KubeCon + CloudNativeCon Europe 2021
2021-05-04..2021-05-07
-- online --
[KubeCon + CloudNativeCon Europe 2018, KubeCon + CloudNativeCon Europe 2019, KubeCon + CloudNativeCon Europe 2020, KubeCon + CloudNativeCon Europe 2021, KubeCon + CloudNativeCon Europe 2022, KubeCon + CloudNativeCon Europe 2025, KubeCon + CloudNativeCon Europe 2026]
| title | author | length |
|---|---|---|
| Cloud Native: The Building Blocks for the Human Experience | Priyanka Sharma, Zain Asgar | 20m |
Cloud native is presented as the backbone for pandemic-era systems with concrete examples: Anthem builds vaccine-availability and food-insecurity apps using… | ||
| 6 End Users and What They Love about Cloud Native | Cheryl Hung | 20m |
CNCF end user community totals about 140 members and the ecosystem spans 80+ projects and nearly 1,000 tools; a live demo on a tiny cluster (one master, one… | ||
| How Cloud Native Tech Helped Peloton Ride to Exponential Growth | Jim Haughwout | 12m |
Peloton moves from 0% to 100% Kubernetes in under a year, shifting all traffic onto k8s to absorb triple‑digit growth in downloads, subscriptions and streaming… | ||
| Kubernetes as the Control Plane for the Hybrid Cloud | Clayton Coleman | 06m |
Proposes a lightweight control plane that exposes the Kubernetes API without pods or nodes and demos a working kcp prototype that installs CRDs to program… | ||
| The CNCF Sandbox: An Exploration and Guided Tour | Justin Cormack | 15m |
The CNCF Sandbox now hosts nearly 50 projects that developers are actively experimenting with and some are already in production. Examples include Schema Hero… | ||
| CNCF Project Update: Flux | Stefan Prodan | 10m |
Flux announces promotion out of CNCF sandbox and ships a ground-up rewrite as a Go-based GitOps toolkit composed of libraries, CRDs and controllers built on… | ||
| Commit to the Cause. Push for Change. Take on the World’s Greates... | Briana Frank | 06m |
Call for Code shares concrete, deployed results: three focus areas this year — clean water and sanitation, zero hunger, responsible production — and multiple… | ||
| Predictions from the Technical Oversight Committee (TOC) | Liz Rice, Lei Zhang | 18m |
Predictions from the TOC map to concrete actions: Kubernetes SIGs are renamed SIGs renamed to TAGs to remove confusion, and sandbox counts show real churn — 2… | ||
| Wednesday Closing Remarks | Constance Caramanolis, Stephen Augustus | 08m |
Announcements cover where to contribute and how to stay well: contribute.cncf.io and the new contributor strategy site are highlighted, and the wellness… | ||
| Kubernetes Project Update | Stephen Augustus | 18m |
Kubernetes moves from four to three releases a year with ~15-week cycles, an opt-in enhancement model, and a rising count of landed enhancements (22, 38, 34… | ||
| Day 2 with Kubernetes - This Is Fine! | Vaibhav Kamra | 06m |
Cites the CNCF survey figure 80% running Kubernetes in production and focuses on three concrete problems: misconfigured access and privilege escalation, slow… | ||
| Linkerd vs. COVID-19: Addressing the global Pandemic with a Service Mesh | William Morgan | 09m |
Linkerd is an ultralight service mesh running on Kubernetes that powers NCBI sites including the core COVID-19 page and PubMed (searching over 32 million… | ||
| Smoothing the onramp to Kubernetes with Knative | Brenda Chan | 05m |
Claim: Knative cuts the Kubernetes onramp by replacing repeated YAML churn with higher-level primitives. It demonstrates auto scaling, deployment, ingress and… | ||
| How Deutsche Telekom Technik Built Das Schiff for Sailing the Cloud Native Seas | Vuk Gojnic | 12m |
Das Schiff builds a GitOps-driven platform that provisions bare-metal Kubernetes across hundreds of sites and scales toward thousands of clusters while staffed… | ||
| Thursday Closing Remarks | Constance Caramanolis, Stephen Augustus | 02m |
Quick wrap of the conference day with concrete logistics and activities: tomorrow’s keynotes focus on applying cloud‑native tech across architectures and new… | ||
| Cloud Native & WebAssembly: Better Together | Liam Randall, Ralph Squillace | 18m |
Claims that WebAssembly (Wasm) runs everywhere with near‑native speed and sandboxed security, demonstrated by running a wasmcloud file server on Crustlet nodes… | ||
| A Mesh has Immense Psychological Value | Vijoy Pandey | 07m |
Claims that meshes solve discoverability, policy consistency, secure and scalable data flow, and end-to-end observability for decomposed apps, and gives three… | ||
| RISC-V: The Lowest Layer of the Cloud-Native Landscape | Daniel Mangum, Carlos Eduardo de Paula | 14m |
RISC-V runs Kubernetes natively: a SiFive Unmatched board (quad-core, 16 GB) boots mainline Linux and hosts a k8s 1.20.4 node with system pods and an OpenFaaS… | ||
| Open Source Innovation – Success Through Failure | Thomas Di Giacomo | 06m |
Claims that open source succeeds by massive, iterative experimentation where most projects fail but a few become widely adopted. Runs dozens of independent… | ||
| Shaping Kubernetes Community Culture | Aeva Black, Bob Killen | 13m |
Kubernetes community reports specific numbers and concrete actions: Slack exceeds 120,000 people and about 20,000 unique contributors in a year, PR review… | ||
| COVID Tracker - Testing & Contact Tracing: How Ireland is Battling COVID-19 | Gar Mac Críosta | 16m |
Ireland builds a Bluetooth-based contact tracing app that ships to app stores in about 100 days and goes live 7 July, using Google Apple Exposure Notification… | ||
| Friday Closing Remarks | Constance Caramanolis, Stephen Augustus | 02m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at… | ||
| CN Network Function (CNF) WG: K8s Best Practices for Telco Apps | Taylor Carpenter, Bill Mulligan | 20m |
The CNF working group publishes actionable best practices and tools to validate cloud‑native network functions: the CNF Test Suite runs on Kubernetes… | ||
| CNCF End User Partner Summit | Cheryl Hung, Katie Gamanji | 45m |
Overview of concrete outcomes: end users now hold four of 11 TOC seats and influence project policy; examples of end-user contributions include Cloud Custodian… | ||
| Prometheus – What it is, What is New, and What is Coming | Richard Hartmann, Julien Pivotto | 23m |
Prometheus is a pull-based TSDB handling 64-bit numeric samples and a single instance can ingest 2.5 million samples/sec (benchmarks show >60k in real clusters… | ||
| Scaling Apache Spark on Kube to Apple Scale | Amanda Moran, Holden Karau | 29m |
Apple migrates large Spark workloads from YARN/Mesos to Kubernetes and reports concrete results: small-to-medium ETL jobs run well after increasing resource… | ||
| The Road to Interoperability in Cloud Native Continuous Deli... | Kara de la Marck, Fatih Degirmenci | 30m |
Cloud-native CD currently forces tool-specific mappings and glue code, so portability and observability are brittle; Tekton + Jenkins X shows one concrete… | ||
| Ghosts in the Runtime: Who Ate My Capabilities & Other Mysteries | Laurent Bernaille, Eric Mountain | 31m |
