Conf42 Cloud Native 2022
2022-04-28..2022-04-29
-- online --
[Conf42 Cloud Native 2021, Conf42 Cloud Native 2022, Conf42 Cloud Native 2023, Conf42 Cloud Native 2025, Conf42 Cloud Native 2026]
who it's for
kubernetes operators, platform engineers, site reliability engineers, devops engineers, security engineers, network engineers, software architects
topics
iterative canary releases; multi-region replication strategies; container sidecar debugging; service mesh with Envoy; OpenTelemetry tracing and metrics; Argo CD GitOps deployments; Kubernetes autoscaling with Karpenter; Terraform and GitOps infrastructure; Apache Pulsar event streaming; multi-cluster Kafka migrations; policy as code with Open Policy Agent; serverless security practices
| title | author | length |
|---|---|---|
| Premiere | Ciara Carey, Hammad Mushtaq, Ana Van Straaten, Rajalakshmi Srinivasan, Josh Stella, Nick Bergam, Rosemary Wang, Jason Dudash, Alparslan Avci, Naor Paz, Michael Schilonka, Jason Belk, Aviram Shmueli, David Melamed, Federico Maggi, Mor Manor, Otavio Santana, Tal Melamed, Tim Szigeti, Trista Pan, Alba Rivas, Mary Grygleski, Viktor Farcic, Wei Jin, Gilbert Cabillic, Jim Sheldon, Raja Ganesan, Alberto Rodriguez-Natal, Maish Saidel-Keesing, Ramesh Patel, Roy Tal, Zachary Conger, Tim Davis, Dave McAllister, Yosef Arbiv, Noaa Barki, Shai Almog, Robert Hoffmann, Timothy J Spann, JJ Asghar, Hila Fish, Lerna Ekmekcioglu, Handoyo Sutanto, Adarsh Shah, Denis Magda, Erez Berkner, Giovanni Paolo Gibilisco, Michael Cade, Natan Silnitsky, Robert Stein | 34m |
A rapid lineup of concrete claims and demos: iterative canary releases with feature toggles that cut rollback time and raise SLOs, a live Argo CD demo… | ||
| Future is Cloud-native & Your Organization Should Be Too | Ciara Carey | 26m |
Claims that matter: a cloud-native package registry hosts 28 package formats, boosts Helm uploads up 271% year over year and Docker images up 236%, and… | ||
| Pushing Code: Don't Forget to Flag Your Canaries? | Hammad Mushtaq | 25m |
Iterative canarying reduces blast radius by releasing in 25% rollouts tied to feature flags, letting teams monitor spikes in Prometheus and Sumo Logic and roll… | ||
| Preparing for disaster: going Multi-Region | Ana Van Straaten | 19m |
Claims that migrating to multi-region hits 99.99% uptime by combining specific AWS features rather than vague HA advice: implement cross-account and… | ||
| Optimizing operations & container management | Rajalakshmi Srinivasan | 34m |
Kubernetes adoption rises from 59% to 65% in production between 2020 and 2021 and users report concrete gains: 58% see better resource utilization, 46% faster… | ||
| Understanding Cloud Control Plane Compromise Attacks | Josh Stella | 31m |
Describes how attackers move from a brittle misconfigured host to stealing data by compromising the cloud control plane — stealing API keys, doing discovery… | ||
| Trust by verify - how to provide secure access to your team | Nick Bergam | 20m |
Argues that traditional VPNs fail at continuous, least-privilege access and cites over 560 known VPN vulnerabilities; recommends zero trust patterns… | ||
| Debugging a container with a sidecar using Gefyra | Michael Schilonka | 27m |
Gefyra creates a local Docker container that sits in the cluster network and Gefyra bridge intercepts the app container so an OAuth2‑Proxy sidecar (upstream to… | ||
| A Developer’s Introduction to Service Mesh | Rosemary Wang | 30m |
Builds a working mesh with HashiCorp Consul + Envoy on Kubernetes and shows concrete configs: a 50/50 traffic split routed by proxy, mTLS issued to each… | ||
| Leverage ML to automatically tune K8s apps | Giovanni Paolo Gibilisco | 27m |
Shows an ML optimizer that tunes nine parameters (four Kubernetes CPU/memory requests and limits, five JVM flags) by applying configs via the K8s API, running… | ||
| Stop mocking - develop frontends with real K8s setups | Robert Stein | 25m |
Mocks drift and cost time; this shows a concrete alternative: federating multiple backend GraphQL interfaces into one common interface with an Apollo federated… | ||
| The Only Thing That Matters In DevOps Is... | Viktor Farcic | 25m |
Claim: build an Internal Developer Platform that lets application teams self-serve clusters, apps and managed databases. Uses Backstage + Argo CD sync +… | ||
| Kubernetes drives SD-WAN | Alberto Rodriguez-Natal | 18m |
Claims that a working open source pipeline (cn1 operator → service registry → SD‑WAN adapter) reads Kubernetes labels/annotations and programs SD‑WAN… | ||
