CloudNativeCon + KubeCon Europe 2017
2017-03-29..2017-03-30
Berlin, Germany
| title | author | length |
|---|---|---|
| Pre-Conference Welcome Remarks | Michelle Noorali | 01m |
Warm welcome opens the evening for CloudNativeCon + KubeCon Europe 2017 with a short roadmap: a set of keynotes from community projects that highlight recent… | ||
| Keynote: Fluentd Project Update | Eduardo Silva | 07m |
Update covers concrete progress: Fluentd targets Fluentd v1.0 with a v0.14 next‑gen branch and v0.12 as the long‑term stable, the ecosystem now has about 600+… | ||
| Keynote: OpenTracing Project Update | Priyanka Sharma | 07m |
OpenTracing marks one year and now lives in the CNCF as a vendor-neutral API that makes tracing portable and low-risk; concrete updates include new language… | ||
| Keynote: Linkerd Project Update | Oliver Gould | 06m |
Linkerd reports production deployments, CNCF acceptance, and a near-term 1.0 release candidate with many plugins moving from experimental to stable; recent… | ||
| Keynote: gRPC Project Update | Varun Talwar | 06m |
gRPC is an open source, production-ready RPC framework built on an HTTP/2-based transport with pluggable transports and security (TLS, Kerberos) and uses… | ||
| Keynote: CoreDNS Project Update | Miek Gieben | 05m |
CoreDNS is a Go DNS server positioned as a successor to SkyDNS and a drop-in for kube-dns by enabling a middleware pipeline that plugs in Kubernetes, a caching… | ||
| Keynote Panel: Moving to the Modern Infrastructure | Michelle Noorali | 48m |
Keynote Panel: Moving to the Modern Infrastructure - moderated by Michelle Noorali, Software Engineer, Deis
Becoming cloud native goes beyond the use of… | ||
| Lightning Talk: Kubes 4 Nubes | Tom Brown | 05m |
OpenAI runs a small, research-heavy infra where each deployment is a unique snowflake and onboarding drives tool design, so the concrete advice is to write… | ||
| Lightning Talk: The Top 5 Kubernetes Metrics to Monitor | Jorge Salamero Sanz | 05m |
Five concrete things to monitor: application request latency and error rates with examples like request latency (P95/P99); service connectivity such as DB… | ||
| Lightning Talk: Boosting Helm with AppController | Maciej Kwiek | 05m |
Helm gets a pluggable orchestration backend by adding a rudder microservice that tiller calls via RPC; one implemented rudder uses AppController to store a… | ||
| Lightning Talk: BGP Routing in Kubernetes | Pankaj Sehgal | 05m |
Proposes using a custom BGP protocol and a central route feeder to push route changes into Linux iptables instead of having peers delete thousands of entries… | ||
| Lightning Talk: Using Cloud-Native in Telco-Environments | Marcus Brunner | 06m |
Telecom already uses NFV but gains only limited benefit until core functions move to cloud-native designs; operators find they must rewrite large, elephant… | ||
| Lightning Talk: Zombie Kubernetes!: Making Nodes Rise From The Dead | Michael Johnston | 06m |
Argues that Kubernetes fleets should be provisioned immutably: build nodes from pre-built images or cloud-config/user-data and never patch in place. Requires… | ||
| Lightning Talk: Flexible Logging Pipelines with Fluentd and Kubernetes | Jakob Karalus | 05m |
Kubernetes nodes run Fluentd as a daemonset and pods emit logs; the talk shows developers put pod annotations with grok patterns and routing targets… | ||
| Lightning Talk: Cloud Native Design Patterns | Bilgin Ibryam | 06m |
Argues that cloud native apps use Kubernetes primitives so developers stop reinventing plumbing: the core unit is the pod deployment unit, applications expose… | ||
| Keynote: Opening Remarks | Dan Kohn | 09m |
Conference opens by announcing concrete project and program milestones: containerd is accepted into CNCF as Docker’s upstream runtime (used on Windows and… | ||
| Keynote: Kubernetes is Still Hard (for Developers) | Michelle Noorali | 14m |
Built Helm as an open-source Helm package manager after a hackathon and scaled it with contributors from Bitnami, Google and Intel, proving package-based… | ||
