Good morning. Good afternoon. Good evening. Wherever you're hailing from welcome to another episode of DevSecOps is the way today We're going to be talking about identity and access management, which is everybody's favorite thing I'm sure but a critical component in anyone's infrastructure So Dave Meers here with us today and Dave is going to introduce our guests and show topic and all that fun stuff So take it away Dave Yeah, thank you Chris and I appreciate everyone joining today. So I'm just gonna Present a couple slides and I promise these are the only slides you'll see in today's show I think we have a really good one for you today. We've got Mark Orstein Who's the co-founder and CTO of tremolo security? We'll we'll give Mark some time to introduce himself in a bit. I'm Dave Muir I'm at Red Hat in the global solutions architect That's focused on our partners on our security independent software vendor partners mostly around open shift so If you didn't know already DevSecOps is the way is the way and it is a series a monthly series that we're doing this year starting in March And we've broken down the different months According to a framework we've developed around DevSecOps And you could see March was vulnerability April was all about compliance and month is identity and access month And so what we do is we bring several publications To the general public one is this open shift TV show. We also have another open shift TV show That we produce on a monthly basis. The other one we did this month was actually yesterday So you can go catch it on YouTube if you missed it We also produce about three podcasts and As much other content that we can assemble We've done blogs and case studies and white papers and things like that Hopefully in the next couple weeks. We're actually going to be publishing a page on Red Hat that lists all this content by month So you can quickly reference it. So excited about that And so just to talk a little bit about the framework And you can see what we've done here. We've actually worked with the industry and folks like our partners and other industry and analysts to come up with a taxonomy around DevOps and DevSecOps and What security categories? You know, you can name and plot against a DevOps pipeline and you can see some of those categories here We've got nine different categories that map in certain ways Across a DevOps pipeline underneath these categories. We actually have identified 34 different security methods or functions So for example under identity and access you've got things like authorization and Authentication we'll talk about that are back. We've also got things like secret faults under identity and access and And then we're able to sort of plot those against where we typically see integrations in DevOps and And that really helps, you know us Have a conversation with our partners and with our customers about a comprehensive layered approach to security when they're on their journey to DevOps and Some of the audience members have may have seen some of these diagrams before where we have views of One or more partners plotted with Red Hat against all those 34 different Security methods to really give you that comprehensive view So that's the framework a lot of content out there just Google DevSecOps framework Red Hat You'll find actually a complete guide around this that you can get more details and more more diagrams so with that I will stop sharing and I'll just let mark go ahead and if you want to introduce yourself you're the co-founder of Trumella want to Talk about that a little bit Thanks, Dave. So hi everybody out there in the OpenShift TV live. My name is Mark Borschein. I'm the CTO of tremolo security We founded tremolo I think actually we technically found tremolo in 2010 We didn't really Kind of come out to the world until Red Hat Summit at 2015 in Boston. That was our first-ever conference and At the time when when we were first mile, we're really pure play identity management We started off. I had spent You know almost a decade total with PricewaterhouseCoopers as an identity management consultant and As did my co-founder and what we found was we're spending all our time Working around a beautiful demo like here's this beautiful demo for an identity system and You know the executives would all sit there and clap and say this is perfect This is gonna fix all our problems and then they drop it in the laps of the folks in the field that actually Implement it and we found we're spending all of our time working around the assumptions of what the vendor put together Said well, no, this isn't how this business actually works So okay, there's gotta be a better way and and so we first founded the company and first had the idea The buzzword at the time was virtual appliance like there were no containers yet and we're like, you know Yeah, we're gonna have this virtual appliance that you know, you could just drop in And you know nobody really needed to know what a virtual appliance was because it was marketing and yeah but it made people feel that that's what we had and So we said, okay, we're gonna take this toolkit approach instead of having this one monolithic thing That is your identity management system.  We flipped it on a 10 and then some every $2 every dollar you spent on our software you're spending like 50 cents on implementation time and Made for a great implementation made for really hard demo because like yeah, we can do all the things and Yeah, I mentioned Red Hat Summit in 2015 because that's when I was kind of first introduced the OpenShift and I've I always had a soft spot in my heart for infrastructure I always loved infrastructure and I started learning about OpenShift and this was This was pre-Kubernetes. This this was OpenShift v2 and you know, we started to work with it and like okay, this is interesting and we're already pretty small and lightweight so, you know, we started looking into getting ourselves into a gear and then Then we discovered Kubernetes and OpenShift v3 and We've been in love with the Kubernetes and OpenShift ever since so we started our Kubernetes in the OpenShift world with OpenShift v3 and and you know kind of understanding the differences between OpenShift and upstream Kubernetes and and working with customers there and Then you know the last three or four years really Has had a focus on making it easier to secure your Kubernetes infrastructure you know, we were at the first KubeCon in Seattle back in 2016 we actually had a booth and We're sitting there doing namespace as a service before anybody was really even talking about that You know, there wasn't even a concept of that yet And we're seeing that more and more and so what we've found is that especially in the last two years or so There have just been this explosion of systems where identity becomes super important because your, you know Kubernetes is designed not to do everything right the platform for building platforms So if you're going to have a platform for building platforms You need to have that platform know how to talk to all these different systems and all these different systems have to know how to talk to each other And that becomes a big identity game So what went from initially just user provisioning has now morphed into user provisioning access provisioning and Infrastructure provision because once you know how to provision a one API you can kind of provision to all of them and So kind of taking it from that perspective has really accelerated the way that our customers are able to move forward and You know, I've been doing open source since I was 18 and so it just made sense to me So we open source as well. You know, we don't do open core. Everything's open source if we make it it's open source So yeah, cool. Yeah, so man pre Version 3 openshipped. I don't know what that means To do a phishing campaign at one of my previous employers Wow, we were a quasi red hat customer, right like we Bought rail and you know had some support for that and I was like well, you know Let's use this red hat comms. Don't sub domain here and run my phishing campaign and see how well it goes Yeah, yeah, it just works, right? It was amazing Well, hey Mark, I gotta ask I'm not a musician my kids I think got the musical genes it passed past my generation, but um, what what is Tremella? I think it's a Musical reference, right? Yeah, so and I'll be the first to say I am an absolute poser when it comes to anything music I can't get past guitar hero on easy So, you know, I Tried to teach myself the guitar once and failed miserably I was the kid in recorder in third grade who had to sit there and just play with my fingers because I I couldn't So Yeah, so what a tremolo is is it's the fluctuation of the sound wave So when you hit the whammy bar on Guitar or you hit the fluctuate. I forget the name of the thing on Like an organ or something to get that that wave that's called the tremolo. Yeah and so What What Happened was I I'm I'm I'm terrible at marketing. I'll be the first one like naming things like no not my forte. So One of my co-founders who actually is quite good at marketing Yeah, we're trying to sit there. You know, what's the name like we had thought up this idea and the very first Iteration of the product was a and this will sound really close to the heart to all of us in the cloud native computer cloud native community a Universal reverse proxy that'll do authentication authorization integration and The original idea was it was going to do any kind of authentication you want on the front side and the back side was going to use Kerberos and As for you to sell for any Kerberos keeks out there Never worked, but that was the original idea Well, it was to replace what what's commonly known in the the industry as a web access management solution So if you're through a sightminder or obliques, which is now Oracle access manager, you know Kind of really old school tools like that Sun access manager That those are web access management tools. They have agents. They're painful. They're expensive so we wanted to build this reverse proxy where everything was just built in and so my original idea for the company name was auto idea and My co-founders like well, you know, yeah describes it but it's kind of clunky doesn't really roll off the tongue isn't super memorable and So it's like well, you know, he came back to me said, okay Tremolo secure explains to me what tremolo is he goes wham whammy bar tremolo Like oh, that's stupid. Nobody's gonna understand what that means Like no, no, just come back with something else So that night I spent two two and a half hours trying to find a domain name that had the word identity in it I tried different languages I tried I couldn't find anything. Who is tremolo security calm? Nobody cool. That's the name of the company then And so since then we've had the musical theme so all of our different products projects sub projects You know all have kind of a musical Take on it. But like I said, I'm a complete poser like I I can't You know, I I can't figure out the recorder what along the guitar Yeah, same same Yeah, I I also know the The discouragement when you've got a great idea and you have a domain name and then you go and see If it's open and and it's not and you're like, wait a minute It doesn't even work, but somebody had to pay them three grand Yeah Well, cool and you you mentioned you did a lot of stuff with red hat and Um An open shift and in a lot of community involvement. Can you talk a little bit more about what you've done in the community? Oh, yeah, I mean, we've we've been pretty active inside both the kates and the open shift community almost since day one um You know shout out to to diane moerger. I mean the the open shift commons You know getting us involved in that, you know, whether it's just answering questions on slack doing briefings stuff like that um, and then, you know in the kubernetes world where we really got our start was when one three when oidc first debuted um I had to learn how open id connect actually worked. I'd been doing a lot of samol at that point and uh I um went back and you know In order to figure out how to integrate unison at the time it was unison wasn't even open source yet I'm still unison with um With kates using open id connect Had to figure out How open id connect worked and and the documentation was Not awesome. Um And so uh, I ended up writing a big wiki page for our website on how it all kind of connected and worked and all the different pieces and uh Folks were sending people to that wiki instead of the actual kubernetes documentation Because it just got into much deeper detail. Um, and so I was like, okay. Well, that's an easy contribution, right?  