Datadog runs tens of thousands of hosts across dozens of clusters up to 4,000 nodes and encounters low‑level Kubernetes mysteries with concrete fixes: a pod… | ||
| Trust No One: Bringing Confidential Computing to Containers | Samuel Ortiz, Eric Ernst | 27m |
Confidential computing for containers uses VM-based TEEs (TDX/SEV/etc.) plus attestation to encrypt memory and CPU state and remove the host from the guest… | ||
| Building and Managing a Centralized ML Platform with Kubeflow at... | Ricardo Rocha, Dejan Golubovic | 31m |
Centralized Kubeflow on Kubernetes integrates CERN SSO (Keycloak), Argo CD, kustomize, TFJob and KNative to offer per-user namespaces with fixed quotas… | ||
| K8s Labels Everywhere! Decluttering With Node Profile Discovery. | Conor Nolan, Dave Cremins | 25m |
A Kubernetes operator called Node Profile Discovery (NPD) reads labels emitted by Node Feature Discovery (NFD) and aggregates hundreds of low level features… | ||
| Building a Portable Kubernetes Deployment Pipeline with Argo Workflo... | Thomas Meadows, Ollie Young | 27m |
Describes a Kubernetes-native delivery service that generates immutable version hashes from Git, runs Argo-driven workflows (including Terraform) to vend GKE… | ||
| Petabyte Scale Logging with Fluentd and Fluent Bit: A Use Case From... | Hanzel Jesheen, Anurag Gupta | 22m |
Fluentd and Fluent Bit run as a node-level daemonset that tails container stdout, buffers per-container, compresses batches to gzip, and uploads 10s objects to… | ||
| COSI: The Common Operating System Interface | Steven Borrelli, Andrew Rynhard | 21m |
COSI defines a concrete API for node configuration — modeled resources as Protocol Buffer definitions mapped to DNS, network, kernel, mounts and more, with… | ||
| Tackling New Challenges in a Virtual Focused Community | Bob Killen, Alison Dowdney | 23m |
Describes switching recurring video meetings to Slack threads for multi-day async discussion, using mailing lists and lazy consensus for decisions, and running… | ||
| Maximizing Workload's Performance With Smarter Runtimes | Krisztian Litkey, Alexander Kanevskiy | 24m |
Noisy-neighbor mitigation improves by moving allocation logic into the runtime and adding pluggable algorithms tested in a working project CRI-Resource-Manager… | ||
| The Long, Winding and Bumpy Road to CronJob’s GA | Maciej Szulik, Alay Patel | 31m |
CronJob reaches GA in Kubernetes 1.21 after replacing the old poll-based controller with an informer + workqueue design that uses a delaying interface to… | ||
| There is a New Spec in Town: Getting to Know the Device Information... | Billy McFall, Adrián Moreno | 23m |
A new Device Information Spec standardizes how device plugins and CNIs publish hardware details so multus writes per-interface JSON into the pod’s network… | ||
| Your Path To Non-code Contribution In The Kubernetes Community | Kaslin Fields, Kat Cosgrove, Matt Broberg, Kohei Ota | 38m |
Non-code contributors clarify the community’s messiest moments by doing concrete work: a 13-tweet thread that calms users after the docker-shim deprecation… | ||
| From Allyship to Sponsorship: Solutions to Design a Diverse and... | Yulkendy Valdez, Josuel Plasencia | 35m |
Argues that sponsorship beats allyship by producing measurable career gains and retention, citing that over 80% of white employees call themselves allies while… | ||
| Reimagining the MITRE ATT&CK F... | Keith Mokris, Ashley Ward | 11m |
Prisma Cloud unveils an interactive Attack Explorer that maps the MITRE ATT&CK framework to 12 cloud-native categories, showing a live demo where an obfuscated… | ||
| Wielding the Power & Potential of Kubernetes for Mere Mortals... | Rob Esker | 05m |
NetApp describes concrete storage workarounds and tools used to make Kubernetes practical: adoption of the CSI model to expose multiple access modes, use of… | ||
| An Open-source HCI Platform Built on Kubernetes | Sheng Yang | 20m |
Project Harvester is an open-source HCI platform built on Kubernetes that claims to replace proprietary HCI APIs with a unified Kubernetes API; the demo shows… | ||
| Securing S3 Backups Against Ransomware | Tom Manville, Michael Cade | 18m |
Cloud-native backups become ransomware-resistant by using S3 Object Locking plus bucket versioning and explicit retention (or legal holds) so backups cannot be… | ||
| Rook: Enterprise Storage for Kubernetes | Travis Nielsen | 07m |
Rook packages the Ceph data platform into Kubernetes using an operator and CSI driver to automate deployment, upgrades and provisioning, delivering block… | ||
| Putting Chaos Into Continuous Delivery to Increase App... | Juergen Etzlstorfer, Karthik Satchitanand | 27m |
Adds LitmusChaos chaos stages into GitOps CD orchestrated by Keptn/Captain, using Locust load and Prometheus SLI/SLO evaluations to gate promotions. Chaos… | ||
| xDS in gRPC for Service Mesh | Megan Yahya | 16m |
gRPC now embeds a data plane so services can skip sidecar proxies and speak xDS to a control plane directly. It uses an xds resolver and a small bootstrap file… | ||
| Towards CNI v2.0 | Casey Callendrello | 27m |
CNI 1.0 released and maintainers identify five concrete problems: the exec‑per‑RPC binary model creates security and packaging pain, there is no network status… | ||
| SIG-network: Updates and Future Directions | Bowei Du, Tim Hockin | 19m |
Updates on Kubernetes networking list concrete changes and roadmaps: EndpointSlice GA (v1.21) reduces memory and etcd pressure by splitting huge endpoint… | ||
| CNCF SIG Observability Updates | Bartłomiej Płotka, Richard Hartmann, Simone Ferlin | 15m |
SIG Observability forms in summer 2020 and reports four project reviews, with Cortex and Thanos incubated and OpenMetrics and OpenTelemetry reviews passed to… | ||
| SIG-Autoscaling Deep Dive and Q+A | Maciek Pytel, Marcin Wielgus | 20m |
Explains exactly which checks block node deletion and which flags change behavior: 50% utilization threshold as a default heuristic, local-storage prevents… | ||
| Securing Content Distribution with The Update Framework (TUF) | Lukas Puehringer, Joshua Lock | 29m |
The Update Framework (TUF) provides concrete defenses: cryptographic signatures plus metadata expiry to enforce freshness, consistency, integrity, role-based… | ||
| SIG Multicluster Intro | Paul Morie, Jeremy Olmsted-Thompson | 18m |
SIG Multicluster defines a ClusterSet pattern (groups of clusters with shared authority and namespace sameness), retires the old cluster registry, and ships a… | ||
| SIG Scheduling Intro and Deep Dive | Mike Dame, Jan Chaloupka | 25m |
SIG Scheduling covers kube-scheduler, the scheduling framework and Descheduler with concrete changes: a new github.com/kubernetes/component-helpers repo for… | ||
| Parsec | Marc Meunier | 10m |
Parsec claims to let applications swap root-of-trust implementations without code changes by exposing a stable security API and modular back ends. Current… | ||
| Fluent Bit | Eduardo Silva | 13m |
Fluent Bit claims production footprint of 2 million+ deployments/day and is adding native metrics support so a single lightweight agent handles logs and… | ||
