CloudOpen @ Open Source Summit North America 2023
2023-05-10..2023-05-12
Vancouver, Canada
[CloudOpen @ Open Source Summit North America 2022, CloudOpen @ Open Source Summit North America 2023, CloudOpen @ Open Source Summit North America 2024]
[CloudOpen @ Open Source Summit Europe 2022, ContainerCon @ Open Source Summit North America 2023, Open Source Summit North America 2023: Open Source On-Ramp, CloudOpen at Open Source Summit Europe 2024, ContainerCon @ Open Source Summit North America 2024, CloudOpen @ Open Source Summit Europe 2023]
who it's for
platform engineers, site reliability engineers, security engineers, observability engineers, cloud architects, cloud engineers, backend developers
topics
Istio Ambient Mesh operations; OpenTelemetry collector configuration; real user monitoring with AIOps; AMD SEV SNP and Intel TDX confidential computing; signed OCI Terraform modules with cosign/Fulcio/Rekor; multi-cluster L7 load balancing with Envoy; Flatcar minimal OS and ignition/Butane provisioning; Dapr workflows with durable timers and state; policy as code with Rego/OpenFGA/Zanzibar; replatforming Cloud Foundry to Kubernetes (Konveyor)
| title | author | length |
|---|---|---|
| Fewer Moving Parts: Simplify Service Mesh Operations with Istio Ambient Mesh | Jim Barton | 38m |
Istio Ambient Mesh removes per-pod Envoy sidecars and routes traffic through a node-level ztunnel for mTLS and Layer‑4, with waypoint Envoy proxies handling… | ||
| Modern Programming Language Abstractions for Cloud-Native Application Development | Sameera Jayasoma | 46m |
Argues that modern languages and frameworks (examples: Java records and sealed classes, ASP.NET minimal APIs, and the new language Ballerina) give explicit… | ||
| Customer Centric Observability at Scale Leveraging AIOps & OpenTelemetry | Vigith Maurice, Venkatesh Rangarajan | 41m |
Intuit builds an OpenTelemetry-based Real User Monitoring pipeline that ingests front-end spans and metrics into an operational data lake (S3 + ElasticSearch… | ||
| Advancements in Confidential Computing | Vojtech Pavlik | 44m |
82% of surveyed users worry cloud providers can see their in‑memory data and 94% are willing to pay for extra protection; SUSE demonstrates a working stack… | ||
| Securing Your Infrastructure as Code Pipeline | Jesse Sanford | 33m |
Centralize IaC execution into a single reconciler and only allow vetted OCI-wrapped modules: Jenkins produces Terraform modules as OCI images, runs checkoff to… | ||
| Building the Multi-Cluster L7 Load Balancer | Dominic Kim, Shawn Jang | 37m |
A programmatically controlled L7 load balancer runs across 14 Kubernetes clusters in 5 regions and uses Istio/Envoy proxy for L7 routing, circuit breaking and… | ||
| Take the Power Back on Your Containers with Flatcar | Mathieu Tortuyaux | 34m |
Flatcar boots a minimal OS image (demo spawns instances with qmu) and runs Docker nginx straight away, provisioning via ignition JSON generated from Butane and… | ||
| What We Learned from Building Edge Computing Nodes | Kerim Satirli | 45m |
Deploys three real systems and what actually worked: an airport LoRa sensor network that loses years off expected lifetime because of LoRa battery misread and… | ||
| Dapr Workflows: How to Write Reliable, Fault-Tolerant Applications... | Kendall Roden, Mark Fussell | 45m |
Dapr Workflows ships in Dapr v1.10 (alpha) and provides a sidecar workflow engine that runs via a gRPC stream while application code executes activities using… | ||
| Controlling Data Overhead with the OpenTelemetry Collector | Nočnica Mellifera | 23m |
Shows concrete Collector configs and choices: filtering PII, clamping uncontrolled metrics, and using processors for normalization, sampling and metric… | ||
| Choosing the Right Technology for your API | Randy Abernethy | 48m |
Compares concrete tradeoffs: Thrift fastest in raw TCP with a very expressive IDL and safe evolution; gRPC requires HTTP/2 and adds bidirectional streaming… | ||
| Application Code of Conduct - Full-Stack Policy as Code | Gabriel L. Manor | 43m |
Argues that authorization must be moved from ad-hoc middleware into a full-stack, policy-as-code system that separates enforcement, decision, retrieval… | ||
| Changing Applications for Changing Secrets | Gerald Yerden | 41m |
Demo shows a Go payments app on Kubernetes using HashiCorp Vault to issue dynamic database credentials that rotate (demo TTL ~2–3 minutes, tested down to 10s)… | ||
| Demystifying Anomaly Detection in OpenSearch | Nathan Boot | 39m |
A working pipeline sends systemd journal logs into OpenSearch via fluent-bit systemd plugin, indexes them (running in Docker on localhost), and builds an… | ||
| Dynamic and Context-Aware Security Policies for the Cloud Using... | Shriti Priya, Julian Stephen | 36m |
Prototype ties Istio + Envoy + OPA to a context server and Prometheus-derived metrics to auto-generate service-to-service mappings and enforce fine‑grained… | ||
| Konveyor: Replatform from Cloud Foundry to Kubernetes | Daniel Oh | 38m |
Konveyor’s move2kube tool automatically transforms a Cloud Foundry Java app into Kubernetes artifacts, builds multi-arch container images, pushes them to… | ||
| WASM + Confidential Computing, Secure Your FaaS Function | Xinran Wang, Liang He | 30m |
Reference architecture and reference implementation wire Knative to a WASM runtime running inside Intel SGX enclaves, with an encrypted WASM modules workflow… | ||
| nothing matches | ||