I don't know what they're talking about like I don't like to kkeep I'm sorry. You talk down documentation. You know No, like documentation is so important Um, and so that was really cool to me to be able to say, hey, let's write some documentation because people actually get a lot out um, so other than our first contribution And uh, since then I've actually made some code contributions, which was fun. Um added impersonation to the To uh, the the the web ui um, so that would work real well and in uh hosted solutions Recently added impersonation and uh reverse proxy open id connect support to kiali. So that's the dashboard for um Istia, so that was a lot of fun. That was that was really interesting And yeah, and you know, if you're in slack and you ask anything about authentication or our back chances are I'll be, you know, the first second person to respond to you So we've been pretty active in the community Um, and then in the red hat world Yeah We've been working with open shift. We were we were the first we were in the first class of the original certification process When um, it switched over to the newer certification process We're in the first class when operators were you know, going to be the first thing we're you know, we're sitting there What was it? Uh, when was the last time uh summit was in boston 2019. Thank you. Yeah um I was sitting there during an open shift commons, you know fixing our scripts that we've we managed to we do everything the hard way Um, so our operator is actually not built on the operator sdk. We wrote it in java script um, and so we were finding all these different edge cases with with with the Certification script or working with them figuring out what's going on. Um, so we You know, we've always had fun and red hats Just always been amazing to us. Um, so, you know, we we always have a blast working with y'all Yeah, likewise, and then you were just presenting at coup con last week, right or was it two weeks ago in europe before? Yeah. Yeah. Yeah It all blurs you didn't get to go to europe the So I did a session on uh, kind of i can our back and so can you you know our back and authorization um, it's just it's one of those things that baffles people like it's people find it really really hard to do uh because it is in fact really really hard to do um and What a lot of i'm seeing now is as kates is moving more and more into the enterprise is a need to look at More deeply the authorization systems inside the cluster Especially as you start looking at your developer workflow because you know your developer workflow isn't just kates, right? It's it's kates It's a pipeline now. Maybe that pipeline, you know, we're going to talk about tecton So that right runs inside your cluster So that'll piggyback off far back, but you might be using jankin You might be using circle ci or azure dev ops or any of the 25 million other pipeline systems out there, right? They'll have their own identity systems. They all have to securely talk to your clusters and your infrastructure You know if you're using git ops, you know, whether it's argo or flux, you know, we're going to talk about argo today That has its own built-in identity system um You know you look at your git system like okay, we're going to make git the center of our compliance world and our our source of truth for what's happening Now git hub and git lab or whatever you're using they all have their own identity systems They have all their own processes all their own setups um You know, uh, where do you store your containers? Are you using a built-in registry and open shift or using harbour or using one of the 25 other container registry systems out there? They all have their identity systems um And so, uh, you know it it where we started was kind of this namespace as a service but what we're finding more and more is that All these different things need to talk to each other and identity is a huge part of that And and so that's really what we've been spending most of our time lately Yeah, so it's a good segue. We'll get into the meat of it before we do that I just want to give you an opportunity to uh To talk about your book sounds like you're gonna oh second version of it Yeah, we're looking to do a rev too, but that's going to take a little while So i'll do a shameless self-promotion here kubernetes and docker enterprise guide um The key to this book is that if you're working in enterprise This book is going to speak to you um, you know, it's uh, the There's a little more docker. I'll be honest and I i'm going to throw my publisher onto the bus on this one There's more docker than I wanted or either of us really wanted to be in there um Publisher told us we had to do more docker and my co-author bit the bullet on that one. It's a good man better than me. Um, but you know the The stuff that enterprises care about because enterprises are just different, right? I mean B2c everybody is narrowly focused on that one thing. I'm getting you a ride or I'm getting you a pizza I'm getting you something else, right and everything is so super focused on that whereas an enterprise You have a handful of truly enterprise wide app, right? You've got collaboration your email your share point, you know, whatever you're using collaboration You've got hr systems. You've got erpu of crm that like those are truly enterprise wide systems But then you have like hundreds maybe even thousands of applications That are very domain specific and can have anywhere between a few hundred users Or a few thousand users depending on the size of the organization and to the people who use it That is like the most machine-critical thing in the world. But to everybody else They're worried about their thing And so enterprises just have different things that they care about they've got to worry about things like Silo's they have to worry about things like You know the centralized authentication with the system that they don't know, right? You know if i'm if i'm working at a service provider, you know, maybe they're using oct or something like that But it's more tightly integrated into the system Whereas in an enterprise the people who own active directory are not the same people Who own your cloud data of infrastructure and not the same people own applications, right? So the people own active directory man active directory goes down. You're having a really bad day Like slot goes down. Yay. We're going to go throw a party active directory goes down the dinosaurs start eating the tourists So, you know Read only account that's easy right account. That's a little bit harder. So you have to deal with those silos And then some of the less sexy things about kubernetes, but things we all need to know like backups policy management Things like that and then it all kind of culminates into the demo that we're going to do today I had wished it was going to be live and it could break and I can show it breaking Unfortunately, I managed to nuke my entire environment ahead of time. So we're going to have to go through a video demo. Yeah, um, but You know, it all kind of culminates into this, you know, building a platform, right? How do you how do you map Your business logic into an actual implementation around get ops and whatnot. So You'll always be able to see the output of that last chapter Cool. Yeah. So let's dive into, you know challenges of identity During the workflow. I guess do we want to step back and define what identity means? Yeah, I mean a lot of folks Talk identity and think ssl like that's the first thing that pops into people's brains is ssl um, and as Painful as ssl is That's the easiest part Like that's simple compared to the rest of To the rest of of the identity landscape Because It's very transactual. You know, it's one of those things that You're authenticated or you're not and Whether you're in legal or you're in dev ops or you're an executive You're authenticated or you're not there. There's there's not a lot of there there from a business standpoint Authorization is where things get really dice because that's where you have to start to map your business processes into code into infrastructure And so That's a really hard thing to do. That really requires Understanding not just technology involved because you have to be good technologists Because you know, we're we're going to throw up the whiteboard here in a minute And you know, there's all these intricacies that you have to understand to do from technology standpoint But you also have to be able to go back and say, okay What are the processes I need to implement this for like why do I have to do it this way? So like going back to the book In that last chapter, we don't even start talking about tech until we're about two thirds of the way through And we're talking about what's a pipeline? Why do you design a pipeline a certain way? How do you design your developer workflow because that that graphic that you showed at the beginning of all the different Categories of security and whatnot If you don't have a way to map that onto your business process You can't match your compliance requirements because you don't know what they are You can't make your users happy Because you can't tell your users how to work your users are your customers, right? They have to tell you how they want to work um, you know, so so All the way up to and including even from an organizational standpoint where we start talking about Owning of identity right who owns? You know, if I'm a cloud team and I own an open shift deployment Do I really want to be responsible for adding users into projects? I might if that's what the business lines up with It's been my experience that I don't you know, usually what ends up happening is the cloud team says, you know We got enough to worry about just keeping everything up and running Here here's your sandbox. Here's your your field. Y'all are responsible for this Um, you know, just leave us at it. We're going to make it so that it's as hard for you as possible to break things uh, and so That becomes a really important process of who's going to own what who's going to own that responsibility And ultimately who's going to sign on the dotted line so that as it goes up the chain Uh, you know and the cfo has to sign on the dotted line or they go to jail um, you know Does everything map or the auditor is going to be happy. Um, you know, are we going to keep our ceo