KubeCon + CloudNativeCon Europe 2019
2019-05-20..2019-05-23
Barcelona, Spain
[KubeCon + CloudNativeCon Europe 2018, KubeCon + CloudNativeCon Europe 2019, KubeCon + CloudNativeCon Europe 2020, KubeCon + CloudNativeCon Europe 2021, KubeCon + CloudNativeCon Europe 2022, KubeCon + CloudNativeCon Europe 2025, KubeCon + CloudNativeCon Europe 2026]
| title | author | length |
|---|---|---|
| Lightning Talk: Cloud Native Wales: How We Contributed to the Community with No Code | Lewis Denham Parry | 05m |
Two people in Wales launch Cloud Native Wales and hit one year of meetups with 100s of local attendees. They run a public workshop and a Raspberry Pi… | ||
| Lightning Talk: How to Regain the Trust of Your Users | Eduard Iacoboaia | 05m |
Booking.com migrates from OpenShift to a vanilla Kubernetes platform, moves the control plane to bare metal with systemd, and removes kube-proxy so pods are… | ||
| Lightning Talk: Slow Starting Containers, How to Check Their Health? | Matthias Bertschy | 05m |
Kubernetes liveness probes cause restart loops for slow-starting Java servers when default initialDelaySeconds and failureThreshold are too short, and… | ||
| Lightning Talk: Managing Drivers in a Kubernetes Cluster | Renaud Gaubert | 05m |
Problem: drivers must match kernel and break ops workflows. Proposal: run a container per node that loads compiled kernel modules, uses DKMS when available… | ||
| Lightning Talk: Hot, Fresh Containers - How Containers Are Like Cookies! | Kaslin Fields | 05m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Lightning Talk: Oh Sh*t! The Config Changed! | Joel Speed | 05m |
Kubernetes configmaps and secrets often update in place so pods don’t restart, causing the majority of Pusher’s 2018 production incidents and recurring outages… | ||
| Lightning Talk: Ready, Steady, CKA! | Olive Power | 06m |
Fast, practical CKA hacks: rely on Kubernetes docs tasks and concepts and the kubectl cheat sheet to avoid searching, keep a running score because the passing… | ||
| Lightning Talk: Using Istio's Mixer for Network Request Caching | Zach Arnold | 05m |
Claims that Istio Mixer request-level cache can remove service-side caching by intercepting responses and storing them with TTL semantics using Envoy filter… | ||
| Lightning Talk: When the Command Line is Not Enough: Why Your OSS Project Needs A GUI | Risha Mars | 04m |
Argues that a GUI complements a CLI by aggregating outputs of six CLI commands into one deployment page that shows a topology graph, golden metrics, sortable… | ||
| Lightning Talk: Using Jupyter Notebooks To Gain Insight Of Your Cluster | Ruben D Orduz | 06m |
Uses JupyterLab notebooks and the Kubernetes Python client to stream kube-apiserver logs, normalizes them with simple Python string ops and stores rows in… | ||
| Lightning Talk: Developing Your Career While Working on Kubernetes | Piotr Szczesniak | 05m |
Kubernetes involvement translates to concrete career leverage: owning a KEP, chairing a SIG, or merging a steady stream of PRs creates visible impact that… | ||
| Lightning Talk: Kubespray CI with KubeVirt on Baremetal | Antoine Legrand | 04m |
Kubespray CI moves from cloud VMs to baremetal by running KubeVirt inside a large metal Kubernetes cluster, letting CI create per-job namespaces that… | ||
| Lightning Talk: Reliability Engineering for Humans | Hannah Foxwell | 06m |
Human-focused reliability uses SLIs, SLOs and error budgets as concrete levers: measure user journeys, set realistic SLOs (never 100%), and trade off stability… | ||
| Lightning Talk: Kubernetes Jobs and the Sidecar Problem | James Wen | 05m |
Spotify migrates many stateless services to GKE and hits a concrete problem: Kubernetes Jobs finish their main container while a long‑running sidecar keeps the… | ||
| Lightning Talk: Fake it Until You Make it: Unit Tests with Go-Client Fake Client | Fernando Diaz | 05m |
Shows how to use the client-go Fake Client (the object-tracker-backed fake that implements the clientset interface) to unit test Kubernetes calls. Walks… | ||
| Lightning Talk: Beyond Operators: Reimagine Distributed Applications on Kubernetes | Vladimir Vivien | 06m |
Argues Kubernetes needs a smaller runtime API for native distributed apps and demonstrates a POC: a lightweight coordinator that launches worker pods… | ||
| Lightning Talk: Back to the Future with eBPF | Beatriz Martínez Rubio | 05m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Keynote: Closing Remarks | Bryan Liles | 02m |
Lunch and coffee sit in the sponsor showcase and also in Hall 8.1, baggage check sits next to registration, and the schedule is at sched.co/MQjU or by… | ||
| KubeFlow BoF | David Aronchick, Yaron Haviv | 48m |
Room discussion focuses on actionable work: a KFServing standard API is being defined to let one model package deploy to TensorFlow Serving, Seldon, or cloud… | ||
| Keynote: Closing Remarks | Janet Kuo | 01m |
Day two opens with keynotes at night after a new stack pancake breakfast at 7:30 and coffee at 8:00, followed immediately by a meetup in the sponsorship case… | ||
| Democratizing Service Mesh on Kubernetes | Gabe Monroy | 08m |
Announces the Service Mesh Interface (SMI) — a portable API surface that already covers three concrete features: SMI traffic split (used with Flagger to run an… | ||
| Keynote: Closing Remarks | Bryan Liles | 01m |
Closing remarks list logistics and timings for day two: diversity lunch and hack meet in D1 and Hall 8 at 12:30, general attendee lunch served in Hall 7 and… | ||
| Keynote: Opening Remarks – Bryan Liles | Bryan Liles | 03m |
Opening remarks state Kubernetes is platform of platforms, framed as the foundation for building varied production systems rather than an endpoint, and urge… | ||
| Keynote: Closing Remarks | Bryan Liles, Janet Kuo | 02m |
Announcements list upcoming community events and practical deadlines: Kubernetes Forums — Seoul, Sydney, Bengaluru, Delhi; Shanghai June 24–26 with… | ||
| Keynote: From COBOL to Kubernetes: A 250 Year Old Bank's Cloud-Native Journey | Laura Rehorst | 19m |
ABN AMRO modernizes a 250‑year bank by building a platform for 400 development teams across 3,000 applications and 20,000 employees, delivering an MVP EKS… | ||
| Keynote: Kubernetes - Don't Stop Believin' | Bryan Liles | 20m |
Kubernetes hits scale: 31,000 contributors, ~164,000 commits and 1.2 million comments across GitHub, and the platform goal shifts from product to substrate for… | ||
| Keynote: Opening Remarks – Janet Kuo | Janet Kuo | 01m |
Brief opening announces attendee shirts pickup at registration and the CNCF store after the session, and lists KubeCon 2020 dates — Amsterdam March 30–April 2… | ||
| Network Flow Monitoring in Kubernetes with Contiv/VPP CNI and the Elastic Stack | Rastislav Szabo | 35m |
Describes a concrete pipeline for Kubernetes network flow monitoring using Contiv/VPP CNI which emits VPP IPFIX flow records via FD.io VPP; Logstash ingests… | ||
| Keynote: Stitching Things Together | Dan Kohn | 11m |
Argues that Kubernetes wins for three concrete reasons: it works well because it inherits Google Borg and Omega ideas and active architectural contributions… | ||
| Keynote: 2.66 Million | Cheryl Hung | 07m |
Claims that CNCF projects record 2.66 million contributions across 36 CNCF projects, with the foundation growing 130% in one year to over 400 members. Metrics… | ||
| Keynote: CNCF Project Update | Bryan Liles | 36m |
CNCF reports 38 active projects and gives concrete status updates: OpenEBS adds container‑attached storage and multiple data engines, Linkerd ships 33 edge… | ||
| Sponsored Keynote: Network, Please Evolve | Vijoy Pandey | 05m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Keynote: Getting Started in the Kubernetes Community | Lucas Käldström, Nikhita Raghunath | 20m |
Kubernetes counts 31,000 unique contributors and runs public SIG meetings, KEPs, GitHub membership, reviewers, approvers and subproject owners as promotion… | ||
| BoF Deep Dive: Chaos Engineering | Sylvain Hellegouarch | 29m |
Demo shows using Chaos Toolkit CLI and the Chaos Platform to run reproducible experiments against a Kubernetes service: change a deployment image, run load… | ||
| Tutorial: Introduction to Kubeflow Pipelines | Michelle Casbon, Dan Sanche, Dan Anghel | 01h 26m |
Creates a GKE cluster, installs Kubeflow and Kubeflow Pipelines, then compiles a pipeline (Python SDK -> tar -> Argo) that trains a TensorFlow model from a… | ||
| Tutorial: Back to Basics: Hands-On Deployment of Stateful Workloads on Kubernetes | David Zhu | 01h 19m |
Hands-on tutorial shows how Kubernetes primitives actually deploy stateful apps: use a StatefulSet with PVC template so each replica gets its own dynamically… | ||
| Using K8s Audit Logs to Secure Your Cluster | Mark Stemm | 35m |
Kubernetes adds API-server audit logging in K8s 1.11/1.13 and audit events are JSON records; you can route them to files, webhooks or dynamic audit sink… | ||
| Panel Discussion: GitOps & Best Practices for Cloud Native CI/CD | Allison Richardet, Laura Tacho, Ivan Pedrazas, Tracy Miranda, Alexis Richardson | 31m |
Defines GitOps as operation by pull request with Git as the single source of truth, driving Kubernetes/Terraform orchestration and CI like Jenkins and Jenkins… | ||
| Kubernetes Failure Stories and How to Crash Your Clusters | Henning Jacobs | 29m |
Zalando runs ~118 clusters across ~380 AWS accounts for ~900–1,000 developers and presents eight concrete failures: a shared ALB + Skipper OOM that knocked… | ||
| Istio, We Have a Problem! Understanding and Fixing Bugs with a Service-Mesh | David Gageot | 34m |
Deploys a multi‑service quiz app on a local Docker for Mac Kubernetes cluster, injects Envoy sidecars, and uses Service Graph, Prometheus + Grafana dashboards… | ||
| The Multicluster Toolbox | Adrien Trouillaud | 36m |
Shows how an actual system is built and run across three GKE contexts (cluster0, cluster1, cluster2): a controller that watches Foo in one cluster and creates… | ||
| Intro: TUF / Notary | Justin Cappos, Justin Cormack | 39m |
TUF (spec) and Notary (Go implementation) provide signed metadata, automatic recovery from stolen keys, and practical revocation so a compromised server or… | ||
| Intro: KubeEdge | Cindy Xing, Dejan Bosanac | 33m |
KubeEdge is a CNCF sandbox project that runs a cloud control plane + edge agent setup (cloudhub/edgehub) with a modular agent framework called Beehive… | ||
