ContainerDays 2022
| title | author | length |
|---|---|---|
| ContainerDays 2022 Aftermovie | 02m | |
Watch ContainerDays Conference 2022 Recap! Your Cloud Native Experience!
#cloud #kubernetes #cloudcomputing #cloudnative #k8s #devops #gitops #edgecomputing… | ||
| Breaking the Code | Stuart Clark | 14m |
Shows a working CI/CD pipeline that converts device config from NSO into YAML, stores changes in GitLab, runs pyats tests and blocks bad deployments; an… | ||
| From Monitoring to Observability: Left Shift your SLOs with Chaos | Michael Friedrich | 30m |
Shows a concrete workflow: instrument services with Prometheus + PromQL, define SLIs like container RSS or Docker pull remaining, and enforce SLOs as a quality… | ||
| Container-native pipelines with Drone CI | Jim Sheldon | 27m |
Drone CI is a self‑hosted, container‑native CI system (server ~60MB, runner <20MB) that runs each pipeline in an ephemeral workspace volume, clones the repo… | ||
| Hands-On with an Envoy API Gateway, Now with GraphQL! | Jim Barton | 03h 18m |
Envoy-backed glue edge installs into Kubernetes, discovers services as upstreams, and generates GraphQL schema and resolvers from OpenAPI and gRPC without… | ||
| Compliance in Kubernetes: Enforcing and Visualizing | Jose Guilherme Vanz | 29m |
Kubewarden enforces Kubernetes admission policies compiled to WebAssembly and stores every evaluation as Prometheus metrics so teams can query rejections… | ||
| From Zero to Hero in Kubernetes Native Java | Daniel Oh | 31m |
Quarkus demo shows exact steps to go from code to Kubernetes: use the Quarkus CLI or code.quarkus.io to generate a project (over 500 extensions available), run… | ||
| Enforcing a Secure Supply Chain on Kubernetes | Raúl Cabello Martín, Víctor Cuadrado Juan | 35m |
Shows a working pipeline that signs container images and Wasm policies with cosign and records certificates in Fulcio and Rekor, storing signatures in the OCI… | ||
| Kubernetes Security After Pod Security Policies Removal | Raúl Cabello Martín, Víctor Cuadrado Juan | 36m |
PSP resources get deprecated in Kubernetes 1.25 so cluster operators must replace them with namespace-level pod security labels (enforce/audit/warn) — three… | ||
| How Global Discovery tribe approaches Infrastructure Changes at scale | Pravar Gauba | 14m |
Claims a reproducible Terraform workflow that scales from a single user to dozens/hundreds by generating module-backed configs and centralizing plans and… | ||
| Making your application multicloud ready with DAPR | David de Hoop | 34m |
Dapr is a sidecar runtime that exposes HTTP/gRPC APIs and runs a sidecar per service to abstract cloud services. Demo saves state to a Redis state store and… | ||
| Medik8s - The Medical Toolkit For Your Kubernetes Cluster | Marc Sluiter | 23m |
medicaids provides automated node failure detection, safe fencing and fast remediation for Kubernetes by combining a node-healthcheck operator that creates… | ||
| Falco meets MITRE - Run any Falco Installation against Atomic Red | Stefan Trimborn | 27m |
Runs Atomic Red Team attacks as a Kubernetes job against a standard Falco install, using an Ubuntu test image with PowerShell and attacker tools, and triggers… | ||
| Maximizing development experience by minimizing cost | Sacha Bernheim | 32m |
Builds on Argo CD + Argo Image Updater and uses ApplicationSet to spin preview apps per PR while using Istio virtual services to route by header. Baseline… | ||
| Creating a cloud native serverless web app – An AWS project reference | Dennis Creutz | 29m |
Cloud-native serverless web app for a German EV charging grant is implemented with React TypeScript + AWS Amplify, Amazon Cognito for auth, API Gateway +… | ||
| Edge-Native: The new paradigm for operating and developing Edge Apps | Frank Brockners | 33m |
Claims that cloudlike devops work at the edge by treating location as a scaling dimension, not just processes, and that many edge use cases now include AI/ML… | ||
| Simplifying cloud-native continuous delivery at scale | Amir Golan | 30m |
