KubeCon + CloudNativeCon China 2018
2018-11-13..2018-11-15
Shanghai, China
[KubeCon + CloudNativeCon China 2018, KubeCon + CloudNativeCon China 2019, KubeCon + CloudNativeCon China 2025]
| title | author | length |
|---|---|---|
| Take the Wheel, Don’t Reinvent It! - Deploying Apps With Helm in 5 Minutes | Christopher Hanson | 05m |
Helm is a Kubernetes package manager that claims to deploy complex apps in minutes by using charts and a client‑server model; helm init creates a service… | ||
| How to Simplify Data Scientist’s Day in Huge Company Using Kubernetes | Igor Khapov | 05m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Designing Kubernetes Clusters That Run on Embedded Devices | Daniele Polencic | 05m |
Describes running Kubernetes components on constrained hardware such as routers, solar-panel controllers and cars, shows a prototype pattern where a kubelet on… | ||
| Kube-Liveboard: Make Your Cluster Visible | Xinkun Xu | 04m |
Kube‑Liveboard ingests apiserver logs in real time and polls the API to produce numeric dashboards that surface concrete bottlenecks: API server request rate… | ||
| Effectively Extending Kubernetes Resources | Fan Zhang | 05m |
Kubebuilder claims to cut CRD and controller development from days of boilerplate to focused work by generating a runnable project with kubebuilder CLI and… | ||
| Canary Deployment With Prometheus | Andrey Markelov | 04m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Kubernetes CI/CD Practices at Meetup | Rui Chen | 09m |
Meetup refactors a JavaScript-heavy monolith into microservices, embeds infrastructure engineers into product teams, and reduced release time from seven days… | ||
| CI/CD Pipelines and Machine Learning | Jeremy Lewi | 05m |
Explains how Kubeflow turns ML setup into a repeatable two‑step flow that generates and applies manifests so clusters, GPU drivers, storage and ML apps… | ||
| Kubernetes Love Machine Learning, Even on Private Cloud | Hui Luo | 06m |
Kubernetes runs machine learning on private clouds by wiring hardware, drivers, runtimes and device plugin plumbing into cluster automation and by using node… | ||
| All About Kubernetes Certification Programs | Christopher Hanson | 07m |
Kubernetes certifications are performance-based exams that require doing real tasks not multiple choice: the CKA is 24 problems in 3 hours (about 7 minutes… | ||
| Upgrading Stateful Sets in Constrained Environment | Kishore Yerrapragada | 05m |
Upgrade of stateful sets succeeds on fixed bare-metal appliances with no shared storage and no extra capacity, running on 20 CPU 128GB boxes and servicing… | ||
| Kubernetes Explained the Easy Way, Using Computer Games... | Steven Trescinski | 06m |
A first‑person shooter is modded to call the Kubernetes API via kubectl proxy and a Lua script, mapping three GKE nodes to fenced areas and showing a… | ||
| Jidproxy: ContainerCI On Kubernetes | Feng Wang | 05m |
JD.COM engineers build Jidproxy to run Jenkins CI on Kubernetes by compiling from source, building container images and pushing them into the registry while… | ||
| From Enterprise Image Registry to Chart Repository | Tan Jiang | 06m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Keynote: Welcome Messages | Liz Rice | 01m |
Announces that CNCF funds 49 diversity scholarship recipients with 14 travel-funded attendees, thanking the program and calling for applause, then ushers in a… | ||
| Opening Keynote: Cloud Native in China | Dan Kohn | 13m |
Conference launches in Shanghai with 2,500 attendees and a sold out inaugural event, cites CNCF growth: three years old, two graduated projects (Kubernetes… | ||
| Keynote: Harbor | Henry Zhang, Alan Ren | 12m |
Harbor is an open source container registry that emphasizes canary images and multi‑platform deployments, claiming to handle image distribution and… | ||
| Keynote: Kubernetes and Other CNCF Projects Overview | Liz Rice, Janet Kuo | 22m |
Kubernetes is described as mainstream with certified conformance for portability and two axes of extensibility: infrastructure plugins and API extensions… | ||
| Keynote: The Cloud Native Ecosystem in China | Tao Ma | 06m |
Alibaba Cloud describes using Kubernetes, containers and continuous delivery to run 1 million canaries and to manage image distribution; a project on GitHub… | ||
| Keynote: Prometheus, Jaeger, and Envoy: The Observability for Today's Enterprises | Priyanka Sharma | 20m |
Claims that enterprises should adopt Prometheus, Jaeger, Envoy (Envoy baked into service mesh), OpenTracing and a central platform like GitLab to tame… | ||
| Keynote: Closing Remarks | Janet Kuo | 01m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Extending Istio - Develop a New Mixer Adapter for Your Monitoring | Wen Tao Zhang, Yang Yang | 35m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Intro: Helm | Taylor Thomas | 27m |
Helm is a Kubernetes package manager that uses charts (packaged templates plus defaults) to install, upgrade and rollback releases; commands shown include helm… | ||
