Ah! It was a dark magic, I don't know. Is it the same? Hello everybody and welcome back to Hungry Shark World. Yes, we have a new shark in the game. And thanks to EFGOL for allowing me to showcase this shark. So what kind of shark, a special shark? Do we have special sharks in this guy? I don't even think we do. But it is a new, better shark than the robot shark, which was the last one we got. It is, in fact, the dark magic shark. This shark's beam can melt the moon. Just a little humble brag there, you know? That's how it is. So we're gonna unlock it. This double exclamation mark shark stores damage, it takes and shoots it back as a bolt of magic energy. Something we haven't really seen. So there we go, that cost me 1,500 gems. Take me down to 500, but hey-ho, there we go. And there you go, a shoot rate that can devour everything. Oh, the beam can. Ah! So, oh, it has a skin as well. Oh, it has 500, oh. New skin, all starts maxed, saving you 95%. We can get all the starts maxed. I kind of just wanna try it first and then feel the difference. Okay, let's give it, let's give it a test run. What I will do however, is just equip all of the stuff, the laser, the force field shield, chip, max, fail. Can we have another one? No, we can't, we can only have three. Wow, I did not know. And we go to, can we put on like a type of costume? Oh, is there, like if I clicked on one. The best one is always, always, always, always the king. Although, should we go for a belly dancer set? Can we not like click on that and then, oh, I have to buy, oh, I'll buy, I'll buy them all. There we go, we're a half-burny dancer. You see, it goes, it goes with the purple. So, let's do this. Arabian Sea's a good one. I do like Arabian Sea, Arctic Ocean's also a good one.  We're gonna do the Arabian Sea, because Arabian Sea is the best. So, it looks as though the eye beam fires from the eye.  Okay, well, there we are. Oh my God, ooh, we are slow, aren't we? Oh, for what I'm used to, okay, well, let's fire the laser beams into the whales that, yeah, they spawn around about here. We're already on 2 million, that was fast, wasn't it? Ho, ho, ho, ho! Yum, yum, yum, yum, yum, yes. Come on, keep going, yes. Look at all that gold. Oh, oh, oh, can I use it now? Oh, I've got my eye beam already. Oh, did I take damage? I don't even know I took damage. Well, we're on 4 million and it hasn't even been a minute. Oh my God, so when you're in Gold Rush, you get the laser beam, but also when you're out in the ocean, taking up damage from mines and all that jazz, you can also activate yourself like mine, you're like this, yaw! Oh my God, we're on 12, wow, 12 million in a minute, what? That's crazy, what is this? We're gonna be on Gold Rush again. Okay, is it just me or are we getting like a crazy high score here? Why didn't I, why didn't I start? Why didn't I start with like everything maxed out? Oh, we could be on, not even, no, we could be on something crazy right now, and we're already on something crazy, we could be on a new level of crazy, I think, is the, the mount on isn't there? That's okay, we're gonna go over here because maybe if we can get just at the right, oh, there it is, and we don't have, I haven't got enough for the laser just yet, but 18 million, whoop, but a laser beam, oh, you see that tear through, oh, this is awesome. You know, this means, it means that we can time it so we can go through like the red jellies or a huge minefield as long as we have that ability. Okay, let's try that, let's try that, let's go somewhere that, yeah, like, what, yeah, there we go, that kind of worked. Oh, we're in Gold Rush, oh wow, so you use that, you pretty much go into Gold Rush Row and you can eat the red jellies.  Am I getting that mixed up? Maybe, quite possibly, wow, 23 million, two minutes, and of course, getting the gyms, so if we take damage from the jellies, oh, God, the health, oh my God, just like that, it's over, wow, okay, well, they have it, short and sweet, so, and of course, when we level up, how many health was that, 12, 13, okay, and we only went up two levels there, amazing, but you know, we max, so we get more health, so how about we spend the remainder of the gems on that new costume, I don't even know what the costume gives us, actually, so we're faster, we got bigger bite radius, and we've got a longer boost, so, and unfortunately, I've ran out of the Mega Rush, unstoppable, we've got to have the magnet, we've got to have that, ooh, boost banana and some wingpets, ooh, they've changed some of this, booby trap, point, oh, I've only got one of those, I can't use these, I've only got one of each of them, I can't do that, they're rare, ooh, what should we go for, guys, the jelly eater, unstoppable, what is that, smash through any obstacle without slowing down, and don't get knocked back by explosions, even the boss squid, that's good for the boss squid, you know what, should we do, well, you know what we'll buy, ooh, 80, ooh, let's buy five, we'll use all our gems, right, okay, we're gonna do this properly, we're gonna need the king set, because the king set is still pretty much the, actually, ooh, we do have a warrior, look at that, Gold Rush lasts, not 30%, 35%, hmm, is it better than the royal, I don't think it is, I'm afraid, equip the set, 25% Gold Rush, 20% Gold, 50% Gold, and 12% Gold, well, we need that growth, we're gonna need that growth, so we're gonna start being Mega Rush, quickly go over to the whales, and let's even get 12 million in one minute, or was it six million, either way, whoa, that's the speed I'm talking, that's the speed I'm talking about, let's go, let's go over this way, destroy the whales, Gold Rush should last a little bit longer, oh, there you go, there's a destroyed one, destroy all these, get to the great white sharks, it's six million we got to last time, I think it could be, well, it's a roundabout the same, we haven't got our amazing times of bonus, but there's a lot of tuna to get that up with, yes, yes, yes, and we going, oh no, dammit, lasers, lasers, there you go, beautiful, oh, yep, they're lasered the submarines, awesome, and I can't, we've got a little, what do you call it, a little map at the side there, so it's just, oh, that's so satisfying, because submarines, I wonder if we can destroy the big submarines in one hit, that would be awesome, the lasers, well, like a big Godzilla shark, let's go over here, go eat all of these, yep, 12 million, that's a roundabout right, 12 million within a minute, I think it was, we'll just laser again, the really good thing is, you actually get the reach with this laser, so if you're about to run out of a times bonus, or you're gonna lose at times 12, and you really just need to get it, you can just use your eye lasers, and you can reach something, or just, you know, spin around aimlessly, like this, and just shoot all of the mines, and get an amazing times bonus, ooh, treasure, so 16 million, ooh, so it's a really good shark, only downside is that it's pretty slow, and very fragile, so there we did get the mega, I don't think that was for a crazy times bonus though, let's go in here, ooh, a submarine, very good, very good, I don't think we have our, ooh, another megalodon, ooh, did we get it, times 12, there we go, 18, just gotta smash all of these, we could eat the big jellyfish, how close are we for a mega rush though? I mean, oh, there you go, whatever that was, times two, I don't think, oh, there we are, we're another gold rush, and we're about to be on another mega rush, so what I'm gonna do, I'm not gonna go left here, I'm gonna go straight up, because I just wanna make sure I can eat as many things as possible, and there's a lot over here, you know what, I might as well, yeah, there we go, just, oh, look at them all just being lasered, yo, we're already gonna lose the time, 96, oh, are we, because we have that reach, we didn't, okay, so we're gonna go up now, there we go, oh, look at that, this would be amazing in the south, oh god, that wasn't so good, I thought I had the force field shield, but it should have protected me, lasers, there we go, not bad, not bad, just wait till we get our boost back, oh, Jesus, well, we need Trevor, that's what we need, there we go, laser, oh, it's not looking too good, is it, there should be loads of great white sharks, if not a huge whale like that, there we go, laser the great whites, what we're gonna do now is we're gonna fly over 35 million, not bad, not an amazing score, but not bad either, saying that it has only been three minutes, remember that, easy to forget, oh, we've also got our garbage compactor, oh, thank you, laser those jellies, get rid of them, doesn't really matter, because they come back by the time we're back here, oh, I like how the laser actually depicts a different color, so it shows a different color if we're in Gold Rush, that's really helpful, magic shock, magic shock, fires, lasers, just because it can, avoids a mine, eats a fish, oh my God, it makes a wish, look out, James really cannot sing, whoa, what'd you guess, oh no, oh no, the health, the health, the health, the health, oh my God, no, I spent so much on you, oh fine, then one, one gem, that's all you have worth, oh, oh, hold on, every time, wait, I get mega rush every time I do it, oh, that was the cheapest mega rush in history, let's keep doing this, all right, okay, let's go down here, because we didn't go that way, there may be another megalodon, is there a megalodon, I don't know, because we probably shot it even before it could render, go here, destroy that, oh, we're still growing, so we're still getting health, that's good, good to know, whoosh, now we gotta be skillful here, I can't rely on my laser beam all the time, let's go, I should say laser, laser, 18th, very good, almost times 96, there we go, the biggest multiplier, let's go in here, laser please, I don't have my laser, that's not so good, so when I eat things, I get lasers, yeah, there we go, times 12 for those guys, and we're on time, we're on our gold rush, this is good, this is good, this is good, right, come on, come on, keep going, there's, there's, there's, there's, and get the treasure, extra gold, mula, and another gold, that's four out of five, gotta be careful here, Trevor would be so helpful, although he does set off the mines, which in turn I think do damage you if you're close, so gotta be careful that it'll back off, oh, whoa, okay, this is the most satisfying bit, do I, do I kill, oh, I kill, the helicopter's in one hit, whoa, oh, that is so good, like the helicopters are the worst, usually unless you're in a gold rush, you can't kill them instantly, and the laser's on, there we go, fire the lasers, gotta get that old meme in there, whoa, you can just like, fly and get that, wow, oh, apparently I didn't get all of those, okay, yeah, get the jellies, very good, very good, there's a megalodon, we're not gonna get gold rush, but I could laser, that's even better, because I think if we get a time's bonus just for lasering, woohoo, although we did not get to a gold rush, not so good, oh, those puffer fish, I think they may have been, hard to tell, oh, oh, oh, oh, laser's my out, I've got my own robot fish firing a laser, tell