| OpenTelemetry and Epsagon - A Love Story In Three Acts | Yosef Arbiv | 14m |
Epsagon chronicles moving from proprietary SDKs to OpenTelemetry adoption: building closed automatic instrumentation then open sourcing it, creating many forks… | ||
| Distributed application level RBAC with OPA | Federico Maggi | 16m |
Decisions: a Kubernetes sidecar enforces role based access control using OpenPolicy Agent with Rego and the Go SDK, not a centralized gateway, so authorization… | ||
| Stop configuring infrastructure, start coding it! | Robert Hoffmann | 30m |
Using CDK (TypeScript, Java, C#, Python, Go) replaces verbose CloudFormation: a load‑balanced, autoscaling web app that previously requires 300 lines of YAML… | ||
| An Introduction to Service Mesh in Action | Jason Dudash | 26m |
Shows an Istio-based service mesh wiring Envoy sidecar proxies into Kubernetes and using Kiali + Grafana + tracing for observability, with a concrete… | ||
| Local Microservice Development: Remote Kubernetes Assist | Zachary Conger | 34m |
A concrete engineering journey: started with per-repo Docker Compose overlays to run dependency services locally, moved those merged configs through Kompose… | ||
| From Ghost Assets to Infrastructure Drift - Don't Get Spooked | Naor Paz | 21m |
Data from more than 100 AWS production accounts shows the top five ghost assets: EC2 instances, IAM policies, SQS queues, CloudWatch alarms, and security… | ||
| Event Streaming and Processing with Apache Pulsar | Mary Grygleski | 51m |
Content gives concrete claims and concrete tools: supports Pub-Sub and Message Queues, offers built-in stream processing and Pulsar Functions for mediation and… | ||
| Distributed Transactions in Service Mesh | Alparslan Avci | 35m |
A working prototype wires an Istio envoy filter to call a small propeller app that records saga state into a three‑node Hazelcast cluster, intercepts an HTTP… | ||
| Migrating to Multi Cluster Managed Kafka - 0 Downtime | Natan Silnitsky | 23m |
Claim: Wix moves 1.5B messages/day across >10K topics and 100K leader partitions for 2000 microservices to Confluent Cloud with 0 downtime. Migration uses a… | ||
| Grow Your Company with AWS Container Services | Maish Saidel-Keesing | 27m |
Starts with a concrete claim: use App Runner to get a site live fast, then move to Amazon ECS and AWS Fargate as needs grow. Demo builds a Docker image, pushes… | ||
| It's all about the Data | Michael Cade | 27m |
Claims a concrete flow: a demo application (Pac‑Man front end with MongoDB / Postgres back end) is packaged as an application-consistent unit, snapped via… | ||
| Tag! You're it! | Tim Davis | 13m |
Argues that tagging yields concrete wins: faster finance reporting, quicker security audits, and easier inventorying by turning metadata into actionable… | ||
| Power of Freedom & Flexibility: Going Cloud Agnostic | Handoyo Sutanto | 24m |
Claims cloud-agnostic reduces long-term costs and enables portability while accepting higher upfront integration work and complexity. The team builds a… | ||
| History of Software Engr & how it applies to Infrastructure | Adarsh Shah | 29m |
Argument: decades of software engineering practices are applied to infrastructure because version control (1970s), deployment pipelines (1991), microservices… | ||
| Terraform, GitOps & Kubernetes: manage infrastructure & aas | Jim Sheldon | 15m |
Shows concrete choices and how they behave: two repo layouts (one using tfvars per environment, one using directory per environment), a demo that edits… | ||
| Simpler and more flexible Kubernetes Ingress: Apache APISIX | Wei Jin | 12m |
Apache APISIX Ingress implements Apache APISIX as a Kubernetes ingress controller, syncing Ingress and CRDs to an APISIX cluster via admin APIs and running in… | ||
| Rules of Observability: The Data Edition | Dave McAllister | 32m |
Claims that observability is a data problem: keep metrics, traces, logs at full fidelity because sampling and aggregation introduce blind spots. Demonstrates… | ||
| What happens when DynamoDB explodes? A practical guide | Erez Berkner | 22m |
Explains whether a DynamoDB outage deserves an immediate wake‑up by showing concrete diagnostics and remediation steps: how to map business impact to failing… | ||
| Survival Guide for Java Architect in the Cloud Era | Otavio Santana | 29m |
Claims that adopting a DevSecOps culture reduces risk of fines and data breaches and treats security as prevention rather than an afterthought. Advises a cloud… | ||