Ocean CD is a Spot by NetApp continuous delivery product that layers on Argo Rollouts to run canary releases across multi-cluster SaaS environments… | ||
| Kubernetes: Reducing Infrastructure cost and complexity | Kevin McGrath | 34m |
Claims that pods drive infrastructure: Ocean by Spot provisions worker nodes to match pod CPU/memory/GPU/taints and predicts spot reclaim events to prefill… | ||
| Multicluster Kubernetes, today and tomorrow | Laura Lorenz | 38m |
Defines a cluster set as clusters with shared trust and names and outlines four concrete pain points: config drift, scheduling/workload placement… | ||
| How To Make Your Application Developers Fall In Love with Kubernetes & Cloud Native Applications | Lukonde Mwila | 32m |
Shows a concrete workflow that keeps developers fast: localize the local inner loop with Rancher Desktop and Skaffold, run a Node.js app with automatic builds… | ||
| I was a Happy Windows Admin until Containers came along | Geoff Burke | 13m |
Claims that an admin can transition by doing a sober skills inventory, using free training and a local distro to practice. Recommends free sites named in the… | ||
| Cloud Security from Scratch | Mike Milner | 12m |
Shows how a brand new greenfield AWS account is hooked to Cloud One Conformity with a CloudFormation stack that creates IAM roles and starts automated checks… | ||
| How I made a powerful cache system using Go | Sylvain Combraque | 37m |
A cache proxy called swan is written in Go and ships as middleware for Traefik, Caddy and others, using Badger or pluggable providers and a YAML config. It… | ||
| Zero Trust Security with Service Mesh | Viktor Gamov | 29m |
Zero trust implemented with the open‑source Kuma control plane (now in CNCF sandbox) issues certificates via a built‑in CA, programs sidecar proxies using… | ||
| Smooth Sailing: Kubernetes and Modern Applications with Nutanix Cloud Platform | Aaron Delp | 23m |
Claims that Nutanix Cloud Platform removes Kubernetes complexity by a five-step stack: pick location (HCI, bare metal, public cloud), pick distribution… | ||
| Kubernetes is awesome – but … | Philip Welz, Nico Meisenzahl | 39m |
Asks three concrete readiness questions: do I need Kubernetes?, does my workload fit (stateless, 12‑factor, scales per request), and do I have the manpower to… | ||
| Kubernetes, created for fast deployment, connectivity and ease of use | Rene Fleissner | 29m |
Kubernetes security case for an agentless snapshot approach that reconstructs VMs and containers via cloud APIs and the Kubernetes API, claims onboarding per… | ||
| The SolarWinds Hack and the Executive Order on Cybersecurity happened | Sven Ruppert | 37m |
Explains that the SolarWinds backdoor is an example of CI-corrupted builds and argues software supply chain defense focuses on traceability and hardening three… | ||
| How To Mimic ArgoCD GitOps in Your Local K8s Cluster | Karthikeyan Govindaraj | 26m |
Shows how to run a full Argo CD GitOps control plane locally by bootstrapping Argo CD and a local Gogs git server into a Kind cluster with a tiny CLI, pushing… | ||
| How Containers Complicate Successful Cloud Native Transformation | Felix Evert | 27m |
Claim: treating software containers as literal shipping containers skews decisions and stalls cloud native programs — teams end up with Kubernetes clusters and… | ||
| How to build, deploys and maintains a globally distributed modern platform | Eddie Wassef | 42m |
Argues that GitOps plus OSS delivers repeatable, auditable platforms by putting everything in Git, using tools like Cloud Native Buildpacks, Crossplane… | ||
| Integrating Cloud Native Security into the SRE culture | Anais Urlichs | 31m |
Argument: SRE practices map directly to security needs, demonstrated by installing the Trivy operator via Helm into a Kubernetes test cluster, wiring its… | ||
| Building A Robust Cloud-Native Data Discovery And Delivery Platform | Karthikeyan Govindaraj | 21m |
A cloud-native MVP that indexes vendor datasets as per-dataset containers on Kubernetes, uses a metadata/query engine to extract fields, passes metadata… | ||
| Towards Cloud Native Platforms | Lothar Wieske | 35m |
