rance hostility substantially increased after the foolish Iran nuclear deal was signed in 2013 and they were given 150 billion dollars not to mention 1.8 billion dollars in cash the missiles fired last night at us and our allies were paid for with the funds made available by the last administration great looks like another day of talking about Iran i don't mind really because the media is giving me ample material to expose them as political hacks but due to the subject matter youtube marks these videos as not advertiser friendly every single time that's why i asked my viewers to subscribe to me on patreon subscribe star or just sending a donation on paypal it really helps when youtube is cracking down on points of view they don't i think it is notable at how how hamhandedly the president tried to politicize this by by blaming the previous administration for financing i i you know there was nothing hamhanded about it he rightfully called out the previous administration for making the iran situation worse by sending the world's leading state sponsor of terror pallets full of unmarked cash what exactly does chuck my wife gets millions from the democrat party Todd think that Iran was doing with pallets full of unmarked cash of course they use that money to fund their military and their operations sorry for interrupting but it's that special time when we think this episode sponsor patriotic legacy dot com patriotic legacy dot com was nice enough to send me over one of these units so i could give you an honest review i love this tactical flashlight it's got everything you would ever need six overall lighting functions escape features like the window hammer and the seatbelt cutter solar charging so you don't need batteries a power bank for charging your phone and other devices and a removable compass with access to a personal safety alarm patriot legacy supports veterans and youtubers like yours truly so head on over there and make sure to use the promo code drone 20 to get 20% off your purchase thank you oh but Todd's job is not to inform the american public Todd's job is to run defense for Obama's legacy the sitting president of the united states accusing essentially the previous president of helping to finance uh iranian weapons is is is quite remarkable but that's exactly what happened chuck the fact is lots of people called out this deal when it happened because everyone knew that cash would go to fund iran's military and their proxy armies even cnn's wolf blitz pushed susan rice on this very point and after beating around the bush she had to admit that iran could use it for their military so once they start getting that money are there any restrictions on how the iranians can use that money obviously they could use it to build schools or highways but they could use it to support international terrorism right well let's back up and let's understand what this is about and rohani the president was really elected on the hope that he would bring economic relief to the iranian people but i just want to be precise it is possible and in fact we should expect that some portion of that money would go to the iranian military and could potentially be used for the kinds of bad behavior uh that we have seen in the region uh up until now what a great deal let's give our sworn enemy who promises to wipe us off the map 150 billion dollars what a great move a move that got slipped in right at the end of obama's administration is quite remarkable that he's willing to push the envelope like that with with the with the office with with the with the office with this office i mean i guess at this point we shouldn't be surprised that he does these things anymore you know chuck i think it's pretty damn remarkable too but probably not for the same reasons you do your flabbergasted because we have a republican president who's actually fighting back when they used to just take it in the hopes that the media and the democrats would eventually give them a fair shake you would think by mouse man's facial gestures that he's truly surprised and blown away that trump would call out obama's bad deal but unsurprisingly none of this is anything new obama used to constantly blame bush for his troubles so much in fact that he actually joked about it after his second election that inspired me to get started on my own legacy uh which will actually begin uh by building another edifice right next to the bush library can we show that please so there it is just a short video today showing you once again that chuck todd is a dnc hack not to be listened to look i think it's safe to say that trump scored a major win here not just because we took out iran's top terrorist leader and not just because we averted war but also based on the lamentations coming from his media haters that's all i got for you today folks please hit that like button share and subscribe like i said earlier if you want to support this channel please do so on subscribe star patreon or just setting a donation on paypal one things for sure i absolutely need your support to keep this channel alive and growing thanks for coming keep coming back


Welcome back to my channel. So we've been having a really great day. The sun is shining outside. The girls are actually in the backyard right now playing. And it's just these days where the sun is shining and it's nice for them to go out and play. I'm so thankful for. Just with doing social distancing, we just have been so enjoying our backyard to get out of the inside of the house at least and just to, you know, eat dinner back there. And right now they have their rubber boots on and they're just playing in the yard with buckets and shovels. I've been doing some stuff around the house. I got on my oil page this morning and shared the oil of the day. And I'm about to start tackling a few projects around the house, including some decorating I'm excited about doing. I'm actually gonna set you guys up here on the counter and tell you a little bit about today's sponsor. I honestly don't think that I have been more excited about a partnership than this one because growing up, my parents really instilled in me the value of education and just learning new things. Today's video is sponsored by Skillshare and I didn't even know, to be honest, what they were. I had heard the name before, but didn't know what they were until I checked out their website. And it is literally one of the coolest things ever. Particularly while all of us are at home and don't have as much going on in our daily lives as we normally have. Skillshare is an online learning community where millions come together to take the next step in their creative journey. I mean anything you can think of, like crafts, photography, web design, music, marketing, fine art, and even things that we all deal with like productivity. So even if you're a beginner of a skill or maybe a master that's looking to learn something more about your skill, those is definitely a good fit for you. Skillshare classes combine both video and a class project. As a member, you get access to thousands of classes and one thing I really love about it is you can also see feedback on classes from millions of other people using Skillshare. Most classes are around 60 minutes and they're broken down into sections. So it's really easy to squeeze it into your schedule if you're really busy or you can sit through an entire class in an hour. With everything going on in the world today, I feel that we are often dealing with anxiety and just restlessness. Learning something new is a great way to make you feel calm. There are a lot of art classes that would be an excellent creative outlet during this time. Since we all have a lot of downtime on our hands, now is the time that you can pick up on a skill that you've always wanted to do. I am currently taking a class on productivity by Greg McEwen. It is so good, so many great tips. Knowing that I'm learning from a master of the skill that I want to achieve is such a great feeling. As you can see, there are discussions and then projects and resources. So you can see what everyone's talking about that's taken the class. You can also save classes in categories so you remember where they are. Besides fine arts, there's a lot of lifestyle classes you can take as well, like Spanish for beginners and so many culinary classes. Skillshare is $10 a month with an annual subscription. My first 1000 subscribers, to hit the link in the description box, will get two months free trial of a premium membership to explore. I love that we have these back doors so I can kind of be doing something inside and then still be checking on them out here. But one little update I do have is that we have started doing some serious potty training with Hazely. So she's out here right now in like a really long shirt. And I've been trying to keep an eye and take her back and forth to go to the bathroom and all of that. But I wanna work on a little project in Hazely's room and since I won't be able to see them very well, I'm gonna have them come in, do have a little bit of screen time, watch something so that I can get the project done in Hazely's room so that she can take a nap. Okay, you guys all set to chill and watch a movie for a little while? So I've been putting this plastic tablecloth under her, say, Hazely.  