Hello everybody. I'm Nikhil Kumar, president and founder of APTSI that's Applied Technology Solutions Inc. We've been in business for a couple of decades and worked a lot in enterprise architecture, security and other domains. I'm also the co-chair of the Zero Trust Working Group of the Open Group. We've all had a number of conversations today on Zero Trust. I'm going to walk you through an actual example. How does all of this really come together? Digital transformation is hard. Organizations in the digital age face that every day. There is no alternative but to change. This change is hard in terms of people, in terms of process, business model, technology, so on and so forth. To be able to undertake that change in a manner where you feel secure, you're not worried about the next ransomware attack, the next breach, so on and so forth. It's critical for those who are going to succeed. It's going to be a way in which organizations are going to get differentiated. That's where our security partners, our technology partners and our business partners all need to work together. Let's start understanding these key drivers of the new cybersecurity world. Changing business models and drivers. These are critical. Companies are changing how they do business. It's been happening for the last decade. It's not this year's effect. It's happening all the time at a faster and faster velocity because the way we do things are now digitized. You don't need to wait six months to make something happen. You need to wait two days, three days a week. What does that mean? It means that organizational, institutional understanding is lost because you entered a new business domain because the market forced you. And now all that institutional knowledge, which helped you understand and deal with risk, with security, has to be rebuilt or is not there. So being able to deal with that change and being able to support that change is a key responsibility of information security in this future world. There's an evolving ecosystem. Today, you don't sit and deal with tier one, tier two partners. You're dealing with multiple calibers and layers of partners. Some of them are fully capable. They're large Fortune 50 companies like you or 500 or 1000. And some of them are small businesses. You know, you're hiring an influencer for your sales, so on and so forth. What level of trust do you have there?   So you have this evolving ecosystem and the ecosystem also has different channels of communication, velocities of communication, which matters because now there are many different entry points and threat points. You have a changing technology landscape.  That's going to be hugely disruptive. And you're going to be in that hybrid cloud situation. By the time you're ready for finishing, you move towards one vendor. You suddenly find that you've got to deal with multiple vendors, just like, for example, DOD did with the rebid. And then you're dealing with regulatory, political and other changes such as cultural changes. You're dealing with artificial intelligence and data. Science is becoming part of the course, becoming part of our day to day life and changing and disrupting the way people work. Processes are done and technologies are done. More opportunities for threats.  Geopolitical change is huge. Privacy laws are changing. Information security policy controls are changing. You need to be able to adapt to them or you can't do business maybe in your largest market. And so being able to deal with the, we're dealing in the world, which is Balkanizing and going multipolar from a global world. But your client base may still remain global. So how do you deal with all of that? Cultural changes such as nationalism versus globalism. Changes such as a shift to social media. Evolving age, gender differences, community differences across different zones in your client base. All of these now come and impact almost all businesses irrespective of size. So being able to deal and all of these introduce new threats. The ability to deal with disruptive events such as COVID-19, 2008, the advent of new technologies. The annual occurrence of a 500, once in a 500 year storm or hurricane or weather event. And the shift to remote or hybrid work. All of these are going to keep happening and happening as we shift to a more digitized telemedicine, tele digitized and digitalized world. As AI becomes part of the course, comes part of our language. And the characteristics of this are you need to be able to change and adapt really fast. So agility or velocity of change. The other thing is adaptability. You need to be able to change how you respond to new different market drivers. The ability to deal with disruption, things which are really unpredictable. And then the ability to deal with increased complexity because this isn't making it simpler, it's making it more complex. And even if you want to say, you know, I am going to mandate that you use this technology at the stack. What happens when you buy a new company and you do an M&A? And one of their things is they use a different stack and that's why you bought them. What happens if there's a disruptive event, like in the retail industry, and you have to deal with the new technology, whether you like it or not? You have to be willing to change and that is going to be impacting the success of those organizations that survive or don't survive. Today we're going to talk about ACME Corporation. It's a global enterprise. It's a multinational impacted by a lot of the geopolitical and regulatory impacts. It supports multiple lines of business. We're just going to talk about wealth management, retail banking and benefits management. They just entered benefits management. They were classic old fashioned bank. And when they entered benefits management, they suddenly found that their ecosystem has just started evolving. So for example, into their ecosystem come third party administrators. A growing number of different kinds of clients influencers to make sure because your benefit sales cycle is now across the individual as well as the organization. So you now have a huge variety of different stakeholders in the conversation. By the way, this applies to healthcare and any other force part of the business as you go. And the number of threats are evolving rapidly because you're dealing with these multiple national entities in one country. For example, VPNs are not allowed in the other country. Almost everybody likes to use VPNs. And you're starting to discover that that perimeter centric approach you took just doesn't work anymore and you're at a loss. You have your cloud migration project in flight. And because you're dealing with lost resources and you want to be able to support things, data analytics becomes really important. And you're using AI so that you can provide 24 by 7 access through your virtual agents and chatbots. All of those things are happening. You need to be able to support tele-experiences. And as you go to effective computing, it gets more and more and more advanced. All of this disrupted by COVID. Today, March 2020 or whatever, you suddenly had to move everybody online. And what kind of protocols did they have in their basement? None. So we're going to talk about something else now, right? We're talking about zero trust, which is this new cyber security paradigm, which allows us to deal with this change. What is it? It's basically saying that you work on data and information security across the lifestyle of that asset on any platform or network. You're not limited by that because you know what, even if you want to and you want people to work in your office, by the way, they are also accessing things from their cell phone and the cell phone aggregator on your email aggregator has been broken. Or just like what happened a few days ago, there was a breach in the print driver. Or as happened with SolarWinds, there was an insider breach. The perimeter doesn't work anymore. 50% or almost 50% of breaches are coming from inside, not outside. You need to deal with new security capabilities, deal with what your data is and how you deal with this and assume compromise and assume breach. Huge difference than the way you thought about before. And the way you do that is you start approaching things by reducing the threat space and reducing the blast radius. That's important. What is reducing the threat space mean? It means you have complexity. You know what's going to grow. You try to classify it and focus on what you really can protect your crown jewels. Reducing the blast radius is also critical. Reducing the blast radius means you assume compromise. So somebody's on your network intending to do malicious things against you.  That's critical. You can no longer keep playing whack-a-mole. You can't keep running after the last threat. You need to think about what happens with that second new threat and you need to know you can't predict every threat either. So the approaches we zero trust takes is data centricity. What you do is you replace high value information with low value information. We'll stay away from technology aspects of that. What you're really doing is saying here's something high value. You credit card number, your social security number, some PII, PIFI, or just information of business value. It doesn't always have to be PII or PIFI. It may be something like the quality of the clock that you sell, or maybe a trade secret that you're hiding or you're protecting would not hiding would is a bad word, but protecting. You want to replace that with something which if a malicious actor steals it, it has no value to them. If they conduct a ransomware attack and lock down that system, well, you can just reboot the system with new data or new information. And you've limited the last radius to maybe one instance, one implication, one application, one microservice and so on and so forth. You need to deal with asset centricity. So you need to make it granular enough that you're going to be able to protect an individual asset or an individual group of assets. You need to think about it in different ways. You need to think about a network of one. The reason we do data centricity is because we want to be able to share data seamlessly. Partners are going to evolve, jurisdictions are going to change, complexity is going to grow, and dependencies are going to grow as we depend on different groups of people on processes and technologies and regulations. So you want to be able to share that without having to change everything every time. You need to be able to deal with this across the life cycle of that information or that data because data is an asset. We want to be able to protect the data across the life cycle because let's take credit card number as an