| Intro: SPIFFE | Emiliano Bernbaum, Scott Emmons | 30m |
Defines concrete identity artifacts and a running system: a SPIFFE ID modeled as a URI, x.509 and JWT SVIDs for proof, and a local workload API socket that… | ||
| P2P Docker Image Distribution in Hybrid Cloud Environment with Kraken | Yiran Wang, Cody Gibb | 36m |
Kraken is a P2P docker registry that breaks images into content‑addressable blobs, runs an agent on every host plus origin and tracker services, and builds a… | ||
| Birds of a Feather: Radio Access Network LTE/CBRS Edge | John Studarus | 25m |
Packet Host describes running Kubernetes clusters in micro datacenters co‑located at cell towers using LTE/CBRS and shipping‑container sites (Vapor IO) and… | ||
| Portable, Universal Single Sign-On for Your Clusters | Miguel Martínez | 33m |
Shows a practical SSO path that avoids editing cluster API flags by wiring an OIDC-capable proxy in front of apps and, when flags are immutable, a second proxy… | ||
| Kubernetes the New Research Platform | Lindsey Tulloch, Bob Killen | 38m |
Kubernetes is deployed on Compute Canada OpenStack with Kubespray, Terraform and Ansible and used to run an Argo workflow that launches 30 seeded instances of… | ||
| Intro: Cluster Lifecycle SIG | Lucas Käldström, Tim St. Clair | 40m |
SIG Cluster Lifecycle builds and maintains the tools for creating, upgrading and managing clusters: kubeadm GA (v1.13) as a minimal installer and composable… | ||
| Intro: Cloud Native Buildpacks | Terence Lee, Stephen Levine | 35m |
Cloud Native Buildpacks build OCI images from source using a lifecycle of detect, build, export binaries and a local CLI called pack CLI, not Dockerfiles or… | ||
| Intro: CLI SIG | Maciej Szulik, Phillip Wittrock | 37m |
Overview of kubectl internals and how to contribute: entry point lives in kubernetes/cmd/kubectl, commands live under pkg/kubectl/cmd, and the code follows a… | ||
| Intro: Network Service Mesh (NSM) | Frederick Kautz, Ed Warnicke | 39m |
Network Service Mesh claims to bring cloud‑native L2/L3 networking by mapping a service‑mesh model to packet payloads and by letting pods request named network… | ||
| Intro: Autoscaling SIG | Marcin Wielgus | 36m |
Covers how to combine HPA, VPA and Cluster Autoscaler with concrete knobs: set HPA target utilization to leave a two‑minute spike buffer (example: allow 50%… | ||
| KEPs: Evolving Kubernetes at the Speed of Trust | Caleb Miles | 27m |
KEP is the Kubernetes Enhancement Proposal system that is now required for release coordination and aims to replace single flat markdown files with a… | ||
| Panel Discussion: From User to Member: Becoming a Kubernetes Contributor | Jason Murray, Cyrine Jabri, James Munnelly, Kris Nova, Nikhita Raghunath | 27m |
Panel gives concrete steps to go from casual user to Kubernetes org member: membership asks applicants to list your contributions (PRs, issues, docs, community… | ||
| Operating kube-apiserver Without Hiccups | Stefan Schimanski, David Eads | 26m |
Describes a concrete solution that keeps kube-apiserver available during upgrades and cert rotation by running static pods managed by an operator which creates… | ||
| Tutorial: Cloud-Agnostic Serverless | Sebastien Goasguen | 01h 09m |
Shows how to deploy portable serverless apps using Knative serving on a GKE cluster, installed via Helm, with build and deploy driven by GitLab CI and… | ||
| Using eBPF to Bring Kubernetes-Aware Security to the Linux Kernel | Dan Wendlandt | 47m |
eBPF is used to add Kubernetes-aware security directly in the kernel: the demo combines Cilium and BCC with kprobes on a 4.15 minikube host to audit syscalls… | ||
| Reproducible Development and Deployment with Bazel and Telepresence | Christian Roggia | 37m |
Bazel produces hermetic reproducible builds and can emit distroless images that do not depend on a distro; the demo builds an app, loads Bazel image into… | ||
| Scale Kubernetes Service Endpoints 100x | Minhan Xia, Wojciech Tyczyński | 43m |
Proposes replacing one giant Endpoints object with many EndpointSlice objects (default ~100 endpoints per slice) and a controller that creates, rebalances and… | ||
| Intro: Helm | Michelle Noorali, Matt Fisher | 34m |
Helm is a Kubernetes package manager that packages deployable Kubernetes manifests into charts (a chart is a directory with templates, a Chart.yaml and… | ||
| Envoy SDS: Fortifying Istio Security | Yonggang Liu, Quanjie Lin | 34m |
Istio 1.1 uses an Envoy Secret Discovery Service (SDS) agent running as a sidecar/DaemonSet to provision x.509 keys from Citadel or external CAs so the private… | ||
| Tutorial: Building Security into Kubernetes Deployment Pipelines | Michael Hough, Sam Irvine | 38m |
Hands-on demo of signing images with Notary and scanning for CVEs, using a local registry and Katacoda lab instances; pipeline steps run manually to show… | ||
| Tutorial: Bullet-Proof Kubernetes: Learn by Hacking | Luke Bond, Ana-Maria Calin | 01h 07m |
Hands-on workshop arms teams with 22 disposable Kubernetes clusters and a cheat sheet, then runs a capture‑the‑flag sequence that demonstrates how common… | ||
| Intro: Kubernetes (PM) SIG | Ihor Dvoretskyi, Stephen Augustus | 27m |
SIG PM describes how Kubernetes runs product and program work around KEPs and a new enhancements workflow that replaces the old features process, with… | ||
| Intro: Testing SIG | Cole Wagner, Aishwarya Sundar | 35m |
The Kubernetes testing stack centers on Prow job CRD running on Kubernetes: plank pairs jobs to pods, crier reports status to GitHub or Pub/Sub, and sinker… | ||
| Intro: Azure SIG | Stephen Augustus, Craig Peters | 36m |
SIG Azure explains why SIG exists and what has actually changed: cloud provider code moves out of tree into a staging repo with a nightly publishing bot, the… | ||
| Intro: Rook | Alexander Trost, Travis Nielsen | 35m |
Rook 1.0 is presented as an operator framework that runs storage inside Kubernetes rather than beside it and it already has 150+ contributors and CNCF… | ||
| Intro: Open Policy Agent | Rita Zhang, Max Smythe | 40m |
Open Policy Agent Gatekeeper integrates OPA with Kubernetes as an admission webhook that enforces declarative, CRD-packaged policies called constraint… | ||
| Intro: NATS | Waldemar Quevedo | 37m |
NATS presents itself as a lightweight, Go-based pub/sub system with measured peaks of 18 million messages/sec (single-node) and up to 80 million messages/sec… | ||
| Intro: Linkerd | William Morgan | 37m |
Linkerd presents a CNCF service mesh with a Rust data plane proxy and Go control plane that is already in production for over 24 months. It ships mTLS on by… | ||
| Intro: Kubernetes WG for Multitenancy | Tasha Drew | 24m |
Working group defines soft vs hard multitenancy, publishes a tenant concept doc and a GitHub project board, and is building a tenant CRD now to automate tenant… | ||
| Intro: CNCF Security SIG – Sarah Allen & Jeyappragash Jeyakeerthi | Sarah Allen, Jeyappragash Jeyakeerthi | 34m |
CNCF Security SIG explains that SAFE became the SIG to centralize recurring cloud-native security problems (identity, authZ, auditing), leverages SPIFFE for… | ||
| Es-operator: Building an Elasticsearch Operator From the Bottom Up | Mikkel Larsen | 38m |
Zalando builds a Kubernetes-native Elasticsearch operator that manages 100s-of-node clusters (peaks to ~512 on Black Friday), wraps StatefulSets with a custom… | ||
| Authentication and Security in gRPC Microservices | Jan Tattermusch | 31m |
Explains concrete gRPC auth patterns: per-call JWT bearer tokens (or opaque OAuth2 tokens) on top of TLS, channel-level mutual TLS with client certificates… | ||
| Istio New Workload Identity Provision Pipeline Based on Envoy SDS | Quanjie Lin, Diem Vu | 30m |
Istio 1.1 replaces secret files with an Envoy-based pipeline: a node-agent uses Envoy SDS streamSecrets to fetch keys and certs, generates private keys on-node… | ||
| Serverless is Interesting But FaaS is Not Enough | Jonas Bonér | 35m |
Argues that FaaS alone can’t build general-purpose, low-latency stateful apps and demonstrates a Kubernetes/Knative proof-of-concept that attaches an Akka… | ||
| Streamlining Kubernetes Application CI/CD with Bazel | Gregg Donovan, Chris Love | 40m |
Etsy describes a CI/CD pipeline that uses Bazel with rules_docker and rules_kubernetes to produce deterministic container images without the Docker daemon… | ||
| What WePay Learned From Processing Billions of Dollars on GKE Using Linkerd | Mohsen Rezaei | 36m |
WePay migrates all synchronous REST and gRPC payment traffic on GKE to Linkerd and Namerd, moving discovery and telemetry out of services and into a data… | ||
| Writing kubectl Plugins for Everyone: Develop, Package & Distribute | Ahmet Alp Balkan | 30m |
Kubernetes rebuilds its kubectl plugin model into a simple exec-based system where any executable named kubectl-foo binary on PATH becomes a subcommand… | ||
| Intro: Virtual Kubelet | Ria Bhatia, Anubhav Mishra | 27m |
Project declares a stable core interface (v1.0) and gains CNCF sandbox status while provider maturity varies; a provider for Nomad provider translates… | ||
| Intro: Kubernetes Architecture SIG | Jaice Singer DuMars | 31m |
SIG Architecture explains how architectural governance happens: it runs the KEP (Kubernetes Enhancement Proposal) process, maintains the API review team (~5… | ||
| Intro: Kubernetes (Instrumentation) SIG | Frederic Branczyk | 30m |
SIG Instrumentation defines Kubernetes metrics and logging interfaces, maintains kube-state-metrics (large-cluster optimizations) and the metrics-server used… | ||
| Intro: Kubernetes (Release) SIG | Tim Pepper, Claire Laurence | 35m |
SIG Release runs a fixed quarterly cadence — four releases per year with 10–13 week cycles, an enhancements freeze around week four, and a release branch… | ||
| Intro: Dragonfly | Allen Sun, Zuozheng Hu | 43m |
Dragonfly is an open-source P2P image and file distro system that Alibaba runs at cluster sizes up to 10,000 nodes, using a CDN+P2P mesh with DFDaemon and… | ||
| Intro: Harbor | Henry Zhang, Steven Ren | 35m |
Harbor is a CNCF registry that stores images and Helm charts, claims ~7,800 GitHub stars and 120+ contributors, and adds OIDC login + CLI token support in v1.8… | ||
| Intro: Fluentd | Masahiro Nakagawa | 32m |
Fluentd separates a small core and hundreds of plugins for inputs, filters, buffers and outputs, so logs flow through an input→filter→buffer→output pipeline… | ||