Claims that Gartner forecasts 95% of new digital initiatives on cloud native platforms by 2025, and prescribes a practical path: start with a few… | ||
| Building a Cloud Native Edge Platform for Accelerating AI Inference | Janakiram MSV | 26m |
A compact, working edge inference stack that runs on a four‑node Jetson cluster using Jetson Mate with 4 Jetson Nano modules, k3s and a shared NFS PVC for… | ||
| Identity with certificates in Kubernetes | Akshat Khanna | 22m |
Explains how Kubernetes authenticates components by signing CSRs using a cluster CA, demonstrates generating keys and CSRs with cfssl (also mentions OpenSSL)… | ||
| BEYOND DevSecOps – Future Journey of Security Controls | Michael Claaßen | 18m |
Gartner names CNAP in Gartner Aug 2021 as the way to get a single application risk view by consolidating existing tools rather than replacing them. It ingests… | ||
| Real-time adaptive controls for resilient container workloads | Praveen Yedidi | 18m |
Engineered an adaptive control layer for Kafka-to-Cassandra workloads that infers capacity from runtime feedback and adjusts worker concurrency, rate limits… | ||
| Should I open source this code? | Emily Omier | 30m |
Provides a practical decision framework: first confirm legal and business clearance, then map personal and organizational goals (hiring, collaboration… | ||
| Moving & managing k8s persistent data across clusters and cloud | Daniel Paul | 29m |
Portworx presents a containerized software defined storage layer that pools local block devices on Kubernetes nodes, exposes PVs, and supports snapshots… | ||
| IPv6 / Dual-Stack in Kubernetes - Why, When, Where and How? | Rastislav Szabo | 32m |
Kubernetes supports dual-stack GA in Kubernetes 1.23 but it requires worker nodes with both IPv4 and IPv6, control plane CIDR and API server settings for both… | ||
| GitOps for the people | Lian Li | 34m |
200-engineer fintech with siloed QA, divergent dev/stage/prod stacks, and an approvals bottleneck moves to Kubernetes/OpenShift plus mandatory automated tests… | ||
| Closing the Developer Experience Gap of your Container Platforms | Timo Salm | 36m |
Focuses on closing the gap by shipping concrete tooling and workflows: use kpac image builds from git with one CLI command to produce layered, buildpack images… | ||
| What is resilience engineering? | Piet van Dongen | 32m |
Distinguishes robustness (redundancy, failover, retries) from resilience and claims robust designs fail against unknown unknowns; shows Chernobyl as a cascade… | ||
| An almost perfect match: cloud native and scientific computing | Ricardo Rocha | 36m |
CERN migrates decade‑old analysis into containers and Kubernetes, runs a 70 TB, 25,000‑file dataset as 25,000 single‑core jobs on a 25,000‑core cluster to… | ||
| GitOps in Pratice | Vijay Dharap | 16m |
Shows concrete Argo CD promotion patterns: Dev uses helm wildcard tracking or branch-tracking to auto-deploy every new commit/version; Stage uses git tag… | ||
| Observability from 0 to 100 | Nico Krijnen | 36m |
Shows a concrete Elastic-based rollout: install agents as a daemonset managed by Elastic Fleet, enable ECS JSON logs to avoid costly Logstash processing, add… | ||
| eBPF for Runtime Security | Liz Rice | 36m |
eBPF loads small programs into the kernel to observe and act on process, file and network events; observability uses maps and userland readers while security… | ||
| What's going on in my cluster? | Matthias Haeussler | 36m |
Shows concrete paths to visibility: query the Kubernetes API with kubectl or tools like K9s, Octant, Lens for non‑intrusive health checks; inject Envoy via… | ||
| The journey towards K8s at Deutsche Bahn | Gualter Barbas Baptista | 36m |
Deutsche Bahn moves out of its own data centers to AWS and Azure and finishes the cloud migration by 2020, then buys OpenShift shared clusters as an entry… | ||
| Confidence with Chaos for your Kubernetes Observability | Michael Friedrich | 37m |
A demo app intentionally leaks a 1 MB receive buffer on DNS resolver errors and a scheduled chaos mesh experiment injects DNS errors and CPU/memory stress… | ||