Where are you? Tell them what, tell them what you're watching. Okay, even though it's not nothing near Christmas, I think I'm probably gonna have to do a little cleaning in here before I get started doing this. So first of all, it's kind of bright. Let me see if I can adjust my camera here.  They're from Amazon and they have this really pretty texture to them. First of all, I need to take the stickers off of here. I don't know if it's just my kids, but stickers get on so much stuff and I feel like I spend half my life peeling stickers off of things sometimes, but they're kids anyway. So my idea or my vision is to do like gray and black and probably purple in here for her to kind of make it a little bit more girly. But I think doing the black hearts on this wall will look really, really cute. I had thought about doing a canopy, maybe a purple canopy over this side, but now that the sheer curtains are there, I feel like that is kind of, I don't know, I think it would be a lot of stuff hanging over here with the curtains and the canopy. So the other thing too I wanna do, their little like spicket thing needs to be put back on there, but I'm kind of thinking I wanna do some sort of like shelving on the wall above their little kitchen. I don't know, I've got a lot of ideas, but for today, I wanna put these decals up and just make it look really cute. I think this is a great idea for something that's not like super permanent. Do you like it? Think, Everly. Is it cute? Mommy's gonna do something behind you and Kai's bed, like something special on one of your walls too. They went out there because Cory's home and he's making them something to eat, but I'm so happy with how this turned out. I think it's so cute and it just brought like a little bit more warmth to this room and like I said, I'm kind of working with ideas of what I wanna do with like her bed and I think I may put a sign over here, but just a cute toddler room for now and these are little simple things that I can eventually change out really easily. On the days that I'm vlogging the last little while, Cory ends up coming home early from work, but he did make taco salad for himself. I just ate a taco bowl. So we had like a super early, early dinner. So we'll probably end up making snacks a little later on just because we had such an early dinner, but he's sitting on the back porch, so I just made myself a cup of coffee and I'm gonna go sit back there. I think the girls are playing. Okay, so this stuff I just got from Amazon and this is actually like a touch light and it charges. So I charged this up and then this is a nail polish shelf, but I'm gonna use it for something else. It came and it was really easy to put together. So I just put these screws into the shelf and the little end pieces just sat on it. And up in here, I've been wanting to organize my like essential oils. I have them all in here right now, but I just think it would be a little nicer to have them like organized in a row where I can see them. I'd like to put my daily supplements in here and have my oils out of here. I measured everything to make sure that this would fit in here and yes, it fits perfectly. It's gonna be so nice. And then these little things came with the light to stick that up in here. So I think I just clip them on, clip it in so like you can take it out to charge it. And then this turns it on. Ah, so perfect. Happy with that.  But this is the other girl's room and I have been wanting to do a floral wall in here like doing some florals. I don't know if I will go the whole wall or just kind of do it behind where the little hoop canopy is. But my mom, the last time she was here, she brought me all of this floral stuff. And I think I'm probably gonna put like that pillow and some of their other stuff over in Hazely's room since it's gonna be a little more like little girl toddler style. And then I wanna do more like girl style in here. So I think I wanna get maybe some floral pillows. They have this quilt. It's kind of a shabby sheet quilt. It's got even some little tears in it in places and stuff. So I think I wanna change the direction of this room to look a little bit more big girl or not big girl, but just not baby toddler. So the girls are so thrilled with this. They walked in here and saw all this floral stuff and we're like, mama! So I'm gonna work at this. I don't really know. I don't have a true direction. I'm just gonna work at putting it up. And you guys can watch while I make progress. The great yellow sun is reflecting in your deep blue eyes that day has begun.  You seem like a lot better in the daytime, but I'm really happy with it. And I think once stores open up again, I probably will go to Hobby Lobby and get some more flowers just to like make that top part a little bit thicker. But it's so cute. The girls came in and saw it and thought it was really cute. And then I kind of simplified what they had on their bed, but I'm gonna get like new pillows for them and some new throw pillows and just kind of make it look a little bit more florally. And I love how this part turned out right here. I just took a rope and put it around the outside because I was like, how do I attach flowers to the top of this? So I just attached them to that rope that's sitting around the outside of the hoop. Everything else I hooked up with command strips up there. So I'll be able to easily take it all down. I think this is gonna be especially great for the summer and summertime and just being bright and cheery. Tell me what you think. It's good. It's good. What do you think, Kailia? It's beautiful. It's beautiful. Aw. Should I get some new pillows that have like flowers and stuff on it for your bed? I am gonna make a snack that we have been liking lately. But it always reminds me of my grandparents house every time I make it. But I'm gonna make some popcorn on the stove top. First thing I do is turn the burner on and then I just drizzle in some olive oil. You want it to kind of cover a good part of the bottom. You could do that with coconut oil too. Then I have to figure out a solution for my spices and stuff. I have a pull out spice rack that I've been looking at. So stay tuned for that. I'm not sure what I'm gonna do with that yet. But I get some popcorn kernels. And to be quite honest, these are not the best. The best are either the multicolored or the, I think they call them petite kernels. But these were just ones I had grabbed whenever I had stocked up a couple weeks ago. So you just shake it into the bottom, mostly covering the bottom. And I like to kind of like wiggle it around to make sure it's all covered and covered up. And then you'll hear it start popping. So I'll check back in a second whenever it starts popping. So as you can see, it's starting to pop and it does it pretty fast. So you wanna keep an eye on it and I like to kind of move it around a little bit while it's popping. Because as soon as it's done popping, you wanna dump it out or it'll burn.  So you could just do salt. Something else that also helps the flavoring to stick is if you spray it with just a little bit of spray. I'm using coconut oil spray. And what I'm gonna do is actually shake in a little trivia. You could do sugar and some salt. And it will be kind of like a kettle corn flavor, like a sweet and salty popcorn. Like that. And mix it. And it's that easy to make popcorn on the stove.  Hey guys, so it's actually a good bit later and the girls are all tucked into bed sleeping and I'm in my comfies. And I got things pretty cleaned up out there, which will be a great start for tomorrow. But I've been working on some editing and also taking part of a Skillshare class. Seriously, you will not regret even just the trial of two months. It is the coolest thing. And I think that you will really, really enjoy it no matter what your interests are. So don't forget to check that out in the description box. And thanks so much for watching. If you're new here, I'd love it if you subscribed and joined my channel. And I will see you guys in my next video.