| Keynote: Your Philips Hue Light Bulbs Are Turned On By Kubernetes | Mark van Straten | 18m |
Philips Hue cloud migrates from Google App Engine to Google Container Engine (GKE), splitting a Play monolith into microservices and using Redis pub/sub to… | ||
| Keynote: The Kubernetes Application Registry: Easily Deploying Complex Applications with CoreOS Quay | Brandon Philips | 06m |
CoreOS Quay now stores complete Helm charts and exposes an experimental registry API so charts plus image and config can be discovered and managed as a… | ||
| Keynote: Backstage with Kubernetes | Chen Goldberg | 22m |
Kubernetes moves to a three-month release cadence and ships 1.6 with specific features like node allocatable (beta) and expanded role based access controls… | ||
| Keynote: Prometheus: From Berlin to Bonanza | Brian Brazil | 13m |
Prometheus traces from a 2012 Berlin project to a CNCF staple with a time series DB, local storage, and a powerful query language PromQL that lets you predict… | ||
| Keynote: Around the (Cloud Native) World in 323 Days | Andy Randall | 07m |
Company Tigera launches in May 2016 and joins the CNCF, focuses on simplifying networking and delivering dynamic, fine-grained network security for… | ||
| Keynote: Building the Infrastructure that Powers the Future of AI | Vicki Cheung, Jonas Schneider | 14m |
OpenAI runs research on Kubernetes across Azure AWS and private hardware and scales bursts to 4,000 nodes while moving from single‑pod prototypes to runs that… | ||
| Keynote: Red Hat is Driving Kubernetes/Container Security Forward | Clayton Coleman | 06m |
Red Hat describes concrete steps: RBAC on by default in kubeadm but not in cluster-up (1.6), use OpenShift projects for multi‑tenant isolation, enforce don't… | ||
| Keynote: Kubernetes1.6 and the Open Source Roadmap | Aparna Sinha | 34m |
Kubernetes 1.6 ships with concrete scale and safety: 5,000-node clusters validated at ~150,000 pods with <1s API latency 99th percentile and <5s startup, RBAC… | ||
| Introduction to rkt | Brandon Philips | 05m |
rkt is a container runtime that executes OCI and Docker images and targets simple integration by using a process model that runs as a child process of whatever… | ||
| Introduction to Containerd | Patrick Chanezon | 06m |
containerd is the Docker core runtime that runs containers since Docker 1.11 and is now donated to CNCF, built with input from Alibaba, Amazon, Google, IBM and… | ||
| Autoscaling a Multi-Platform Kubernetes Cluster Built with kubeadm [I] | Lucas Käldström | 37m |
Kubernetes already runs on amd64, arm and arm64 and a live 10-node cluster built with kubeadm demonstrates it: mixed amd64/arm/arm64 nodes (Raspberry Pi… | ||
| Tales from Lastminute.com Machine Room: Our Journey Towards a Full On-Premise Kubernetes | Michele Orsi, Manuel Carlo Ranieri | 39m |
Tales from Lastminute.com Machine Room: Our Journey Towards a Full On-Premise Kubernetes Architecture in Production [I] - Michele Orsi & Manuel Carlo Ranieri… | ||
| Panel: The Open Container Initiative (OCI) and the Future of Container Standardization | Chris Aniszczyk, Vincent Batts, Jeffrey Borek | 35m |
OCI is about concrete specs not handwaving: the runtime spec is at RC5 and the image spec needs one more RC, with a 1.0 release expected within a month or two… | ||
| Cloud Native Strategy - From Ancient Greece to Container Orchestration | Jamie Dobson | 37m |
Argues that cloud native strategy means using containers, microservices, CI/CD and IaaS/PaaS specifically to shorten time to value, not chasing containers for… | ||
| Panel: Leveraging the Open Service Broker API in Cloud Native Platforms | Chip Childers, Doug Davis, Andres Garcia Garcia | 36m |
Panel: Leveraging the Open Service Broker API in Cloud Native Platforms [I] - Moderated by Chip Childers, Cloud Foundry Foundation
In a digital world, widely… | ||
| Scaling Organizations Using Kubernetes | Richard Fliam | 38m |
Organization grows from 5 to ~250 engineers and doubles microservices yearly, spiking to tens of thousands of instances across 50 data centers and the default… | ||
