Hey guys, welcome back to another loadout video for duck hunting 2022 crazy can't believe it I think this is like our fifth one this video is brought to you by motion ducks guys check out motion ducks It's one of our favorite things out of all this gear out here And it will bring birds in the decoys on a windless day simple setup. This is it got a weight They also sell a weight bag. This isn't from them. It's just kind of a weight We have got the pull string and then this is it right here And that's how compact it can go and what it does and I'll show some clips and overlaid over here But you can go from four to seven to ten You can add on and add it on to this whole setup and bring motion in your spread It's one of my favorite decoy rick setups I've ever had and I think Thomas would attest to that as well So check out motion ducks great company and you can go in there actually to get a discount You can go in motion ducks comm forward slash MVM Guys and you'll see a deal that's just for you guys just for the people that watch our videos and you get a really good discount And on top of that when you go to check out put in the code MVM 10 and get another 10% off go check it out guys I promise you'd be worth it because a lot of times you're out there hunting if all you had was motion You'd be hammering on the birds But because you look a bunch of dead stagnant decoys out there birds know it They flare off they're gone. So check on motion decks. We'll be using it all season long like we have for the last four or five years So I guess we'll start with the dog stuff first A lot of this stuff has redundant me and Thomas have pretty much a lot of the same stuff So he just brought over and filled in the gaps that we don't have so here's a gunner killer I've actually never had this in one of our loadout videos I think I did a duck dog loadout, but I never put this in there. I bought this I believe three years ago. It's the best investment I ever made. I have a friend in Colton They weren't a horrible accident and actually his dog survived because of this If it would have been one of those cheap Petco ones, you would have for sure been dead It's got the weather kit that I have I bought to add on to it So like in the winter time you're hunting, you know summer it can breathe through the sides winter time Close it up. It's got locks on top and bottom and then you can key lock it So not worry about someone stealing your dog at night and then inside It's got I bought the padding for the dog, but lots of room. This is an extra large I bought just a couple months ago a new e-caller for Rocky. It's the same exact one. I actually I take that back I had a 825 this is a 425 and the reason I kind of downgrade is because I don't need all the fancy stuff to have multiple dogs on One receiver which this will still do more than one dog But as you can tell you can see how small that is and it's not so much weight hanging around your neck after four years I think it went out so bought a fresh one this year got a little fixed up and went with the lighter model dog vest The reason I use this one has nothing to do with the brand or anything like that It's because he's such a big barrel chest of dog that I had to cut way out and as you can see It's only like a three mil ply and it was easier to cut and he's had this one for like I think three years now So there's some other ones. I tried I just could not make him work no matter how big of a size I bought you guys seen this before it's just like an accordion. I am buckle three buckles It's made by rig them right it's for like a ground blind for the dog And I just pop these three and bam expands out close it back together three straps You're good to go so new this year that we're gonna try out as you guys seen last year We started using final approach decoys and loved them and that's really the only thing a final approach as we used Well this year we're trying more and more stuff and for sure We're we're staying with the final approach decoys love them But we are gonna start trying some of final approaches apparel and their gear out first off I guess I'll talk about the bag. This is their waiter bag Actually really like it. It's pretty nice and it's roomy because I've seen some decoy bags Sick cuz to be honest with you that they try to make it compact and that's great But like you have to like smash the boots and and you got a crunch everything in there in my opinion And I don't want to do that to my boots because if it gets warm It'll be it'll make that rubber kind of stay in that position It was folded in or it could cause cracks So I like the fact that they did this big open bag And they kept it basically like waterproof inside. So if you put it in your truck, you're not dripping stuff from your decoys I think you can take that out too if you want to like spray it off It's bigger you got stuff a lot of pockets on the side You can put stuff in and then the cool thing is on the bottom run zip it and you can pull out this whole mat That you can stand on to if you're on rocks mud whatever you're not gonna get your feet wet or whatever that I really like that too or honestly you could just stand inside of it if it's empty You're taking your waiters off stand inside of it slip them right off and then put your regular shoes back on this year You will see us in these we're gonna be in these final approach waiters and they are zippa I've always been honest on this channel.  How do you beat that? It's pretty impossible unless you match that so we are trying out this year final approaches Gary And one of the things being their waiters I will say now I put these on first impressions guys the boots are incredible like actually I was blown away The boots are every bit as comfortable as sick as I was shocked some of the other things the features they have that is A zip they got the zip on this and I got to put this to use for myself So I don't really want to say a lot about it and push people to it But they are pretty slick. They are comfortable boots are comfortable. They have a zip I want to season of use before I say a lot about them. There is Velcro on the shoulder straps So I want maybe if you just slide them off instead of unbuckling every time because we know how Velcro does wear out But other than that they got really nice comfortable straps to go around the waist got padding in the back They got shell spots in the front waterproof zip. So I mean I will say they're really comfortable So we will be trying those out this year. So don't be surprised and don't think Something crazy if you see us in that set of sick We're definitely want to try this out research and development man try different things make things better And that's what I like about final approach guys They are very very willing to make their stuff better and they've made a lot of quality stuff And I'll show you more of that here in a second right next And when I'm skipping it because Thomas is gonna talk about it I got the Momosh dog stand I do kind of like the one with the cover better because Rocky's black and sometimes he sticks out But the hassle of putting it together and stuff I just decided try to get him covered up and I'll use this one because it's so simple Momosh makes it really is my favorite dog stand and underneath you can you can tighten it There's Velcro if you need to make it looser or tighter or whatever and then these legs Extend all the way out or come back in so it's pretty slick sick of waiters I'm not gonna talk about the waiters themselves. We've done enough videos on these But I had seam failure in the crotch in my waiters right in the very crotch where it's like sewn and I started feeling a little bit of a leak in my Right boot for its third season which the boot things mine. That's where in terror right like I stepped I was in a bunch of sharp rocks and I felt one puncture like I felt like went right through Anyways last year both those things happened within a couple days of each other It was at the end of season. I was like, oh, I'll just send it in after season I will I send it in the crotch is seam failure That's on them and they fixed it no charge the boots However is on me right like if you wear the boots out whatever you gotta buy new ones They fixed the boots for free guys. They didn't charge me one single thing. It's like how do you beat that? So basically I got brand new boots soon. It's fixed no charge. Next up got the Lander duck strap I love that. I'm gonna get a different one this year because this is really wide. There's another one That's more narrow than that. I just I had a long time ago and I lost it So I'm gonna get another one. This is a must for when for in the boat When it's 20 degrees outside and you're going 30 miles an hour Is that your whole runner? This is my whole runner Whole runner set up right here Amazon 2599, baby. Can't beat it. And then if it gets a little too toasty for you There you go final approach Decoy gloves these things are sweet and I'll tell you another reason I think I'm gonna love these is for run running the boat down the river Just to have in a good grip and their waterproof windproof So not only what I said our decoys up with these, but also When we're rolling in the boat night core Thomas got me hooked on these a long time ago This is actually they actually sent us these these are the HIC 65 night core and this goes even brighter than the one. I can't remember the model. These are 1200 lemons. They're less No, they're more. What's the other one 600 a thousand a thousand Okay, and you can tell a big difference and they do different things they flash They have two to three different lights on this. It's pretty cool. Anyways, they sent us two pairs of these I believe you have I keep yeah, these are by far the best flashlights out there rechargable must have Thermosel, I don't even think we've really put these in any of our videos But for early season when the mosquitoes are out don't leave home without it farm to feed Everybody knows if you know me good enough, you know, I swear by these socks I wear my regular cotton ankle socks Underneath but I throw these over top inside before I put my waiters on their wool.  