KCD Guatemala 2023
2023-08-19..2023-08-20
Guatemala City, Guatemala
who it's for
kubernetes engineers, platform engineers, devops engineers, site reliability engineers, security engineers, cloud infrastructure engineers, developer tooling engineers, observability engineers
topics
GitOps with Argo CD; Kubernetes RBAC and admission; Secrets Store CSI with Azure Key Vault; Thanos for Prometheus HA; multi-cluster cloud-native management; Helm operators for microservices; Prometheus and Grafana on EKS; WebAssembly runtimes and deployment; Kuma universal service mesh; KubeArmor security policies; CKAD CKA exam strategies; Cloudflare Tunnel ingress
| title | author | length |
|---|---|---|
| Keynotes - Day 1 | Pedro Galván, Christian Meléndez | 01h 10m |
One case study analyzes Kubernetes contribution and career pathways in Latin America, naming contributors like Rappi, MercadoLibre, Bitso and Nubank, and… | ||
| Master the CKAD and CKA Exams: Tips and Tricks | Paco Bernabé | 40m |
A practical roadmap for passing Kubernetes certification exams CKAD → CKA → CKS: study in that order, run iterative hands‑on labs (watch a video then do the… | ||
| GitOps, Extending DevOps to Kubernetes and Beyond | Alejandro Mercado | 35m |
An introduction to GitOps covering its principles and workflow patterns, showing how to implement GitOps to run Kubernetes in production and at scale. The talk… | ||
| Simplifying the Tools You Need to Manage Infrastructure at Scale | Alejandro Núñez, Civo | 23m |
An open-source CLI written in Go unifies many separate infra CLIs into a single binary that uses Kubernetes-like commands. It manages multiple clusters… | ||
| Kubernetes RBAC Security: A Practical Overview | Carol Valencia | 31m |
Shows practical Kubernetes RBAC security issues: public API endpoints can reveal version/health and, if misconfigured, allow listing of pods, secrets and… | ||
| Wrap Up - Kubernetes for Humans | Flynn | 01h 00m |
Describes how technologies Emissary‑ingress and Linkerd prioritize adapting infrastructure to human needs by inferring routing and hiding YAML complexity so… | ||
| Exploring Argo | Diana Menendez | 27m |
Argo CD is presented as a declarative continuous delivery tool for Kubernetes that pulls updated code from Git repositories and directly deploys it to… | ||
| Securing Secrets in Kubernetes with Secret Provider and Azure Key Vault | José Manuel Ordoñez | 50m |
Describes securing Kubernetes secrets by using the Secret Provider Class (Secrets Store CSI) together with Azure Key Vault: explains the features of that… | ||
| Tunneling your Ingress | Manuel Pinot | 33m |
Explains how to create secure tunnels to expose services through Kubernetes Ingress, covering tools and techniques for tunneling traffic into an Ingress… | ||
| WebAssembly: Everywhere All at Once | Alvin Estrada | 34m |
Shows WebAssembly’s evolution from assembler to running a compiled Fibonacci function in a browser-based editor, demonstrating practical compilation and… | ||
| Current CNCF Landscape + Closing | Jossie Bismarck Castrillo Fajardo | |
An overview of the current CNCF ecosystem, describing the variety of CNCF projects and tools and giving detailed explanations of the most important ones. It… | ||
| How to fight misconfiguration and bad intentions with Kubernetes admission policy | Victor Farcic | 35m |
Kubernetes now includes Validating Admission Policy (beta, heading toward GA) and works through admission controller stages: auth, mutation, schema check, then… | ||
| Develop Directly on Kubernetes with Okteto | Ramiro Berrelleza | 38m |
Okteto is demonstrated by deploying a three‑microservice “Taco Shop” app to a real Kubernetes cluster (Civo) with LocalStack simulating AWS. The demo shows… | ||
| Kubernetes: Business Challenges | Viktor Farcic, Jorge Luis Andrade, Erick Quiñonez | 23m |
Viktor Farcic explains using Policy-as-Code and Internal Developer Platforms to reduce risks from misconfiguration or malicious actions by combining Kubernetes… | ||