| Powering Public Infrastructure with Kubernetes | Jan Willies | 38m |
Deutsche Bahn runs a display platform across >5,000 stations serving ~30 million daily passengers and replaces many vendor-specific players with a single… | ||
| Kubernetes from Dev to Prod at GoEuro | Subhas Dandapani | 34m |
Company migrates from legacy infra to Kubernetes across dev, CI, QA and prod in about four months, scaling from ~50 to 250 engineers and from 10 to 50 services… | ||
| A Staging Environment Per Pull Request: Building Our Own Controller! | Kamal Marhubi | 29m |
A Kubernetes-based controller takes GitHub webhooks, creates a custom review deployment third‑party resource, launches a build pod that docker builds and… | ||
| Kubernetes: Developing on Windows, Deploying on Linux | Rodrigue Cloutier | 40m |
Shows concrete fixes and gotchas for running Kubernetes tooling from Windows while deploying to Linux: uses Docker in VirtualBox, minikube experimental on… | ||
| When Failure is Not an Option: Processing Real Money at Monzo with Kubernetes and Linkerd | Oliver Gould, Oliver Beattie | 40m |
Monzo runs ~200 microservices and thousands of instances on Kubernetes and adds Linkerd as an out‑of‑process mesh to protect real money flows. Kubernetes cuts… | ||
| Running Workloads in Kubernetes | Janet Kuo | 35m |
Shows how Kubernetes primitives map to concrete behaviors: use Deployment for stateless services with replicas=3 and rolling updates via kubectl so killing a… | ||
| Kubernetes Operators: Managing Complex Software with Software | Josh Wood, Jesus Carrillo | 39m |
Argues that application-specific lifecycle logic belongs in Kubernetes extensions: use third-party resources plus custom controllers to encode operations like… | ||
| Steward, the Kubernetes-Native Service Broker | Gabe Monroy | 34m |
Steward is a Kubernetes-native service broker that implements the Open Service Broker API and merges into the SIG Service Catalog work, installing an… | ||
| Kubernetes at DigitalOcean: Building a Platform for the Future | Joonas Bergius | 31m |
DigitalOcean builds a thin deployment layer on Kubernetes: a simple JSON manifest plus a GOCC CLI and server that translate one-file app descriptions into… | ||
| How Google Cloud Hosts and Manages Kubernetes at Scale | David Aronchick | 39m |
Google Container Engine claims to run Kubernetes at true production scale — spinning up many thousands of clusters in ~3–5 minutes via a single API/button by… | ||
| Leverage LXD/LXC with Kubernetes | Lin Sun | 41m |
Experiment runs Kubernetes worker nodes inside LXD/LXC containers to raise free‑tier density on a 1‑core, 8GB host, starting workers in under a minute versus… | ||
| KubeVirt - Kubernetes, Virtualization and Your Future Data Center | Itamar Heim, Fabian Deutsch | 43m |
KubeVirt brings KVM/QEMU virtualization into Kubernetes by adding a VM Custom Resource API and running a QEMU-based runtime inside pods… | ||
| Grafana is Not Enough: DIY User Interfaces for Prometheus | David Kaltschmidt | 28m |
Explains a concrete DIY stack: extract Prometheus queries via the Prometheus API, inject links from Grafana using a browser extension, and open a notebook with… | ||
| Understanding and Extending Prometheus AlertManager | Lee Calcote | 36m |
Adds a persistent “history” endpoint and UI tab to Alertmanager that reads past alerts from SQLite and lists every transpired alert (optionally posts to… | ||
| Alerting in Cloud Native Environments | Fabian Reinartz | 33m |
Defines alerts directly on Prometheus time series and shows concrete rules: compute per-second rates from counters, divide errors by requests to alert on error… | ||
| Binary Protocols - The Current State of Affairs | Jason Smith | 29m |
Compares Protobuf, FlatBuffers and CapnProto and gives concrete tradeoffs: Protobuf requires full-message read and uses varint length-delimited fields, so it… | ||
| Counting with Prometheus | Brian Brazil | 40m |
Prometheus counters are monotonically increasing values exported (never reset except on process restart) so rate() computes per-second throughput by… | ||