| Extending Envoy with WebAssembly | John Plevyak, Dhi Aurrahman | 37m |
Envoy gains a WebAssembly extension system that loads dynamic wasm modules per Envoy silo so filters run in single-threaded silos without locks; supported… | ||
| Intro: Cortex | Tom Wilkie, Bryan Boreham | 37m |
Cortex provides horizontally scalable, highly available, multi-tenant long‑term storage for Prometheus metrics, ingesting via the remote_write API and… | ||
| Intro: Contributor Experience SIG | Elsie Phillips, Paris Pittman | 25m |
Updates from the Contributor Experience SIG cover mentoring, tooling, and comms: a shift to group mentoring with face‑to‑face new contributor workshop and… | ||
| Intro: Falco | Jorge Salamero Sanz | 36m |
Falco is a CNCF Sandbox runtime security engine that watches kernel system calls (via eBPF-based syscall capture or the Sysdig kernel module), ingests… | ||
| Intro: CoreDNS | Daniel Garcia, Michael Grosser | 29m |
CoreDNS presents a plugin-based DNS server used as the default DNS in Kubernetes since 1.13 with version 1.1.5, about 150 maintainers and ~4,000 stars and 30… | ||
| Intro: CNCF Serverless WG/CloudEvents | Scott Nichols, Klaus Deissner | 35m |
CNCF Serverless WG describes CloudEvents as a minimal interoperable event envelope with version 1.2 adding subject, data_content_type and data_ref (claim check… | ||
| Intro: CNCF CI | Lucina Stricko, Denver Williams | 24m |
A live third‑party validation system called cncf.ci status dashboard continually builds, deploys and runs end‑to‑end tests for CNCF graduated and incubating… | ||
| Tutorial: A Day in the Life of a Cloud Native Developer | Randy Abernethy | 01h 29m |
Hands-on lab that builds a complete microservice pipeline: creates a gRPC service in Go from proto3 IDL and a client, compiles code, containers the service… | ||
| Intro to CNAB: Packaging Cloud Native Applications with Multiple Toolchains | Chris Crone | 37m |
Introduces CNAB as a JSON bundle plus an invocation image that performs concrete actions, not just a spec idea: demos build a minimal installer that prints… | ||
| From Snowflake Servers to Snowflake Clusters - The GitOps Journey | Allison Richardet | 34m |
MasterCard enforces one dedicated cluster per application and reduces drift by standardizing three cluster types: control cluster (one per environment)… | ||
| Panel Discussion: Ask Us Anything: Microservices and Service Mesh | Lin Sun, Jason McGee, William Morgan, Zack Butcher, Louis Ryan | 37m |
Panel covers why service mesh exists and concrete trade-offs: solves routing, retries, mTLS and observability but adds CPU/latency cost; examples include an… | ||
| Building an Enterprise-ready Lambda Experience (with Hands-On Demo) | Alexandre González Rodríguez | 33m |
Built an internal, enterprise-ready Lambda-style service for BBVA that layers an API-backed UX over OpenShift/Kubernetes and an existing App Engine stack… | ||
| Benchmarking Cloud Native Storage | Josh Berkus | 39m |
Benchmarks use sysbench, PGbench and CockroachDB workload tools on a 6-node 20-core, 120GB RAM, 2×200GB SSD cluster with a shared network. Tests compare… | ||
| Kubectl Apply 2019: Defense Against the Dark Arts | Phillip Wittrock, Jennifer Buckley | 35m |
Explains why kubectl apply is reworked, what was built and how it behaves now: a new server-side apply API moves diff and patch logic into the server, adds… | ||
| The Kubernetes Control Plane for Busy People Who Like Pictures | Daniel Smith | 28m |
A rapid 201-level tour of the Kubernetes control plane enumerates each real controller, the exact resources they read and write, and the implementation… | ||
| Kanary - Automated and Integrated Canary Testing Using CRD and an Operator | David Benque, Cedric Lamoriniere | 39m |
Kanary is a CRD-based Operator that runs canary tests entirely inside Kubernetes, using Prometheus queries (PromQL), Istio for traffic when available, HPA… | ||
| Unit Testing Your Kubernetes Configurations Using Open Policy Agent | Gareth Rushgrove | 34m |
Unit tests run Open Policy Agent policies against rendered Kubernetes manifests and other structured outputs, catching issues before cluster deploy. The… | ||
| Kubernetes Security and How to Fix K8s Cluster at Scale | Simon Pearce, Sebastian Scheele | 37m |
Managed service runs hundreds of public API Kubernetes clusters across OpenStack and AWS and automates security and upgrades: centralized inventory + dashboard… | ||
| Sponsored Keynote: Expanding the Kubernetes Operator Community | Rob Szumski | 06m |
Operators embed expert runbooks to automate rebalancing, failover and seamless upgrades for stateful services and can run a full Postgres stack locally on a… | ||
| Keynote: Reperforming a Nobel Prize Discovery on Kubernetes | Ricardo Rocha, Lukas Heinrich | 20m |
Recreates the 2012 Higgs discovery analysis on Kubernetes using a 70 TB CMS open dataset split into 25,000 files, submitted from a Jupyter notebook into a… | ||
| Sponsored Keynote: Recursive Kubernetes: Cluster API and Clusters as Cattle | Joe Beda | 06m |
Cluster lifecycle tooling brings declarative APIs to creating and managing Kubernetes clusters using Cluster API v1alpha1 and CRDs that model Cluster, Machine… | ||
| Keynote: Kubernetes Project Update | Janet Kuo | 17m |
Kubernetes marks five years and traces its lineage from Borg and Omega to Docker and CN CF graduation while claiming 31,000 contributors and ranking number two… | ||
| Keynote: Welcome Remarks | Janet Kuo | 01m |
Evening welcome opens with a concrete instruction: refresh the Sketch app and do it often because sessions change rooms to meet capacity, so schedules and room… | ||
| OpenTelemetry: Backwards Compatibility with OpenTracing and OpenCensus | Ben Sigelman, Bogdan Drutu, Spiros Xanthos | 48m |
OpenTelemetry merges OpenTracing and OpenCensus into a single API and implementation set, reusing the OpenCensus agent/collector and providing a shim so… | ||
| OpenTelemetry: Panel Discussion and Q&A | Ben Sigelman, Morgan McClean, Bogdan Drutu | 01h 08m |
OpenTelemetry merges OpenTracing and OpenCensus into one project that prioritizes backwards compatibility with two years of guaranteed bridges and migration… | ||
| Intro: Kubernetes (VMware) SIG | David vonThenen, Steven Wong | 45m |
Alpha is available now with beta due in June and GA in July 2019; the team demonstrates the vSphere CSI driver deployed alongside the vSphere cloud controller… | ||
| Scavenging for Reusable Code in the Kubernetes Codebase | Kevin Lingerfelt | 18m |
Replaces a custom pod-by-IP scanner with Kubernetes primitives, showing how a throwaway list-and-scan becomes an indexer backed by client-go cache.Indexer and… | ||
| Istio Multi-Cluster Service Mesh Patterns Explained | Daniel Berg, Ram Vennam | 34m |
Three concrete Istio multi-cluster patterns: flat-network single control plane routes pod-to-pod across clusters (requires non‑overlapping, routable pod IPs… | ||
| Intro: Service Catalog SIG | Jonathan Berkhahn | 31m |
Service Catalog provisions third‑party services in Kubernetes using the Open Service Broker API; a cluster admin registers brokers once, then users create… | ||
| Network Machinery: A United-Front for Network Troubleshooting with CRDs | Adel Zaalouk | 36m |
Proposes a set of Kubernetes CRDs — NetworkTrafficShaper, NetworkConnectivityTest, NetworkMonitor/Control and module validators — that encode troubleshooting… | ||
| Learn how to Leverage Kubernetes to Support 12 Factor for Enterprise Apps | Brad Topol | 34m |
Maps each 12‑Factor rule to concrete Kubernetes primitives and shows a live deploy that actually runs: uses ConfigMap and Secret for config, Deployments and… | ||
| Fine-Grained Permissions in K8s: What’s Missing, and How to Fix That | Vallery Lancey, Seth McCombs | 34m |
Kubernetes RBAC is too coarse to restrict actions inside a namespace, and namespaces are not security boundaries, so fine-grained control uses admission… | ||
| Databases on Kubernetes Using a Custom Operator: Day 1, Day 2, and Beyond | Johannes Unterstein | 41m |
Built a managed Neo4j service that runs for a year on GKE, using a custom Go operator that manages a CRD, creates three-node statefulsets with GKE persistent… | ||
| Ingress V2 and Multicluster Services | Rohit Ramkumar, Bowei Du | 27m |
Proposal defines a new resource model with GatewayClass and Gateway (proxy instance + capacity, TLS), a recursive VirtualHost for app routing, and… | ||
| Building Images Efficiently and Securely on Kubernetes with BuildKit | Akihiro Suda | 29m |
BuildKit runs on Kubernetes as a daemonset, StatefulSet or plain pod and demonstrates concrete speedups: multi-stage parallel builds cut a >5‑minute build to… | ||
| Kubernetes + Encrypted Memory = Security * Privacy | Harshal Patil, Pradipta Banerjee | 23m |
Hardware-backed memory encryption plus a VM runtime protects in-use secrets by running containers inside an IBM secure VM (SVM) launched via the kata container… | ||
| Laying the Foundation: Real World Kubernetes Deployment Patterns | Josh Rosso, Craig Tracey | 32m |
Compares managed, distribution and roll-your-own Kubernetes with concrete tradeoffs: managed services block control‑plane access so pod security policies may… | ||
| Keynote: End User Awards | Cheryl Hung | 09m |
Company moves from zero to 100+ clusters and 2,500+ applications in about a year by building the Intuit Kubernetes System Manager (iKSM), which automates… | ||
| Rootless, Reproducible, and Hermetic: Secure Container Build Showdown | Andrew Martin | 30m |
Argues that rootless builds are now practical but each tool trades safety for usability, compares BuildKit, img, buildah, Kaniko, Makisu and others, and shows… | ||
| Keynote: Debunking the Myth: Kubernetes Storage is Hard | Saad Ali | 19m |
Claims that Kubernetes storage is hopelessly hard get narrowed into concrete layers: select storage vs deploy vs integrate vs consume. Block and file storage… | ||
| Sponsored Keynote: What I Learned Running 10,000+ Kubernetes Clusters | Jason McGee | 06m |
IBM reports running hundreds of thousands of created clusters and tens of thousands active daily, managed by a 25-person SRE team; Jenkins CI/CD proved too… | ||
| Keynote: A Journey to a Centralized, Globally Distributed Platform – Katie Gamanji | Katie Gamanji | 13m |
Condé Nast International claims a centralized, globally distributed platform running 9 Kubernetes clusters across five regions (three EU, US, APAC, two China)… | ||
