KCD New York 2024
who it's for
platform engineers, kubernetes operators, site reliability engineers, cloud architects, security engineers, observability engineers, open source maintainers
topics
vcluster virtual clusters; containerd runtime internals; OpenTelemetry Collector configuration; ambient mTLS with Istio Z tunnel; Kafka and Redpanda networking in Kubernetes; Kanister application consistent backups; Kubernetes release engineering and provenance; proactive availability prevention and incident knowledge graphs; Wasm support in Kubernetes; cloud native policy as code; Kubernetes cost optimization trends; running low latency workloads on Kubernetes
| title | author | length |
|---|---|---|
| Keynote: Scaling Cloud Native Adoption | Taylor James Dolezal | 12m |
Practical playbook for scaling CNCF adoption with concrete examples and numbers: adoption hits 87,000+ community members, projects used include Kubernetes… | ||
| Keynote: How To Be A Good Landlord: Making Your Kubernetes Tenants Happy | Lukas Gentele | 05m |
Platform teams face either hundreds or thousands of clusters or cramped namespaces; the concrete alternative shown is an open source tool launched in 2021… | ||
| Keynote: Boost Your Career with the CNCF Community | Julia Furst Morgado | 13m |
CNCF membership accelerates learning and visibility through concrete actions: join the CNCF Slack, pick a project and start with documentation and translation… | ||
| Keynote: Observability in the Next Decade, Beyond Reactive Response | Fawad Khaliq | 05m |
A pager rings 91 times over two hours after a customer deployment illustrating repeated infrastructure breakage, not app tests, as the root cause. The talk… | ||
| Keynote: Releasing a More Mature and Stable Kubernetes | Stephen Augustus | 19m |
Kubernetes release engineering describes moving from a fragile 5,000-line bash pipeline to Go tooling, migrating artifact signing off a Google GCS bucket to… | ||
| Keynote: Future-Proofing Kubernetes | Steve Giguere | 06m |
Firsthand account of migrating to Kubernetes 1.10 and the security gap that followed, backed by concrete artifacts: the 28-page K8s cheat sheet and the… | ||
| Is My (Open Source) Project Safe? | Stephen Giguere | 17m |
Scans of 30,000 repos identify 7,000 using GitHub Actions and a followup analysis of those 7,000 shows concrete exploit chains. Techniques demonstrated include… | ||
| Kanister.io: a CNCF.io Sandbox Project for Application Consistent Backups | Daniil Fedotov | 31m |
Kanister is a CNCF Sandbox controller that runs backup logic as Kubernetes CRDs and actually captures application consistency rather than just volumes, using… | ||
| Five things you need to know about your container runtime | Phil Estes | 32m |
Focuses on the runtime actually in use: containerd as the common CRI implementation that delegates to runC, relies on the OCI specs for image and runtime… | ||
| Controlling data overhead from the OpenTelmetry Collector | Nočnica Mellifera | 28m |
OpenTelemetry Collector configuration reduces telemetry volume and strips PII by running processors that drop debug logs, normalize variant keys into canonical… | ||
| Network Configurations for High-Performance Streaming Connectivity in K8s | Paul Curtis, Christina Lin | 30m |
Hands-on comparison of Kafka/Redpanda networking in Kubernetes using sockperf on a three-node EKS cluster (m5.2xlarge): nodePort yields the lowest latency… | ||
| Embracing the Future: The Effortless Mutual TLS and Traffic Control Without Sidecars | Lin Sun | 30m |
Ambient mode for Istio delivers sidecar-less mTLS and Layer‑7 controls by running a per‑node Rust Z tunnel plus optional per‑tenant Waypoint proxies, avoiding… | ||
| Running Low-Latency Workloads on Kubernetes | Jimmy Zelinskie | 31m |
Practical playbook for running SpiceDB-style, single-digit-millisecond network services on Kubernetes: shows benchmarks (hit ~1M QPS, P95 ≈5 ms), concrete code… | ||
| How to eliminate availability risks and perform timely upgrades | Fawad Khaliq | 26m |
A SaaS platform called Check codifies real incidents into an availability risk signature database and a Knowledge Graph, scans upstream-compliant Kubernetes… | ||
| Cloud Native Policy as Code: Principles and Best Practices | Jim Bugwadia, Sagar Kundral | 32m |
Cloud-native policy here means declarative Kubernetes configs that manage other configs; Kyverno is shown running as an admission controller, offering mutate +… | ||
| Leveling Up Wasm Support in Kubernetes | Matt Butcher | 33m |
Argues that WebAssembly becomes a third wave of cloud compute alongside VMs and containers, claiming half a millisecond cold start and orders-of-magnitude… | ||
| Breaking down the principles of platform engineering | Cedric Clyburn, Valentina Rodriguez Sosa | 30m |
Shows how a Backstage-driven template pipeline actually creates two GitHub repos (code and GitOps), builds a container with Tekton, publishes it to the… | ||
| Reliability Is Not Just About Balancing Loads | Marino Wijay | 24m |
Asserts that load balancers aren't enough and walks through concrete fixes: right‑sizing to avoid IO exhaustion, guardrails like locked nodes or Tails OS, QoS… | ||
| Unveiling Cloud Native Operational Excellence (CNOE) | Tiara Sykes, Luke Philips | 24m |
Canoe packages an opinionated IDP distribution that boots a GitOps workflow on Kubernetes using IDPBuilder CLI to instantiate a two‑phase setup (CLI plus… | ||
| Uncover Kubernetes cost-optimization trends | Philip Andrews | 33m |
CAST AI's 2024 benchmark analyzes 4,000 clusters across AWS Azure and GCP and finds typical CPU utilization painfully low (most clusters use under 20% of… | ||
| Closing Remarks | Ahmed Bebars, Julia Furst Morgado | 07m |
Announces the scavenger hunt winners and explains a post-event score correction after a QR-code bug caused inflated totals, with one attendee moved from 15,000… | ||
| nothing matches | ||