KubeCon + CloudNativeCon Europe 2018
2018-05-02..2018-05-04
Copenhagen, Denmark
[KubeCon + CloudNativeCon Europe 2018, KubeCon + CloudNativeCon Europe 2019, KubeCon + CloudNativeCon Europe 2020, KubeCon + CloudNativeCon Europe 2021, KubeCon + CloudNativeCon Europe 2022, KubeCon + CloudNativeCon Europe 2025, KubeCon + CloudNativeCon Europe 2026]
| title | author | length |
|---|---|---|
| Keynote: Anatomy of a Production Kubernetes Outage | Oliver Beattie | 18m |
A production Kubernetes outage lasts 1h21m after a ledger deployment triggers Linkerd to route to stale pod IPs; Linkerd crashes with null pointer exceptions… | ||
| Cloud Native Landscape Intro | Dan Kohn | 33m |
An interactive Cloud Native Landscape app is built as a static React site that auto-fetches GitHub, Crunchbase and Twitter data, auto-deploys via Netlify and… | ||
| OpenStack SIG Intro | Chris Hoge, David Lyle | 24m |
SIG reports moving the OpenStack cloud provider into an external kubernetes cloud-provider repo, adds LBaaS v2 and hosts CSI and flex drivers plus an OpenStack… | ||
| Kubernetes Policy WG Intro | Zhipeng Huang | 38m |
Working group forms in February 2018 with weekly meetings and contributors from Google, Huawei, IBM and Red Hat and defines three use cases—compliance/data… | ||
| Low-Overhead Tracing Using eBPF for Observability into Kubernetes Apps and Services | Gaurav Gupta | 27m |
Explains how eBPF programs compile to kernel bytecode, pass the verifier and run via the JIT to attach to kprobes, uprobes and perf events while aggregating… | ||
| Scalable Monitoring Using Prometheus with Apache Spark | Diane Feddema, Zak Hassan | 32m |
Shows a reproducible OpenShift/Kubernetes setup that instruments Spark with a Java JMX agent and configures Prometheus targets via a Spark operator CRD, stores… | ||
| How to Export Prometheus Metrics from Just About Anything | Matt Layher | 31m |
Shows how to build real Prometheus exporters in Go and proves they work by curling metrics and configuring Prometheus to scrape them. Implements a procfs CPU… | ||
| Prometheus for Devs | Hubert Ströbitzer | 34m |
Hands-on walkthrough that sets up Prometheus + Grafana in Docker, runs common exporters, configures scraping, and builds a simple Grafana dashboard from live… | ||
| Keynote: Software's Community | Dave Zolotusky | 18m |
Spotify shifts its infrastructure to Kubernetes and cloud, and measures success by community engagement not just code. Hundreds of platform people support… | ||
| Keynote: Skip the Anxiety Attack - Build Secure Apps with Kubernetes | Jason McGee | 06m |
Claim: combine Kubernetes with IBM Cloud Container Service to stop late-stage security rewrites and cut developer anxiety by baking infrastructure, CI/CD and… | ||
| Keynote: The Challenges of Migrating 150+ Microservices to Kubernetes | Sarah Wells | 20m |
Financial Times migrates 150+ microservices (≈650 instances) from a homegrown container stack to Kubernetes, running both platforms in parallel while… | ||
| Keynote: Accelerating Kubernetes Native Applications | Brandon Philips | 05m |
CoreOS introduced the Operator concept in 2016 and shows how it scales: Ticketmaster runs hundreds of Prometheus instances via a Prometheus operator for… | ||
| Keynote: Kubernetes Project Update | Aparna Sinha | 22m |
Project update lists measurable outcomes and deliverables: certification and conformance tests are live, security primitives like RBAC NetworkPolicy and… | ||
| Keynote: Container-Native Dev-and-ops Experience: It's Getting Easier, Fast. | Ralph Squillace | 07m |
Demo shows a Go service and a Node service built with Draft, deployed to a Kubernetes cluster in Western Europe (Dublin), with VS Code remotely attaching to… | ||
| Keynote: Cloud Native Observability & Security from Google Cloud | Craig Box | 06m |
Announces GVisor, an open source container sandbox that intercepts application system calls in user space to give VM-like isolation while staying lighter… | ||
| Keynote: CNCF End User Awards | Chris Aniszczyk | 04m |
Bloomberg wins CNCF’s first End User Award for moving high‑frequency financial workloads onto cloud‑native stacks, processing hundreds of exchanges and tens of… | ||
| Keynote: Prometheus 2.0 – The Next Scale of Cloud Native Monitoring | Fabian Reinartz | 16m |
Prometheus 2.0 replaces the TSDB with a new storage engine and open library that compresses series, lowers baseline memory/CPU, and makes ingestion far… | ||
| SPIFFE Project Intro | Andrew Jessup, Emiliano Berenbaum | 41m |
Overview of the SPIFFE spec and the SPIRE implementation: SPIRE runs as a SPIRE agent/server pair with a node‑local workload API exposed over a UNIX domain… | ||
| TUF / Notary Project Intro | David Lawrence, Justin Cappos | 36m |
TUF provides a compromise-resilient key roles model (root, targets, snapshot, timestamp) that separates duties so key rotation and revocation work without… | ||
| OpenTracing Project Intro | Priyanka Sharma, Ted Young | 38m |
OpenTracing presents a narrow instrumentation API that aims to eliminate vendor lock-in by letting code propagate a small span context blob and then bind once… | ||
| Jenkins X: Easy CI/CD for Kubernetes | James Strachan | 35m |
One command boots a Kubernetes cluster and installs an opinionated CI/CD stack (Jenkins, Helm, Scaffold/draft, Nexus, Monocular) and another command imports or… | ||
| Continuously Deliver your Kubernetes Infrastructure | Mikkel Larsen | 40m |
Zalando runs ~84 Kubernetes clusters across 366 AWS accounts and consistently upgrades clusters from v1.4 to v1.9 using CloudFormation, Container Linux, an… | ||
| Building Docker Images Without Docker | Matt Rickard | 25m |
Motivated by reproducible, minimal and unprivileged builds, the talk compares no daemon builds (BuildKit/Buildah), an on-cluster builder that creates images… | ||
| Rook Project Intro | Bassam Tabbara, Tony Allen, Jared Watts | 36m |
Rook is a Kubernetes storage orchestrator that deploys Ceph via Rook operator using CRDs and controllers to automate cluster creation, pools, and object… | ||
| Evolving a Continuous Delivery Workflow | Gard Rimestad, Øyvind Ingebrigtsen Øvergaard | 33m |
Schibsted evolves a Spinnaker-based CD pipeline over a year from UI point‑and‑click to pipelines-as-code, building a custom Training Wheels service to apply… | ||
| Continuous Delivery Meets Custom Kubernetes Controller | Suneeta Mall, Simon Cochrane | 34m |
Nearmap builds and open sources CV Manager (CVM), a CRD plus custom Kubernetes controller that watches container registries and drives deployments without… | ||
| Git-push Workflows (using git hooks) for Deploying Applications | Tanmai Gopal, Vamshi Surabhi Rao | 29m |
Describes a concrete git-push pipeline built from git hooks: a git remote agent receives pushes, runs a docker build and pushes the image, then runs kubectl… | ||
| Kubernetes on Supporting $8 Trillion Card Payments in China | Xin Zhang, Deyuan Deng | 37m |
Kubernetes is extended to carry UnionPay’s production traffic that amounts to $8 trillion in card payments per year, deploying a federated control cluster… | ||
| The Journey of Adidas to a Global Kubernetes Rollout | Daniel Eichten, Oliver Thylmann | 34m |
Adidas selects Kubernetes with Giant Swarm as the platform and migrates beginning 2015 toward globally distributed microservices, running dozens of clusters… | ||
| Introducing Envoy-Based Service Mesh at Booking.com | Ivan Kruglov | 30m |
Booking.com builds an Envoy-based mesh with a homegrown control plane and exposes configuration via the open-source tool Bosphorus so service owners can… | ||
| Performance and Scale @ Istio Service Mesh | Fawad Khaliq, Laurent Demailly, Surya V Duggirala | 35m |
Working group measures Istio end-to-end with Fortio for synthetic load and an open-source Blueproof Bookinfo-style app for realistic tests, automates nightly… | ||
| Building Hybrid Clouds with Istio | Allan Naim, Rohit Agarwalla | 38m |
Demo deploys Istio control plane on a primary GKE cluster and uses a headless pilot service on a secondary cluster so a single Istio 0.8 multi-cluster control… | ||
| Replacing NGINX with Envoy in a Traffic Control System | Mark McBride | 36m |
Migrates a product proxy from NGINX to Envoy over about six months by replacing the custom nginx binary with Envoy, building an XDS management service and an… | ||
| SRv6LB: Leveraging IPv6, Segment Routing, and VPP | Pierre Pfister, Mark Townsley | 39m |
Open source implementation of SRv6LB in VPP extends Google Maglev by encoding two candidate backends in IPv6 segment lists, using shared‑memory hooks… | ||
| The Untapped Power of Services - L7 Load Balancing Without a Service Mesh | Damien Lespiau | 38m |
Shows how Kubernetes Service and Endpoint objects implement layer‑7 load balancing without a mesh by using the kube API to build affinity and locality-aware… | ||
| Efficient IoT with Protocol Buffers and gRPC | Vladimir Vivien | 37m |
Shows that Protocol Buffers plus gRPC serialize and transport IoT data end-to-end: a tiny ESP8266 (32KB program space) runs nanoPB-generated C to serialize… | ||