| Alertmanager on Its Way to High Availability | Frederic Branczyk | 32m |
Alertmanager adds a high availability mode that gossips only metadata (silences and sent-notification records) between instances using gossip protocol and… | ||
| OpenTracing and Containers: Depth, Breadth, and the Future of Tracing | Priyanka Sharma | 33m |
OpenTracing provides a vendor-neutral API that decouples instrumentation from backend analysis and demonstrates working integrations with Zipkin and LightStep… | ||
| Operational and Business Insights from Tracing Distributed Microservices | Juraci Paixão Kröhling | 33m |
Shows a working OpenShift demo using Hawkular APM as an OpenTracing-compliant tracer, a Vert.x microservice set, and a load script that generates orders… | ||
| Loki: An OpenSource Zipkin / Prometheus Mashup, Written in Go | Tom Wilkie | 28m |
A Zipkin-compatible tracer written in Go that reused Prometheus service discovery to pull-based scraping of in-process ring buffers, Loki prototypes a pull… | ||
| OpenTracing Isn't Just Tracing: Measure Twice, Instrument Once | Priyanka Sharma, Ted Young | 26m |
OpenTracing provides a vendor-neutral API that turns per-service instrumentation into structured spans, baggage and tags that can feed logging, metrics and… | ||
| 360° Monitoring of Your Services | Philipp Krenn | 31m |
Live demo shows Spring Boot services monitored end-to-end using Elastic agents and Kibana dashboards: packetbeat extracts HTTP requests without instrumentation… | ||
| 50 Shades of System Calls | Jorge Salamero Sanz | 36m |
Builds a Sysdig-based tracer that traces everything at syscall level by inserting entry/exit markers into the kernel event stream and collecting spans in user… | ||
| Super Fast Real-time Data Processing on Cloud-Native Architecture | Yaron Haviv | 39m |
Claims an in-production platform that hits 100Gb/s per node and ~2 million transactions/sec per server with 99th-percentile latency ~100 µs by bypassing… | ||
| From Heroku to Cloud Native in 7 Weeks | Ivan Pedrazas | 25m |
Soho House moves 40+ apps off Heroku to a reproducible multi‑cloud Kubernetes platform in seven weeks by choosing Kubernetes, Prometheus, Fluentd and… | ||
| Building a Cloud-Native SQL Database | Alex Robinson | 37m |
Cloud-native SQL database built as a single Go binary that shards data into 64 MB ranges, replicates each range (default three copies) and runs Raft per range… | ||
| Go + Microservices = Go Kit | Peter Bourgon | 39m |
Go kit presents a concrete microservice architecture: core business logic wrapped by onion model middleware at the service, endpoint and transport layers so… | ||
| Managing Lifecycle of Microservices at Scale | Micheal Benedict | 36m |
Companies moving from monoliths to microservices face concrete governance gaps so the talk describes building an identity service that issues canonical… | ||
| Lessons Learned From Maintaining Continuous Delivery While Migrating From a Static Infrastructure to Kubernetes [B] | Audun Fauchald Strand, Øyvind Ingebrigtsen Øvergaard | 39m |
FINN runs about 350 microservices with roughly 1,000 deploys/week and a median 6 minutes git->prod. Migration moves workloads from static servers/OpenStack to… | ||
| Audit in Kubernetes Now, and in the Future | Maciej Szulik | 22m |
Current Kubernetes auditing is an API‑server filter that writes Apache‑style access lines (IP, HTTP method, user/groups, impersonation, response code, and a… | ||
| Building a Storage Cluster with Kubernetes | Bassam Tabbara | 37m |
Deploys Rook (Ceph) as an app inside Kubernetes: a single small rook operator deployment creates third-party resources, boots three Ceph monitors and per-node… | ||
| Dance Madly on the Lip of a Volcano | Jessica Frazelle, Brandon Philips | 30m |
Describes a concrete Kubernetes security-release workflow: reports hit a public security mailing list, a private repo holds patches and CI, a small expert team… | ||
| Autoscaling in Kubernetes | Marcin Wielgus | 30m |