Don't get all sweaty. This is actually a version There's two that I've been trying out this year and I like them so far I was telling about these these are the mid-weight So these are heavy weight and which I use from beginning to end of season But this year I'm gonna use these early season till about middle season this year. I bought the X maker Kirk McCulloch cut down. He's been on our podcast guys. Check our podcast out if you like hunting fishing big game politics Anything like that guys we do it all on our podcast then beam show check it out and he came on our podcast Go check that episode out. It's awesome So much wisdom and knowledge there someone that's been duck hunting for years and years and not just in the timber But this is a beautiful call Little different, but he swore to me in that podcast It's gonna bring the ducks down, but I guess I gotta learn how to blow up first. Anyways hybrid beer bottle color as the name This is a JJ layers hybrid. I think I'm running a What's the stock 350? Yeah one three one point three five zero in this I got the t1 timber large bore I love Jade Jade and black. That's new this year. This is I just didn't like the other color I had it was like a cream color, but I run 370 in this so pre pre longer read got my dog whistle got this Acme whistle What's the name of the guy that makes this? Billy John Quinto Does amazing whigen and then of course the spinning wing that doesn't I don't always leave that on there But that's for that new avian X spinning wing Thomas will talk about that probably in a second And then everyone always ask shout out to good friend of ours Jonathan at quack lanyards Makes awesome lanyards by far my favorite and this I've actually had this one for a long time So and one for this year heavy metal three inch foreshot is what I like in heavy metal heavy business for my 12 gauge three Six shot 20 gauge I'll be shooting three inch six shot and a little bit of heavy 12 this year too But more so probably heavy business and then the new 28 gauge. I don't know if you guys knew about that yet But three inch 28 gauge six shot going at 1350 feet per second with a one ounce load So really pumped to try to get on some mallards with that this year If you want to see a review of any of these guns shotguns that I have or Thomas They're on a challenge just have to go into like the shotgun review Playlist or whatever you can see all these but this is new for this year I've been wanting for three years now is the Benelli Ethos Cordoba best best mean the Benelli service treatment You know, I got to do that every year awesome gun, but I'm not gonna review it I'm just letting you know that is what I'm gonna be shooting this year got it in the black and Got the choke. That's a cryo choke, but I'm going to actually I think I'm gonna test this out with the Rob Roberts I think the Rob Rogers probably gonna win because he made it specifically for this gun But I'm excited about it really quiet gun low kicking low recoil. I'm excited about shooting it I'm paired with this ammo right here. I'm pretty pumped this season next my 20 gauge And I'll be shooting all three of these this year is the I've had this for two or three seasons now. I can't remember Is the fronky affinity elite three? This is a 26 inch barrel that 20 gauges a 28 inch barrel But one biggest thing I love about this guys is these ultra glow ultra glow Ultra glow Sights and I actually put it on my 12 gauge to just helps me acquire the target quicker Not that we're staring at them when we're shooting ducks, but really good shooting gun throws up to the eye really well and I put on this year Finally because this had the cryo chokes on it to I believe if I remember it no true luck This came with true luck chokes, but I put on the power master code black duck that took us bad guys I had it on my 12 last year it proved itself to me. I don't need to see any more testing final approach Gun case actually really like this get they have plenty of room inside of it Got some pouches on the side and it's waterproofing zipper But floating case to believe floating case shoulder strap, but this bad boy if you guys haven't seen this yet And I'm assuming a lot of you haven't oh Look at that being bad way there. I got a video on this So you can go look at there So again, I'm not gonna review it, but it just got a makeover a little face lift And it got the heavy shot logo because no matter what if I work with him or not I believe in that ammo and I'll always shoot it So I wasn't scared one bit to put that on my gun because it is laser engraved my logo so sick in the metal Right there, and then this is a burnt bronze custom mix on this gun with heavy distressing Then again, I put the ultra glow Sight and the powder master I used all last season season the clip black duck and then a little Little surprise there on the bottom No, it's literally guys like I've said this in that video that I did a review on this It's like I got a brand new shotgun. He even Seracoded with this high-end seracoding. That's different than the body It's thinner. I guess the mill for this he redid all this pre-panded in the brownie logo all that stuff So it's pretty sick last but not least and then Tom's gonna run through his stuff I wouldn't throw this in there. They don't know about me But maybe they will tell my sentry if you go check them out is public pursuit the public pursuit Dot-com and is what this is. I use a freelance duck hunting's It's the North American waterfowler that you can go keep your stats shooting birds We're you know harvest it for the season, but I think what's really cool. Thomas, and I'll let you see inside It's leather bound. It's just I don't know It seems like a really good gift like probably an awesome Christmas gift honestly if you look what's inside of it This is what I like. There's just again that other thing I put him in with Elliott is cool But I think I want to do this too on top of that So it gives your alarm when your alarm went off arrived or set up shooting time when you left the pond How many people in the group and who they were dogs Temper all that stuff as you can see you can like draw in your decoy spread Because if you want to be a successful duck hunter You got to keep records and I've been keeping records for quite a while now and that way you can know like a The water levels this time last year was terrible and they're the same this year They're not maybe I don't want to hunt there. I want to go somewhere else moon phases That's another big thing to me it mowers a lot when duck hunting just like it does in other forms of hunting too So I'm gonna keep a really good log and try to do this for the next several years in this without further Do my brother is gonna do the rest of the story. All right. What's going on guys? I'll run through my calls first. I'm running the hybrid. This is the same call I've ran for the last I think three or four years. I run a 1.355 and I need a new read right now But I haven't got the got that yet. Also got a poke pattern Wood whistle on my lanyard. I like it sounds good. It's pretty soft. I got another whistle over here Ty's already told you about it, but it's the Acme whistle. It's got a little cork in there Same thing. This is the pentail version of the same whistle same lanyard maker quack lanyards shout out He made this little Piece of plastic with the logo on it, but he made the lanyard to I'll probably always use this The only time I don't use this is like I said last year on the the loadout is when I use Sid cuz little straps that I just slip them in my waiters and it's like a lightweight option You guys probably seen us a lot with our glasses Leopold We've had these and use these all last year. These are the packouts. It's the smoke gray lens I believe all their glasses have Polarizing on it and they have like I don't know three or four different Lens options, but I like I like these a lot for hunting every day whenever They're not super shiny for you know hunting, but if you wear glasses, you know like I can't go go without wearing glasses Like every single day if I walk out the door without glasses I feel like my eyes are gonna blow up or something. I don't know we got pretty much every decoy FA Offers we got the green wing blue wing Cinnamon teal mallards gavel widget and pentail We honestly beat the I will I will say beat the dog out of them, but we used them without Trying to baby him and we used them a lot last year I don't know if we have a count of how many hunts we actually put them on but we've actually got them washed and Shined up for this season. They're ready to go So they do look pretty good and honestly we went through all these and there really wasn't any Decoys that I could say oh wow. There's a there's a bunch of chips or they broke This will be your two with these all these decoys. They pair really well with their FA rigs call them egg weight That's the style that's on here and they'll slide up and down on the the coated steel rig there and they got really nice sturdy Swivels on there.  We got these in the forefoot. I just no complaints with them at all That's Cali boys. We get a lot of variety over here and these By far are the best-looking cinemas. I've seen these things just pop on the water You know get some good color in your spread. They look awesome. Moving on I bought this last year by recommendation of our good friend Harrison. We use this on a hunt Actually, he had a different version of this These are called a wind wacker. These aren't new guys I'm sure almost everybody knows about these already, but we hadn't really used them before the version He had was the the fiberglass pole Version and he basically slides it in his gun case and you can basically pull this off pull it up and He just slide that right in his gun case and he always has it in case he don't have some kind of battery Operated motion or you know this stuff like that guys that can help your success. You always got options It's the times that you don't have it is when you need it and you're you're really upset at yourself This is something else we've talked about for a couple years now Higgs and pulsators. These are still one of my favorite Battery-powered motion decoy just for the fact that they're so quiet You do kind of have to be Gentle with them a little bit because there's a pump on the bottom And if you get a guy that just likes to throw decoys around everywhere Sometimes, you know, there's things that can get caught this thing works in shallow water deep water whatever and it's really quiet Moving on to spinner. This is made by AB next we use these all last year They held up pretty good battery life is good. There's a couple features that we just like about them They look really good by the way And then you could just plug them in on the bottom Don't even have to take a battery out nothing like that and they got a couple different settings We use these all the time guys.   