| A Brokerless REST Interface for gRPC Services | Roman Zimine | 26m |
A Protobuf compiler plugin generates Spring Web REST controllers and embeds them into a Spring Boot app so gRPC services expose a brokerless REST surface and… | ||
| Improving your Kubernetes Workload Security | Samuel Ortiz, Fabian Deutsch | 38m |
Two complementary approaches add hardware virtualization to Kubernetes: Kata Containers isolates each pod inside a lightweight VM so containers run on a… | ||
| The Route To Rootless Containers | Ed King, Julz Friedman | 32m |
Cloud Foundry moves container creation out of root by using user namespaces so processes are UID 0 only inside their namespace, and runC now leverages the… | ||
| Cloud Native Identity Management | Andreas Zitzelsberger, Andrew Jessup | 36m |
Describes a cloud-native identity management architecture for workload authentication and authorization in large, dynamic environments. It explains using the… | ||
| Securing your Kubernetes Delivery Pipelines with Notary and TUF | Liam White, Michael Hough | 34m |
Explains how Notary and TUF store signed docker image digests and how a mutating admission webhook queries Notary, replaces tag references with verified… | ||
| SIG Autoscaling Intro | Marcin Wielgus, Solly Ross | 35m |
Overview of Kubernetes autoscaling: HPA adjusts replica counts using CPU or custom metrics via metric-server or adapters (Prometheus, cloud providers); ensure… | ||
| SIG Instrumentation Intro | Frederic Branczyk, Piotr Szczesniak | 37m |
SIG Instrumentation describes concrete pieces: core resource metrics API in beta, custom metrics API in beta, and a metric-server (incubator) that polls nodes… | ||
| Prometheus Project Intro | Julius Volz | 33m |
Prometheus is a time‑series monitoring ecosystem built as a single Go binary with a local TSDB that stores samples at roughly 1–2 bytes per sample, able to… | ||
| Kubernetes Conformance WG Intro – William Denniss | William Denniss | 36m |
Kubernetes conformance is an opt‑in CNCF certification that requires vendors to run the community E2E tests and upload reproducible Sonobuoy CLI tarballs and… | ||
| SIG AWS Update - Justin Santa Barbara | Justin Santa Barbara | 41m |
SIG AWS reports that cloud-provider controllers move out of core into a separate cloud-controller-manager so fixes deploy faster without full Kubernetes… | ||
| SIG Service-Catalog Intro – Doug Davis, Michael Kibbe & Morgan Bauer | Doug Davis, Michael Kibbe, Morgan Bauer | 36m |
Service Catalog maps the Open Service Broker API into Kubernetes resources so clusters can declaratively provision and bind external services… | ||
| Jaeger Project Intro - Juraci Kröhling | Juraci Paixão Kröhling | 41m |
Demo runs three microservices (two Spring Boot jars) with auto-instrumentation via OpenTracing contrib for Spring added as Maven deps; Jaeger runs in Docker on… | ||
| SIG Contributor Experience Intro – Paris Pittman, Google & Elsie Phillips, CoreOS | Paris Pittman, Elsie Phillips | 33m |
SIG Contributor Experience presents a completed charter, a projects.md inventory, and active work on mentoring programs (one‑hour one‑on‑one, 4:1 group… | ||
| Who What How: Understanding Kubernetes Development through DevStats - Josh Berkus & Łukasz Gryglicki | Josh Berkus, Łukasz Gryglicki | 35m |
DevStats pulls GitHub Archive events plus Git and limited GitHub API calls into Postgres, rolls hourly metrics into InfluxDB and Grafana at… | ||
| Open Source and Building Online Communities using Social Media and Communications - Kim McMahon | Kim McMahon | 34m |
Practical playbook for getting noticed: use the event hashtag so live tweets reach attendees; prioritize Twitter with a content mix around 50% engagement / 25%… | ||
| Keynote: CNCF 20-20 Vision - Alexis Richardson, Founder & CEO, Weaveworks | Alexis Richardson | 17m |
CNCF moves from startup to an accepted cloud platform built from Kubernetes plus projects like Prometheus, Istio, Kubeflow, OpenFaaS, SPIFFE/SPIRE and OPA, and… | ||
| Keynote: From Innovation to Production - Dirk Hohndel, VP & Chief Open Source Officer, VMware | Dirk Hohndel | 05m |
Company collaboration with Pivotal and Google packages upstream projects into a supported, easy-to-run product built around Kubernetes-based product, including… | ||
| Keynote: CERN Experiences - Ricardo Rocha & Clenimar Filemon | Ricardo Rocha, Clenimar Filemon | 21m |
CERN shows a working setup that bursts its OpenStack-backed fleet (about 320,000 cores and 200+ clusters) into public clouds to cover peak demand, claiming the… | ||
| Keynote: Re-thinking Networking for Microservices - Lew Tucker, VP/CTO Cloud Computing | Lew Tucker | 06m |
Argues that service mesh offloads inter-service networking, taking authentication, load balancing, security and policy out of each microservice so teams change… | ||
| Keynote: CNCF Project Update - Liz Rice, Colin Sullivan, Andrew Jessup, Sugu Sougoumarane | Liz Rice, Colin Sullivan, Andrew Jessup, Sugu Sougoumarane | 38m |
Quick project-by-project status: sandbox projects like Rook, Open Policy Agent and SPIFFE/Spire add identity and storage primitives; incubation projects report… | ||
| Keynote: Opening Remarks & How Good is Your Code? - Dan Kohn, Executive Dir., CNCF | Dan Kohn | 18m |
Cloud Native ecosystem reports 22,000 developers across 20 projects and 216 members with JD.com running 20,000 servers and a single cluster over 5,000 nodes… | ||
| Containerd, What Does it Mean for Me - Scott Coulton, Puppet | Scott Coulton | 29m |
Containerd is described as a low‑level runtime with a containerd gRPC API and runc support that can pull images, create namespaces, manage snapshots and run… | ||
| What's Up With All The Different Container Runtimes? - Ricardo Aravena, Branch Metrics | Ricardo Aravena | 29m |
Explains why Kubernetes' CRI drives a spike in runtimes and gives concrete tradeoffs: Branch runs containerized APIs at 60–70k requests/sec and uses Mesos for… | ||
| Evolving Systems Design: From Unreliable rpc to Resilience with Linkerd - Edward Wilde, Form3 | Edward Wilde | 39m |
Form3 rebuilds a payments platform and replaces a flaky message-broker flow with replaced message broker with HTTP load balancer, which cuts common latency but… | ||
| Introduction to Istio Configuration - Joy Zhang, Google | Joy Zhang | 27m |
Istio claims operators can turn any workload into a managed service with intent-driven configs (no redeploys) by using Envoy sidecars for traffic interception… | ||
| Establishing Image Provenance and Security in Kubernetes - Adrian Mouat, Container Solutions | Adrian Mouat | 30m |
Demonstrates concrete failures and fixes for image provenance on Kubernetes: a GKE demo shows three nodes running three different image versions because… | ||
| Building an Open Source Community to Achieve Innovation-Through-Openness - Jonas Rosland | Jonas Rosland | 35m |
Builds an enterprise open source program that grows a public 6,000-member Slack launched June 2015, runs a legal-backed dev high-five onboarding path for open… | ||
| Automation and the Kubernetes Contributor Experience - Aaron Crickenberger, Samsung SDS | Aaron Crickenberger | 32m |
Automation replaces sprawling Jenkins with a Kubernetes-native stack using prow, gubernator, mungegithub, and testgrid to run CI at scale. Infrastructure runs… | ||
| How We Built Contour, and What You Can Learn From Our Experience - Dave Cheney, Heptio | Dave Cheney | 36m |
Contour is a Kubernetes Ingress controller built on Envoy that translates Kubernetes objects into Envoy via Envoy XDS gRPC; it targets the 80–90% common… | ||
| Diffy - Predicting and Preempting Regressions in Services - Puneet Khanduri & Prashant Khanduri | Puneet Khanduri, Prashant Khanduri | 38m |
Diffy replays sampled production traffic and multicast requests to three instances—candidate, primary, secondary—then compares candidate vs primary and… | ||
| A Survey of the OSS Tracing Ecosystem - Ben Sigelman & Ted Young, LightStep | Ben Sigelman, Ted Young | 36m |
Survey maps concrete pieces: instrumentation libraries, collectors, storage and UIs. It states OpenTracing as a narrow, language-agnostic API with 9 core… | ||
| SAFE WG Intro – Jeyappragash J J, padme.io, & Ray Colline, Google | Jeyappragash J J, Ray Colline | 32m |
A CNCF working group lays out an end-to-end security vocabulary and a concrete roadmap from discovery to standards to cataloging gaps, with 40 regular… | ||
| SIG Cluster Lifecycle Intro – Justin Santa Barbara, FathomDB & Lucas Käldström | Justin Santa Barbara, Lucas Käldström | 39m |
SIG describes concrete outputs: kubeadm as the lightweight bootstrapper (beta, used as the building block for bootstrapping control planes and generating… | ||
| SIG Multi-Cluster Intro – Christian Bell, Madhu C.S., & Nikhil Jindal, Google | Christian Bell, Madhu C.S., Nikhil Jindal | 34m |
Overview of concrete tooling and status: a working Federation v2 prototype uses a template / placement / overrides API model and a generic sync adapter, but… | ||