| containerd Project Update | Derek McGowan | 08m |
containerd announces four concrete subprojects with code and integration details: imagecrypt provides encrypt/decrypt commands plus a stream-processor plugin… | ||
| NATS v2.2: The JetStream Release | Waldemar Quevedo Salinas | 21m |
JetStream is the next-generation persistent engine for NATS, released Q1 2021, that adds durable streams with file or memory storage, push and pull consumers… | ||
| Intro to KubeEdge: Kubernetes Native Edge Computing Framework | Zefeng (Kevin) Wang | 26m |
KubeEdge extends Kubernetes to the edge and claims production-ready autonomy with a cloudcore under 70 MB and an optimized edge hd light kubelet that persists… | ||
| Overview and State of Linkerd | William Morgan, Matei David | 19m |
Linkerd presents a lightweight, Kubernetes-first service mesh claiming zero‑config install, low latency overhead, and over 200 contributors; current release… | ||
| Notary v2: Supply Chain Security for Containers | Justin Cormack, Steve Lasker | 30m |
Notary v2 stores signatures and metadata as registry-native OCI artifacts and links them to images with a reference-based reverse lookup so signatures, SBOMs… | ||
| Open Policy Agent Intro | Ash Narkar, Oren Shomron | 17m |
Open Policy Agent (OPA) presents a general-purpose policy engine with a declarative Rego language, in-memory evaluation, and >100 GitHub contributors, 3,000+… | ||
| Dragonfly 2.0 — Bring a breakthrough Leap to the Domain of Cloud Native File... | Zuozheng Hu, Jim Ma | 19m |
Dragonfly v1 has 500+ stars, 110+ adopters and 77 contributors; v2 decouples scheduler and CDN, adds a central manager, and makes dfget talk to a long‑running… | ||
| Automated Machine Learning Performance Evaluation | Alejandro Saucedo | 26m |
Deploys a TensorFlow ResNet32 from a Google bucket into Seldon Core on Kubernetes, runs automated grid searches over CPU, RAM, replicas, threads and workers… | ||
| Houston, We’ve Got a Problem! : How to Debug your Pipeline in... | Vibhav Bobade, Vincent Demeester | 39m |
Adds a breakpoint-on-failure mode to Tekton that pauses a failing Step and gives an interactive shell into that Step’s container (demo runs on minikube)… | ||
| Building the Multi-Cluster Data Layer | Chirag Narang | 32m |
Deploys YugabyteDB across three GKE clusters using Helm and Istio multi-primary with remote secrets, per-pod ClusterIP services and Kiali for visibility… | ||
| Writing for Developers: Take your Project Docs to the Next Level | Celeste Horgan | 23m |
Estimate: 50% of StackOverflow answers mention documentation as a deciding factor when teams pick a framework. The concrete layout is a concept‑task‑reference… | ||
| Dedicated Infrastructure in a Multitenant World | Carlos Sanchez | 30m |
Adobe Experience Manager Cloud Service runs multitenant clusters but gives customers dedicated egress IPs and private links by pairing a per-tenant virtual… | ||
| Traces from Events: A New Way to Visualise Kubernetes Activities | Bryan Boreham | 24m |
A small program called k-span listens to Kubernetes Events, turns them into OpenTelemetry spans, and sends them to Jaeger so you get a timeline instead of raw… | ||
| Kubernetes Advanced Networking Testing with KIND | Antonio Ojea | 29m |
Shows how KIND runs multi-node Kubernetes in Docker, builds reusable plugins to attach containers to additional Linux bridges, and demonstrates a KIND plugin… | ||
| How We are Dealing with Metrics at Scale on GitLab.com | Andrew Newdigate | 20m |
Site-scale monitoring moves from 100k to 2.8M samples/sec, from 21 to 400 dashboards and to 2,600 recording rules; Prometheus is federated with Thanos and… | ||
| Improving the Impact of Diversity Initiatives in Africa | Abubakar Siddiq Ango | 25m |
Africa contains 54 countries with deep regional and language splits so single-continent programs underperform; specify outcomes (hiring pipeline, product… | ||
| Optimizing Knowledge Distillation Training With Volcano | Ti Zhou, William Wang | 29m |
EDL deploys the teacher as an online inference service via Pilot Serving and uses EDL service distillation with Volcano scheduling and IO/RDMA awareness to… | ||
| Secrets Store CSI Driver: Keeping Secrets Secret | Anish Ramasekar, Tommy Murphy | 24m |
Secrets Store CSI Driver installs as a node-level daemonset plus a provider daemonset and mounts secrets as tempfs files so workloads read secrets from the… | ||
| Hacking into Kubernetes Security for Beginners | Ellen Körbes, Tabitha Sable | 26m |
Live demo shows a dev with kubectl exec into a misconfigured dev-database controller using overly-broad RBAC to edit another namespace’s Ingress, then an… | ||
| Discontiguous CIDRs for Dynamic Cluster Scaling | Rahul Joshi, Sudeep Modi | 22m |
Proposal makes cluster pod and node CIDRs mutable by adding a new ClusterCIDRConfig resource and a dynamic allocator that accepts discontiguous ranges and… | ||
| Enhancing Kubernetes with the Security Profiles Operator | Colleen Murphy, Sascha Grunert | 24m |
Operator provides Kubernetes-native CRDs for seccomp and SELinux profiles, a daemonset that renders JSON profiles into the kubelet path, and a webhook that… | ||
| Gateway API: A New Set of Kubernetes APIs for Advanced Traffic Routing | Harry Bagdi, Rob Scott | 32m |
New Gateway API introduces Kubernetes resources that separate concerns into GatewayClass/Gateway/Route model so infra teams provision load‑balancer classes… | ||
| CERN's 1500 Drupal Websites on Kubernetes: Sa... | Konstantinos Samaras-Tsakiris, Rajula Vineet Reddy | 20m |
CERN moves ~1500 Drupal sites onto OpenShift Kubernetes, building custom CRDs and controllers so a DrupalSite resource provisions database, site directory… | ||
| Making Dynamic Admission Control Even More Dynamic Using... | Flavio Castelli, Rafael Fernández López | 20m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at… | ||
| BuildKit CLI for kubectl: A New Way to Build Container Images | Daniel Hiltgen, Patrick Devine | 20m |
A kubectl plugin uses BuildKit to build Dockerfiles inside a Kubernetes cluster, launching a builder pod that auto-detects containerd and dockerd and mounts… | ||
| Uncovering a Sophisticated Kubernetes Attack in Real-Time | Jed Salazar, Natalia Reka Ivanko | 20m |
Shows real detections of two live GKE attacks: a privileged pod that mounts the host filesystem and achieves a container escape, and a compromised app that… | ||
| Event Processing at Optum, the Cloud Events Way | Janani Pathangi, Murugappan Chetty | 27m |
Optum runs an on‑prem serverless platform with 1,000+ functions used by 500+ developers and processes ~1 trillion transactions yearly; the engineering claim is… | ||
| How DoD Uses K8s & Flux to Achieve Compliance & Deployment Consistency | M. Medellin, G. Tillman | 27m |
Kessel Run uses Kubernetes, Flux, GitLab pipelines, Terraform, Cluster API, Vault, Bitnami Sealed Secrets, Helm and Istio to automate cluster and app delivery… | ||
| Live Experiments with K8s Applications: Pitfalls and Ho... | Fabio Oliveira, Srinivasan Parthasarathy | 30m |