you what, let's go up here, let's eat, oh, yes, the gold magnet comes through, oh, what about my high score, if I can survive long enough, I think I could very easily beat my high score here, very easily, I just need to survive, I need to be clever, I need to think, think of my feet, be the shark James, be the shark, I've gotta get, I've gotta get big as well actually, we're grown, that's more health, I think that does count when you level up in that same life, I think it does, okay, let's go down, because we didn't go down this way, no, it's not there, it's not there, okay, okay, it could be, it could even be up here, it's possible, oh, there's a lot of gem fish, lots of gem fish, oh, come on, make a rush, laser, get the multiply motors, make a lot, yes, contest four, oh, we're almost in gold rush, we're almost in gold rush, and health doesn't look like it's going down, we'll save our, oh, that crab still falls through the ground, there, he's been there for years, perpetually falling, oh, there's no, no submarine here, I see, so let's have a look, oh, wow, where am I getting these, oh, oh, okay, so that's where all the mines are with the R, the Y is where I thought, I thought I looked there, and that's it, okay, so the N is by the golf course, okay, I can get those, I can get those, oh, we're gonna need the laser, oh, there we go, luckily we caught a megalodon, not mean for that to happen, okay, right, now just for the sake of not killing myself on another run, I am just gonna go the course, I'm gonna stay it, destroy this huge whale, whale boom, oh, no, oh, no, oh, no, oh, lasers please, but we're gonna go this way, here we go, here we go, making our way, making our way down, down, oh, oh, this is gonna be, oh god, oh god, steady, steady, steady, yep, there we go, we did it, we did it, yeah, there's the R, lasers, woo, okay, we're gonna go straight up, get the other letter, which should be hiding around, there it is, and then the other one, where is it, it's by the, it's by here, isn't it, it's by this whale, oh god, yeah, there it is, and we have you, we're gonna be the biggest black magic shark ever, ah, there's a dark magic, I don't know, is it the same, I'm not into voodoo, oh god, oh, come on, come on, oh, fly up, you big buffoon, we are the biggest losers, I'm like Godzilla with me laser breath, the atomic breath, let's go over this way, oh, slow mo, we never get slow mo, and there we go, I never do that volleyball challenge, the beach ball challenge, that'd be terrible, oh, we got a Y already, why did we get it, because we're good, oh god times 12, no, lost it, lost it, wow, that times multiply does not stay on long for this shark, does it, lasers again, just quickly in and out, in and out, come on, let's boost, let's boost, we're gonna die, we're probably gonna die, fire please, change, change, thank you, come on lasers, anything, lasers, yes, oh my god, this is the longest I have not a gold rush for, there it is, good, good, good, okay, gold rush, into the Megadon, has it spawned, ah, I don't need like spawns once, okay, submarine, have you respawned, I don't need to get the submarine respawned, that was a terrible gold rush, into a mine, lovely, but if we can just fire a little bit longer, we got a mega rush, that's what's important, make it for the mega rush, survive, be strong for mother, come on, we can do this, there we go, so I think, although it's not come up, so I could have been wrong, but we survived, that's the important thing, make it in just one more day, that's what you gotta think, one more day, get back there, beat it all, yes, yes, there we go, now we got it, we survived, now we've reaped the reward, oh, we've got to at least get 100 million with this guy, right, we've at least got to, okay, nine million, that's not a big ask really, nine million, well let's go this way, there we go, that's like a million, that's definitely a million already, okay, there we go, destroy the helicopter, because that's worth a bunch, now we go in the sky, can I just, do I just end up destroying drones and planes, I think we do, oh, there it is, whoa, you get so many for killing those guys, that's awesome, the mini beam, I like to call it my mini beam, oh, super slow, oh, into there, the gold beam, it'd be so cool if it was from the marxist, but I think the Godzilla from Hungry Shark Evolution does that, oh, into the, oh, it's just like the real ocean, there's nothing there, am I making a good, oh no, I'm not making a good idea, where is Trevor? There we go, whoa, that was so close, okay, right, there's gotta be a Megadon here, there's usually, oh, there he was, I think, could have been a great one, but 105 million, pretty darn good, and another laser, I think, apparently it's firing, I can't see it though, whoop, I haven't been through here, so this is good, there we go, another little mini laser, into a gold laser, good, good, good, we'll go this way, just in case there is some letters over here, there isn't, we're flying, we seem to go fast if we fly, is that it, I don't know, is that sound of music, God knows, could be Mary Poppins for all I know, I'm a terrible Englishman, lasers, good, there's mine, that's so good, lasers again, just gotta kill a few mackerel that's there, we're almost on a gold rush, come on, get something, come on gold, yep, there we go, I wanted to get that, so I could go through this way, cause I might be allowed to, oh my God, there is nothing, okay, I've gotta go find them, they're just not where I think they're gonna be, what is this madness, how about here, ah, you thought you were safe behind your diamond wall, what is this, Minecraft, can say that now, I played Minecraft, woohoo, go me, avoid the mine, oh, we learned, but we didn't, we got times eight, that should be, yep, there it is, there it is, gold rush again, 150 million, we didn't think we'd make it this far, but we're doing it, there could be one down here, we're going to places we haven't been in a while, no, you can't be out of power, let's keep going, oh, look and navigate the mines, oh, almost like a boss, except we went head first into that one, lasers, lasers, apprentice, oh my God, dying, come on, something, anything, anything, not a mine, not request a mine, oh, lasers for the submarines, lasers for the submarines, there we go, there we go, now did I go this way, did I go this way, since we've grown, I'm gonna say yes, I'm gonna say there's no letter then, in fact, we can just quickly check, I've only got one letter, okay, right, okay, that's there, use there, oh, are you both up here, you little buggy, you're out, we're there, okay, well, let's do it, let's do it, let's get one more hungry before we die, and if we do die, it's only two gems, and I'm pretty sure I've made that back, it's investments, and there you go, I've made loads more gems, I was on 20, I got 15, right, all right, let's do this, let's destroy the helicopter because he's worth a pretty penny, the federal government's gonna hate me, screw you and your copper rules, I just wanna make fun content, oh, all right, all right, let's go, oh, we're done to put that guy down, he dropped, like he was made out of lead, all right, okay, we need to fly straight down, swim straight down, I should say, well, go on, keep going, keep going, keep going, keep going, there we go, give me, give me the you, all right, okay, oh, we got loads of fish here, we can definitely get into another gold rush, oh my God guys, I didn't expect to be living this long, I'm doing good, all right, there's the whale, whale's gone, and off we go to get the other letters, brought you down, brought, got you, okay, where was the last one, I forgot where the last one was, did I go, oh no, it went through, I did collect it, didn't I, please tell me I got it, did I, he's not still over there, is he, no, he's not over there, where's the other one, wait, what, I just never went down, are you kidding me, oh, that's really interesting, I thought I would've, oh God, the lantern fish, they bite, they bite so hard, they got huge teeth, we got this though, we got this, this is serious, game face guys, game face, stick with the plan, stick with the program, oh, we're entering dangerous town, oh, I was being alive by great white, oh, this isn't good, lasers, lasers, there please, oh, we're in starving, we're getting like a bonus for starving, oh, did we get more, oh, I didn't even realize I had that activated, fantastic, well then, we're gonna do it this time, we're gonna come out, well let's see if we get Megadon first, Megadon, Megadon, Megadon, yo, got him, got him, I just saw his points there, so come out here, and then we go down, oh, nope, too early, too early, let's go this way, I like how the turtles have a little red glow coming out of them, which is really handy, because turtles give you boosts, it was just sort of something you picked up as you play, and we're huge, yes, lasers, blah, hi beams, there we go, and more lasers, man, that's just physical lasers, manual lasers, sorry, oh, although we are in another gold rush, we're still really big, we're 150 odd million, whoa, well this shot, it's like, I really like shots when they just give you a new way of playing like this, so, oh my god, there's nobody here anymore, whoop, oh and because of the lasers, you can actually come out of that area, and still be pretty good, there we go, look at that, even more laser, invisible lasers, we need to visit Beaver's belly, that's what we need to do, we'll do it for that, we've definitely maxed this shark out, we can't not have, right, we've got loads more health now, like 20, I don't know what that means, is 20 like a bull shark, what does 20 mean, F goal, we need some sort of graph, you can tell me I've got 320 health, but I have no idea what that means, 320 life points, oh yes, just fire the laser everywhere, that's pretty much what you gotta do, so we're gonna go over, but not all the way, we're gonna get all the workers because they give you loads of points, yeah, look at that, ah, laser beams, whoa, oh and if you, because I've got that, you know when I'm on low health I get loads of points, if I use my laser beam and wait till I've got low health, if I get, you know, and if I did that on something like the megalodon, would I get like a crazy amount of points, or the heli, oh no, I died, no, what we gotta do, one more, we got two gems, come on, we've got like 50 gems from this run, and once we've done this, our next gold rush is another mega rush, oh yeah, so let's even get 200 million, shall we guys, let's do this, like a challenge, and let's go up this way, whoo, there's just a lot of notes, okay, well let's keep the laser going, keep the laser going, it's not the most powerful laser, but do, he's not here, oh dear, oh but there it is, or is that, does that count, I'm not too sure, I don't think that counts as a mega rush actually, damn, well we're probably not gonna get 200 million, I'm not gonna lie, we're probably not gonna get 200 million, but you never know, life's full of twists and turns, go this way, oh, lasers, you don't, if you see a shark like this in real life, stay away from it, you'll be vaporized and turned into points, oh that's so