| Envoy Project Intro – Matt Klein & Jose Nino, Lyft | Matt Klein, Jose Nino | 31m |
Envoy is deployed as a front-edge cluster and a sidecar per host service mesh at Lyft, supporting hundreds of services while the org grows from ~500 to ~1,000… | ||
| SIG CLI Intro - Phil Wittrock & Mengqi Yu, Google | Phillip Wittrock, Mengqi Yu | 39m |
SIG CLI lays out concrete plans: move CLI logic into the server with server-side apply and server-side printing (printing ships default in 1.11), split kubectl… | ||
| Kubeflow Intro – Michał Jastrzębski & Ala Raddaoui, Intel | Michał Jastrzębski, Ala Raddaoui | 31m |
Kubeflow packages running training and serving on Kubernetes using real components: TFJob/TensorFlow Operator to spawn distributed training, Jupyter notebooks… | ||
| gRPC Load Balancing on Kubernetes - Jan Tattermusch, Google | Jan Tattermusch | 35m |
gRPC over HTTP/2 keeps all RPCs on one TCP connection so L4 kube Services don’t load balance per-RPC; using a headless Service DNS round-robin plus the gRPC… | ||
| Making Big Data Processing Portable. The Story of Apache Beam and gRPC - Ismaël Mejía | Ismaël Mejía | 31m |
Apache Beam implements a portability layer using protobuf + gRPC services (Job API, FN API, control/data/state APIs) and containerized SDK harnesses to run… | ||
| Diversity Lunch | Sarah Conway, ima sir | 01h 09m |
Lunch reports that Google and Heptio sponsor scholarships that first brought five winners (three returnees), and companies are changing hiring by resetting job… | ||
| Cloud Native Networking for Containers in AWS using CNI Plugins - Anirudh Aithal | Anirudh Aithal | 39m |
AWS CNI plugins implement an ENI-per-pod model that gives each task or pod a routable VPC IP by attaching an elastic network interface on demand, eliminating… | ||
| Global Container Networks on Kubernetes at DigitalOcean - Andrew Sy Kim, DigitalOcean | Andrew Sy Kim | 37m |
DigitalOcean replaces overlay pod networking with BGP-backed routing so clusters advertise pod and service IPs via BGP into the data‑center backbone using… | ||
| The “Silk” Road: Building a CNI Plugin from Scratch - Usha Ramachandran & Angela Chin | Usha Ramachandran, Angela Chin | 29m |
Built a bespoke CNI called Silk that allocates a unique IP per container using a VXLAN overlay and a per-host lease model: a silk controller hands out per-cell… | ||
| Kubernetes and the CNI: Where We Are and What's Next - Casey Callendrello, CoreOS | Casey Callendrello | 37m |
CNI is a vendor‑neutral protocol plus a simple on‑disk binary and a long‑running daemon: the binary creates a veth pair, allocates the pod IP and the daemon… | ||
| Make Ingress-Nginx Work for you, and the Community - Fernando Diaz, IBM | Fernando Diaz | 27m |
Shows exactly how to add a real feature to ingress‑nginx: implement a nickname annotation, parse it in the controller, add a template variable and unit test… | ||
| Reveal Your Deepest Kubernetes Metrics - Bob Cotton, Freshtracks.io | Bob Cotton | 36m |
Kubernetes exposes thousands of metrics and this session narrows which ones matter by applying the USE and RED methods and by showing Prometheus queries. It… | ||
| Getting Started with Logging in Kubernetes - Eduardo Silva, Treasure Data | Eduardo Silva | 37m |
Shows how Fluent Bit runs as a daemonset per node to read container logs (from /var/lib/docker/containers or journald), query the Kubernetes API to merge pod… | ||
| TSDB: The Past, Present and the Future - Goutham Veeramachaneni, IIT Hyderabad | Goutham Veeramachaneni | 30m |
TSDB is the embedded storage engine behind Prometheus 2.0 and delivers concrete wins: 3–4x memory reduction, CPU for queried workloads drops from ~6 cores to… | ||
| How We Used Jaeger and Prometheus to Deliver Lightning-Fast User Queries - Bryan Boreham | Bryan Boreham | 23m |
Running Prometheus for cluster-wide metrics and Jaeger for distributed traces uncovers precise causes of slow user queries: tracing reveals an errored cache… | ||
| Pod Anomaly Detection and Eviction using Prometheus Metrics - David Benque & Cedric Lamoriniere | David Benque, Cedric Lamoriniere | 36m |
A Kubernetes controller called CubeVisor uses Prometheus queries (you supply a PromQL returning 1 for healthy, other values for deviation) to orchestrate… | ||
| Autoscale your Kubernetes Workload with Prometheus - Frederic Branczyk, CoreOS | Frederic Branczyk | 34m |
Explains how Kubernetes moves from Heapster to the resource, custom and external metrics APIs (available since Kubernetes 1.8, external API alpha), with a… | ||
| Who Shot the Cluster? - Audit Logging in Kubernetes - Marian Lobur & Mik Vyatskov, Google | Marian Lobur, Mik Vyatskov | 33m |
Audit logs can answer “who changed what and when” by recording API server requests; demo uses GKE sending events to Stackdriver to find a recreated malicious… | ||
| Multicluster Ingress Powered by Kubernetes Cluster Registry - Greg Harmon & Nikhil Jindal | Greg Harmon, Nikhil Jindal | 34m |
Demo shows a controller and CLI (cube-mci) that use a Cluster Registry to program a Google Cloud Load Balancer and provide a single anycast IP to three… | ||
| Exploring Container Mechanisms Through the Story of a Syscall | Alban Crequy | 26m |
Follows a single open() syscall inside a container to show the exact kernel subsystems and sequence involved: path lookup in the container mount namespace… | ||
| Understand and Troubleshoot the “Magic” of Kubernetes Networking - Minhan Xia & Rohit Ramkumar | Minhan Xia, Rohit Ramkumar | 32m |
Real cases from GKE show concrete failures and fixes: UDP DNS to a ClusterIP repeatedly blackholes because conntrack sends packets to a removed pod, fixed by… | ||
| Understanding Distributed Consensus in etcd and Kubernetes - Laura Frank, CloudBees | Laura Frank | 37m |
Explains Raft as etcd’s consensus mechanism, shows quorum = floor(n/2)+1 so a 5-node group needs 3 votes and tolerates one failure, and describes leader… | ||
| Managing Kubernetes: What You Need to Know About Day 2 - Craig Tracey, Heptio | Craig Tracey | 30m |
After deploy the focus is on predictable Day‑2: keep etcd external (3–5 nodes), tune kubelet reserved resources (dynamic config coming), and choose AZ strategy… | ||
| Fluentd Project Intro – Eduardo Silva & Masahiro Nakagawa, Treasure Data | Eduardo Silva, Masahiro Nakagawa | 36m |
Fluentd explains a concrete logging pipeline: core+plugin architecture with inputs, filters, buffers and outputs, packaged as td-agent for easy installs and a… | ||
| Storage WG Intro – Ben Hindman, Mesosphere, Clint Kitson, VMware & Quinton Hoole, Huawei | Ben Hindman, Clint Kitson, Quinton Hoole | 37m |
The Storage WG meets biweekly, collects input from ~30 companies and tracks concrete projects like CSI, Rook, OpenEBS and Portworx, and aims to produce a white… | ||
| Over-engineering my home with Kubernetes - Matthias Grüter, Spotify | Matthias Grüter | 05m |
Home Assistant runs on Kubernetes from a Raspberry Pi to get automatic restarts and retries and to avoid a single point of failure, with automations that… | ||
| Lightning Talk: What I Wish I’d Known about Fluentd with Kubernetes - Bryan Boreham, Weaveworks | Bryan Boreham | 05m |
Hands-on notes from tuning Fluentd on a production Kubernetes cluster sending logs to Loggly: install as a daemonset install so logs reach every node, enable… | ||
| Lightning Talk: Istio by Example - Josef Adersberger, QAware | Josef Adersberger | 05m |
Shows a hands‑on Istio demo deployed to minikube with a Bookinfo sample app and working auto sidecar injection; the stack wires up Prometheus and Grafana for… | ||
| Extending Istio Service Mesh w/Envoy v2 APIs - Dmitri Chtchourov & Tim Swanson | Dmitri Chtchourov, Tim Swanson | 05m |
A reference app called beattrack implements stateless and stateful services and runs with Envoy v1 static configs, Envoy v2 via an ADS controller and with… | ||
| SIG PM Intro | Ihor Dvoretskyi, Aparna Sinha | 39m |
SIG PM explains how Kubernetes 1.10 ships roughly 25 new features and runs on a predictable cadence of four releases per year with a three-month cycle and… | ||
| Minikube Intro | Dan Lorenc | 29m |
Local Kubernetes runtime that boots a VM, uses kubeadm to self‑host control plane components, and supports Docker, rkt and CRI‑O runtimes via the CRI. Started… | ||
| SIG Service-Catalog Deep Dive | Doug Davis, Michael Kibbe, Morgan Bauer | 33m |
Kubernetes-native implementation of the Open Service Broker API runs a custom API server, controller and the svcat CLI, with CI via Travis/Jenkins and E2E… | ||
| Kubespray Intro | Antoine Legrand, Matthew Mosesohn | 36m |
Kubespray deploys and manages Kubernetes clusters using Ansible playbooks and containerized control plane components, supports heterogeneous OSes and cloud or… | ||
| SIG Storage (K8s) Intro | Saad Ali | 35m |
Kubernetes storage SIG describes concrete progress: CSI moved to beta in 1.10 and the plan is to proxy in-tree plugins to CSI rather than delete APIs; local… | ||
| rkt Deep Dive | Alban Crequy, Iago López Galeiras | 36m |