It's got room for days I have the next size down. I'm not sure what exactly size it is But I will say it's nice to have room sometimes if you're gonna hunt solo You might not need something like this unless you're gonna take a really really big spread And you got a dog stand and things like that This is another thing get decoys off your back helps out big time Titus uses that jet sled with the decoy cart And this is made by Rogers This thing is stout have not had anything come off of it No pins come loose no cracks in the welds or anything like that huge wheels so you can go through mud anything like that All right, so I'll just touch on the sitka stuff. I'm using I'm still using all the same stuff I have no complaints about it yet. This is the gradient hoodie I actually cut the hood off because I don't really like it. So it's kind of like a gradient jacket pants I got the heavyweight bottoms the gradient bottoms These things are extremely warm. So I would not do any hiking in these. This is the core lightweight hoodie This is still my favorite piece from sitka. I wear this from beginning to end of duck season This is the core midweight zip tee. This is a very good piece as well duck oven When it gets real cold or we go out of state or at the end of season whatever just This is uh, I feel like it's a little warmer than the gradient and uh It's a very very comfortable jacket and last but not least I got my delta weighting jacket I don't use this a ton. Obviously you don't need it until you need it, right? This is a waterproof shell There's no insulation in this and it's made specifically to wear with waders It's got the high pockets and kind of not a very long jacket. So everything's still the same with those I still got my sitka waders. Like Titus said, we did send them in for a seam failure last year I did test them out already. So I know there's no leaks For this coming duck season. I got the timber pattern. This will be the third year in these So like Titus mentioned earlier, we're going to be trying out some FA gear They're coming out with some clothing for this year and uh, it looks really good We haven't tested it yet, but uh, we're going to put it to the test this season So this is called the Branta jacket and they make a jacket and a vest Really really comfortable. It's it's a kind of more like a puffy material And they make it in a pretty nice like solid brown color So that'll be good to wear if you're hunting or even if you're just going around town So excited to use that. This is the cuta mid-layer pullover It's got a removable hood on it kind of more of like a mid-layer. So this is something else we're going to try These are some FA waiter pants Also very comfortable. This is another piece that I'm pretty excited about. This is a Rogers brand It's kind of similar to a sitka lightweight hoodie It's got a hood obviously and it's got um a mask got my weapons of choice. I got one in the Rogers Um floatable gun case and the new FA both these cases are very nice and this one Got the same ethos banelli cordoba ties cop, but I got one in a 20 gauge Um his his is in a 28 shot these not too long ago and I'm really excited to use this this year It's kind of taken me too long to buy a 20 gauge But I had just never Held anything that I was really willing to spend the money on Kind of took a guess With this because these were so hard to find how to buy it off online. So But man when I held it I was I did not have buyer's remorse at all. So Excited to use this and then you guys already know from last year's video. I also got an a5 And the wicked wings. This is the third or fourth year with me using this. I had a uh a beretta before that I noticed my my shooting went up dramatically when I got this gun. I still have my stock choke on there And I pretty much used a full at all last year I got my shotgun on here still and I just got a bracket. I forgot to bring it But I'll be switching this back and forth for my 20 to 12 gauge this year This is another another tool guys that feel like it's uh brought my shooting up Dramatically, man, I can't wait to put these things to work. You already know One handed. Hope you guys enjoyed this video. Don't forget to give it a thumbs up. We'll see you on the next one


So my name is Jonathan Whitaker. I am a staff software engineer at Okta and on zero And I'm also a core maintainer of the open FGA project Today I'm going to be talking with you all about Federated identity and access management for Kubernetes with open FGA And we will use key cloak in this example as well to represent an identity provider as we demonstrate this federation So to kick things off, let's just start with some simple definitions. It's often overlooked. What is federation? So the web services federation spec defines federation as the allowance of security principal identities and attributes to be shared across trust boundaries According to established policies. So what does that really mean? We have this stack, we have infrastructure, we have applications You know, we have identity providers We have a lot of security context and it's spread across various applications and infrastructure in our ecosystem And in order to ask, you know, access control decisions and to answer, you know, certain policies We need to be able to share that context across these boundaries And we need to be able to do so so that we can evaluate these policies across these different contexts Now in industry today, we have focused a lot in the last 10 to 15 years on identity federation and directory services So some of the existing standards and protocols for the federation of identities specifically These include things like OpenID Connect, OAuth2, SAML2 and the web services federation spec I'm sure all of you are probably aware with some of these, you probably use them in your day to day job, right? Now, this is where we've largely been focused in the industry again over the last 10 to 15 years We've been focused on the identity management piece of the identity and access management pie And I would argue that as an industry, we have yet to cohesively stitch together the access management side of the identity access and access management puzzle So I'd like to see more development, you know, as a community and as an industry in this space Stitching these two things together more cohesively So I'm going to pose a question to the community, for all of us today What if identity and access management was actually identity and, you know, underscore the and part access management If only we could start to establish some standards or protocols Maybe, you know, APIs for enforcing access controls across trust boundaries, right? This federation that we're talking about I think that OpenFGA is a project which can really start to bridge this gap Between, you know, identity providers, applications, infrastructure and in general our whole stack Authorization and access controls are everywhere So if you're not familiar with OpenFGA, if you haven't heard about it before Kind of give a quick overview of what it is OpenFGA, FGA stands for Fine Grain Authorization And OpenFGA is a flexible and performant authorization engine built to solve fine grain authorization What do I mean by fine grain authorization? Well, historically speaking, lots of applications implement ad hoc and custom access control policies These are oftentimes implemented in code as database queries You know, custom logic embedded in applications across your whole platform You can't go to one person in your org and say how does access control work across your whole platform Because that's custom logic that only certain people know OpenFGA was built to solve this problem And it's inspired by a system called Zanzibar that Google described in a white paper called Google Zanzibar And in this paper they described how they solved authorization at massive scale for all of Google services Now you can imagine how profound that is because Google is a huge company with lots of infrastructure Lots of applications and those applications have their own unique authorization models Their own entities, their own access patterns So to build a system that's flexible enough to enforce authorization across the Google ecosystem It's a pretty profound statement That's why it's such a powerful model OpenFGA was built from inspiration from that It's currently a CNCF sandbox project and we actually just submitted for incubation I think last week So hopefully sometime this year we'll graduate from sandbox to incubation And continue our journey in the cloud native computing foundation ecosystem It's actively maintained today by Okta and Ozzero The project actually originally started in Ozzero Labs which is an R&D division of Ozzero And we have a growing community and various project integrations So if you haven't joined the community and you need to solve some complex authorization problems Please reach out, join the community and find ways to get involved As a developer using OpenFGA I can kind of break down your interaction with our platform with our service Into three primary categories As a developer you first start by defining an FGA authorization model The authorization model is a declarative policy that defines how authorization works in your application So for example you can say users can view folders and folders contain documents That is the policy statement in plain English And you can actually translate that to a declarative model in the FGA modeling language We actually even have projects that have popped up in the community where you can take plain English And actually derive an actual FGA model from plain English too So there's a lot of really cool integrations and features that the community is rallying on with OpenFGA The second thing you do after you've defined a model is you write or you import relationship data This is the data that governs access control decisions in your applications These might be relationships, for example maybe a user has a role Or maybe a user has been shared access to a document Depending on what kinds of model and policies your application defines That will govern what kinds of data you write into OpenFGA OpenFGA becomes an extension of your application databases specifically for permissioned data To optimize to answer those permission questions The third thing you do is then query OpenFGA You ask OpenFGA for an authorization decision And there's different kinds of queries that you can ask OpenFGA For example you can ask OpenFGA the very specific question Can this specific user perform this specific action on an individual object We call that check and it returns a permitted and denied decision We also have other kinds of queries that allow you to query authorization related information In the inverse form so you can say what resources or what objects can a user view for example And this returns kind of list based semantics So what documents can user look as view We provide these APIs and allow you to query these questions from different angles So let's focus in for a little bit on what an FGA model looks like And how OpenFGA in general kind of models permissions So FGA models are modeled as a graph And if you're familiar with graphs you know that graphs are composed of nodes And in FGA we call these types and relations which are analogous to edges in a graph So in this example we have two different kinds of nodes We have user nodes and we have document nodes or types And in particular we have user Lucas and document secret We can define relations which define relationships between related types In this example the user type can be related to document types through read relations And through delete relations Now I use a dotted line in this diagram here because these relations represent possible relations In this graph of relationships And when I use the term relation you can think about that as just a permission Read is a relation here but that would be the thing that you're enforcing your permission check on So there's a possibility that a user might be related to a document through a read relation Or through a delete relation Those don't become concrete in this graph of relationships This graph of permissions until you establish a relationship tuple And this establishes a concrete path in the graph or an edge in the graph And it's formally defined as a triplet where you have some source subject A relation and some destination object So for example if you were to write the tuple User Lucas can read document secret Then that establishes this concrete edge in this graph of relationships represented by the solid line here And that now becomes a permission in this graph based model We have other features of our modeling language too which allow you to go beyond just basic relationship based access control policies We have what are called conditional relationship tuples So these allow you to express complex policies involving geobased policies, IP addresses, IP ranges, temporal access Quota based policies In this example you can see that we've defined different kinds of