satisfying, you get big clumps of things, whoo, pink jellies please save me, whoo, life fading, life flashing before me own eyes, lasers, that's right, you thought you could stop me didn't you, you thought you could stop us, nobody stops the magic shark, let's go out, come on, go first, protect me, stop me from starving, thank you, let's go left, there's always threshes here, do threshes whip you with a tail, in this game I mean not in real life, oh god, oh my god I'm stuck, oh there's the one, I thought there would be a way, whoa, we've almost got everything, oh there you go, there it goes, really should stop coming here, but there might be a ladder here, all right, three, hungry rushes, where is it, where's that last one, is it on this, where is it, oh no, if I just turn around that way I would be on it, ah damn, okay, oh we've levelled up again, right, we're just gonna make our way over there to get hungry, in fact actually there's loads of stuff here, sod it, let's just kill all this, kill the submarines, kill the mines, kill the great whites at the bottom left, you know what, we'll end it there, we'll end it there, 170, I like, did we, I don't think we did, we did really well, but we were levelling up right until the end, so the next time that we play as this shark, we've got even more health, oh we're getting two each time, oh one, maybe you got 1.5 or something, cause see there you go, you got like four, oh sorry two, oh there's another two, ah look at that, we're getting so much more health, so we start with like 200, was it 210, so you think about that, we're getting like a 10% health increase, so that's a lot, still I don't know what 230 means, oh 241, that's 20% health increase, oh there we go so we've still got another 11 levels to get, and on that run we got 197 gold, 197,000 I should say, but really who cares, at this point who cares about gold, but my highest score I think is 100s, wait, I didn't even check, damn it, but if you enjoyed this video and you're hyped for the dark magic shark again, thank you for Lydia, not Lydia, oh my God, so sorry, F goal, for allowing me to showcase this, if I can even talk, showcase these shark early, if you enjoyed this video leave a like and until next time I'll see you later, oh bye bye.


Alright, hi everyone. Welcome to the OpenShift roadmap update for 2021. Thank you for joining us in OpenShift Commons. I am Rob Somsky. I'm joined here with Michael Elder. You want to say hey? Hey everybody. And today we're going to talk about what's going on in the OpenShift universe for this year. We're also joined by Jamie and Nina who are going to pop in and out and give us some demos of some cool stuff while we talk about that universe. So I want to roughly set up our conversation to be around something that we just announced in May of this year, which is OpenShift Platform Plus. And that really is bringing the OpenShift platform up a letter into the multi-cluster arena, realizing that you need multi-cluster security, you need a global registry, and you need multi-cluster management to be successful in today's hybrid cloud world. And so we're not going to focus on the actual product today, but we're going to talk about all the different pieces of that, what's going on in those upstream communities, and some cool features along the way. So I want to talk about this idea of standardized tools, because you're not just running one or two clusters, but you're going to run maybe 100 clusters. And getting tools and policy and management down to those clusters is extremely important, because today's applications are spread and more distributed than ever, clusters are more connected than ever, and that means that you've got to get that fabric orchestrated correctly. So we're going to talk about all this stuff, some of the tools that are available upstream in both Kubernetes and other ecosystems, so it should be a pretty interesting day. And you're going to see these two icons as we go through this parachute guide, that's when we're going to zoom all the way down into a single cluster, because you know, what's happening on a disk of an operating system or a policy that makes its way all the way down into the nitty gritty is just as important as zooming all the way up back into that multi-cluster world with this rocket ship. And you know, the work that we do for fast packets for maybe like a telco workload is beneficial to your application, even if you really are up at the multi-cluster layer. So you got to build all these capabilities up, and they're all important up and down. So let's jump into it. Security, what's happening upstream? Two main things. First, with the version 1.21 of Kubernetes pod security policies are deprecated. Now, this doesn't mean that they're going to be removed yet. I think that's going to happen in 1.25. But a few things to note here, the replacement for this is probably going to be a little bit more simple than what you've been used to. And so complex users might like some of the features of the open policy agent. We're going to talk about how that fits into some of our tools later today. And you can run that today on OpenShift just fine. And then, of course, OpenShift SCC, that's a security context constraint, are unaffected by this. This is kind of what pod security policies were modeled after in the beginning. So we kind of had your back before. We got your back now, and we'll have your back in the future too. So one of the cool parts about innovating inside of OpenShift directly. The last big change is user namespaces. This is kind of a kernel level construct that's made its way into Linux. And together with SC Linux, that helps protect your namespaces from each other on the cluster. Now, I don't want to get into too many of the technical specifics, but in the CRI, which is the run time interface for Kube, this is now there. And so this is the default for talking to run times. And with Cryo, what we use in OpenShift can do the user ID mapping in and out of the container, which is what actually is doing that user namespacing. So we're waiting on Kubernetes to roll that out, and then that's going to make its way down into OpenShift as well. So the proposal there, the KEP and upstream parlance is still moving forward. Some of our engineers are pushing that, so that's one to take a look at when that comes down. All right, another big news in kind of the upstream arena and Red Hat world is advanced cluster security. This is based on our acquisition of StackRocks. We're super excited to have these folks join the Red Hat family and build this into OpenShift and OpenShift Platform Plus. So we're starting the open source process right now for all the StackRocks tools. And we're really excited about this because it's the most Kubernetes native security product out there. We're going to talk about some of the cool features and see a quick demo of it in action. But it really talks about this idea that you've got to secure your entire supply chain from this shift left into where you're actually building code and building containers into when they're actually deployed and then actually after they're running, malicious things can still happen, even if you pass a container scan, for example. And so what this does is it has a combination of watching host and cluster state. There's some cool technologies if you've heard of EBPF. This is kind of the Swiss Army knife of doing some like host probing into what the kernel is doing. So we take advantage of that plus at the Kube layer admission controllers looking at the audit log and some other cluster events as well as your typical image scanning. So we're going to see a really cool demo of that in a second. So let's parachute on down. What does this look like in a single cluster? So I talked about runtime security as one part of your kind of threat matrix here, and this is a new capability for OpenShift, completely new. And what this looks like is, you know, let's say we've got a pod and it's got Python in it, and we've got an application, and there's a vulnerability that gives you some local execution rights inside of that pod. You know, if you're going to move left and right around in this environment, what you need to do is have some tools. So you might pull down a Netcat binary and then start using it to wreak havoc.  And an EBPF probe by a security sensor that's installed is actually going to block that pod from executing that Netcat. So this, you know, means that, A, that binary can't be run if it matches your policy, but it's also going to protect network traffic moving left and right as somebody wants to exploit other applications that might be on this environment. And so we're going to look at a demo and so I'm going to hand it over to Jamie for more. Ad team, welcome to Red Hat Advanced Cluster Security or as we call it, ACS.  It ranges from reconnaissance, which is understanding your victim and the system architecture and what you're doing when you're trying to attack based on your objectives. In the world of security, there's always a reason for an attack. The reason can be anything from denial of service, dealing data, installing crypto miners for a financial gain, or really just because you can. The US Consul of Economic Advisers estimated that in 2018 that malicious cyber activity cost the US economy between 57 billion and 109 billion in 2016. Since 2016, it's only increased. So let's think about this in terms of an onion or defense in depth. Security should always have layers to it. There are many spots to spot attackers along each part of the kill chain. Today, we're going to focus on reconnaissance through exploitation.  We're going to find out everything we need to know about the application to start to exploit it. Then we're going to search for vulnerabilities to weaponize, create a back door and deliver our exploit to get it up and running. The attackers afterwards will frequently look to establish a foothold in their position by installing malware, attempting to escalate privileges and establishing a command and control server. So this is ultimately going to get them to the core objective, which can really vary based on their needs. Containerization as a movement has really helped the security team. Containerization is just isolated our attack surface. It's taken post exploitation activity and made it harder to move through the environment because our containers are self isolated. This has only helped the security community and now it's time for this community to take advantage of it.  