example. You authenticate that the card people are now authorized to use the card. The card expired, but does that really mean that the card expired? No, it didn't because you need to be able to hold it for fiduciary reasons, for legal reasons. So the provisioning and the deep provisioning of that asset, from that point to that point, you need to be able to manage it, know it following the regulations you want and supporting privacy controls like the California Privacy Act or CCPA or meeting with GDPR and so on and so forth. And again, jurisdictions count, right? So how do you do this? You tokenize, which means you basically take your higher value data and substitute the data. We talked about that. You use security zones, which basically use simple attributes. Data classification, level of trust, classify your partners or your entities, users into groups. The kind of business process you're dealing with and the manner in which it's getting accessed, some other attributes, but a limited number of attributes. That lets you have some areas which can be breached and the information can be lost and some areas which are critical like fraud and other areas where ACME is going to protect the crown jewels. Now let's say one of the merchant banks or the merchants, which deals with ACME, is breached. If they have tokens replacing their credit cards specific to that particular merchant, what's the impact? The impact gets localized to that particular merchant. So let's say 100 million cards are breached. You can reset the tokens and you're able to operate. And in the other scenario, you have to replace 100 million cards, which you could go to about let's say a couple of dollars a card. You're looking at a 200 million dollar cost. Those are just simple ideas of what you need to think about. We've talked about the life cycle. So realize that data centricity is a critical thing to be able to support agility and adaptability, disruption and complexity. It's one of the fundamental pillars or legs in zero trust. Asset centricity basically means you don't think about protecting the network, but you think about protecting the asset because as the network evolves to support change, as you become part of a company, your company evolves, the next org chart evolves, you sign a contract, you include TPS, you just have that evolving set of relationships. As your ecosystem evolves, you want to be able to do it simply at the level of an asset instead of waiting and trying to add the complexity of the overall network. That's what asset centricity allows us to do. One of the key things it allows us to do is it allows us to deal with disruption and adaptability. You can deal with these changes of the ecosystem and you can deal with sudden disruption quickly. You can literally turn on a dime. And it also, because you start thinking about an asset in terms of a network of one, you start thinking about using policies to manage it, right? And you need access control can then be having the security zones. And then you can have further levels of detail based on individual entitlements and different credentials being provided. This also reduces the blast radius because if there is a breach or compromise, an asset or at worst, a zone is breached. So this brings us to the Zero Trust Reference Model and we've talked about how ACME has been going through this journey. So ACME started off, it digitized, it supported data centricity and it started moving to asset centricity. All of its different stakeholders had, let us say, keys of your security zones and you had it based on trading partner levels. And you had external entities have their own security zones and you switched tokens. Now you were ready to deal with one class of breach and one class of threat. Now you went towards asset centricity so that as you moved and you did your cloud migration project, all your assets or your microservices, for example, could deal with change. You added data streaming because you know what, you needed to stream that information and you needed to still send those flat files. So you were dealing with both data centricity to manage the flat files and other issues and you're dealing with asset centricity to manage controls based off of access control policies. You added to this self-service because you added those two million influencers who just won't need to log in and connect to certain things and you were easily able to do that by classes of access control. However, this results in complexity and that's why we talk about adaptive access control where technologies evolve so that you can group things, do self-service and apply things such as AI to predictively build out access controls. You have the concepts of identities and networks where you have digital identities which are really using something similar to a party person organization model which are not locked to a particular organizational structure. And that helps a lot when you have these distributed identity access management environments. We've talked about these elements for a bit now but think about the other things that go hand in hand in the Zero Trust Reference Model. You have threat intelligence, you need to be able to predict tomorrow's threat or at least to be able to monitor the changes in your network, in your environment as malicious actors are monitoring your compromised network. And so being able to use artificial intelligence, to be able to use data analytics, to be able to look at volumes of data and to be able to respond proactively is a shift that's occurring. And to be able to see things using unsupervised learning which you didn't know before. Modern SOC, so the modern SOC, what does that do for you? Modern SOC basically allows you to do real dev sec ops where if there is an expected breach or you can proactively monitor it and trigger incident response and work with your dev teams and your engineering teams, you can ensure shift left. Finally, you have that ability to do two things, risk. Remember in Zero Trust, risk is opportunity as well as cost. What does that mean? It means because I have a Zero Trust environment, I can enter new lines of business with less fear, which means I have a competitive advantage over my competitor. Risk and in order to be able to do this quickly, I need to be able to do on demand audits and other similar things. So these are some of the key things that we need to consider as we move forward. As you see, things are not going to change. You're going to have these, at least for the next decade or so, things will always change. But these things are all there. You need to address them. You need to deal with them. And that is why we think about Zero Trust as a framework, as a security framework, not as a technology. And we think about Zero Trust as basically two things. It's a cyber security framework and a strategy. Today, we just described kind of how it applies. A larger conversation would talk about the playbook, the strategy that you follow to get there. Thank you very much, everybody. And you can reach out to me at my email Nikhil Adaptic Solutions or on my phone. Or you can reach out to the Zero Trust Working Group or the LinkedIn Group. Or if you're a member of the Zero Trust, I mean of the Open Group, you can come in, as I said, to the Zero Trust Working Group. Those who are non-members can join through the Zero Trust LinkedIn, as well as we are sending out a survey to all leaders. And we would love your input as you deal with change so that we are responsive to your needs and we are able to communicate with you very well. And all of you will get complimentary information from the Open Group. Thank you very much, everybody, and looking forward to your questions in the panel.


Folders keep the CESAW Journal organized so teachers, students, and families can easily see growth over time. Many teachers use folders to organize their CESAW post-inactivities by subject, however, there are many other ways to use folders in CESAW. Let's take a look at how teachers and students use folders to see growth over time. First, let's learn how to create folders. To create a folder, tap on the wrench icon in the top left corner of your CESAW Journal. Go to the Folders section, tap Manage Folders, then name your folder and choose your color. Tap the green check and your folder is created. It's that easy. Now that you know how to create folders, let's talk about the ways you can use folders with your students. Create special folders to showcase learning over time. A conference folder is a great way to highlight all the amazing student learning from the term, semester, or quarter. When you adjust your settings to allow students to add posts to folders, students can add posts that showcase their strengths, highlight growth, and show where they still want to improve. This is a great way to encourage student agency over their learning. Another special folder you can create is a My Best folder. This can be created for a specific subject area. For example, you could create a My Best Writing folder and have students add one piece of writing each month. Create a CESAW activity that includes a rubric for students to use to assess their writing. At the end of each month, assign the activity to students. Students look over their writing from the month and choose their best piece based on the criteria set in the rubric. Students use the photo tool to take a picture of the writing they chose and explain why they think it's their best work. Having students add work to a My Best folder encourages reflection and motivates students to continue to do their best. Reviewing work by folder allows you to easily see your student's growth over time. From the Journal tab, tap on the Folder icon next to Class Journal above your student's names. Select the folder you would like to view to see all the posts added to that folder. Now that you have a plan for using folders with your students, let's see how students add all of their hard work to folders. When students create a post with the green Add button, they can add their own post to a folder you have created. When students tap the green check to add their post to the journal, a list of all the folders you have created will pop up. Students simply tap the folder they would like to add their post to and tap the green check again. Their work will be tagged to the folder they selected. Students can post work by subject that supports their goals, shows their growth and much more. Folders allow students and teachers to easily see growth over time all while keeping their journal organized. Your challenge this week is to create folders for your class and assign and tag one CESA activity to a folder. Share the creativity you capture on Twitter using the hashtag CESAMEAMinute.