out of the wall street journey? For a breach versus, you know Great numbers because that they want to be in the journal for um, so it it, you know, it really becomes Important to be able peace those things together Yeah Well, yeah, let's take a look at that developer workflow. One of the things I actually failed to mention when I showed that diagram is out of all the categories Uh that we came up with identity Is the only category that's at every That's integrated at every spot But you can't get away from not addressing identity Oh, yeah at every point in the pipeline. It's the only category. So it's it's obviously very important and Yeah, so it looks like you've got your whiteboard up here. Yeah. Yeah, so I figured have some fun with a whiteboard. Um instead of slides because We all hate slides So, you know, but let's think about a developer workflow, right? Well, how do you want your developer to work? So you've got a prod environment. You've got an application, right? so, um, yeah Hello world, right because that's the most complicated application everybody goes um Well, that runs inside of a container, right and we'll say it's running inside of open shift That container Comes from a container registry. Now this conversation here. You want to be authenticated, right? There's an identity chicken scratch, right? So how does that container get into said registry Right, you've got a pipeline If I can draw pipeline Yeah, we're all judging your uh Artistic capabilities. Oh, I hope so. Yeah Yeah, no, I I deserve to be judged Um, so you've got a pipeline, right that pipeline is going to generate a container that needs to get pushed into that registry That's another identity Because obviously if somebody gets a hold of that pipeline, you know, and when I say gets a hold, you know, it's not just you know, the You know the hacker with the sunglasses and the hoodie, you know sitting there trying to ruin the world It's the developer who forgot to switch their dev context I personally have never done that But you know It happens, right Um, you know, I haven't done that since like this morning. Um, so, you know, you've got your pipeline But now that pipeline doesn't just push a registry. Let's talk about get ops, right your pipeline Is also going to push Manifests into open shift, right? So you've got your get ops. You've got your argo Over here. I hope we have a prize for anyone who can actually read what I'm writing So argo needs to be able to talk to open shift, right? That's another identity Argo needs to be able to talk to get that's another identity And so far we've only talked about things at a system level, right? I mean, we haven't actually Like gotten into users humans Yeah So we're still going because your pipeline in the get ops world isn't just going to generate a container But it's also going to make an update to your manifests to point to that container So that needs an identity here Sounds like we need a big notebook to write all these passwords down Jesus No passwords I'd say uh, that's a reference to yesterday's show.   You've got your actual open shift, you know That's running the code to all these different system level identities Okay But now let's talk about the user identity for a second so, you know I'm going to draw some swim lanes here.  And they're going to say, okay, we're we're deploying this new application So i'm going to ask that somebody build the application infrastructure out So that's actually another lane, but we'll we'll just say that that all gets on right so new app And I want my ops team To be able to get into the various namespaces associated with this app But I don't want my devs to be able to I want my devs to have to work locally and then commit into repos so, you know A new op a new app gets created and then as a dev or an op I say, you know, can I access now That might be a service now ticket if you know, you have to go through that process somebody has to ask or it's the email shop Right. Can I access That should really go To your owner because that person is responsible for saying yes or no Once you get a yes You then need to get provision. But what do you actually get provision to? Well, if you're talking about git lab, you should be a developer on the projects But you shouldn't be able to commit to the projects Right, so you've got to go into git lab as a dev And then you're going to need to be able to access openshift like even if you're just using it to access tecton to be able to see what's going on So some read access And then you want to get into argo. I mean argo is a great interface. You want to be able to see what's getting synced Um, it has its own identity system.  It's you know It ain't the same language, but at least it's like You know somebody who's done git lab will look at the way github's permissions or something okay that makes sense And vice versa, but it's not the same thing. It's not the same api. It's not the same standard So when you create your projects, you know your your application You have to connect all these things from a user perspective so that as a user All these things are seamlessly integrated. So, you know, we talk a lot about sso and authentication getting in on the front side But that's the easy part once you're in What do you have access to? How are you restricted inside there to actually make your day easier not harder? um, and we'll see that as part of the Part of the demo so as a dev I get provisioned into all these things And then I'm going to go ahead and write some code And then I want to push that into you know git And that's when we get to this stuff and all the magic happens Right.  You don't want to commit anything to that main project. You want to have forks. So you have prod for dev fork You have some news from fox apparently um, you know And then I'm going to have a local for it, right?  Your authorizations built to work with that As you get new developers on How are you driving that access? You know, are you storing your groups in a database? Are you going to store your groups in active directory? Um, do you have the ability to do that? Are you going to store it in octa? You know, where are you going to store that information? Who's going to own it? How do you keep it up to date? Do you have compliance issues like, uh, you know Should somebody have to recertify this access every, you know Year 60 days night is whatever it is. Um, so like I actually I don't think it's published anymore, but a few years ago red hat published this, um NIST 853 guide to open shift So for for those who aren't aware nist 853 is the the uber set of security controls that the government uses that's like the baseline And red hat published a guide and said this is how you Run these controls with open shift and how you know a big giant spreadsheet And there's you know 20 or 30 controls specific to identity management and they all said not my problem That's somebody else's problem Right because it's a really hard problem to solve. You can't just say this is how I do even though open shift has its own You know open shift unlike upstream kubernetes has its own built-in identity system Uh, it's a way of storing users and groups um There's still a lot of work that goes into making that happen from control standpoint so you know When you look at this I say, okay. Well, I can get SSO into argon. I can get SSO into open shift. I can get SSO into github That's the easy part Building out all these relationships That's the hard part like that like comparatively speaking not say SSO is easy But when you look at them the eye, you know the iceberg picture SSO is the other thing bird up here The authorization framework is the bottom part Down there and that's really where the rubber hits the road and what's great is It's big. It's daunting. But when you do it, right? Oh man, your developers love it I've got one customer that um That they're they're a relatively small hedge fund as these things go in the uk And we built out a system for them that um, you know User goes in and they say I want to create a new project And it was all aws infrastructure So it was you know, we would build out their code bill their code commit check in their initial stuff You know a template You know build out the namespaces build out all the relationships between the identities and they could go from That to production without interacting with anybody from ops Like I at one point it had gone about six months. It's like hey, I haven't heard from you. How things go. That's awesome I don't talk to anybody people leave me alone It's great. I got enough shit to do I don't know So, you know It's daunting But once you get working we'll see that here in the demo here in a second It really like it it and I don't know how to use gestures on mac apparently Can you get out of that? No, how do I How do you do what? How do I hey, there's your air.  There we go I'll just be christen because myself picking our noses Well, I would say yeah that it is a great thing for developers being a former developer the most frustrating thing for me is That is that something that should know who I am does it like I don't have this thing a smartphone because it takes me five tries for me to just unlock it sometimes like So when everything works and and I only have to by the way single sign in once and not four times a day to the same browser And it's But it's very uh, it's nice, right? It's it's not it's frustrating when when that doesn't work Yeah, and like let's let's kind of show where the rubber hits the road here All right, cool. So i'm sharing that so this is the um not-so-live demo And we got a lot going on here So, um, what you're seeing so in the upper left hand corner, you got open shift get lab argo And then the bottom left hand corner is going to be open years. So open units are open source project That's what drives all of this. So first thing i'm doing is i'm logging in as that app. I want to create a new application so i'm going to go in say, okay create a new app for me and Because this was a live demo and I didn't want things to break. Uh, I I pre did as much as I could Um, so i'm going to say, okay, go ahead. Please create a new namespace create a new project for me So the request goes in and then the next thing i'm going to do is i'm going to log in as a ops person somebody who's going to approve the creation of this project um Now this is kind of opinionated the way we thought people would want to do it But going back to that business discussion People are going to do it the way that they need to do it So i've had customers who have started with this and said, you know, we don't we don't want an approval We're going to use our own portal to do that process. We just want to call your api Right and you want to be flexible enough to be able to handle all those different scenarios. So what i'm doing right now is i'm logging in um As that ops admin And you can see i've got that open approval. So i'm going to review it and i'm going to approve it now keep your eye On what's going on up here because you're going to see Just the scrolling of objects being created across multiple different systems takes a second Or two Or 10 so there we go. So it's starting to churn you see all these provisioning engine implementation That's objects that are being created across the infrastructure inside of argo inside of kit lab We're creating private keys in order to link everything. We're creating tokens ring secrets Everything's being created for you to be able to have that dev environment that prod environment that