As a defender looks to investigate an issue, protect against reconnaissance through delivery and monitor for exploitation. I also want to show you an attack as it could happen in the wild. So let's get started. So I'm going to transition over to advanced cluster security here. And as an incident responder, I want to check the violations. Now I'm going to search right away for visa processor. And as I look at visa processor, I start to get concerned. I can immediately see that a shell was spawned by a job application in their environment and this concerns me. So I want to investigate further. I click on it and I can see the gel command and the bash command were executed with several different arguments. I go down, I start looking at those arguments. And I can see really clearly here the container ID, the user ID, and that this user is escalating their privileges. They are installing that cat and then they're using that cat to initiate or reverse shell in their environment to shell dot attacker.com. Well, at this point, I'm reasonably confident that we've been attacked. I'm starting to initiate my incident response procedures and I've lit up the sock. And for those of you who don't know, the sock is the security operation center that's responding to these types of incidents. But right now, now that I'm initiating this procedure, I want to get more context. So I want to see how is it that someone has reverse shell in my environment. So I go over to the deployment and I check out the container configuration. And immediately as I look at this, something jumps out at me. The CVE data may be inaccurate. So this piece of image is literally so old that the source is no longer providing updates. So you can see here, we're on WNA. This is no longer maintained. So we can also look and see, oh my gosh, this is Apache struts. So one of the top riskiest components is strut, which was a headline vulnerability in 2017. This was the cause of the Equifax breach. And I know that someone is initiating a job or a shell. So at this point, I'm reasonably confident that someone is exploiting struts in order to get into my environment. So I need to address this. Let me switch my persona to the developer per second. So I scroll down. I have a ton of image findings. I can see the CVE. I can see how long it's been in my environment, if it's fixable, and it's CVSS score. And this is really cool information. But as a developer, this isn't enough for me. So I'm going to go over to my Docker file. And I'm going to check out where these CVs are. So as I look here, I can see the components associated with my image. I can see that there are several CVs. There are 137 CVs in what appears to be my base image. And in order to address these, I'm going to have to upgrade my base image. And whatever CVs are addressed in that upgrade, I will resolve here. I'm also going to check out my run instructions because this is where my application is. And I can see here, if I were to upgrade curl, then I could address several CVs in curl. And all I need to do is modify this run instruction. So this is really cool. It helps me target where in my Docker file I need to address these issues. But it's still not enough. What do I upgrade my component to? So now I'm going to switch over to the component screen. And you can see struts highlighted here. So Apache struts has 10 fixable vulnerabilities, and it's 38 vulnerabilities overall. And in order to fix those 10 fixable vulnerabilities, I have to upgrade to version 2.3.29. You can see it's top CVS scores of 10. That is terrifying, and that's a critical vulnerability. You can see the location of Apache struts, and you can even see this component is used in four different deployments. This might not be the only place that I need to address this. So one of the cool things about this view is that you can see struts is a Java vulnerability. So this is a language-level indication, and the remainder are packages installed on our host operating system. So that's really cool. I know exactly how to address this, but it's not in my traditional manner of addressing this. So Red Hat Advanced Cluster Security provides developers an easy tool in order to look at this information in their CI or on their local host and understand that this is something that they need to address. It gives them the context to address it, so we can shift left and improve our return on investment in our vulnerability management program, which is ultimately going to address the need to prevent reconnaissance and potential weaponization. So it's really cool, but it's time to go back to our story about struts. It's time to switch to an attacker's perspective. What happens when someone is trying to exploit one of my applications? So here I have a website running. Now it's not always going to be as easy as saying this is an image that's vulnerable to shell shock, please exploit it, but sometimes it really can get that easy. So I'm going to understand and conduct some reconnaissance. So I'm going to go over to the developer tools. I'm going to check out this website a little bit more. I'm going to refresh the page. I can see, oh, my server header says that this is based on Apache 2.2.22. Easy fix guys. Let us go to exploit DB. We're going to search for Apache if I can spell. And we're going to look through all of the vulnerabilities known to be associated with Apache. And now I can start selectively looking at things that are known vulnerable in the environment and start to understand. So if I click on the top one, you can see this is available in Metasploit, which is a solution that attackers use. I can easily just download this exploit and start to test to see if this functions within my environment. One of the really cool things about this is you can see that there's the code live. So we have pre-baked exploit code on the internet publicly available in a database called exploit DB. And this has shifted the paradigm of how attackers attack because no longer do you have to be technically elite in order to exploit major vulnerabilities. All you really have to do is know how to copy paste and read code and be able to modify it somewhat to meet your own needs. Now that's really cool. But back to shell shock. So here I want to show you an exploit of the shell shock vulnerability. Now I'm a good attacker. I need to let these users know that their site is vulnerable. So I'm going to go deep into some subreddits. I'm going to find a good meme and I'm going to exploit them to let them know that I care. Now I could have installed a crypto miner. I can start to escalate my privileges, but I'm going to be kind. I'm just going to deface their site today. So let me go to the terminal and I'm going to execute this command. And you can see here all I'm doing is I'm defining an environment variable through the user agent header. I am exploiting shell shock by issuing some trailing commands, echoing for legibility, and I'm catting the index.html file. So here at this point, I've got a shell. I can begin to move throughout the environment, but I'm just going to have a little bit of fun. I've already gone on some subreddits and I'm going to deface their site. I refresh the page and you can see quite easily, I is in your computer. I am stealing your data. We have ponage. Let's go. So that was really easy and in reality, it can be that easy in the real world. So let's switch back to a defender's perspective. Now if we go to ACS, we can see that a violation occurred really easily by clicking on the violations. And the top one here is what I just did. It's an unauthorized process execution running in the shell shock deployment. And if I look here, I can start to look to see, oh, this person is putting cat pictures on Reddit in my environment. That's really cool. Now I can initiate it, but you know what? If I had this in blocking mode, it would have been even easier. Advanced cluster security takes a different approach to blocking. We can now kill this pod. So if this deployment is running in a replica deployment, then immediately once this activity occurs, I can kill this pod. My attacker's defacement of my website is then reverted back to what is normal. And I have alerted my security team. I fixed my website. And if someone used this to install a potential backdoor in my container, well, I've removed that. That's really cool. I've instantaneously addressed several issues. So let's pretend for a second that I wasn't just a-facing a site. A lot of you are looking in the audience right now and saying, shell shock is old news. Someone out there is saying, Jamie, that came out in 2014. This is super old. Why are you even showing us this? Well, to me, this came out three months after I started in cybersecurity. This was my introduction to major vulnerabilities. So I figure, why not make it your own? This is a real-world example of something that happened to me. So this and server-side request forgery attacks could easily lead to a container compromise the exact same way I showed you today. If that container is privileged, then look out, because as an attacker, I'm going to go right for some authentication credentials. I am going to try to escalate privileges from there. And maybe I can even get my hands on a nice old kube config. And if I get my hands on a kube config, then I've got authenticated access to the kube API. And I can exec into a pod to start to laterally move and maybe even install a backdoor or some malware. So let's try that here. I have access to the Kubernetes API. I'm going to do an OC exec it into the shell shock deployment. And I'm going to run the bash command. Wait a few seconds. And what is this? You can see here, I'm immediately blocked by an advanced cluster security policy. Now, that's really cool, because I've effectively told the attacker, no, you can install your malware, you can't exec into a pod, you can't get access to my resources through the Kubernetes API. Now, because containers are ephemeral, the ability to exec into a pod generally isn't needed. And it is sometimes for troubleshooting purposes, but in general, it won't be. And by being able to block and monitor exec commands, you should be able to set policies to monitor access to your container infrastructure. And you can also set an exception process through deployment levels to allow legitimate troubleshooting activity. So let's switch back to the UI for a second. You can see here at the top that this is an enforced action. My security team has been alerted that this was blocked. And we can look to understand more to see, hey, is this a compromised credential or has one of my employees made a mistake? So a few last notes about the advanced cluster security advantage. If I go to our policy sets, we come with over 676 out-of-the-box policies with reasonable security controls to help you scale security in your OpenShift environment, where customers use these every day to improve how they operate within the Kubernetes and OpenShift ecosystem. We also help you understand and prioritize risk in your environment based on a holistic risk management strategy. So if I click on risk here, you can see our top priority is Visa processor. As you look at Visa processor, you can see this is vulnerable to Apache struts. It's probably been deployed in an emergency. It's got secrets in its environment variables, a ton of vulnerabilities. And if I even scroll down, you can see it's privileged. So I can go use this container and I can get to the host operating system and see how I can begin to laterally move. Now, I really hope you learned something about the attacker's perspective and the defenders. We're really excited to be part of the Red Hat team. And if you're interested in finding out more about advanced cluster security, want to request a demo, feel free to reach out to me or our team. Thanks, Rob. And back over to you. All right. Thanks, Jamie. That was great. All right. So let's zoom back up into the multi-cluster arena for security. So here's our diagram again. You can see that we've got our multi-cluster tools. And of course, you know, the policies that we just took a look at, we don't want them on just one cluster. We want to get them down to all of our clusters. And it's not just maybe blocking execution policy, but it's network policy. It's CIS compliance. We're going to hear a lot more about this in the open cluster management arena.  