A demo shows an open source controller called iterate that runs AB/n experiments on Kubernetes using Knative and Istio for segmentation, Prometheus and New… | ||
| From Zero to Hero: Outcomes from Cloud-Native El Salvador Comm... | Raul Flamenco, Mauricio Quevedo | 17m |
Community launches virtual meetups using Bevy hosted meetings, recruits 18 volunteers through university networks, and runs a Kubernetes Community Day with 200… | ||
| Sidecars at Netflix: From Basic Injection to First Class Ci... | Rodrigo Campos Catelin, Manas Alekar | 25m |
Netflix runs sidecars by packaging immutable system services into each container using rootless containers, a tiny init (tini) that creates namespaces and… | ||
| Multi-Tenancy in Kubernetes: How We Avoided Clusters Sprawl W... | Dario Tranchitella, Maksim Fedotov | 30m |
Capsule is an open-source Kubernetes operator that replaces per-customer clusters with a single-cluster-per-region model, avoiding the multiplicative “six… | ||
| Compliance the Easy Way: Zero-conf mTLS for Dev and smooth Day-2 f... | Christian Hüning, Lutz Behnke | 22m |
Finleap Connect implements zero-conf mTLS across a multi-tenant Kubernetes cluster using Linkerd 2.x, automatically encrypting east‑west traffic for compliance… | ||
| Turning Your Cloud Native Apps Inside Out With a Service Mesh | Adam Zwickey, Liam White | 30m |
Claims that moving Spring Cloud client libs into an Envoy-based service mesh yields consistent traffic management, observability and security across languages… | ||
| A Pathway to CNCF Citizenship - via Communitybridge | Darshan Chaudhary, Ken Owens | 22m |
CommunityBridge (LFX Mentorship) runs a structured, project-based pathway into CNCF: proposals from projects, mentees apply to up to three, then a three-month… | ||
| We Didn’t Start the Fire: Communication Breakdowns and How to Preven... | Ian Coldwater, Kat Cosgrove | 31m |
History of Kubernetes breaking changes shows concrete failures and fixes: v1beta1 API removals in 1.16 leave many clusters stuck on 1.15 outside patch support… | ||
| Resource Requests and Limits Under the Hood: The Journey of a Pod Spec | Kohei Ota, Kaslin Fields | 24m |
Explains how a Pod spec flows: requests are recorded in etcd, scheduler uses them to pick a node, kubelet hands pod to the CRI runtime which sets cgroups… | ||
| Power Level 9000! Improving Application Performance with Chaos Engineering | S. Pathak, K. Gaekwad | 32m |
Deploys a k3s cluster on Civo, installs Litmus 2.0, Prometheus, Grafana and a Blackbox exporter, then wires Flux + GitHub Actions to trigger chaos on each… | ||
| Akri: Making IoT Devices Accessible to Your Edge Kubernetes Clusters | Kate Goldenring, Jiří Appl | 23m |
Akri exposes physical IoT devices as Kubernetes extended resources and automatically deploys per-device broker pods (example: a frame server using an RTSP URL)… | ||
| Automating Your Home with K3s and Home Assistant | Eddie Zaneski, Jeff Billimek | 27m |
Home automation runs on a k3s homelab using Home Assistant, Helm charts and Flux for GitOps, with MetalLB for home IPs and Longhorn or Rook for replicated… | ||
| SIG CLI: Intro and Updates | Maciej Szulik, Katrina Verey, Jeff Regan | 17m |
SIG CLI covers kubectl plus subprojects crew (plugin manager with a searchable index), kustomize, and Kui the GUI and reports three concrete outcomes: Kui… | ||
| Rook: Intro and Ceph Deep Dive | Blaine Gardner, Satoru Takeuchi | 27m |
Rook installs an operator that deploys and manages Ceph (plus NFS, Cassandra, YugaByte) on Kubernetes, automating upgrades, CSI provisioning, and day‑2 ops… | ||
| Thanos: Easier Than Ever to Scale Prometheus and Make It Highly Ava... | G. Statkevičius, P. Saraswat | 21m |
Thanos claims to give Prometheus unlimited retention by using a sidecar that uploads immutable blocks to object storage, a store-gateway that serves queries… | ||
| SIG Contributor Experience Deep Dive | B. Killen, A. Dowdney, C. Blecker, N. Raghunath | 24m |
SIG Contributor Experience runs the contributor hub at kates.dev, maintains 50+ calendars and mailing lists, and monitors GitHub activity via devstats.cncf.io… | ||
| Taking the Helm: Becoming a Maintainer | Bridget Kromhout, Matt Butcher, Karena Angell, Matt Farina | 35m |
Helm is a six‑year‑old Kubernetes package manager now midway through Helm 3 with Helm 4 a year or two away; core priorities are stabilizing features, moving… | ||
| Log Support in OpenTelemetry | Steve Flanders | 27m |
OpenTelemetry has an accepted experimental log data model, a working Java client library implementation, and native collector support that already receives… | ||
| Seamless multi-cluster Communication and Observability with Linkerd | Max Korbacher | 39m |
Migrates a GDPR-protected telco app to a Kubernetes multi-cluster mesh using Linkerd gateways, implements service exports for cross-cluster calls and… | ||
| Taking Bare Metal to the Clouds with Tinkerbell | Mark Coleman | 28m |
Tinkerbell provisions bare metal by intercepting DHCP and netbooting machines, mapping MACs to workflows and running an in-memory OS to execute actions; core… | ||
| Understanding Isolation Levels in the Kubernetes Landscape | Jiaqi Liu | 25m |
Explains concrete isolation choices for multi-tenant Kubernetes: deploys one pod per user running Jupyter Notebooks with a persistent volume, uses hatchery to… | ||
| Running Cache-Efficient Builds at Scale on Kubernetes with BuildKit | Gautier Delorme | 25m |
Demonstrates running rootless and daemonless BuildKit on Kubernetes, using BuildKit caching (export/import, local volumes) and RUN --mount to produce… | ||
| Choose Wisely: Understanding Kubernetes Selectors | Christopher Hanson | 35m |
Shows exact controller behaviors with live demos: deployments add a pod-template-hash label so a ReplicaSet controls only its own pods, while creating an rs… | ||
| Cluster API as Code | David McKay | 32m |
Cluster API is usable but verbose, so this work provides Pulumi TypeScript bindings that generate and install CAPI controllers and providers (Equinix Metal /… | ||
| Evaluating Business Risk for Open Source Cloud Native Projects | Dawn M Foster | 30m |
Compares projects under neutral foundations (CNCF, Linux Foundation, Apache) versus company-controlled ones and shows concrete failure modes: OpenSSL runs on… | ||
| Inside Kubernetes Networking | Dominik Tornow | 29m |
Provides a concrete, executable mental model of Kubernetes networking: a graph of containers, port switches, node switches and links with explicit forwarding… | ||
| TechDocs: Unlocking the Potential of Engineers' Collective Knowledge | Emma Indal | 21m |
Spotify reports 1,600 engineers, 14,000+ software components and ~1,400 microservices and builds TechDocs into Backstage to make docs live in repos and publish… | ||
| Building a Community: How Cortex Went from a Vendor Project to a Community | Goutham Veeramachaneni | 29m |
Cortex moves from vendor-only to multi-company project by changing hard facts: docs and a website appear in 2019, contributors jump to 75 unique monthly… | ||
| CSI Volume Attacks – The SRE Strikes Back | Hendrik Land | 21m |