tecton environment and so All that stuff that we were talking about in that whiteboard session is now being created behind the scenes On your behalf Instead of having to engineer that out Or script it out or terraform it out, you know, you could use terraform here or whatnot But you know, this is automating that entire process and it's tied to identity So not only is it automating that process It's creating groups inside of a database that I have access to and I manage So I can Externalize my authentication while still managing the authorization managing the business process around that And it's also creating an audit of everything. So we're going to see here in a second once I catch up that I'm going to actually log in and take a look at the report. So i'm going to Log out log back in here because I'm realizing. Oh, yeah, so quick And so I'm going to go to a report here and that report is Driven off of a database schema like, you know, we don't make you use some special fancy reporting tool We include some simple reports just to make life easier, but it's all you know, it's all open source, right? so you go to the audit report You can see that In this one single user change log This is the one the security folks really love where we track every single object that gets created associated with this person So it might be a permission that we grant the person It might be an object tied to a workflow that that person executed and then we're tracking all those different objects being created And another report will show which work floats associated who approved Right, and it's all just equal so you can slice it and dice it whatever Way is important to you, but now when it comes to how do you actually do your audit? You have something to audit against We've got one customer a bank that you know is Writing an operator that is just constantly checking to see namespaces and if a namespace Doesn't exist in its open unison database shoots up a red flag. Why is this here? Because it's it's that constant auditing So now i'm logging in to git lab and i'm logging in as my app owner slash developer make the The demo a little easier. I cut down on the amount of Identities, so you see I got four projects here. I've got a build project. That's where my tecton pipelines go I got an operations project. I got two operations project one for demo one for product That's where my yaml goes and I have my actual application source code Now I go to argo and I can see That I have projects and applications in argo that line up to my projects in git lab so Because I've got identity tying these things together I only see in argo what I can only see in git lab that I can only see an open chip And now i'm securely able to use these systems as one even though they're completely different applications Like completely different people I don't have multiple credentials. I don't have multiple requests. Everything is synchronized So the first thing i'm going to do is Try to remember what the first thing i'm going to do is so i'm checking out right now the build process So we also stubbed out our tecton pipelines and event listeners. So there's an event listener there It's set up. It's integrated into git lab There's a token in there to protect it to make sure that anybody who knows the url can't just call it um And uh, uh, that's been provisioned into the project inside a git lab So now i'm in the the argo production one. You'll see there's nothing there because well, there's nothing There um, so now we're going to actually start loading things up So first i'm going to do is i'm going to go into operations and i'm going to fork it I think i'm going to fork am I going to fork this one? maybe not The the the really cool thing here is that there are two operations project The dev operations project is a fork of the production operations project So when it comes time to actually deploy to production I'm running a merge request. So I just actually fork the application code project Um, so I can actually just check in the application. That that's the least amazing part of all this So I'm I'm going ahead. I'm calling my project I don't know. Have there been any questions coming in chris? Uh, not that I haven't been able to answer. Oh, okay, cool. Yeah um This demo was originally actually to show off uh, um how tecton works. Um, so it uh There's a little more downtime than I would have liked So I've pushed the code hello world, you know, I'm not really super amazing um There's the code right so The next question is how do we get that code into a container? and into production so Next I'm actually going to go to my operation. So this is where I'm going to store my am This is where my deployment file is going to go So, uh, I'm going to go ahead now in in the real world What you would want is as a developer I would fork this repository into my own space Do my work Deploy it into my little dev environment my little slice of the world Make sure I'm happy with it and then do a merge request but to make this demo a little simpler We went ahead and just did as the app owner Um, so I'm going ahead and at this point. I'm checking in my ammo file I do have to say all that identity was built, uh quicker than anybody could whiteboard it Oh, yeah, I mean that's the beauty of api driven, right? It just It's there It looks nicer Yeah So you could see our go just picked it up and we have a broken deployment because we're not pointing to any specific tag um So, you know How do we do this, right? We want our deployment to point to a specific tag So the next thing we need to do is we've deployed our code. Um, we've deployed our yaml Now we need a container Right. Um, so I'm going to go into build clone it and again just like before I would want to fork this Get it working in my environment and do a merge request, but that gets even messier than this demo already is um And so uh, I'm going to go ahead and just check out this code and Add my pipeline into it. Um this part of building So we did this This was all based out of the the last chapter of the book I'd say this was some of the most fun I had had was figuring out how tecton worked Um, and and just trying to work through the different abstractions and you know, kind of how they approach things. So it's so different From you know, your typical kind of shell script based pipeline system So i'm updating here, you know some parameters making sure that's pointing to the right git repo If I done this really correctly, you might say well, you shouldn't have to do that all it should be generic and you'd probably be right Um, so we pushed it in and now followed with bouncing poly you'll get our go here in the bottom right hand corner And you're going to find that it's going to crop pop up here With all of our additional pipeline objects. So we now have a pipeline if we can And because we automatically provisioned all of the event listeners and integrated it with all the repos We don't have to manually execute a pipeline like we don't have to create a pipeline of an object We can now go over to git Now let's do a merge request So i'm going to go in And i'm going to um, this is kind of showing you there's nothing out my sleeve because there are no pipeline built Um And i'm going to go in and do a merge request this we're github world. We'd be doing a pull request, right? So I create my merge request And i'm going from my local project into the dev project Yeah, give the reasons all that good stuff So, um, this is uh the community edition. So approvals are optional Excuse me, but I merged it and now you can see immediately stuff starting to happen in the argo screen Because the webhooks were all automatically integrated. So we now have a pipeline that's running So our pipeline is really straightforward. It generates a tag based on a timestamp. It creates a build pushes that build into my registry and then Updates my dev operations repo with updates my dev operations repo with um attack So i'm actually going to kind of skip ahead here because the the build process isn't really all that interesting And what we can see here is that um In our dev operations, we have this commit The commit includes the commit id from our application repo So now we have a chain of custody from our dev environment all the way back to our application development So now when it comes time to move into production All we have to do is synchronize You know do a merge request and i'm going to fast forward again because the rest of this isn't nobody Everybody who know watch this knows what's like to sit and watch pod load up So now we come over to production we run our merge request and because We've set up the permissions in such a way that all these things are linked The only reason we've had to go into open shift at all is just to show what's going on behind the scenes, right? We haven't actually had to to Do a single kube controller or c command to make any of this work So i merge it and then uh Hargo does its beautiful thing Where it goes ahead pulls it in the poise everything um And yeah, and so that's everything and that that's the whole demo So, you know, you're seeing that that beginning to end without actually having to to to do any of that manually And at no part did the ops folks ever have to get involved See all smiling We have we have about five minutes left one of the things i wanted to ask you was um You know, this is uh all about enterprise identity. How does this relate or doesn't it relate to? just just sort of regular identity for b2c type Consum you know like an uber or or me ordering dominoes Yes, so i mean there there's application identity. Um But when you're talking about, you know The the those b2c systems There's super ways of like everybody's focused on that one thing, right? It's the delivery of a service of some kind of good, right a pizza a ride or something Whereas when you get into enterprises, it's all silent. It's organizationally silent, right?  What's the rule of thumb? So You have to have siloed you like as much as we say no, let's go horizontal. Everything's the same No, you have to have siloed everybody has different ways of managing things. Everybody has certain things that Their paycheck is dependent on Right, like if your paycheck is dependent on your application being up and running and your bonus is based on that You'd be really really careful not to hurt that um and so it's it's becomes really important to be able to um Supply business process that works with that silo and that's a big part of what makes Um enterprise identity so much harder in a lot of ways than be to see identity Yeah Awesome Right. Well, we have a couple minutes left. Um, any anything else you wanted to mention mark on on this subject um I guess uh Some shameless self-promotion follow me on twitter. Um, uh at mlb. I am and um the uh, uh the recording from The kube con session that one was a lot of fun. Actually we did a demo Open unison and fair winds our back manager to be able to do team-based Authorization so instead of that one project being everything we did so that you could have multiple namespaces all managed By a team without actually having to have an ops person creating namespaces for you You know, there's some other projects that um Uh are getting really interesting um hierarchical namespaces when I'm really interested in seeing that's going to go a long way Towards making multi-tenancy a lot easier to manage And uh, uh the the loft virtual clusters I just saw That's another project. I'm going to be keeping an eye on that one looks really interesting Um, but yeah, this this is an interesting space. This is a space where I think that there's still A long ways to go and there's going to be a lot of fun getting there Yeah, did I did I hear right?  Exactly Exactly case anybody who's wondering the box and accident. He's actually yankees fan.  Yep You know, it's just a rare combination It comes from good parenting Cool Well, hey, I don't have anything else. Um, I guess we can go ahead and wrap up I want to thank you mark for uh participating and in this month's open shift security Thanks for having me an identity our pleasure And I guess I'll hand it back to chris any last parting words from you or we can just no Please stay tuned uh for the upcoming get-ups guide to the galaxy with christian herring as of myself. Um I think we have a guest today. I forget But you know, we'll we're gonna be there in just a moment So stay tuned folks awesome And ill hackham says thanks for a wonderful show slash demo Cool. I'm glad you all liked it very much mark and thanks guys. Thanks y'all. Take care.