| A Day in the Life of a Data Scientist. Conquer ML Lifecycle on Kubernetes | R. Zhang, B. Redmond | 37m |
End-to-end ML pipeline runs on Kubernetes using Kubeflow, TFJob CRDs, Argo workflows and Helm to spin up experiments; transfer learning on Inception v3 with a… | ||
| Serverless Kubernetes Boosts AI Business | Jian Huang | 44m |
Kubernetes-backed Cloud Container Instance (CCI) is a serverless layer that runs AI workloads with kata containers for tenant isolation, supports NVIDIA GPUs… | ||
| A Year of Democratizing ML With Kubernetes & Kubeflow | David Aronchick, Fei Xue | 36m |
Project hits 0.3 with tooling that actually works: KFctl one-line install and a GCP click-to-deploy that provisions clusters and apps, a Pipelines Python SDK… | ||
| Rage Against the API-Machinery: Writing an Operator for Production | Tom Manville | 29m |
Production operators come from real choices: Kanister and K10 implement the operator pattern and use Go frameworks with code generation… | ||
| A Hybrid Container Cloud With Kubernetes and Hadoop YARN | Jian He, Bushuang Gao | 37m |
Alibaba builds a colocation framework that runs Kubernetes and Hadoop YARN on one cluster, using a control plane that issues commands to per-node agents… | ||
| “KubeGene” a Genome Sequencing Workflow Management Framework | Shenjun Tang | 35m |
KubeGene is an open source workflow framework built on Kubernetes that schedules genome pipelines across hundreds of nodes to manage TB/PB of data; it runs… | ||
| Migrating Enterprise Microservices From Cloud Foundry to Kubernetes | T. Erwin, J. Schweikhart | 26m |
An IBM Cloud UI of about 50 microservices is migrated from Cloud Foundry to Kubernetes, yielding measurable gains in CPU/memory efficiency, private… | ||
| Stop Hitting Yourself! | Michael Russell | 37m |
Finds a 20‑year backup script that silently produces useless dumps because gzip in a pipe masks failures, leaving only about 12 days of valid backups instead… | ||
| Intro: CNCF Interactive Landscape | Dan Kohn | 21m |
An interactive, open source map at l.cncf.io displays filterable data for hundreds of cloud‑native projects by reading a single YAML file and rebuilding a… | ||
| Containerizing Java Applications for Kubernetes With Jib | Qingyang Chen, Appu Goundan | 34m |
Jib is a Maven/Gradle plugin that builds Java container images without a Docker daemon, infers layers (dependencies, resources, classes) and pushes them… | ||
| Protecting Stateful Workloads With CSI Snapshot | Xing Yang, Jing Xu | 58m |
CSI adds a Kubernetes-native snapshot API with CRDs VolumeSnapshot and VolumeSnapshotContent, controller-side createSnapshot/createVolumeFromSnapshot RPCs, a… | ||
| Music Matched to Different Ways to Scale in K8s, What Could Go Wrong? | Ria Bhatia | 21m |
Explains how Kubernetes scaling actually behaves: cluster autoscaler (1,000 nodes × 30 pods test) auto-adds and removes nodes; HPA on requests-per-second with… | ||
| Rust and Skaffold for Iterative Development on Kubernetes | Gastón Kleiman, Gilbert Song | 36m |
Shows an actual workflow: a Rust REST service built with Rocket REST CRUD, containerized with Docker, iterated locally with minikube and a local registry, and… | ||
| Becoming an Expert of Diagnosing a Kubernetes Control Plane Problem | Wenjia Zhang, Joe Betz | 34m |
Shows stepwise diagnostics that find root causes and fixes: use kubectl get/components/nodes/pods, describe, watch, logs and output yaml/json to see missing… | ||
| Configuring Your Kubernetes Cluster on the Next Level | Lucas Käldström | 37m |
ComponentConfig replaces dozens of CLI flags with a single --config file with apiVersion and kind, implements structured, versioned Go types, and automates… | ||
| One-on-One Discussion | Quinton Hoole, Chris Aniszczyk | 23m |
Explains how a nine-member TOC enforces technical gates and votes (two‑thirds supermajority for promotion), with three project stages: sandbox, incubating… | ||
| Intro: Kubernetes SIG Multicluster | Quinton Hoole, Irfan Ur Rehman | 37m |
SIG Multicluster defines APIs and reusable components for managing many Kubernetes clusters at once, with three active projects: Federation v2 CRD API… | ||
| Kubernetes VM Solutions for Multi-Tennant Applications | Guangxu Li, Yanqiang Miao | 54m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Intro: Prometheus | Richard Hartmann, Ben "SuperQ" Kochie | 30m |
Prometheus explains its actual internals: numeric time series (counters vs gauges), a pull model with service discovery, two label sources, and a vector-style… | ||
| Intro: Rook | Jared Watts | 37m |
Rook is a cloud‑native storage orchestrator that deploys Ceph (and now MinIO, CockroachDB, etc.) as Kubernetes operators, automating bootstrap, provisioning… | ||
| Intro: SIG Autoscaling | Marcin Wielgus, Maciej Pytel | 35m |
Overview of Kubernetes autoscaling components and current status with actionable details: Horizontal Pod Autoscaler uses metrics-server for CPU and supports… | ||
| Intro: CNCF Cross-Cloud CI | W. Watson | 17m |
Continuous validation of CNCF projects across clouds and bare metal, running Kubernetes clusters provisioned on AWS, GCP, VMware, Packet and OpenStack and… | ||
