Conf42 Cloud Native 2023
2023-03-30
-- online --
[Conf42 Cloud Native 2021, Conf42 Cloud Native 2022, Conf42 Cloud Native 2023, Conf42 Cloud Native 2025, Conf42 Cloud Native 2026]
who it's for
platform engineers, kubernetes operators, cloud security engineers, site reliability engineers, devops engineers, cloud architects, backend developers
topics
Cluster API provisioning; Gateway API routing; Azure Container Apps; Kubernetes audit logging; SSH certificate management; HashiCorp Vault on Kubernetes; Kubernetes scanning at scale; supply chain security for open source; Karpenter just-in-time nodes; eBPF-based observability; kubectl debug in production; Lambda functions in Rust
| title | author | length |
|---|---|---|
| Premiere | Andrei Novoselov, Shane Utt, Bojan Vrhovnik, Kenneth DuMez, Linda Ikechukwu, Rotem Refael, Yiscah Levy-Silas, Wiktoria Dalach, Alain Lompo, Mohammed Aboullaite, Ben Rockwood, Christoph Hartmann, Michael Levan, Nader Zaveri, Brandan Schondorfer, Reza Ramezanpour, Shlomi Kushchi, Steve Judd, Sven Ruppert, Yael Grossman, Trista Pan, Samuel Baruffi, Yoav Nordmann, Chris Nesbitt-Smith, Mary Grygleski, Oskar Neumann, Kristopher Francisco, Sorin Dumitrescu, Abby Bangser, Anupama Pathirage, Federica Ciuffo, Barkatul Mujauddin, Matt Morris, Ala Shiban, Sylvain Combraque, Dmitry Khorev, Ismael Hommani, Charles-Alban Benezech, Ran Isenberg, Luciano Mammino, Zach Gardner, Shai Almog, Shahar Azulay, Doug Sillars, Einat Mahat, Elinor Sapir, Sindhuja Nagarajan, George Peter Hantzaras, Dan Mckean, Lucas Fernandes Da Costa, Omer Kahani, Sam Williams | 33m |
A compiled session list that names concrete claims and tech: comparisons of OpenStack Magnum versus the Cluster API, Gateway API replacing Ingress, Azure… | ||
| Moving from the Openstack Magnum to the Cluster API | Andrei Novoselov | 30m |
Compares running control planes as three VMs under OpenStack Magnum versus running control plane runs as pods in a service Kubernetes cluster, shows… | ||
| Beyond Kubernetes Ingress (with Gateway API) | Shane Utt | 28m |
Gateway API positions itself as the successor to Ingress and claims concrete gains: explicit resources like GatewayClass Gateway HTTPRoute, multi‑protocol… | ||
| Azure Apps – serverless container apps in action | Bojan Vrhovnik | 46m |
Demo deploys a multi-container app (UI, internal API, background job) to Azure Container Apps, uses Azure Container Registry, secrets for SQL and storage, and… | ||
| Kubernetes audit log best practices | Kenneth DuMez | 20m |
Explains concrete config: an audit policy with omitStages, levels, resources, verbs, users and namespaces to cut noise; pushes logs to S3 and aggregates… | ||
| A better way to SSH: Introducing SSH certificates | Linda Ikechukwu | 41m |
SSH keys require scattering public keys to every host, never expire, encourage TOFU and are hard to revoke at scale; SSH certificates bind public keys to… | ||
| What We've Learned from Scanning 10K+ Kubernetes Clusters | Rotem Refael | 18m |
Scans of 10K+ Kubernetes clusters use cubescape and an Armo platform to collect posture and runtime data and claim actionable metrics not vague advice… | ||
| Unpacking Open Source Security in Public Repos | Yiscah Levy-Silas | 16m |
Armo presents data: nearly 44,000 container images from about 180 registries and ~2,000 repos reveal that raw scanner counts overstate risk — BusyBox and… | ||
| Security Doesn't Have To Be a Nightmare | Wiktoria Dalach | 23m |
Concrete checklist: add a security section to design docs that asks how confidentiality integrity and availability can be broken, enforce strict role‑based… | ||
| Using Hashicorp Vault in Kubernetes Clusters | Alain Lompo | 23m |
Shows exact commands and outcomes: enabling KV v2 and creating secrets with vault kv put then vault kv get, enabling kubernetes auth and writing a role that is… | ||
| Move fast, build things… Safely! | Mohammed Aboullaite | 35m |
Claims ten concrete safety-to-speed mappings inspired by Formula One: five pre-crash measures and five post-crash measures. Specific practices include canary… | ||
| Cloud Native Posture Management for All | Ben Rockwood | 27m |
Claims two open source projects: CN Query for GraphQL queries across hosts clouds and services and CN Spec for declarative assertions and policies… | ||
| How to implement Security as Code? | Christoph Hartmann | 27m |
Claims that automation shortens the window between vulnerability disclosure and remediation, backed by numbers: about 25,000 CVEs last year, ~25% with known… | ||
| Kubernetes Secret Management The Right Way With Vault | Michael Levan | 08m |
Deploys HashiCorp Vault into Kubernetes via a Helm chart install, configures the service as a load balancer and enables the UI, creates a namespace, then… | ||
| Cloud Metadata Abuse | Nader Zaveri, Brandan Schondorfer | 44m |