Well, unfortunately I started working a little bit too fast to make it to that sushi dinner with my husband, so things were a little too chunky for me. So I thought I'd, I've already done a lot of it so I forgot to film, but I thought I'd show you a way that you can blend things out with the same bristle brush that I used to apply the acrylic ink. This is just a great brush for removing pastels. So all I'm doing right now at this point, it actually kind of gives it more of an impressionistic look, is I'm getting rid of some of the pastels that are on the surface, but I'm still keeping the same values and colors that are in the painting. So this is in essence going to be like an underpainting. And it's kind of cool because what this brush is doing, it's getting the main dust, you can see it kind of coming off. It's getting the main dust off so it's going to allow me more layering effect. I want to keep those grasses wispy back there, so little fence too. So that kind of helps with that effect. So anyway, this is just a neat little way to kind of, almost like erasing pastels. And then I can go back and add where I would like to. So anyway, neat little tool and then you can go back and start painting again. So now I'll get a little bit more precise with this.


Let's see. Where are we going? Sandwich monopoly. Yeah, I mean, this is the problem. I guess I didn't have enough stuff on the wall. That always gets a lot of people interested, but sandwich monopoly. So there is a private equity company called, funnily enough, Roark Capital. And it's called Roark Capital not by accident. It is explicitly named after Howard Roark. If you go to Roark Capital's website, you will find some reference to the fountainhead. So this is one of the founders of Roark Capital. He's a huge fountainhead fan. Anyway, Roark Capital has just bought subway sandwiches.  They own, for example, Orbeez, Jimmy Jones, McAllister's, I don't know, McAllister's, Delhi, and Slotsky's. And Elizabeth Juan is up in arms. Clearly, this list provides Roark Capital with a sandwich monopoly. They control the sandwich space. I mean, it's true, there's some other delis and a few other sandwich stores, but very few chains of the size and magnitude of the ones that Roark Capital already has. And this is horrific. This is going to drive prices up because that's what monopolies do. And at a time of inflation, Elizabeth Juan is very concerned for consumers of sandwiches. Just so you realize that this is serious, the FTC, Lena Kahn's FTC, Lena Kahn being the lady who hates Amazon, is investigating. They're investigating Roark Capital's, and they might not approve this particular purchase. I think this will be a first in the history of the FTC in going against a purchase of a sandwich shop or any, I think, fast food shop. Of course, this brings to the forefront a lot of questions. Among them, very, very importantly, is what is a sandwich? For example, I mean, there is serious discussion right now about is a hamburger sandwich, because, I mean, let's face it, if a hamburger is a sandwich, then clearly there are other, you know, there are big hamburger chains that Roark Capital does not yet own. And then on top of the question of whether a sandwich, a hamburger sandwich is a hot dog, probably not a sandwich. These are difficult ones.  There is a bun, there is meat, I mean, maybe, and in that case, they certainly know we're not, and are burrito sandwiches. Now we're stretching a little bit, right? You know, so what is a sandwich? Tacos? A taco sandwich? What about all the taco trucks? Are they sandwich stores? Are they competing? Is this an issue? And then what about the fact that grocery store sell sandwiches, convenience store sell sandwiches, coffee shop sell sandwiches, the non-chain delis, lots of them, particularly in New York, does they count? Is the category, particularly sandwiches, two pieces of bread with deli meat in the middle, not hamburgers, that are not sold by, I mean, this is just the arbitrariness, the subjectivism, the complete randomness. The FTC and Elizabeth Wands complete power lust, wanting to control the aspect of our lives. It is just absurd and ridiculous, but this is the essence of antitrust. This ridiculousness of defining sandwiches and what it involves and what it entails and all of this is just an illustration of the absurdity and ridiculousness in every antitrust case. It just sandwiches, it's just something it's easy for all of us to relate. But the same argument about how ridiculous this whole thing is is expressed in many other, many other, in pretty much every antitrust case, the same subjectivism, arbitrariness, and so on.


Internal Revenue Service IRS Tax News September is National Preparedness Month, IRS urges everyone to update and secure their records to prepare now for natural disasters. Why? Because if you're hit with a horrifying natural disaster like a hurricane earthquake or visit from the in-laws, the most devastating loss says the IRS would be a loss in tax revenue. So we need to do everything possible to make sure you can still pay those taxes even under the worst of conditions. Which would obviously be that visit from the in-laws.  But first an attempt at a joke. President Biden unilaterally canceled student loan debt to buy votes. Boy that's low. I mean, to help people. You think of the children. Are these morons getting on there just louder? But wait a second. I didn't think presidents have the authority to do that. That's not how it works. People think that the President of the United States has the power for debt forgiveness. He does not. He can postpone. He can delay. But he does not have that power. That would have to be an act of Congress. Yeah, they don't. But he did it anyway. We will forgive $10,000 in outstanding federal student loans. Not for personal benefit, mind you. He did it to save the children. Oh, stop. Think of the children. Although some say it will cause more long-term harm than benefit. The cure sounds worse than the disease. Incentivizing bad behavior causing college prices to rise even more. But you know how the old saying goes.  Is that the road that's paved with bulls? So at least we can be sure we're not going to hell. Because at this point we know there's no way this move was done because of good intentions. Greed, selfishness and clinging to power. That's what we have here plain and simple. Three of the basic human emotions are greed, fear and greed. But I'm sure Biden will not rest until justice is done for the American people. I swear I will never rest until I destroy you. Or if not justice, at least social justice. That's not a word. You have no idea what this means, do you? No. Whatever that is. Then why did you print it? I like the kitty. You know what? You people should be ashamed of yourselves. You know, you doodle a couple of bears at a cocktail party talking about the stock market. You think you're doing comedy? Actually, that's not bad. Wilma, I promise you, whatever scum did this, not one man on this force will rest for one minute until he's behind bars. Now let's grab a bite to eat. Yeah, come on Wilma. IR 2022-156, August 29, 2022, Washington, September is National Preparedness Month with the height of hurricane season fast approaching and the ongoing threat of wildfires in many places. The IRS urges everyone to develop an emergency preparedness plan or if they already have one updated for 2022. So we want to make sure we got the plan in place before the problem happens. So everyone from individuals to organizations and businesses can start now by securing and duplicating essential tax and financial documents. So clearly, we want to make sure that any important documentation is secure and or that we have duplicates of it, possibly saving a copy of it, possibly to like a hard drive or something like that or maybe online. But if you're using those types of resources, you want to make sure that you have secure storing for any sensitive information. Creating lists of properties. So if there's a hurricane and we're going to have to recover insurance, for example, it'd be nice. We want to have a list of the property that we have, possibly pictures of it, evidence of it and so on and so forth so we can deal with that. Knowing where to find information once a disaster occurs. So once the disaster happens, we don't want to be scrambling for information. We want to know where to go at that point and there might be some resources here with some links that we can check out. So in the aftermath of a disaster, having the updated documents, other information ready available can help victims apply for the relief available from the IRS and other agencies. Disasters, assistance and emergency relief, there's a link to that help here. May help taxpayers and businesses recover financially from the impact of a disaster, especially when the federal government declares their location to be a major disaster area. So obviously as we've seen in prior disasters, if you've been following along here, they might declare it as a disaster area and that would put the IRS and other agencies kind of in action. So you want to, if there's a disaster that happens, see if it's within a disaster area, for example, and possibly be taking different actions for that.  