KubeCon + CloudNativeCon Europe 2022
2022-05-16..2022-05-20
-- online --
[KubeCon + CloudNativeCon Europe 2018, KubeCon + CloudNativeCon Europe 2019, KubeCon + CloudNativeCon Europe 2020, KubeCon + CloudNativeCon Europe 2021, KubeCon + CloudNativeCon Europe 2022, KubeCon + CloudNativeCon Europe 2025, KubeCon + CloudNativeCon Europe 2026]
as the organisers put it
register explore the schedule register explore the schedule LOGIN TO VIRTUAL PLATFORM KubeCon + CloudNativeCon Europe 2022 is a wrap! Thank you to all the attendees, speakers, and sponsors that joined…
| title | author | length |
|---|---|---|
| What's New With SIG Windows and Deep Dive... | Mark Rossetti, Brandon Smith, Jay Vyas, Claudiu Belu | 26m |
Project updates announce gMSA v2 using a container credential-guard plugin with admission webhook support in v0.3.0 and an Azure Key Vault reference plugin… | ||
| What If... Kube-Apiserver Could be Extended Via WebAssembly? | Flavio Castelli | 26m |
Prototype patches the API server (a patched k3s binary) and adds a feature gate that downloads policies pulled from container registries as WebAssembly… | ||
| Volcano: Intro & Deep Dive | Klaus Ma | 32m |
Volcano provides Kubernetes-native batch job CRDs with multiple pod templates, gang (co‑scheduling) semantics, preemption/backfill, queue-based fair share and… | ||
| TikTok’s Story: How To Manage a Thousand Applications on Edge With Argo CD | Qingkun Li, Jesse Suen | 26m |
TikTok runs about 3000 apps across 100 edge clusters (nodes 10–60 with 96 CPU cores each) and manages deployments from a central data center using Argo CD with… | ||
| Threat Hunting at Scale: Auditing Thousands of Clusters With Falco + F... | Furkan Türkal, Emin Aktaş | 32m |
Trendyol builds an Audit Monitoring System that ingests Kubernetes audit logs and kernel events, enriches them via Falco and Fluent Bit deployed as a… | ||
| This is The Way: A Crash Course on the Intricacies of Managing CPUs... | Swati Sehgal, Marlow Weston | 23m |
Kubernetes adds CPU Manager (1.8) to give static CPU manager exclusive cores for containers in Guaranteed QoS, with the beta full-pcpu-only option rejecting… | ||
| The Road to IPv6 Support in... | John Gardiner Myers, Ciprian Hacman, Ole Markus, Justin Santa Barbara | 18m |
kOps adds IPv6 cluster support by using single‑stack pods with dual‑stack at the edge, initially using unique‑local addresses then switching to globally… | ||
| The Future Of Reproducible Research: Powered By Kubeflow | Trevor Grant | 35m |
Publishes a peer‑reviewed article plus a Kubeflow Pipeline that reproduces a low‑dose CT denoising workflow, running on Kubernetes with Apache Spark and Apache… | ||
| Spark on Kubernetes: The Elastic Story | Bowen Li, Huichao Zhao | 21m |
Apple runs Apache Spark on Kubernetes using the Spark Kubernetes Operator, per-queue unicorn resource queues and Kubernetes Cluster Autoscaler to build a… | ||
| SIG-Multicluster Intro and Deep Dive | Jeremy Olmsted-Thompson, Laura Lorenz, Paul Morie | 29m |
Overview of concrete work: an about API clusterproperty CRD stores id.k8s.io and clusterset.k8s.io values (recommend using kube-system namespace UID) for… | ||
| Securing Your Container Native Supply Chain with SLSA, Github and Te... | Laurent Simon, Priya Wadhwa | 32m |
Demonstrates concrete steps to get provenance and signatures into container builds: SLSA Level 2 via Tekton + Tekton Chains by extracting artifacts from… | ||
| Securing Kubernetes Applications by Crafting Custom Seccomp Profiles | Sascha Grunert | 32m |
Walks through creating a custom seccomp JSON for a real single-container app (kube-rbac-proxy), first by collecting syscalls via auditd log tracing (shows… | ||
| Sailing Multi Cloud Traffic Management With Karmada | Zhonghu Xu | 30m |
Karmada claims to treat multi-cloud clusters like a single Kubernetes control plane by using a Karmada API server, control manager and scheduler and by… | ||
| Running Containerd and k3s on MacOS | Akihiro Suda, Jan Dubois | 27m |
Lima and Rancher Desktop make containerd and k3s run on macOS by running a QEMU VM with filesystem sharing, automatic port mapping and host-aware DNS/proxy… | ||