Shows that a common misconfiguration—IMDSv1 token optional—allows SSRF (Adminer POC) to retrieve EC2 role keys, log into AWS CLI and steal S3 data within… | ||
| Container and Kubernetes security policy design | Reza Ramezanpour | 32m |
Demo builds a three‑node multipass cluster, installs Tigera operator and Calico from a private registry, and proves the controls work end to end. Uses Calico… | ||
| Defending Your Cloud Apps Against the Serverless Top 10 | Shlomi Kushchi | 28m |
Maps the OWASP Serverless Top 10 risks to concrete defenses and names the tools that find them: OWASP ZAP for API and web scans (including async gaps)… | ||
| From 0 to hero: platform engineers are Zero Trust rainmakers | Steve Judd | 13m |
Claims that platform engineers become the ones who implement Zero Trust inside Kubernetes by automating identities policies and enforcement using concrete… | ||
| Supply Chain Security for OpenSource Projects | Sven Ruppert | 30m |
Shows concrete controls: adopt SLSA levels and build-info to produce SBOMs, centralize binaries in Artifactory and scan metadata with X‑Ray, and shift left… | ||
| Scaling K8s Clusters Without Losing Your Mind or Money | Yael Grossman | 27m |
Carpenter replaces node groups and Cluster Autoscaler by provisioning EC2 capacity directly via EC2 Fleet requests, making scale decisions in seconds and… | ||
| Automatically shard & scale-out traditional databases on K8s | Trista Pan | 27m |
Claims a concrete path to turn existing MySQL/Postgres/Oracle clusters into a distributed, elastic system using Apache ShardingSphere as a proxy/GDBC layer… | ||
| Just-in-time Nodes for Any AWS EKS Cluster: Karpenter | Samuel Baruffi | 01h 01m |
Karpenter runs on EKS and replaces Cluster Autoscaler with a groupless provisioning model that talks to the EC2 Fleet API to pick instance types just-in-time… | ||
| Anomaly Detection with Apache Pinot & ThirdEye | Yoav Nordmann | 30m |
A concrete pipeline that catches real incidents: anomaly detection runs on Apache Pinot queried by ThirdEye, ingesting events from Kafka (Telegraf in the demo)… | ||
| Cluster autoscaling in Kubernetes | Chris Nesbitt-Smith | 28m |
Shows a concrete pattern: create a large placeholder pod with a low priority so it is evicted when real pods need space, keeping the cluster autoscaler always… | ||
| Event-Driven Change Data Capture pattern | Mary Grygleski | 36m |
Claim: an event-driven CDC pattern built on Apache Pulsar captures DB changes as ordered logs, transforms them with Pulsar functions, and reliably streams to… | ||
| Modern Application Architecture with AWS Step Functions | Oskar Neumann | 20m |
Claims that AWS Step Functions act as a centralized workflow engine that composes serverless pieces into reproducible state machines, with concrete tools and… | ||
| AI-Based Containerization: Portability Framework | Kristopher Francisco | 32m |
Demo shows evolute migrate (CLI named Chrysalis) connecting to a VM, extracting a GlassFish app, producing a Docker image and running the pet‑clinic… | ||
| Why I'm moving Lerna projects to .NET projects? | Bervianto Leo Pratama | 11m |
Claim: moving a small personal Lerna monorepo into .NET reduces context switching and makes single‑maintainer work practical. Implementation detail: a simple… | ||
| CI/CD - Build/Deploy Automation | Ricardo Castro | 17m |
Claims that a true CI/CD practice is about cadence and policy not tooling and gives concrete targets: CI under five minutes, whole pipeline under fifteen and… | ||
| Multi-Cloud Deployments with GitHub Actions | Rob Earlam | 23m |
A real migration from two monoliths to a mono repo with four sites uses GitHub Actions, reusable workflows and path-based triggers to avoid rebuilding… | ||
| Modern Development of Distributed Apps: Service Weaver | Robert Grandl | 18m |
Service Weaver presents a concrete runtime and toolchain for Go that compiles a single modular binary and deploys it as microservices with deployers for local… | ||
| Build open format data lakehouse | Satish Mane, Rajeev Jahswal | 25m |
Shows how to build a cloud‑native lakehouse on S3 with Glue catalog plus Athena, Redshift Spectrum and EMR, and compares three open table formats: Apache Hudi… | ||
| Environments as a Service: improve DX | Sorin Dumitrescu | 31m |
Claim: self‑service ephemeral environments shorten feedback loops and raise productivity by letting developers run Docker Compose to Kubernetes production‑like… | ||
| Platforms aren't tools, they are experiences | Abby Bangser | 14m |
Claim: platforms are experiences not just collections of tools, and Kubernetes is a foundation not a platform. Evidence: examples of Heroku, Helm installs that… | ||
| Ballerina - A Cloud Native Programming Language | Anupama Pathirage | 27m |