| Intro: CNCF K8s-Conformance WG | Zefeng Wang, Aaron Crickenberger | 27m |
Certification program launches last year and now lists 70+ certified platforms; conformance focuses on stable APIs and requires annual recertification for the… | ||
| Intro: Jaeger | Prithvi Raj Venkat Raj, Won Jun Jang | 28m |
Live demo shows Jaeger running as an all-in-one Docker plus a Hot Rod microservice app and visualizes full traces across frontend, customer, driver, route… | ||
| Intro: CNCF Serverless WG / CloudEvents | Doug Davis, Cathy Zhang | 31m |
White paper and landscape document define the serverless field and recommend standardizing events, producing the CloudEvents spec that pins a minimal metadata… | ||
| Intro: SIG Cloud Provider | Jago Macleod, Andrew Sy Kim | 35m |
SIG Cloud Provider forms to pull cloud-specific code out of the Kubernetes core, builds the Cloud Controller Manager and a focused cloud provider extraction… | ||
| Intro: SIG Service Catalog | Doug Davis, Jonathan Berkhahn | 24m |
Kubernetes Service Catalog exposes cloud services via the Open Service Broker API and ships an svcat CLI so developers run three commands — SVcat marketplace… | ||
| Intro: SIG IBMCloud | Sahdev P. Zala, Doug Davis | 30m |
SIG overview of IBM Cloud activities and measurable contributions: IBM Cloud Kubernetes Service (IKS) runs in six regions across 24 data centers, is IKS… | ||
| Modern Service Networking With Consul Connect, Envoy and Kubernetes | Nic Jackson | 38m |
Shows Consul Connect securing Kubernetes services with Envoy sidecars, automatic mutual TLS and identity-based authorization, using a local Consul agent and… | ||
| Container Networking Untangling Services Meshes and SDNs | Gregory Elkinbard | 34m |
Compares Istio, Linkerd/Conduit and Consul against SDNs like Tungsten Fabric/Contrail, Nuage, NSX and Calico and gives concrete performance and integration… | ||
| Securing the Perimeter - CFCR/CFAR Chain of Custody With CI/CD Pipelines | Keith Strini | 35m |
Describes a concrete CI/CD hardening checklist for CFCR/CFAR and Kubernetes: sign git commits and Docker images with Notary/TUF, enable Docker Content Trust… | ||
| Testing Kubernetes CRDs | Christie Wilson | 31m |
Practical checklist for CRD testing: use client-go fakes or the kubebuilder generated test harness to run integration tests without a real cluster, run a few… | ||
| Getting Started With Logging in Kubernetes | Eduardo Silva | 34m |
Demo shows a Fluent Bit daemonset reading container JSON logs on every node, calling the Kubernetes API to attach pod/namespace/label metadata, parsing Apache… | ||
| Comprehensive Performance Benchmark on Various Well-Known CNI Plugins | Giri Kuncoro, Vijay Dhama | 34m |
Eight Kubernetes clusters are benchmarked—one per CNI—using sock perf, netperf and a gang‑style load tool from Panel Networks to measure TCP/UDP throughput… | ||
| Navigating the Distributed Systems Execution Maze With OpenTracing | Ashlie Martinez, Ilya Kislenko | 35m |
Kasten adds OpenTracing and Jaeger to a Go Kubernetes app (image-catalog + image-store) and instruments middleware, a custom HTTP transport, and a few MongoDB… | ||
| Provisioning the Distributed Database TiDB on Kubernetes | Shuan Deng | 33m |
TiDB is a distributed SQL database with three core components (PD metadata store, TiKV storage using RocksDB+Raft, and a MySQL‑compatible SQL layer) and is… | ||
| Deep Customized Kubernetes for Machine Learning in Tencent | Shengbo Song | 34m |
Tencent extends Kubernetes with a GPU topology-aware scheduler that picks card pairs to cut data transfer time roughly in half on tests, implements fractional… | ||
| Managing RBAC Cross Multiple Kubernetes Clusters | Alena Prokharchyk | 35m |
Rancher implements a Kubernetes-native authn/authz layer using CRDs and custom controllers to manage users, groups and permissions across many clusters, with… | ||
| Using Kubernetes for Handling Second Screen Experience of European TV Show | Jan-Erik Revsbech | 36m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| When Distributed Database Meets Cloud - Lessons Learned | Yanqing Weng | 37m |
Migrates Greenplum/Apache HAWQ onto Kubernetes and builds a cloud-native HAWQ with segment pool and query CRD controllers that allocate containers per query, a… | ||
| Securing the Deploy Pipeline | Felix Glaser | 31m |
Shopify describes a pipeline that signs container digests after CI builds, stores those attestations in Grafeas, and enforces them at deploy time with the… | ||
| Deep Dive: Prometheus | Richard Hartmann, Ben "SuperQ" Kochie | 36m |
Prometheus explains concrete engineering: a new TSDB reduces resource use dramatically in benchmarks with 800 microservices, ~100–120k scrapes/sec and ~300k… | ||
| Intro: containerd | Derek McGowan, Mike Brown | 43m |
containerd is a lightweight OCI-compliant runtime started in 2016, integrated into Docker 1.11, donated to CNCF, and at 1.2 it stabilizes the runtime shim API… | ||
| Access Policies for Hybrid Cloud Environments | Ruiyi Wang | 31m |