| Sponsored Keynote: Building a Bigger Tent: Cloud Native, Cultural Change and Complexity | Bob Quillin | 06m |
Claims a WebLogic deployment time drop from half a day to two minutes by containerizing and scripting deployment, and shows migration paths using WebLogic on… | ||
| Keynote: How Spotify Accidentally Deleted All its Kube Clusters with No User Impact | David Xia | 20m |
During a GKE migration Spotify deleted two production clusters by mistake, once via the web console and once when Terraform’s global state file no longer… | ||
| Intro: Kubernetes (AWS) SIG | Justin Santa Barbara | 37m |
sig-aws manages AWS-specific Kubernetes interfaces and currently owns five subprojects (cloudprovider, ALB, IAM, encryption, EBS) with seven projects total and… | ||
| Deep Dive: Harbor | Steven Zou, Daniel Jiang | 34m |
Harbor 1.8 releases yesterday and ships concrete changes: replication rewritten (85% of code) now supports push and pull modes, replicates container images and… | ||
| Deep Dive Fluent Bit: Logging & Stream Processing | Eduardo Silva | 38m |
Live demo shows Fluent Bit ingesting a 1 million–line JSON log file, initially overwhelming Elasticsearch until a memory buffer limit throttles output and… | ||
| Deep Dive: Falco | Michael Ducy | 39m |
Falco now ingests non-syscall events by running an embedded Kubernetes audit webhook that feeds a generic event interface into the rules engine, extracting… | ||
| Intro: Envoy | Lizan Zhou | 34m |
Envoy is a C++14 high‑performance sidecar and edge proxy that adds about ~1 ms of latency while handling service discovery, tracing, retries and mutual TLS; it… | ||
| Fluent Bit: Extending Your Logging Pipeline with Go | Warren Fernandes, Jason Keene | 37m |
Fluent Bit is extended with Go output plugins to send logs via RFC 5424 syslog; the team builds a C-shared .so via C shared buildmode and implements four… | ||
| Tracing is More Than Traces: The Insights in Trace Aggregates | Daniela Miao | 35m |
Aggregating thousands of LightStep traces and running statistical correlation on latency histograms surfaces the real causes of tail latency: resource… | ||
| What's the Performance Overhead? Answering the Biggest Question in Tracing | Gabriela Soria | 32m |
Benchmarks use the OpenTracing Java API with JMH and JMH visualizer, testing tracers like Jaeger, Haystack and MockTracer across scenarios: a synthetic… | ||
| Building Cross-Cloud ML Pipelines with Kubeflow with Spark & Tensorflow | Holden Karau | 35m |
Shows how Kubeflow, Spark and TensorFlow form a repeatable cross‑cloud pipeline: use JupyterHub for exploration, Spark for distributed feature prep, then… | ||
| Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105 | Ian Coldwater | 34m |
CVE-2018-1002105 allows specially crafted connection upgrade WebSocket requests to bypass the API server and speak directly to backends, enabling both… | ||
| JustFootball’s Journey to gRPC + Linkerd in Production | Ben Lambert, Kevin Lingerfelt | 32m |
JustFootball migrates a GraphQL-backed monolith that made ~80 internal calls per query to gRPC over HTTP/2 to cut connection and CPU overhead, publishing… | ||
| Panel Discussion: Multi-Tenancy in Kubernetes: Current State and Future Roadmap | Sanjeev Rampal, Ryan Bezdicek, Erica Von Buelow, Tasha Drew | 40m |
Kubernetes lacks a formal multi-tenancy model; the working group catalogs use cases and publishes prototypes in the kubernetes-sig/multi-tenancy repo… | ||
| Smarter Kubernetes Access Control: A Simpler Approach to Auth | Rob Scott | 35m |
Shows concrete authorisation fixes: use kubectl auth can-i to test scoped permissions (impersonation requires extra rights), use kubectl who-can (Aqua) to list… | ||
| Container Forensics: What to Do When Your Cluster is a Cluster | Maya Kaczorowski, Ann Wallace | 34m |
Covers where to collect forensic evidence in Kubernetes clusters: centralized logs (infrastructure, k8s audit, OS, app) sent to stackdriver or elasticsearch… | ||
| The Magic of Kubernetes Self-Healing Capabilities | Saad Ali | 28m |
Kubernetes achieves self‑healing by combining a declarative API with controllers with reconcile loops that watch the API server and drive actual state to… | ||
| Service Meshes: At What Cost? | Lee Calcote, Girish Ranganathan | 28m |
An open-source benchmark and playground called measuree deploys sample apps to a Kubernetes cluster and runs load tests to quantify cost: three functional… | ||
| Zero Trust Service Mesh with Calico, SPIRE, and Envoy | Shaun Crampton, Evan Gilman | 40m |
Builds a Zero Trust mesh by pairing Envoy sidecars with SPIRE-issued identities and Calico policy. SPIRE uses the Kubernetes workload attestor, exposes certs… | ||
| Deep Dive: TUF / Notary | Justin Cappos, Lukas Puehringer | 41m |
TUF provides compromise resilience for software updates with self-revocation and key rotation so delegated keys can revoke or replace themselves without every… | ||
| Deep Dive: Testing SIG | Benjamin Elder, James Munnelly | 21m |
kind uses Docker/containerd to run full multi‑node Kubernetes clusters inside containers, packaging kubelet, kubeadm, systemd and all core images into a kind… | ||
| Deep Dive: SPIFFE | Scott Emmons, Emiliano Bernbaum | 27m |
SPIRE is deployed on Kubernetes with the server usually as a statefulset + PVC and agents as a daemonset that expose the workload API via a UNIX domain socket… | ||
| Deep Dive: Service Catalog SIG | Jonathan Berkhahn | 38m |
Deep dive into the Service Catalog internals: it implements the Open Service Broker API and exposes five core Kubernetes kinds… | ||
| Deep Dive: Rook | Jared Watts, Bassam Tabbara | 37m |
Rook is a Kubernetes storage orchestrator that ships Rook 1.0 and adds operators for Ceph, Cassandra (alpha), EdgeFS (EdgeFS beta), CockroachDB and more. A… | ||
| Deep Dive: Open Policy Agent | Torin Sandall, Tim Hinrichs | 38m |
Open Policy Agent runs as a standalone decision engine using the Rego language, already hitting 25,000 image pulls per week, 800+ Slack users and ~2,000 GitHub… | ||
| Managing CRDs and Operators in Practice | Zhen Zhang, Wei Guo | 32m |
Runs and maintains more than 100+ CRDs created by 10+ teams where ~70% come from upstream packages, and introduces a company CRD standard that enforces naming… | ||
| Grow with Less Pains - Meshing From Monolith to Microservices | Leo LIang | 39m |
Company moves a monolith to ~40 services and a service mesh that handles billions of requests per day using Linkerd + Nginx edge, Consul then SRV-based… | ||
| Building an Edge Control Plane with Kubernetes and Envoy | Flynn | 20m |
Ambassador is an edge control plane that wires Kubernetes resources into Envoy by generating global Envoy config, moving from a REST+DB prototype to storing… | ||
| Kubernetes Storage 101 | Jan Šafránek, David Zhu | 37m |
Explains that Kubernetes separates user requests (PersistentVolumeClaim) from admin-backed volumes (PersistentVolume) and groups them with StorageClass for… | ||
| Resize Your Pods w/o Disruptions aka How to Have a Cake and Eat a Cake | Karol Gołąb, Beata Skiba | 29m |
Kubernetes is changing pod resizing so resource requests become editable and containers can often grow or shrink without a restart. The proposal adds In-Place… | ||
| Building HA Multi-Cloud Clusters Using WireGuard as a Network Overlay | Lucas Servén Marín | 33m |
Claims a single Kubernetes cluster can span clouds and regions by using WireGuard as an overlay to secure cross-cloud pod and node traffic; implements this… | ||
| The Data Analytics Platform or How to Make Data Science in a Box Possible | Krzysztof Adamski | 34m |
ING builds a Kubernetes-based data platform aimed to reach 50% of 50,000 employees in two years, hosting multi-petabyte workloads with Spark on Kubernetes… | ||
| Building Cloud Native GDPR Friendly Systems for Data Collection | Zsolt Homorodi | 39m |
Reproducible GDPR-compliant data pipeline built on Kubernetes that automates provisioning, TLS and mutual auth, and observability while keeping researcher… | ||
| Deconstructing Apache Hadoop: A Dialogue About a Cloud-Native Refactor | Anu Engineer, Marton Elek | 40m |
An Apache Hadoop refactor called Ozone is an S3‑compatible object store ported to Kubernetes (alpha v0.4, GA planned by Q3) that keeps HDFS semantics while… | ||
| Panel Discussion: Democratizing HPC & AI: Startups Scale Up with Cloud Native | Emily Tanaka-Delgado, Charlie Davies, Priya Shah, Ant Kennedy, Alfonso Santiago | 35m |
Startups explain concrete wins: a location engine (see app.travel time.me) serves 35 countries and ranks 100,000 locations in under 250 ms after moving to… | ||
| Towards Kubeflow 1.0, Bringing a Cloud Native Platform For ML to Kubernetes | David Aronchick | 37m |
Project claims a cloud-native ML platform on Kubernetes that already runs core pieces in production: Kubeflow pipelines for orchestration, Katib for… | ||
| How We Used Kubernetes to Host a Capture the Flag (CTF) | Ariel Zelivansky, Liron Levin | 30m |
Hosted CTF runs on GKE with a hybrid design: 10,000 precreated Services with predefined ClusterIPs mapping registration cookies to routes, and on‑demand pod… | ||
| Deep Dive: NATS | Waldemar Quevedo | 35m |
NATS v2 ships June 10 with concrete changes: NATS v2 adds account-based multi‑tenancy, streams and services abstractions, JWT-backed decentralized identities… | ||
| Deep Dive: Kubernetes WG for Multitenancy | Sanjeev Rampal, Ryan Bezdicek | 47m |
Working Group defines four architectures for multitenancy (A: multiple clusters on IaaS, B: single-cluster with a Tenant CRD and NamespaceTemplate, C… | ||
| Deep Dive: Kubernetes (Instrumentation) SIG | Frederic Branczyk, Max Leonard Inden | 35m |
kube-state-metrics switches from caching Kubernetes objects to cache Prometheus metrics and cuts scrape tail latency that was 10–22 seconds on a 250-node test… | ||
| Deep Dive: Kubernetes Architecture SIG | Timothy St. Clair | 35m |
SIG Architecture outlines how Kubernetes evolves: reviews of the KEP process and API review catch cross-cutting changes, conformance work vets a corpus of… | ||
| Deep Dive: Kubernetes (Release) SIG | Tim Pepper, Stephen Augustus | 32m |
Kubernetes Release SIG describes a concrete plan to turn quarterly releases and nine months of support into a single, reproducible build/test/publish… | ||
| Deep Dive: Dragonfly | Jin Zhang, Haibing Zhou | 34m |