Explains exactly how Kubernetes scales pods and nodes: horizontal pod autoscaler uses pod CPU requests and target utilization (example: sum usage / target →… | ||
| The Open Service Broker API and the Kubernetes Service Catalog | Paul Morie, Chip Childers | 32m |
Open Service Broker API becomes a platform-neutral spec with committers from Google, Pivotal, SAP, Fujitsu, IBM and Red Hat; Kubernetes SIG forms Sep 2016 and… | ||
| Kubernetes Scheduling Features or How Can I Make the System Do What I Want? | Marek Grabowski | 34m |
Covers Kubernetes 1.6 scheduler mechanics with concrete knobs and limits: explains pod anti-affinity and pod affinity semantics, taints and tolerations, and… | ||
| Reworking Your Team for Kubernetes | Hans Kieserman | 31m |
Yahoo migrates large legacy services onto Kubernetes and reports concrete results and lessons: infrastructure tuning yields up to 6:1 host reduction for… | ||
| Keynote: What is Cloud Native and Why Should I Care? | Alexis Richardson | 20m |
Cloud Native is framed as a curated toolkit of open projects—Kubernetes, Prometheus, Docker and more—chosen to deliver containers, orchestration, microservices… | ||
| Keynote: Cloud Native in the Enterprise: Production, Best Practice and Innovation | Ying Xiong | 08m |
Huawei reports running over 4,000 nodes and 20,000 production containers on a Kubernetes-based PaaS and aims for 100,000. Global deployment time drops from… | ||
| Keynote: Scaling Kubernetes: How do we grow the *Kubernetes* user base by 10x? | Joe Beda | 20m |
Claim: grow the Kubernetes user base by 10x within a year by lowering cognitive overhead and sanding rough edges. Proposals include splitting experiences for… | ||
| Keynote: Kubernetes Federation | Kelsey Hightower | 19m |
Argues that federation is for managing multiple clusters as one control surface, not a magic multi‑cloud migrator, and demonstrates a federated control plane… | ||
| Scale Kubernetes to Support 50,000 Services [I] | Haibin Xie, Quinton Hoole | 28m |
Demonstrates replacing iptables in kube-proxy with IPVS mode and adding a half-second batching of endpoint updates to cut API-server QPS, turning hours-long… | ||
| Writing a Custom Controller: Extending the Functionality of Your Cluster [I] | Aaron Levy | 26m |
Shows how to build a working node reboot operator composed of a DaemonSet agent (watches its node) and a single-instance Deployment controller (replicas=1)… | ||
| Kubernetes Cluster Federation: How to Write a Federated Controller? [A] | Madhu C.S. | 27m |
Explains how to write a federated controller using the informer library, the federated informer helper, and a deletion helper that uses the finalizer API… | ||
| Bringing Kubernetes into Salesforce [B] | Steve Sandke | 38m |
Salesforce runs Kubernetes on bare metal with ~100 nodes across 10 clusters and a custom controller that translates a Git-stored deployment manifest into… | ||
| What Cloud Computing Can Learn from Neuroscience: How the Brain Architects 'Cloud Applications' [I] | David Flanders | 28m |
Proposal to model the addiction reward circuit as microservices on Kubernetes/OpenStack, mapping pods to ventral tegmental area (VTA), nucleus accumbens and… | ||
| Life of a Packet [I] | Michael Rubin | 34m |
Explains how Kubernetes enforces an IP-per-pod model with veth pairs, bridges and per-node CIDRs so pods get routable IPs; shows a GKE deployment using flannel… | ||
| Getting To, and Through, Our First Black Friday with Critical Apps [I] | Arnaldo Pereira | 36m |
Luiza Labs moves Magazine Luiza’s critical apps onto Kubernetes in production since May 2016, builds an open source Heroku-like deployer (Teresa CLI), and hits… | ||
| Programming Kubernetes with the Go SDK [I] | Aaron Schlesinger | 35m |
Shows how Deis moves from vendoring the mono-repo to using client-go in production, explains using the dynamic client to watch a Kubernetes event stream and… | ||
| Case Study Conrad Electronic – From a Static Infrastructure to Continuous Delivery and the Cloud in One Step [B] | Tobias Baumgart, Sebastian Scheele | 41m |