Cloud and cluster access policies multiply: K8s RBAC, Istio RBAC, OPA plus IAM, firewall, quota and app-level rules produce dozens of overlapping controls that… | ||
| Deep Dive: CNCF Storage WG | Xing Yang, Quinton Hoole | 36m |
A draft white paper maps cloud‑native storage: block, file, object, key‑value and databases; examines topologies, RAID/erasure coding, replicas, snapshots, and… | ||
| Deep Dive: Kubernetes SIG Multicluster | Quinton Hoole, Irfan Ur Rehman | 40m |
Federation v2 uses CRDs to make multi-cluster Kubernetes declarative: admins register a target type with typeConfig/template/placement/overrides, flip a… | ||
| Deep Dive: Falco | Jorge Salamero Sanz | 38m |
Falco now ingests Kubernetes audit events via an embedded web endpoint and treats them as a second event stream alongside kernel syscalls, using JSON pointer… | ||
| Deep Dive: Harbor | Daniel Jiang, Steven Zou | 42m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Deep Dive: Rook | Jared Watts | 37m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Deep Dive: containerd | Derek McGowan, Mike Brown | 38m |
Explains containerd internals: a gRPC API stable exposes low-level services while a smart Go client implements high-level pull/unpack/run logic; metadata sits… | ||
| Deep Dive: SIG Scheduling | Da Ma | 36m |
Deep dive into Kubernetes scheduler internals with concrete features and progress: explains how the scheduler tracks node capacity, the priority and preemption… | ||
| Deep Dive: SIG Autoscaling | Marcin Wielgus, Maciej Pytel | 34m |
Vertical Pod Autoscaler ships as a CRD, runs a recommender that writes lower/upper/target/uncapped target recommendations from metrics, and applies sizes via… | ||
| Serverless Kubernetes: Container in Cloud Native Way | Wei Zhang | 34m |
Serverless Kubernetes at Alibaba Cloud delivers a Kubernetes-native API with ECI / virtual node elasticity, a pay-per-pod billing model instead of node-hour… | ||
| Smart Workload: Automated Routing, Scaling of K8s and Serverless Functions | Enlin Xu | 34m |
Built a testbed that runs the same function on Knative edge vs AWS Lambda, uses Kong for static mapping and Istio virtual service label routing, and plugs… | ||
| Serverless Workflow: Key to Wide Serverless Adoption | Cathy Zhang | 24m |
CNCF Serverless Work Group publishes a draft Application Workflow Specification that describes applications as three parts — a list of events, a list of… | ||
| Serverless Computing for E-Commerce Applications on JD Kubernetes Platform | Yuan Chen | 36m |
Fibonacci is a production FaaS built on OpenFaaS and integrated into JD’s Kubernetes platform that runs tens of thousands of containers. It claims improved… | ||
| Botless: A Serverless Chatbot Framework | Scott Nichols | 21m |
Botless is a serverless chatbot framework built on Kubernetes and Knative that converts incoming chat messages into CloudEvents, parses slash commands, routes… | ||
| Serverless Performance on a Budget | Erwin van Eyk | 27m |
Serverless platforms still see noticeable cold starts—measured around 200 ms cold starts on major providers—and performance gains depend on trade-offs, not… | ||
| Keynote: Kubernetes Serverless Present and Serverless Future | Brendan Burns | 21m |
Argues Kubernetes should hide machines so users only think about workloads and describes a working prototype: the virtual kubelet registers a fake node with… | ||
| Keynote: Kubernetes as a Foundational Layer of Infrastructure | Vicki Cheung | 14m |
Kubernetes serves as the foundational layer at Lyft to unify microservices, batch jobs and ML workloads while keeping complexity down. The company runs 300… | ||
| Keynote: The Challenges of Funding Open Source Development | Todd Moore | 10m |
IBM argues that corporate funding and open governance scale open source: a $1B pledge kickstarts Linux adoption, IBM seeds Eclipse with $30M, and the Cloud… | ||
| Keynote: Closing Remarks | Liz Rice | 01m |
Keynotes resume tomorrow at 9:50 while tonight features a sponsor showcase downstairs starting at 8:00, a Tai Chi class on the third floor at 7:30, and a lucky… | ||
| Let Developers and Operators Focus on What They Know Best | Rafal Gajdulewicz, Julie Zhuying Li | 28m |
Proposes separating app and ops artifacts into separate repos, using Git as the single source of truth and CI jobs triggered by commits to build Docker images… | ||
| Intro: Fluentd | Eduardo Silva, Masahiro Nakagawa | 35m |
Overview of Fluentd architecture and concrete deployment choices: shows core components (source → filters → buffers → outputs), explains the micro-batch chunks… | ||
| Modern Data Science in a Cloud Native World | Samuel Kreter | 19m |
Demonstrates using Pachyderm data versioning on Kubernetes to build declarative pipelines that expose files to containers via PFS, shard inputs and run… | ||
| Operating Deep Learning Pipelines Anywhere Using Kubeflow | Jörg Schad, Gilbert Song | 39m |
Shows how to assemble a production-grade ML pipeline on Kubernetes using Kubeflow, with notebook-driven model engineering, distributed training and autoscaling… | ||