Dragonfly is an open P2P container image distribution system that runs a supernode (scheduling, peer lists, seeding) plus clients (dfget/dfdaemon acting as… | ||
| Deep Dive: Cortex | Tom Wilkie, Bryan Boreham | 39m |
Cortex is a Prometheus-compatible, multi-tenant TSDB that stores samples in compressed “chunks” (roughly six-hour blobs a few KB each) and writes them to… | ||
| Deep Dive: CoreDNS | Yong Tang, John Belamaric | 35m |
CoreDNS is Kubernetes' DNS since GA in 1.11 and default in 1.13, with 148 contributors, 16 maintainers, 29 public adopters and ~4,000 GitHub stars. The code… | ||
| Deep Dive: Contributor Experience SIG | Elsie Phillips, Paris Pittman | 32m |
Contributor summit reports 300 registered / 130 new contributors and follow-up workshops plus mentoring sessions for onboarding. Automation updates include a… | ||
| Deep Dive: CNCF Serverless WG/CloudEvents | Clemens Vasters, Vlad Ionescu | 37m |
A deployment pipeline is built that ingests GitHub webhooks into AWS SNS and Lambda, writes events into DynamoDB and triggers via DynamoDB stream to a promoter… | ||
| Deep Dive: CNCF CI | Lucina Stricko, Denver Williams | 26m |
CNCF.ci runs third‑party CI that builds, deploys and end‑to‑end tests CNCF projects on arm64 on bare metal and x86, reusing upstream Helm charts and project… | ||
| Deep Dive: Cluster Lifecycle SIG (Kubeadm) | Fabrizio Pandini, Lubomir I. Ivanov | 41m |
Kubeadm now ships stable CLI and keeps control plane as static pods while adding concrete HA features: automatic certificate copy (upload-certs) encrypts CA… | ||
| Deep Dive: Cloud Native Buildpacks | Terence Lee, Stephen Levine | 34m |
Explains implementing the two required executables detect and build, using the pack CLI to produce OCI images from builder images that contain many buildpacks… | ||
| Intro: Kubernetes SIG | Da Ma, Zefeng Wang | 26m |
Kubernetes lacks batching for HPC/ML workloads so Volcano provides a CRD-based job abstraction, a volcano scheduler and controllers that implement gang… | ||
| Deep Dive: Virtual Kubelet | Jeremy Rickard, Lei Zhang | 35m |
Virtual Kubelet registers as a fake node and reconciles pods via a provider interface implemented with client‑go and shared informers, exposing HTTP endpoints… | ||
| Intro: Telepresence | Richard Li | 31m |
Telepresence makes a laptop act like a Kubernetes node by swapping deployment for a proxy that forwards cluster requests to a local process, proxies… | ||
| Intro: Vitess | Sugu Sougoumarane, Deepthi Sigireddi | 38m |
Vitess presents a MySQL sharding middleware that runs on Kubernetes, exposes a single endpoint via vtgate, and manages per-node MySQL with vttablet and a… | ||
| Rook, Ceph, and ARM: A Caffeinated Tutorial | Federico Lucifredi, Sebastien Han | 38m |
Rook deploys and manages a full Ceph stack on Kubernetes using CSI for dynamic volumes, RBD for block, RGW for S3‑compatible object, and CephFS via… | ||
| Large Scale Distributed Deep Learning with Kubernetes Operators | Yuan Tang, Yong Tang | 29m |
Kubernetes operators automate large-scale training by mapping distribution strategies to CRDs and runtimes: tf-operator (Parameter Server) manages PS-style… | ||
| Large Synoptic Survey Telescope: From Cloud Native to Dark Energy | Fabrice Jammes | 37m |
Qserv is a petascale distributed DB built to hold 47 billion objects and about 9 trillion detections by sharding the sky into 20,000 shards across many nodes… | ||
| Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services | Stephan Fudeus | 33m |
Claims that Istio lets Kubernetes talk to legacy hosts are tested using Istio 1.0→1.1 with Envoy sidecars on VMs and control plane in-cluster; problems include… | ||
| Benchmarking Cloud Native Databases Performance on Kubernetes | Iqbal Farabi, Tara Baskara | 33m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Data Without Borders - Using Rook Storage Orchestration at a Global Scale | Jared Watts | 32m |
Rook acts as a Kubernetes control plane for storage, deploying Ceph, EdgeFS and CockroachDB across clusters and declaring Ceph production-ready around 1.0… | ||
| Securing Cloud Native Communication, From End User to Service | Daniel Bryant, Nic Jackson | 37m |
Conference demonstrates concrete setup: Ambassador + Consul Connect configures Envoy proxies to enforce mTLS between edge and services and uses SMI intentions… | ||
| Co-Evolution of Kubernetes and GCP Networking | Purvi Desai, Tim Hockin | 42m |
Kubernetes shifts from node NATs to giving pods real IPs by using alias IPs, removing host port collisions; GCP scales route-based prototype from routes… | ||
| gRPC load balancing and Service Mesh | Vishal Powar | 29m |
Compares client-side gRPC policies to gRPCLB lookaside load balancing and proxy-based balancing, demonstrating XDS-driven Envoy sidecars (Istio or Google… | ||
| Treating Network Assets as Scheduleable Resources | Vinothkumar Siddharth | 29m |
Centralized controller plus a mutating admission webhook and a lightweight CNI plugin treat VPC network assets as cluster-wide schedulable resources… | ||
| GPU Machine Learning From Laptop to Cloud | Mark Puddick | 32m |
Step-by-step workflow that builds a containerized Keras/TensorFlow pipeline from laptop to GKE using Docker + NVIDIA runtime, CUDA drivers and Minikube… | ||
| Caller ID in Kubernetes | Michael Danese | 37m |
Kubernetes now exposes pod proof of identity via service account token projection (v1.12) with automatic rotation, TTL and audience scoping, so pods get… | ||
| Migrating South East Asia's Biggest Payments Company to Kubernetes | Akashdeep Singh | 25m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| The Serverless Landscape and Event Driven Futures | Dee Kumar | 28m |
CNCF organizes a Serverless Working Group and publishes a serverless landscape listing hundreds of projects; CloudEvents becomes the proposed spec to… | ||
| Koping with Change: What kops Learned Adopting etcd3, cluster-api and CRDs | Justin Santa Barbara | 36m |
kops documents a concrete migration path: move clusters from etcd2 to etcd3 using a new etcd-manager that adds automated backups, cluster resizing and… | ||
| Restart-Free Vertical Scaling for Kubernetes Pods | Vinay Kulkarni, Peng Du | 33m |
Design enables restart-free vertical scaling of pod CPU/memory by treating a resource delta as a new scheduling decision: API patch writes an annotation… | ||
| Going from 5s to 5ms: Benefits of a Node-Local DNSCache | Pavithra Ramesh, Blake Barnett | 35m |
Kubernetes 1.13 introduces a node-local-dns-cache that runs a caching agent as a DaemonSet on each node, listening on a link‑local IP so pods use the local… | ||
| Improving Availability for Stateful Applications in Kubernetes | Michelle Au | 42m |
Over 40% of clusters run stateful apps and Kubernetes now supports 15 in-tree drivers and 35+ CSI drivers; storage choices matter. Demo uses six nodes across… | ||
| Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways | Steve Dake | 37m |
Istio connects clusters using Envoy proxies as gateways, CoreDNS stubs mapping remote services to node-local IPs, and Citadel-issued certificates with… | ||
| Deep Dive: Kubernetes Metric APIs using Prometheus | Matthias Loibl, Sergiusz Urbaniak | 33m |
Kubernetes now exposes three concrete metric APIs — resource, custom, external metric APIs — and a Prometheus adapter converts API requests into Prometheus… | ||
| The Story of Why We Migrate to gRPC and How We Go About It | Matthias Grüter | 29m |
Spotify replaces a 2012 homegrown messaging stack called Hermes homegrown protocol because it lacks ecosystem, tooling (they wrote hurl), and slows hiring… | ||
| 10 Ways to Shoot Yourself in the Foot with Kubernetes, #9 Will Surprise You | Laurent Bernaille | 37m |
Runbook-level failures from a 1,000–2,000 node environment: CoreDNS’s autopass causes huge upstream queries that hit rate limits; IPVS + graceful termination… | ||
| Infrastructure as Software | Paul Jones | 34m |
Argues that using Pulumi and AWS CDK turns infrastructure into real programs so teams get loops, classes, testing and reuse instead of YAML boilerplate; demo… | ||
| Strategies to "Kubernetify" Legacy Applications | Sai Vennam | 31m |
Containerize the JPetStore monolith and run it on a two‑worker Kubernetes cluster to get immediate scale and lower costs, using a MySQL container with… | ||
| Hacking Helm | Paul C Czarkowski, Scott Rigby | 37m |
Explains concrete Helm v2 attacks and mitigations: demos show how a global Tiller service and its clusterIP let an unprivileged pod call Tiller, use helm get… | ||
| From New Cluster to Insight. Deploying Monitoring and Logging to Kubernetes | Eddie Zaneski | 35m |
Deploys a full observability stack to a fresh cluster with Helm: Prometheus operator for scraping, node-exporter plus exporters for node and pod metrics, and… | ||
| M3 and Prometheus, Monitoring at Planet Scale for Everyone | Rob Skillington | 37m |
M3 is an open source metrics platform that integrates with Prometheus via prometheus remote_write and runs on Kubernetes with an operator to deploy… | ||
| Deep Dive: Kubernetes (PM) SIG | Ihor Dvoretskyi, Stephen Augustus | 35m |
SIG-PM defines the KEP-based workflow that gates features into releases: a machine-readable KEP template with metadata, motivation, goals, test plan and… | ||
| Deep Dive: Kubernetes (VMware) SIG | Loc Nguyen, Sidharth Surana | 40m |
Cluster API provider for vSphere moves from Terraform to govmomi, runs as controllers on a bootstrap Kubernetes cluster (demo uses kind), and provisions VMs… | ||
| Intro: Scheduling SIG | Da Ma, Shivram Srivastava | 46m |
Describes a Flow Network Graph scheduler (Poseidon + Foreman) that models pod placement as min‑cost max‑flow with equivalence classes to shrink graph size… | ||
| Intro: Brigade | Radu Matei | 28m |
Brigade is a Kubernetes‑native, JavaScript-based event scripting framework that runs as three pods (controller, API, web) and installs with Helm; the CLI brig… | ||
| Intro: Auth SIG | Mo Khan, Mike Danese | 26m |
SIG outlines concrete progress: the CSR API has been beta for three years and teams push several long‑stalled APIs toward beta/GA, notably token request API… | ||
| Intro + Deep Dive: Cloud-Provider SIG | Chris Hoge, Andrew Sy Kim, Jago Macleod | 01h 13m |
SIG Cloud-Provider explains a concrete program to extract hundreds of thousands of lines of in-tree cloud code into a new Cloud Controller Manager model with… | ||