Ballerina claims to be a cloud native integration language with concrete tooling and outputs not just rhetoric it ships a VS Code plugin that auto-generates… | ||
| Application Networking on Kubernetes, where are we now? | Federica Ciuffo | 25m |
Claims that Envoy sidecars plus Istio provide observability, retries, mTLS and fine routing but require control-plane components and many per-pod proxies… | ||
| API Testing Made Easy | Barkatul Mujauddin | 13m |
Claim: Keploy converts live API calls into runnable test cases and records API calls via a Java agent plus SDK, capturing SQL queries from Postgres and… | ||
| Next-gen Enterprise Workflows: Observability at Scale | Matt Morris | 19m |
A concrete integration connects Honeycomb telemetry to ServiceNow CMDB and incidents: clone the repo, import the update set, add an API key, and the system… | ||
| The State of Infrastructure-From-Code 2023 | Ala Shiban | 12m |
Claims that tools analyze application code and automatically produce deployable cloud stacks, inferring resources, VPCs and least‑privilege policies rather… | ||
| What’s next in the HTTP caching world | Sylvain Combraque | 26m |
Timeline of HTTP caching from RFC 2616 (1999) through updates in 2014 and 2022 and concrete mechanics for modern stacks clarifies what changes and why: cache… | ||
| Saga Pattern for Distributed Transactions | Dmitry Khorev | 17m |
Explains that a Saga is a sequence of local transactions with explicit compensating steps and demonstrates it on a four‑service stock trade where compensating… | ||
| What is a Data mesh? | Ismael Hommani, Charles-Alban Benezech | 51m |
Claims that data mesh is a socio-technical pattern borrowed from domain driven design and meant to fix organizational coupling by giving each data domain… | ||
| AWS CDK - Best Practices From The Trenches | Ran Isenberg | 27m |
Shows a concrete case: a serverless audit POC built in 3 days to build a serverless audit POC connecting IoT Kinesis Lambdas API Gateway OpenSearch and S3… | ||
| Your Lambdas, In Rust! | Luciano Mammino | 49m |
Claim: Rust Lambdas deliver lower latency and cost through native binaries and careful memory/CPU sizing. Demonstrations use cargo lambda (new, watch, invoke… | ||
| 4 Reasons why Digital Transformation Fails, How to Succeed | Zach Gardner | 32m |
Four specific failure modes and fixes appear: believing a single product solves everything; assuming this time will be different when teams stay the same… | ||
| Debugging at Scale in Production with kubectl debug | Shai Almog | 25m |
Claim: use kubectl debug and ephemeral containers to inspect crashed pods without altering originals, and combine port-forward JDWP to localhost for secure… | ||
| True Kubernetes Observability with eBPF | Shahar Azulay | 31m |
Claims that eBPF-based agents provide true out‑of‑band Kubernetes observability: an eBPF agent runs in the kernel, captures spans and API calls without… | ||
| Pairing with a ChatBot: Building DevOps Automations | Doug Sillars | 23m |
Claims that pairing ChatGPT with unscript (runbooks.sh) speeds prototyping and cuts authoring time by roughly 80 percent. Demonstration shows a Python AWS… | ||
| The Legend of the Arsonist Firefighter | Einat Mahat | 14m |
Claims concrete practices that cut incidents: build monitoring dashboards with just enough signals, push alerts via Slack/SMS/email tuned to avoid fatigue, run… | ||
| Why we must approach debugging differently | Elinor Sapir | 11m |
Claims a surprising metric: 75% of developers' time on bugs, backed by Coralogics. Demonstrates that classic step‑over debugging for first‑year exercises fails… | ||
| Solving Migration Pipelines | Sindhuja Nagarajan | 18m |
Process-driven checklist: assess before plan with inventories of environments, scripts, CI/CD and BAU use counts; plan end-to-end including security, phased… | ||
| Building a self service DBaaS | George Peter Hantzaras, Dan Mckean | 14m |
Concrete pipeline that works end to end: developer writes a YAML describing name, instance size, provider and region, pushes it to a Git repo, Argo CD watches… | ||
| Staging Environments: A Blueprint for Pre-production | Lucas Fernandes Da Costa | 16m |
Argues for on-demand per-PR environments that developers can spin up themselves, backed by a team-wide resource pool and kubsphere budgeting to cap cost… | ||
| Patterns of Adoptions and Depreciation | Omer Kahani | 14m |
Framework claims a practical path to migrate R&D by segmenting teams with the technology adoption lifecycle and targeting each group with concrete tactics… | ||
| How I built a serverless first SaaS startup in 30 days | Sam Williams | 33m |
A serverless-first SaaS ships in 30 days: a Chrome extension sends a post to ChatGPT, types the reply with a fake typing speed, and routes requests to… | ||
| nothing matches | ||