| Hijack a Kubernetes Cluster - a Walkthrough | Nico Meisenzahl | 35m |
Exploit uses Log4Shell via LDAP/JNDI to trigger a remote class load (public POC LDAP+HTTP server), spawns a reverse shell (netcat on 443), reads the in‑pod… | ||
| Cloud confused - differences between public cloud vendors | Adelina Simion, Artur Kondas | 11m |
Comparison lists concrete differences: EKS most used for managed Kubernetes citing manual config and upgrades, Lambda least cold start and widest HTTP… | ||
| Running Secure AI/ML Experiment in a Unified MLOPS-DevSecOps Pipeline | Nidaa Saffarini | 26m |
Covers concrete ML‑Ops hardening: pipeline levels from training-only to end‑to‑end CI/CD, model registry and feature store additions, and a checklist of… | ||
| Building Digital Twins for DFDS With Crossplane and Kubernetes | Matthias Lübken, Tobias Andersen | 36m |
Concrete implementation shows Crossplane on Kubernetes modeling digital twins for DFDS by mapping prototypes, instances and aggregates into composed resources… | ||
| Call me maybe - communication between microservices | Adelina Simion, Artur Kondas | 34m |
Compares REST, gRPC and event buses with a hands on Go demo that creates and fetches a simple "human" object up to 500k entries, measures local benchmarks and… | ||
| Stateful vs Stateless Container Patterns in Kubernetes, a Deeper Analysis | Nicolas Vermande | 37m |
Kubernetes distinguishes patterns with concrete guarantees: volumeClaimTemplates give one PVC per StatefulSet pod and preserve a stable ordinal identity, while… | ||
| Predictive autoscaling patterns in Kubernetes | Roberto Carratala, Germán M Yébenes | 34m |
Shows a working Vertical Pod Autoscaler setup that reads Kubernetes metrics and automatically adjusts pod requests and limits so a memory‑stressed demo app… | ||
| Kubernetes As A Service with GitOps | Jimmi Dyson | 33m |
Shows a concrete flow: use kind to create a bootstrap cluster, run cluster API controllers (clusterctl) to provision a kubeadm-based workload cluster on… | ||
| Kubernetes made simpler - Using and developing Kubernetes Operators | Corvin Schapöhler | 35m |
Explains that Kubernetes extensions use custom resources plus controllers to automate actions, demonstrates the Azure Service Operator creating a resource… | ||
| KubeVirt - making running virtual machines in a k8s cluster | Daniel Hiller | 32m |
KubeVirt makes existing VMs first-class Kubernetes objects: disk images convert to raw and land in a PVC, QEMU/KVM runs the VM, and CDI upload proxy handles… | ||
| The future of CRDs in a post-cluster world | Sebastian Scheele, Stefan Schimanski | 36m |
Argues that CRDs alone are insufficient and proposes a post-operator model where service providers publish an API export and clusters consume it via an API… | ||
| Running Kubernetes in a Manufacturing Line | Mario Fahlandt, Tobias Schneck | 37m |
Built a self‑service Kubernetes platform spanning 30 data centers with a centralized management plane in Azure and local "service" clusters per site that host… | ||
| Using Open-Source Software to Secure Cloud-Native Applications | Joseph Yostos | 32m |
Open-source Calico runs as a CNI using BGP and supports IP-in-IP or VXLAN overlays, claiming over 1 million nodes in production and more than a billion agent… | ||
| Evolution of Technology | Torsten Hallmann | 16m |
Timeline links show specific intervals: 71 years from Edison bulb to residual current device, 48 years from Benz car to systematic crash tests, and 42 years… | ||
| Containers and Kubernetes are here - ok, but what’s next? | Sebastian Scheele | 10m |
Containers and Kubernetes are mainstream but only about 5% of apps are cloud native in production, many organizations run dozens to hundreds of clusters… | ||
| K8s, created for fast deployment, connectivity and ease of use | Rene Fleissner | 16m |
Rapid-growth fintech on AWS/Azure/GCP faces mass misconfigurations, unapproved images and an expert shortage, so Orca Security claims agentless side scanning… | ||