| Kubeflow From the End User’s Perspective: The Good, The Bad, and The Ugly | Xin Zhang | 42m |
Survey of 50+ Kubeflow users finds concrete wins and concrete blockers: Kubeflow uses Kubernetes for large-scale training and TensorFlow Serving for inference… | ||
| Machine Learning on Kubernetes Birds of a Feather | David Aronchick | 29m |
Roadmap and demos focus on making Kubeflow production ready with a stable API toward 1.0, plus a newly launched Kubeflow Pipelines workflow orchestrator that… | ||
| Discovering the Untold User Stories of Kubernetes With Applied Anthropology | Hippie Hacker | 19m |
Argues for adding verbose identity metadata into Kubernetes protocols, shows a working pipeline that logs user agents in 1.12, extends the e2e test suite… | ||
| Apache Spark on Kubernetes: A Technical Deep Dive | Yinan Li | 40m |
Kubernetes becomes a native Spark scheduler in Spark 2.3 with a submission client that creates a driver pod plus a scheduler backend running in the driver to… | ||
| Kustomize: Template-Free Configuration Customization for Kubernetes | Jeffrey Regan | 34m |
Kustomize is a CLI that produces Kubernetes YAML by template-free patching of existing manifests: it reads plain YAML (no API calls), applies… | ||
| Run Cluster Autoscaler on Your Own Cloud; or, Why Do We Need Cluster API? | Aleksandra Malinowska | 32m |
Explains exactly what must be implemented to run Cluster Autoscaler on an unsupported cloud: a cloud provider module that uses Kubernetes API plus the cloud’s… | ||
| Challenges and Solutions of Using Kubernetes for Blockchain Applications | Tong Li | 40m |
Hyperledger Fabric runs as containers so Kubernetes fits but raises concrete problems and fixes: multi‑provider cluster setup and varying kubeconfig workflows… | ||
| Safely Upgrading Kubernetes Clusters | Chao Xu, Yu Liao | 35m |
etcd snapshot + sanity check takes seconds to at most 10 minutes and is the first cheap insurance, kubeadm and kubectl (drain/cordon) automate rolling upgrades… | ||
| Large-Scale K8s Cluster Operation and Management | Lv Jiangzhao | 40m |
JDOS is a Kubernetes-based platform running millions of containers with a single cluster over 9000 nodes and 20,000 services, using a heavily tailored… | ||
| Running Blockchain as a Service on Kubernetes | Shan Yu | 37m |
Alibaba Cloud runs Blockchain-as-a-Service on Kubernetes using Hyperledger Fabric, claiming a one-minute deployment for basic networks and supporting… | ||
| Model and Operate Datacenter by Kubernetes at eBay | Xiaogang Xin, Tommy Mei | 38m |
eBay models its physical datacenter and fleet as Kubernetes CRDs and runs controllers to operate them at scale, controlling tens of thousands of machines and… | ||
| Experiences From Running Istio in a K8s Production Environment | Line Moseng, Johnny Horvi | 36m |
Norwegian welfare runs Istio across on‑prem and GKE clusters to provide mutual TLS and Istio RBAC, expose telemetry to Prometheus/ELK, and hide complexity… | ||
| Spark on Kubernetes: Best Practice and Performance | Junjie Chen, Jerry Shao | 39m |
Tencent describes running Spark on Kubernetes (Spark 2.3/2.4) as a production service with namespace/quota multi-tenancy, custom authorization and logging, and… | ||
| Linux Container in Windows 10 or Windows 2016 Deep Dive | Mark Peng | 48m |
Demonstrates running Linux containers on Windows 10/Server 2016 by spawning a tiny Hyper-V utility VM per container using LinuxKit, with the utility VM running… | ||
| Layers of Isolation in Kubernetes | Tim Allclair | 29m |
Explains concrete isolation guarantees: containers use cgroups, namespaces, seccomp and AppArmor/SELinux but remain vulnerable to kernel resource exhaustion… | ||
| Hardening Multi-Cloud Kubernetes Clusters as a Service | Dirk Marwinski, Alban Crequy | 42m |
SAP and Kinvolk describe a cluster‑as‑a‑service that creates seed control‑plane clusters and per‑tenant worker clusters across clouds, plus automation… | ||
| Istio Certificate Management Through Vault | Lei Tang, Yonggang Liu | 34m |
Describes a concrete Istio certificate flow that replaces Citadel’s internal CA by delegating signing to Vault: a per-node node agent exposes the SDS API, pods… | ||
| The State of Your Supply Chain | Andrew Martin, Maya Kaczorowski | 35m |
Describes treating containers as immutable artifacts and proving provenance from base image to deployment, showing how to rebuild and redeploy a vulnerable… | ||
| Implementing Authorization | Torin Sandall | 32m |
Shows how Open Policy Agent and its Rego language decouple policy from application code, letting services query a central engine for allow/deny decisions… | ||
| Nabla Containers: A New Approach to Container Isolation | Brandon Lum, Ricardo Koller | 41m |
Nabla containers lift many kernel services into user space using library-OS/unikernel techniques and a custom runnc OCI runtime, producing a special Nabla… | ||
| Deep Dive of Windows Containers on Kubernetes | Pengfei Ni | 36m |
Status update: Kubernetes supports Windows nodes up through v1.13 with Windows Server 2016/2019 images but clusters still require a Linux control plane and… | ||