And then we're talking about hundreds of clusters here. They might be out on telephone poles and other places like that. So these are remote sites. They can be physically attacked. So we've got our file integrity operator and some other things to look at that host state and make sure that someone hasn't jumped on there and done some malicious things. And then of course, you know, we're all the way down to the single cluster layer. There is that node layer where we're installing these sensors and these agents and the probes that actually make all of this happen. And so it's really exciting to be able to have one place to enforce all of this across all of your clusters. Here's what it looks like in the user interface when you're looking at network traffic. This is a key part. Obviously, you're going to have applications that are talking to each other. And so you can get a good idea of who should be talking to each other, who shouldn't be talking to each other, and then enforce policies around that. Another cool thing that the team has built is actually recommendation engines for, hey, we're looking at your traffic and this is a policy that we think you should have based on how these applications normally function and then block things when they're out of bounds of that. Here you can see on the right hand side a list of some of the policies.  So you could block that. So there's a mix of best practices, some, you know, kind of widespread things like looking for heart bleed and other exploits like that as well as maybe you just care about any CVE over a certain threshold that you want to block that or do something else. Sometimes you just want to audit it instead. So a bunch of really cool stuff. Take a look for that coming in the open source as well as in OpenShift. All right. Let's jump over to applications and I may hand it over to Michael. All right. Thank you, Rob. So I want to talk about what's going on in the upstream around just general fleet management. About a year ago, we brought in Red Hat Advanced Cluster Management and we've been on the effort to open source all the components of that. So there's a project that is relatively new, relatively young, openclustermanagement.io. This is where you'll find all of the open source capabilities from the Red Hat Advanced Cluster Management product. This is really focused on bringing together some technologies that are helpful in managing the fleet and also creating some novel and new technologies that help glue together all the parts. So in particular, simplifying the lifecycle for provisioning OpenShift clusters, running on hyperscaler clouds in the data center on virtualization or on bare metal. Simplifying the process of how we deliver and configure the fleet and then also audit for compliance. Does it meet all of our expectations? It does provide some integrated capability with GitOps, but we've also been working on bringing in Argo as a provider of GitOps as well. And then focus on an inventory of what clusters are in the fleet. How do I dynamically place policies or application content across them and validate the disk running correctly? If you look on operatorhub.io, you'll find a cluster manager and clusterlet operators. These are sort of the core building blocks. They enable us to have a cluster become a hub. We'll see kind of a picture of what that looks like here on the next slide. And then an agent, which can run, all of which runs as Kubernetes native pods. And as I said, this brings together a number of open policy, excuse me, open projects as well. So in this architecture view, what we're really looking at is a view of the hub cluster. And you can see aspects like the API server that the hub cluster exposes. Virtually everything exposed to the API layer is expressed as a Kubernetes CRD, but you can read and write those like you would any kubenative API. There's also a search index, which uses a data store to understand all of the parts of any cluster in the fleet and allows you to search that and even look at relationships and find how things are connected across the fleet as well. On the managed cluster, you can see the agent that is that object called the cluster lit. And then there are additional add-on parts of the agent that enable features like search, application delivery, policy management, observability and health management. And here you can see the links to the operators on operator hub IO. Now, when we think about cluster lifecycle capabilities, a lot of times we're still thinking about a bare metal host that is in my data center, we're thinking about a virtual machine, we're thinking about something in the cloud. As we see more edge scenarios, where computing capacity is pressed further away from the data center, we have to think about how do we life cycle those clusters and those machines. So something that will be available in the near term as a tech preview capability will allow us to take a piece of bare metal hardware that connects back, we're able to provide an eye connects back to a controller, we're able to provide an ISO to actually boot that host. And so think of this as a technician installs a piece of hardware in a cell tower in some offsite data center, small data center, maybe even in a vehicle. And that barcode scanner allows them to know, okay, here's the identity of this machine, this host, and then begin a process to link it either as a turn it into a single node open shift cluster where the control plane and the workers, the workloads actually are running on the same host or turn it into a very small cluster. This really is going to be a powerful way to deliver a computing capacity wherever it's needed. And then each of these clusters again connect back into that control plane provided by the advanced cluster management Kubernetes capability, which is backed by this open cluster management project that I spoke of. Now when we think about delivering configuration on the next slide, we really will think about how do we express this again with a Kubernetes native CRD. And here's an example that's really important if you're doing any kind of networking sensitive capability, particularly for things like a 5G style workload. You want a particular operator to be deployed on a cluster. You want a particular configuration for that operator to be being available. So SRIOV enables some really powerful capabilities from a networking aspect within the cluster. This is on the right a set of YAML and policy definition that says I want a certain configuration to be enforced, validate if it's present, if it's not present automatically created. And this allows you not only to work with the SRIOV example, but to deliver any of the operators like the file integrity operator, the CIS compliance operator, along with your own configuration, like certain roles or role bindings, OAuth providers, identity providers, networking storage, etc. And so this is what you see as a policy that's targeting a cluster. If we take a step back and sort of again sort of elevate above the single cluster view, then what we really are looking at is a control plane provided by open cluster management that is communicating with multiple clusters in the fleet and assigning configuration. In this case there's a concept that we won't really talk about much here, but there's a concept of a placement rule that says match this policy to these members of the fleet. And that control plane is actually delivering those policies and configuration down and validating do they meet my desired state. Now if I think about this maybe in a slightly different view when I start to think about cluster life cycle, on the next slide what we'll see is there's really this hub that is the control point. It allows us to manage clusters that are running on hyperscalers, whether I provision a Kubernetes or an OpenShift, along with allowing us to actually provision and create OpenShift on the hyperscaler clouds and even on bare metal and virtualized platforms as well. And so what this really means now is that this hub allows us to have one central view of our cluster inventory, regardless of where that OpenShift cluster is running. This is a key aspect of the broader vision around open hybrid cloud. Now what can I do once I have a cluster that's under management? So that means that I've got the cluster manager operator deployed and running on one of my clusters and then I've got the cluster let agent operator running on any cluster that I've either imported or provisioned. And so on the next slide what we see or excuse me on this slide what we see is I can deliver a set of governance and compliance capability across any member of the fleet. This is where we're integrating the compliance operator which comes out of OpenShift along with other community efforts like the Open Policy Agent. There's also capabilities to integrate Falco and have it delivered. We'll see new capabilities over time with advanced cluster security. What this means now is that I have one central location through the hub that allows me to manage an entire inventory or entire fleet. So this is where we think about sort of elevating the view. And if I on the next slide want to sort of think about what does that look like to an end user, to an administrator, to a security person, to a developer even if I'm kind of validating how these clusters are configured. Then what I'm really seeing is this concept of different policies that are applied. And here we see an aspect of categorization and controls. So I can link a particular technical control and say that this is relevant for data standard XYZ, whether that's like a PCI DSS and NIST 853 or even an internal data standard that is specific to your organization. For each of these you can see examples where I either I'm simply auditing, is this policy in existence on a target cluster? In other words, is this operator deployed and running? Is this operator configured? Do I have the role of the role bindings that I want running in that environment ready? And so I can either audit and in one case here you can actually see there's also an enforcement behavior. So I can use this to do anything from configuring the cluster. I can also use this governance engine to drive upgrade behavior across the fleet for either open shift clusters that are connected to a source of images in a public way or that have a disconnected registry as well. So with that, Rob, why don't you take us through what's going on in the networking layers? So there's a bunch of cool stuff happening in the upstream networking arena and we're going to look at three of them that kind of come together to make some kind of next generation capabilities happen for us. The first is Submariner. This is a project