| Deep Dive: Scalability SIG | Shyam Jeedigunta, Wojciech Tyczyński | 34m |
Scalability SIG lays out concrete practices: public clusterloader and kubemark test suites run as PR and postsubmit jobs (100‑ and 500‑node PR tests, a… | ||
| Extending Knative for Fun and Profit | Matt Moore, Ville Aikas | 32m |
Demonstrates using duck typing (partial schemas for typeMeta/objectMeta/status/spec) to write generic controllers and webhooks: a prototype image-cache… | ||
| Keep the Space Shuttle Flying: Writing Robust Operators | Illya Chekrygin | 36m |
Practical war stories from building operators that manage cloud resources (Rook, Crossplane) and the exact tactics used: prefer Requeue vs RequeueAfter to… | ||
| Ready? A Deep Dive into Pod Readiness Gates for Service Health Management | Minhan Xia, Ping Zou | 37m |
Kubernetes adds a pod readiness gate API that requires an extra pod condition to be true before a pod counts as ready, implemented so kubelet patches only its… | ||
| Lifecycle of a kubectl Command: Harden Kubernetes Setup with Automation | Sanjary Rahman | 37m |
Booking.com runs tens of on‑prem multi‑tenant clusters serving ~500 services and automates namespace onboarding end‑to‑end with zero human intervention. A… | ||
| Build a Kubernetes Based Cloud Native Storage Solution From Scratch | Sheng Yang | 37m |
An open source distributed block storage system called Longhorn uses Kubernetes controllers, CRDs and the CSI plugin to run each volume as independent… | ||
| OpenAPI Specs – Towards Native User Experience of CRDs | Stefan Schimanski | 36m |
Kubernetes 1.14 begins publishing OpenAPI specs for CRDs, which enables kubectl explain for CRDs and better IDE manifest completion; the talk shows concrete… | ||
| The Spotify Story: Moving from NIH to an Active CNCF Community Member | Jim Haughwout | 34m |
Spotify shifts from homegrown stacks to CNCF ecosystems, running on a cloud provider with 200 million monthly users and about 2,500 microservices, 8–9 million… | ||
| A Kubernetes Application End-to-End: DevStats | Łukasz Gryglicki, Josh Berkus | 37m |
DevStats is fully ported to Kubernetes and runs in production using Patroni 3-node HA Postgres with one PV per node, Grafana instances per project, hourly cron… | ||
| 5 Steps to Building Inclusive Communities | Ashlynn Polini | 30m |
Ten years of event experience yields concrete tactics: grow from 500 to 5,000 attendees by auditing website imagery, adding childcare and gender-neutral… | ||
| Merging Quickly in a Cloud Native World | Lucas Roesler | 30m |
Explains how to get PRs merged faster with concrete practices: keep diffs tiny using git add -p, write commit messages that state why not just what, include… | ||
| Navigating the Cloud Native Community for End Users | Cheryl Hung | 22m |
CNCF organizes an end user community built from 45 interviews that identifies three concrete problems — choosing among Kubernetes, Prometheus, Envoy and other… | ||
| Birds of a Feather: Do You Really Need on Premises Serverless ? | Igor Khapov | 31m |
Prototype demonstrates running OpenWhisk on Kubernetes across x86, Power and ARM nodes to serve data‑science pipelines and video analytics, using CouchDB for… | ||
| Surviving Serverless Battle By Secure Runtime, CRI and RuntimeClass | Xiaoyu Zhang, Lei Zhang | 27m |
Claims that CRI plus RuntimeClass let Kubernetes run different secure runtimes per pod and that mapping a CRI matrix to RuntimeClass is the practical way to… | ||
| Edgility - 5G Orchestration in Serverless-Edge Cloud-Native Environments | Eden Pierre Rozin | 28m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| Inside the CNCF Project Security Reviews | Justin Cormack | 41m |
CNCF funds independent security audits that run about €50–150k per audit and often take three to four weeks of code review plus black‑box testing; audits so… | ||
| FaaS is Not Only the Serverless: Stream Processing with Serverless | Jun Makishi, Kensaku Komatsu | 29m |
Claims a serverless model that runs container per function for long-lived WebRTC streams and spawns containers per session so each stream gets isolated… | ||
| Accelerating the Journey of an AI Algorithm to Production with OpenFaaS | Joost Noppen, Alex Ellis | 37m |
BT PLC cuts algorithm-to-production from years to 2 months, claiming 90% faster delivery by packaging models as web endpoints with OpenFaaS + Kubernetes… | ||
| Deep Dive: Network Service Mesh (NSM) | Nikolay Nikolaev, Frederick Kautz | 35m |
A Kubernetes-oriented system that wires point-to-point L2/L3 connections using a distributed gRPC control plane and CRDs, avoiding CNI by design so it is… | ||
| Deep Dive: CNCF Security SIG – Justin Cappos, New York University & Zhipeng Huang, Huawei | Justin Cappos, Zhipeng Huang | 40m |
CNCF Security SIG performs public, high-level security assessments (20–30 hours to draft, ~1–2 engineer weeks total) of projects like TUF/Notary, SPIRE/SPIFFE… | ||
| Panel Discussion: Leveraging Cloud Native Technology to Transform Your Enterprise | Cheryl Hung, Brad Topol, Ken Owens, Jeff Brewer | 36m |
Enterprises report concrete outcomes: Kubernetes, Helm, GitOps and image scanning drive deployments and hundreds of services onboarded after platform work… | ||
| 2 Years of TGIKubernetes | Joe Beda | 37m |
A weekly livestream grows into 60+ episodes that archive hands‑on Kubernetes demos, using OBS + YouTube + browser‑source chat and a GitHub repo for crowdnotes… | ||
| Deep Dive: CLI SIG | Maciej Szulik, Phillip Wittrock | 44m |
Vision: kubectl shifts toward API‑agnostic commands driven by server-published forms to avoid client‑server version skew, with a working CLI runtime prototype… | ||
| Managing Machine Learning in Production with Kubeflow and DevOps | David Aronchick | 34m |
Live demo builds three container images via Azure Pipelines on every merge, triggers a Kubeflow pipeline that runs MobileNet transfer learning on GPUs… | ||
| Intro + Deep Dive: CNCF Storage WG | Alex Chircop | 44m |
CNCF Storage WG summarizes its work, publishes a CNCF storage landscape white paper that compares availability, scalability, performance, consistency and… | ||
| Create Visually Compelling Developer Experiences for Kubernetes on VS Code | Ivan Towlson, Ralph Squillace | 39m |
Shows a concrete, open-source Kubernetes VS Code extension that reads kubeconfig, auto-selects the correct kubectl for mixed-version clusters, integrates git… | ||
| Transparent Chaos Testing with Envoy , Cilium and BPF | Thomas Graf | 35m |
Demonstrates a working stack that injects faults into live Kubernetes traffic by combining Envoy Go extensions with Cilium + eBPF transparent injection. The… | ||
| Cross-Cluster Calls Made Easy with Istio 1.1 | Matt Turner | 36m |
Istio 1.1 adds first‑class support for secure, resilient cross‑cluster calls by installing an istio-core-dns resolver, enabling traffic to tunnel through an… | ||
| Networking the Service Mesh Proxy: Where We Are, Where We’re Going | Tim Swanson, John Joyce | 26m |
Comparing concrete networking methods and tradeoffs for sidecar injection: Sto CNI installs via daemonset and uses iptables TPROXY to redirect pod traffic… | ||
| Serverless Operations: From Dev to Production | Erwin van Eyk | 34m |
Operational guide to running FaaS on Kubernetes that gives concrete practices: use emulators or open-source platforms to develop locally but expect sync… | ||
| Storage Provisioning for Kubernetes on Windows | Anusha Ragunathan, Jean Rouge | 37m |
Kubernetes persistent storage on Windows supports in-tree file volumes today — the demo provisions Azure File via Samba and mounts it into a SQL Server pod… | ||
| Chaos Debugging: Finding and Fixing Microservice Weak Points | Idit Levine, Mitch Kelley | 34m |
Demos show three specific tools and concrete results: Squash attaches gdb/dlv/Java debuggers to live Kubernetes containers and patches memory to fix a… | ||
| 5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh – Granville Schmidt, Aspen Mesh | Granville Schmidt | 27m |
Five concrete steps for compliance using Istio: enable mTLS for every service and strict destination rules so sidecars encrypt and authenticate all traffic… | ||
| Fool-Proof Kubernetes Dashboards for Sleep-Deprived Oncalls | David Kaltschmidt | 29m |
Shows how to structure Grafana dashboards for Kubernetes so oncall can eliminate whole areas of problems and find the single failing service or instance. Uses… | ||
| Secrets Store CSI Driver-Bring Your Own Enterprise Secrets Store to K8s | Rita Zhang | 36m |
Secrets Store CSI Driver mounts secrets, keys and certs from external stores into pods via a CSI volume, authenticates to HashiCorp Vault using Kubernetes… | ||
| Protecting the Data Lake | Ash Narkar | 38m |
Shows a working integration that puts Open Policy Agent (OPA) in front of Ceph object storage deployed on Kubernetes with Rook, where the RADOS gateway queries… | ||
| Securing Multi-Cloud Cross-Cluster Communication with SPIFFE and SPIRE | Evan Gilman | 34m |
SPIFFE supplies a platform-agnostic identity format and SPIRE is its Go implementation that issues short‑lived x.509 or JWT identities via a local workload API… | ||
| Securing Kubernetes with Trusted Platform Module (TPM) | Alexandr Tcherniakhovski, Andrew Lytvynov | 36m |
Hardware TPM 2.0 stores keys that never leave the chip and signs kubelet CSRs with the built‑in endorsement key so masters can validate node identity; a… | ||
| DIY Pen-Testing for Your Kubernetes Cluster | Liz Rice | 30m |
kube-hunter is an open source scanner that simulates attacker behavior against Kubernetes clusters, issuing REST calls to default ports (e.g. 8080, 6443… | ||
| How Does Google Release Kubernetes in GKE | Kobi Magnezi, Josh Hoak | 24m |
GKE describes a versioned bundle that upgrades more than 50 master components plus node OS and kubelet, ships over a four-day staged rollout, and supports… | ||
| Istio on Knative Lessons Learned: How Istio is Fit for Serverless Platform | Ying Chun Guo | 28m |
Knative uses Istio for routing, metrics and security and the evaluation shows clear tradeoffs: Istio provides mTLS end-to-end, automatic routing via… | ||
| Sharing is Caring: Your Kubernetes Cluster, Namespaces, and You | Amy Chen, Eryn Muetzel | 35m |
Covers concrete namespace patterns (per-team, per-application, per-environment), risks like an accidental creation of 80,000 namespaces, and measurable… | ||
| Helm 3: Navigating To Distant Shores | Bridget Kromhout, Jessica Deen | 37m |