| More Than Secure: Containerd + KataContainers as Kubernetes Runtime | Lei Zhang | 39m |
Refactors KataContainers into a containerd plugin that implements the CRI v2-style shim so Kubernetes can pick VM-isolated runtimes per pod via runtimeClass… | ||
| Who's Running My Pods? A Deep Dive into the K8s Container Runtime Interface | Phil Estes | 35m |
Kubernetes relies on a CRI plugin to run containers and this demo maps kubectl -> crictl -> ctr to the live process: a Kubernetes 1.11 cluster on IBM Cloud… | ||
| Network QoS Support for Kubernetes Applications | Jun Du | 34m |
Kubernetes lacks traffic shaping when using CNI, so a simple CNI plugin using Linux tc implements both ingress and egress rate limiters with burst support and… | ||
| Understanding Windows Container Network in Kubernetes Using a Real Story | Cindy Xing | 36m |
Shows a working Kubernetes Windows CNI: a sample CNI + IPAM built on HNS/HC S shim, using a VFP programmable data plane and CBR0 default gateway. Demonstrates… | ||
| Deep Dive: Fluent Bit | Eduardo Silva, Masahiro Nakagawa | 36m |
Fluent Bit is a C-based, single-threaded log router that uses an event loop and lightweight coroutines to perform nonblocking network I/O, MessagePack for fast… | ||
| Deep Dive: SIG Apps | Janet Kuo | 34m |
SIG Apps defines and maintains workload APIs for single-cluster app lifecycle and introduces an Application CRD that bundles related resources and metadata… | ||
| Deep Dive: SIG Service Catalog | Doug Davis, Jonathan Berkhahn | 24m |
Service Catalog implements the Open Service Broker API by mapping it to five Kubernetes resource types (broker, class, plan, instance, binding), runs a… | ||
| Deep Dive: Jaeger | Prithvi Raj Venkat Raj, Won Jun Jang | 28m |
Jaeger uses a host agent + collector model, then moves to an asynchronous ingestion via Kafka pipeline with a Flink job that builds dependency graphs and… | ||
| Deep Dive: SIG Cloud Provider | Jago Macleod, Andrew Sy Kim | 22m |
Describes migrating Kubernetes cloud code out of the core repo into a separate cloud-controller-manager process and publishing providers as independent repos… | ||
| Deep Dive: CNCF K8s-Conformance WG | Zefeng Wang, Srinivas Brahmaroutu | 33m |
Conformance runs currently include about ~200 conformance tests and often take up to three hours serially; many tests can be parallelized but some require… | ||
| Deep Dive: SIG IBMCloud | Sahdev P. Zala, Guang Ya Liu | 32m |
SIG IBMCloud describes IBM Kubernetes Service (IKS) with IKS clusters across six regions and 25+ data centers and reports a 3,000+ pod Watson deployment… | ||
| Intro: SIG VMware | Fabio Rapposelli, Steven Wong | 27m |
Kubernetes support for vSphere is moving from an in-tree implementation to an out-of-tree vSphere cloud provider that offloads storage provisioning to a… | ||
| From Containerized Application to Secure and Scaling W/ Kubernetes | Shikha Srivastava, Erica Brown | 43m |
Shows a production checklist and a live-demo movie of an IBM Cloud Private cluster using IBM Cloud Private with a helm chart deployment, PSPs, secrets for… | ||
| Kubernetes on Supporting 1 Million Bike-Taxi Drivers in Indonesia | Giri Kuncoro, Iqbal Farabi | 31m |
GO-JEK migrates from 10,000+ VMs to Kubernetes to serve 1M drivers and 100M monthly users, processing ~3M orders/day across ~400 microservices and claiming up… | ||
| Deep Dive: SIG VMware | Steven Wong, Hui Lou | 45m |
Kubernetes scheduler filters and ranks nodes by predicates and priorities; labels for topology/zones let the scheduler best-effort spread replicas but… | ||
| From Mesos to Kubernetes | Yin Sun | 36m |
Migration from Mesos after three years moves a multi-cluster fleet (eight clusters) onto Kubernetes while keeping an adapter layer so Mesos and K8s engines… | ||
| State of the UI: Leveraging Kubernetes Dashboard | Dan Romlein, Spencer Sugarman | 34m |
Kubernetes Dashboard is a web UI with over 2,000 commits and 143 contributors that 60% of users rely on for visualization and onboarding; a survey of 163… | ||
| Deep Dive: Helm | Taylor Thomas | 35m |
Helm 3 moves templating and hooks into an embedded Lua engine (optional escape hatch, treats K8s resources as objects), drops server-side Tiller and uses… | ||
| PetroChina: Big Oil’s Information System on Cloud Native Technology | Hui Chi, Kai Chen | 36m |
PetroChina builds a unified container platform that combines Kubernetes with an Alauda stack to support DevOps, microservice governance and… | ||
| Kubernetes: Use it, Contribute to it, and Enjoy it! | Peter Zhao, Yuan Ji | 43m |
Shows three concrete deploy paths: kubeadm (cluster from binaries, demoed with master + nodes and kubeadm reset), containerized local dev via minikube, and a… | ||
| Deep Dive: gRPC | Yuxuan Li | 28m |
gRPC-Go is a native implementation in Go that exposes channel and subchannel abstractions mapping logical RPCs to physical connections; the code path shows… | ||
| Running Vitess on Kubernetes at Massive Scale: JD.com Case Study | Jiten Vaidya, Xin Lv | 36m |