Welcome to the Rich TV Live podcast. Today we're gonna talk about the biggest trending stocks and crypto, the biggest news, everything that's going on. I also wanna bring your attention to NBM, Neobattery Materials, NBM in Canada, NBMFF in America, stay tuned. Just an interview today with the head of strategy and operations, Danny Huh, Class Act, and that video will be going out soon and some big updates with Neobattery Materials, a company that's been a huge success already in 2023, been up a lot, done extremely well, creating super power engines for electric vehicles, super batteries for electric vehicles, which I believe is going to be an enormous growing industry. So what I wanna do today is we're gonna talk about what is happening in the markets. We're gonna talk about some of the hottest stocks. We'll talk about Bitcoin and what's going on with crypto. We'll talk about anything that you guys wanna talk about. If you have any questions, please put it in the chat. I'll do my best to answer your questions and we are streaming everywhere. And I mean everywhere right now. So let's take a look at some of the charts. Let's go, here we go. All right, and we'll be using TradingView to look at the charts. So this is our TradingView. As you can see, this is our TradingView. And this is one of the top stocks of the day. So this is Pali, P-A-L-I is the symbol and they are having a monster day. You can see here, Pali is up 136% of the day. You look at the five day chart, you can see the huge spike today. And you can also see my indicators that I built in here. The red means sell, the blue means buy and we had a nice blue buy signal. And you can see here, it shot up right here. Here's the blue buy signal and it's shot up so the indicator was correct and it's been really choppy since then. So I always say like once a stock is already up this much, really difficult to decide whether or not you wanna get in now when it's already up 135%. But what happened yesterday was there was a stock called Verb that did the same thing. It shot up, traded sideways all day and then right at the end of the day, it exploded up another 200% at the end of the day. So it's gonna be very interesting to see if Pali does the same thing. But you can see it's shot up, it's consolidating for most of the day and it's gonna be interesting to see if it does another big move right at the end of the day like we saw with Verb yesterday. Now, this is why we don't like to chase green because after Verb made its big move yesterday, what do you think it did today? It's gone down. We'll take a look at Verb, but you can see right here, Verb is down 28%. So we had a huge move yesterday in Verb, huge, huge move in Verb where it made all this price action and all this upward movement and then retrace down 28%. This isn't precisely why I always like to tell you, be very careful with chasing momentum. And if you do chase momentum, you have to be extremely disciplined with stop losses. You should have a stop loss, typically no more than 5% to 10% down and a take profit. So you know exactly at what price you're willing to sell for a gain and what price you're willing to sell for a loss. I think it's very important. I think it's vital if you want to be a successful trader that you use stop losses and you know exactly what price you want to buy at and exactly what price you're willing to sell at if you plan to have success, okay? So this is Verb. It was the biggest winner of the day yesterday, down 28% today. Here's DBGI, another big player yesterday. You can see that they had this big move up and then retrace. So chasing green looks easy and it looks fun and it looks like a great way to make money but it typically doesn't end well. Have you ever heard of the saying holding the bags?  So please, if you do chase green, proceed with caution. Here's another one of the big players of the day. I did alert this to all of our members pre-market. They were up 18% and then once the market opened, they shot up now 109% and you could see my indicator gave us the buy signal here. It went up, great buy signal on the indicator. They called it perfectly and then the signal to sell. So if you're buying now up 109% when the signal is saying sell, you're probably gonna get stuck holding the bag. So great indicators that I've built in here to my trading view and you can see they gave us the buy signal, the blue buy signal here which was a great signal and now they're giving us the signal to sell.  So please, proceed with caution.  That's the last thing we wanna do here is have you get stuck holding the bag, okay? We want you to buy low and sell high, not buy high and sell low which unfortunately most investors do and that's why 95% of investors lose because they get caught buying something that's already too high or they get caught buying something that's going down but is going to continue to go down. So you wanna be able to really get to know what's going on with these companies, read their news, understand the financials, understand their share structure, understand their cash flow, debt to equity ratios, their management team. You need to really know everything about these companies and the more you know about these companies the bigger chance of success you will have when you make an investment. So MBSC, nice move today, up 106% but I'd be careful. Well, as I speak, Pali is now taking off. You could see now up 153%. So it seems like these sideways consolidations are setting up for launch pads and that's what's looking like Pali is doing today. Pali did have some big news today. So I kind of like Pali right now on their news. So get to know the news but they did have a really big news today and I think it's one of the reasons why this stock is having a really big day. Here's MRIN, another company that had a big move pre-market, had a nice move and is up 50% on the day. And you can see my indicators said to buy here at 47 cents. It went to almost 80 cents and started to sell off at which point my indicators told us to sell and then it didn't retrace and now the indicators are telling us to buy again. So please be careful. It's up 50% on the day. I'm not gonna tell you to go and buy it but it's definitely one that right now I think you need to put on your radar and put on your watch list. It is definitely hot and heating up and you need to be aware of anything that is hot in the marketplace. So I must remind you guys, all of you that RichTV Live is strictly for information and education purposes.  Remember, past performance is not always an indication of future results and at RichTV we can navigate the markets together, conquer market labyrinths, savvy insights and dynamic chats. The US dollar has actually been really strong. You can see they're one of the few green things today. NVIDIA taking it on the chin, starting to retrace, S&P 500 in the red, Ethereum in the red, Tesla in the red, Bitcoin in the red, Meta, Facebook in the red and Amazon in the red. So lots of red. One of the few things that is green is oil. You could see all of our featured videos on our website. Unleash market potential with key features including personalized watch lists, expert top picks, real-time market alerts, interactive lab trainings, in-depth technical analysis and vibrant group chats. You can also see our top 10 soaring stocks, top 10 crypto movers every single month and we update it and get our dynamic chat groups in-depth market analysis and latest financial news. That's our website, RichTV.io. Love to have you guys go there and join. All right, so here's another pick that I've been watching very closely, DAKT. They've been really bullish, kind of been selling off a little bit, having a nice day today at 4%, put them on your radar, put them on your watch list, a company that I think has huge, huge, huge potential, okay? Huge potential for DAKT. All right, see here. All right.  Here's oil. Oil has been on a tear. I am invested in COMT and Oil ETF. That's also doing really well, very proud of that. They have a very big dividend around 30% annually and they've been going up with the price of oil going up. So you can see here the price of oil has been really, really bullish. If we take a look at the one year chart, you can see oil is trading just under a one year high and for this year so far, you can see that they are trading at around a high for this year. And in the last year, you can see that they're pretty close to a one year high as well. I think they hit a one year high in October of last year, right around $92. We're sitting at $87 on oil and they just continue to go higher. A lot of analysts are giving oil a $95 price point for the end of this year. So still a lot of room for oil to grow, maybe another $8 from here based on the analysis of industry experts. So oil is heating up and with us going into the fall and the winter where typically seasonality, the price of oil and gas goes up, people use more oil and more gas to heat their homes. So the price of oil will typically go higher in the fall and in the winter and we are about to get into those seasons. So watch oil very closely. I've got it on my radar and I've got it on my watch list. All right, let's take a look at another pick that's doing well today, APLT. APLT right now up 38%, another one you can see, they gave us the buy signal here. Our indicators told us to buy, they went up, then the indicators told us to sell, it came back down, then they said to buy, then they said to sell, then they said to buy, then they said to sell and these indicators have been pretty bang on. So this last indicator gave us a sell target and it came down, now it's starting to go up. I'm gonna wait for my indicators to tell me what to do next, but APLT up 38% right now, put it on your radar and put it on your watch list. All right, let's see what else is making moves today and what else is on my radar for us to look at. Let's take a look here. Let's take a look at Bitcoin. So I've been watching Bitcoin very closely, full disclosure, I'm a holder of Bitcoin and Ethereum. Bitcoin is my largest crypto holding, Ethereum is my second largest crypto holding and I'm a fan of Bitcoin and Ethereum, full disclosure, I wanna make sure everyone is aware of that and I'm not telling you guys when I talk about Bitcoin to go out and buy Bitcoin. I want you guys to do your own due diligence, own research and make your own decisions, okay? Do your own due diligence, own research and make your own decisions. I'd love to know what you think. I'd like to know what you're thinking.  