Conrad migrates development to Google Cloud and GKE, building a CI/CD pipeline where a Bitbucket button triggers Jenkins to build images, push to Google… | ||
| Cloud Native Transformation: How Ticketmaster is Changing Culture and Speeding Up | Bindi Belanger | 34m |
Ticketmaster moves from months-long launches to minute-scale infrastructure provisioning, cutting a multi-year MySQL upgrade and reducing deploy time from ~20… | ||
| Load Testing Kubernetes: How to Optimize Your Cluster Resource Allocation in Production [I] | Harrison Harnisch | 31m |
Case study moves a high‑throughput link‑count service to Node + DynamoDB, starts at 4 replicas and hits OOMKilled after copying an old deployment with tiny… | ||
| K8SNIff - End-to-End Encryption Till the Pod [A] | Sebastian Scheele, Jason Murray | 26m |
A small Go binary called K8SNIff parses the TLS ClientHello SNI and does layer-3 forwarding to route encrypted connections straight to pods so pods retain… | ||
| Cisco's Devnet Goes Cloud Native: A Case Study on Transforming to Cloud Native [I] | Matt Johnson | 37m |
Cisco moves DevNet from siloed CMS and sandboxes into Kubernetes clusters on GCE and AWS, running Prometheus for metrics, Drone for CI/CD, nginx ingress with… | ||
| Delve into Helm: Advanced DevOps [I] | Lachlan Evenson, Adam Reese | 36m |
Helm is shown stretching beyond packaging into lifecycle and CI/CD: charts live in the app repo, Jenkins pipeline builds a Go app, pushes images to Quay, runs… | ||
| Fission: a Serverless Function Framework on Kubernetes [B] | Soam Vasani | 36m |
Fission runs on Kubernetes and claims ~100 ms cold start by keeping an idle pool of containers per language environment (Python, Node, Go, C#, Java in… | ||
| Serverless on Kubernetes with Kubeless [A] | Sebastien Goasguen, Nguyen Anh-Tu | 39m |
A Kubernetes-native serverless system that actually runs functions as Kubernetes resources: functions are a ThirdPartyResource controller that creates… | ||
| Building Distributed TensorFlow Using Both GPU and CPU on Kubernetes [I] | Zeyu Zheng | 37m |
Describes a production system that runs distributed TensorFlow on Kubernetes using both CPUs and GPUs: Kubernetes handles scheduling, lifecycle and monitoring… | ||
| Sched.net: A Network-Aware Kubernetes Scheduler [I] | Akash Gangil, Salvatore Orlando | 30m |
A custom scheduler module reads per-node network health agent annotations from the API server produced by ovn-kubernetes and uses OVN topology information to… | ||
| Success of CRI: Bringing Hypervisor Based Container to Kubernetes [I] | Lei Zhang | 29m |
Hypervisor-based container runtime (HyperContainer) plugs into Kubernetes via CRI and ships three components: hyperd (OCI-compatible hypervisor shim)… | ||
| Elephants on Automatic: HA Clustered PostgreSQL with Helm [I] | Josh Berkus, Oleksii Kliukin | 34m |
Demonstrates automated HA PostgreSQL on Kubernetes using Patroni + Helm chart and a CitusDB sharded cluster (1 query + 6 shards), deploying statefulsets with… | ||
| How We Run Kubernetes in Kubernetes, aka Kubeception [I] | Timo Derstappen | 25m |
A “mother” Kubernetes provisions and manages isolated guest clusters via a custom cluster TPR and operators that create pods running KVM on bare metal or call… | ||
| Kubernetes Day 2: Cluster Operations [I] | Brandon Philips | 36m |
Shows a working workflow for long‑term clusters: uses Tectonic installer on AWS, runs Kubernetes on Kubernetes as self-hosted Kubernetes, manages the critical… | ||
| Rise of the Machines [B] | Anne Currie | 36m |
Workable, concrete takeaway: a tiny custom scheduler (a few hundred lines of Go) ties Kubernetes to SQS metrics and a two-tier microservice (quick vs slow… | ||
| Integrating Long-Term Storage with Prometheus [A] | Julius Volz | 28m |
Prometheus adds a generic remote write/read interface that sends individual samples (not whole compressed chunks) over HTTP + protobuf (snappy), keeps limited… | ||
| Switching From External Load Balancing to consul & ingress [I] | Dan Wilson | 25m |
Describes replacing external hardware/software load balancers with Consul services + Kubernetes Ingress, using a Go plugin that watches the Kubernetes API to… | ||