entities in our FGA model That's an example of an FGA model here We have users and we have groups of users And a user can be assigned as a member of a group That's what these type restrictions in the brackets represent here There's two cases that are represented in this model You can assign a user to a group unconditionally No condition is involved in that But the other option is you can assign a user to a member of a group With a condition on a temporal grant for example So this is an example of a temporal access policy Where you can give a user access to a group Or assign them to a group for a window of time In this case if the current time stamp is less than or equal to some grant time The time at which you add the user to the group Plus some grant duration Then that user will be considered part of that group If you're evaluating that relationship In a way such that that expression is not met or fulfilled Then we will consider that relationship as not present in the graph essentially So with this mechanism you can express very complex policies And these expressions here that we've defined use Google's common expression language Which is an extremely powerful expression language Allowing you to express a lot of different kinds of conditional expressions Here's another example of an FGA model That we will kind of use throughout the rest of this presentation In this case we have users, we have role bindings, roles and resources This is kind of analogous to how you might implement role based access control With open FGA and this relational based model You have resources and you have actions that you can perform on a resource such as GET And anyone who is assigned to a particular role can get a specific resource And you can assign people that have a particular role binding can be assigned to that role And then you can assign individual users to a role binding So you can bind a user to a role through a role binding and then grant access to a resource through that role So let's take an example with Kubernetes role based access control Which many of you might be familiar with If we wanted to see if some user Lucas could perform the GET action or verb on resource pods We can actually use that model that I just showed you in the previous slide Here's how we can do that We can first say anyone who has assigned the GETR role can get resource pods And anyone who is part of the subjects that have the GETR's role binding Automatically has the GETR role And in this case user Lucas is assigned to that role binding So user Lucas has the GETR's role binding which gives them the GETR's role Which therefore allows them to get resource pods So by following the edges in this graph We can implement role based access control policies with this relational based model In this case you see user Lucas allowed is true because there was a path in this graph We can extend that So that was a very simple example But you can imagine how that can be extended more generally to Kubernetes based access control policies So here's an example of two Kubernetes resources, RBAC resources A cluster role and a cluster role binding And I've color coded this specifically so that you can kind of understand how this would map to this relational model In this case we have the cluster role called reconcile deployments allows GET list and watch verbs on deployments in the apps API group And it also allows the update verb for deployment status in the apps API group On the right hand side we have the cluster role binding called deployment users And user Lucas is bound to that reconcile deployments cluster role So in this graph based model you can see user Lucas is assigned that cluster role binding deployment users Anyone who's assigned to that cluster role binding can therefore is a reconciler of deployments And by being a reconciler of deployments having that cluster role You can list and watch and get and update these different resources in Kubernetes So using this relational model we can express very fine-grained access control Beyond just standard Kubernetes RBAC We could even add more features that are not implemented in Kubernetes access control policies today By leveraging and exploiting this graph based relational model On the identity side of things Let's pretend that you're using key cloak as your identity provider Now this can also apply to any other general identity provider Maybe you're using ping, maybe you're using octa, zero, whatever it might be You can manage users and groups from your identity provider side of the story So in this case there's been an awesome community contribution by Martin Busozzi called Key Cloak OpenFGA Event Publisher It's an extension for Key Cloak that listens to user groups, changes or events And it pushes relationship tuples into OpenFGA So the idea is when a user is added to a group we can write relationship tuples like this The one on the bottom is the primary one that would be written by Key Cloak today It's just a direct user-to-group membership User John is a member of the FGA group But you can imagine in the future too OpenFGA can go beyond that We can do nested groups and we can do hierarchies and complex relational structures Anyone who's a member of the FGA group is also a member of the engineering group And user John is a member of the FGA group So therefore user John is both a member of the FGA group and the engineering group And we can express this complex inheritance hierarchy by leveraging this relational model So in the future, and this is a call out to the community and to Key Cloakers out there Maybe Key Cloak could use OpenFGA to natively store group and user relationships And be able to get features such as these complex temporal policies, geobase policies And these nested group structures natively with that integration We don't have that today, but that would be really cool, really powerful So let's take a sample use case Let's look at Kubernetes access management We described earlier how we can map this model But let's describe maybe how we can improve upon what we have today So today developers can map OpenID connect group claims to roles in Kubernetes So the idea is you can authenticate against your Kubernetes cluster using OpenID connect And your OIDC provider can return a token that embeds the groups that you're a part of In that identity provider So in this case maybe you're part of the Kube admins group On the Kubernetes side of the house you can create a role binding Where you say anyone who's part of the Kube admins group of that OIDC provided claim They can read deployments in this case Now this works great, it's really powerful But it's static, right? If you have different kinds of policies that you want to enforce in your identity mappings For example, maybe you want to add temporal access Maybe you want to revoke users relationship to some group more dynamically We can do better than this because in this scenario the information is provided statically in the token And so you would have to force a re-authentication event or somehow revoke the token that's been previously crafted So I think we can do better than this as a community, long term With that in mind, what I'm going to be demoing is kind of a proof of concept with Kubernetes federated access And the idea here is we're going to use key cloak as the OpenID connect provider for Kubernetes authentication So we'll authenticate against our Kubernetes cluster using key cloak Key cloak will manage the identity based policies such as groups and group memberships that users have And then we'll have a Kubernetes controller which reconciles RBAC policies that you are applying to your Kubernetes cluster And it will synchronize those, this controller will synchronize those into OpenFGA in real time So I have a single centralized OpenFGA instance that has policy information and data being managed by two different parties Key cloak, Kubernetes in this case Kubernetes can then delegate authorization decisions to OpenFGA And those decisions will be influenced not only by the policies that are being governed by Kubernetes, the RBAC policies But also the policies that are being managed by the identity provider, the user and group policies And so the way we're going to do this is with a web hook, the web hook authorizer in Kubernetes It's very powerful, very extendable Here's an overview of what that architecture looks like, what I just described So over here on the Kubernetes side of the house we have our authorization web hook And that calls out to OpenFGA and uses our various APIs that I described earlier You can make authorization checks, you can look up resources that the user has So you can use that for resource lists or collections and filtering And then we also have this controller that watches for changes to policies in Kubernetes, our RBAC policies And when changes happen with our RBAC rules, we can write those into OpenFGA In addition to that, Kubernetes is using OpenID Connect authentication with our identity providers On the identity provider side of the house, this could be any IDP that supports OIDC For example, as well as a common standard for synchronizing information And there's a standard out there called skim, outbound skim, which would allow us to synchronize user and group-related information Maybe identity-based roles, and we could use that mechanism across any IDP that supports skim To push this information into OpenFGA So that's the high-level architecture Now let's go ahead and jump into the demo And we hope the demo gods bless us, right? So the first thing we'll do is we will bring up an instance of OpenFGA We're just going to use Docker in this example You can deploy OpenFGA as a service, we have a Helm chart You can deploy it as a sidecar model, and it's written in Go So if you want to integrate it into your Go app, you can actually integrate it natively as a library So there we go, we have an instance of OpenFGA up and running And I'm going to run a little command here, which uses our CLI, the FGA CLI We are going to create a store called kubedemo So what is a store? A store is a way for OpenFGA to scope relationship data So when you create a store, all of the relationship tuple data All the permission data that you're writing into OpenFGA will be scoped under that context So you can use this for managing different environments Maybe you have a store for a dev, staging in a prod environment Maybe you use a store to provide a tenant isolation mechanism There's a lot of varieties you can use for stores We'll go ahead and create that store And I have a little helpful command here that I'm just using To set our webhook authorizer config to use that store ID So you can kind of ignore that, but that's our store We go over here to postman, and we can look at the stores in our OpenFGA instance You can see that we have this new store, has this identifier, and its name is kubedemo We'll go ahead and use the read API to read these relationship tuples that exist in this service There are none yet We haven't added any users to any groups on the key cloak side of the house We haven't applied any RBAC policies to our Kubernetes cluster yet So we wouldn't expect anything at this time Let's go ahead and bootstrap key cloak So we'll bring up key cloak And the key cloak import job here is just bootstrapping some resources So we're creating a client application so that we can authenticate