Helm 3 arrives as an alpha with a refactor that removes in-cluster tiller and runs as a client, so installs work without creating service accounts; releases… | ||
| Grafana Loki: Like Prometheus, But for logs. | Tom Wilkie | 37m |
Loki claims a cheaper, easier log store by indexing labels not full-text index and linking logs to Prometheus metadata, ingesting with the promtail agent and… | ||
| You Might Just be a Functional Programmer Now | Cornelia Davis | 36m |
Argues Kubernetes maps to functional principles: controllers run many independent reconciliation loops that act like an interpreter, container images behave… | ||
| Intro + Deep Dive: Kubernetes Conformance WG | Dan Kohn, William Denniss, Aaron Crickenberger | 01h 27m |
Kubernetes conformance program (launched 2017) claims 84 certified partners and uses an in-cluster tester called son a boy status that schedules the end-to-end… | ||
| Deep Dive: Long Term Support WG | Tim Pepper | 37m |
Community survey gets 334 completed survey responses out of ~600 starters and shows roughly a third to half of clusters running unsupported versions while… | ||
| Deep Dive: Auth SIG | Mo Khan, Matt Rogers | 39m |
Kubernetes authentication and authorization internals get a line-by-line walk through the API server codebase showing the HTTP handler stack, context keys… | ||
| Intro + Deep Dive: IBMCloud SIG | Sahdev P. Zala, Khalid Ahmed, Brad Topol, Nimesh Bhatia | 01h 06m |
SIG explains a live IBM Cloud code push: an IBM cluster API provider repo goes public (announced three weeks prior) with clusterctl and actuator hooks to… | ||
| Intro + Deep Dive: Kubernetes (Docs) SIG | Zach Corleissen, Rael Garcia | 01h 04m |
SIG Docs explains how the docs live in the kubernetes/website repo, render as a static site and use the same GitHub PR workflow as code, with a prow review bot… | ||
| Intro + Deep Dive: Serverless WG | Scott Nichols, Doug Davis | 01h 27m |
CNCF Serverless WG reports concrete progress: CloudEvents (started Dec 2017) provides a CloudEvents common envelope with JSON/binary/protobuf serializations… | ||
| Intro + Deep Dive: OpenStack SIG | Chris Hoge, Aditi Sharma | 01h 20m |
SIG OpenStack describes a working out-of-tree cloud-controller-manager that requires restarting the kube-apiserver and kubelets to migrate from in-tree… | ||
| Deep Dive: KubeEdge | Cindy Xing | 40m |
KubeEdge splits control into a cloud controller and lightweight edge runtime that runs as an edgecore agent to manage devices and workloads; a live demo shows… | ||
| Deep Dive: Brigade | Radu Matei | 34m |
Brigade is an event-driven scripting layer on Kubernetes that runs JavaScript to start pods, pass outputs between containers, and handle try/catch and retries… | ||
| Deep Dive: Linkerd | Oliver Gould | 40m |
Linkerd 2 deploys a tiny Go control plane with a Rust sidecar proxy and uses a mutating webhook to inject proxies into pods, offering automatic mutual TLS… | ||
| Public Technical Oversight Committee (TOC) Meeting | Chris Aniszczyk | 36m |
The TOC lays out concrete process changes: a 9-member TOC delegates day-to-day work to SIGs to scale decision making, uses sandbox/incubation/graduation levels… | ||
| Deep Dive: Envoy | Lizan Zhou | 21m |
Explains how Envoy extensions are actually built and deployed: extensions require static-linked C++ extensions composed of a protobuf config + implementation… | ||
| Delivering Serverless Experience on Kubernetes: Beyond Web Applications | Alex Glikson | 39m |
Evaluates Knative on Kubernetes for two non-web workloads and builds prototypes: a run box proof-of-concept that uses a persistent volume plus a deployment… | ||
| Building and Maintaining a Client Library - Stories From the Trenches | Jussi Nummelin | 37m |
Built a Ruby client library k8s-client that handles real-world Kubernetes quirks: supports external auth hooks (gcloud, EKS), works with clusters back to 1.7… | ||
| Dealing with the Pesky Path Parameter Problem: Service Profiles | Alex Leong | 24m |
Prometheus metrics explode when path labels come from unsanitized requests, so the solution is a Kubernetes ServiceProfile CRD that maps paths to finite… | ||
| How LivePerson is Tailoring its Conversational Platform Using OpenFaaS | Simon Pelczer | 37m |
LivePerson embeds OpenFaaS on Kubernetes to let customers push custom chatbot functions — deployable from a developer center with templates, auth, CI and live… | ||
| Managing Edge Computing with Serverless | Lev Radomislensky | 31m |
Kubernetes runs full clusters at each store, using an MQTT broker (Google IoT Core suggested) to push updates and trigger MQTT-triggered rolling upgrades… | ||
| Ouch! What I Learned From Being Hit by a Serverless, Ruby Boomerang! | Ewan Slater | 37m |
Maintains the open-source Ruby FDK for the FN serverless platform, fixes JSON parsing and multi-document input, migrates the runtime from stdin/stdout to HTTP… | ||
| Uber x Security: Why and How We Built Our Workload Identity Platform | Tyler Julian, Daniel Feldman | 30m |
Uber builds a workload identity platform based on SPIFFE IDs and the SPIRE agent/server model to issue x.509 and JWT identities via attestation, enabling… | ||
| Latest Kubernetes Scalability Improvements | Shyam Jeedigunta, Yassine Tijani | 34m |
Kubernetes separates node heartbeats into a small Leases API (alpha 1.13, beta and on by 1.14) to stop etcd bloat from 10s-of-seconds kubelet updates; kubelet… | ||
| Where's My Pod, Already? A Tale of Cold-Start Struggles on Kubernetes | Greg Haynes | 34m |
Cold-start time drops from ~5–6s down to about 2s by instrumenting Kubernetes with Zipkin/ Istio traces and resource informers, removed initContainer to avoid… | ||
| Kubernetes Scalability Definition Evolution | Wojciech Tyczyński, Andrzej Wasylkowski | 39m |
Kubernetes starts with a 100-node claim in 2015 but proves it insufficient, replacing vague thresholds with explicit SLIs/SLOs: original rules (API… | ||
| High Performance Networking with Kubevirt | Doug Smith, Abdul Halim | 37m |
KubeVirt runs virtual machines on Kubernetes with hardware‑accelerated networking using SR-IOV device plugin and Multus CNI to attach an extra data-plane NIC… | ||
| Running eBay’s High-Performance Workloads with Kubernetes | Xin Ma | 32m |
eBay runs multiple 2000+ node clusters and reports 160,000 pods on 24,000 hosts using a homegrown fleet manager built on Kubernetes CRDs/operators that… | ||
| Delivering TV Everywhere with Cloud Native Solutions | Arnaud Caron, Jerome Champetier | 42m |
MediaKind migrates a broadcast stack since 2015 from appliances to microservices / containers / Kubernetes & Helm, running on bare metal, OpenStack and public… | ||
| Democratizing MySQL: From Cloud Managed to Kubernetes Managed | Sachin Manpathak | 41m |
Platform9 migrates from RDS to a Kubernetes-managed MySQL service using Presslabs’ open-source MySQL Operator, replacing API calls to RDS with CRDs and… | ||
| Embracing Upstream Kubernetes in Web Scale Organization | Lei Zhang, Jun Chen | 34m |
Runs single clusters of >5,000 nodes (targeting 10k) using virtual clusters with tenant control planes and a virtual node engine proxy so many tenants share… | ||
| Panel Discussion: Going Multi-Cloud for Realz. Stories From Media, Retail, & Infrastructure | Lisa-Marie Namphy, Eric Han, Umair Mufti, Allan Naim, Joseph Sandoval | 40m |
Panelists report concrete practices and pain points: Kubernetes plus GKE/Anthos, Portworx and CSI hooks enable portability but storage and identity remain… | ||
| Scaling Edge Operations at Onefootball with Ambassador: From 0 to 6000 rps | Jonathan Juares Beber | 33m |
Onefootball moves from many per-service ELBs to a single Ambassador-based ingress, driving reduced ELBs from >100 to 4 and saving about $20k/year, while… | ||
| Running Kubernetes on Ephemeral Infrastructure | Greg DeArment, Vlad Ungureanu | 39m |
Runs Kubernetes clusters that destroy and rebuild every 48 hours, touching ~10,000 EC2 instances daily across 2,500–3,000 nodes and serving >1M pods per day… | ||
| Deep Dive: API Machinery SIG | David Eads, Daniel Smith | 38m |
Covers concrete SIG API Machinery work: server-side apply moves apply logic into the server, replaces client strategic-merge annotations with compact field… | ||
| Intro + Deep Dive: Kubernetes IoT Edge WG | Steven Wong, Cindy Xing, Dejan Bosanac, Kilton Hopkins | 01h 16m |
Three reference architectures are compared: whole k3s clusters at the edge, cloud control plane with lightweight kubeedge agents (agent ~10 MB), and… | ||
| Intro + Deep Dive: Kubernetes Policy WG | Zhipeng Huang, Erica Von Buelow | 26m |
Kubernetes Policy WG outlines concrete work: a proposed tenant CRD for multi‑tenancy plus a pattern to use OPA and Gatekeeper to compile tenant policy objects… | ||
| Intro + Deep Dive: Kubernetes (Network) SIG | Tim Hockin | 01h 28m |
SIG Network owns Kubernetes networking primitives and describes what’s actually implemented: Services create DNS and endpoints, kube-proxy runs per-node to… | ||
| Intro + Deep Dive: Jaeger | Juraci Paixão Kröhling, Prithvi Raj Venkat Raj | 01h 14m |
Deploys Jaeger with an all-in-one docker image and instruments three Quarkus microservices to show trace timelines, service graphs and trace comparison working… | ||
| Intro + Deep Dive BoF: Telecom User Group and Cloud Native Network Functions (CNF) Testbed | Cheryl Hung, Dan Kohn, Taylor Carpenter | 01h 25m |
A reproducible CNF testbed runs on Packet bare metal with OpenStack + Kubernetes and packages ONAP components (broadband gateway, vCPE) as both VMs and… | ||
| Intro + Deep Dive: containerd | Wei Fu, Mike Brown | 01h 17m |
containerd is a CNCF‑graduated runtime core used in GKE and IBM IKS that exposes a smart client API (ctr) and CRI plugin, runs full test suites on GKE per PR… | ||
| Intro + Deep Dive: Windows SIG | Michael Michael, Patrick Lang | 01h 04m |
Kubernetes supports Windows workloads as GA with Kubernetes 1.14, running on Windows Server 2019 only with multi-container pods via the new networking model… | ||
| Intro + Deep Dive: Apps SIG | Adnan Abdulhussein | 53m |
SIG Apps covers developer and operator needs for running apps on Kubernetes, focusing on the Workloads API and the new Application CRD. The Application CRD… | ||
| Deep Dive: Scheduling SIG | Babak Salamat | 30m |
Kubernetes scheduler now reaches 100 pods/sec on 5,000-node clusters after recent performance work, with inter-pod affinity trimmed from ~1000x slower to… | ||
