Uploaded April 2026 | Updated September 2026, 2 days ago
Viktor and Scott are back for another unscripted AMA, tackling a wide range of questions spanning container security, Kubernetes tooling, CI/CD pipelines, observability, AI agents, and platform engineering. The duo dives into best practices for securing and hardening Docker images — covering ChainGuard, Bitnami, and Docker Hub's new secured images — and discusses the challenges of scanning Windows-based containers with tools like Trivy, Grype, and Prisma Cloud. They also break down the differences between Ingress and Istio's Ingress Gateway, making a strong case for adopting the Kubernetes Gateway API over vendor-specific CRDs to avoid lock-in.
The conversation spans the evolving CI/CD landscape, comparing GitLab CI, GitHub Actions, and Jenkins while emphasizing that pipeline tools should be script orchestrators, not repositories for business logic. Viktor and Scott weigh in on observability platforms like Datadog, Grafana, and OpenObserve, debate the real cost of vendor lock-in, and share their honest takes on AI agents — including autonomous coding tools like OpenHands and the distinction between useful human-in-the-loop AI and reckless full autonomy. They also touch on MCP server security using OIDC providers like Dex and Azure Entra ID, the state of Helm vs. Kustomize, platform engineering as a product management discipline, and the future of GitOps with Flux CD and Argo CD. As always, no prep, no filter — just straight talk on the tools and trends shaping modern DevOps.
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬
00:00 Intro (skip to first question)
05:47 Best solutions for secure hardened Docker images
07:54 How to scan Windows-based containers for vulnerabilities
12:21 How to get real AWS cloud experience as bare metal Kubernetes dev
13:38 Difference between ingress and Istio ingress gateway API
15:01 GitLab vs Jenkins and other CI/CD systems relevance today
20:35 How to implement container image signing with cosign in CI/CD
23:09 Most popular gateway API solution replacing nginx ingress
24:23 Best frameworks for local autonomous AI agent POC sandbox
26:45 How do you value your skills with AI doing everything now
29:31 How do you both stay up to date with latest tools
33:29 Should we move from Azure DevOps to GitHub Actions
38:00 Should companies require DevOps candidates to know algorithms
40:43 Prerequisites for ICA cert exam using Istio CRDs vs gateway API
41:36 Carvel YTT vs Helm and Kustomize for generating Kubernetes YAML
42:55 Best observability and monitoring platform recommendations
47:13 Prerequisites to switch from DevOps to platform engineering role
50:43 AI agents set up for SRE or DevOps work use cases
54:09 Platforms to practice DevOps skills like LeetCode for developers
57:00 Nvidia NeMo and autonomous AI agents for daily DevOps roles
01:01:17 More DevOps SRE job openings recently - what is the reason
01:02:06 How to secure a custom MCP server built in Python
01:04:00 Rolling update 5xx errors and graceful shutdown sigterm handling
01:05:35 Helm or Kustomize for personal projects and why
01:08:10 Flux CD vs Argo CD which is recommended for GitOps
01:11:30 Using MCP prompts to collaborate and share skills in a team
01:15:44 Datadog charging Coinbase $65 million for one year
Viktor and Scott are back for another unscripted AMA, tackling a wide range of questions spanning container security, Kubernetes tooling, CI/CD pipelines, observability, AI agents, and platform engineering. The duo dives into best practices for securing and hardening Docker images — covering ChainGuard, Bitnami, and Docker Hub's new secured images — and discusses the challenges of scanning Windows-based containers with tools like Trivy, Grype, and Prisma Cloud. They also break down the differences between Ingress and Istio's Ingress Gateway, making a strong case for adopting the Kubernetes Gateway API over vendor-specific CRDs to avoid lock-in.
The conversation spans the evolving CI/CD landscape, comparing GitLab CI, GitHub Actions, and Jenkins while emphasizing that pipeline tools should be script orchestrators, not repositories for business logic. Viktor and Scott weigh in on observability platforms like Datadog, Grafana, and OpenObserve, debate the real cost of vendor lock-in, and share their honest takes on AI agents — including autonomous coding tools like OpenHands and the distinction between useful human-in-the-loop AI and reckless full autonomy. They also touch on MCP server security using OIDC providers like Dex and Azure Entra ID, the state of Helm vs. Kustomize, platform engineering as a product management discipline, and the future of GitOps with Flux CD and Argo CD. As always, no prep, no filter — just straight talk on the tools and trends shaping modern DevOps.
▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬
00:00 Intro (skip to first question)
05:47 Best solutions for secure hardened Docker images
07:54 How to scan Windows-based containers for vulnerabilities
12:21 How to get real AWS cloud experience as bare metal Kubernetes dev
13:38 Difference between ingress and Istio ingress gateway API
15:01 GitLab vs Jenkins and other CI/CD systems relevance today
20:35 How to implement container image signing with cosign in CI/CD
23:09 Most popular gateway API solution replacing nginx ingress
24:23 Best frameworks for local autonomous AI agent POC sandbox
26:45 How do you value your skills with AI doing everything now
29:31 How do you both stay up to date with latest tools
33:29 Should we move from Azure DevOps to GitHub Actions
38:00 Should companies require DevOps candidates to know algorithms
40:43 Prerequisites for ICA cert exam using Istio CRDs vs gateway API
41:36 Carvel YTT vs Helm and Kustomize for generating Kubernetes YAML
42:55 Best observability and monitoring platform recommendations
47:13 Prerequisites to switch from DevOps to platform engineering role
50:43 AI agents set up for SRE or DevOps work use cases
54:09 Platforms to practice DevOps skills like LeetCode for developers
57:00 Nvidia NeMo and autonomous AI agents for daily DevOps roles
01:01:17 More DevOps SRE job openings recently - what is the reason
01:02:06 How to secure a custom MCP server built in Python
01:04:00 Rolling update 5xx errors and graceful shutdown sigterm handling
01:05:35 Helm or Kustomize for personal projects and why
01:08:10 Flux CD vs Argo CD which is recommended for GitOps
01:11:30 Using MCP prompts to collaborate and share skills in a team
01:15:44 Datadog charging Coinbase $65 million for one year