Do you own Bitcoin? How do you plan to get exposure to Bitcoin? But full, full disclosure, I'm a holder of Bitcoin, I'm an owner of Bitcoin and I believe everybody should have some exposure to Bitcoin in their portfolio. Something I believe, I've always believed it, I've always thought it and I think that if you are really serious about getting into crypto, then you should own Bitcoin right off the bat. That's what I think, that's my opinion and no one's gonna be able to change that, okay? So right off the bat, that's what I believe and so that's why I talk about Bitcoin every single day, okay? I talk about Bitcoin every single day and I'm gonna continue to because I'm a believer, I'm a holder and I'm a fan of Bitcoin and I believe I always will be unless something catastrophic happens, I believe that I'll always be a fan and an investor in Bitcoin. All right, so now when it comes to investing, I think it's extremely important for investors to understand what they're investing in, why they're investing in it and what it's doing. So what is the problem with Bitcoin? Why is it struggling? There's a lot of reasons why it's struggling right now. One of the major reasons is that it doesn't have any catalysts. So you can see here in the Fibonacci that Bitcoin is right at the bottom and it's in a buy zone, but why is Bitcoin in the bottom? The SCC has come out and said that Bitcoin is most likely not going to get an approval on a Bitcoin spot ETF this year. They're gonna keep delaying it and they wanna push it into 2024. So because of that, there really is no major catalyst for Bitcoin right now meaning there's no reason for someone to go and buy Bitcoin today because there's no reason for the Bitcoin to go higher. There is no real catalyst that's gonna drive Bitcoin higher right now. So I think there's a lot of retail investors who are selling their Bitcoin, short-term investors that are selling their Bitcoin, thinking I'm gonna put my money in something else and I'll come back to Bitcoin next year when there's tons of catalysts. There's Bitcoin halving in March of 2024 which is a massive catalyst and there's I think seven Bitcoin spot ETFs looking for approval which could be combined with Bitcoin having huge catalysts for Bitcoin moving forward in 2024. So I think 2024 is gonna be a banner year for Bitcoin. There's so many catalysts but they've all been pushed to 2024. So because they've been pushed to 2024 what is the reason to buy it now? It feels like we've got a little bit of a gap where there's not gonna be any real catalyst to drive Bitcoin higher. So we're probably gonna see it kind of trade up and down and sideways for the next little while. Now seasonality says that September is also not a very good month historically for Bitcoin. You can go back all the last 14 years of Bitcoin's existence and see that Bitcoin typically does not perform well in September. However, as well as they do not perform in September Bitcoin does perform extremely well typically in November and October. So even though Bitcoin doesn't do very well in the summer months and in September which you can see it hasn't it does really well typically in October and November. So I think what we're gonna see here is a pullback for this month which we've started to see already. And I believe that that's gonna set us up for a nice move back up in October and November with investors positioning themselves and preparing themselves for Bitcoin having and those approvals in Bitcoin spot ETFs in early 2024 which really sets us up for a massive start for 2024 for Bitcoin which is one of the reasons why I'm all in on Bitcoin, I'm a huge fan and I physically own Bitcoin and Ethereum as well as other coins. And these are the reasons why I believe everybody should be aware of what's going on with Bitcoin right now because these next six to 24 months for Bitcoin I believe are going to be banner months for Bitcoin. I think it's gonna set Bitcoin up to do extremely well. I think it's gonna set Bitcoin up to hit all-time highs. I think it's gonna set Bitcoin up to get more institutional adoption. I think you're gonna see more high net worth investors. You're gonna see more big, large public companies investing in Bitcoin. I think you're gonna see more governments adopting Bitcoin. So there's going to be tons of catalysts and tons of adoption for Bitcoin over the next six to 24 months. I think after that, and I do believe that over the next 24 months you're gonna wanna sell your Bitcoin because I believe that there will be a drop after all of this excitement and all of this enthusiasm, I believe there will be a drop in the price of Bitcoin. So my plan is to really kind of set myself up to sell by the fall of 2025. That's my plan. So my plan is by the fall of 2025 that I will be looking to sell my Bitcoin take my profits in Bitcoin and Ethereum at that point, sit in cash for a drop in 2026 in Bitcoin. Typically the year after it's bull market we see a 70% drop in the price of Bitcoin like we saw last year in 2022, Bitcoin dropped from 69,000 to 15,000. So I believe in 2026 after the next bull market which has started this year and we're gonna see it consistently move up next year and the year after and I think that that would be a great time to sell and then 2026 would be the time to buy it again after it drops 70%. Now the question is where will it be in 2025? So based on the chart and we go to the all-time chart, you can see Bitcoin hit an all-time high of 69,000 in November of 2021 followed by a massive drop of 70% in 2022. Now we're starting to see this move back up in 2023 as it starts its next bull run. So I believe 2024 goes higher, 2025 it goes higher and based on the fact that it's been as high as 69,000 I believe that we're gonna see Bitcoin back to all-time highs in 2024 and 2025. Now how high will it go? Nobody knows, but based on what it's done in the past I believe that Bitcoin will go to at least $100,000 a coin. Some people believe it's gonna go to 150,000 some believe it's gonna go to 200,000 some believe it's gonna go to 250,000 some believe it's gonna go to 300,000 some believe it's even gonna go to 350,000 but I believe that it's gonna go to 100,000 that's me being very, very realistic looking at the chart looking at the all-time chart looking at where it's been, where it is today and where it's going and the fact that in 2021 we hit all-time highs of 69,000 after a three-year bull market I look at this year like 2019 the first year of a three-year bull market which is really right here this move right here and if you look at the move we're having right here this year is very similar to the move that we had in 2019. So I think we're setting up for a massive, massive move how high I'm not sure but based on me being very technical I believe because we saw a move from 20,000 to an all-time high of 69 I think we're gonna see a move from 69 to an all-time high of at least 100, maybe 150 that's what I think is gonna happen I might be wrong, I might be right stay tuned, get your popcorn ready we will find out where it's gonna go but it's gonna take a little time and we're gonna have to be patient to see where it's gonna go from here. Now I'm also very, very bullish on Ethereum okay, very bullish on Ethereum it's also my second largest crypto holding and you can see Ethereum has a very similar pattern where it goes up for three years and drops 70% for one last year was its 70% drop from 4,800 all the way down to 900 and now it's already moved back up this year back to 1,600 but this is the first year of a three-year bull market and I believe if Bitcoin hits 100,000 that we will see Ethereum at between 7,500 and 10,000 which I'd be really happy with because full disclosure Ethereum is my second largest crypto holding so the symbol for Ethereum is ETH and I believe if you wanna own crypto you should start by owning Bitcoin and Ethereum because they are the two largest cryptos as far as market cap in the world and I really believe as an investor if you wanna be a long-term quality investor that's built to last that builds a strong successful portfolio that isn't going to just disappear overnight because you invested in a bunch of penny stocks and meme coins that go up and then go down if you wanna build a portfolio that's built to last you need to own quality companies so my opinion is you need to own the top two companies in every industry you wanna get into oil and gas by the top two stocks in oil and gas you wanna get into gold by the top two stocks in gold you wanna get into electric vehicles you wanna own Tesla, right? That's the number one electric vehicle company in the world you wanna get into AI you wanna own NVIDIA, right? Because NVIDIA is the largest AI stock in the world so in my opinion, if you wanna own crypto you start with Bitcoin and Ethereum first get a nice position in those two before you think about any other cryptos because those are the two largest cryptos as far as market cap in the world in fact, Bitcoin and Ethereum combined are about 70% of the entire crypto world that's 1.8 million coins two coins, Bitcoin and Ethereum are 70% of the entire market of the crypto space let that sink in two cryptos, Bitcoin and Ethereum are 70% of the entire crypto world combined the other 1.8 million coins add up to the entire other 30% of the entire crypto market so when you really own crypto you can't really consider yourself an owner of crypto in my opinion, unless you own Bitcoin and Ethereum in my opinion, everyone should try to own at least one Bitcoin and one Ethereum that is my opinion now it's not easy it's not easy to do and I'm not saying it's possible for everybody it's not but if you wanna get into the crypto game my advice to you is try to own one Bitcoin and one Ethereum and this is what I tell everybody that I talk to this is the advice I give everybody that I talk to and when you start in crypto you should start with Bitcoin and Ethereum before you get into any of the other coins because as you get into smaller coins they get way more risky so those are two of the coins that I wanted to talk to you about that I think have huge, huge, huge, huge potential and of course, full disclosure I am a holder of both now speaking of stocks that have huge potential I love Tesla I'm a huge fan of Tesla I've already bought and sold Tesla this year made money on it very, very happy with Tesla but now I keep showing you guys Tesla because I'm looking to buy back in but it just hasn't given me an opportunity because the price of Tesla is up from the beginning of this year 150% Tesla started the year at $100 we're now at $250 so this asset is already up 150% it's a massive, massive, massive asset that has huge potential and it is the leader in the world of electric vehicles it also is a holder of Bitcoin so it's gonna trade a little bit with the price of Bitcoin as well but it also has the richest man in the world Elon Musk at the helm that has a lot to do with their success as well so I really like this stock but I just don't wanna buy it right now it's a little bit too high for my liking but it's one that I really like and I think it has tons of potential and if and when it gets a little bit lower maybe under $200 then I would be looking to position myself in Tesla all right, this is another stock that I've been watching closely lately and it's been doing quite well till right so what's happening is the Drug Enforcement Agency, the DEA in America is considering moving cannabis from a schedule one drug