What's up everyone it's your girl Kenzie here from Layton Sports Guards and I'm ripping a personal for Chris S We've got two twenty twenty two tops finest baseball hobby boxes. All right best of luck Chris. Here we go What product Jacob Raffy Devers refractor and all this Garcia refractor Roger's we've got rookie refractor Otto Jake Berger Nice we'll take a burger medium, please Vado Freeman Chet's torque rookie base refractor Lindor Miranda Cabrera Shopman Beltray. We've got blue Shohei Otani. There you go. Angels 31 of 250 I don't think so Jacob. I haven't how do you see one of those to grow them to grow them well, you know I don't even know what they look like Dolo Stephen Kwan rookie refractor Guardians Charis Correa Second mini box here Yeah, rice Harper we've got blue rookie Josh Lowe for the Rays No one is 39 of 150 Josh Lowe Tatis Dettmer's rookie Manning refractor rookie Otto drew Ellis D-vax drew Ellis Bray you and a daylight cruise working base Was that like the secret short print that they stuck in there or something like that? look you bet Strasburg Does it look what's it look like Brennan Marsh or of excellence we've got green Max Scherzer for the Mets 42 of 99 Smith and Ramos Jams Pretty cool looking Kirby story. We've got Dica in 1947 Jackie Robinson So can't believe a force pulled that again this year Jackie Robinson cut out of crazy crazy Last pack of box one Tarot refractor Robbie ray and Alonso All right box two here for you Chris Crawford refractor Bruhan treat Turner Devers with the bags who got purple Pete Alonso for the Mets 65 of 250 Fuller bear Pete Freeman and Marsh rookie these black man refractor rookie Otto is gonna be the angels read Dettmer's Angels Mickey Cabrera and Joey Votto and Suzuki a Julia Rodriguez rookie refractor. There you go Chris. He's J. Ron Alec Thomas and Miranda rookie CJ Abrams, O'Neill Cruz aura of excellence rookie refractor got blue Wilson Contreras 225 of 300 cups Molina and Bryson Stott rookie Bryant Springer Josh Hatter All right second mini box here Hey Jonathan how's it going? Morning to you as well Got McKenzie Gore Rookie refractor Dettmer's Contreras Got rose gold of J. Ram for the Guardian 6 of 75 on that one Jose Ramirez Della Cruz and Tatis Revob Mullins. We got a redemption. Let that marinate. Let that one marinate for you, Chris This one Soto refractor trade Turner remorse. Yeah, it turns even Rodriguez We've got Javi Baez for the Tigers 103 of 199 Soto and Kevin Smith Melendez Jeremy Pena we've got finest rookie rookie of Hunter Green Pete Alonso and Nolan Aronato. All right Yeah, that's a crazy crazy head Jonathan. I tell you all right. Good luck, Chris Let's see you were due to receive a finest autograph blue refractor parallel So blue that should be out of 150 huge hits That'll do more than so far. Let me tell you. All righty, Chris. Congrats on that We'll get that magged up for you and right out to you. Thanks again


Alright, let's get started. So welcome everyone to Dueling Platforms. We're going to talk to you today about how to build services for Cloud Foundry in Kubernetes using the Open Service Broker API. So to start with a couple of introductions. Hey, my name is Alex, I'm a product manager at Pivotal working on Cloud Foundry, also involved in the Open Service Broker API PMC group. Awesome, I'm the product manager for the Cloud Foundry Services API project working on implementing a whole lot of services stuff in Cloud Foundry Cloud Controller and also on the Open Service Broker API, which we're now going to refer to as OSBAPI because it's much, much easier on the OSBAPI PMC. So the agenda for today, we'll talk about the problems as to why the service broker API spec came about. Then we'll talk about the spec itself, followed by a live side by side demo with using both Cloud Foundry and Kubernetes and finally how you can all get involved in this exciting project. So Alex, take us away. Yeah, so we're just going to run through some of the problems, mostly enterprise IT kind of faces and development teams working enterprise is trying to ship their software. So remember, like the reason that you're trying to build this awesome software is because you've got a group of users who are really keen to get all the latest awesome features you're offering through your product. And so they're dying to get the hands on this really cool new stuff you're writing. We then have our developer who sat there writing the features, trying to get these shipped. And then you've got your operations team. So your operations team is often the people responsible for running this in production, the gatekeepers for deploying the services, for deploying your applications. And really often you see everything go through them, often with tickets.  And it just takes a whole time and developers are just frustrated. So eventually you get your app. It's written. You give it to your operations team. And you say, hey, can you deploy this awesome app for me? So you send them a ticket. If you're using Cloud Foundry, you might be able to see a push. In this case, we've managed to get your app code onto the server. But it's not much use because it needs a data service. You need some place to store your state because you're writing these awesome 12-factor apps.  This probably took a few more weeks. And so great. You've got everything you think you need. But how do you get access and how do you get credentials to this database?   Don't lose Alex. Yeah, don't lose this one. It says admin, admin.  So I'll leave that with you Matt, not to lose. The pressure. And this is like a massive security fail, right? Because no one wants to be living in a world where you're having to pass around credentials through Slack or email. And what happens when you expose these, which you will do because you leave them on a bus or something, right Matt? No. That hasn't happened before. Maybe not. But yeah, so it's kind of a really bad security anti-pattern. So that's the real problem of how do you get credentials back to the development team in a secure way to access this new service that they've got. So you've got the credentials for the application to use to connect to the database. You've got your server. You've got your database. Then you run into these corporate firewalls. Because this is probably a separate team that's managing your networking concerns. And so you've got to go over this other hurdle, submit tickets to another team. And all this time, your developers are just getting more and more frustrated like, why can't I ship this awesome feature to my users? Yeah. So finally, you've got access to the database. All the firewalls are done. And maybe three months later, you've managed to deliver some user value. Well, another development team decided, hey, we're not going to wait for this internal IT team to do anything. They're taking months. So why don't we take our credit card, go to Amazon Web Services, build our own platform using all of the stuff that's available on Amazon. But now your development team has to run this, look after it, make sure it's updated, patched. And that's just distracting you from delivering the user value. So there must be a way to do this. And in Cloud Foundry, as many of you know, we've solved this problem. Matt's going to give you a bit more details on how that was achieved. Awesome. Thanks. So as we start to talk about the open service broker API, let's talk about a little bit of history first. So this started out in the Cloud Foundry Cloud Controller as the service broker API. We had a lot of service brokers written against this spec. It went through a couple of iterations. But at the end of last year, a new project management committee was formed under the Cloud Foundry Foundation to make this the open service broker API. All existing service brokers transitioned over seamlessly. There