265: Swing and a WIF

Welcome to episode 265 of the Cloud Pod Podcast – where the forecast is always cloudy! Justin and Matthew are with you this week, and even though it’s a light news week, you’re definitely going to want to stick around. We’re looking forward to FinOps, talking about updates to Consul, WIF coming to Vault 1.17, and giving an intro to Databricks LakeFlow. Because we needed another lake product. Be sure to stick around for this week’s Cloud Journey series too. 

Titles we almost went with this week:

• The CloudPod lets the DataLake flow
• Amazon attempts an international incident in Taiwan
• What’s your Vector Mysql? 

A big thanks to this week’s sponsor:

We’re sponsorless! Want to reach a dedicated audience of cloud engineers? Send us an email, or hit us up on our Slack Channel and let’s chat! 

General News

01:40 Consul 1.19 improves Kubernetes workflows, snapshot support, and Nomad integration

• Consul 1.19 is now generally available, improving the user experience, providing flexibility and enhancing integration points. 
• Consul 1.19 introduces a new registration custom resource definition (CRD) that simplifies the process of registering external services into the mesh.  
• Consul service mesh already supports routing to services outside of the mesh through terminating gateways. However, there are advantages to using the new Registration CRD. 
• Consul snapshots can now be stored in multiple destinations, previously, you could only snapshot to a local path or to a remote object store destination but not both.  
• Now you can take a snapshot of NFS Mounts, San attached Storage, or Object storage. 
• Consul API gateways can now be deployed on Nomad, combined with transparent proxy and enterprise features like admin partitions 

01:37 Matthew- “What I was surprised about, which I did not know, was that console API gateway can now be deployed on Nomad. Was it not able to be deployed before? Just feels weird… you know, consoles should be able to be deployed on nomad compared to that. You know, it’s all the same company, but sometimes team A doesn’t always talk to team B.”

03:21 Vault 1.17 brings WIF, EST support for PKI, and more  

• Vault 1.17 is now generally available with new secure workflows, better performance and improved secrets management scalability. 
• Key new features:
  • Workload Identify Federation (WIF) allows you to eliminate concerns around providing security credentials to vault plugins.  
  • Using the new support for WIF< a trust relationship can be established between an external system and vault’s identity token provider to access the external s