KCD Los Angeles 2023
who it's for
kubernetes engineers, platform engineers, site reliability engineers, devops engineers, security engineers, edge and IoT engineers, cloud cost engineers
topics
kubernetes RBAC composition and impersonation; immutable Kubernetes OS delivered as OCI images (Kairos); eBPF threat detection and Tetragon-based blocking; minimal k3s sqlite control plane for small teams; local development with kind and Docker image workflows; horizontal pod autoscaling with Prometheus adapter and custom metrics; secrets management with external-secrets, KMS envelope encryption and OPA Gatekeeper; GitOps with Flux and Terraform controller automation; Gateway API (GatewayClass/Gateway/Route) and cross-namespace routing; WebAssembly on Kubernetes with wasmcloud/Cosmonic; Calico eBPF data-plane and connect-time load balancing; cloud cost allocation with OpenCost and Prometheus-based scraping
| title | author | length |
|---|---|---|
| RBAC 101: Basics, Misconceptions, and the Real World | Leigh Capili | 56m |
Covers how Kubernetes RBAC composes: subjects (users, groups, serviceaccounts), Roles/ClusterRoles, and RoleBindings/ClusterRoleBindings; shows using cluster… | ||
| Meet Kairos, an open-source project building the immutable Kubernetes edge | Nicolas Vermande, Jacob Payne | 32m |
Kairos builds an immutable Kubernetes-enabled Linux OS delivered as OCI container images that package kernels and initramfs, and it layers on any distro via a… | ||
| The Next Log4jshell?! Preparing for CVEs with eBPF! | Natalia Reka Ivanko, John Fastabend | 46m |
Claims that eBPF plus an open source agent can detect and block a Log4j-style exploit in real time, using Tetragon to hook syscalls and kernel probes. Demo… | ||
| Minimum Viable Kubernetes | Noah Kantrowitz | 30m |
Argues Kubernetes is practical for very small teams by using minimalist builds like k3s with sqlite control plane on one node, adding nodes as needed, and… | ||
| Welcome to the Cookie Factory! An Illustrated Intro to Kubernetes | Kaslin Fields, Christina Webber | 58m |
Uses a cookie analogy to show how Kubernetes schedules and scales containers and then demos it end to end: creates a Dockerfile for a Node.js app, runs Docker… | ||
| Horizontal Autoscaling with Kubernetes | Rob Richardson | 51m |
Explains exactly how to go from manual kubectl scaling to an HPA using the metric server, showing CPU/memory defaults and why CPU can miss I/O or queue-driven… | ||
| A Confidential Story of Well-Kept Secrets | Lukonde Mwila | 43m |
Kubernetes secrets land unencrypted in etcd by default so a migration from another orchestrator drives concrete choices: use an external secrets manager plus… | ||
| Enhance Your Kubernetes Experience with GitOps & Flux | Priyanka Ravi | 39m |
Flux is presented as a GitOps package manager that actually sets up and reconciles Kubernetes and non‑Kubernetes resources; the demo boots Flux with the… | ||
| Gateway API: The new Kubernetes Ingress that Unifies Load Balancing and Network Configs | Susan Wu, Pierre-Louis Gingembre | 29m |
Gateway API claims to replace Ingress limitations with GatewayClass/Gateway/Route resources that map to real roles (platform admin vs service owner), support… | ||
| WebAssembly: A Recovering Kubernetes Engineer's View of the Future | Taylor Thomas | 50m |
Argues WebAssembly complements Kubernetes rather than replaces it and shows a working wasmcloud stack (using wasmcloud and Cosmonic) running a 49‑line Rust KV… | ||
| Understanding Calico's eBPF data-plane | Tomas Hruby | 44m |
Calico’s eBPF data plane replaces most iptables handling with in-kernel bytecode that bypasses host netns, improving latency and scaling to clusters with… | ||
| Kubernetes Cloud Cost Monitoring with OpenCost & Optimization Strategies | Matt Ray | 57m |
CNCF Sandbox OpenCost is an open specification and tool that maps costs to namespaces and labels, scrapes Prometheus (KSM, cAdvisor, node exporter) and calls… | ||
| Cloud Native Home Lab | Joe Smith | 59m |
Claim: production-grade infrastructure like Canonical MAAS and k3s runs on a few desktops and boots via PXE/UEFI, TFTP and cloud-init. Implementation uses… | ||
| nothing matches | ||