our Kubernetes CLI against the client app And then we're also creating some groups and users that we'll use in the demo So let's go ahead and switch over here to key cloak And we can log in with our just default credentials here It's going to warn me to change my password You can see that we have a kubed gatekeeper client application That's what we will authenticate our kubed CLI against And then we have a john.wittaker at octa.com user here That user is not part of any groups yet And we do have this FGA backend group So I'm a backend developer, maybe I want access to a specific namespace in Kubernetes, for example We'll go back over here and let's bring up our kub API server I missed it Let's see here There we go We'll bring up the kub API server, which is called API in this case The webhook authorizer, which is that open FGA controller and authorizer that Kubernetes is using And then etcd, which we need to run kub API server Okay, that's up and running That's great Down here in this terminal, and I should ask, can you guys see this okay? You're good? Awesome, thank you I'm going to bring up a terminal down here that just shows activity in our reconciler and our webhook authorizer Like I mentioned, we don't have any tuple data here yet So let's go ahead and let's apply an RBAC policy to our Kubernetes cluster Here's an example manifest for some RBAC resources We're going to create a namespace called FGA backend And in that namespace, we will create a role called deployment reader that will allow the get and list verbs on deployments And we'll create a role binding that gives the FGA, anyone who's a member of the FGA backend group The ability to read deployments in that FGA backend namespace So that's what our manifest looks like We will go ahead over here and we will apply that manifest And you can see we created those And you might have noticed a lot of activity in this bottom terminal That's our reconciler recognizing that there are changes to our back policies in Kubernetes And you can notice here that we see activity of writing those tuples to FGA So if we go back over to postman and we do a read, there's now a bunch of tuples in here The ones that are kind of most notable to point out is this tuple here It says that there is this K8 resource And it refers to deployments in this FGA backend namespace And anyone who's assigned the deployment reader role in that FGA backend namespace Can perform that list operation, the list verb I won't bore you but there's no other tuples in this set that you establish user-to-group relationships yet Because we haven't added a user-to-group in key Cloak yet So let's go back to the terminal And we're going to act like we're a user, john.wittaker at octa.com in our identity provider So we're going to try to get deployments in that FGA backend namespace with this user This is going to ask me to authenticate by following a redirect URL here So I'm just going to open that up in an incognito browser so we get a fresh session and everything And I'll log in with john.wittaker at octa.com That's my password, we've authenticated now against our Kubernetes cluster If we go back to our terminal, we can see that we got an unauthorized response from the Kube API server This user with this ID cannot list the deployments resource in the FGA backend namespace That was forbidden So let's go back into our Kubernetes administration console And we will go to users, go here, and we will add john to that FGA backend group If we go back to our CLI now and we run that same operation Notice we got a different response this time Now I haven't applied any deployment resources to the Kube API server So we don't get any resources back, but we don't get a forbidden response So this request has been authorized So we just added, you know, we just changed the policy if you will A user group mapping in our identity provider And we actually saw a policy enforcement change in our Kube API server Because it's all federated through this central authorization engine called OpenFGA, right? So we can go back, I'm going to remove this user from that group And you know, we can come here and we can show it's forbidden again I wanted to demonstrate something that we could do in the future If we have more native integrations in our CNCF ecosystem with OpenFGA I mentioned earlier how we can model temporal access policies, you know, geo-based policies and IP-based policies So I wanted to show what that could look like If, for example, KeyCloak allowed you to say that I want to add a user to a group But only for a certain window of time, right? Maybe only for 10 seconds or 30 seconds Maybe it's a support engineer that needs access to administer certain portions of your Kubernetes cluster There's a lot of scenarios you could imagine here This is the example that I wanted to just demonstrate So we have this model here, users can be related to groups And those users can be conditionally related to groups with this temporal grant Which is similar policy that I showed you all earlier That temporal grant says that if the current time is less than or equal to the time that I granted that access to that group Plus some grant duration, right? If that current time is less than that, then we will consider that user to be part of that group Otherwise we will not So I'm going to simulate what that might look like KeyCloak would be writing that information into OpenFGA Since KeyCloak doesn't have that support today I'm going to simulate that using the FGA CLI So I'm going to go back here and I'm going to grab this user's identifier And I'm just going to put it right there Copy and paste this And hopefully I get my time conversion right Speak up if you see something wrong So it is the 21st and we are plus one UTC So it's really 451, right? So 1651 here And we will grant this access for maybe let's say 70 seconds Right? So we wrote that tuple and if we go back here and we use this Notice I didn't change anything over in KeyCloak I removed that user from that group in KeyCloak If we go back here That user is not part of any group in KeyCloak But I'm simulating as though that user had been added in KeyCloak With a temporal policy Now that policy should expire at the top of the minute Plus 10 seconds So hopefully here in 10 seconds or so We should see that that access has been revoked We got an authorized response prior And now if I run that command one more time I get it forbidden response So we just enforce the temporal access based policy So that's my demo That's what I've got for you guys And I just want to pose the opportunity to you guys The community Our team is only so large And we need help integrating open FGA into your applications So that you can enforce these kinds of complex policies You can imagine if KeyCloak could have done that out of the box I would have had to simulate it That would have been really powerful and really cool So getting back to concluding thoughts I believe that federating identity and access policies Across systems is extremely plausible with open FGA In fact, open FGA was exactly built for this For the same reason Google built Zanzibar They wanted to be able to enforce access control policies Across every application in their whole company Cross application Cross infrastructure access management I believe that native integrations with open FGA Offer unique features such as temporal access policies And other policies that we mentioned earlier And I'd like to see the community adding more of this Native integration so that you can benefit from these things I learned in this whole process Which was a really fun learning opportunity That Kubernetes webhook authorization Is extremely powerful and extensible And it was quite easy to get that up and running pretty quickly And I think it provides a really powerful mechanism To extend it There's more work to be done on the open FGA authorizer Webhook authorizer for Kubernetes It doesn't have 100% fidelity with the existing Access control policies and models that exist in Kubernetes We need to continue extending that more But in theory, in the future it could And I just also want to say special thanks To some people from the community in particular Lucas Kaltstrom He helped on the Kubernetes side of the house He was huge and instrumental in helping do the mapping And enforcing the access control policies From the Kubernetes side And then Martin Bazzosi did the key cloak integration That you saw that secretised the user and group information So thank you very much for the hard work and help there And I'd love to see more contributions like this From you guys on whatever cool projects You were all working on Take the time for some questions If you have any Yeah, and thank you Hi The actual graph How does open FGA How does open FGA secure That skim provisioning object Or call and then how does FGA actually secure The data that's stored in the graph Yeah, so the question is How does open FGA basically enforce access Over who can write the data And how the data is enforced over the graph There's kind of two components to that So the data itself is stored in open FGA As a flat triplet just like I described And we actually apply an iterative graph traversal That's defined by the FGA model Over that normalized triplet structure So that's kind of how the mechanics work there There isn't necessarily any access controls Directly over the storage data You know, we store that Scoped by store ID in the database To answer your other question though What we had was we had multiple parties We had Kubernetes and we had key cloak Managing different resources In a centralized store, open FGA And so what we can do in the future I will say we don't have this yet But we plan on adding fine-grained access control To FGA ironically, FGA on FGA is what we call it So the idea is that you could have certain Service accounts or client applications That have the authority to write Relationship tuples for certain object types So key cloak could be the authority That has the rights to write group And user relationships And Kubernetes is the authority That has the right to write Those K8 resource types So we can enforce access controls Of the data that's being written Into the access control system To the appropriate authorities Does that make sense? No, that was an example Of an integration that we could provide We don't yet have open FGA itself Doesn't provide the skim That would be provided by Like an external party Maybe an IDP, something like that Yep, thank you Any other questions? Cool, well if you do You can all be around Feel free to stop by and ask questions Love to hear from you And as always check us out We're on openfga.dev And we have some other Community facing repositories We have a Helm chart So if you're in the Kubernetes ecosystem You can install us pretty quick Feel free to get involved And reach out on cncfslack The open FGA channel We appreciate it


Shift bases and their complexes are versatile compounds synthesized from the condensation of an amino compound with carbonyl compounds. Many shift-base complexes show excellent catalytic activity in various reactions and in the presence of moisture. The influence of certain metals on the biological activity of these compounds has prompted a considerable increase in the study of their coordination behavior. This article was authored by Ahmed Maboudif and Ibrahim M.A. Mohamed.