If it was a visit from the end laws, it's as devastating to you as a disaster, but probably not going to be declared one by the government. So start secure. Taxpayers should keep critical or original documents inside waterproof containers in a secure place. So if you've got floods, hurricanes and whatnot or a problem, then waterproofness of documents, if you need those paper documents and the originals would be good. These include tax returns, birth certificates, deeds, titles, insurance policies and other similarly important items. In addition, consider having a relative friend or other trusted person retain duplicate copies of these documents at a location outside the potentially impacted disaster area. Make copies. If original documents aren't available, only on paper, try scanning them into a digital file format. There's a lot of scanning devices including little apps for the phone these days so you can get a virtual copy of it PDF pretty quickly, one better than usually just a picture. A picture is not quite as good typically as a PDF document, but you can get it on the computer. But then you want to make sure that you save it securely and you want to make sure that you save it somewhere, possibly on an external hard drive that you can put somewhere outside of your area in case the flood happens there and possibly online, if it's saved online, you want to make sure you have a secure location online. So saving them in a secure digital location like a cloud based stored application can provide added security and portability, document valuables. So maintain a detailed inventory of your property and business contents. Taxpayers can take photos or videos to record their possessions but should also write down descriptions including year, make, and model numbers where appropriate. So we want to make sure we've got a list of all the stuff. I don't have a whole lot of stuff to write down here so my list isn't that long but some people might have quite the list. So if your stuff burns up or floods out or thiefs in or something then you're going to need the list for the insurance companies possibly, and you want to have pictures as well to have the evidence of what you had. So after disaster hits, this kind of documentation can help support claims for insurance or tax benefits. The IRS disaster law, what loss workbooks can help individuals and businesses. There's links to that here. Complete lists of belongings or business equipment. We got the employer fiduciary bonds. Employers using payroll services providers should check if their provider has a fiduciary bond in place to protect the employer against a possible provider default. So most employers already use the electronic federal tax payment system otherwise known as the EFTPS. There's a link to that here to make their federal tax deposits and business tax payments because these payments can easily be made either by phone or online. EFTPS offers an especially convenient option when a disaster may displace many businesses and their employees. It's also easy to track payments and receive email alerts through EFTPS. Any business that doesn't know one can create an ETPS account. There's a link to that here if you want to take a look at it more. So know where to go. Where do I go? That's what I need to know. Like when there's an earthquake here I've run out in the middle of the, there's a field right out here. So hopefully something doesn't fall on me or something. Any case you got to know where you're going to gather together in case something happens. Reconstructing records often a disaster may be required for tax purposes. Okay, we're talking where to go for tax documents. I was a little bit earlier like when the shaking actually happens. But now it's over. The earthquake's over. Calm down. Calm down. Now we've got to gather. Where do we go to gather the tax records? So you can getting federal assistance or insurance reimbursement. So most financial institutions can provide statements and documents electronically. So obviously you might have online banking now and so on and so forth. So a lot of that stuff can be received electronically. A lot of the tax documents can be received electronically these days because your employer might be giving you your W-2, W-3 electronically. So a lot of that documentation for your finances and stuff are more available than they were a long time ago. And if you can't get to them electronically, tax document like 1099, like W-2s and so on, 1098s for the mortgage statement, what not. Those are, you could, if you can't get them any other way, the first place to go would be the distributor of them. And then if you can't get them, you could go to the IRS because all that stuff got sent to the IRS too. So you can then as a last resort go to the IRS and try to get the information from their end, which isn't ideal because you might not always get like from the transcripts or the documents, the state stuff and you might not get it in the actual. But in any case, that's an option too. So an option that can aid the reconstruction process for tips on reconstructing records, you can visit reconstructing records. There's a link to that here. So they'll give you more detail on that process. IRS is ready to help. Not like an actual, like person-wise, generally they don't like you to call them really, but they got this website. They've got this website. It's up 24-7. You can check it out all the time. You can try to call them if you want, but you might be on hold for any case. Following a federal disaster declaration, the IRS may postpone various tax filing and tax payment deadlines or provide other relief for a list of localities, qualifying for relief and details on relief available, visit the IRS Tax Relief in Disaster Situations webpage. There's a link to that here or around the nation on irs.gov. There's a link to that here. The IRS identifies taxpayers located in the covered disaster area and automatically applies filing and payment relief. So if you're in the disaster area and they've declared it a disaster area, then they're going to postpone at least filing deadlines. Typically, if you have a mailing address usually within that area without you having to do anything. So at least that's one less thing you have to worry about. Probably wasn't the most pressing thing on your mind when your house just sunk into the crevice of the earthquake that the earthquake caused. But, yeah, at least you got that. So this means taxpayers to IRS address of record is located in the disaster area did not need to contact the IRS to get disaster tax relief. In addition, many taxpayers living outside of the disaster area may also qualify for relief. This includes those assisting with disaster relief and taxpayers whose records necessary to meet a filing or payment deadline postponed during the relief period are located in the disaster area. So if you don't have your billing address or your tax address in essence in the disaster area that the IRS declared but you are somehow linked to the disaster area because you got documentation that are in the disaster area even though your tax IRS address is outside of it. Well, then you still might qualify for relief but the IRS can't do it automatically because they don't know that your stuff is in the disaster area. So that's when you have to take action most likely. Eligible individuals and businesses located outside the disaster area can request relief by calling the IRS disaster hotline 8665-625-227. I won't say that five times because there'll be a link to this in the description. You can check it out on yourself. Check it out yourself. So in addition, a special rule allows both individuals and businesses to choose to deduct uninsured or unreimbursed disaster losses on either tax return for the year that the disaster occurred or the return for the previous year. So that's important to note that you have that option because if you take it in the year that it occurred like it occurred in 2022 and you had a disaster loss you wouldn't really get a tax benefit for it until you file which would be by April 15th of 2023 you would think and your revenue might be a lot lower in 2022 if your house sunk into a crevice caused by the big earthquake the Santa Andreas swallowed my home and it affected my tax revenue so if your tax revenue was low then you're probably not going to owe as much taxes so it might be more beneficial to claim it on another year the prior year possibly possibly getting a better tax benefit because you'll be in a higher tax bracket possibly and possibly getting access to the money sooner in that way but you might have already filed the 2021 tax return so you got to deal with whether or not you need to amend it and so on and so forth and the drama and saga continues so in addition a special rule I already read that for more information you can see publication 547 Casualty Disaster Thieves there's a link to that here for more information about national preparedness national preparedness that is month you could visit national preparedness so we got all these publications you can read up on down below so you got Publication 3067 IRS Disaster Assistance Federally Declared Disaster Area Publication 584 Casualty Disaster Thief Loss Workbook Personal Use Property you got Publication 584B Business Casually Disaster Thief Loss Workbook you got Publication 5307 Tax Reform Basics for Individuals and Families Publication 583 Starting a Business and Keeping Records Publication 547 Casualty Disasters and Thieves Reconstructing Records after a Natural Disaster or Casualty Loss you got the Tax Relief in Disaster situations we've got the Federal Emergency Management Agency we've got the Small Business Administration also the Disaster Assistance.gov and Ready.gov all that reading material you can be reading for years entertaining yourself like for free all this stuff all this reading material you don't have to go to like Audible or Amazon Books or anything you got reading material for ages eons even anyways there'll be a link to this in the description


33 year old Jeremy Joule who was arrested on February 6th on charges of first degree rape of a child under 12 appeared for his preliminary hearing today to find that he had been indicted by a Pike County grand jury by the grand jury and died prior to this it has now been moved on to the Commonwealth Attorney's office so basically we did our part the Commonwealth Attorney did their part and and the case is going to proceed in that fashion at audiology associate suppressants Berg you can live your life the way you want and find the freedom of better hearing with 40 years of being in the hearing care industry you'll experience patient care that is specific to you with exceptional follow-up care that ensures your hearing and balance needs are being met audiology associates at 1428 Northlake Drive in Prestonsburg Joule's case was presented to the Pike County grand jury by the Commonwealth Attorney's office on Wednesday February 14th and it was determined that there was probable cause to have the case proceed to circuit court no just this is uh this is why the process we have is such a good process because it gives an opportunity to uh and die and get the case moving in a timely fashion especially when you have such a a young alleged victim so you can they can start moving on with their life and certainly bring justice for them Joule was assigned Kevin Sloan as his new representation due to a conflict of interest in the public defender's office he is currently being held at the Pike County Detention Center on a $50,000 cash bond for mountaintop news i'm kelsey fidel


Zone C lost. Zone B lost. Opponent made a power play. Zone A captured. What a command game. Stop giving me the same junk. The hero's burden, that looks like the SMG. A cloak would hold. I want the auto rifle as well. That's another thing I want. Oh, command game. Stop giving me duplicates. I got this again. Is that the scout or the pulse? I don't even know. Give me the legs. Got the helmet again. No.