was no changes. What this allowed us to do is kind of have these have two new releases since then with contributors from a whole lot of other companies and also from other platforms as well. So we stopped being a kind of a Cloud Foundry only component and a Cloud Foundry only spec and has become this like open spec where any platform who want to build against these kind of third party services can use it. So as on the landing page, it says it connects developers to a global ecosystem of services. These services can be databases. They can be configuration servers. Messaging queues, autoscaling apps, a whole load of awesome things you can connect to your applications that they may need to run in production. And it's worked on by all these companies. So we have IBM's Blue Mix, Red Hat's OpenShift. We have Cloud Foundry's Cloud Foundry and a whole load of other platforms which are integrating this platform, integrating this specification today. And the service is being written for all those platforms. And you only have to write your service once. So what is it actually? So it's an open source API specification, just five endpoints, that's all it is. It's implemented by platforms in order to build a marketplace of services that operators can basically provision in their platform and then give application developers access to. And it's implemented by service providers. So like Suspenders, for example, to basically allow containers and applications in those platforms to go ahead and use those services. And it's awesome because, and this is a bit of a mouthful, it allows platforms to offer self-service, service access to developers. So we don't have those problems Alex described earlier, where we have credential problems and networking problems. The Ozbapi spec allows platforms to kind of in an automated way offer these services to developers for them to provision, connect to and use whenever they want. It also automates the life cycle of services, including credential management. So you can give out different credentials, unique credentials to different development teams. If you want one of those development teams to stop using your service, delete that specific set of credentials. And you don't have to worry about any of those kind of security implications. So getting a bit more technical, there's only three endpoints that you have to offer to be compliant with the spec. The first is the catalog endpoint. This returns a big JSON object which basically describes the number of all the services that your service offers. And each service is composed of one or more plans. And in a plan, typically let's say it was a MySQL service, you could have a small plan, a medium plan, a large plan with kind of different configuration settings like memory, CPUs. This could obviously somehow correspond to whatever infrastructure you're provisioning your service on, but the spec doesn't require that. It's totally infrastructure agnostic. Plans can also have JSON schemas used to describe configuration parameters. So let's say you want some things to be kind of controlled by your app developer. Let's say the number of nodes in a cluster. You can actually offer that using a JSON schema to your application developers and configure that at provision time. Which leads on to the next endpoint, which is creating a new service instance. So one post command, you say, hey, service broker, please go and create me one instance of your underlying service and tell me when it's done. This can happen asynchronously. And at some point it'll tell the platform it's ready. The platform can then give that to the application developer to start using. And finally, you can generate unique credentials so you can access the new service. So whilst most service bindings, which is this concept of accessing the service, are unique credentials, they can also be other things. So you can have a volume mount. So you can mount a remote volume into your container application to access the files. You can also integrate something called a root service. So it's going to intercept all the traffic, go into your application, and then you can do things like authentication, checking headers, doing some other magic in there as well. And that's it. So three endpoints and you can write a service and start making some money. So this is what it looks like today. This is a GitHub page. We're on version 213. You can go here anytime. You can use the Projects tab to see what the group's currently working on. It's pretty active at the moment. And yeah, the two key platforms integrating this right now, Acubus Maintenance and Cloud Foundry, we're hoping to see many, many more in the future. And we really think that the power of this specification is the fact that it is so open. And that service providers only have to create their service once and then any platform can make use of it. Yeah. So as we've probably heard in the keynotes this morning, lots of people think it's Cloud Foundry or Kubernetes. They're basing it out to the end. And as you saw from our talk title, many people thought, oh, this is going to be a cowboy in Western kind of shoot them up where they're trying to go against each other platform on platform. But actually what we're saying is, no, we don't think we need to be fighting like this. And using the open service broker API, you can connect the right workloads together. They're running on Kubernetes or Cloud Foundry. And the broker API is that compatibility layer in between. So we think it's going to look a lot more like this in the future. And yeah, this is good times. OK. Yeah. So onto the fun bit. So now it's the live demo. So just want to show this slide first to kind of just give you a bit more context about what we're going to show you. So we're going to have one Cloud Foundry environment with the CF application running. We're going to have one service Kubernetes environment with the service catalog project. And that's going to have a Kate's pod up and running. And we're going to have one service broker, which could be deployed anywhere. In this case, it's going to be deployed as a Cloud Foundry application. I'm going to show you how both Cloud Foundry and Kubernetes environments can talk to that same service broker to provision services. Yeah. Cool. Right. Let's go. Yeah. Wish us luck. Live demos always work. All right. So first thing we're going to do. So on the right hand side of the screen, we've got a Cloud Foundry environment. And on the left hand side of the screen is a Kubernetes environment. So firstly, I want to show you this broker that we've deployed for today. So we can see we have this broker called MoverViewBroker CFSummit. So this is kind of a dummy service broker. It doesn't have any kind of backing service like a database behind it. But it's going to visually give a representation of what's going on with the service broker spec. So we can see that that's deployed. If I quickly show you it here, this is it running. So basically, all the service instances, service bindings, things like that are going to appear on this web page. Every service broker can offer a dashboard like this to developers and operators. So for example, in a database, you could actually have additional settings here, which don't have to go through the specification. All right, so let's go. So in Cloud Foundry, we have this concept of a marketplace. This is what app developers can see, a list of services and plans that they can actually provision whenever they want. This is kind of the self-service access model we were talking about. So you can see right now I've got no service offerings found. Great. So in Kubernetes, we have a project called Service Catalog. And the Service Catalog project aims to produce a similar set of behaviors as the Cloud Foundry marketplace experience. But in this way, we