, it just takes discipline, work, and time. In this episode, Coté talks with VMware Tanzu's Rohit Kelapure who's been working in application modernization for years. He goes over the initial portfolio analysis and thinking that the Pivotal Labs application modernization teams walk customers through. This episode is pretty visual, though audio only works well too. We recorded it in Twitch, which you should subscribe to to start seeing other videos like this. Check out the original recording if you want to see Rohit's most excellent whiteboarded diagrams. https://www.twitch.tv/videos/694237498?t=00h1m00s

With all the attention on application development, it's easy to forget about data. Just as agile, DevOps, and cloud native have changed app development, those improvements have changed the world of data as well. In this episode, Bob Glithero tells us all about it. We also discuss haircutting strategies.

“Taking a course on Kubernetes is helpful, but it's also really helpful to just fail at it." Failing at anything feels uncomfortable. But, as John Paice, a platform reliability engineer at DICK's Sporting Goods points notes, failing at something can be the best way to learn it. In this episode, Dormain talks to John about his journey from a HyperV and vSphere expert to one of the founding members of the DICK's Sporting Goods platform engineering team. Along the way, he's had to learn new scripting languages, get familiar with the differences between cloud providers, and strengthen his Linux know-how. Read the full show notes here: https://tanzu.vmware.com/content/podcasts/making-time-to-fail-in-order-to-learn-john-paice-on-the-journey-from-vsphere-pro-to-devops-pro

Learn more:VMware TanzuAn introduction to event-driven architecture and Apache KafkaLearn the 'whats' and 'whys' of Apache Kafka in 15 minutesThe Main Event: How Event-Driven Architecture Helps Discover Move Faster and Win More Card CustomersScale and velocity are driving the next generation of DevOps'Objection inversion': Why platform ops can create new champions in ITFollow everyone on Twitter:IntersectJames UrquhartDerrick HarrisVMware Tanzu