| Rook: Intro and Deep Dive with Ce... | Travis Nielsen, Sebastien Han, Blaine Gardner, Satoru Takeuchi | 26m |
Rook is an operator that deploys and manages Ceph inside Kubernetes, packaging Ceph Quincy v17 with the Ceph CSI 3.6 stack to give block (RBD), file (CephFS)… | ||
| Production-scale Containerized Game Platform Practice in Bytedance | Chenyu Jiang, Viktor Farcic | 30m |
ByteDance describes a Kubernetes game platform built with Crossplane compositions, KubeVela OAM model, and Agones fleet scaling to provision multi‑cloud… | ||
| Making Your Apps and Infrastructure Services Failure-Resilient with... | Yaron Schneider, Henry Spang | 30m |
Configuration-driven resilience using Dapr 1.7 resiliency policies applies timeouts, retries (constant or exponential) and circuit breakers to apps, components… | ||
| Make Cloud Native Chaos Engineering Easier - Deep Dive into Chaos Mesh | Cwen Yin | 39m |
An open-source platform called Chaos Mesh implements chaos engineering on Kubernetes using CRDs for pod, network, stress and physical faults, a web dashboard… | ||
| Kubernetes SIG Node Intro and Deep Dive | Sergey Kanzhelev, Dawn Chen, Elana Hashman, Derek Carr | 34m |
SIG Node describes concrete changes: dockershim removal in v1.24 is complete and users move to CRI-compatible runtimes like containerd and CRI-O; cgroup v2… | ||
| Kubernetes Persistent Data Challenges – AZ, Region and Multi-Clou... | Chris Milsted, Patrick McFadin | 35m |
Demo runs on EKS with i3en NVMe nodes and a StorageOS CSI plugin backing Prometheus and Cassandra via the k8ssandra operator; cordon/drain and a terminated… | ||
| Kubernetes Data Protection WG Deep Dive | Xiangqian Yu, Xing Yang | 30m |
Working Group publishes a white paper, drives volume snapshot v1 deprecation in 1.24 and adds a source volumeModel field plus an allowVolumeModelChange… | ||
| KubeFlux: An HPC Scheduler Plugin for Kubernetes | Claudia Misale, Daniel Milroy | 28m |
KubeFlux implements the Fluxion scheduler as a Kubernetes Scheduling Framework plugin, running Flux in a sidecar and talking gRPC to convert PodGroup requests… | ||
| How Linkerd Helped bink Partner up with Barclays | Mark Swarbrick | 18m |
bink moves from on‑prem to Azure Kubernetes, hits transient TCP disconnects, DNS timeouts and lost UDP, and adopts Linkerd service mesh with mTLS and automatic… | ||
| Harbor - Enterprise Cloud Native Artifact Regi... | Yan Wang, Chenyu Zhang, Daojun Zhang, Vadim Bauer | 36m |
Harbor 2.5 adds cosign support by storing signatures as OCI artifacts so signatures live alongside images as cosign stored as OCI accessory; signatures cannot… | ||
| gRPC For Microservices: Service-mesh and Observability | Sanjay M Pujare, Wenbo Zhu | 33m |
gRPC is extended to run a proxyless (proximal) service mesh using xDS so gRPC clients and servers enforce routing, LB and mTLS without Envoy sidecars; Fortio… | ||
| GitOpsify Everything: When Crossplane Meets Argo CD | Ying Mo, Ken Murray | 27m |
A Crossplane-based bridge is implemented so Argo CD manages both OpenShift infrastructure and apps from Git: a cluster pool of pre-provisioned OCP 4.10.3… | ||
| Empower Autonomous Driving with Cloud Native Serverless Technologies | Benjamin Huo, Xiuming Lu | 33m |
OpenFunction implements a cloud‑agnostic FaaS platform that uses Dapr and Keda with Knative to run sync HTTP handlers that publish to Kafka and trigger async… | ||
| CRI-O: Secure, Performant, and Boring... | Peter Hunt, Urvashi Mohnani, Mrunal Patel, Sascha Grunert | 21m |
CRI-O now implements CRI v1 and stays version-locked with Kubernetes, fixed a CVE introduced in 1.19 that allowed arbitrary sysctl writes, and flips seccomp on… | ||
| Crack the FaaS Cold Start and Scalability Bottleneck | Cathy Zhang, Rui Zang | 23m |
Prototype implements snapshot-based instantiation for Firecracker/Kata microVMs and reduces measured cold-start from about 1700 ms to 630 ms (roughly 60%… | ||
| CNCF TAG Network and Service Mesh Working Group Deep-Dive | Lee Calcote, Ken Owens, Ed Warnicke | 33m |
CNCF TAG Network and Service Mesh WG outlines concrete outputs: the Service Mesh Interface (SMI) and Service Mesh Performance (SMP) specs, a MeshMark value… | ||
| Bypassing Falco: How to Compromise a Cluster without Tripping the SOC | Shay Berkovich | 34m |