Shows concrete exploits and defenses for CSI volumes using a NetApp Trident demo: how claimRef protection on PVs prevents cross-namespace reuse, how inline… | ||
| What Do You Mean K8s Doesn't Have Users? How Do I Manage User Access Then? | Jussi Nummelin | 28m |
Kubernetes does not store or manage user accounts: authentication is external and the API server only receives a username string to feed into RBAC. Four… | ||
| Compliance Beyond Security: a Cloud Native GDPR Implementation Experience | Johan Tordsson | 23m |
GDPR forces data minimization and the right to be forgotten, not just encryption, and recent rulings (Privacy Shield invalidation; a French court on backups)… | ||
| Kubernetes on Windows - A Journey | Jerry Lozano | 31m |
Builds a mixed Kubernetes cluster on AWS with an Ubuntu control plane, one Ubuntu worker and one Windows worker running Windows Server 2019, joins the Windows… | ||
| From Tweet to BadIdea: Creating an Embeddable Kubernetes Style API Server | Jason DeTiberus | 25m |
Prototype claims to produce an embeddable Kubernetes-style API server with CRD support using controller-runtime, client-go and apimachinery without pulling the… | ||
| CRI-O Still Loves Kubernetes | Sasha Grunert, Peter Hunt, Urvashi Mohnani, Mrunal Patel | 33m |
CRI-O replaces dockershim as a Kubernetes-only runtime and shows concrete fixes: improved CRI metrics and kubelet communication under load, a new… | ||
| How You Can Tell Your Kubernetes Contribu... | Matt Broberg, Chris Short, Kaslin Fields, Peeyush Gupta | 29m |
Upstream Marketing describes a working system that helps noncode contributors publish stories: a contributor comms request template on the kubernetes/community… | ||
| FalcOMG That's AWESOME - New Things, Fixe... | L. Di Donato, L. Grasso, R. Puthiyetath, T. Labarussias | 26m |
Falco announces concrete open-source moves: libsinsp and libscap donated plus the kernel module and eBPF probe now live under the CNCF, with build… | ||
| Multi-tenancy vs. Multi-cluster: When Shou... | Tasha Drew, Ryan Bezdicek, Adrian Ludwin, Jim Bugwadia | 29m |
Panel compares concrete tradeoffs and tooling: when sharing one control plane causes CRD and cert-manager version conflicts, use virtual clusters to give teams… | ||
| Windows Containers in Kubernetes and a... | Mark Rossetti, Kalya Subramanian, David Schott, Jay Vyas | 23m |
Windows nodes are production-stable since Kubernetes 1.14 and work with containerd or Docker; networking uses HNS, VFP and HNS policies to program endpoints… | ||
| Intro + DeepDive: Kubernetes Cloud Provider Project for IBM Cloud | Sahdev P. Zala, Richard Theis | 27m |
IBM’s Cloud Provider project maintains the Cluster API provider (GitHub repo with PRs for VPC Gen2 and PowerVS) and is migrating cloud-specific logic into a… | ||
| Get In Containerds, We’re Going Securing: Kubern... | I. Coldwater, T. Sable, S. Raghunathan, A. Small | 23m |
Kubernetes SIG Security explains concrete outputs: it spun out of the third‑party audit working group, runs public Slack and regular meetings (first and third… | ||
| Cloud Native Distributed Event Streaming from TiKV | Zixiong Liu | 19m |
Produces a deduplicated, commit-timestamp-ordered change stream from TiKV by capturing events at the per-region Raft/replication layer and emitting watermarks… | ||
| Better Scalability & More Isolation? The Cortex “Shuffle Sharding” Story | Tom Wilkie | 26m |
Cortex shards tenant traffic into deterministic, randomly chosen subclusters using a deterministic hash of tenant ID and then applies the usual quorum… | ||
| How to Break your Kubernetes Cluster with Networking | Thomas Graf | 28m |
Kubernetes networking failures are concrete and repeatable: non‑FQDN lookups plus IPv4/IPv6 and a five‑entry search path generate 10 DNS lookups per curl… | ||
| Efficient Model Exploring and Continuous Delivery With Polyaxon + Kubeflow | Shotaro Kohama | 19m |
Mercari describes using Polyaxon for scalable hyperparameter search and Kubeflow Pipelines for automated continuous training and delivery, with Spinnaker… | ||
| Why Use Managed Kubernetes?: It's Dangerous to Go Alone! | Seth McCombs | 24m |
Argues that using a managed control plane removes the hardest operational work—API servers, etcd and upgrades—freeing small teams to build features instead of… | ||
| Building MLOps POCs and Sandbox Environments Using k3s and Argo | Sergio Mendez | 25m |
End-to-end MLOps POC that runs on a single-node k3s cluster and uses Argo Workflows to run ETL → training → model upload and Argo CD to deploy a Helm chart… | ||
| First Principles of Cloud Native Technology | Ronald Petty | 26m |
Shows a concrete checklist for understanding an inherited Kubernetes system in ~20–30 minutes: look at the cloud bill to find active services, scan issue… | ||
| Multi-Cluster Service Deployments with Operators and KubeCarrier | Rastislav Szabo | 19m |
One management cluster and three service clusters run a Redis operator and KubeCarrier distributes CRs to create Redis instances in cluster1 and cluster2, then… | ||
| eBPF on the Rise - Getting Started | Quentin Monnet | 29m |
eBPF provides safe, JIT-compiled kernel bytecode that the verifier forces to terminate and prevents OOB memory access, now supporting up to one million… | ||
| Lessons Learned from Operating ETCD | Pierre Zemb | 20m |
OVHcloud runs etcd under a Kubeception pattern and reports concrete ops rules: enable raft and disk metrics, tune timeouts and watch leader transfers and… | ||
| Operationalizing Kubernetes Sidecars in Production at Salesforce | Mayank Kumar | 27m |
Salesforce describes running mutating admission webhooks to inject sidecars across Hyperforce, with an open source framework that standardizes hooks, cuts… | ||
| Isolate the Users! Supporting User Namespaces in K8s for Increased Security | Mauricio Vásquez | 25m |
Argues that user namespaces cut host risk by mapping container uid0 to a non‑root host id (example: uid0 → 100000 with a 64k range), and proposes KEP-127 to… | ||
| Cert-Manager Beyond Ingress – Exploring the Variety of Use Cases | Matthew Bates | 30m |
Cert-manager v1.0 (donated to CNCF Sandbox) automates X.509 lifecycle via CRDs like Certificate and CertificateRequest and has ~280 contributors. It issues… | ||
| Lessons Learned Deploying Traditional Web Applications on Top of Kubernetes | Marcos Bjoerkelund | 28m |
Bitnami deploys almost 100 traditional apps and over 20 are Helm-deployable; workflow is: build OCI images (multi-stage to shrink size), package Helm… | ||
| I Can RBAC, and So Can You! | Marc Boorshtein | 27m |
Explains concrete RBAC limits (you cannot express “everything except X”, no referential integrity) and recommends identity-backed groups and OIDC for auth… | ||
| The Art of Hiding Yourself | Lorenzo Fontana | 25m |
Demonstrates a working hide-and-persist technique: an init container drops an LD_PRELOAD library into the host via /proc/<pid>/root and overrides libc… | ||
| When Prometheus Can’t Take the Load Anymore | Liron Cohen | 31m |
Compares three Prometheus scaleouts—Thanos, Cortex, and M3—by performance, HA, cost and ops complexity and ends up choosing Thanos for simpler deployment and… | ||