for cross cluster connectivity and this is kind of like basically some IP sec tunnels and other kind of stitching together of a bunch of clusters so they can talk to each other. What's cool about this is you'll be able to do service discovery and other cubisms directly across that boundary. So it's really going to be easy to stretch applications across two clusters, maybe either do some failover because the first step is being able to talk to the rest of those members to either sync data, anything that you need to do. ACM is going to actually orchestrate this for us in the open shift world and so that's going to be a really great capability when used with our next capability which is Istio Federation. So this is the ability to connect multiple service meshes together. Now if you remember in the open shift world, not everybody has to use a service mesh. This is an opt-in on a per namespace basis and so if you've got namespaces running on multiple clusters, you can connect those together again over that same bridge. So this is a little bit more powerful because you have a little bit more control over exactly how things are federated and then you'll be able to stretch that identity between pods across that which is what everybody knows and loves about the service mesh among a bunch of other things. And then last, we've got a new API for Ingress. This is the Gateway API. You might have known this upstream as Ingress V2. That name has switched to Gateway and this is a more expressive API than what we have today. So if you think about Ingress today, it's kind of a very coarse-grained kind of rule-matching thing and then it's up to each Ingress implementation to talk about how it handles sticky sessions and cookies and things like that. So this is going to have a much more expressive rule set and that means that an open shift in particular will have a swappable way to move that out. So say if you want to use Metal LB on a bare metal environment to fulfill this need, you can do that or then use some of the other OpenShift router components in other environments paired with maybe an Amazon ELB or a load balancer in Azure. So really exciting to kind of meet everybody's needs and so we'll be tracking that upstream as it gets underway. Remember some of the use cases for this? It's kind of better than a stretch cluster. So we've got some customers today that like to have a cluster stretch between two data centers that are maybe a few milliseconds apart. This is just a better scenario because you'll have more failure domains there instead of stretching it across and then just easier HA if everybody can talk to each other and share identity. This means that you can move dependencies from one cluster to another with those other teams not even knowing about it maybe, which is really exciting. And then lastly to securely connect to shared central services if you've got a secret vault that's maybe run globally for your entire organization or you've got a global registry like Quay. So it kind of makes sense to make a little bit of that management easier if everybody can talk to each other. So let's parachute down into what networking on a single cluster looks like. And so if you'll remember we have our multis CNI. This is what allows you to map multiple network interfaces into a single pod. And the cool thing about this is it's all driven by CUBE. So you know networking is typically done you would think at a host level and so up leveling it a little bit into the CUBE layer means that you can use all these other tools that we talked about to do policy enforcement to push down those policies to mutate things maybe when they're not working the way that they should be and ultimately then make it really easy for the developers of those applications to use those capabilities. So we're going to build on that when we talk about our networking story. And so let's take a look at another more specific SRIOV example that we talked about earlier. And I want to talk about this in terms of two personas.  So this moves packet processing into user land which is really cool because you get basically get line rate speed into a pod. And this is useful for things that might be decoding a radio stream or you've got like a really high traffic API or something like that you can get line performance.  So really cool and again you know we're doing this all in a single cluster but you'll probably want to do this on multiple clusters. And so let's take a look at that multi-cluster arena we're going to shift gears a little bit to the Submariner project and I want to just give you a little bit more detail about what this looks like when you have cross cluster service discovery. Submariner is going to introduce a cluster set now what this is is a group of clusters that have a high degree of mutable trust which means basically the same namespace on cluster one is the same as on namespace two it's owned by the same folks and so what that allows you to do is then start exporting services between namespaces on different clusters and there's two CRDs again we're programming the Kubernetes layer instead of anything higher or lower which is great and that just makes it so that you are opting in to sharing something you're not going to share everything and then in the for the service import CRD this is where it gets really powerful is you can consume that via Kubernetes API it's another Kubernetes object but what you really want to do is probably just use DNS just like regular Kubernetes service discovery and so that's what you can do and so if you look at this DNS address you'll see that instead of cluster.local it's cluster set.local and what this means is you can now refer to the global set of all of these pods with one DNS name so you can imagine this becomes extremely useful for building your applications and so that's just one more powerful thing that you can do when you orchestrate all your clusters together and then last we talked about service mesh running over the same IP sec tunnels this is kind of what that looks like in practice so you've got you know all the way down on your single cluster you've got all your sidecars which are forcing traffic through your service mesh and then it's going over this and then remember all of this can be tuned and deployed through the multicluster policies and networking that's coming down from both ACM and ACS all right over to you Michael you want to talk us through applications absolutely this slide is sort of the where do you come from where do you go right so in this case our go is focused on the ability to deliver capability deliver applications and other objects into the cluster one of the neat new things that's come out is the operator centric deployment that makes it really simple to get started with this in open ship that's the open ship get ups operator and this is also something that can be configured and driven across the fleet using advanced cluster manager for Kubernetes with quay we're really looking at how do we make it easy to source the images that are going to run against the environment though a central place for image scanning and integration for scanning from advanced cluster security to allow us to ensure that the images which make up the applications running on the fleet are properly secured and there's been an upgrade from python 2 to 3 was just recently completed as well for that project so if we think about applications within a single cluster I can get started particularly as a developer or a small development team and I want to use a get up centric approach I can install the open ship get ups operator and then from there I can see my repo getting delivered into that particular cluster now if I zoom out a little bit I can also think about Argo helping to deliver capabilities across individual namespaces on the cluster cluster itself or multiple clusters so I don't know if you want to switch to the next slide they were out for me thank you sir so in this view what we're seeing is you've got an inventory of clusters it's provided by ACM or open cluster management we have been building integration to allow us to feed that understanding of the cluster inventory to Argo and then we can use the application object from Argo to deliver applications and content across clusters in the fleet those applications are getting sourced the images for the applications are getting sourced from clay and that's where we can ensure with the dev sec ops approach using advanced cluster security that the images that we're delivering have passed all of our security scans and are carrying any CBD now within Argo I can see a view of this we can also sort of zoom out a little bit further and think about the view across the fleet within advanced cluster manager for Kubernetes and here what I'm looking at is actually a view that represents a topology of the objects in my world in the middle I've got the set of clusters and I can see a list of Foxtrot AP Northeast Foxtrot GCP Foxtrot US West so that's an open chip cluster that was provisioned in the Tokyo data center for AWS another one provisioned in the northern Europe and the northern Europe region for GCP and another one provisioned in northern California on AWS US West 1 but my application is getting delivered to all three clusters and now I can sort of get a central view of what makes up the application I can see things like the deployments the routes the services etc and what's also kind of neat something that we're not going to go into a lot of detail here but where we have steps that aren't programmable in Kubernetes that requires some additional automation outside of the cluster we can even bring an Ansible to drive that capability a typical use case we find is when I deliver a change through get ops or otherwise I want to automatically open a service ticket that's what we can actually have an Ansible job drive the creation of the service ticket that allows us to track that a change occurred or maybe as in this example as well I want to drive the configuration of a load balancer that sits in front of the clusters and maybe that load balancer isn't programmable through an operator just yet so I can use that capability so here what we've talked about is how we use get ops as a methodology how we ensure the security around the images that we're delivering for applications how we can actually simplify getting started with a single cluster using that open ship get ops capability and how we can scale that out to many clusters integrating both what we do for ACM what we do for Argo what we do for quay but let's talk about the next library layer of abstractions so Rob can you tell us a little bit about what's going on with functions upstream yes absolutely so as Michael mentioned let's talk about you know getting even one layer higher so you've heard the word serverless before and then maybe functions as a service let's talk about both of those and what they mean so Knative is the serverless platform for Kubernetes and it's the one that we're backing upstream and it's got a few different components serving eventing and I have in parentheses builds because that's not part of the upstream but that's part of OpenShift and it's a big part of