describe the resources that we're interested in retrieving from the Service Catalog. So you can say here, we're interested in seeing service brokers and we're interested in seeing which services they offer. Because remember, one service broker can offer many service offerings. OK, so it looks like we haven't got anything in there either. OK, so far so good. So the first thing we have to do in Cloud Foundry to give app developers access to the services that broker provides is create a service broker. So to do this, we just give a name for our service broker, some basic or credentials, super secure admin password, and then the URL of where that service broker lives. So while in this case, it's actually running on a Cloud Foundry environment, this could be deployed as a standalone app on AWS, Microsoft Azure, wherever you want. All right, so that's going to create it. There's also a fairly advanced permissions model implemented in Cloud Foundry. So in order to actually make sure our app development teams can access this, we're going to run a command called CFEnableServiceAccess. You can restrict this to say give only particular development teams access using orgs and spaces. But for now, we'll enable access to our entire environment. All right, and that's ready to go. Great. So we want to do the same thing in Kubernetes. But in Kubernetes, we describe the resource that we want to be created by the service catalog. So all those YAML fans out there get ready. We describe a simple bit of YAML that describes the name of the broker that we're going to call this. We're going to call it overview broker. It's very similar to Cloud Foundry. We present the URL that we need to go fetches from. OK, so let's do this. So we're going to submit this resource to be created. OK, and it looks like we have a broker. OK, so back to the CF marketplace. I'm an app developer. What can I see now? Awesome. I can see my overview broker. I can see the simple plan that it offers. It only offers one plan. And I can see a basic description of that service. Great. Let's see if this has worked in Kubernetes. OK, so we're going to get the service classes. And we can see we have one called overview broker CF Summit. And let's take a look at that in a bit more detail. So we bust out some more YAML. And you can see here that we're seeing at the bottom. You're seeing the description of the simple plan. And so this looks like we're ready to go. OK, so again, we've got the service broker up and running. We've got it added to the marketplace. That was pretty easy. Now, I'm an app developer. And I actually want to create a service. So I just run one command, choose a simple plan, give it a name. And you'll see that this obviously works synchronously, or asynchronously. In this case, it's going to return straight away saying, OK, that service is being created. If I pop back over to the overview broker dashboard and refresh, we can see here it's being created. We can see it's come from a Cloud Foundry environment. And a whole lot of other information, that's automatically set when you use the spec. So things like which service and plan ID was used, what configuration parameters did an application developer pass in. This is where you could do things like number of nodes or memory limits. And also kind of the bit of contextual information because it's an open spec. We have the kind of Cloud Foundry or Kubernetes specific information in this object here. So in Cloud Foundry, obviously, that's an organ space GUID. I can also see that through the CLI. If I just check out my CS services, then we can see my services sitting there waiting to be used. OK, so I also want a service instance on Kubernetes. So let's see how I can do that. OK, so first of all, we're going to create a new namespace. And namespaces in Kubernetes are similar to the organ space model in Cloud Foundry. It's a way that you can dedicate resources in a particular place and kind of isolate them. So let's create this namespace. And then we're going to be requesting, again, that we create a resource. And the resource here is an overview instance. We're going to be associating that with a development namespace. And we're going to create this also on a simple plan. OK, so we submit the request into the service catalog. And the instance has been created. And let's just check to see that happened. Great, so we now got one instance that's been created in this broker from Cloud Foundry and one instance coming from Kubernetes. Cool, so finally, we can check that this instance is recognized in Kubernetes as well. And you can, again, request to have the full description of the service instance. This gives you some interesting information about when it was created, the status. And you can see at the bottom it's interesting that it says the message was the service instance was provisioned successfully. And this means that you can check on asynchronous behaviors. So if you've got a service broker that does asynchronous provisioning, you can tell when the resource is ready to be used by your pod or how are you going to utilize it in Kubernetes. Awesome, I think one thing that's probably worth pointing out here is that when we're talking about provisioning services instances, that doesn't necessarily mean that we're calling into some kind of infrastructure saying, hey, spin up a new VM and give me this brand new thing. You can have multi-tenant services, right? So you have an existing MySQL database, and provisioning a new instance actually means provisioning a new database in that database. And this can work for a whole load of other apps as well. Same thing with configuration servers. All right, so we've got our service instances up and running, and now we want to talk about service bindings. So if I check the apps that we've got deployed, we can see I've got this very suitably named extremely basic node app running. This is basically just a totally dummy app. It does nothing, but we're just going to use it to show what happens in Cloud Foundry when we actually bind the service instance to an application. So with one command, I give it the name of my app, the name of my service that we've created, and we can see that's going to bind. And the way this works in Cloud Foundry is we basically inject the credentials into environmental variables in that application. So if I run CFM, which will dump out the environment for that app, you can see now we have a super secure credential set injected into the container which is running in this application. You can see here it's called Overview Broker CF Summit with the username and password, admin and password. We can also see these represented in the Overview Broker. Down here is a new binding. Again, it gives you a bit of contextual information what app good, for example, is that connected to. So you can see the actual broker knows kind of, if it wants to, it can know the Cloud Foundry specific information about where that binding is being created from. Cool. So I want to do the same thing in Kubernetes, but I don't want to bind it just yet to my application. I want to create a secret. So Kubernetes has a notion of secrets that can be put into a namespace. And so let's have a look at how we would do that. Okay, so again, we've described our resource. We're describing the binding name we want to create, the namespace we're creating this binding into, and then we want to describe what the secret's called. And this is a way later on that you could bind this secret into your Kubernetes pods. So let's, again, send that resource request into the Service Catalog. And so the binding's been created. Matt, do you want to prove we're not faking this one? I don't think we are. There it is. There we go, magic. Cool. Okay, great. So let's check and see what we can see in the Kubernetes environment. So I'm going