K8s Maxxing with AI-Native Platform Engineering Stack with OpenChoreo
The episode of DevOps and Docker Talk spotlights OpenChoreo, a new CNCF sandbox project that layers an AI‑native platform‑engineering stack on top of Kubernetes. Originating from WSO2’s internal SaaS offering, the open‑source project aims to turn the Kubernetes API into a higher‑level “agent harness” that developers can interact with through natural‑language prompts and automated agents. OpenChoreo introduces a unified control plane that exposes an MCP API, CLI and web UI, effectively abstracting GitOps tools, storage, observability, authentication and other services behind a single interface. By installing its components on any Kubernetes distribution—EKS, AKS, Rancher, etc.—organizations can retain their existing clusters while gaining a consistent developer experience and policy‑driven orchestration across data, workflow and observability planes. The hosts quote the WSO2 team, noting the project’s lineage mirrors Docker’s birth when a SaaS company released a core infrastructure tool as open source. They describe the control plane as “a control plane on top of the control plane,” emphasizing its role in consolidating governance and providing a “single pane of glass” for both human operators and AI agents. If adopted, OpenChoreo could reduce the learning curve for platform engineers, accelerate AI‑assisted operations, and create a vendor‑agnostic ecosystem that leverages existing CNCF projects. Its sandbox status signals maturity while inviting community scrutiny, positioning it as a potential catalyst for the next wave of AI‑driven cloud‑native tooling.
K8s Maxxing with AI-Native Platform Engineering Stack with OpenChoreo
The discussion introduced OpenChoreo, an AI‑native platform‑engineering stack that has recently entered the CNCF sandbox. Originating from WSO2’s SaaS offering, the project was open‑sourced to become a modular control plane that can be installed on any Kubernetes distribution, from vanilla...
Defending GitHub Actions: Security Analysis with GASA
The video introduces GASA (GitHub Actions Security Analyzer), a Go‑based utility that audits GitHub Actions configurations across repositories. Its primary goal is to surface insecure admin settings—such as permissive pull‑request‑target events, missing hash pinning, and overly broad workflow permissions—so teams...
Docker Hardened Images
Hardened Docker images are minimal container images curated to reduce attack surface by including only the runtime and essential files required to run an application. Unlike typical images that bundle package managers and shells, hardened variants may omit npm, Yarn...
On Stream: Agent Sandboxes
The video dives into the emerging practice of sandboxing AI‑driven agent harnesses—tools like Claude, Copilot, and other terminal‑based assistants. By confining these agents to isolated environments, developers can control file system and network permissions, preventing rogue actions such as unwanted...
AI SREs, Chat With Your Infrastructure with Anyshift
The Agentic DevOps podcast introduced Anyshift.io, a startup delivering an AI‑powered Site Reliability Engineer (SRE) platform that lets engineers converse with their infrastructure. By aggregating read‑only keys from cloud providers, GitHub repositories, monitoring and logging services, Anyshift creates a persistent,...
Can AI Agents Safely Become DevOps Engineers? - Sam Alba of Mendral
The podcast explores Mendral’s AI‑powered DevOps engineer, a tool designed to act like a junior DevOps professional by continuously scanning GitHub Actions, fixing flaky tests, and streamlining CI pipelines. Co‑founder Sam Alba explains that the platform ingests logs, workflow events,...
Favorite Agent Setups with Brian Christner
The episode of the Agentic DevOps podcast features Bret interviewing Brian Christner, a Docker Captain and head of engineering for a major Swiss online casino. They explore current AI agent frameworks, focusing on OpenClaw, its successor NanoClaw, and the broader...
On Stream: AI SREs, Chat with Your Infrastructure: Anyshift
Anyshift co‑founders Roxane Fischer and Stephane Jourdan joined Bret Fisher to unveil an always‑on AI‑powered Site Reliability Engineering (SRE) agent. The agent continuously monitors infrastructure, using machine‑learning models to surface emerging risks before they trigger outages. Integration is streamlined through...
Four Months Felt Like Four Years - Agentic DevOps Podcast
The Agentic DevOps podcast returns for a season‑two kickoff, focusing on how generative AI—especially the latest Claude Opus, Sonnet, and Gemini models—has reshaped software delivery and amplified shadow‑IT concerns. Hosts Brett Fischer and Nurmal Ma reflect on the rapid evolution...