| Lessons Learned from Writing Thousands of Lines of IaC | Eran Bibi | 28m |
Shares concrete Terraform practices from thousands of lines of IaC: use reusable modules and DRY modules with versioning, query cloud state via data sources… | ||
| Cloud Hacking Scenarios | Michal Brygidyn | 33m |
Shows concrete attack chains: credentials in HTML and git (regex finds AKIA keys), GitHub secrets lead to Office365 logins then a SharePoint PDF with Jira… | ||
| K8s meets confidential computing - the different ways of scaling sensitive workloads | Moritz Eckert | 30m |
Edgeless Systems outlines three concrete ways to run sensitive workloads: Intel SGX for process-level enclaves (requires SDKs, device drivers, and app… | ||
| Hobbyfarm - an OpenSource Kubernetes Training Environment | Enrico Bartz | 27m |
Hobby Farm is an open source platform that provisions per-student VMs via Terraform-backed VM templates, hands students a root shell tunneled into the browser… | ||
| Not so graceful: K8s node failure and stateful workloads | Fabian Born, Hendrik Land | 33m |
Demo uses BusyBox containers on a 3‑node cluster with 4 pods (2 deployments, 2 statefulsets) and PVCs on NFS/iSCSI via CSI (NetApp Trident mentioned). Stopping… | ||
| How To Build Kube-Native CI/CD Pipelines for Containerized Databases | Nicolas Vermande | 36m |
Shows a full kube native CI CD that actually builds and deploys a containerized database using Tekton, Kaniko, Kustomize and Flux, with storage provided by… | ||
| Do's and Dont's moving to Golang Microservice Architecture | Aliénor Latour, Donia Chaiehloudj | 15m |
Migrating a monolith into Go services uses Go, Docker, Kubernetes and C++ interop but poor boundaries create a single service with 40 endpoints that becomes… | ||
| OpenTelemetry: The Vision, the Reality and How To Get Started | Dotan Horovits | 15m |
Companies use 5 to 10 tools on average to collect logs, metrics and traces and the talk claims OpenTelemetry replaces that fragmentation with a vendor‑agnostic… | ||
| 5 Security Best Practices For Production Ready Containers | Martin Wimpress | 29m |
Shows concrete results: starting image with ~937 MB and >1,000 vulnerabilities shrinks to ~25 MB with zero known vulns by combining Docker Slim minification… | ||
| When Kubernetes Misbehaves – Pitfalls and Lessons Learned | Itiel Shwartz | 29m |
Live debugging recipe: add distributed tracing, metrics and logs to avoid blindfolded troubleshooting. Mizu tracing reveals the request hops and immediately… | ||
| Using Renovate to keep your version dependencies updated | Christian Hörl | 33m |
Renovate automates dependency updates on self‑hosted GitLab using Renovate Runner and a scheduled pipeline that finds updates in Dockerfiles, docker‑compose… | ||
| Hardening automation with Kubespray - A journey into the open-source security world | Alessio Greggi | 19m |
Uses Kubespray plus kubeadm to automate CIS hardening and land concrete patches: adds CIS 1.9 support, implements a configurable event rate limit admission… | ||
| From a data center to a private cloud (DATEV eG) | Jürgen Sußner | 31m |
DATEV turns legacy data centers into a private cloud by running Cloud Foundry and Kubernetes on VMware vSphere, operating about 10,000 application instances… | ||
| 56 dog years as a cloud native | Andrew Randall | 32m |
Chronicle of building an IP‑based alternative to fragile SDN overlays: Calico advertises routes with BGP instead of virtual switching, launches July 2014 into… | ||
| Incorporating Security into Platform Engineering: The Dos and Dont’s | Anais Urlichs | 21m |
Argues that platform teams must integrate security across the dev lifecycle by embedding scanners at dev, repo, image, IaC, CI/CD and in-cluster stages and by… | ||
| Writing Kubectl plugins using WebAssembly | Flavio Castelli | 15m |
Claim: kubectl plugins compiled to WebAssembly run from a single target and are smaller and safer. Built a manager/runtime called crew wasn't that downloads… | ||
| Composition of containers - A design pattern for applications running on K8s | Rachit Arora | 30m |