to ask to get the binding, and we can see that that has been created successfully and it's ready to use. So that should mean our secret is in the development namespace. So let's get the secrets. And you can see here we have an overview credentials, which is a type opaque object. And so let's see what's inside that credentials. We should see something very similar to what Matt just showed you in the Cloud Foundry environment. So you can see here that we've got data and we've got a username and password. Which don't look like the same username and password I just saw. But this is Base64 encoded, so easy to get back to the original one if you need to. All right. So that's about it. That's what we've created our environment. We've given our app development teams like actually truly self-service access. They've created their own whatever service they wanted to create. They've injected it or bound all created secrets to get access to that service. And now in the spirit of full self-service, they can go and clean them after themselves. So they can delete their bindings and then they can delete their service instances that they created. And if you take another look back at overview broker, it should be empty. I went back to square one. All right. Live demos worked. That's the first time that hasn't gone wrong all the way through. So thanks. Right. So yeah, this is how we're feeling right now. We're pumped. Right. Okay. So just a recap. This is the architecture you saw. You saw the user connecting to via Kubernetes and Cloud Foundry to the same service broker provisioning access to some service. And yeah. So it's self-service access for everyone, no matter what platform you're using. What's really interesting is when this looks like a multi-cloud world, because the broker API doesn't specify how you deploy these things. It's all about compatibility and making sure the contract's clear between these various systems. And so you could deploy your Kubernetes cluster to Google. You could have Cloud Foundry running on Azure. And you could have all of your on-prem, you know, big, heavy data services running on vSphere. All right. So last bit of the talk, how you can get involved. I have to see an exciting demo. There's a few ways. Firstly, we have a weekly call at 9.30 a.m. PST. I think that's about 6.30 p.m. here. And basically we dedicate 10 minutes at the start of each call to hear from people in the community. This is really nice because we get people who are both working on platforms that are integrating services that conform to the spec. And also service authors who are writing services that want to conform to the spec. And the more of those use cases we hear about and the things you're trying to do, kind of the better we can make sure the spec evolves to kind of handle all of these diverse range of services that are out there. You can also head over to our GitHub page. There's now a getting started guide there with a few example brokers. Some really cool libraries like the spring service broker you can use to get up and running in basically no time. And finally there is a Slack and a Google group which are pretty active so please come along and ask us questions and start kind of contributing to the spec. Matt, have you still got the post-it note or have you lost it yet? I don't know. Use the service broker API. So I think that's the number one lesson here. I think we've got five minutes left so I guess we can take some questions if anyone has any. Okay, in the back. So if you head over to the GitHub repository there's like a projects tab and in there we're planning for at least the next release along which will be version 2.14 and basically the way this actually works in reality is the various members of the PMC and kind of by responding to community interest after each release we raise the priorities and things we want to focus on for the next release. So right now, for example, asynchronous bindings is the thing that will end in the next version of the spec. Yeah, so back up from restore has been an interesting one. Several people in the community that have figured you could extend the service broker API by adding a slash backup, slash restore endpoint. And other groups looking at this say maybe that's not flexible enough for how we want to back up our particular service.  And what we find is great about the service broker API is it's so simple that you don't need to we're not sure if we want to start complicating it with these other kind of specific service things because not every service will be back-up-able or restore-able. And so we need to have a proposal that one of the community members made called service broker actions where you can define sets of actions that can be associated with your broker and you do this in some kind of JSON schema or Swagger spec and it's an extension mechanism to the API. And these are just two of the options we started to explore but I expect this is going to be coming maybe into the roadmap for the next release cycle or the one after of trying to solve this problem. But just for context how things get into the API we're trying not to do too much architecture on this and having real use cases where someone comes with a user problem as either a service broker or a platform and what we then say as a group like is this a problem we want to tackle if it is we pick a platform or many platforms to implement this in some way to give some feedback as in can we provide the user value we expected to with this feature as the first question we ask and also is the API design that we've proposed efficient for delivering this value right like was it really hard to technically implement it using this spec and we collect the feedback and then once a group are happy that we've addressed any concerns we then move it into the spec in the next release and so it's normally two release cycles before something will get promoted to the spec if it's quite a complex thing sometimes we can fit it in in one release cycle which at the moment we've been hitting about every three months for a release. Yeah if you see anything in the any issue or PR in the repo tagged with this like validation through implementation phase it basically means that it's being actively worked on is likely to land pretty soon and like an example of this is right now the spec works over basic course and we want to improve that so we basically we've changed the spec now to allow kind of out of bound authentication mechanisms like O-Wall to take place and at some point we're going to bring that back into the spec once that's been validated what we don't want to do is obviously just blindly make changes to the spec without either both Cloud Foundry and Kubernetes implementing it but also having service brokers implement it for their services so we know it really works Yeah cool do we have any other questions? Okay great thanks for coming everyone Thanks