| Thanos: Prometheus in HA Mode with Persistent Storage | Gerado López, Fabrizio Sgura | 37m |
Describes replacing an expensive enterprise monitoring stack by deploying Prometheus + Thanos on k3s (Rancher-managed) with Grafana, using external_labels per… | ||
| KubeInception: running up to a thousand clusters in the real Cloud-Native way | Dario Tranchitella | 37m |
Kamaji is an operator that runs control planes as pods inside a management cluster, uses Cluster API for worker VMs, and treats etcd as a sharded multi-tenant… | ||
| Databases with Kubernetes | Juan Pablo García Monzón | 29m |
Explains benefits of running databases on Kubernetes, covering examples like MySQL and MongoDB and also newer NewSQL systems. Describes how these databases can… | ||
| Kubernetes Security: Horror Stories to Help Secure Your Cluster | Pablo Fredrikson | 33m |
Examines two real Kubernetes security incidents and their fixes: an externally exposed dashboard behind a public load balancer that allowed anyone to launch… | ||
| Custom Microservices Deployments Using Helm Operators | Douglas Lopez | 40m |
Explains how to deploy custom microservices using Helm Operators for Kubernetes. Covers using Helm charts and the Operator pattern to package and manage… | ||
| Generating JVM Deployment Plans with Eclipse JKube | Victor Orozco | 38m |
Eclipse JKube automates creating JVM microservice deployment manifests using Maven or Gradle, handling container builds, generating dynamic deployment plans… | ||
| Kong Meetup: Kuma the Universal Service Mesh | Jossemar Cordero, Alvin Estrada | 20m |
Kuma is presented as an open-source, platform-agnostic control plane for managing service mesh and microservices across Kubernetes, virtual machine, and… | ||
| Observability-Driven Development with Kubernetes | Sebastian Choren | 43m |
Describes using Tracetest with OpenTelemetry on Kubernetes to make integration tests assert on distributed traces instead of internal code. Shows a concrete… | ||
| KubeArmor: Applying Security Policies with Practical Examples in K8S | Xavier Llauca | 28m |
KubeArmor enforces runtime security policies for Kubernetes using eBPF and AppArmor to monitor and block behavior. The demo deploys a vulnerable web pod… | ||
| Panel: Choosing a Technology Without Being a Fan | Sergio Mendez, Diego Figueroa, Victor Marroquín | 32m |
A panel discussion about choosing technology without bias, focusing on practical criteria for selecting cloud-native tools and platforms rather than following… | ||
| Demystifying Kubernetes Failure Scenarios Caused by etcd | William Caban | 31m |
Examines how the distributed datastore etcd affects Kubernetes scalability, stability, and fault scenarios by analyzing etcd configuration, relevant… | ||
| Implementing Prometheus and Grafana in a Kubernetes Cluster on EKS | José Flores | 30m |
Shows a step-by-step recipe to build observability on Amazon EKS: create an EKS cluster with eksctl while enabling OIDC, grant permissions using OIDC + IAM… | ||
| GitOps for Infrastructure on AWS | Carlos Santana, Ramón Ramirez | 36m |
Shows how to use GitOps to declare and automatically provision AWS infrastructure and a Kubernetes-based JupyterHub from YAML in Git, using open-source tools… | ||
| Knative, the Serverless That Isn't Serverless | Jorge de León | 31m |
Knative is presented as a platform that reproduces many serverless behaviors but isn’t true pay-per-use because it still needs a running Kubernetes cluster and… | ||
| The Power of a Unified Testing Approach in Kubernetes | Alejandra Thomas | 33m |
Testkube is a Kubernetes-native test executor (a CRD) that runs inside the cluster and launches tests as Kubernetes Jobs using Docker executor images for… | ||
| Panel KCDs & CNCF Groups | José Flores | 01h 03m |
Community organizers describe launching and running Cloud Native meetups across Central America, detailing low‑attendance early events (three attendees at the… | ||
| nothing matches | ||