| A Deep Dive on Supporting Multi-Instance GPUs in Containers and Kubernetes | Kevin Klues | 32m |
Demonstrates concrete MIG support for containers and Kubernetes using the nvidia container toolkit, nvidia k8s-device-plugin, and nvidia-mig-parted. Converts… | ||
| Open Standards: Anchoring Extensibility for Cloud-Native Tooling | Katie Gamanji | 22m |
Argues that open standards moved containers from niche to industry default by delivering concrete specs and interfaces: OCI image and runtime spec enables… | ||
| CoreDNS Deep Dive: Building Custom Plugins | Yong Tang | 25m |
A concrete CoreDNS plugin is built in Go, about demo plugin <80 LOC, that inspects client IPs and returns 1.1.1.1 for internal subnets (172. or 122.) and… | ||
| Contour, a High Performance Multitenant Ingress Controller for Kubernetes | Steve Sloka | 27m |
Contour runs as a control plane for Envoy, deployed with an Envoy daemonset and a two‑replica control plane, and it pushes dynamic xDS config over gRPC. It… | ||
| CloudEvents - Looking Beyond Event Delivery | Remi Cattiau | 14m |
CloudEvents defines a required four-attribute context (id, source, specversion, type) plus optional data content type, data schema, subject and time, and maps… | ||
| "Extend All The Things!": Cloud Provider Edition | Joe Betz | 27m |
Migration of in-tree cloud providers moves platform code out of Kubernetes into separate repos, aiming to remove that code by 1.24 deletion after the 1.21… | ||
| Intro and Deep Dive: Kubernetes SIG Instrumentation | Frederic Branczyk | 28m |
Kubernetes SIG Instrumentation describes concrete deliverables: a metric stability framework that marks a first set of metrics stable in v1.21, an alpha pod… | ||
| Kubernetes Data Protection WG Intro and Deep Dive | Xing Yang, Xiangqian Yu | 26m |
Kubernetes lacks several concrete primitives needed for backup and restore so the working group defines and prototypes them: a volume backup API (separate from… | ||
| Kubernetes SIG Node Intro and Deep Dive | Elana Hashman, Sergey Kanzhelev | 20m |
Kubernetes SIG Node explains concrete progress: graduated features like CRI on Windows and immutable secrets, alpha kubelet memory management and pod resource… | ||
| Cluster API Provider AWS (CAPA) Update | Richard Case, Sedef Savas | 31m |
Cluster API Provider AWS is at v0.6 and provisions VPCs, subnets, security groups and EC2 control plane nodes using clusterawsadm and published AMIs; the… | ||
| An Introduction to the Financial Services User Group | Scott Surovich, Michael Lieberman | 23m |
A user group for financial services maps concrete constraints onto cloud-native projects, not vague theory: monthly meetings (third Tuesday, 14:30 GMT)… | ||
| Cloud-Native Computing For Research Users | Jamie Poole, Ricardo Rocha | 27m |
A CNCF research user group formed around 2019 meets every first and third Wednesday at 16:00 UTC and collects practical work: recorded sessions, a GitHub… | ||
| CNCF SIG-Runtime: The Cloud Native Runtimes Outlook | Ricardo Aravena, Renaud Gaubert | 22m |
SIG-Runtime coordinates admission, outreach and education for execution layers and now tracks containers, VMs and WebAssembly across CNCF; it meets biweekly… | ||
| Minikube & Three Different Local Kubernetes Learning Environments | Anders Björklund, Predrag Rogic | 33m |
Minikube runs local Kubernetes via three concrete environments—hypervisor VMs (VirtualBox/Hyper‑V), a low‑overhead docker driver system container, and a… | ||
| Kubernetes VMware UG: What’s New for K8s Users on VMware Infrastructure | Steven Wong, Myles Gray | 16m |
Covers the deprecation of in-tree cloud provider and storage plugin with removal targeted around Kubernetes 1.24 and migrations expected in the 1.22–1.24… | ||
| Cluster API Deep Dive | Jason DeTiberus, Marcel Mue | 36m |
Cluster API provides declarative CRDs and controllers to create, upgrade and operate clusters using four controller managers (core, bootstrap, infrastructure… | ||
| Build your Contributor Pipeline | Carolyn Van Slyck, Josh Berkus | 27m |
CNCF SIG Contributor Strategy lays out concrete, reusable assets: a cloneable contributor templates repo (pick files or clone whole), a published contributor… | ||
| Jaeger Intro and Deep Dive | Prithvi Raj Venkat Raj, Joe Elliott | 28m |
Jaeger is an open source distributed tracing backend (born at Uber ~2015, CNCF-graduated) that handles billions of requests/day across thousands of services… | ||
| Kubernetes SIG-Storage Intro and Update | Xing Yang, Jan Šafránek | 26m |
SIG-Storage now ships CSI snapshot GA (Kubernetes 1.20) and moves immutable Secrets/ConfigMaps and CSI Windows to GA in 1.21, with storage capacity tracking… | ||
| Cortex: Multi-tenant Scalable Prometheus | Bryan Boreham, Jacob Tlisi | 16m |
Cortex stores Prometheus metrics at millions of samples per second scale, adds multi-tenant queries (implemented in v1.7.0) that let Grafana pull multiple… | ||
| CNCF Serverless WG - Serverless Workflow Project Deep Dive | Tihomir Surdilovic, Doug Davis | 30m |
CloudEvents ships v1.0.1 and focuses next on discovery and subscription APIs plus a simple schema registry for publishing and versioning event schemas… | ||
| Using a Distributed Key-Value Store | Nick Cameron, Andy Lok | 24m |
TiKV is a distributed, transactional key‑value store that shards data into regions, replicates with Raft, and uses a PD timestamp oracle for transactions… | ||
| Kubernetes IoT Edge WG: Intro to K8s at Edge + Device Connection Option | Steven Wong, Dejan Bosanac | 33m |
Covers LoRaWAN basics and tradeoffs: chirp modulation, up to ~10 km line‑of‑sight, single‑battery multi‑month to year lifetime if duty cycle is low, ~€60 node… | ||
| Contributing to Kubernetes Conformance Coverage | Zach Mandeville, Caleb Woodbine | 16m |
Coverage workflow for Kubernetes: the Certified Kubernetes program (cncf.io/ck) requires full e2e results (Sonobuoy junit and e2e.log) to merge and today about… | ||
| App Delivery in Cloud Native: Where are We? What's Next? | Lei Zhang, Alois Reitbauer | 30m |
A landscape walkthrough that shows a working potato head demo wiring a single app through Helm Flux2 Argo CD, Rollouts, KubeVela, Gimlet, Litmus Chaos and… | ||
| OLM: A Declarative Way to Install, Manage, and Upgrade Operators | Dan Sover, Alex Greene | 22m |
OLM installs and upgrades operators via container-hosted “operator bundles” that put /manifests and /metadata inside an image, letting the cluster pull… | ||
| Introduction and Deep Dive Into Containerd | Kohei Tokunaga, Akihiro Suda | 29m |
Containerd is a go‑based daemon used by 83% of container usage (2021 survey) and runs as a CRI or native API server that delegates to runC/Kata/firecracker via… | ||
| Introduction to Cloud Native Buildpacks | Stephen Levine, Jesse Brown | 26m |
Cloud Native Buildpacks converts source code to OCI images without Dockerfiles by composing layered outputs (application, runtime, dependencies, stack) and… | ||
| Protecting Ourselves from CNCFgate. Software Supply Cha... | Andres Vega, Emily Fox, Jonathan Meadows | 24m |