| Deep Dive: Autoscaling SIG | Aleksandra Malinowska, Slawomir Chylek | 37m |
Deep dive into how Vertical Pod Autoscaler and Cluster Autoscaler operate under the hood explains the VPA recommendation loop, eviction path and the CA scale… | ||
| Deep Dive: Kubernetes/Kubespray (Cluster Lifecycle) SIG | Antoine Legrand, Matthew Mosesohn | 34m |
Kubespray uses Ansible to deploy production Kubernetes on bare metal and clouds, focusing on upgrades, HA and plugin choice; deployments vary from a 5‑minute… | ||
| Deep Dive: Kubernetes (UI) SIG | Jeffrey Sica, Sebastian Floreks | 26m |
Kubernetes Dashboard now runs an Angular 7 front-end with a Go back end, uses kind clusters for fast local testing, and replaces single-monolithic resource… | ||
| Deep Dive: kops (Cluster Lifecycle) SIG | Justin Santa Barbara, Mike Splain | 37m |
kops now runs etcd-manager and etcdadm to migrate clusters to etcd v3, replaces the aggregated API server with CRDs and controller-runtime to simplify code and… | ||
| Deep Dive: Cluster Lifecycle SIG (Cluster API) | Jason DeTiberus, Hardik Dodiya | 42m |
Project brings declarative cluster creation and upgrades across clouds by defining five CRDs and controller behavior rather than a new installer; it exposes… | ||
| Intro + Deep Dive: Prometheus | Julius Volz, Richard Hartmann | 01h 19m |
Prometheus runs a pull-based model storing float64 time series locally on a single-node TSDB (~1.6–1.7 bytes/sample) and expects client libraries or exporters… | ||
| Panel Discussion: Care and Feeding: Burnout and Self Care in our Community | Aaron Crickenberger | 49m |
Panelists call out concrete fixes rather than slogans: managers intervene when people work nights, create rotation like a patch release management team so no… | ||
| What Goes in a Release: Kubernetes 1.14 in Code, Conversations, and Hearts | Maria Ntalla | 25m |
Analysis of the Kubernetes 1.14 release (running Jan 7–Mar 23) uses GitHub, Slack, mailing-list and CI logs to show concrete scale: about 2,047 PRs and ~1,038… | ||
| Oops!...I Did It Again — I Reinvented gRPC | Austin Lamon, Dave Zolotusky | 30m |
Spotify replaces a homegrown RPC stack with gRPC after years of running Hermes on 0mq, a working internal RPC, plus in-house tools like Helios and custom… | ||
| How to Create Kubernetes Experts | Clarke Vennerbeck, Aaron Teague | 37m |
Claims a repeatable process turns entry level hires into CKA/CKAD-level Kubernetes operators in about six to twelve months, cutting hiring cost versus a single… | ||
| State of Kubernetes Contributor Community | Paris Pittman | 33m |
Project reports 31,000 contributors total with roughly 3,000 committers spread across 192 repositories, and it ships four releases a year. Governance adds… | ||
| Monitoring Service Architecture and Health with BPF | Jonathan Perry | 37m |
Claims a production system that gives 100% visibility into pod-to-pod flows by combining BPF (eBPF) kernel hooks and Kubernetes API metadata, aggregates… | ||
| Network Observability with IPFIX, Prometheus and Elastic Stack | Rastislav Szabo | 26m |
Shows how to collect real IP flow data from a VPP-based CNI and store it for search and alerts using concrete open source pieces: IPFIX flow records exported… | ||
| Deploy, Scale and Extend Jaeger | Louis-Etienne Dorval | 33m |
Ticketmaster deploys Jaeger on Kubernetes with collectors and queries in-cluster and Elasticsearch outside it, retaining five days (~2.1B spans, ~1.2 TB) and… | ||
| Unblocking the Release Train with Istio Traffic Management | Dave Shepherd, Pierre Meunier | 35m |
Wealth Wizards routes HTTP traffic to branch deployments using Istio destination rules and virtual services that match a prefixed hostname or an X-Variant-ID… | ||
| Autoscaling Multi-Cluster Observability with Thanos and Linkerd | Andrew Seigner, Frederic Branczyk | 37m |
Linkerd provides zero-code metrics by injecting a Linkerd injected Rust proxy into each pod that exports request rate, success rate, latency; Prometheus… | ||
| Kubernetes Networking: How to Write a CNI Plugin From Scratch | Eran Yanay | 33m |
Bash CNI plugin implements ADD/DEL, creates a bridge + veth pair, moves one end into the pod netns, assigns IPs by incrementing a file, and sets iface up with… | ||
| Reenforce Kubernetes Image Isolation in Multi-Tenant Service | Eric Lin | 24m |
Claim: Kubernetes plus container runtimes currently allow image content to be reused across namespaces so one tenant can pull another tenant’s layers… | ||
| Building a Controller Manager for Your Cloud Platform | Fabio Rapposelli, Chris Hoge | 35m |
Cloud Controller Manager (CCM) is the Beta out‑of‑tree way to replace in‑tree cloud drivers and the goal is to move all providers out of core by end of 2019… | ||
| Let's Try Every CRI Runtime Available for Kubernetes. No, Really! | Phil Estes | 34m |
Live demos spin up Docker, containerd 1.2.6 clusters on GKE and IBM IKS, a cri-o node (OKD), and sandboxed runtimes via containerd shims: Kata (QEMU/KVM or… | ||
| Lessons Learned Migrating Kubernetes from Docker to containerd Runtime | Ana Calin | 33m |
Migrating a Kubernetes cluster from Docker Engine to containerd is straightforward: create a containerd node pool on GKE, cordon and drain old nodes, and allow… | ||
| Tailor-Made Security: Building a Kubernetes Specific Hypervisor | Samuel Ortiz, Andreea Florescu | 34m |
Argues for a Kubernetes-targeted VMM built from rust-vmm crates to avoid QEMU’s ~1.5M LOC bulk while offering more than Firecracker’s ~20–30K LOC narrow scope… | ||
| Scaling and Securing Spark on Kubernetes at Bloomberg | Ilan Filonenko | 37m |
Bloomberg runs Spark natively on Kubernetes with a working External Shuffle Service plugin API (SPIP spark 25299) that lets shuffle bytes be stored on external… | ||
| Economics and Best Practices of Running AI/ML Workloads on Kubernetes | Maulin Patel | 54m |
Kubernetes plus Kubeflow actually moves models from notebook to production: Kubeflow Fairing packages a notebook into a Docker image, runs the same training… | ||
| Moving People and Products with Machine Learning on Kubeflow | Jeremy Lewi, Willem Pienaar | 37m |
GO-JEK builds its driver allocation system on Kubernetes and Kubeflow at scale — supporting ~2 million drivers and ~100 million bookings per month — claiming… | ||
| A Tale of Two Worlds: Canary-Testing for Both ML Models and Microservices | Jörg Schad | 33m |
Demo shows Kubernetes + Vamp (fem/ctl) driving canary releases for both a microservice and its ML model, wiring metrics from Prometheus/Elasticsearch and a UI… | ||
| Kubernetes Networking at Scale | Laurent Bernaille, Bowei Du | 42m |
Targets clusters with thousands of nodes, tens of thousands of pods and thousands of services and shows concrete fixes: use native pod routing (avoid overlays… | ||
| Peribolos: How Kubernetes Uses GitOps to Manage GitHub Communities at Scale | Christoph Blecker | 28m |
Kubernetes treats its GitHub org as code and ships a reconciler called Peribolos that runs on Prow to apply a YAML manifest to GitHub automatically. It manages… | ||
| How Intuit Does Canary and Blue Green Deployments with a K8s Controller | Daniel Thomson | 36m |
Intuit builds and open sources Argo Rollouts, a Kubernetes controller plus Rollout CRD that codifies blue‑green and canary strategies declaratively, managing… | ||
| Modern CI/CD with Tekton and Prow Automated via Jenkins X | James Rawlings | 36m |
Integrates Tekton pipelines and Prow via Jenkins X to replace JVM-based Jenkins jobs with containerized CRD-driven pipelines, claiming 60–80 repos dogfooded… | ||
| Repeatable Deployments with Kubernetes, Helm & Bazel | Rohan Singh | 37m |
Shows how Bazel replaces ad hoc scripts to build Docker images, render Kubernetes YAML and deploy per-environment configs — using Bazel builds images without… | ||
| Testing your K8s apps with KIND | Benjamin Elder, James Munnelly | 36m |
Kind creates real Kubernetes clusters as Docker containers and boots a single-node cluster in about 30 seconds (multi-node and multi-cluster supported). Tests… | ||
| Intro + Deep Dive: Multicluster SIG | Irfan Ur Rehman, Maru Newby | 01h 02m |
SIG-Multicluster presents KubeFed (formerly Federation v2) with a Beta release candidate, a CRD-based control plane and a CLI that converts Kubernetes… | ||
| Deep Dive: Vitess | Jiten Vaidya, Dan Kozlowski | 45m |
Vitess runs a sharded MySQL fabric across three Kubernetes clusters using VTGate and VTTablet plus Orchestrator and a topo server (etcd/zookeeper); the demo… | ||
| Deep Dive: Azure SIG | Stephen Augustus, Lachlan Evenson | 36m |
Demo shows Cluster API provider for Azure (v0.1.0) bootstrapping a Kubernetes cluster via a local kind bootstrap and pivoting to a management cluster… | ||
| Intro + Deep Dive: Kubernetes Storage SIG | Saad Ali | 01h 16m |
SIG Storage owns PVC/PV APIs, storageclasses and the southbound CSI integration; CSI goes GA in 1.13 and the project ships CSI migration alpha in 1.14 to shim… | ||
| Keynote: ...What Does the Future Hold for Observability? | Tom Wilkie, Frederic Branczyk | 15m |
Three concrete predictions: (1) tighter correlation between metrics, logs and traces with workflows that jump from a Prometheus latency graph to the relevant… | ||
| Microservices for the Masses – Integrating a Distributed OS with Kubernetes | Q. Hoole, I. Zhang | 45m |
An open-source runtime called Amino runtime integrates with Kubernetes and a DRA vm to provide transparent microservice replication, sharding, caching and live… | ||
| Panel Discussion: Metrics that Matter: How to Forge More Diverse, Inclusive Communities | Nicole Houston | 36m |
CHAOSS D&I working group defines a goal–question–metric approach and seven focus areas (event diversity, contributor diversity, communication inclusivity… | ||
| Deep Dive: Helm | Matt Fisher | 38m |
Helm 3 presents a concrete, client‑only overhaul: Tiller removal moves release records into namespace‑scoped secrets so multiple releases can share a name… | ||
| GPU Sharing for Machine Learning Workload on Kubernetes | Henry Zhang, Yang Yu | 44m |
Implementation uses vGPU on vSphere plus a Kubernetes device-plugin + scheduler extension that represents a full GPU as 1000 units to allow fractional… | ||
| Production GPU Cluster with K8s for AI and DL Workloads | Madhukar Korupolu | 36m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam March… | ||
| nothing matches | ||