Explains how rkt actually runs containers: rkt uses a pre-mount cgroup tree strategy so systemd in stage1 manages per-app cgroups with only selected subpaths… | ||
| NATS Intro | Colin Sullivan, Waldemar Quevedo | 38m |
NATS is a single‑binary, cloud‑native messaging system focused on extreme performance and simplicity with built‑in clustering and auto discovery so clients… | ||
| SPIFFE Deep Dive | Andrew Jessup, Emiliano Berenbaum, Neel Shah | 37m |
Explains how SPIRE implements SPIFFE with a gRPC workload API 1.0, pluggable server/agent plugins, and a demoed Kerberos node-attestor that joins a host to… | ||
| rkt Intro | Alban Crequy, Iago López Galeiras | 23m |
rkt is a Linux-only container runtime that claims no daemon operation and implements the AppC image format and execution model while providing a swappable… | ||
| SIG Scheduling Deep Dive | Bobby Salamat, Jonathan Basseri | 35m |
Kubernetes scheduler maintains a centralized cache updated from API events and picks one pod at a time, running a feasibility filter, ranking nodes with… | ||
| Kubeflow Deep Dive | David Aronchick, Jeremy Lewi | 32m |
Kubeflow presents a Kubernetes-native ML platform built from ksonnet packages and custom resources that already supports TF operator, a forthcoming PyTorch… | ||
| Source2Image Intro | Ben Parees, Matt Moore | 37m |
About 25 competing sessions run at the same time but the session lays out concrete options: traditional docker build requires a Docker socket, while s2i… | ||
| Prometheus Deep Dive | Julius Volz, Max Leonard Inden | 37m |
Panel answers focus on concrete ops choices: Prometheus intentionally avoids built-in clustering and long‑term storage and instead uses the remote API and… | ||
| SIG Multi-Cluster Deep Dive | Christian Bell, Madhu C.S., Nikhil Jindal | 42m |
Demo uses kube-mci to take a Kubernetes Ingress plus a kubeconfig with EU and Asia contexts and configure Google Cloud Load Balancer, creating configures GCLB… | ||
| Jaeger Project Deep Dive | Juraci Paixão Kröhling | 37m |
Overview of Jaeger components and deployment choices, with concrete operational details: clients emit spans to a local all-in-one image or to an agent that… | ||
| CNI Intro | Bryan Boreham, Casey Callendrello | 35m |
The CNI project provides a vendor-neutral JSON spec plus runtime and plugin libraries, plus a set of base plugins; five active maintainers and ~90–100… | ||
| Cloud Native Landscape Deep Dive | Dan Kohn | 35m |
Interactive Cloud Native Landscape is an open source React single‑page app driven by a core landscape.yml that today catalogs ~500 logos and the repo has… | ||
| Resource Management WG Deep Dive | Vishnu Kannan | 35m |
Kubernetes Resource Management WG explains concrete outcomes: it ships device plugins (beta) with production GPU support and hot‑pluggable driver bundles; adds… | ||
| SIG Apps Intro | Janet Kuo, Ken Owens | 43m |
SIG Apps outlines concrete work on the workloads surface: stabilizing the apps v1 workloads API (Deployment, ReplicaSet, StatefulSet, DaemonSet, Job)… | ||
| CNCF Cross-Cloud CI Intro | Denver Williams, Taylor Carpenter | 26m |
CNCF Cross-Cloud CI provisions Kubernetes across AWS, GCP, Packet (bare metal) and OpenStack, running composable stages: GitLab runners for builds, Terraform +… | ||
| NATS Deep Dive | Colin Sullivan, Waldemar Quevedo | 44m |
NATS is a compact, high‑performance messaging system with a ten‑command text protocol, default 1 MB default payload and a Go canonical client; it gives… | ||
| SIG Contributor Experience Deep Dive | Paris Pittman, Tim Pepper | 34m |
Kubernetes SIG Contributor Experience is building a developer guide to replace a scattered develop/ directory with many files untouched for 4+ months… | ||
| CoreDNS Intro | Miek Gieben | 27m |
CoreDNS reports as stable with active small fixes and concrete roadmap items: a tiny, simple plugin API where a setup function gets a context, DNS message and… | ||
| SIG Release Intro | Jaice Singer DuMars, Caleb Miles | 33m |
SIG Release runs Kubernetes quarterly releases on an approximate 13-week cadence, coordinating three overlapping release streams, producing schedules, release… | ||
| OCI BoF | Alban Crequy, Chris Aniszczyk | 35m |
Status update on OCI certification research: a third party (Kinvolk) audits existing test suite repos and finds many failing runtime tests (seccomp crashes… | ||
| VMware SIG Intro | Fabio Rapposelli, Steven Wong | 27m |
SIG organizes work to improve running Kubernetes on VMware infrastructure and sets concrete goals: design and scope the vSphere cloud-controller-manager… | ||
| Building a Go AI with Kubernetes and TensorFlow | Andrew Jackson, Josh Hoak | 34m |
An open‑source AlphaZero rewrite called MiniGo trains by massive self‑play and runs the pipeline on Kubernetes with TensorFlow, storing models and SGFs in GCS… | ||
| Observability and Debugging Cloud-Native Apps using Linkerd & Conduit | Franziska von der Goltz | 29m |
Demonstrates a service mesh workflow that adds observability without code changes by installing a control plane and injecting sidecar proxies; conduit inject… | ||
| Panel Discussion: Ask Us Anything: Microservices and Service Mesh | Jason McGee | 38m |
Panelists compare Istio and Envoy, show concrete patterns: enable sidecar Envoy proxy to get immediate telemetry and mTLS, use context propagation for… | ||
| Envoy Internals Deep Dive | Matt Klein | 37m |
Explains how Envoy is built as a single-process, per-core worker data plane with a lightweight main thread and no thread pools, using an embarrassingly… | ||
| GitOps for Istio - Manage Istio Config like Code | Varun Talwar, Alexis Richardson | 38m |
Claim that Istio configuration is treated as code with Git as the single source of truth and an in-cluster operator enforcing desired state, using… | ||
| How a Service Mesh Helped Us Build Production Cloud-Native Services | Israel Sotomayor | 28m |
A complete rewrite replaces a fragile PHP monolith with 70 microservices across 5 languages and 5 databases and uses OpenResty + Lua to reduce access token… | ||
| How to Get a Service Mesh Into Prod without Getting Fired | William Morgan | 28m |
Four practical lessons for getting a service mesh into production: use Linkerd or conduit as examples, start with one service or one environment and start… | ||
| Entitlements: Understandable Container Security Controls | Justin Cormack, Nassim Eddequiouaq | 28m |
Proposal defines a small set of human-readable container entitlements implemented in Docker as libentitlement, with an example running dockerd using three… | ||
| Case study: How Containers Makes Security and Compliance Instantly Easier | John Morello | 38m |
A 14-year-old storm-surge modeling app is repackaged into containers running on an Azure VM and scanned with Twistlock, yielding immediate wins: continuous… | ||
| OPA: The Cloud Native Policy Engine | Torin Sandall | 35m |
Open Policy Agent is a lightweight, host-local policy engine used at companies like Netflix to decouple decisions from enforcement; demos show API authz… | ||
| Achieving High Security at Scale with Microservices | Zach Arnold, Austin Adams | 37m |
Claims a production Kubernetes stack meets finance-grade security by enforcing dockerfile/CVE policies, using Notary-signed base images and content trust, and… | ||
| Clusters as Cattle: How to Seamlessly Migrate Apps Across Kubernetes Clusters | Andy Goldstein | 35m |
Shows a reproducible procedure: use Ansible + kubeadm to provision a new Kubernetes 1.10 cluster, take an on-demand backup of a 1.9 cluster with Heptio Ark to… | ||
| Kubernetes Multi-Cluster Operations without Federation | Rob Szumski | 34m |
Enterprises run about 5–10 clusters on average and Federation as-is creates a root‑level blast radius and single point of failure. The practical alternative is… | ||
| 101 Ways to “Break and Recover” Kubernetes Cluster | Suresh Visvanathan, Nandhakumar Venkatachalam | 36m |
Oath (Yahoo) operates about a dozen on‑prem Kubernetes clusters (7000+ pods per uploader) and recounts concrete outages and fixes: a single mistaken namespace… | ||
| Stories from the Playbook | Tina Zhang, Fred van den Driessche | 32m |
Describes how GKE SREs keep hosted masters healthy across 15 regions with a target 99.5% SLO, using per-cluster dashboards, fleet aggregation, probers and a… | ||
| Building cert-manager: Migrating Thousands of Users from kube-lego to use CRDs | James Munnelly | 37m |
cert-manager introduces CRDs (Issuer, ClusterIssuer, Certificate) and an Ingress shim that automatically creates Certificate objects, enabling a seamless path… | ||
| YAML is for Computers. ksonnet is for Humans | Bryan Liles | 36m |
Ksonnet uses Jsonnet as a data‑templating language to generate Kubernetes YAML, letting teams parameterize manifests, build reusable components and a… | ||
| Building Event-Driven Pipelines with Brigade | Brian Redmond | 29m |
Installs Brigade on Kubernetes (controller, gateway, API) and defines pipelines as JavaScript that spawn jobs; a push to GitHub triggers a webhook that runs a… | ||
| Building Applications to Increase Kubernetes Adoption, and Make Life Easier | Kate Kuchin | 27m |