Document outlines five end-to-end sections and recommends concrete controls: enforce MFA and signed git commits, scan and validate dependencies with SBoM plus… | ||
| An Introduction to Cloud Native Security | Ash Narkar, Aradhna Chetal, Andres Vega | 26m |
SIG publishes a living white paper and a practical cloud native security map that maps CNCF projects to four phases—develop, distribute, deploy, runtime—and… | ||
| Studying Kubernetes' Users with SIG... | Gaby Moreno Cesar, Josie Pynadath, Tasha Drew, Carl J Pearson | 24m |
Midway through a jobs‑to‑be‑done study of Kubernetes users, the SIG reports recruiting via CNCF Twitter and a screening survey, running semi-structured… | ||
| Harbor - Enterprise Cloud Native Artifact Registry | Daniel Jiang, Yan Wang | 28m |
Harbor is an on‑prem CNCF‑graduated artifact registry that now manages OCI artifacts, reports >200 contributors and 10,000+ installer downloads, and adds… | ||
| Groupless Autoscaling with Karpenter | Ellis Tarn, Prateek Gogia | 36m |
Karpenter replaces static node groups by requesting instances directly from the cloud, using EC2 Fleet to pick cheapest compatible types and zones, and… | ||
| Helm Users! What Flux 2 Can Do For You | Scott Rigby, Kingdon Patrick Barrett | 37m |
Flux v2 uses a running Helm controller to declare and reconcile Helm releases from Git, adding GitOps features like automated drift detection, unified logging… | ||
| Achieving the Tipping Point for Open-source Software: Making the Business Value Obvi... | Joshua Grose | 24m |
Provides a concrete four-question framework to justify OSS: tie the project to company goals, state the exact outcome, list design principles, and document… | ||
| Flux: Multi-tenancy Deep Dive | Philip Laine | 26m |
Flux is shown running multi-tenant clusters where each tenant maps to one namespace and one Git repo, bootstrapped with Terraform into a central fleet repo; a… | ||
| The New Stack Makers Virtual Pancake Breakfast + Podcast: IT, Developer Strategies, and Open Source | Cheryl Hung, Itzik Reich, Nivas Iyer, Alex C. Williams | 25m |
Developers demand on‑demand persistent storage that behaves like electricity, provisioned via kubectl single command portal and integrated with Kubernetes… | ||
| The New Stack Makers Virtual Pancake Breakfast + Podcast: Securing GitOps: Self-Healing Through O... | Katie Gamanji, Alex C. Williams, Om Moolchandani, Cindy Blake, Frank Kim, Sanjeev Sharma | 28m |
Panel outlines how GitOps combines declarative Kubernetes tooling and policy-as-code to make infrastructure self-heal: they name Argo CD, Flux, Atlantis… | ||
| CNCF - SIG Network Intro and Deep Dive | Lee Calcote, Ken Owens | 24m |
SIG Network’s service-mesh working group describes concrete outputs: about 60 service-mesh patterns cataloged (first 30 under active iteration), an SMI… | ||
| Demystifying Cloud Native Concepts for the Business World | Catherine Paganini, Jason Morgan | 13m |
Builds an open source CNCF Cloud Native Glossary on GitHub as the first concrete deliverable, claiming a shared lexicon will let business leaders make better… | ||
| Graduated Project Lightning Talk: Using Trace Data for Monitoring & Alerting of Appl... | Albert Teoh | 09m |
Proposal: aggregate traces into metrics so latency and error spikes become alertable signals rather than one-off breadcrumbs. Uses OpenTelemetry Collector’s… | ||
| Graduated Project Lightning Talk: Time to Live (TTL) Support for TiKV | Bokang Zhang | 10m |
TiKV adds per-key TTL by appending an 8-byte expiry timestamp to each value, checking that expiry on reads and optionally using the PD global timestamp for… | ||
| Graduated Project Lightning Talk: Vitess, are we Fast Yet? | Akilan Selvacoumar, Florent Poinsard | 09m |
Vitess performance is tracked by an open source monitoring pipeline called AreWeFastYet that runs short microbenchmarks with go test -bench on every commit and… | ||
| Battle of Black Friday: Proactively Autoscaling StockX | Mario Loria, Kyle Schrade | 31m |
StockX converts manual scaling into an automated workflow by combining EKS, Helm, HorizontalPodAutoscaler, Cluster Autoscaler and Datadog metrics and then… | ||
| Application Autoscaling Made Easy With Kubernetes Event-Driven Autoscaling | Tom Kerkhove | 28m |
Kubernetes Event-Driven Autoscaling (KEDA) is a controller and set of CRDs that lets existing Deployments and Jobs autoscale on external systems (Kafka, Redis… | ||
| Zero Pain Microservice Development and Deployment with Dapr and KubeVela | Hongchao Deng | 14m |
Alibaba claims developers only change app code while the platform provisions infra by combining KubeVela and Dapr, using a sidecar-based approach and templated… | ||
| Cloud Provider AWS Update and Roadmap | Nick Turner, Ayberk Yilmaz, Yang Yang, Nicole Han | 27m |
Migration from in-tree to an external cloud-controller-manager is underway: the migration framework is alpha in 1.21 and the credential-provider framework is… | ||
| Kubernetes Package Management Using Unix with Carvel | Helen George, João Pereira | 27m |
Carvel presents a suite (ytt, kbld, kapp, imgpkg, kapp-controller) that packages configs and OCI images into image package bundles and exposes a single install… | ||
| Mining Large Data Sets of Biomedical Omics Da... | Doug Davis, Theodore Alexandrov | 20m |
EMBL processes spatial metabolomics images with >10,000 channels and experiments often >1 TB, and Metaspace now handles >10,000 submissions with recent… | ||
| How to Follow the 3-2-1 Backup Rule in Kubernetes | Michael Cade | 05m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at… | ||
| Security In Plain Sight: Hardening Systems Via Open Source | Phillip Gibson | 05m |
Azure teams release upstream open source tooling that actually enforces controls: Gatekeeper (Open Policy Agent) validates Kubernetes manifests to block… | ||
| GitOps Working Group Update | Cornelia Davis, Chris Sanders | 19m |
Working Group launched late 2020 with 60 people from 30 companies and creates a vendor-neutral GitOps definition, a PR listing four principles (declarative… | ||
| Panel Discussion: Cloud Native Networking State of the Union | Raghavan Srinivas, Lin Sun, Christian Posta, Alyssa Wilk, Tim Hockin | 37m |
Kubernetes networking hits real limits as users scale to thousands of nodes, so the panel cites concrete shifts: dual-stack is beta for IPv6/IPv4, service… | ||
| Maintainer Q&A | Matt Klein | 34m |
Envoy treats WebAssembly extensions as the long-term extensibility path, promising multi-language filters (Rust, TinyGo, C++) and eventual dynamic distribution… | ||
| Beyond Federation: Automating Multi-cloud Workloads... | Zefeng (Kevin) Wang | 06m |
Describes a Kubernetes-native multi‑cluster control plane (Karmada) that adds propagation and override policies so one identical YAML can deploy across… | ||
| Securely Bridging Cloud-Native and Traditional Workloads... | Daniel Feldman | 04m |
Not everyone can move to Kubernetes at once so SPIRE provides a single identity layer that issues X.509 or JWT identities to services across clouds… | ||