| IPVS for Scaled Private Cloud Load Balancing [I] | Kimberly Messimer | 28m |
Comcast VIPER replaces external appliances with IPVS direct-reply inside Kubernetes and a controller called Kube2IPVS that stores VIP-to-service mappings in… | ||
| Kubernetes-Defined Monitoring [I] | Gianluca Borello | 29m |
Demonstrates two concrete data-collection models: a sidecar per-pod exporter and a sysdig kernel tap/system-call capture that auto-correlates metrics with… | ||
| High Availability Kubernetes on Bare Metal [A] | Muhammad Kamran Azeem, Henrik Høegh | 35m |
On bare metal, controllers, etcd and front-end load balancers get small HA clusters that present a single virtual IP so kubelets and proxies point to one… | ||
| Network-independent ACLs: Why Security Shouldn't Depend on Your Network | Bernard Van De Walle | 36m |
Network-independent ACLs: Why Security Shouldn't Depend on Your Network [I] - Bernard Van De Walle, Aporeto
The conventional view is that Security and ACLs… | ||
| Building for Trust: How to Secure Your Kubernetes Cluster | Alexander Mohr, Jessica Frazelle | 38m |
Covers concrete hardening: cluster uses a cluster CA with per-node certs and service account tokens stored as Kubernetes secrets, API access is controlled with… | ||
| The Patterns of Distributed Logging and Containers | Satoshi "Moris" Tagomori | 33m |
The Patterns of Distributed Logging and Containers [I] - Satoshi Tagomori, Treasure Data, Inc.
In recent days, logging becomes important more and more… | ||
| Groovy, There's a Docker in My Application Pipeline | Kris Buytaert | 35m |
A team converts a legacy Dashing dashboard pipeline into reproducible container builds: starting from CentOS images, they pack Ruby runtimes and gems into RPMs… | ||
| Simplifying Container Operations with Habitat | Michael Ducy | 39m |
Habitat packages apps with a bash plan.sh that builds in a cleanroom studio, produces versioned Habitat packages pushed to a Depot with channels, and runs them… | ||
| How We Built a Chargeback System for Twitter’s Compute Platform (Mesos/Aurora) | Jeyappragash Jeyakeerthi | 30m |
Built a centralized Cloud Platform Management System that catalogs, plans, provisions, meters and chargebacks multi-tenant compute across Mesos/Aurora and… | ||
| Insecure Containers? Continuous Defense Against Open Source Exploits | Andrew Martin | 39m |
Walks through concrete exploits—Heartbleed (25–50% of major sites), DROWN (~33% of sites), Shellshock and Dirty COW—and shows which are protocol flaws versus… | ||
| Containerd: The Universal Container Runtime | Justin Cormack | 32m |
Containerd is a CNCF-hosted, narrow-focused container runtime that aims to be the universal host runtime for Kubernetes, Docker, AWS, Azure and others, with a… | ||
| Behind the Iron Curtain: Getting Metrics From the Browser into Prometheus | Tom Wilkie | 26m |
Project sends user-facing metrics and JS errors into Prometheus by embedding a small JavaScript library that emits the Prometheus exposition format, wraps… | ||
| Ops for Developers - Monitor Your Java Application with Prometheus | Alexander Schwartz | 32m |
Prometheus captures JVM and container metrics while application-side instrumentation exposes meaningful business signals: Dropwizard Metrics and the Prometheus… | ||
| Monitor My Socks: Using Prometheus in a Polyglot Open Source Microservices | Phil Winder | 34m |
Shows a working integration of Prometheus into the polyglot Sock Shop (Go, Java Spring Boot, Node/Express) with deployed manifests for Kubernetes and minikube… | ||
| Configuring Prometheus for High Performance | Björn Rabenstein | 35m |
Prometheus tuning centers on local-storage flags: set memory chunk limits so chunks in RAM don’t exceed about one third of host RAM (practical rule divide RAM… | ||
| Prometheus: The Unsung Heroes | Alejandro Ramirez | 27m |
Local.ch serves about 4 million unique visitors monthly and a closed‑source Brocade load balancer runs as a cluster of four boxes whose internal metrics aren’t… | ||
| nothing matches | ||