# Platform Engineering, GitOps and AI with Pierre-Gilles Mialon and Glen Yu

Page: https://stenobird.com/podcast/kubernetes-podcast-from-google/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu
Text version: https://stenobird.com/podcast/kubernetes-podcast-from-google/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu.md
Podcast: [Kubernetes Podcast from Google](https://stenobird.com/podcast/kubernetes-podcast-from-google)
Published: 2025-07-25T12:23:00+00:00
Episode link: https://e780d51f-f115-44a6-8252-aed9216bb521.libsyn.com/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu
Audio file: https://traffic.libsyn.com/secure/e780d51f-f115-44a6-8252-aed9216bb521/KPOD256.mp3?dest-id=3486674
Processing state: processed
JSON: https://stenobird.com/v1/public/podcasts/kubernetes-podcast-from-google/episodes/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu
Duration seconds: 1270

## Resource

Platform engineering and GitOps are evolving to reduce developer cognitive load by abstracting complex infrastructure through Kubernetes-native patterns. The discussion explores how tools like Kube Resource Model (KRM) and Policy as Code enable secure, self-service capabilities without manual intervention.

## Highlights
- Main idea: GitOps leverages Kubernetes' reconciliation loop to ensure the live state matches the desired state defined in Git
- Practical takeaway: Use Policy as Code (e.g., Kyverno) to enforce security guardrails, such as preventing public IPs on databases, without blocking developer workflows
- Failure mode: Manual operations and lack of standardized deployment procedures are primary drivers of production incidents
- Main idea: The Kube Resource Model (KRM) allows platform teams to create high-level abstractions that hide cloud provider complexity from developers
- Practical takeaway: Prefer GitOps tools like FluxCD for CI/CD pipelines that prioritize automation and minimal developer interruption via CLI-driven workflows

## Topics

Platform Engineering, GitOps, Kubernetes, Policy as Code, Kyverno, FluxCD, Kube Resource Model, Cloud Native

## Chapters
- 1:00 — Docker and Cloud Run Updates: Updates on Docker Desktop's new model management features and the expansion of Docker Compose support to Google Cloud Run.
- 2:40 — Introduction to the Experts: Introduction of Pierre-Gilles Mialon and Glen Yu, focusing on their work with Kubernetes policy and infrastructure lifecycle.
- 4:20 — The Power of GitOps: Discussing the traceability, auditability, and ease of rollback provided by Git-based deployment strategies.
- 8:50 — Abstraction via KRM: How the Kube Resource Model helps platform teams provide secure, pre-configured resources like CloudSQL to developers.
- 11:50 — Implementing Policy as Code: Moving from Infrastructure as Code to Policy as Code using tools like Kyverno to harden Kubernetes clusters.
- 13:30 — The Rise of Platform Engineering: Analyzing whether platform engineering is a new paradigm or a refinement of the separation of concerns in DevOps.
- 19:25 — FluxCD vs. ArgoCD: A comparison of GitOps controllers, focusing on FluxCD's Kubernetes-native, CLI-centric approach versus ArgoCD's visual interface.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/kubernetes-podcast-from-google/episodes/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/kubernetes-podcast-from-google/platform-engineering-gitops-and-ai-with-pierre-gilles-mialon-and-glen-yu.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.