Pivotal Conversations

Security for developers has always been…complex. When you re-design for and move your application to the cloud, there’s a new set of security concerns to work with. Adib Saikali’s working on a book on this topic, and he discusses it with Coté in this episode. It all starts with the basics of security, and goes from there. Check out the book and read along as Adib finishes it over at Manning (https://www.manning.com/books/securing-cloud-applications), and, find him in Twitter: @asaikali (https://twitter.com/asaikali).

Governments run on just as much software as the private sector, sometimes it can seem like even more! Government agencies feel the need to run their processes on software like any other organization and are starting to prioritize custom written software. Like everyone else, people in government feel the need to get better at software. In this episode, Jeremiah Sanders and Igor Steinberg talk with Coté about the motivations for getting better at software, common barriers, and a little bit of how people get over those barriers. Some selected topics discussed: Getting comfortable with “uncertainty” rather than certainty… accepting “failure,” the need to explore. People are stymied by the interpretation of the rules, not the rules themselves. Empowering people to be more cross functional. What compromises do the people on that small team make? Risks.

Developers rely on all sorts of 3rd party frameworks, packages, and projects for their applications. Ensuring that those components are available, secure, and fit into an organizations overall enterprise architecture can be a challenge. Ramya Sarangarajan joins us in this episode to cover how the VMware Marketplace helps out. Check out the VMware Marketplace yourself (https://marketplace.cloud.vmware.com). Also, follow the marketplace in Twitter (https://twitter.com/vmwmarketplace), if you're into that.

Ben Hale talks about one the foundational concepts in the VMware Tanzu Application Platform, application aware platforms.

Hear Alex Barbato and John Kjell of the VMware Tanzu team discuss why it's important, but still challenging, to secure your software supply chain. Importantly, they focus on the process of building secure software rather than buying it, and explain how new offerings such as Tanzu Application Platform can help automate some of the tedium for developers, operators, and security teams. Learn more: VMware Tanzu (https://tanzu.vmware.com/) VMware Tanzu Labs (https://tanzu.vmware.com/labs) Tanzu Application Platform (https://tanzu.vmware.com/application-platform) Improve Your Cybersecurity with a Secure Software Development Supply Chain (https://tanzu.vmware.com/content/blog/improve-your-cybersecurity-secure-software-development-supply-chain) Implementing DevSecOps in a Federal Agency with VMware Tanzu (https://tanzu.vmware.com/content/blog/implementing-devsecops-federal-agency-vmware-tanzu) Modern Least Privilege and DevSecOps (https://octo.vmware.com/modern-least-privilege-and-devsecops/) What Is DevSecOps? (http

This episode features highlights from every episode so far, including a mix of VMware Tanzu Labs experts and clients. Because of the show's focus, the topics here range from building your first product as a startup to scaling Kubernetes inside a large organization, and cover industries including retail, financial services, and health care.

In this episode, which first aired in September 2020, VMware's Josh Rosso explains when organizations and teams should look at adopting Kubernetes (hint: it's much more accessible than even a couple years ago), as well as some of the tricks to doing it successfully. Rosso spends his days helping large organizations scale Kubernetes environments, so he knows from whence he speaks. Since this episode aired, VMware Tanzu has updated its product lineup and roadmap to improve the developer experience on Kubernetes, while continuing its investment in alternative cloud native platforms for situations where Kubernetes is not the ideal choice. Learn more: * Announcing VMware Tanzu Application Platform: A Better Developer Experience on any Kubernetes (https://tanzu.vmware.com/content/blog/announcing-vmware-tanzu-application-platform) * Introducing Tanzu Application Platform at SpringOne (https://youtu.be/9kD7wa407K4) [video] * VMware Tanzu Application Service: The Best Destination for Mission-Critical Business Apps (ht

Among other things, the banking world is looking for new revenue and ways to retain customers. Focusing on customer experience is one way to get there. Shifting to a product-centric way of thinking results in dreaming up new types of “features” and even products to offer existing customers and help retain them - maybe even garnering new customers above the humming churn rate. In this episode, Coté talks with Henri van den Bulk about these drivers and some examples of that product-centric thinking in action. Find Henri in Twitter and LinkedIn: https://twitter.com/hmvandenb https://www.linkedin.com/in/hvandenbulk/

In this episode of Cloud & Culture, Shaun Anderson and Brandon Blincoe of VMware Tanzu Labs share lessons they've learned while helping large retail clients modernize their online and in-store operations. Among other things, they discuss the nuances of inventory management, the best strategies for integrating systems after acquisitions, and the potential benefits of running Kubernetes clusters inside stores.

