ContainerCon @ Open Source Summit North America 2023
2023-05-10..2023-05-12
-- online --
[ContainerCon @ Open Source Summit North America 2022, ContainerCon @ Open Source Summit North America 2023, ContainerCon @ Open Source Summit North America 2024]
who it's for
platform engineers, kubernetes operators, cloud-native developers, devops engineers, security engineers, observability engineers, site reliability engineers
topics
Flux GitOps workflows; WebAssembly on Kubernetes; Spin/Wasmer/Wasmtime runtimes; Dapr service invocation and pubsub; OCI registries for arbitrary artifacts; OpenTelemetry Collector deployments; Terraform plus Flux integration; kernel security profiles with eBPF; Cilium networking and Istio east-west; OCI referrers and artifact attachments; Java JITServer for containers; ephemeral clusters with ClusterAPI
| title | author | length |
|---|---|---|
| Exotic Runtime Targets: Ruby and Wasm on Kubernetes and GitOps Delivery Pipelines | Kingdon Patrick Barrett | 42m |
Deploys WebAssembly modules with Ruby on Kubernetes using GitOps: builds a multi‑arch EKS cluster bootstrapped with Flux, packages Spin runtime in a container… | ||
| A Guide to Dapr: Open Source APIs & SDKs for Developers | Alice Gibbons, Samantha Coyle | 36m |
Portable runtime that runs as a sidecar on Kubernetes or locally, providing concrete APIs and SDKs (Go, .NET, JavaScript, Java) for service invocation and… | ||
| Container Registries, No Longer Just for Containers! | Vincent Batts | 36m |
Claim: container registries already host non-container artifacts and can be extended safely. Demos show pushing a plain text file and source RPMs as OCI… | ||
| Build and Manage Wasm Applications using Container Tools | Michael Yuan | 48m |
Claims that Wasm apps run side-by-side with Linux containers using existing tools, and demonstrates it concretely: builds a microservice with MySQL and Nginx… | ||
| Building Apps in Kubernetes: The Unforgiving Sea of... | Nicolas Vermande, Tyler Gillson | 41m |
A five‑service "joke generator" is built and deployed into a local Kubernetes cluster; devspace live file sync replaces rebuilds by syncing source, running a… | ||
| The Next Frontier in Open Source Java Compilers: Just-in-Time Compilation as a Service | Rich Hagarty | 29m |
Separates the JIT compiler into a remote service so containers drop heavy CPU and memory spikes, enabling smaller images and faster ramp-up; OpenJ9 JITServer… | ||
| Improving Containers Isolation in Kubernetes | Cosmin Cojocar | 42m |
Kubernetes cluster operators get a working tool that automates creation, distribution and binding of kernel security profiles: Security Profiles Operator… | ||
| Otel Collector: The Swiss Army Knife of Observability | Chris Featherstone, Shubhanshu Surana | 36m |
Adobe replaces Jaeger agents with the OpenTelemetry Collector (rolled out April 2020) to centralize traces, metrics and logs, ingesting 330 million series/day… | ||
| Level Up Your Deployments: Automate with Terraform + Flux | Priyanka Ravi | 27m |
Shows how Flux integrates with Terraform to manage infra and Kubernetes declaratively, installing the Flux Terraform Controller via Helm and using Flux… | ||
| Cluster Golden Signals to Avoid Alert Fatigue at Scale | Anusha Ragunathan, Sahil Badla | 46m |
Intuit builds a cluster-level observability layer that reduces alert noise across 275+ clusters, 20k namespaces, 2,500 production services, aggregating… | ||
| Modifying the Immutable: Attaching Artifacts to OCI Images | Brandon Mitchell | 44m |
OCI adds a way to attach arbitrary artifacts to an image digest by adding a subject field to manifests, an artifactType + annotations, and a server-side… | ||
| Designing & Securing Multi-Tenant Runtime Environment at the New York Times | Ahmed Bebars | 39m |
The New York Times builds a centralized multi-tenant EKS platform across two regions, automating cluster provisioning with Terraform and Helm, removing the AWS… | ||
| All Your Queues Are Belong to Us: The Hunt for a Network Bug... | Laurent Bernaille, Eric Mountain | 35m |
Datadog finds a kernel bug that forces all egress traffic onto a single transmit queue, causing 16 Gbps pod‑to‑host throughput instead of the instance’s 25… | ||
| Automate Secret Rotation in Kubernetes, Then Get Out of the Way! | Márk Sági-Kazár | 35m |
Automated rotation uses an External Secrets Operator to sync cloud stores into Kubernetes Secrets and a reloader to trigger workload rollouts; this pipeline… | ||
| Delivering Secure & Compliant Software Components with the Open Component Model & GitOps | Dan Small | 27m |
Claims that the Open Component Model plus Flux implements a reproducible Software Bill of Delivery and GitOps localization; demonstration builds a component… | ||
| Are Containers Ready for Production Databases? | Joe _Zonker_ Brockmeier | 25m |
Argues that Docker/Podman-style containers can run production databases but success depends on architecture and scale, recommends Kubernetes when teams use… | ||
| Ephemeral Clusters as a Service with ClusterAPI and GitOps | Joaquin Rodriguez | 25m |
Claims automated provisioning of ephemeral Kubernetes clusters at scale using ClusterAPI with a GitOps control plane powered by Argo CD, demonstrated creating… | ||
| A WASM Runtime for FaaS Protected by TEE | Sara Wang, Yongli He | 30m |
Proposal to run a single WebAssembly runtime inside hardware TEEs to fix cross‑platform enclave fragmentation by shipping tiny WASM bytecode instead of… | ||
| Don’t Trust Your Neighbors: Securing Pods via Scheduling | Michael Le, Sascha Grunert | 47m |
Proposal introduces SySched a Kubernetes scheduling plugin that co-locates pods based on system call exposure risk using XS extraneous syscalls score computed… | ||
| Spreading Apps, Controlling Traffic & Managing Costs in Kubernetes | Lukonde Mwila | 22m |
Shows how to spread replicas with pod anti-affinity and topologySpreadConstraints to avoid single points of failure, then uses Istio destination rules and… | ||
| nothing matches | ||