| Automatically Turn Your Source Code into Scalable Microservices on Ku... | Boskey Savla | 09m |
Demo shows an automated pipeline that turns source repo into a running service: kpack (Cloud Native Buildpacks) builds and pushes an OCI image to Docker Hub… | ||
| Using Sloop for Monitoring Highly Available Services | Sana Jawad, Hemanth Siddulugari | 14m |
sloop collects Kubernetes object state on a schedule, stores it in BadgerDB without external dependencies, and keeps about two weeks of history (the project… | ||
| Use Kubernetes-native Integrated GitOps CI/CD Workflows | Christian Hernandez | 16m |
OpenShift 4.7.1 cluster runs GitOps pipeline that installs Argo CD and Tekton via the OpenShift GitOps operator, uses sealed-secrets and kustomize overlays for… | ||
| Mass Migrate VMs to Kubernetes & Move Containers across Clusters at... | Miguel Pérez Colino, Fabien Dupont, John Matthews | 16m |
Konveyor shows two working tools: forklift for mass VM migration (demo migrates two VMware VMs into KubeVirt/OpenShift, with per-VM imports, throttling… | ||
| Longhorn for Your Edge Deployments | Joshua Moody | 14m |
Longhorn runs on a 4-node Raspberry Pi K3s cluster deployed via Rancher K3s and provisions volumes with 3 replicas and anti‑affinity so a single Pi failure… | ||
| Flexible, Open and Easy Observability for Developers | Zain Asgar, Michelle Nguyen | 14m |
Pixie is an open-source, in-cluster observability platform donated to CNCF by New Relic that deploys in minutes via px CLI, Helm or YAML and uses eBPF to… | ||
| Cloud Native Application-aware Data Management in multi-cloud | Jaimon George, Diane Patton | 12m |
Covers concrete features: uses NetApp Astra with Trident CSI to automate backend storage setup, provision PersistentVolumes, and apply snapshots/backups; cites… | ||
| Introducing K0s 0.13 and kosctl | Miska Kaipiainen | 06m |
k0s is a single-binary Kubernetes distribution that claims one-command installs on x86 and ARM hardware from Raspberry Pi to datacenter. 0.13 ships with… | ||
| Kubernetes Ecosystem in Azure | Sean KcKenna | 13m |
Azure Security Center flags a wide API-exposure issue and detects a pod accessing a sensitive host volume, offering remediation links; secrets are mounted from… | ||
| Fighting the Final Boss: Complex Multi-site Multi-cluster App Dep... | Sascha Haase | 15m |
Shows how Kubermatic Kubernetes Platform and KubeCarrier actually deploy and manage applications across separate sites and clusters, using operators, a service… | ||
| Introducing Kubestr: Identify, Validate, & Evaluate Storage in Kubern... | Michael Cade | 16m |
Kubestr scans a kubeconfig-connected cluster to identify available CSI drivers and storageclasses, then performs CSI snapshot restore validation by creating a… | ||
| Cloud Native Solutions are Fueling a Telecom Revolution | Rajesh Gadiyar | 15m |
Cloud native architectures claim to deliver 10–100x more bandwidth and ~10x lower latency for 5G but introduce fragmentation, performance overheads, and… | ||
| Cloud Native Storage - a View of the Landscape, Projects... | Alex Chircop, Xing Yang, Quinton Hoole | 38m |
CNCF Storage SIG documents the ecosystem with the CNCF Storage Landscape and a new Performance and Benchmarking guide that focuses on volumes and databases and… | ||
| High Throughput with Low Resource Usage: A Logging Journey | Eduardo Silva | 35m |
Describes concrete engineering: Fluent Bit switches to a binary message pack payload, groups records into 2 MB chunks, and uses a hybrid in-memory + disk… | ||
| EmpowerUs | Aishwarya Sundar, Jeana Jorgensen, María Cruz, Radha Jhatakia | 32m |
Personal stories trace concrete paths: joining Wikimedia in 2013 and becoming a Google Open Source PO staffer in Feb 2020, moving from nontechnical roles into… | ||
| Zero Change Transitioning to Multi-Cloud Architecture | Hongcai Ren | 12m |
Claims zero-change migration so apps and infra require no edits while moving to multi-cloud, using a Kubernetes-native control plane (karmada API server… | ||
| Kubernetes and the HPE Ezmeral Container Platform | Don Wake | 09m |
HPE Ezmeral provides a control plane that manages multiple CNCF‑certified Kubernetes clusters (even different versions) via a kubectl plug‑in and a… | ||
| Benchmarking 5 Popular Ingress Controllers | Daniel Corbett | 09m |
Benchmarks run with the tool hey on a six-node c5.xlarge cluster (one node for ingress, five traffic injectors) compare Envoy, HAProxy, NGINX (community)… | ||
| Multi-cluster, Blue-green Traffic Splitting with the Gateway API | Mark Church | 14m |
Live demo shows Google Cloud’s GKE implementation of the Gateway API programming a Google global load balancer to route across three clusters using the… | ||
| Autoscaled K8s Observability with the Elastic Operator | Michael Morello | 14m |
Deploys Elastic Cloud on Kubernetes operator and demonstrates Elastic Cloud on Kubernetes operator autoscaling for Elasticsearch clusters (alpha in v1.5). Uses… | ||
| Extending OpenTelemetry to Observability | Daniel Kaar | 15m |
Dynatrace demonstrates that the one agent automatically captures OpenTelemetry spans and metrics, while an OpenTelemetry exporter ingests data when the agent… | ||
| Real-Time Object Detection with Pravega and Flink | David Adams | 15m |
A live pipeline ingests vehicle video frames from Jupyter into Pravega via a Pravega gRPC connector, runs a Flink job that applies a YOLO model using… | ||
| Policy-as-code for Kubernetes with Gatekeeper | Ara Pulido | 14m |
Gatekeeper installs OPA as a Kubernetes admission controller using Gatekeeper CRDs and a validating webhook, stores reusable Rego templates as constraint… | ||
| Many Apps. Many Locations. One Storage Solution. | Abhijith Shenoy, Xiangyu Wang | 14m |
Demo of Commvault Distributed Storage (Hedwig rename noted) shows an Operator install from Operator Hub that deploys a CSI-compliant stack across OpenShift and… | ||
| Building Arm Compatible CI/CD Pipelines | Angel Rivera | 14m |
CircleCI adds an arm.resource_class option (examples arm.medium and arm.large) and demonstrates end‑to‑end Arm CI/CD: a Node.js app compiles on Arm executors… | ||
| End-to-end policy-as-code from IaC to Running Workloads | Matt Johnson | 12m |
Claim: the same policies run from developer laptop to production and actually catch issues. Uses chekov CLI (open source) to scan Terraform, Kubernetes, Helm… | ||
| Enable Hybrid Cloud Kubernetes with GitOps, EKS, and EKS-D | Paul Curtis | 12m |
A single-node EKS‑D dev cluster on Equinix Metal pushes manifests from a dev branch in one Git repo, and merging a PR into main promotes those manifests to a… | ||
| Deploying a Simple Python App to IBM Cloud Code Engine | JJ Asghar | 16m |
Walks through containerizing a tiny Python app, pushing the image to a registry, and deploying it on IBM Cloud Code Engine using ibmcloud CLI and the Code… | ||
| Building Your Brand with CNCF AMA | Shilla Saebi, Bill Mulligan | 48m |
Practical roadmap for getting visible: add a project to the CNCF Landscape via a pull request to the landscape (logo, repo, URL) and expect an immediate deploy… | ||
| nothing matches | ||