Welcome to Seymour's Made. We are here in beautiful Souffle. All right, we are at the crystal's hotel just below the piters. The piters are right there, right and left of the piters there. And we here to learn about Seymour's. Let's be honest, a lot of us have gone to the supermarket and we've gotten this. All right, we've gotten Seymour's and that's just step one and we've never gotten to step two. What do you do the Seymour's after you've gotten it? Now we know Seymour's is the craze. Everybody's into Seymour's. It tastes good. It has a lot of natural health benefits. We know that Seymour's has 92 out of the 102 minerals found in the body. All in the natural.  You understand that the reproductive organs, you know, the little soldier's matching. It's good for that as well. I know y'all know that one for sure. I am here with Miss Veneta from Sunshine Delights. And I'm Veneta. I went to the supermarket. I got Seymour's and people like you. That's what you have for to tell me what am I going to do with this? Okay, so I'm going to show you how to make the gel, which you could use to make smoothies, your stews and smoothies and all of the things with it. Okay, so first you take your Seymour's out of the package first and you put it in some water. Just like that. You submerge it into the water. So that's you soak in it? Yes, you soak it. It has to soak for 12 to 24 hours and you also use some citrus skin to take off the freshness out of it. Yes, so you see what's happening. I always put the Seymour's just like that. No freshness in everything. Well, it would be salty. Oh, I didn't do that. Don't put your Seymour's without putting the little citrus. All right, make sure you have the citrus in it. And you have to soak it. Okay, soak it good? Soak it good. 12 hours you say? 12 to 24 hours at least, yes. That's a lot of hours. Yes, so after this is done, this is the Seymour's after it soaked for 12 to 24 hours. All right. Yes, so this is it. So over on this side we have some spices. Oh, spices boiling. Yes, spices boiling. We have some cinnamon, nutmeg and some bay leaf and some star anise. So that's it right there and a little sugar to sweeten it up. Nice. So after this is boiled, we have to strain it. After you strain it off, you add it back to your pot and then you add the Seymour's that has been soaking for 12 to 24 hours. Into the front? Into the front. So what you do, you just simply take your Seymour's and you add it to it. So do you have to let it soak after you add it? Let it soak for 5 to 10 minutes. So it takes up all of the flavour? Yes. That's how you do it? Yes, that's how you do it. So it's not just as simple as getting the Seymour's and then you need to get the flavour in there so you make sure that you have all your spices. And make sure you remove the lime skin. Next thing you make, lemon tea. How long do you have to let the Seymour's soak in the spices? 5 to 10 minutes and you're good. Oh, yep. So the first one is 12 to 24 hours and this one is 5 to 10 minutes. Your end result, this is it. That's the Seymour's gel? Yes, that's the Seymour's gel. So to create the Seymour's gel, you have to soak the Seymour's in the spices and just let it soak for 5 to 10 minutes. Yes, then you could refrigerate it afterwards and use it. You could freeze it as well. Alright, what do we do with the Seymour's gel after that? You blend it up. Alright and that's the first step. Yes. Meaning our Seymour's. Make sure you scoop the gel and put the gel in a blender. And just like that. And then you get a smooth piece. See. Okay. That's what you get. So have a question. Is that ready for consuming one time? Yes it is. Or add more sugar to it? If you like, depending on your sweetness, you could add sugar or honey to it. Okay and you can't want to add things like milk to it. Do I have to add milk to the blender? To the blender. Alright and blend it together? Yes. So this is it for the gel. And of course that's how we do it. Okay, so it's very simple. You take your Seymour's. You soak your Seymour's for 12 to 24 hours.  I'm doing right. Yes you are. Alright, then you boil your spices, your traditional spices. And then you take your Seymour's and you soak your Seymour's in the spices for 5 to 10 minutes. And that's how you form the gel. You take your gel after that. You blend your gel. And you're going to have sugar in your spices as well. But you can add some more sugar afterwards. You can add your milk. And that's how you get your Seymour's. So that's it for Seymour's made. And there's so much more you can do with Seymour's. So of course, Veneta, that's what you have. Yes. You're going to show us what else you can do with lovely Seymour's. Yes I know. Alright. So you have your Seymour's. You've made your gel. And right now you're looking forward to making your lovely Seymour's drink. And that's why we have Seymour's made with export St. Lucia. Now don't forget, Seymour's is good for you. Alright, it's good for your joints and your bones. It's also high in sulphur. So you can use it as a lovely face mask as well. And we're here with Veneta. She's from Sunshine Delights. And she's going to teach us how to make our Seymour's drink. Yes I will. So you add your gel. The gel that we made. Or I'll go. You add it to your blender. And the gel to us. Yes. That's all for the gel. Do you think that's enough gel? Would you like some more? That's okay. Put the milk next. Alright, some milk to it. Half a can of milk. So that's the hidden ingredients that we don't know about. So after the milk, what do we put? Yeah, some essence. What type of essence is that? Vanilla. Or you could also use almond. Whichever your preference. And that is? Condensed milk. Say it tricks a lot here. Condensed milk. To give it some more flavor. Make it thicker as well. Yes it does. Okay, so we have some spices. You could add more cinnamon to it. How much cinnamon do you measure in it? Just anything? Two teaspoons. Alright, two teaspoons. And it's a spoon of nutmeg. Nutmeg as well. Yes. And then we blend it. There we go. All the time. And just like that, it's good to go. You could add some alcohol if you like. Oh, we don't have to do that on TV. We can. That's afterwards. Not now, I'm waiting for that. Let me tell you, ladies and gentlemen. Give me a second. Do that. No, I didn't. It's very talented. Just like that. That's our semolina drip right there. Today I'm feeling a little bit lactose intolerant. Today I want the seamos minus the lactose. Okay, so what can we do? What we can do? You add the gel. We need the gel. The gel is the base for everything, right? Yes it is. So we add the gel. You could use almond milk, coconut water. Coconut water as well? Yes. You could use regular water, which I'm going to use. Okay. And coconut milk as well. You still have to add your spices? Yes, you have to add your spices. Which spices this one? So this is cinnamon again. You have to add the cinnamon as well. Yes, and some nutmeg. The nutmeg is ground, right? Yes, everything is ground then. And you add a little ginger. It's very strong. So you add quarter of a teaspoon of ginger. And some bay leaf powder as well. Quarter of a teaspoon. And some essence again. You have to add your essence. Yes. I thought the essence was only for the milk, but clearly it's not. It gives everything flavor. And then this is your water. That's so with the thickness of the sea moss, right? Yes. And you blend it. What do you know when you blend it? It's smooth. Okay, once it gets smooth. Yes, and everything is blended properly. There we go. So that's the... The plain sea moss. Plain, that's what they call it. My first kid did a minus lactose. No, no, no, it's the plain sea moss. I was about to be a little bit fancy.  No. Let me just tell you. Wow! When God made you, He made you, eh? Name please. The same way you made that sea moss. He made you. So what about the plain sea moss? We didn't add any condensed milk. So how do we get our sweetness in that sea moss? The sweetness, honey. Some people don't like honey at all. So you could add a banana for sweetness. Alright, nice. But you don't want to add any brown sugar or... If you desire. Okay, if you want to. That's the taste, alright? Yes. That's what it is. Let me tell you. You want to have options. You want to have variety. If today you can handle the lactose, it's only for you. If tomorrow you're not feeling for lactose, the plain is for you, alright? And there's so much more you can do with sea moss. Of course, Vanessa. Yes. That's why you're here. We're going to keep the ball rolling, eh? Yes, we are. Alright, so I'll see you later. Yes, go ahead. Go ahead with your shepherd. Yes. Let's see what I want. Okay, so just imagine if we for a second. Right now, there we are on the beach. Birds is quick, quick, quick, quick, quick. Banjo plain, by nice.  