where it's considered similar to heroin to a schedule three drug where it would be then considered a lot less potent a lot less dangerous and more considered for medicinal purposes this has been a huge catalyst and you can see here in the price of Tilray that it hit a bottom of $1.50 and we're now at $2.96 so it's pretty much doubled from this bottom which was in June so it's come down and started to go back up very, very risky, extremely volatile all cannabis stocks are very, very risky and very, very volatile but I think this is a very good sign for the cannabis sector and I think we need to watch cannabis stocks right now because a lot of them have pretty much doubled in the last couple of months so that's a good sign that they're starting to come back to life and that there's interest coming back into them because when you look at the all-time highs of these cannabis stocks, it's just crazy like Tilray has been much, much, much higher and consolidated and condensed to these lower levels so the upside is tremendous from here and I think that these are the types of companies that everyone should start looking at now I've also been looking at companies with massive dividends because I think this is where you need to become a little bit defensive as an investor so I found this here, this is a very interesting ETF this is a Tesla ETF and because I'm a very big fan of Tesla I thought, well, what if I could get my hands on a Tesla ETF? This ETF pays a huge dividend an absolutely enormous dividend one of the largest dividends I have ever seen the dividend yield for TSLY is between 40 and 60% it shows here on trading view that it's 61% dividend literally one of the largest dividends I've ever seen why? Because the price of Tesla Tesla has been going up it's up 150% this year so if you wanna make money with Tesla without actually physically buying Tesla take a look at TSLY super risky, not telling you it's not risky it's been up and down, very volatile but if you're looking to park your money long term in something but collect a dividend I think TSLY looks really interesting and if you want exposure to Tesla without actually physically buying Tesla I think this is a good way to get into Tesla and collect a dividend and the price is right but you can see TSLY, it's been a little bit lower it's been as low as 12 bucks currently at 14 and it's been as high as 20 so it's a way to get in without buying Tesla up 150% on the year it's still kind of cheap because it's been as low as 12, it's at 14 right now and it's been as high as 20 and it's gonna give you a massive dividend it does go up and down but I've seen different numbers between 48% and 61% of what they're paying right now and they pay monthly so imagine you put 10 grind into this you can get paid monthly and at the end of the year make anywhere from on your $10,000 investment 4,000 to $6,000 a year in dividend payments while you also have a chance to get the upside on the stock on the ETF so if the ETF jumps back to 20 bucks now at the end of the year you can collect your dividend and sell the stock, sell the ETF and collect your upside on the ETF so this is another way to play Tesla collect a massive dividend and get exposure to Tesla but also collect a massive dividend and it's one that I'm very interested in I've never bought this before I actually found out about this yesterday doing a lot of research and I think it has a lot of potential and I like it so I don't own it but if I buy it I definitely will let you know and tell you what I think Hey, Digivest says you're rich what do you think of MJ stocks right now? Great question I like them, I like them I think that they're heating up because of the fact that they are being considered a schedule three drug in America as opposed to a schedule one and I think that that's a huge catalyst for cannabis stocks in America so I think that if you're looking to get into cannabis stocks you need to get into the best quality names the ones with the tight share structure strong management team a good debt to equity ratio and companies that are undervalued that have a future with money in the bank so that's why I like Tilray I also like, there's a few that I like I like Grow Generation Corp I like Tilray I like Scott's Miracle Grow I like IIPR so there's a few that I like those are the more quality names the bigger names I also like True Leave Cannabis another big name, quality name so I think that you want to start there with the quality names the bigger names companies that have done well in the past consolidated still have strong balance sheets that don't have too much of a burn rate because one of the problems that the cannabis sector has had is that they've had a massive burn rate and most of these companies are just losing way too much money they've had massive drawdowns they've had to close down facilities shut down different facilities so there's been massive losses in the cannabis sector and that's why a lot of these stocks have struggled so please proceed with caution they're very very risky but I do believe that now's the time to look into them here's True Leave Cannabis TCNNF and you can see when you look at their year to date that they were much higher they've come back down and they've just recently started to show some life as you can see here with this huge spike from 350 zone to now 643 in literally a short period of time so that shows me that and you can see my indicator did give a buy signal here we were in the buy zone in the RSI and the MACD also gave me a buy signal right here at $4 and the buy signal was correct so you can see right now that they've been extremely bullish since the end of August so in the last week we've see True Leave literally go up about 100% here let me see my ruler here we've seen True Leave go up yeah 93% in just a few days in just a few days we've seen True Leave go up 90% in literally a week so I think that's extremely bullish but I don't trust cannabis stocks 100% anymore because of some of the things that they've gone through so I think you need to proceed with caution be very, very careful all right this is another dividend stock so in my dividend stock analysis this is another one that I found that is extremely interesting I do own COMT that pays a 30% dividend and goes up and down based on metals, mining and oil and gas futures this is COMB and they're very similar they are also commodities so they're going up and down based on commodities they're investing in commodities like metals and oil and gas as well and they also pay a massive dividend so this is another one that I'm very, very interested in I think everybody should start learning about dividend investing in this market environment and learning how to grow your wealth with dividends it's a safe way to invest it's a great way for long-term investors to make money and it's a great way to make money while the market is starting to find its way and these guys are paying a 31% dividend so to put that in perspective if you put $10,000 into this ETF at the end of the year you would make $3,000 in dividends you put a hundred grand into this ETF at the end of the year you're going to get $30,000 in dividends I love that type of investing especially right now with the market conditions and the way the market is I believe you need to have some dividends in your portfolio to really protect you against volatility to protect you against downward pressure to protect you against stocks that maybe are not performing well they are a great way to beef up your portfolio and make money holding long which is something that I've really been doing a lot of and I'm looking to diversify even more by owning more of these types of assets so very, very interested in COMB and I think everyone should put it on their radar and put it on their watches this is COMT this is one that I own and you can see what it's done this year came down with the price of oil and been just up and down all year and now starting to climb as the price of oil is also starting to climb so one of the reasons why I really like COMT so I'm getting a massive dividend payment in December which I've been waiting for all year which I'm going to still have to hold for a few more months but the payout will be worth it because it's about 30% big payout and I'm up on my investment as well so I've been buying this at $27 and $28 all year we're now at $29 so I'm up on my investment thousands of dollars plus I'm going to get a nice dividend payment I have a large investment in this I'm going to have a nice dividend payment in the end or around mid December so you get your dividend payment plus if the stock is up once I get my dividend payment I could sell and pull out the proceeds that I've made on the price of COMT going up as well so it's a double win when you invest in dividends if you can get in at the right price at the right time in a good quality dividend stock you can collect your dividends plus once you get your dividend payout if your stock is up you can sell your stock and you're getting paid twice this is why I love dividends and why I think everybody should be looking into dividends here's another dividend payer K-L-I-P I think this is one that everyone should be aware of put it on your radar put it on your watch list look at the one in your chart you can see it's actually been going down which is why I think this might be the time to position yourself because there's some major major institutions getting into this now this is a China internet ETF way more risky I don't own it but the dividend yield is one of the biggest I've ever seen a 59% dividend yield for K-L-I-P that's right a 59% dividend yield for K-L-I-P so put it on your radar put it on your watch list K-L-I-P a company that I think has one of the biggest dividend payouts I've ever seen super risky and China has struggled this year that's why you see this ETF is going down but if you're looking for large dividends it's gonna be very hard to find anything higher than this K-L-I-P 59% dividend yield year over year all right let me see what else do I got here all right so this is LPG another dividend yield payer that has a nice dividend yield I think it's a little bit smaller I don't remember their exact dividend yield this one LPG I think it was about eight or nine percent but still a good dividend yield LPG another quality company put on your radar put on your watch list I think it actually might be about eight or nine percent dividend it doesn't show here on TradingView but it's another one that came on my radar that pays a nice dividend yield and another one that I think you should be aware of what else pays a nice dividend I've got more hold on let me just quickly find this for you I got so many okay so oh here's another one KBA oh they don't got it here in TradingView another one with a massive dividend it's also a China one KBA pays a 53% dividend massive dividend for KBA another one is BNDD BNDD alright so this is quadratic deflation ETF BNDD these guys also have a 41% dividend a 41% dividend for BNDD you can see they've also dropped so when I look at this I say oh well maybe now's the time to get in they're at a bottom they pay a 41% dividend so definitely very interesting and one that I'm watching very very closely that I think has a lot of potential with a 41% dividend BNDD BNDD alright let me show you some more let me show you some more here H-C-O-M H-C-O-M H-C-O-M there it is H-C-O-M another dividend then yielding stock E-T-C-O-M Harvard Schroeder's commodity strategy ETF these guys pay a dividend