Mentoring Students with Disabilities in Research Experiences. My name is Richard Ladner. I'm the Principal Investigator for Access Computing, an NSF-funded project with the goal of increasing the participation and success of students with disabilities in computing fields. Every summer, we support students in the Computing Research Association's Distributed Research Experiences for Undergraduates program. Many of these students continue their research and go on to graduate school. Hi everyone, my name is Erin Howard. I use she and they pronouns and I am a student at Western Washington University. I applied a lot of statistical analysis via Python to programmatically pre-classify over 275,000 light curves from stars in the Transiting Exoplanet Survey Satellite Database. Hi, my name is Emilia Belden and I am from Gallaudet University. The project is about improving live captioning and teleconferencing like Zoom, Hangouts and Meet. When I first saw the project, I thought, yes, what better than to help improve the accessibility of the deaf community and those who need access? For me, mentors were what helped me be successful in computing and the IT field. They have disabilities themselves. They can't hear, can't speak, but that didn't stop them from being successful. Hi, my name is Browna Weimer and I am currently a student at the University of Alabama. My disability is ADHD and so just for me, it's helped me develop a passion of what I want to work in and develop that kind of determination behind it. My project over the summer was basically about making a biofeedback game that increases emotional regulation through respiration techniques and uses positive reinforcement. The advice I'd give to research mentors working with students who have a disability, be patient and be kind of aware of their situation. Also be sure to check in with the student frequently and make sure they have access to information as well as be able to communicate. Take your time with them, allow them to open up to you about it, don't kind of push for it, just allow them to get close enough to you because when they do, they will feel comfortable enough to talk to you about the disability and talk to you about what they need as a student with disability to help them. And then once you know that information, you can help them to the best of your abilities. To learn more about supporting students with disabilities, visit the Access Computing website, uw.edu slash access computing. Access Computing is funded by the National Science Foundation, grant number 153-9179. Any questions, findings and conclusions or recommendations expressed in this material are those of the author and do not necessarily reflect the views of the federal government. Copyright 2022. Permission is granted to copy these materials for educational non-commercial purposes provided the source is acknowledged.


What's up everybody and welcome to a special edition of the Falcons final whistle podcast We are here at Mercedes Benz Stadium in the Delta Sky Club Recording this podcast live. I'm Scott Bear with me is my tag team partner Tori McElaney And also here a very special guest cornerback AJ Terrell AJ Terrell is here everybody Yeah now a Couple quick things about the format right so we're gonna have 12 minutes or so with our main man here and then after that we're gonna open it up for Questions from you guys to ask me and to ask Tori so get those questions ready We are gonna have that mic circulating around this is gonna be a really great time to get to know AJ and get to know This Falcons team better so with all that AJ first question to you You see all these people jacked up to see a guy from their hometown Playing for the Atlanta Falcons. What's it like to interact with these people? Appreciate it. Uh, it's just it's different. You know, I mean just a bigger platform And I just got a lot to you know give and just out there playing on the field just gave me a lot of motivation AJ, it's funny. You have been at the Braves you throughout the first pitch Then you were at Laney United. You were the Golden Spike hitter. I'm pretty sure that's the name of what you were Of those two, what's the more difficult? I thought the pitch was gonna be sweet, but it wasn't sweet Yeah, I had ended up spiking that one in the ground up. The spike was easy though Yeah, you know, but there's both great experiences and just something that I Definitely loved doing so it was just giving back in my way Yeah, how much did it mean to kind of see other Atlanta fan bases kind of take to you the way that they do It mean a lot that mean, you know, I'm just growing You know year after year just out there just off my play and just a presence of me being on the field and playing with my teammates and just get everybody, you know Tighten it and just the fan base and everybody. I just appreciate everybody just locking in with us and riding along This this this path that we going on and just try to get to the playoffs get some W You grew up playing youth football right down the road basically at Ben Hill Park, right? You were there for the oomph squad if I got that right For the oomph squad. What's it like playing professional football so close to where you grow up and how important this area is to you? So surreal just being able to like right now just being down the street from Camberton Road, right? Ben Hill is and just being on the big stage right now just putting on for the city It's just like amazing. Like it's so surreal Now Scott, I know wanted to ask about your brother, right? Is it nice to see him? I mean you get to see him kind of go through what you went through not too long ago You're not that old man. How does it feel seeing him kind of go through that what you did? just It's no surprise, you know just all the work We don't put in him just watching me as I you know went through all my phases and him now being himself and Just locking in with football and becoming a player He is is it's make me proud You know just setting up setting away and paving in his way, you know to college is definitely amazing and and you're kind of paving your way into this league and In year one you had a really good year or two it seemed like I mean second team all-pro, right? Second team all-pro that says a lot. How are you able to make that jump in year two to be one of the NFL's elite? defensive backs Just locking in, you know taking care of my body Just being ahead of everybody in the film room and just trusting my ability just going out there and just playing calm free And just having fun with the game. I think recently you were named one of the league's most Underappreciated players and the word I know right and then underrated is a word that I think has come up a few times Do you like that moniker? Do you like kind of having that moniker? Or is it kind of a sign of like, you know what like underappreciated undervalued like how do you feel hearing that? Controlling me. Yeah, I ain't really worried about what they talking about. You know, I know where I stand. So really just Like I said just going to tacking every day in the way Um in the weight room film room just with the team and just doing my job and everybody else do their job And you know everybody get they shine. So that's how I feel about it And there are a lot of new faces on this defense including Casey Hayward who said a lot of nice things about you What's it gonna be like playing opposite him having that veteran a guy who's done it a guy that can still really do it at a very high level Like you said just experience, you know, Casey definitely a he had all pro himself and he got so much experience under his belt And just me being on the opposite side of him is like a blessing Just having an older brother and just getting some knowledge from it, you know, we can't week out and in practice and all that So just having him as an outlet is something I appreciate. I think it's funny because I'm pretty sure on the last like five Podcasts whenever we talk about what we're excited to see in 2022 I have said you're pairing with Casey Hayward every single time now that you've gotten to know him a little bit I know it's only been a short amount of time, but what do you like about I know you just said experience But what do you like about who he is as a guy as a player? No, you know, we got the same agent So I know him outside of outside of football. So we already had a relationship but uh just Just a the bond we have being able to relate, you know, you've got somebody that you talk to you You know, some people don't can't relate with what you done been in But like I said, he got so much experience Anything I asked that he could tap in with me and understand what I'm saying You're just starting to get to know this 2022 falcon squad. What can these fans expect from this group? Trying to a we're gonna get some Ws this year. Um, we gotta go to the playoffs and that's that's the main thing Just just thinking a big picture. Um Gotta gotta take it one game at a time, you know, just going in Uh going in practice the way we prepare Everybody just being on the same page And uh just going out there and winning that one game each week is the main thing Okay, this is the fun part of the podcast. We're gonna have a little bit fun Even though we've already we've already been having fun. I mean But this is gonna be a little bit different.  We're ready.  There you go. Your biggest pet peeve I got a lot of those Uh, I'll say See I have a problem with like slow drivers. Yeah, the main one is smacking I hate when somebody eating next to me. They smack it like okay, no to sell see him out at a restaurant Close your mouth for sure.   I've seen those going right. It's a lot you I don't think you that that one I'm gonna have to just keep you gonna keep okay. We'll save it for during the season Right. Yeah, we'll tap back in with that one. All right. If you're choosing text call or FaceTime text The fam is like, oh it's text all the way if we ain't tight if we ain't tight just text me like I'm not gonna answer. No phone call or FaceTime You're left. Okay. The last movie you watched life Good one. Y'all know what life is. Is that the one with eddie murphy? Ah, yeah, yeah Good one Um, the teammate that you spend the most time with teammate Mm-hmm I feel like me being here I got so much range where I can like just go have fun. Yeah I I tap in with all my teammates when I step out but Um The easy way I could say is kasey kasey. Okay. I like it. I like it. Um, your favorite Atlanta restaurant Come on Waffle house Hey, honestly, the quick one is always gonna be american deli. Okay. All right. I can get behind that There you go. Um, now I have seen on instagram your son has some serious style I honestly, I'm gonna say this. I think you may have better style than you know, I'm just saying It's close. It's really close. I'll try. What's your favorite outfit of his? Uh I like his shoes, man. Yeah, I ain't really post a lot of pictures of him on there But the one I like the most is him and it's a central fear of god fit. Okay sbs.  