using a serverless platform so if you think about it serving is about connecting a container that's running with a request for that container and this is what allows you to have this model in between where you can do scale to zero this is a new capability you know that's only really possible in this model and you can also instead of just scaling to zero you can scale up on certain events or trigger different types of applications to do things based on events that might be when a new image is uploaded go resize it and store it here that kind of thing or serve web request doesn't matter what it is and so embracing Knative is it's a new way for gaining infrastructure scaling properties but it's using all the same primitives that you're already building you've got you know an application with traffic funneling into it somehow and you know maybe reacting to a few things but that differs from functions as a service and this is kind of what I'll say in quotes is the true serverless this is that developer focused I want to just write a function of code and I want it to run and do this thing I don't really care about how it's scheduled how it runs I just want someone else to figure that out and I just want to run my code so that's what it lets you have really powerful developer agility because that's all you care about but that means that this is a new programming model it's not just you know fitting into that you know slice of maybe how you built your Django app or something like that it really is a different way of programming and so here at Red Hat we think about kind of a developer workflow as an interloop and an outer loop an interloop is kind of you on a laptop writing code writing some tests and then checking that into a source control and then entering that outer loop which is all your integration testing you know getting it into the wider app and platform and then ultimately deployed and so what that means is we need new tools that function intended in this environment which is like CLIs that are terminal friendly but for building functions so Knative has this KN concept and that's a really great CLI to do this we also need new CI CD tools you know you need to be able to test and make these synthetic events around the things that your application is programmed against and that can be things that are hard to kind of simulate with a you know a Jenkins job or something like that just doesn't work and then because these functions are kind of running all over the place you need ways to aggregate the logs look at errors so it starts to more kind of resemble like a mobile application that you have deployed out on you know hundreds of phones you know the error cases they're kind of roughly the same and so we just need new tools for this and so Nina is going to talk us through kind of the current state for functions as a service and where that's going in a quick demo. Thank you Rob. Hello everyone this is Nina and in this demo I will explain what it means when we say that we see serverless as a deployment model and serverless functions as the programming model we will also see how we can leverage the Knative event in company so for writing the serverless functions in the local environment we would need KN and Docker installed we would also need an account on a public registry such as wayanddocker.io. I am in the directory where I would be creating my function as you can see there is nothing here so to write my function I would do KN from gate of prompt is for the runtime and we go to corpus one of the hottest runtime or I could use the C prompt for an interactive experience is asking which project path I want to do I want to do the same node is the default runtime because this comes with a prepackage runtime like node corpus go we want to do corpus and the default invocation is HTTP for these serverless functions but we want to use cloud events so I am going to write events and the function has come up with so the function construct has created the directory structure for me and some files so we have three classes function.java is where we would be writing our code the business value that we want to do now let's make this function do something such as translating an English word into Spanish so I will find my prepared code here need a bunch of import and in interest of time I have a copy paste of that too now with the kmcli it could build an ozi image here pain mark build command it is going to use build path to create an ozi image and now it is asking me for that registry and I'm going to do those to build a function image it is going to use the build path to create an ozi image as you can see our function image has been built now to test it locally all we need to do is click on one but our function image has been built using the vets we test it and local all you're going to see that it's going to start at the one time and it took us just a few seconds and to test it you're going to send a cloud event at a cloud event the translated result is all the message you're sending is hello and translated result is hello so now that we know our function is running successfully it's time to deploy it on our cluster so I log into my cluster and I am in the project namespace where I want my project to be deployed and all I need to do is scan from the floor it is going to build my image again just to make sure that we have the latest and then it is going to push it to the registry and then deploy it to the openshift cluster meanwhile on our cluster we would create an event source that is going to send cloud events to our function so that our function can translate that event I am going to use this in source create event source we are going to say message hello schedule let's do this because the resource here I am going to wait till I get my function deployed here this is our ocp.console so if I see in our topology view our function is coming up here there we go if we go in our ag again here we can see the logs see that it's started up and our pink source hasn't started sending events in there were no events received so it was terminated but then event came in so it's starting again so as you can see it does the auto scaling for you and here we go we are connected to k-native events k-native event source cloud thing we are getting cloud event and our result is the translation of the word hello and that's all for today I will stop sharing and back to now all right thank you Nina that was awesome so wrapping it up you know we looked at functions and how it works but let's up level it again let's zoom up into the multi cluster layer and as I mentioned you'll see that we've got some layers here but they're blank because you really don't care about this you know at functions as a service user experience you're going to be maybe in an IDE you're working with your CLI and you don't really care about the concept of clusters you just want it to work you just want to run five or six copies of your thing or if you receive five or six events you want to spin up some copies of it you don't really care which nodes it's running on all that stuff and so it's a really a different and more powerful way of thinking about your infrastructure but as we talked about it does require new tools so we've got a talk coming up after this where we're going to hear about this more in detail where you know maybe I don't want to see any of these cluster details but I want the same goodness of OpenShift under the hood so stay tuned after that All right so I hope you enjoyed our talk us where we parachuted down about the building blocks down inside of a cluster and then we rocketed all the way up and saw how just important as they are to the fabric at the top of it getting down clusters taking care of security at every single layer taking care of policy at every single layer and so you know these building blocks at the bottom maybe if you've never heard of FIPS mode for encryption if you haven't that's good on you but this is the type of stuff that it matters deep inside the operating system but it impacts us because we want all of our clusters to be compliant and that's just one example as of many we talked about fast packet processing you know mapping GPUs is another use case where all those building blocks span all these different layers and it's really really critical for being successful in a hybrid cloud world so I hope you enjoyed it thank you and we look forward to seeing you in the OpenShift community moving forward thanks


Babies delivered via cesarean section appear to be at increased risk for various allergic diseases. The thought is that vaginal delivery leads to the first colonization of the gut with maternal vaginal bacteria, while C-section babies are deprived of this natural exposure and exhibit a different gut flora. This is supported by research noting that disturbance in maternal vaginal flora during pregnancy may be associated with early asthma in their children. This all suggests our natural gut flora can affect the development of our immune system for better or for worse. In adulthood, two studies published back in 2001 suggested that probiotics could have systemic immunity-enhancing effects. Subjects were given a probiotic regimen between weeks 3 to 6 and saw a significant boost in the ability of their white blood cells to chomp down on potential invaders. And what's interesting is that even after the probiotics were stopped, there was still enhanced immune function a few weeks later compared to baseline. The same boost was found in the ability of their natural killer cells to kill cancer cells. And similar results were also found using a different probiotic strain. Now I'm proving immune cell function in Petri dishes nice, but does this actually translate into people having fewer infections? For that, we had to wait another 10 years, but now we have randomized double-blind placebo-controlled studies showing that those taking probiotics may have significantly fewer colds, fewer sick days, and fewer symptoms. The latest review of the best studies to date found that probiotics, such as those in yogurt, soy yogurt, or supplements, may indeed reduce one's risk of upper respiratory tract infection, but the totality of evidence is still considered weak, so it's probably too early to make a blanket recommendation. Unless one has suffered a major disruption of gut flora by antibiotics or an intestinal infection, unless one is symptomatic, with like diarrhea or bloating, I would suggest focusing on feeding the good bacteria we already have by eating so-called prebiotics such as fiber. We're all, as we saw before, who knows what you're getting when you buy probiotics. They may not even be alive by the time you buy them, and they also have to survive the journey down to the large intestines. All together, these points suggest that the advantages of prebiotics, found in plant foods, outweigh those of probiotics. And by eating raw fruits and vegetables, we may be getting both. Fruits and vegetables are covered with millions of lactic acid bacteria, some of which are the same type used as probiotics. So when studies show eating more fruits and vegetables boosts immunity, prebiotics and probiotics may both be playing a role.