So we're here to talk about system 76 and pop OS. Yes, I'm running it on an IBM laptop So this is my IBM X 250 at 7.7 gigs of RAM 8 gigs it comes down 7 7 because of the Intel HD graphics and Intel Core i5 processor in here And I bring it up with what laptop I'm running said question comes up quite a bit But what I wanted to make sure people understood was one This is not a super fast high-powered machine and it's a few years old this the X 250 you can pick up for a pretty reasonable price Here in 2019 and I'm completely happy with it. It still does everything I need to do I my next purchase.  I get it But there is enough customization in pop OS and there's enough variation from a bunch to there's enough polish They put on it, which is a year later after I loaded it. I'm still running it I'm actually really happy with system 76 and pop OS as a whole I've looked at some of their laptops like I said, but even running this on a non system 76 device My desktop runs this and my laptop runs this these are just little those little polishes and little tweaks are What makes a difference to me on why you choose one distribution another now all my distributions I choose are generally going to be Debbie and base But I also am not what they referred to as a distro hopper So if you're in the Linux world at all trying to decide a distribution can be hard You'll like one feature that was put by this company or this other company.  I used it for about a year and I really liked it But I don't really use any extra customizations Katie and Ian offers a big amount of customizations And I know it's not exactly a distro I'm not going to go down that road of debating the nuances of it, but Katie and Ian I was really happy with but I don't really use all extra customizations one size loaded pop OS It really has like that polish to it the fonts the theme is well It doesn't suck and it's probably the best way to describe it here. So let's take a look at it So here's the page on pop OS and like I said, they have all the features listed out here and things like that But let's talk about what makes this different than a bunch you also. I'll show you that When you open it up, it's not as nice as it is on my desktop I maybe there's a slightest bit of stutter when that opens But it's not bad. I this laptop even though being a low-powered i5 is still completely adequate It mostly it's like I said used for my network engineering work that I do and surf in the web And I have no problems doing that on here at all Let's talk about the differences though between pop OS and Ubuntu and they have a page I don't remember if this page was available or not back when I did the first review I don't recall but they do list out exactly what makes it different This is the part though that really gets me look feel session shell now granted I have my shelf hold up over here. I have this available. I'll leave a link on my github You can get the customization I have for the shell and the color scheme I'm using so it looks slightly different on mine Maybe it does on the default. Well, it definitely looks different than default But this customization all the details are in there. I'll leave that on github So I didn't care for the shell but everything else I did really like the keyboard shortcut now They have a whole list of keyboard shortcuts and that's something that's really Most of them are in gnome I know and someone's gonna go hammer out there but you can customize gnome to be this way and Yes, most any Linux distribution you can take the time to customize to be whatever way you want You can swap out the desktop manager. You can swap all the custom key settings, but with System 76 I didn't have to do anything. I just loaded it. These are all the settings They're documented so I can learn them and get used to using them so I can go Okay, I can just hit super key a which is the windows key and go right to the applications That's great. I can just hit t for terminal or I can run a command with alt f2 Just I in a lot of these are the same But it's also becomes very very fast to be able to jump in and out of these and they're documented. That's a big part So that's like I said the keyboard shortcuts. I like a lot Included apps these are irrelevant to me and I'll say that because I don't they have the pop shop and it's cool They have a nice default set of apps But one of the things about Linux because it relies on repositories and app stores installing apps has become absolutely Like a mundane task because you can do so much of it from their pop shop So if they didn't have something it's really quick to get in there But granted I've been a Linux admin and working in a Debian world for a long time So I'm used to apt get installing. I started my Linux journey. I started playing with it in like 97 I had a job doing it in 99. I switched to Debbie in around 2002. I think so it's 17 years of using it I do have a habit of apt get install Well in this case would be sudo apt get install, but those are the common ways I'm going to install applications, but they're one and the same and this is where sometimes people get confused when you get started with Linux and Thinking if you have to do things from a command line, you don't have to Things like the pop shop make it really easy to install apps without doing it But they're also one and the same if I apt get installed something from the command line It is also going to show installed on the pop shop here So I can install any of these things on the installed list Which I have quite a few applications on here or I can install them from the command line. So sudo apt get install Whoops Good and bad of long passwords. I Can install this from here or I can go search the apps and it's already installed Right here and just install a wire shark. This is the GTK version which I could have installed as well from the command line See you see QT GTK So it's all the same whether it's installed from the command line or not So it's not to me when they talk about the default applications not the Not the biggest deal for me like it's too easy to install apps I will say something pop has done and will pull up the pop shop again that you won't find well You can do this in other OSes, but they did this so it's out of an out-of-the-box experience That's a lot better which is the steam install now Like said, this is my work laptop, which means I have no games on it and steam is less than perfect on Linux It's getting better constantly But there's a few tweaks you have to do on like when you install it a bunch of there's a few things You have to change this is something that they did a nice job of in pop OS They just added those little customizations right to it To make it a little bit easier so you can just install it right out of here You can still do the command like I said you can still tweak it. It's still customizable But they took care of a few of those things That's a lot of what the pop shop does is add a little polish and a little bit of features to these Versus the Ubuntu store now Someone had posted and I think it's just because of their confusion on this see people say well They're doing things separate. Why are they trying to reinvent Ubuntu and they're not you can add the Pop repositories you can add all the different pop features back into Other distros if you want all the repositories are open free and open source So how they did all this and their feeds so to speak their repositories for these features are completely Usable inside of here and works great and that notifications that pop up this is a little bit of you know nice customization on the box the I see Xavier to sent me a message and We'll just go ahead and close the messages are nothing personal, so I'll leave them up here But this notification bar is really nice You can add this level of customization where it ties into my Google calendar It ties in some of my notices for other applications I have running specifically that message came from Keybase, but it consolidates them all into one place another little customization Yeah, I know noam supports it, but they've out of the box made my experience really easy I spend my day doing complicated network engineering things. So it's nice to have All this customization done for me when I load the operating system Which has really had me sticking with Papa West now for the last year, and I don't really have any plans to change The other thing is I'm only running if you notice on the about page here I'm still running the long-term support version of 18.04 LTS that means I don't have to do the full version upgrade And I skipped on the 1810 upgrade because there was some conflicts with a couple tools I use specifically shutter there was I seen what I had to do to fix