Demonstrates splitting huge application images (some >20 GB) into separately versioned containers so fixes and scans target only the small image that changed… | ||
| GitOps on the Edge: Maintaining Infrastructure of Sovereign Clients | Steven Berlin, Uwe Bessle | 35m |
Customer implements GitOps on-prem for 280 potential edge sites with sovereign clients and banned public cloud, replacing zip scripts with a git repo, package… | ||
| Reverse K8s resources: from YAML to Go structs | Jan Wozniak | 27m |
A CLI named reverse-kube-resource converts YAML Kubernetes manifests (Helm, Kustomize) into buildable Go code that uses upstream API packages, preserving only… | ||
| Air Traffic Control speaks Cloud Native | Florian Rätzer, Christian Dorge | 34m |
Phoenix web innovation migrates a legacy radar and flight‑plan system into containers while keeping the high‑performance Phoenix tracker as a core; a new web… | ||
| Cracking Microservices Performance Issues with Distributed Tracing | Dotan Horovits | 40m |
Distributed tracing demo uses Jaeger with OpenTelemetry and a Hot Rod sample app to find concrete bottlenecks: a customer-service span shows a 1.18s lock wait… | ||
| Our Journey to Kubernetes at Scale | Michael Vogeler, Tobias Schipka | 17m |
Company moves Kubernetes from VMware vCloud Director one-shot installs to an automated productized platform. Early build uses VMware with static edge-gateway… | ||
| Stop configuring infrastructure, start coding it! | Robert Hoffmann, Guillaume Molitor | 36m |
Shows how CDK (and alternatives like Pulumi or cdktf) replaces ~300 lines of YAML CloudFormation with ~30 lines of code by using L2/L3 constructs to build a… | ||
| FIND, FOCUS, and FIX the Container and Cloud Threats that Matter | Stefan Trimborn | 33m |
Open-source Falco runs as a DaemonSet or host service, captures syscalls via eBPF kernel modules, and matches events against custom Falco rules (demo shows a… | ||
| Detection of vulnerabilities and misconfigurations in production images | Timo Pagel | 33m |
Built a cluster image scanner that pulls deployed images from multiple Kubernetes clusters across AWS Azure and GCP and scans them with… | ||
| Protect against unknown security vulnerabilities | Bastian Hofmann | 38m |
Open-source new Vector hooks into CI/CD and registries for continuous image scanning, offers admission-control rules, and runs a node-level enforcer that… | ||
| Unifying Policy Observability in Kubernetes | Frank Jogeleit | 24m |
A tool called policy Reporter collects and normalizes PolicyReport CRD outputs from scanners and admission controllers like calvano trivy falco and kube-bench… | ||
| End-To-End GitOps | Viktor Farcic | 34m |
Argues GitOps should manage more than Kubernetes apps and demonstrates using Flux + Crossplane to provision infrastructure, clusters and databases from YAML… | ||
| Event-Driven Architecture - A successful strategy for a journey to the cloud | Mirna Alaisami | 31m |
A cloud migration implements an event-driven pipeline using Azure Event Hubs (Kafka endpoint), Azure Schema Registry, and Azure Blob Storage + Key Vault for… | ||
| Container Security, capabilities an seccomp profiles | Alberto Losada Grande, Mario Vázquez | 38m |
Explains concrete demos with podman and Kubernetes showing that adding CAP_NET_BIND_SERVICE via runtime flags works for non-root containers but ambient… | ||
| Service Mesh beyond single clusters | Stephan Fudeus, David Meder-Marouelli | 41m |
Platform implements Istio for cross-cluster networking and mesh expansion, using dns interception (enabled in Istio 1.11) to make Kubernetes DNS visible to… | ||
| Cloud Native Applications with Remote Development Environments | Ramiro Berrelleza | 44m |
Claim: run full dev stacks on Kubernetes so developers get local-speed feedback with production fidelity. The open source CLI octeto deploy + octeto up reads… | ||
| Distributed applications and Kubernetes | Matthias Haeussler | 34m |
Comparison of options for distributed apps: framework-level patterns (Netflix OSS like Eureka Hystrix Ribbon or Spring Cloud) require code changes but stay… | ||
| nothing matches | ||