Front-end teams build a small web app, Sonobuoy Scanner, that runs the CNCF conformance suite by pasting a generated kubectl command, auto-installs Sonobuoy… | ||
| Challenges to Writing Cloud Native Applications | Vallery Lancey | 31m |
Defines cloud native as containerized, dynamically orchestrated, service-oriented and contrasts Kubernetes/Docker platforms with legacy VMs; catalogs four… | ||
| Happy Helming with Service Catalog | Jeremy Rickard | 41m |
Demonstrates using Helm plus the Kubernetes Service Catalog to provision cloud services: the demo provisions a Cosmos DB via the Azure Open Service Broker… | ||
| From PaaS to Kubernetes: Combining the Power of Kubernetes with the Most Innovative Features of PaaS | William Denniss | 33m |
Explains how to get push-to-deploy on Kubernetes using Google Cloud Build + kubectl set image for rolling updates, with readiness probes to avoid traffic to… | ||
| Horizontal Pod Autoscaler Reloaded - Scale on Custom Metrics | Maciej Pytel, Solly Ross | 30m |
HPA v2 adds custom metrics so Kubernetes can scale on per-pod, object, or external signals rather than only CPU; demo uses Prometheus adapter and the Metrics… | ||
| Building a Kubernetes Scheduler using Custom Metrics | Mateo Burillo | 32m |
Shows how to replace scheduling decisions with a custom scheduler that queries monitoring backends (uses statsd, JMX, Prometheus and a Sysdig demo) and posts… | ||
| Writing Kubernetes Controllers for CRDs: Challenges, Approaches and Solutions | Alena Prokharchyk | 26m |
Live demo builds a CRD called Cluster plus controllers that actually provision and delete Kubernetes clusters on AWS using Rancher’s rke and a client code… | ||
| Kubernetes-style APIs of the Future | Daniel Smith | 26m |
Argues that the Kubernetes resource model is an API platform: enforced JSON structure, standard metadata and six verbs so every resource (pods, deployments… | ||
| Writing Kube Controllers for Everyone | Maciej Szulik | 37m |
A practical recipe for real controllers: code is a main loop that pops meta namespace keys from a rate‑limited queue (commonly an exponential failure limiter)… | ||
| Reducing Boilerplate With Kubernetes Custom Resource Definitions | James Bowes | 33m |
Manifold replaces repeated YAML with Kubernetes Custom Resource Definitions plus controllers that combine Deployment Service Ingress into a single reconciled… | ||
| Keynote: Serverless, Not So FaaS | Kelsey Hightower | 16m |
Argues that serverless needs a common event envelope not just FaaS and shows a working prototype: a draft CloudEvents envelope, an open‑source event gateway… | ||
| Storage WG Deep Dive | Ben Hindman, Clint Kitson, Quinton Hoole | 38m |
Roundtable dissects cloud native storage needs and commits to a white paper that defines terminology, maps the landscape and issues recommendations. Discussion… | ||
| Kubernetes Policy WG Deep Dive | Zhipeng Huang | 46m |
Six short reports lay out concrete work and gaps: a security profiles CRD implements versioned profiles applied via kubeadm and an admission path (demo… | ||
| What’s in the Box? Resource Management in Kubernetes | Louise Daly, Ivan Coughlan | 27m |
Concrete extensions to Kubernetes are described: CPU manager adds static CPU pinning and thread-level pinning (now in upstream with static policy), HugePages… | ||
| Compliant Data Management and Machine Learning on Kubernetes | Daniel Whitenack | 33m |
Claims a reproducible, auditable ML pipeline on Kubernetes that records full data provenance and works at scale; uses Pachyderm for git-like dataset… | ||
| Bringing Your Data Pipeline into The Machine Learning Era | Chris Gaun, Jörg Schad | 35m |
Shows a concrete pipeline that reads distributed data running on Apache Mesos and feeds it into TensorFlow running on Kubernetes via Kubeflow on Kubernetes… | ||
| The Path to GPU as a Service in Kubernetes | Renaud Gaubert | 29m |
NVIDIA outlines getting GPUs into Kubernetes production: a year-long effort that moves from 1.6 limits (one GPU per node) to a device plugin subsystem in 1.8… | ||
| Building ML Products With Kubeflow | Jeremy Lewi, Stephan Fabel | 30m |
Project demonstrates Kubeflow running on Kubernetes with a concrete GitHub-issue-title autogeneration product: interactive development in JupyterHub on curated… | ||
| Observing and Troubleshooting your Microservices with Istio | Isaiah Snell-feikema, Douglas Reid | 33m |
Istio instruments microservices via sidecar Envoy proxies, Pilot translating CRD routing into per-proxy config, Mixer exporting telemetry, and Citadel handling… | ||
| Accelerating Envoy with the Linux Kernel | Thomas Graf | 42m |
Demonstrates that replacing iptables redirects with socket-level BPF and Cilium yields a sidecar data path that skips TCP/Ethernet, preserves TCP handshakes… | ||
| Istio Tells me my Service has Slow Response Time, Now What? | Endre Sara, Enlin Xu | 22m |
Istio telemetry feeds Prometheus and Grafana so Turbonomic builds a realtime model of apps, containers, nodes and clouds and then takes actions: Istio… | ||
| Stretching the Mesh | John Joyce, Robert Li | 37m |
Demonstration shows a single Istio control plane (Pilot) running in GKE that pulls service and endpoint data from multiple Kubernetes API servers, with Citadel… | ||
| Canary Deploys with Kubernetes, Istio and Envoy | Jason Yee | 26m |
Shows a concrete canary workflow on Kubernetes using Istio (Pilot, Mixer, ingress) with Envoy as the data plane and automatic sidecar injection via the… | ||
| Istio - The Weather Company's Journey | Nick Nellis, Fabio Oliveira | 26m |
The Weather Company describes incrementally replacing homegrown routing with Istio to gain fleet visibility and control: they handle 24 Billion requests per… | ||
| Multi-Tenancy in Kubernetes: Best Practices Today, and Future Directions | David Oppenheimer | 37m |
Explains a concrete taxonomy (enterprise, Kubernetes-as-a-service, hosted-app instances) and maps each to exact controls: RBAC, PodSecurityPolicy… | ||
| TL;DR NIST Container Security Standards | Elsie Phillips | 22m |
Summary of a 63-page NIST report that lists concrete controls: scan and sign images, delete old images and use immutable, versioned names (myapp:2.3)… | ||
| Kubernetes Runtime Security: What Happens if a Container Goes Bad? | Jen Tong, Maya Kaczorowski | 28m |
Shows how to detect and respond when a container is compromised using system call and network hooks, demonstrates Falco running as a daemonset on GKE and… | ||
| A Hacker's Guide to Kubernetes and the Cloud | Rory McCune | 31m |
Attack paths and fixes framed from an attacker’s view: unauthenticated etcd and kubelet access lets an attacker download cluster secrets (the presenter finds… | ||
| From Kubelet to Istio: Kubernetes Network Security Demystified | Andrew Martin | 34m |
Covers how Kubernetes implements TLS and x.509 chains for API server and etcd, demonstrates one-hour certificate rotation for short lived leaf certs, and shows… | ||
| Secure Pods | Tim Allclair | 24m |
Defines a "secure pod" as a sandboxed pod that uses a separate guest kernel to add a second security boundary so kernel bugs like Dirty COW require a… | ||
| Building a Kubernetes on Bare-Metal Cluster | Alexandros Kosiaris, Guiseppe Lavagetto | 35m |
Builds Kubernetes clusters on bare metal to run Wikipedia traffic on 1,200 hardware machines, packaging Debian kube 1.7 and etcd, using calico with BGP to… | ||
| Inside Kubernetes Resource Management (QoS) – Mechanics and Lessons from the Field | Michael Gasch | 38m |
Explains how Kubernetes turns pod requests and limits into cgroup settings on the node, with requests map to cgroups shares, limits to CFS quota/period and the… | ||
| Introducing Amazon EKS | Brandon Chavis, Arun Gupta | 38m |
Amazon EKS provides a managed Kubernetes control plane running across 3 AZs with encrypted etcd, automatic patching of master patch versions, and worker nodes… | ||
| Cloudbursting with Kubernetes | Irfan Ur Rehman, Quinton Hoole | 37m |
Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018… | ||
| What Does “Production Ready” Really Mean for a Kubernetes Cluster? | Lucas Käldström | 35m |
Defines a practical checklist: secure TLS everywhere with rotatable certs and an external key signer, disable kubelet read-only ports, enforce RBAC and network… | ||
| Kubernetes 101: DIY Workshop | Bridget Kromhout | 36m |
A how-to for running a one‑day Kubernetes workshop using the container.training repo with cloud provisioning scripts for Azure and AWS, automated cluster setup… | ||
| Building a PaaS for Robotics with Kubernetes | Dhananajay Sathe | 25m |
Claims a working PaaS that moves robotics workloads from a pre-Docker LXE stack to Kubernetes using Docker + pods and CRI-O runtimes, reuses Open Service… | ||
| Why Running kubelet on your Vacuum Robot is (not) a Good Idea | Christian Simon | 33m |
Claim: a Xiaomi Mi Vacuum Robot can act as a Kubernetes node but practical limits make it dubious for production. ARM Cortex‑A7 device (512 MB RAM, 4 GB flash… | ||