You have sea moss gel, you know, but you don't want just the ordinary sea moss drink. You've had that. You've had the milk and the plain. You want something nice and tropical.  And you know already, sea moss is good for you, alright? It's good for the blood. It's high in iron. You think sea moss is good for COVID? I think it does. I think it's good because it boosts your immune system as well. So it boosts your immune system? So why not you have a double bubble, alright? So that is why you look at sea moss made by Exports and Lusha and we have beautiful people like Veneta from Sunshine Delights. How can we make something tropical? Something banjo chung chung chung chung. How can we make something with the sea moss? Okay, so we're going to make a smoothie with the sea moss. A smoothie, alright. As we said. You sure you can make a smoothie with that? Yes. Alright. The base, the sea moss gel. You always have to use your gel. Always have to use your gel. Alright. Add some gel. A banana. With tropical already. One time you have the banana with tropical already. Yes. You can also use some mango as well if you have. Some mango. Yes. What's this one there? Blueberries. Michael, it doesn't get more tropical than that. You have a little blueberries. Yes. Strawberries. Strawberries because they go hand in hand. Yes. That's right. Left and right, ying and yang. Yes. Okay. And some orange juice. Okay. Alright. To give it that nice smoothie flavour. And if you like it, you could also use the juice that you made at your house as well. Lime juice. Get creative with it. Get creative with it. Alright. So we go ahead. And we blend. Blend until everything is smooth. And then you're good to go. So you're looking for that smooth texture. Yes. I like the colour. Yes. Very tropical, alright. Yeah. Make me feel, you know. By tan. Beach pun. Take out the visor. I can see myself someplace. Just below the pitors. You see that where you put that there? So they put in that I'm on the beach. Well stretched. Yes, yes. Let me know how it tastes. Tropical smoothie. When I taste that, I saw two dolphins do yiii. At their back. I first saw you said you taste paradise. I'm tasting paradise. Amazonal, physical. I see them jump on the back flip. So when you want to get creative, it doesn't... I'm not even really getting too much of the seamos in there. No, you don't. I'm getting the thick consistency, yes. But it's still nice and refreshing. That's when you feel like you... You can bring the hotel to your home. Yes, that's true. Alright. So that's what it is. We add our fruits in there. Of course our seamos gel, that's our base. I guess the little tangy flavour is by the orange juice. And of course you can get more creative with it. You don't have to use blueberries or strawberries. Whatever fruits you have at hand, you could just use it in there. Alright, but you always have to use the seamos gel. So you want to add any sweeteners in there. Do you want to add any honey in there if you want to? Or just go with the refreshing flavour. Refreshing flavour is best. Just like that. Alright. You have a name for that one? No. I'm calling that one the two-doll thing. I'm seeing it.  E-E-E. That's what it is. Seamos made, brought to you by Export Saint Lucia. It doesn't get better than that. Alright, so get creative with the seamos at home. And if you want to mix up in there, you know what to do. We just give you the ingredients. So many people are out of the misconception that whenever seamos is involved, it has to do something, it's something of a drink. That's what you're going to be creating. But that's not true. Alright. Just imagine today you feel a little bit fancy, you feel a little bit in it.  You want something nice. You want a nice dessert. You can use seamos for that as well. And we all know that seamos has the health benefits. It's a powerful anti-inflammatory. It's also good with weight loss and so much more. So today, I'm not thirsty. I'm hungry. Alright. And that is where you come to Seamos Made by Export Saint Lucia. And we are here with Veneta from Sunshine Delights. What can I make to eat, not to drink? Talk to me. Okay, so we're going to make a cheesecake. A cheesecake? Yes. Yes. So you have your cream cheese. And you're going to add some icing sugar. Icing sugar to the cream cheese. Yes. A couple of icing sugars to the cream cheese. I'm curious to see how the seamos fits in that. Okay. You will see just now. Yes, I will see. And you add some essence. You could get the essence and the icing sugar from either viking or barrens. Yes, yes. Get it from them. Okay, so you mix that all up. Mix it. Alright.  Yes, and your cream cheese has to be room temperature as well. Don't forget that it has to be room temperature. Or else it won't be able to cream. So there's a science involved in that? Yes. If it's hard, then you're... That's not a cheesecake yet actually. That would be a cheese rock. You don't want that. No, you don't. Okay, so you mix and then you... One is fully combined. Take your time, mix it, mix it. You add your gel. Oh, that's when you add the gel? Yes. So in the process of like you just said, creaming. Yes. When you add your essence. Yes, add a cup of gel. Your icing, your cream cheese and now you add the gel. Yes, you add the gel to it. One cup of gel. One cup of gel to this. Mix it up. And the thing about that cheesecake, you don't need to bake it. You don't have to bake it? No. So this is a non-bake cheesecake? Non-bake cheesecake. It goes in your refrigerator for six hours. Okay, nice. Yes, so you can make it the night before if your friends are coming over. So you move along to the whisk. Whisk it together. Whisk it together. So right now there we have the sea moss gel. Let me tell you, I'm learning fast. We have the sea moss gel and we are whisking it with the cream cheese, the icing sugar and our essence that we got from either Viking or Baron. Yes. Until we get a smooth consistency. Yes. All right. So thereafter, so we have some crumbs mixed with some butter and a little sugar. So that's the base for the cheesecake. You could either use, you could just cake as well. Whatever cake you make out of your home, you could use it as a base as well. You don't need to go and buy that. The store has some store-bought ones. The base for the cheesecake, you could just purchase it. Press it down. Press it down. Yes. Make sure that there's a good me plikoma. All right. There we go. You could put toppings. That's to your liking. All right. Cherry, blueberry, you could make your own. Get creative with it. Tamarin. All right. Passion fruit. Okay, so go ahead. Press it down. And then you just pour that right in. Right there. Like this. It's good already. Smove it out.  And you add maybe some sauce or some fruit flavor. You could add some fruit flavor, some extracts. All right. Lemon. Strawberry, whatever you like. You could just add it to it to enhance the flavor. So this is the cheesecake. And then you place that in the fridge. And then you place that in the fridge for six hours. And when it comes out, you get this one. Nice. Yeah. Just like that. Just like that. All right. So that's our cheesecake. It's been in the fridge for six hours. Yes. And now it's time for us to cut our delicacy. Yes. All right. North. South. South.  That's eastern west. You get a nice, you know your best cutlery.    You understand. And you have to make sure you extend your pinky finger and take a nice, let's see that Simos cheesecake. And that's what it's supposed to be. Give me one second. Let's verify. And just like that. I'm sorry. Just like that. A wonderful dessert. Of course using Simos gel. As your base. It's a wonderful dessert. It's a wonderful dessert. It's a wonderful dessert. It's a wonderful dessert. It's a wonderful dessert. It's a wonderful dessert. It's a wonderful dessert. As your base. It's cheesecake, all right. And right now that we're using Simos in every possible way. It's good for you as well. So you have it. So that's a little bit good for you as well. Because you know Simos has all their benefits. So let me just ask you. What if, you know... because we made some stuff today. We made the cheesecake and stuff. What if I want to get a little bit more creative with? Is there anything else I could make using Simos gel as the base? You could use it. You could use it as you could make tea with it as well. Oh nice. Simos tea. You could make porridge with it as well. సిదిίναι సిరరండికచి సివి కివి. కివిచిక౨ి కసిసి కిసికటికి. మద౿కండికికనాచ౿. మ్ఢన్దినిని. సిం౗ాన్లి. క౿వికికంధౕసి. వివికి. అకిక