Vitess runs on Kubernetes with VTGate, VTTablet and VTCTLD backed by etcd and MySQL; JD.com deploys it across Kubernetes cells in eight data centers and… | ||
| Adventures in Conformance | Aaron Crickenberger | 27m |
Conformance proves which Kubernetes behaviors actually work: conformance drives portability, TestGrid runs conformance hourly, and 77 vendors certified against… | ||
| Deep Dive: Kubernetes Policy WG | Torin Sandall, Da Ma, Zhipeng Huang | 20m |
A Kubernetes policy controller project implements admission-time enforcement plus offline audits by proxying APIServer webhooks into Open Policy Agent and by… | ||
| Istio in Production: Real Customers, Real Solutions | Craig Box | 38m |
Istio 0.2 alpha is running in production within months, deployed as an Envoy sidecar and managed by a control plane (mixer) that exports telemetry to… | ||
| Intro: SIG Cluster Lifecycle | Lucas Käldström, Di Xu, Alexander Kanevskiy | 32m |
SIG Cluster Lifecycle explains concrete work: kubeadm aims general availability in about a month and already supports experimental multi-master bootstrapping… | ||
| Cluster API Deep Dive With a Tencent Case Study | Feng Min, Zhiguo Hong | 38m |
Explains Cluster API internals and shows a working Tencent provider that uses CRDs and controller deployments plus cloud secret id/secret key to create… | ||
| Intro: SIG PM (Kubernetes) | Ihor Dvoretskyi, Dustin Kirkland | 29m |
Overview of SIG PM responsibilities and concrete processes for Kubernetes product work including staffing release roles and owning roadmap artifacts It… | ||
| .Net Framework to .Net Core Microservices With Windows and Linux Containers | Hongxi Ma | 35m |
Case study of a legacy .NET Framework monolith migrated into a mixed .NET Core + .NET Framework microservice platform using Windows Server 2016 containers for… | ||
| Operator Framework to Manage Production Grade Stateful Workloads | Xin Xu, Xinglang Wang | 36m |
eBay builds an Operator Framework that deploys multi-component, GEO-distributed stateful apps across multiple Kubernetes clusters from one YAML file. it uses a… | ||
| Intro: SIG Testing | Jessie Zhu, Sen Lu | 36m |
Explains how Kubernetes CI uses prow to turn GitHub webhooks and /commands into scheduled test pods, with prow job CRD as the core resource and controllers… | ||
| Intro: CoreDNS | Yong Tang | 38m |
CoreDNS is a plugin-based architecture DNS server that already ships as part of Kubernetes since 1.11 and aims to become the default in upcoming releases… | ||
| Intro: SIG Release | Tim Pepper | 32m |
SIG Release runs Kubernetes on a quarterly cadence with a concrete pipeline: a planning phase that narrows ~40–60 enhancements, an enhancements freeze at week… | ||
| Intro: SAFE (A Cloud Native Security Working Group) | Liz Rice | 28m |
Working group forms a practical bridge between CNCF projects and operators, already pulling together around 20 organizations and running twice-weekly calls… | ||
| Keynote: Closing Remarks | Liz Rice, Janet Kuo | 03m |
Notes on logistics and highlights: lots of AI on Kubernetes is happening in China and is called out as a theme, and next KubeCon + CloudNativeCon China is June… | ||
| Intro: SIG Apps | Janet Kuo | 35m |
SIG Apps describes concrete work: stewardship of workloads API (Deployment, ReplicaSet, StatefulSet, Job, CronJob, DaemonSet) with most APIs v1 stable, pod… | ||
| Deep Dive: CNCF Serverless WG / CloudEventsClemens Vasters, Microsoft & Cathy Zhang | Clemens Vasters, Cathy Zhang | 34m |
CloudEvents defines a minimal event schema — type, time, source, id plus content type and optional schemaURL — with JSON as the canonical wire format and… | ||
| Deep Dive: CoreDNS | Yong Tang | 35m |
CoreDNS is a flexible DNS server written in Go with a plugin-based architecture that registers via the Caddy-style plugin system; it claims Kubernetes… | ||
| Intro: Kubernetes Policy WG | Zhipeng Huang, Hui Wang | 31m |
Kubernetes Policy WG reports concrete progress on prioritized PRs for the 2018 Fall cycle, targeting policy primitives for compliance, capacity and cluster… | ||
| Managing and Securing Blockchain Applications on Kubernetes | Haining Zhang, Yang Yu | 35m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Navigating the Service Mesh Ecosystem | George Miranda, Diogenes Rittori | 35m |
Compares concrete service meshes: Linkerd v1: JVM/Scala, >1 trillion requests in production, Linkerd v2: complete rewrite with tiny Rust proxies, zero‑config… | ||
| Benchmarking Machine Learning Workloads on Kubeflow | Xinyuan Huang, Ce Gao | 23m |
Kubebench is a benchmarking harness built on Kubeflow and Kubernetes that automates config generation, Argo workflows, shared storage and result aggregation… | ||
| Auto-Deployment of Ceph Cluster With Rook on Top of Kubernetes | Dennis Chen | 37m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Production Cluster Monitoring and Remediation for High Reliability | Shijun Qian, YingKe Liu | 29m |
eBay runs >13 Kubernetes clusters with ~8,000 nodes, 3,000 apps and ~100,000 pods and implements monitoring with Prometheus federation, filebeat logs into… | ||
