KCD Italy 2021
2021-11-17..2021-11-18
-- online --
who it's for
kubernetes operators, platform engineers, site reliability engineers, cloud engineers, security engineers, backend developers, devops engineers
topics
Velero backups and migration; restic-style cross-cloud snapshots; WebAssembly policy engine; OCI-hosted policy modules; OpenTelemetry for policy tracing; Knative services auto-scale-to-zero; Knative eventing integrations; reinforcement learning for tuning; Liqo virtual nodes with WireGuard; deliberate namespace strategies; kubernetes privilege escalation attacks; kube-green sleep scheduling operator
| title | author | length |
|---|---|---|
| Kubernetes Backup and Migration Strategies with Velero | Ramiro Alvarez Fernandez | 34m |
Shows a hands-on recovery of a Ghost blog using Velero + rustic with backups stored in an S3 bucket, demonstrating AWS -> GKE migration. Backups capture CRs… | ||
| Kubernetes Policy As Code using WebAssembly | Flavio Castelli | 41m |
A Kubernetes policy engine executes policies compiled to WebAssembly modules so policies can be written in Go, Rust, Rego or TypeScript, packaged as OCI… | ||
| Knative goes beyond serverless | Alexandre Roman | 30m |
Knative runs full Spring Boot and Node.js apps as Kubernetes services, not just functions: a Vue frontend and Spring Boot backend convert from Deployments to… | ||
| Optimize Kubernetes costs while matching your application SLO using AI | Stefano Doni | 42m |
Explains Kubernetes resource management challenges that lead to high infrastructure costs and performance problems for microservices, and analyzes those… | ||
| Multi-clusters made easy with Liqo: getting rid of your clusters by keeping them all | A. Palesandro | 39m |
Liqo is an open-source system that creates a virtual Kubernetes cluster spanning multiple real clusters (on-premises or cloud managed like AKS, EKS, GKE) to… | ||
| OMG Namespaces! | Raffaele di Fazio | 35m |
Covers surprising Kubernetes namespace behaviors: documentation changes to the namespace definition, a special default namespace that auto-recreates a… | ||
| Stranger Danger - hack my misconfigured Kubernetes | Matt Jarvis | 44m |
Starts from a web app with remote command execution and uses curl to read in-pod env vars and the auto-mounted service account token, then configures kubectl… | ||
| You Shall Not Pass! Policy Compliance with OPA Gatekeeper | Niccolò Raspa | 41m |
Kubernetes policy enforcement using Open Policy Agent Gatekeeper: explains how admission controllers work, describes OPA Gatekeeper’s architecture, and shows… | ||
| Cloud Native resiliency patterns from the ground up | Ana-Maria Mihalceanu | 41m |
Two small Quarkus microservices (activity + UI) demo application-level circuit breaker tuned to open at 75%, timeout 250 ms with retries every 100 ms and… | ||
| Kube-Green | Davide Bianchi | 46m |
Kube-Green is an open-source Kubernetes operator that saves resources by putting workloads to sleep: it uses a SleepInfo custom resource to set Deployment… | ||
| nothing matches | ||