Hello there, and thank you so much for joining us here at ORQ Contag, how we will declare on K3S the learnings of growing up fast. My name is Anais Ueles, I'm a Zed Reliability Engineer at SIBO. Before joining SIBO, I worked for several years as a developer advocate first in the blockchain space and then transitioned into DevOps. I also started a challenge called 100 Days of Kubernetes, where we aim to learn something new related to Kubernetes across 100 days. If you're curious, you can find more resources on my Twitter, linked on the slide. Hi there, I'm Alex Jones, I'm the Principal Engineer here at SIBO. I'm also a technical advisory group technical lead for app delivery within the CNCF. I've worked at companies such as Microsoft, B Sky B, JPMorgan, American Express and many more. And you can always reach me on alexjonesax at Twitter if you want to chat. So what is SIBO? What are we actually basing our experience that we share with you here this talk on? SIBO is a managed Kubernetes provider, meaning you can spin up Kubernetes clusters in 90 seconds or less. We are highly community focused and community driven, meaning a lot of our offering is based on community input. Also, our platform provides several different options to allow for community feedback and community created resources to contribute and help us grow the platform. Additionally, SIBO is based on K3S, which is a separate Kubernetes distribution that allows us a lot of the features that we will talk about throughout this presentation. So why is there a need for yet another managed Kubernetes provider? Well, first of all, the market is growing. More and more people want to use Kubernetes either for their personal projects or for their company's needs. So in itself, people want to be able to use Kubernetes as quickly as possible with little hassle and without having to read any books on how to actually do it. Secondly, SIBO is based on K3S. There is not yet a managed Kubernetes provider that is based on K3S. We will dive into more detail into what K3S actually is in a second. And lastly, there is a need for a cloud native Kubernetes service provider. SIBO is cloud native first. A lot of the CNCF projects that you will hear about throughout this CUBE column are actually integrated with SIBO. You can spin them up when you spin up a Kubernetes cluster alongside it. So you don't have to dig through and this documentation, but you're up and running quickly with the tools and platforms that you want to use on top of your Kubernetes cluster. So what is K3S? K3S is a lightweight Kubernetes distribution. On upstream Kubernetes, you have a lot of components added to it that are provider-specific. Now, those have been removed from K3S. You only need about 512 Macs of RAM to run on a server, meaning you can run K3S on a Raspberry Pi and other small devices. It's extremely lightweight and it comes packed as a single binary so you can install it like that. And the best part is that it comes with core technologies such as CNI and CSI and so on. So you don't have to install them yourself on your Kubernetes cluster. So beyond these specs, why would we want to use K3S over upstream Kubernetes? Well, first of all, K3S has reduced installation complexity, meaning because it comes as a single binary, it's really easy to install to spin up. You can try it out yourself on most machines. Then it also has higher class density per compute node, meaning we can spin up more Kubernetes clusters on the same hardware because it requires less pre-allocated resources upon installation. And then it also has a simplified backup and recovery system and overall, like mentioned earlier, faster launch times. We are able to get launches below 90 seconds. So now that we've learned about the value and benefits of K3S, let's connect it back to the infrastructure we have at Sievo. You can see here on this image, one of our super clusters with the compute nodes within. Now our super clusters, our infrastructure is open compute compliant. On the next slide, you can see a diagram and illustration of those set super clusters. We have in each super cluster 32 compute nodes of which four are the control plane. Now our infrastructure is hyperconverged, meaning all of those compute nodes have the same storage and the same specs and can all run workloads. So you can schedule workloads, you can schedule clusters on any of those compute nodes. The best part about our infrastructure is that it's zero touch, meaning you can just roll one of the super clusters and pretty much any data center and just plug it in and go. So let's have a look at how the tenant K3S clusters actually look within our super cluster at Sievo. So first and foremost, we have the K3S process, but we need to run that in a safe way. We chose to use libvert and that with cubevert allows us to run a virtual machine within a pod. This virtual machine as a pod is set up with several others to form a K3S cluster. So how does that actually work? Well fundamentally, when you start up a virtual machine, it gets loaded from a base image and then libvert on the host super cluster node will create a VM that is then attached through a virtual machine instance. This is extremely powerful because with hot plug technology, we can attach PVCs and allow storage to be provided to that K3S tenant cluster. And with that, we can reach 90 seconds or less for our cluster launch times.  Let's talk about networking for tenant K3S clusters. As you can see from the diagram, we have a namespace for tenants and in that namespace, they can have multiple clusters. However, what they will have is a single router pod. This router pod is an L3 network bridge and on that router pod, it will have two nicks. One of those nicks will be on the private tenant network and one will be on the public network. And we have the ability to control ingress and egress traffic with firewall rules and IP table exclusions. This means that as you resize your clusters and recycle nodes, we can dynamically update those rules so your traffic is always ingressing to the right place and equally, we can see how much utilization is being required by a tenant at any one time. Because of the way that we've designed our K3S tenant clusters with virtualization using libvert, that means that we can have multiple clusters within the same super cluster tenant namespace. This is an exciting proposition because it keeps things simple. And on top of that, because of the lightweight footprint of K3S, we can pack more K3S clusters in per physical compute node. That combined with the fact that every single node pool from a tenant cluster is distributed across our digital infrastructure means that reliability and resilience is built in. So having described the technologies that Civo has built and some of the challenges around virtualization and creating tenant clusters within our super cluster, it's important to reflect on what we learned in our beta period once our MVP was pushed out the door. It's been really, really insightful to learn about some of the community-led feedback and also some of the things that we discovered along the way that we didn't know we went into this. Firstly, deployment maturity. When you get things started, it was a mixture of a bunch of different scripts. We had Terraform, Ansible, we had distributed deployment processes, some of which were manual, and we had very, very little control over how fine-grained we could be with our deployments. It was at a regional level. So if you had something you had to distribute to London One, the entire region would be updated through Terraform or through Ansible. This meant also that it was really constrictive for multiple team members to work on the same code base. Even if you've got infrastructure as code, you have to be extremely careful with how you position that, and also it was extremely difficult to roll back. So what do we learn from this? Well, we moved to a workspace-based model, we moved to dry configuration with Terraform and Terragrunt, and the idea that you could apply microchanges, that every single region is comprised of modules, and you can update those modules independently of the work of other team members. This also was in conjunction with a