of 38% now these dividends are very very risky they go up or it's not going to go down I have no idea where it's going to go I've just been learning about these dividend players myself but I want to bring it to your attention because I'm very interested in all of them positions to my portfolio so H-C-O-M 38% dividend as well so 38% dividend for H-C-O-M hey Rob my pleasure buddy you know what I'm going to type them up for you so H-C-O-M B-N-D-D it's just research brother always looking for new deals always looking for better deals always looking for big companies that are explosive looking for penny stocks every day 24 hours a day seven days a week I'm literally in these markets so these are all the top dividend players that I've been sharing with you guys today now remember proceed with caution these are not guaranteed winners there's no guarantees in any investment anyone that tries to tell you that anything is guaranteed is lying to you there is no guarantees but these are all dividend players that I've been researching that I like a lot that I think have lots of potential and full disclosure I own a large position in C-O-M-T I'm not telling you to go immediately buy it that's not why I'm doing this I just want you to be aware of it I want you to know about it and I want you to do your own due diligence and hopefully in the future you can come back and say hey Rich I like this one or I don't like this one for this reason or that reason you need to let me know why do you like it why do you not like it are you buying it why are you buying it so we can have an intelligent conversation about it and make good investing decisions that's what we're here to do here at Rich TV Live we want to educate you entertain you empower you we want to bring CEOs on so you can learn about those companies and make good investing decisions okay I must remind you that Rich TV Live is strictly for information and education purposes please do your due diligence do your research before you invest in anything we talk about or discuss and past performance is not always an indication of future results I don't stand there holding up Bitcoin holding up stocks and making sure that you can win in your trades I'm an investor just like you guys I win on trades and I lose on trades I make good investments I make bad investments as I get older and as I mature I'm starting to realize that I don't have much of an appetite to lose anymore I don't want to lose I don't like to lose so I'm starting to invest in more sure things so what did I do this year I bought Apple sold Apple made profit bought Tesla sold Tesla made profit bought Google sold Google made profit bought Amazon sold Amazon made profit these are the types of trades that I'm getting more and more comfortable in making I've also bought and sold some penny stocks bought and sold some cryptos bought and sold some NFTs and I'm always going to do that too but I'm starting to put more bigger money in bigger investments more money into dividends more money into large caps more money into quality names as opposed to putting big money into small names looking for a miracle I'm actually changing my mentality of big money in the big names to secure my portfolio I'm really about 85% now large caps 15% risk and small caps I might even be higher than 85% but I really believe it's important that everybody has big quality names in their portfolio to solidify their portfolio and strengthen their portfolio and protect their portfolio against volatility against downward pressure against anything that can go wrong a recession a depression an economic collapse all of this is possible in today's day and age with everything that's going on in the economy so once I started investing in dividends I started falling in love with them I started to realize like dividends is a great way to invest because if I lose money here but I make money here I can literally call it a wash in my portfolio so it's literally protecting me and if I win on other investments and I'm making dividends then it's a win-win so dividend investing protects me against downward pressure on losses in my portfolio it also protects me with wins because it's a double win when I win because if COMT which I'm up on continues to go up and I sell it I can make money selling the ETF and I can collect my dividend and make money on my dividends so a dividend investment is potentially a double win but you got to make sure you have a good entry point because if you get in at the top even an ETF can go back down like I showed you guys on the charts they can go back down too so you have to make sure that when you're buying you're buying anything and everything when they're down it's just like buying stocks buying crypto and buying real estate you want to buy when they're down so that you give yourself a chance to collect the dividend and you give yourself a chance to get upside in the ETF or in the stock when they do go up that will give a chance to have a double win and as an investor there's really nothing better than getting a double win alright, so I've given you guys a bunch of dividends I've given you guys some top stocks in the day I've given you guys some cryptos that I really like I shared with you guys some ideas about cannabis stocks and different things that I'm looking at in the market let's just quickly take a look at some of the major players once again, Pali up 126% of the day we'll see if they finish the day off strong but there could be a little sneak attack here at the end of the day with Pali like we had with Verb yesterday I'll watch very closely for that and NBSE currently up 106% on the day the two biggest movers of the day Pali and NBSE two biggest movers of the day two big movers both penny stocks the day day NBSE and BALI okay so I did put on YouTube the high dividend yielders H-C-O-M B-N-D-D C-O-M-B K-L-I-P C-O-M-T and T-S-L-Y and the two biggest penny stock movers of the day NBSE and P-A-L-I every single day I watch the entire markets pre-market after-market during the market I watch all the stocks all the cryptos all the news all day every day 24 hours a day and then what I do is I share those ideas on our website with my VIP members first then I share it all over social media with our community and free members all over social media as much as I can excuse me and then I try to go live as much as I can as much as possible to talk about what's going on in the markets what's hot what's not give you my analysis talk about the top stocks talk about the top crypto and talk about what's going on in the economy I try to do this as much as possible every single day and I think that we're going to continue to do more and more of this as we continue to progress now I have a few more dividend payers for you that I'm going to show you before we say goodbye so let's take a look at some more so another one is S-A-R-K this is actually the short the ARC Cathie Wood Innovation ETF it's the short ARC ETF S-A-S-K which has actually performed well this year the short ARC ETF S-A-R-K so this is an interesting way to play an ETF it's a short the ARC ETF which you can see has actually gone down because the ARC ETF this year has gone up so it actually hasn't been a successful trade however last year the ARC ETF got destroyed and S-A-S-A-R-K went up so it just kind of depends but if you're looking to short Cathie Wood's ETF this is a way to do it it's the short Cathie Wood ARC ETF S-A-R-K and they pay a dividend yield of 38% so a 38% dividend yield a very nice dividend yield for S-A-R-K which is shorting the ARC ETF now another thing you can do is you can play the ARC ETF with O-A-R-K O-A-R-K is the Innovation Option Income ETF strategy which is actually investing in the ARC ETF which it's actually come down this year too but they also pay a dividend of 35% so S-A-R-K pays 38% and O-A-R-K pays 35% so those are two more dividend paying ETFs that pay very high yields that you might want to use depending on your investment strategy so this is why you don't just buy something you have to kind of have an investment strategy and have a plan you got to know what your plan is and you got to stick to your plan and if you stick to your plan you can have great success here's another one that I really like C-C-R-V here's C-C-R-V iShares Commodity Curve Carry Strategy ETF another one that pays a 31% dividend and another one that I'm personally interested in buying very similar to C-O-M-T which I own and I hold iShares Commodity Curve Carry Strategy ETF one of the reasons why I like this company is that one of the major stakeholders in this company I believe is the US government so the US government has a major stake in C-C-R-V another dividend payer that pays a 31% dividend so similar to C-O-M-T which I really like and similar to C-O-M-B which I really like is C-C-R-V which I really like which pays a 31% dividend so those are three that I like the most right now C-O-M-T especially with oil being hot C-O-M-B and C-C-R-V all pay around a 30 to 31% dividend all of them are tied into futures oil and gas, metals like gold I think those are really good quality ETFs that have a chance to go up because the price of gold can go higher the price of oil and gas can go higher the price of precious metals can go higher in this economic environment with a lot of volatility and they pay a massive dividend so you have a chance to get a double win and I love winning but when you can win double that is one of the greatest things ever so put on your radar, C-C-R-V and then the other one that I'm very interested in out of all of these and I've given you a lot of them today but another one that I'm very interested in which I told you about is TSLY because that's a way to play Tesla and I love Tesla but I don't wanna buy Tesla right now because it's at $250 so instead of buying Tesla right now at $250 I could buy TSLY, collect a 40 to 60% dividend which is paid monthly, monthly and this is a way to collect money while investing and getting exposure to Tesla and with it being down with this ETF being down which means if Tesla goes back up this ETF will go back up and you can make money by selling the ETF and by holding when you hold it by collecting your monthly dividend which is very high typically the payout ratio is between 48% to 61% a month unreal, like I've never seen anything like it so massive, massive, massive dividend potential with TSLY and I wanted to share with you guys all of this work that I've been finding all of my research and I hope you guys learned a lot from today's show hopefully you guys like what you've seen hopefully you guys are enjoying RichTV Live I must remind you guys that everything we talk about is strictly for information and education purposes please do your due diligence research before you invest in anything that I've talked about today anything that I've discussed today past performance is not always an indicator of results I can't guarantee you that any of these stocks these cryptos are going to go up but what I can guarantee you is every single day when I come here I can show you guys what I'm learning teach you what I've learned, share with you and hopefully you guys will continue to learn and you guys will have fun and make money here on RichTV All right guys, thank you guys for watching the most your boy Rich from RichTV Live if you're not winning, you're probably not watching the winners, CEO interviewing, use trending topics and we bring it to you first I'm your boy Rich from RichTV Live saying have a great day everybody we'll see you soon, peace