| Kubernetes Advanced Scheduling | Robert Carosi, Ad van der Veer, Boris Mattijssen | 31m |
A custom heat-aware scheduler runs as a second scheduler using a kube-scheduler extender (HTTP on localhost, port 8100) and node annotations for boiler… | ||
| Kubernetes as an Abstraction Layer for a Connected Home | Scott Nichols | 29m |
Shows Kubernetes + the Open Service Broker API and Service Catalog managing an on‑prem Raspberry Pi/Arduino lighting board via a custom LED house broker that… | ||
| Building a Fault-Tolerant Resources Controller on Kubernetes | Morgan Bauer, Srinivas Brahmaroutu | 36m |
Custom Kubernetes controllers are implemented as CRDs that create deployments and services at runtime; a working demo runs on a three‑node cluster with two… | ||
| Everything you Need to Know about using GPUs with Kubernetes | Rohit Agarwal | 32m |
Kubernetes requires the NVIDIA driver installed on every GPU node and recommends building images with the CUDA toolkit but without vendor shared libraries… | ||
| Controllers: Lambda Functions for Extending your Infrastructure | Ross Guarino, Terin Stock | 28m |
Demonstrates a concrete controller pattern: define a CRD + codegen, hook up informers + listers to maintain a cached view, enqueue keys into a workqueue with… | ||
| Kubectl Plugins 101 | Jonathan Berkhahn, Carolyn Van Slyck | 36m |
Shows how kubectl plugins work by example: a tiny flags plugin that prints all kubectl-provided environment variables, a Go kill plugin that strips finalizers… | ||
| Monitoring: Follow the Data from the Darkest Corners | Piotr Szczesniak, Frederic Branczyk | 29m |
Shows exactly where observability data comes from and how it flows: kubelet’s metrics-server summary API and cAdvisor provide only current resource samples… | ||
| Using kubectl to Run your End-to-End Tests | Amit Kumar Das, Uday Kiran | 32m |
An open source tool called Litmus converts plain-English BDD feature files into executable Kubernetes actions by using go dog to generate step stubs and… | ||
| SIG Instrumentation Deep Dive | Frederic Branczyk, Piotr Szczesniak | 41m |
Covers concrete instrumentation work: Kubernetes ships a metric-server that scrapes kubelets, uses ~3–4 MB per node and needs ~20 GB memory to scale to 5,000… | ||
| Envoy Project Intro | Matt Klein, Jose Nino | 28m |
Envoy is deployed as a sidecar across Lyft’s infra — about 20,000 hosts handling peaks of 5 million RPS — and configuration is moved from hand-edited JSON into… | ||
| Open Policy Agent Deep Dive | Tim Hinrichs, Torin Sandall | 45m |
Open Policy Agent (OPA) is a host‑local, in‑memory policy engine that returns arbitrary JSON decisions (not just booleans) and integrates with systems like… | ||
| Panel Discussion: Modern App Security Requires Containers | Sean Michael Kerner | 36m |
Argues that containers provide concrete, secure-by-default primitives (names: Notary/TUF, SPIFFE, OPA) that harden the software supply chain and enable… | ||
| containerd Deep Dive | Stephen Day | 36m |
containerd 1.1 exposes a gRPC API, a Prometheus metrics endpoint and a Go client library that can pull images, create transactional snapshots and start… | ||
| Linkerd Deep Dive | George Miranda, Thomas Rampelberg | 34m |
Linkerd is put into production as a sidecar to deliver client-side load balancing with connection pooling, circuit breakers and retries, removing external load… | ||
| OpenTracing Project Deep Dive | Priyanka Sharma, Ted Young | 36m |
OpenTracing provides a narrow, stable API to instrument libraries so they propagate trace id and span id without hardwiring a backend; it uses inject/extract… | ||
| SAFE WG Deep Dive | Ray Colline | 35m |
Working group defines measurable attributes for access systems (expressibility, explainability, composability) and proposes an admin Bill of Rights plus… | ||
| Chaos Engineering WG Deep Dive | Sylvain Hellegouarch | 35m |
Shows a practical Chaos Toolkit flow that declares experiments (JSON/YAML), runs probes, and drives existing tools to learn real failures. Uses Chaos Toolkit… | ||
| WG App Def - Intro | Antoine Legrand, Gareth Rushgrove | 30m |
Working group defines concrete outputs: a proposed application CRD to group resources and express dependencies, a demoed client-side toolset built around… | ||
| OpenStack SIG Deep Dive | Chris Hoge, David Lyle | 33m |
OpenStack support in Kubernetes is moving to the external cloud controller manager model with code hosted at community/cloud-provider-openstack in the… | ||
| Edge Computing and Kubernetes BOF | Matthew Caulfield | 36m |
Discussion catalogs concrete edge use cases and hard numbers: video caching and IoT gateways at tens of thousands of sites, healthcare pre-positioned imaging… | ||
| CI/CD BoF: Delivering Quality Quickly | Brice Fernandes, Marc Carré | 36m |
Room debates concrete CI/CD tradeoffs: teams report replacing Jenkins with GitLab CI for YAML-as-code simplicity, others run self‑hosted Drone at ~200 repos… | ||
| CNCF Cross-Cloud CI Deep Dive | Denver Williams, Taylor Carpenter | 38m |
Cross-cloud provisioner deploys vanilla Kubernetes onto public clouds, private OpenStack and bare metal using Terraform and cloud-init, rendering… | ||
| Fluentd Deep Dive | Eduardo Silva, Masahiro Nakagawa | 40m |
Fluent Bit gains pod-level parsing by honoring the fluentbit.io/parser annotation so a DaemonSet reads /var/log/containers, queries the API for pod… | ||
| Source2Image Deep Dive | Ben Parees, Matt Moore | 36m |
Compares concrete on-cluster build options and tradeoffs: running a privileged pod that mounts the docker daemon is simple but opens host compromise; s2i + the… | ||
| kops Intro | Justin Santa Barbara | 37m |
kops is a CLI that actually provisions clusters: commands like kops create cluster, kops update cluster and kops rolling-update generate and run ~60 tasks to… | ||
| Envoy Deep Dive | Matt Klein | 38m |
Four lightning demos and a Q&A show concrete deployments: Booking.com uses Envoy to detect hidden failures (requests duplicating DB writes, zeroed timeouts… | ||
| TUF / Notary Deep Dive | David Lawrence, Justin Cappos | 42m |
TUF defines a JSON metadata hierarchy — root/timestamp/snapshot/targets — with canonical serialization, expiring versions, delegated keys and path… | ||
| Rook Deep Dive | Bassam Tabbara, Tony Allen, Jared Watts | 37m |
Rook claims to orchestrate distributed storage (Ceph, Minio) inside Kubernetes using CustomResourceDefinitions and an operator kit that uses informers and… | ||
| Istio Multi-Cluster Mesh Expansion BOF | Sven Mawson | 42m |
Demo shows a working Istio multi‑cluster mesh where Envoy sidecars in remotes talk to a central Pilot that knows all services, deployed with Helm charts for… | ||
| Kubernetes Conformance Deep Dive | William Denniss | 34m |
Collects API server audit logs (currently via SSH to the master because managed control planes like GKE block it) and loads raw JSON into SQLite to produce… | ||
| SIG API Machinery Deep Dive | Stefan Schimanski | 36m |
Step‑by‑step how to define Kubernetes API types in Go with code-generation tags, register them in a scheme, create the right codecs and generate a usable… | ||
| SIG Testing Deep Dive | Sen Lu, Cole Wagner | 36m |
Prow replaces a fragile Jenkins setup by representing CI jobs as a custom resource and running them as Kubernetes pods so upgrades no longer kill in‑flight… | ||
| SIG Release Deep Dive | Jaice Singer DuMars, Caleb Miles | 38m |
SIG Release explains how the project keeps a “covenant of trust” by running a disciplined release pipeline: quarterly three-month cadence releases, a defined… | ||
| SIG Node Deep Dive | Dawn Chen | 41m |
SIG Node focuses on concrete work: debug containers (alpha) inject a utility image into a running pod to inspect mounts, take core dumps and then terminate the… | ||
| SIG Autoscaling Deep Dive | Marcin Wielgus, Solly Ross | 39m |
Alpha Vertical Pod Autoscaler is available as a CRD and uses an admission plugin to override pod requests on creation while recommendations come from… | ||
| CoreDNS Deep Dive | Miek Gieben | 27m |
Tests use CoreDNS with the erratic plugin inside Docker to truncate every third UDP reply and a small Go client to run net.LookupHost; glibc retries truncated… | ||
| SIG Cluster Lifecycle: kubeadm Deep Dive | Alexander Kanevskiy, Timothy St. Clair, Luke Marsden | 33m |
kubeadm provides a repeatable bootstrap: install Docker and kubeadm packages, run kubeadm init / kubeadm join, then apply a CNI like weave-net and optional… | ||
| Multi-Tenancy WG Deep Dive | David Oppenheimer | 38m |
Proposal defines a versioned security profile CRD that kubeadm can apply to set API-server flags, inject cluster-scoped PodSecurityPolicies, and auto-populate… | ||
| Panel: Kubernetes Office Hours Live! | Jorge Castro, Ilya Dmitrichenko | 42m |
Live office hours describes how the community runs monthly help sessions, what to use to provision on-prem vSphere (CoreOS/COS, LinuxKit, PXE/pixi boot with… | ||
| SIG CLI Deep Dive | Phillip Wittrock | 38m |