5 ways to strengthen your brand online People buy from brands they know, like, and trust Building a positive brand image is never simple, but it is critical to the success of any business Here are 5 tips to grow your brand online Define your brand It is how people can distinguish you from others Create a slogan Here's a pro tip Make it short 3-5 words and memorable Create the visuals Create a logo that resonates with your audience Use video marketing Video humanizes your brand and builds trust-boosting brand awareness and generating more leads Get social Participate in conversations and create interesting content Read more about implementing these tips at NewHorizon123.com


Hello everyone and welcome to Blackstar Potential. My name is Lee Fuge and I'm here today with MGRmusic.com and today we're going to be looking at the Silverline amp series and the built-in effects and looking at how you can use the built-in effects to dial in your own tone. So the amp I'm using today is the Silverline Deluxe but all of these principles apply to the entire Silverline range. All of the effects we talked about in this video are built into every model of the Silverline series. Each of the Silverline amps has a range of different effects built in. You've got four different modulations, four different reverbs and four different delays. Each of these can be combined in a bunch of different ways to create your own unique tones. So we're going to start off by going through each of the effect types and then we'll break it down and look at how you can use each one for different tones. So we're going to start with the modulation section. So the first thing you want to do is turn on the modulation by pressing the modulation button. On the effect star here we have four different LED light positions. The first is phaser, the second is flanger, the third is chorus and the fourth is tremolo. The level control next to this is the depth control that controls how intense the modulation effect is. You can also control how much of the effect you're hearing by increasing the effect style to the closest point to the LED. The closer you get to that LED light the more you're going to hear of that effect and if you want to change the timing of the effect you can use the tap tempo switch. Each of these modulation effects can be time synced so you can tap tempo them to your song. So let's take a look at how these effects sound. So this is a phaser. This is the flanger effect. Here's the chorus effect on the silver line amp and finally here's the tremolo effect. You also have four different types of delay built into the silver line to enable the delay. You just press the delay button that then lights up orange. The four position selector now controls the type of delay that you're hearing. So the first light signifies a linear delay which is a digital delay. The second light is an analog delay. The third light is a tape style delay and the fourth is a multi-delay.  The level controls the feedback so this is the amount of time the delay goes on for and the tap tempo switch determines the speed of the delay. So this is the linear delay. This is the digital style so you'll expect to hear very clean delay repeats. This is the analog delay so you should hear a slightly warmer repeat. The repeats won't be as clean sounding. Next up is a tape delay. This simulates an old tape echo. So you can hear all of the repeats on the tape echo then modulate as they move along and finally we've got the multi-delay. So the multi-delay is two different delays cascading into each other so obviously the more you go into that one the crazier it gets. To activate the reverb you simply just turn the reverb on then you have four different reverbs to choose from. So you've got a room reverb in the first position, a hall reverb in the second, a spring reverb in the third and a plate in the fourth. The effects knob controls how much of the reverb you hear and the level knob controls the size of the reverb. So the more this is turned up the bigger the reverb sound. So first up is the room reverb. This simulates the reverb in a room. The room reverb is very tight even though there's a lot of reverb there you can hear the closeness of it. It doesn't sound like a big expanse of space. The whole reverb on the other hand is based on a big hall. The spring reverb is based off a spring reverb tank you typically hear in an amp. And finally the plate reverb is based off a studio style reverb plate. So that's a quick rundown on all the effect types available in the Silverline series. Now that you know what they are you can start to dial them in.  Now I want to add a reverb to that. So once the chorus is selected the button is orange. If I now press the reverb button that turns white. That means the effect is on but I'm not editing that effect. So what I do here affects the reverb channel. If I want to edit my modulation again I press this button again and that one turns orange. So because I've set both a reverb and a modulation both lights are on. If I wanted to add a delay to the mix I could do that too. So let's take what we've just learned now and dial in some tonal templates. With these templates you guys can take these away and start to incorporate this knowledge into your own tone shaping. So I have a clean tone right now I'm going to dial in a shimmery clean tone. So I've got the clean bright voice with the 6L6 response and the ISF is in the American side. My EQ is fairly flat here you can obviously tweak this to your own taste. So the first thing I'm going to do is add a reverb. So I want to add a whole reverb. So I'm going to have this about halfway so about halfway between the LEDs and the level of the reverb is set to about halfway as well.  Now I want to add some modulation so I actually want to add chorus. So again I'm going to leave that on about halfway and I'm going to push this up to about there. The combination now of that reverb and that chorus effect will give me a really pristine clean tone perfect for picked chord arpeggios. So now I'm going to dial in a big rock tone this is a sort of 80s rock inspired tone also could be used for 80s metal. So I've got super crunch voice now I've got the gain three quarters of the way up. My EQ is fairly flat I've got a little bit of a mid bump there I've got the ISF all the way to the British side and I'm on the KT88. I want to add a subtle chorusing effect as well as a slapback delay. So I've actually pre-tacked my time here to get a short slapback I've got the delay level set pretty low so there's not much feedback just a quick repeat and there's not much of the delay audible. The chorus I've got set about halfway there and about halfway here just below halfway. The chorus is going to act just as a thickener to the tone. So that sort of tone works great for 80s rock if you want to get that into a little bit more of an 80s metal kind of vibe crank the gain a bit more maybe try the OD1 channel and bring the chorus back a touch there just to add less of that modulated feel but that modulated thing with the chorus and the sort of heavy-ish overdrive that works really well for 80s style rock as you just hear that I love those kind of sort of over-processed tones but there are a lot of fun to play with. Next up I'm going to dial in a modulated lead tone so I'm actually going to go to the OD1 channel here I'm going to keep everything pretty much the same but I'm going to change my modulation effect to a phaser my delay I'm going to leave alone I want that slapback but I'm going to put the whole reverb back in so I've got a phaser effect which I'm going to set fairly prominently a analog delay which is acting as a slapback and a whole reverb for space. The final tone we'll look at is sort of like a fake rotary sound now the silver line does not have a rotary emulator built in but we can kind of create one using the tremolo feature so I've gone back to the clean bright channel everything else is still the same I've still got my whole reverb on but I'm going to turn the modulation back on I've got the tremolo set pretty low here in terms of where it is in the quarter it's set as close to the bottom as I can get it and I've got the depth here at about two o'clock I can adjust the speed of this with the tap switch so if I want a faster rotary kind of vibe I can turn the speed up by tapping it faster speed in and if I want to slow it down I tap a slower speed in so this is going to sound a little like a rotary speaker it's not going to sound exactly like it but if you want to get that rotary vibe in the mix this is a great way to do it using the tremolo effect so there you go guys there are the built-in effects in your silver line amp and how you can use them to start dialing in some different tones now obviously the possibilities of what you can do here are unlimited there's just a couple of little tonal blueprints to get you started but you can really go anywhere you want with this you don't have to just use the effects as effects you can use them to thicken the tone a little bit like I showed you there with the chorus and with the slapback delay they can make very very interesting textures in your guitar playing so try that out try and bring the effects in as part of your core tone and I think you'll find some really interesting choices available thank you all so much for watching I hope you've enjoyed this video if you did let us know down below in the comments what you thought and what kind of tones you're dialing in using your effects we'd love to hear what you guys are doing don't forget to go check out the black star amplification youtube channel for more videos just like this and if you're looking for a guitar teacher in your local area please check out mgrmusic.com there's a network of great teachers all over the country waiting to help you guys out thanks so much for watching and we'll see you soon