| Introduction to Ansible for Network Engineers | Jason Belk | 23m |
Ansible playbooks run from a laptop, use an inventory and modules, and push idempotent changes (demo shows loopbacks 100–104 rendered from Jinja2 templates and… | ||
| Serverless Security Top 10 | Tal Melamed | 30m |
OWASP Serverless Top 10 presents concrete risks and countermeasures for AWS Lambda and similar platforms and contrasts them with traditional web threats. The… | ||
| Reimagining Application Networking and Security | Tim Szigeti | 40m |
Claims concrete fixes: an enterprise Istio distribution called service mesh manager handles lifecycle pain (meshes require upgrades every three months with… | ||
| Argo CD and Kubernetes from event based to microservices | Ramesh Patel | 06m |
A company moves a bulky .NET monolith off AWS Fargate to an EKS cluster and breaks it into domain driven microservices, claiming long build times and slow… | ||
| 5 Open Source Cloud Native Security Tools | Aviram Shmueli | 20m |
Five critical controls get wired into CI/CD and actual tools are named and tested: Dependency-Check (adm-zip with 3 CVEs), Gitleaks for secrets (detects a… | ||
| Open Policy Agent as a Control Engine | David Melamed | 25m |
Pipeline demo wires Open Policy Agent and Rego policies into GitHub Actions, running Bandit (SAST), gitLeaks (secrets), OWASP dependency‑check (SCA) and OWASP… | ||
| Elastic Compute with Salesforce Functions | Alba Rivas | 22m |
Salesforce Functions provide short‑lived serverless executables written in Node or Java that run inside Salesforce trusted boundary and can read and write… | ||
| Why should you bother about cluster autoscaling- Karpenter | Raja Ganesan | 21m |
Karpenter claims to provision nodes directly by calling cloud compute APIs (example AWS EC2 Fleet) instead of expanding ASGs, and it picks the smallest set of… | ||
| Cloud Native Apache Pulsar Development 101 with Python | Timothy J Spann | 28m |
Shows how to get a standalone cluster in docker, install the Python client and set JSON/Avro schemas for typed messages, produce and consume with message keys… | ||
| Leveraging GitOps to wrangle your clusters and projects | JJ Asghar | 31m |
Demonstrates a concrete GitOps workflow using Argo CD installed with two kubectl commands, showing a live install on OpenShift, creating an app that auto-syncs… | ||
| Terraform Practices - The Good, the Bad and the Ugly | Hila Fish | 35m |
Concrete rules and concrete tools: lock provider/module versions and expect breakages when major bumps occur; apply use remote backend S3 with versioning and… | ||
| Journey from monolith to microservices on AWS | Lerna Ekmekcioglu | 30m |
Demonstrates a working migration: a Spring Boot Java monolith on EC2 with MySQL gets the basket functionality extracted, routed by a proxy to serverless… | ||
| Inside your cloud databases - your data security posture | Mor Manor | 25m |
Patent‑pending Snapshot automates agentless AWS RDS/Aurora scans by restoring existing snapshots into an isolated VPC, resets the master password and runs… | ||
| PostgreSQL Distributed & Secure Database Ecosystem Building | Trista Pan | 31m |
Claim: ShardingSphere turns plain PostgreSQL clusters into a distributed, encrypted system by adding a pluggable kernel and middleware. It uses a… | ||
| Deep-dive into Open Policy Agent + Conftest + GateKeeper | Noaa Barki | 37m |
Shows concrete workflows and results: uses Open Policy Agent, Conftest, Gatekeeper and Argo CD plus a CLI called thetree to stop real misconfigs (Target… | ||
| Debugging at Scale in Production - Deep into your Containers | Shai Almog | 24m |
Shows how kubectl debug (introduced in v1.23) uses ephemeral containers to inspect crashed or bare‑bones pods and how KoolKits supplies prebuilt images (JVM… | ||
| How Geo-Distributed Apps Use Global Cloud Infra | Denis Magda | 37m |
Concrete claims and patterns anchor the decision: a Slack‑like messenger is implemented with messaging/profile/reminders/status microservices collocated with a… | ||
| Instant provisioning and hot migration | Gilbert Cabillic | 22m |
A platform called Scale Dynamics provisions public and on‑prem resources in a few clicks and the demo builds and runs a Node.js service live from source in… | ||
| Go CDK! What this Means for the World of IaC | Roy Tal | 11m |
Claims CDK replaces CloudFormation by compiling code into CloudFormation stacks, running cdk synth then cdk deploy, and stores state in S3 and creates… | ||
| nothing matches | ||