Um, like I said, we got so much going This year a lot a lot of new faces. I feel like it's it's a marathon where we trying to go like I said with one game at a time and uh If anybody don't know the marathon definitely from nipsey hustle, so I like that word and it's just always just going to be a marathon Awesome. Love it. I think that's pretty much it. We got that's awesome. AJ Terrell. Thank you so much the crowd Thank you guys so much Better than we ever could have hoped for AJ. Thank you so much man. Appreciate the time now We're going to enter into phase two of this podcast There's going to be a microphone circulating around if you guys have any questions about AJ about the 2022 Falcons We're going to stick around for 10 15 minutes something like that ask her anything that's you anything that's on your mind We can definitely talk about and tori There's uh, uh, so anybody who who wants to ask a question raise your hand We can get you a microphone and we can get this thing going but tori As we head through this ota's right where about halfway through it We're just getting to know a lot of these new players What are your impressions of this team kind of as you're getting to know a new quarterback A new quarterback so many new faces molding molding together with so many uh young players Well, I think that's it exactly is it's new. I feel like right now We are in a new era of falcons football and I think I've said that it's like Guys like AJ guys like cal pits. These are the new faces of this organization But it's not what it once was and we're still trying to figure out What exactly this team is and how they're going to operate and not just in 2022 but beyond into 23 24 25, I mean we're looking at AJ was talking about the Marathon that this is and I thought that was the perfect word to describe Where this falcons organization is and where it's wanting to go. This is not a sprint This is a marathon and it's a marathon over this season where they're going to try to win as many games as they possibly can It's a marathon over several seasons as they get right with the cap They continue to build up this roster around guys like AJ guys like kyle There's going to be a new leadership core here guys that are engaged with these fans signing autographs. How cool is this? Yeah, love it. AJ could have just bounced. He didn't he's sticking around. He's signing autographs He's mingling with people from neighborhoods where he grew up. I love that. I mean that's so great That's what's so cool, too Is there are a few guys from not just the Atlanta area But the state of georgia at large who are a part of this team and I think that is Something really special that not every NFL team has and to be able to be a part of the culture of Atlanta I think is very very important.  Like I've been here. I've seen this organization Throughout the years and it does feel different. It feels newer It feels fresher and it it does feel like this is the the foundation of what terry font note Arthur Smith what they actually want to build here And that's why I think events like this Are so key because fans can come out and interact and meet all these new personalities and these young players Because for so long it was matt ryan. It was really jones, right? It was tony Gonzalez if you want to go way back and when you have these new people you want to get out and meet them You want to see that they're real folks who like american deli? That was a good choice, by the way Yeah, and and I think that those things are important now Now that they're kind of building this culture, right? I was actually going to ask him this But so much of that chip on your shoulder conversation. Yeah is going on, right? I can feel that Yes, and one thing that I like that that grady jarrett said is he said it's not just with the players Arthur smith wants to prove himself as a good head coach terry font note wants to prove he's a good gm These guys are new to their jobs and their job titles So it's a big prove it thing the entire way and I think how these guys do they all want to prove people wrong So when they see vegas say, okay four and a half wins, right? Or they say vegas say five and a half They want to be above that and I think that that's the right attitude to have as we move forward here now There's a lot of talk about aj obviously aj was just sitting here You're going to write something for the website about about what arthur smith said about kyle pits entering his second year I thought it was a very interesting way to to a look at it because Look the guy had a thousand yard season. Yeah, but the expectations are higher Yeah, the fact that arthur smith has said on so many occasions Kyle pits is only scratching the surface of who he is As a player in this league that is To say that after you have the rookie season that you do as a rookie titan in this league I mean that's that's hard to do But what you're doing is you are having an opportunity to see what more he can be in this league And that's exactly what arthur smith was talking about as they were getting ready to go out and practice today Yeah, and I think it's it kind of lets your imagination wander because if you think he had the second best tight end Second best season by a rookie tight end in history Right and we're talking about scratching the surface And I think that we're going to see him move around the formation more and we're going to see him more actively involved because We don't know what we're going to get from drake london yet. He's big He has a huge catch radius. He did great things at usc, which as you see they ruin paints me to say But nonetheless, I really think that it'll be interesting to see kyle pits is the number one pass catcher Doesn't matter what he plays and I think to see what he can do next is going to be one of the most fascinating things that we That we deal with um before we get to anything else Forgot to thank microsoft windows. Oh, yeah, that's a big thank you to them the official operating sponsor of the NFL and the atlanta falcons the all new windows 11 is here to bring you closer to what you love Like aj terrell being a feature guest on this falcons final whistle podcast honestly love it Awesome, and we do have a question. That is so great. Thank you so much. We might have a couple Let's do it. Listen. My question is this Given that most of our receivers if julio was still here, he would probably be like one of the smallest receivers Just this being a talk for real. That's true. But having said that the question I have is Usually when you deal with a team like tambourine, you have one mic evidence you have to deal with You can kind of change a corner switch a corner do all that but dealing with us this year No matter where you go one through three It's going to be six four six three large catch radius yak And then you can have a chance an opportunity to Put cordial patterns in that like six two and a half in the back And I'm just kind of feeling like how do you what do you see our offense actually doing this year? Just with that setup, you know what I mean regardless of who the quarterback is and one last thing Ritter has tied in in college. It's like six five six six and it kind of like a match here. So What you thinking brother? Well before we get to that, maybe we need like a guest analyst maybe next week That was a pretty good breakdown. I'm trying to think of ways that I could do it better But I think the reason why I like this group of drake london brian edwards ought and tape That's a basketball team right kyle pits. Maybe the tallest one in the group Yep, I like the athleticism that goes with it These aren't big guys who can plod downfield and just out jump you right that these are guys who are athletic Who can go get the ball and I think it's going to be fascinating tory How do you I mean it should be fun to see how they're going to mix paterson into all this That's the thing is I was so glad you brought that up because I'm like I honestly don't say Receivers anymore when I'm talking about yeah, you can't do that I I say cordial paterson and kyle pits and drake london and odd and tape and brian edwards These are these aren't wide receivers. These are receiving weapons. These aren't the cordial paterson isn't a running back He's a weapon kyle pits isn't a tight end. He's a weapon that to me Makes if you're looking at this Honestly this group When you're looking at it in your arthur smith and you're being you're able to scheme for these guys You want to have you want to confuse the heck out of defenses? And I think that's exactly what they're going to be able to provide In this offense that I think a lot of times exactly like what you're saying in your question a lot of times You have one big guy now They have a lot of versatility it is something that arthur smith has valued since he got here in atlanta So where do you bring help and I think when you have two quarterbacks that are new to the system It's going to help them because at some point they're moving they're outside the pocket They're in trouble Throw it up see what happens the old 50-50 ball. Well the 50-50 ball drake london's probably going to come down with that Right and kyle pits we we saw in miami and in buffalo and in tampa, right? So many examples of that type of thing happening So I think that it's going to be a fun group to watch Here's the other crazy thing tori if you go back Even a couple months pre-draft this wide receiver core was like capital All caps major need, right? It was kyle pits and not a whole lot It was I think the only one because at the time alamedes akias hadn't yet signed his tender So it was like the only person that had even caught a pass in at that wide receiver core was frank darby Who was a rookie last year?  I think that's important as well So there was a lot that had to be done this off season Across the offense. All right. It sounds like we have another question from the crowd Thank how do you how do you think drake london will fit into our offensive scheme? I think he's tailor made for it. Yeah, I think that the really cool thing was that the falcons took the first wide receiver available so They had the pick of the litter and he chose their scheme fit Which is a big guy who can move around down who can move downfield a guy with a huge catch radius I don't like comparing rookies to guys who are established But I think aj brown types like a big physical dude who's going to run you He's going to run around you and then over you, right? So I think it's pretty exciting I keep I can't wait till training camp because we're going to see these guys with pads on so We know how physical they can be at the line. That's a that's another drake london asset And I think being able to see him work downfield to be physical and go at full speed All these ota practices about three-quarter speed maybe but to really see him get into it I think is going to be pretty exciting. Yeah, we got another question over here. What's what do we got man? You know frank darby. Yeah, you think that he's gonna make a leap this year I think he has to I think it's gonna For frank darby I'm just excited to see his role expand and I do think that he has an opportunity this year That maybe he didn't have last year I think when you're looking at at a wide receiver pick sometimes it takes them a minute Especially when you had you at the time you had calvin ridley you had wrestle gauge you had cal pits It was a very different looking group So I think that the door is open for a guy like frank darby to One continue doing what he did on special teams I think that's just as important and then also kind of making a name for himself in this offense as well I'm looking forward to seeing frank darby more not just for the social media contact because although that is solid We know he's hilarious. We love being around him So I'm excited just as much For what he's gonna do in his second year as I am just to see him on social media more I mean it feels like he's always had Like a third red bull of like for the morning like that's just how he is. Yeah, honestly his like normal I don't even know level is honestly 10 times what I think the normal person is I've never seen him not like jazzed up and running around Yeah, 100 as we're kind of wrapping this thing up here. I just have to remind you guys one more time Please rate review Subscribe on itunes on spotify also subscribe to our uh, Atlanta falcons youtube channel where all these things go We have lots of great videos there. Check all that stuff out and really this is I'll be honest This is our first time doing a live podcast. Yeah, we've got AJ freaking terrell. Yeah, that was awesome Guys, thank everyone who stopped by here at the delta Scott at the delta sky club On friday at the open practice and thanks to everyone on monday and tuesday down the road who's listening to this podcast Greatly appreciate all of the support all the nice things that have been said About tori and occasionally about me, but we definitely appreciate it. It's been so much fun and we'll talk to you guys again next week