large-scale change to having gated pipelines so that we could deploy through our test regions, then to production, all the while performing linting and testing along that process. This has now matured to the point where we have automation to build clusters, to check that they work, and to then continue on that journey of continuous deployment. The next part was observability maturity. When we went into this, we were effectively flying blind. We had some raw Prometheus configuration, some very Prometheus-based alerts, since the sense that they were node exporter alerts and Kubernetes default API alerts. We didn't really know how SIBO stack was doing. We didn't really know what our customers were doing. We couldn't answer basic questions like, is a customer cluster working? Are the tenant nodes working? Or are they facing loads of problems inside of their clusters? There was a huge manual effort in having to jump in and look at that Kubernetes cluster. However, we've now moved more in the direction of having three different signal generators and collectors. We've moved to have aggregated signal collection and the ability to have a holistic view over all of our telemetry across our regions. This is in the shape of having Prometheus with distribution into Thanos. It's in the shape of having Loki to collect our logs from the Syslog level all the way up to the tenant cluster level and about having Jager tracing to look at how our own operators perform. Are they hanging? Are they finding that there are particular function calls that are becoming unoptimized? As we're building out this observability control plane, we're also starting to mature our model of what is the kind of data that's meaningful to us. We mentioned our cluster launch times are an extremely important part of our proposition and so therefore we have a big dashboard that displays how we're doing in performance across regions. How does this particular container D or storage layer change impact our ability to perform and our ability to deliver? I mentioned also that because we've had this distributed approach where we have now federation of our observability, we have much more of a holistic viewpoint. The most recent thing that we've moved towards is having Thanos to enable us to see how our clusters performing over time and we're now starting to build out forecasting telemetry so that we can detect problems before they happen. The final part of this key set of initiatives in the terms of maturity was to change the way that our SRE culture sort of performed in group and I say change the way but really when many small companies go into this there is that very organic culture that usually has a few very intuitive but particularly autonomous individuals who just get things done and the problem with that kind of culture is a lot of that tribal knowledge is lost. A lot of those behaviors are specific to the individual and it's very difficult to then transfer that to a new team member in an effective and a reproducible way. This was self-evident in the fact that we incidents were handled earlier on. We didn't really have that process of post-mortems and learning from those incidents and really trying to embrace the SRE mindset of spending 50% of our time developing and solutionizing and improving those systems. So we're now moving more towards the stance of let's think about SRE culture as important as the way we think of our development or our engineering culture and let's have the rituals that matter. Let's cherry pick the things that to us as a company makes sense. So we've started moving in the direction of having more rituals around, okay, let's look at the backlog. Let's decide how we distribute the work. Let's look at the rituals that don't make sense such as arbitrary things in the board like picking up items that won't improve our toil. And let's look at the things that our active feedback mechanisms are telling us that early warning system I mentioned earlier that's been a good indicator that we have some toil or some tech debt in a certain area. Is there a particular type of activity that customers are participating in that we can't really tell? Are we looking at building on the customers that we have very poor granularity on what sort of node sizes are more successful? And we should be able to also facilitate the ability for our development teams to iterate faster and faster. As they're pushing operators out by version we should have the ability with our traces our logs and our metrics to tell them whether they are compliant within that error budget or whether we need to put the brakes on and think about are we going to introduce risk into our production platforms? So we've tried to explain to you in this talk some of the reasons we really think that there's huge potential in the market for technologies with K3s with providers like Civo that are community driven. We've spoken about the hardware that we use and some of the technical challenges that we had to solve and some of the interesting things that we've managed to accomplish. On top of that we've tried to be very open with the learnings about things that went really well versus the things that were a little bit tougher to achieve. We're not sure what the future holds but we're really happy that we picked K3s as our core technology because we know that we can iterate on it really fast. We can sidestep all of the more traditional Kubernetes challenges that you have when you're trying to scale it up really quickly. This also means that we can stick to our primes of sub 90 second launch times with sub 60 seconds becoming tantalizing and close and so from Civo's perspective we're gonna see a lot more interaction with the community and a lot more excitement in terms of where K3s is going as an independent distribution of Kubernetes. Hope you enjoyed this talk. Thank you so much for listening. We will be available for Q&A now. You can also reach out to either Alex or myself here on our Twitter handles as well as Civo Cloud.


So I'm absolutely fantastic, I lived only in Mysore, after that I've just been working. I started travelling when I was twenty-five, twenty years after this incident, eighty-two.


Hi SESA teachers it's Angela and I thought I'd just share this quick idea called graduation letters and this is something that I did with my kindergarten students but is a great way for any grade level actually to encourage your students to dream big and do some reflection. So last year I actually had shared this tweet about pulling out graduation letters that my students had written to themselves when they were in my kindergarten class and I keep them and then several years later when the year comes I actually mail them the physical letter. So lots of people reached out to me and wanted to know the process that I followed to do this with my students. So what I did is I actually did a read aloud then we do a discussion and then my students start writing. So the book that I choose to read is called there was a bold lady who wanted a star and it is actually a very special book to me that was given to me from a colleague but any book would work really well here that has to do with goal setting or not giving up on you know hopes and dreams. So after we read the book we have a class discussion and we talk about what will it be like you know in several years when you graduate and we talk about what graduation is and we discuss you know what might they like to do are they going to go to college where will they live and after we have some discussion and the students go back and they start writing. So here's an example the student you know would write Dear Angela and I ask that they only use a pencil for their writing because we didn't want you know markers to get read if I'm holding these letters for several years and they can also do illustrations on the back as well but they do their best to talk about some of their hopes and dreams and what they're going to do when they graduate and when they grow up and after when CISA has come along I actually have the students take a photo of their letter tap the mic and read their letter and then those are added to their portfolio and families can actually see them of course I'm still keeping the physical copy to mail to them in several several years. So I hope this is something that you would enjoy trying with your students and again I think it works great no matter what grade level you teach and it's always kind of a sweet way to see all the big hopes and dreams your students have. Enjoy!