Coté is joined by Bernard Golden and Jesse Bean to talk about how companies they’re talking with are thinking through and approaching digital transformation and modernizing their software strategy. Get Coté's new book for free: https://tanzu.vmware.com/content/ebooks/changing-mindsets-the-missing-ingredient-to-digital-transformation?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=bernard

Right now there’s no end of possibilities for technology-driven innovation in healthcare. Coté and JT Perry discussed this state in part one of the conversation, and it part two they go over examples of those innovations. First, they discuss what FHIR (in the US) is and how it creates new opportunities for better patient care. Also, discussed: the software development tool-chain for more innovation in healthcare, at-home devices to reduce hospital stays, and API implementation and management. See part one: https://www.youtube.com/watch?v=Dpac46N5qM&list=PLAdzTaneSPRNuA52_34wh5VTBC-0Rz7U JT in Twitter: https://twitter.com/circlejtp

The US healthcare industry will likely see a lot of changes in the next five years - there's already a lot going on with mergers and new services forced by the pandemic. In this episode, fresh from working in the healthcare industry, JT Perry talks with Coté about all that horizon 2 and 3 stuff. The recent introduction of APIs and data interoperability is one of the more interesting topics. This is part one - in part two, we'll discuss the tools and practices companies can use to be part of this innovation. Mentiond: JT Perry in Twitter: https://twitter.com/circlejtp JT Perry in LinkedIn: https://www.linkedin.com/in/jtperry/

In this episode of Cloud & Culture, Shaun Anderson and Felicia Schwartz of VMware Tanzu Labs explain the state of application modernization among financial services firms. They draw from firsthand knowledge working with large customers to explain the threats these firms face, the opportunities they're trying to capture, and how using processes like the Swift methodology helps them maximize their efforts and even evolve their IT culture.

We discuss how Yapı Kredi Bank has been moving their approach to software from a project mindset to a product mindset. Part of this re-organizing around product lines. To do this, the team analyzed their portfolio of 300+ apps and to define the products. As IT has been evolving, they're now working on transforming their relationship with the business side as well. We also discuss building up bi-directional trust between management and staff, banking security and regulations, and so much more. Enjoy! Mentioned: Taylan in Twitter: https://twitter.com/taylanguney Free books, archives, and help bootstrapping your own transformation: http://TanzuTalk.com

DevSecOps alert! Container security alert! Coté talks with Henri van den Bulk about the ideas of a “secure software supply chain.” When you’re building, running, and managing your own software, how you secure your software goes all the way back to development - it shifts left! Henri goes what it means do security governance needed in the development phase through deploying to production. We also discuss thinking about “risk management” in security, a sort of obtuse topic for those of us who aren’t security-heads. Mentioned: Henri in Linkedin: https://www.linkedin.com/in/hvandenbulk/ Henri in Twitter: https://twitter.com/hmvandenb Get my books for free: https://tanzu.vmware.com/content/cote?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=henridevsecops Book some time with Tanzu Labs who specializes in bootstrapping your culture change: https://tanzu.vmware.com/office-hours?utmsource=cote&utmmedium=video&utmcampaign=TanzuTalk&utmcontent=henridevsecops

In this episode of Cloud & Culture, Shaun Anderson of VMware Tanzu Labs walks us through the Swift method—a successful approach to application modernization that he helped create. Through a series of exercises, Swift helps teams identify the target behaviors and goals for their applications, and the optimal approach for delivering them.

Coté is joined by Bernard Golden and Jesse Bean to talk about how companies they’re talking with are thinking through and approaching digital transformation and modernizing their software strategy. Get Coté's new book for free (https://tanzu.vmware.com/content/ebooks/changing-mindsets-the-missing-ingredient-to-digital-transformation?utm_source=cote&utm_medium=video&utm_campaign=TanzuTalk&utm_content=bernard).

What’s the difference between an API Gateway and a Service Mesh? How do they work together? Why would you use either? Christ Sterling joins Rita and Coté to discuss all that. Mentioned: Spring Cloud Gateway: https://tanzu.vmware.com/developer/guides/spring/scg-what-is/ Chris’ Ttech debt book: https://www.goodreads.com/book/show/9277805-managing-software-debt RedMonk videos with Chris: https://www.youtube.com/watch?v=wAMpjc3lSqw Chris in Twitter: https://twitter.com/csterwa GitOps for APIs: https://tanzu.vmware.com/developer/tv/tanzu-tuesdays/0052/

Shopify VP of Engineering Farhan Thawar shares his thoughts on a variety of topics related to managing software teams. He discusses fully remote software teams, pair programming, how to innovate within a company of Shopify's scale, and the benefits of engaging with a team like VMware Tanzu Labs (Thawar was at Pivotal Labs until 2015). He's joined by guest hosts Saad Ahmed and Joe Moore of VMware Tanzu Labs, who also offer their perspectives on what they're seeing in the field.

VMware Tanzu’s Ajay Patel talks with Rita and Coté about the history of app servers, SOA, and how we got there to our current cloud native stacks. And, Ajay also lays out the what enterprises are asking for in their app and kubernetes stack and the product strategy Tanzu is putting in place to solve those problems. Plus, we walk down BPE Lane. Mentioned: Ajay in Twitter: https://twitter.com/PatelAjayp