Hi, this is your host, Olim Bhartian. Welcome to my brand new episode of T3M, our topic of this month. The topic of this month is data. And today we have with us Neil Palmer, partner at Keri Group. Neil, it's great to have you on the show. It's great to be here. Thanks for having me. If you look at the whole evolution of, of course, from traditional IT to cloud IT or Kubernetes centric world, how you have seen data evolve? How you've seen the evolution of data in this world? I think we've all seen it, certainly within the last 10 years or so, just the sheer explosion of growth in the amount of data that's not only being generated, but that's also accessible to organizations. We've seen some of the struggles organizations have had around cataloging and accessing the data. And we've seen some of the struggles organizations have had of actually proving the value out of having some of those, you know, what are now becoming fairly significantly sized data lakes that are out there. I think there's certainly ongoing challenges, but there's ongoing benefits as well to what some of the firms are doing. And particularly when you see initiatives like things coming out of Snowflake and BigQuery about being able to share data sets across larger organizations, controlling both accessibility and security around the data sets that are being consumed within your organizations really become quite a useful tool that's available to people. We are not only consuming huge amount of data, but we're also creating massive amount of data. And of course, a lot of modern business, they are built around users generating massive amount of data. How do you see organizations are dealing with this data? I think we're starting to see the emergence of what I mean, what I mean, advocating as a new dimension to systems engineering and a new dimension to systems design, which is the economic value of the information that you're trying to either produce or consume from the system that you're building. And so the analogy I use is that from the financial world, an overnight market is always an overnight market. That doesn't change. But a risk calculation might change based on the volatility in the market on any given day. And so you're scaling within the application, you may choose to scale up if the market's having a particularly volatile day and produce that information on a 10-second basis as opposed to an hourly basis. So I think, again, having organizations being able to think about what the economic benefit of that information is to them across the board allows them to put a cost-benefit analysis over both storing and consuming that data. But now the most critical aspect of data which goes beyond just creating and consuming is backup and recovery if something goes wrong. While public cloud does take care of a lot of stuff, it's not a magical place that takes care almost everything. And users still have to deal with some of these issues and challenges that are related to data. Talk about these challenges, these complexities. Nothing is ever a magical button for anything, right? Unfortunately, as much as we would like it to be otherwise. Look, I mean, as we've moved from significantly over the past few years from sort of data center native approaches to cloud native approaches, I think we've seen a pivot in a way from traditional sort of backup and DR to more of a viewpoint around resiliency and scalability within the applications. And by that, backup and DR for a lot of organizations used to be a very static sort of semi-regular processes that would happen. It'd be expensive. You'd end up with a lot of storage sitting on tape somewhere that was never really reused and was of no ongoing value to the organization. I think from the pandemic, from a people and process perspective, everybody going remote kind of solved the people side of the disaster recovery equation. And I think with a lot of the cloud native applications now, you can bake in or improve on the need for DR backup, I'm sorry, by using say, multi-reasonable storage for your data. And so you're not just doing backup. You're gaining the benefit of scalability and resiliency within your applications, rather than just sticking something on tape to gather dust somewhere. I cannot stop drawing a parallel with the whole shift-led movement, especially when it comes to security. Or if you look at the whole DevOps movement, if you look at data, what kind of cultural shift you are seeing there? Absolutely. I mean, I don't think in you bring up an excellent point with the security. But I don't think any application developers, teams can work in isolation anymore and just sit there and churn out business logic. They have to be conscious of the data and where they're consuming it from and where they're providing it to and what those benefits are. I mean, again, from a security and availability perspective, it's all a function of risk, which is a function of either reputational or financial. And so there's no technical reason why, for the most part, for anything that is essentially cloud-enabled, why you can't have something be available to a number of nines that make sense for your business. And how you're seeing this whole ecosystem, which is about projects, vendors, how is this whole ecosystem evolving to help customers wherever they are in their journey so that they don't get overwhelmed with this cloud-enabled complexity and we help them wherever they are in their journey. I wonder about the complexity versus the visibility of the problem. I think with data centers, a lot of people weren't aware, didn't know. And so with cloud, that responsibility has moved to the left, whichever way you want to look at it in terms of the engineering teams. I think that's important. I think we still see traditional backups on relational databases and things like that. But then when you have some of the large-scale cloud-native databases, that multi-regionality removes that problem for you, which I find to be a great advantage in terms of what's happening. But you look at the scale of some of these data anyway, when you're talking several petabytes of data, having a static copy of that sitting around is expensive and not terribly useful. If you look at some of the discussion we had today, some of the concern related to data that we discussed today, are they relevant to only large enterprises or large companies that are dealing with messy amount of data? Or is it relevant to any company that is dealing with sizable amount of data? Obviously, the scale of your problem introduces complexities within itself, but all organizations have this problem. I think the consumption of data across any given organization and through to its third-party providers or its third-party clients has become more and more critical. Again, I come back to the Snowflake data set sharing. I think that solved an awful lot of problems for people by providing, essentially, IAM and access controls around what was previously a series of fairly complex batch jobs that would run at obscure sets of times of the day who were the scripts were understood by one or two people, whereas now, from, again, security perspective, you've got easily controllable access to the data that your clients or your providers need. Of course, if you look at the traditional IT data backup recovery, that market is very, very mature. But if you look at the cloud native Kubernetes and how mature is data backup and recovery market in the cloud native space? I think we've come a long way. I see far less resistance to the idea of having multi-regional data sets within your systems. For us, it is a, for the most part, and again, it depends on the environment that we're talking about, dev versus QA versus integration versus production. But for production workloads, multi-region is the de facto requirement. Now, whether it's multi-region within, say, the US or multi-region on a global basis, then you get into the broader questions around data protection and legality, and it's not a technical question so much as a business and law question. But I think for the most part, the production workload, it's not a question we see coming up anymore that that availability is required. Now, testing and making sure that the systems work on the multi-regional capability is probably a slightly different matter. And as we've discussed, sort of the advent of the chaos engineering coming out of the Netflix side of the world has really helped organizations embrace that concept of failure from the get-go and the need to test for resiliency from the very beginning rather than using a traditional disaster recovery mode where once a year or once every six months, they unplugged stuff and hoped that it still worked. As we talked about cultural aspect earlier, I also want to talk about what are companies doing to build a culture that is prepared for failure? We talk about things like chaos engineering. A lot of practices are there where teams are ready when something goes wrong, they can recover quickly. Talk about the cultural aspect. Yeah, we see slightly less of it than I would have thought at this point. I think organizations are still somewhat struggling to adopt to it. I think there's a lot of pressure within the current economic environment to be constantly delivering business value, which for a lot of folks can tend to mean new features, new capabilities. But addressing, some organizations addressing technical debt tends to, in a very human nature, get pushed down in terms of prioritization. But it's when you hit those failure points, as you invariably do within the cloud, that the need to consistently invest in that kind of resiliency engineering becomes apparent. And we do see organizations that have, they have an engineer hour budget that says 20% of every sprint or whatever it is we're doing is invested in resiliency engineering. Now, let's talk about how is carrier group helping customers in their journey? Yeah, so Carrick is focused on app modernization and platform engineering, helping organizations move from data center native to cloud native. So a lot of the work we do, particularly on the platform engineering side, is creating these resilient platforms and the pipelines that the developers will then use to build out their systems and applications. And so, accessibility to Kubernetes clusters that are multi-regional and will, scalable, sorry, not multi-regional. Kubernetes clusters that have the appropriate level of scalability, failover, et cetera. CICD pipelines that then have the SecOps built into them. Data tagging, audit trails for the data. So people understand that as the data moves through the application, even through the build systems, where it's coming from and where it's going to. And hopefully making these tool sets, within putting them in the hands of the developers so that they can focus on the business capabilities they need to. They need to, but at the same time, give the organization the capabilities they need around the resiliency and the audits ability for many aspects, particularly if you're a regulated environment. Neil, thank you so much for taking time out today and talk about data and of course, share your insights how this whole ecosystem feels evolving and I would love to chat with you again. Thank you. So Neil, thank you very much. Appreciate your time.