| Seamless Integration - Take Kubernetes into your Existing Monitoring Stack | Shaojun Ding | 37m |
IBM cloud team describes a concrete integration: adapters that translate Prometheus targets into an existing metric store, a Kubernetes controller that… | ||
| Handling Edge Cloud Network Using “KubeEdgeBus” | Yulin Sun, Weijin Xu | 35m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Compliance as Code - Lessons Learned From Regulated Organizations | Sergiu Bodiu | 33m |
Argues that treating regulatory controls as executable specs lets teams push changes daily by automating audits and gating deployments; implements a pipeline… | ||
| Kubernetes CICD Hacks with MicroK8s and Kubeflow | Land Lu, Zhang Lei Mao | 29m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Kubernetes Native DevOps Practice | Lei Wang | 33m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Mesher: The Practice of a Production-Level Service Mesh | Xiaoliang Tian | 37m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Intro: SIG Scheduling | Da Ma | 26m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Kube-Arbitrator: A Batch System of Kubernetes | Da Ma, Ti Zhou | 25m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Deep Dive: SIG Cluster Lifecycle | Di Xu, Alexander Kanevskiy | 43m |
Kubeadm is presented as the lightweight installer and building block that people actually use: packaged deb/rpm binaries plus standalone binaries, commands to… | ||
| Deep Dive: SIG Release | Tim Pepper | 36m |
SIG Release details current Kubernetes cadence: four releases a year, each release gets about nine months of patches and only three supported releases overlap… | ||
| Turtles All the Way Down: Managing Kubernetes Secrets | Maya Kaczorowski, Alexandr Tcherniakhovski | 35m |
Demo shows secrets in etcd as cleartext versus encrypted, proves application-layer encryption stops offline backup theft. Covers Kubernetes 1.7 secrets… | ||
| Three Years of Lessons Running Potentially Malicious Code Inside Containers | Ben Hall | 38m |
Katacoda runs public Docker/Kubernetes sandboxes for three years and reports concrete defenses and failures: attackers deploy crypto miners and render farms… | ||
| Intro: Harbor | Henry Zhang, Jia Zou | 34m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Intro: Falco | Jorge Salamero Sanz | 27m |
Falco monitors Linux syscalls and Kubernetes API metadata to detect runtime anomalies, running as a kernel hook (eBPF or module) plus user‑space engine and… | ||
| Managing Edge Nodes With “KubeEdge” | Yulin Sun, Li Xing | 34m |
KubeEdge extends Kubernetes for edge clouds by shipping three concrete components: a lightweight edge agent that runs with <300 MB RAM, a VPN-based networking… | ||
| How HP Uses Istio to Manage Network Traffic | Xi He, Zhoujian Zhang | 36m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Node Operator: Kubernetes Node Management Made Simple | Joe Chen | 38m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Kubebuilder: SDK for Extending Kubernetes | Fan Zhang, Mengqi Yu | 32m |
Kubebuilder scaffolds a full operator project (APIs, controllers, webhooks, Makefile, Dockerfile) and uses controller-runtime libraries and code generators to… | ||
| Evolving Sigma: Adapting Kubernetes at Alibaba | Xiang Li | 36m |
Sigma is a homegrown cluster manager that integrates Kubernetes to run tens of thousands of servers and legacy non-container workloads; the team adapts… | ||
| Intro: Open Policy Agent | Torin Sandall | 33m |
Open Policy Agent is a general-purpose policy engine that decouples decision-making from enforcement, implemented as a host-local cache running policies and… | ||
| Intro: CNCF Storage WG | Xing Yang, Quinton Hoole | 35m |
Working Group presents a draft white paper that categorizes storage by availability, durability, performance and consistency, maps volume and application APIs… | ||
| Keynote: A Tale of Using Kubeflow to Make the Electricity Smarter in China | Julia Han, Xin Zhang | 21m |
Deploys Kubeflow on Kubernetes to unify TensorFlow and PyTorch pipelines, PV/PVC storage, and orchestrated distributed training; connects to State Grid of… | ||
| Keynote: Expanding to Verticals, How Kubernetes Accelerates Cloud-Native Movement | Zhenqin Liao | 13m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Keynote: Cloud Native Best Practices In Tencent Architecture | Joezou | 07m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Keynote: Accelerating Genome Sequencing via Containers and Kubernetes | Chao Wang, Anni Lai | 18m |
X-Turing builds a production genome pipeline stack on Kubernetes that replaces fragile HPC/VM setups, running 5000+ containerized apps and thousands of… | ||
| Keynote: End User Awards | Chris Aniszczyk | 06m |
Announcement of the first China-focused end user award to JD.com for a documented migration off virtual machines to Kubernetes on bare metal, adoption of CNCF… | ||
| Shanghai Highlights | 02m | |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| nothing matches | ||