Deep dive into the techniques behind kubectl: how Discovery Service and OpenAPI let generic commands discover API resources and schema to survive API… | ||
| Convergence of Serverless APIs & Compute | Sarah Allen | 35m |
Survey of concrete patterns and tools: event-driven ETL, notifications, CMS thumbnails, client-auth proxies, live migrations and IoT ingestion using Firebase… | ||
| Apache OpenWhisk: Building a Production-Ready Serverless Stack on/for Kubernetes | David Grove | 34m |
Apache OpenWhisk runs on Kubernetes with a Helm chart and a Minikube-friendly deploy and measures concrete tradeoffs: a small 13-node test cluster with 10… | ||
| Operating a Global-Scale FaaS on Top of Kubernetes | Chad Arimura, Matt Stephenson | 28m |
Oracle builds a global-scale FaaS on Kubernetes using the open-source Fn Project, targeting 15+ regions and enterprise SLAs. Deployments use Helm values plus… | ||
| The Serverless and Event-Driven Future | Austen Collins | 37m |
Announces a concrete format and ecosystem rather than theory: CloudEvents 0.1 JSON envelope standardizes event metadata (type, id, source, schema, extensions… | ||
| Feeding Realworld Data into Prometheus Microservice Apps on Kubernetes | Burkhard Noltensmeier | 19m |
A Kubernetes-based pipeline that converts factory signals on Raspberry Pi edge converters into OpenMetrics and ships them over MQTT with an MQTT-to-Prometheus… | ||
| Declarative Multi-Cluster Monitoring with Prometheus | Matthias Loibl, Frederic Branczyk | 35m |
Company runs per-namespace Prometheus instances and a federated data-center Prometheus, using the Prometheus Operator to declaratively deploy Prometheus… | ||
| Federated Prometheus Monitoring at Scale | Nandhakumar Venkatachalam, LungChih Tung | 31m |
Oath runs 12 Kubernetes clusters across multiple datacenters with ~2,000 worker nodes, ~12,000 pods and ~50,000 containers, each cluster hosting a local… | ||
| Using Jsonnet to Package Together Dashboards, Alerts and Exporters | Tom Wilkie | 35m |
Packages dashboards, alerts and exporters as reusable Jsonnet Monitoring Mixins that render into Prometheus alerting rules, Grafana JSON and YAML. Uses Jsonnet… | ||
| Integrating Prometheus and InfluxDB | Paul Dix | 26m |
InfluxDB now accepts Prometheus’ remote_read and remote_write endpoints so scraped samples can be replicated into InfluxDB for long term storage, preserving… | ||
| Beyond OpenTracing | Allison Richardet | 30m |
Demonstrates that a small, agreed event grammar plus structured logging and tracing gives actionable observability: a proof-of-concept grammar-log library… | ||
| Vitess and a Kubernetes Operator | Sugu Sougoumarane | 43m |
Vitess presents itself as a MySQL middleware that hides sharding and claims indefinite scale, cloud migration, and DBA sanity: it runs in Borg since 2013, is… | ||
| Policy-Based Volume Snapshots Management in Kubernetes | Jing Xu | 36m |
Implements a Kubernetes VolumeSnapshot CRD plus out‑of‑tree controllers to create/delete snapshots and provision volumes from them (demo shows automated… | ||
| Kubernetes Runs Anywhere, but Does your Data? | Jared Watts | 36m |
Kubernetes gets storage portability by running storage systems inside the cluster: Rook uses custom resource definitions and the operator pattern to deploy and… | ||
| Container Storage Interface: Present and Future | Jie Yu | 39m |
CSI defines out-of-tree plugins communicating over gRPC with idempotent APIs, splits control into controller vs node services, and requires plugins to expose a… | ||
| Using Kubernetes Local Storage for Scale-Out Storage Services | Michelle Au, Ian Chakeres | 46m |
Shows how Kubernetes runs scale-out stateful services on true local disks: clusters with 19 nodes automatically run a node-prep daemonset → label →… | ||
| Kubernetes Storage Lingo 101 | Saad Ali | 35m |
Maps Kubernetes storage to concrete actions: focuses on file and block only, explains Persistent Volumes/Persistent Volume Claims plus StorageClass-driven… | ||
| Keynote: Closing Remarks | Kelsey Hightower, Liz Rice | 02m |
Thanks and logistics dominate the closing: organizers stress that no sponsors no AC no water, thank AWS the scene CF Google Cloud helm hep tio and VMware for… | ||
| Keynote: Crossing the River by Feeling the Stones | Simon Wardley | 23m |
Shows how to replace vague "bla" strategies with visual, context‑specific maps anchored on the user and an evolution axis, claims ~30 recurring economic… | ||
| Keynote: Scaling Deep Learning Models in Production Using Kubernetes | Sahil Dua | 17m |
Booking.com runs a Kubernetes pipeline that trains deep learning models inside Docker containers (TensorFlow, Torch etc.), streams training data from Hadoop or… | ||
| Keynote: Running with Scissors | Liz Rice | 18m |
Demonstrates a live single-node Kubernetes VM running a vanilla Nginx image from Docker Hub, showing that container root maps to host root, that 86% of images… | ||
| Keynote: Kubeflow ML on Kubernetes | David Aronchick, Vishnu Kannan | 22m |
Announces Kubeflow 0.1/1.0 as a packaged, Kubernetes-native ML stack with Jupyter, TensorFlow training, TensorBoard and model serving; demo shows a local… | ||
| Bringing Cloud-Native Applications to the Edge of the Network | Megan O'Keefe, Steve Louie | 37m |
Shows a prototype edge management platform called OptiCon that uses Kubernetes clusters per site and a centralized manager to track clusters and push apps… | ||
| gRPC Intro | Jayant Kolhe, Sree Kuchibhotla | 37m |
High-performance RPC framework that Google evolves from a decade of internal use and runs across tens of thousands of services handling tens of billions of… | ||
| gRPC Deep Dive | Sree Kuchibhotla, Jayant Kolhe | 41m |
Explains gRPC’s C-core as three layers (surface with API and filter stack, transport, IO manager) and traces a unary RPC: channel → multiple subchannels (one… | ||
| Automating GPU Infrastructure for Kubernetes | Lucas Servén Marín | 26m |
Shows an end-to-end solution that containerizes the NVIDIA installer to auto-build and install kernel modules on Container Linux, running the build as a… | ||
| Serving ML Models at Scale with Seldon and Kubeflow | Clive Cox | 34m |
Seldon demonstrates a Kubernetes-native serving platform that uses Helm/Ksonnet, Argo workflows and OpenShift s2i packaging to wrap models as containers… | ||
| Deploying SQL Stream Processing in Kubernetes with Ease | Andrew Stevenson, Antonios Chalkiopoulos | 30m |
Shows an end-to-end setup: Lenses for Apache Kafka plus the Stream Reactor connectors (almost 50) turn SQL-like configs into Kafka Streams apps, deployed via… | ||
| Conquering a Kubeflow Kubernetes Cluster with ksonnet, Ark, & Sonobuoy | Kris Nova, David Aronchick | 36m |
Demo shows Kubeflow deployed with ksonnet, validated with Sonobuoy (conformance run 30–60 minutes that surfaces multiple failing e2e tests), and migrated with… | ||
| Lightning Talk: Chaos Engineering In Practice | Paul Jones | 05m |
Claims disciplined chaotic experiments expose weak points, contain blast radius and then automate fixes. Shows three concrete tools and how they behave… | ||
| Lightning Talk: Why you Should Really Pay Attention to K8S Security Best Practices - Benjy Portnoy | Benjy Portnoy | 06m |
CIS publishes a 200+ page CIS Kubernetes Benchmark and omitting a few checks lets attackers exfiltrate secrets — Tesla had a publicly accessible cluster with… | ||
| Lightning Talk: Schedule the Scaling of Your Kubernetes Resources Using kube-start-stop - Lili Cosic | Lili Cosic | 02m |
k8s-start-stop is an open source Kubernetes controller that applies a CRD schedule (scheduler.k8s.io/v1alpha1) to scale Deployments to a specified replica… | ||
| Lightning Talk: A Desktop GUI for your First Kubernetes Deployment - Alessandro Pilotti | Alessandro Pilotti | 05m |
A desktop GUI called Kubinstaller aims to let users deploy single- and multi-node Kubernetes clusters on Linux and Windows hosts with a few clicks, acting as a… | ||
| Lightning Talk: Kubernetes is Blowing Up - Ron Miller, TechCrunch (Any Skill Level) | Ron Miller | 05m |
Kubernetes gains both corporate backing and developer buy-in in weeks — AWS, Oracle, Microsoft, VMware and Pivotal join CNCF within about six weeks — and that… | ||
| Lightning Talk: Scaling Distributed Deep Learning with Service Discovery - Yong Tang | Yong Tang | 05m |
Distributed TensorFlow clusters on AWS use CoreDNS plugins for service discovery so cluster membership and hostnames exist before nodes start, enabling… | ||
| Lightning Talk: Tips for Operating Kubernetes with OpenStack Cloud Provider - Yang Yu & Yifeng Xiao | Yang Yu, Yifeng Xiao | 05m |
Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018… | ||
| Lightning Talk: Extending Kubernetes with gRPC - Vladimir Vivien, VMware | Vladimir Vivien | 05m |
gRPC becomes the actual plugin channel for Kubernetes: the Container Storage Interface exposes storage ops as gRPC, letting vendors ship CSI driver runs in a… | ||
| Lightning Talk: TSDB: The Engine behind Prometheus - Goutham Veeramachaneni, IIT Hyderabad | Goutham Veeramachaneni | 04m |
Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018… | ||
| Lightning Talk: The State Of FaaS on Kubernetes - Michael Hausenblas, Red Hat | Michael Hausenblas | 05m |
Overview of who is doing what: compares concrete FaaS projects like Apache OpenWhisk, kubeless and OpenFaaS, notes common use cases—cron replacements, image… | ||
| Lightning Talk: I Got your RBAC - kube-rbac-proxy - Frederic Branczyk, CoreOS (Any Skill Level) | Frederic Branczyk | 05m |
A tiny reverse proxy called kube-rbac-proxy sits in front of an app and uses Kubernetes TokenReview and SubjectAccessReview calls to authenticate service… | ||
| Lightning Talk: Not One Size Fits All, How to Size Kubernetes Clusters - Jeff Sloyer, IBM | Jeff Sloyer | 05m |
Explains concrete rules: categorize workloads (Go = CPU-light, Java/Node = memory-heavy), size nodes accordingly, and set requests vs limits so pods only… | ||
| Container Isolation at Scale (Introducing gVisor) - Dawn Chen & Zhengyu He, Google | Dawn Chen, Zhengyu He | 40m |
gVisor is a user‑space kernel written in Go that implements about 200 Linux syscalls to sandbox untrusted containers without a full VM, using a user‑space… | ||
| Keynote: Shaping the Cloud Native Future - Abby Kearns, Executive Director, Cloud Foundry Foundation | Abby Kearns | 17m |
Cloud Foundry argues that interoperability drives velocity and savings and gives concrete numbers: Cloud Foundry container runtime launches in October as… | ||
| Function Composition in a Serverless World - Erwin van Eyk & Timirah James, Platform9 | Erwin van Eyk, Timirah James | 26m |
Demo app sends a photo to a third‑party image recognition API then translates the first tag to Danish, and three composition patterns are compared with live… | ||
| Habitat Builder: Cloud Native Application Automation - Elliott Davis & Fletcher Nichol, Chef.io | Elliott Davis, Fletcher Nichol | 31m |
Habitat Builder is an open-source Apache v2 project that combines a distributed build system with a package repository and promotes artifacts into named… | ||
| Kubernetes and Taxes: Lessons Learned at the Norwegian Tax Administration - Bjarte S. Karlsen | Bjarte S. Karlsen | 37m |
Organization migrates 100s of apps onto six OpenShift clusters over 2½ years to get faster development and more efficient ops, running all new tax apps since… | ||
| Chaos Engineering WG Intro – Sylvain Hellegouarch, ChaosIQ (Any Skill Level) | Sylvain Hellegouarch | 28m |
Proposal to form a CNCF Chaos Engineering working group that will federate community practice and produce concrete outputs: educational material, a white… | ||
| CRI: The Second Boom of Container Runtimes - Harry Zhang & Xu Wang, HyperHQ | Harry Zhang, Xu Wang | 37m |
CRI standardizes kubelet-to-runtime calls so Kubernetes can swap in containerd, cri-o, frakti or other shims without changing kubelet, and the talk shows how… | ||
| Why Do I Need Kubernetes When I Already Have Cloud Foundry? - Sanjay Patil, SAP | Sanjay Patil | 37m |
SAP explains why Cloud Foundry stays for fast developer experience while Kubernetes handles stateful, hardware‑bound and multi‑node topology needs; concrete… | ||
| How we Orchestrate 7M+ Builds/Month with Kubernetes - Danielle Tomlinson | Danielle Tomlinson | 24m |
Orchestration runs 7M+ builds/month by running Nomad servers inside Kubernetes while build agents run on AWS autoscaling groups, using Helm and Terraform to… | ||
| containerd Intro – Stephen Day, Docker (Any Skill Level) | Stephen Day | 29m |
Containerd started April 2016, ships a stable 1.0 in December 2017 and adds Kubernetes CRI support in late April 2018; it exposes a gRPC API and Go client… | ||
| You Ever Wonder Why We're Here? - Sarah Christoff, Cloudreach (Beginner Skill Level) | Sarah Christoff | 23m |
A quick tour from 1960s mainframes to modern orchestration that states the concrete differences: virtual machines emulate hardware via hypervisors and binary… | ||
| Seamless Development Environments on Kubernetes using Telepresence - Ara Pulido | Ara Pulido | 36m |
Telepresence replaces a pod with a two‑way proxy so a local process uses the cluster’s DNS, service discovery and mounted data volumes as if it ran in‑cluster… | ||
| Grafeas Community Meetup BOF - Wendy Dembowski, Google (Any Skill Level) | Wendy Dembowski | 30m |
Grafeas is an open source metadata store working on a beta API surface with some missing attestations and a proposed QA metadata type; the group discusses… | ||
| Building a Cloud Native Culture in an Enterprise - Deep Kapadia & Tony Li | Deep Kapadia, Tony Li | 38m |
The New York Times retires data centers and moves 300 apps to AWS and GCP, shutting down 140+ legacy services, using GKE for production and a Delivery… | ||
| Scaling Non-Traditional Contributor Mentoring Initiatives - Paris Pittman, Google | Paris Pittman | 36m |
Built a non‑traditional mentoring system for Kubernetes that starts from 75 interviews and a 120‑person survey showing 60% said they could benefit from a… | ||
| Kata Containers: Getting Involved with the Kata Community - Anne Bertucio & Samuel Ortiz | Anne Bertucio, Samuel Ortiz | 35m |
Kata Containers delivers lightweight VMs per container that combine hardware-backed isolation with OCI/CRI compatibility so Docker and Kubernetes treat each VM… | ||
| Panel Discussion: Containers in Enterprise Cloud Strategy - Moderated by Anni Lai, Huawei | Anni Lai | 37m |
Panelists report concrete wins and hard lessons: a mobile gaming backend hits 25,000 req/s mobile backend and halves server count after containerizing, one app… | ||
| From Data Centers to Cloud Native - Dave Zolotusky & James Wen, Spotify | Dave Zolotusky, James Wen | 34m |
Spotify migrates from on-prem data centers to Google Cloud Platform and replaces proprietary pieces with Kubernetes on GKE, gRPC, Istio and managed services… | ||
| Insights From a k8s Newcomer Working Within the Release Process - Tim Pepper | Tim Pepper | 31m |
Joined the 1.10 release as an issue triage shadow and becomes the 1.11 issue triage lead, doing daily GitHub reading to relabel ~170 tags, route bugs to SIGs… | ||
| Take Control of your Filesystems with containerd’s Snapshotters - Stephen Day, Docker, Inc. | Stephen Day | 32m |
Describes containerd’s snapshotter abstraction that replaces Docker’s tightly coupled graphdrivers, exposing a small API that returns mounts instead of… | ||
| AWS / kops Deep Dive / Hacking Session – Justin Santa Barbara, FathomDB | Justin Santa Barbara | 01h 11m |
Walks through how kops contributions actually get merged: contributors hit a CLA requirement, PRs trigger end-to-end CI on AWS (including costly cluster… | ||
| SIG Apps Deep Dive – Janet Kuo & Kenneth Owens, Google (Intermediate Skill Level) | Janet Kuo, Ken Owens | 01h 26m |
SIG Apps deep dive covers concrete fixes and proposals: an Application CRD to aggregate resources across namespaces and clusters, workloads API stabilized to… | ||
| Serverless WG BoF - Doug Davis, IBM (Any Skill Level) | Doug Davis | 40m |
Working group delivers a white paper and a landscape spreadsheet inventorying serverless projects, publishes CloudEvents v0.1 with HTTP and adjacent mappings… | ||
| Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security | Liz Rice | 02m |
Conference schedule updates and logistics: next regional events list Seattle Dec 11–13, 2018 and Shanghai Nov 14–15, 2018, with 2019 Europe set for Barcelona… | ||
| Applying Least Privileges through Kubernetes Admission Controllers - Benjy Portnoy, Aqua Security | Benjy Portnoy | 34m |
Admission controllers enforce least privilege by intercepting API requests and either mutating or rejecting objects; demonstrated a dynamic admission webhook… | ||
| Completely Securing the Software Supply Chain using Grafeas + in-toto - Lukas Puehringer | Lukas Puehringer | 25m |
Concrete workflow: a machine-verified project layout and link metadata defines every build, test and package step, with each step’s artifacts signed by… | ||
| Practical and Useful Latency Analysis using Istio and OpenCensus - Varun Talwar | Varun Talwar | 35m |
Claims that Istio/Envoy plus OpenCensus can find p95/p99 hotspots across hundreds of services with minimal code changes, by combining Istio (Envoy) sidecar… | ||
| Linkerd Intro – Andrew Seigner, Buoyant.io, & George Miranda (Any Skill Level) | Andrew Seigner, George Miranda | 25m |
Overview of Linkerd with a live demo: deploy two commands to run a daemonset per node proxy, a baseline cluster and a load tester that shows three times the… | ||
| Scalability Intro – Shyam Jeedigunta, Google & Bob Wise, AWS (Any Skill Level) | Shyam Jeedigunta, Bob Wise | 43m |
SIG Scalability runs CI scale tests mostly on GCE, executing 100–5,000 node tests with a density test (30 pods/node) and load tests that block releases. It… | ||
| Securing Serverless Functions via Kubernetes Objects - Sebastien Goasguen, Bitnami | Sebastien Goasguen | 38m |
Shows how kubeless CRDs deploy functions as real Kubernetes objects and leverages pod identity and AWS IAM via kube-iam to give each function cloud… | ||
| nothing matches | ||