the problem They had but there was no compelling features in 1810 that made me go. Well, I have to switch to that 1904 is around the corner here. I haven't really looked to see if there's anything compelling But they the Papa West repositories are the same for both So I'm still have all the latest and greatest all the security updates are there and all the latest and greatest pop enhancements Still come through it's not quite a rolling distro But it works as to in the way they roll it back and have those features in there So even though I'm running this long-term support. I still have all the other stuff I've just loaded a handful of updates today. Also the updates handled very smooth a year of updates on Papa West have Never have disappointed me in terms of breaking. They've all just worked really really well and it's gone smooth Now one other thing the installation on first use Papa West adds a new Linux installer designed to make installation straightforward reliable secure and fast and Yes, that's actually a really cool Because on boot it can do full disk encryption right from the rip I that's just absolutely convenient because if you're gonna load it load full disk encryption I absolutely think that is the way to go that way I never have to worry about like just encrypting the home drive as well out of people will choose But if you just encrypt the home drive and you accidentally saved a piece of data outside there And then the laptop gets stolen something happens You run that risk. Also, this is you know password on boot So I can't get into the OS to even do anything without a password therefore One more layer of security. So I have a password to unlock the partition then I have the password do actually unlock the home drive So in making that really easy is really and they have the in-hole Using Lux encryption. I have a detailed video of like command line Lux encryption But there's no command line here that you have to use to do this This is out of the box all integrated right from the rip Lux encryption. So it's all standard open source Nothing weird they did they use standard tools to do it. They did a nice job on there It does support dual booting with Windows and Linux OS and people getting started in Linux asked me that a lot about should I dual boot and I think absolutely not is always my answer The reason why is because if you dual boot you'll boot into Windows. You're like, oh, you know I booted I guess I'm here to do the thing I couldn't figure out how to do in Linux and then you never want to leave that OS again or Windows Doesn't update and it breaks the bootloader and it only boots Windows and doesn't boot Linux anymore And you go I'll load it later. Well, and then later never happens. I do have to run Windows occasion for my clients My answer is always just been virtual box And I have Windows 10 set up in virtual box on my desktop and on here And it works. That's my kind of solution. I almost I haven't updated this and haven't even loaded it in a long time Laptop here rarely use it on my desktop I use it like I said for clients that have applications. I need to test inside of Windows to make that happen But overall it's been very snappy to use the networking Works great the integrations of being able to Jump right in like, you know map. This is a samba drive. It's gonna fail because I'm on the wrong network But it integrates into my Google it integrates into My samba shares that I have here at the office that are on a free NAS box You can bookmark shortcut them the file manager is intuitive and easy to use And I know it's gnome, but it's gnome with a few tweaks that have just made it really handy for me to use I do miss that with KDE that, you know, the wobbly windows and things like that But those aren't really a big deal to me. The performance of it's been great I you know The polish on the UI and the fonts and everything they use are really what sold me on it and the keyboard Customizations and stability stability is absolutely One of the reasons I've recommended so many times people getting started in Linux with Ubuntu or pop OS both are really good at stability and the overall picture and like I said because this is based on Ubuntu for the most part like you're Underlying the kernel and things like that have not been dramatically changed it I don't even know if they've been changed at all by pop OS So those features in in terms of speed are the same You're not going to have any difference between if I loaded this with a bunch or low so pop OS the Functionality speed wise is going to be the same the because the underlying operating system essentially the same pop OS It's really just theming it a little bit But those little tweaks mean a lot and it does work really well And of course this pairs well with their hardware because they have you know any updated drivers That is one thing they do offer when that you go to download pop OS They have drivers for both so when you're on your site, you can get drivers for both The Nvidia or other systems, so if you wanted to load the extra and per Nvidia drivers You can do that right from the rip and right from the start So you don't have to like go and enable them to have the full Nvidia drivers enabled So another another feature where they kind of you know broke away a little bit from Ubuntu But not that much but overall I'm really happy with like I said This is running it a year later on both my laptop and desktop and I still don't have any plans to really switch between This and another OS that nothing's really been compelling in terms of doing that But the stability and everything is what's really kept me there I'm going to say it's not dramatically but definitely a little bit more stable than KDE neon and the KDE distribution, but not as customizable. I mean you can customize this you can tweak it it does have options for that you can load the tweak tool and You know mess around with things inside of here and change little Nuances and things like that and load the tweaks, but for the most part Yeah, I haven't really felt the need to Customize it that much so pretty much everything is stock as it was the way the bars and everything around the side here It just works that's that's the biggest thing for me is when it just works That's always what makes me happy because you know, I got a lot of work to do So hopefully this was helpful This is still what I used to do all my editing in case anyone's wondering as well Caden live on sometimes my laptop nine naps at the time editing on my desktop because it's this little power di5 is a All-day render to get that done. So if you're interested if you're getting started in the Linux I'm just I'm gonna tell you that a bunch of in Papa West either one you choose are great places to start that Little bit of polish and the well documented keyboard shortcuts and default applications on there when you're getting started with Papa West doesn't does make it a really nice choice. Alright, thanks Thanks for watching if you liked this video give it a thumbs up if you want to subscribe to this channel to see more content Hit that subscribe button and the bell icon and maybe YouTube will send you a notice when we post If you want to hire us for a project that you've seen or discussed in this video head over to Lawrence systems calm Where we offer both business IT services and consulting services and are excited to help you with whatever project you Want to throw at us? Also, if you want to carry on the discussion further head over to forums at Lawrence systems calm where we can keep the Conversation going and if you want to help the channel out in other ways we offer affiliate links below Which offer discounts for you in a small cut for us that does help fund this channel and once again? Thanks again for watching this video and see you next time