Claims nine bypass classes (seven novel) against Falco v0.30.0 detections and implements them end to end using kernel sensors and userland tricks. Techniques… | ||
| Build a Cloud Native Logging Pipeline on the Edge with Fluentbit Operator | Feynman Zhou | 27m |
Fluent Operator claims to manage Fluent Bit and Fluentd lifecycles in Kubernetes, enabling dynamic config reloading by generating configs into Secrets and… | ||
| Adapting TiKV for Cloud Storage | Xinye Tao, Jinpeng Zhang | 11m |
TiKV adds Raft Engine — an LZ4‑compressed, append‑only log with an in‑memory index that replaces RocksDB and cuts background and server writes by about 30% —… | ||
| OpenTelemetry: The Road Ahead + Meet the Co... | Morgan McLean, Alolita Sharma, Ted Young, Daniel Dyla | 30m |
OpenTelemetry announces metrics release candidates (effectively GA) and tracing 1.0 is already stable, logging is about halfway finished with a stamza… | ||
| Open Policy Agent (OPA) Intro & Deep Dive | Anders Eknert, Will Beason | 41m |
Open Policy Agent (OPA) is a Rego-based policy engine with 250+ contributors, 800+ GitHub projects and 130M+ downloads that decouples decisions from… | ||
| Notary v2: Deep Dive and Open Issues | Justin Cormack, Steve Lasker | 40m |
Notary v2 attaches signatures and metadata to OCI images in registries so signatures move with the artifact; it uses the notation CLI for notation sign/verify… | ||
| State of NATS: Core, Persistence, & Materialized Views | Tomasz Pietrek | 34m |
NATS JetStream adds built-in persistence with concrete features: Key-Value buckets give put/get/watch, per-key history, revision-conditional updates, purge and… | ||
| Deep Dive into Minikube | Medya Ghazizadeh, Sharif Elgamal | 39m |
Minikube documents its architecture and operational choices: ~1.5M LOC and 729 contributors, a custom just-enough Linux ISO that cuts VM CPU use ~50%, and an… | ||
| Longhorn: Intro, Deep Dive and Q&A | Sheng Yang, Joshua Moody | 32m |
Longhorn is a CNCF-incubating distributed block store for Kubernetes that runs replicas per volume with an engine collocated to the consumer, offers… | ||
| Running Kubernetes in a Manufacturing Line – What Could Possibly... | Mario Fahlandt, Tobias Schneck | 32m |
Project implements Kubermatic to run Kubernetes-in-Kubernetes, provisioning a templated data‑center per site and deploying service clusters per site with… | ||
| Building an Agile Platform in a Highly Regulated Industry | Fredrik Klingenberg, Jonas Samuelson | 42m |
If-Insurance builds an immutable GitOps platform on AKS using Flux v2, Kustomize, sealed-secrets and Linkerd for mTLS and network insight, plus… | ||
| Composability is to Software as Compounding Interest is to Finance | Bill Mulligan | 23m |
Argues that composability drives compound business and technical value by citing concrete interfaces and outcomes: the Container Storage Interface yields 110… | ||
| How Adobe is Optimizing Resource Usage in Kubernetes | Carlos Sanchez | 36m |
Adobe runs 25+ multi-tenant Kubernetes clusters on Azure and combines cluster autoscaler, HPA (CPU and requests/min), and selective VPA to cut costs. A… | ||
| From Cloud Naive to Cloud Native – Avoiding Mistakes Everyone Does | Max Korbacher | 32m |
Companies treat Kubernetes like a VM instead of a platform, so expect to build an internal developer platform as a living product with a dedicated team that… | ||
| Making Sense of Chaos: Implementing Chaos Engineering in a Fintech... | Iqbal Farabi, Giovanni Sakti | 29m |
GoTo Financial implements chaos engineering to verify SLOs under heavy regulation, running controlled experiments against production-like systems and… | ||
| Komrade: an Open-Source Security Chaos Engineering (SCE) Tool for... | Aaron Rinehart, Matas Kulkovas | 34m |
Komrade is an open source Security Chaos Engineering tool for Kubernetes that runs experiments which backup previous config then apply a fault and restore on… | ||
| Making On-Prem Bare-Metal Kubernetes Network Stack Telco Ready | Christopher Dziomba, Marcel Fest | 22m |
Deutsche Telekom runs Kubernetes nodes as first‑class participants in the IP EVPN fabric so hosts peer BGP EVPN and learn tenant and cluster VXLANs directly… | ||
| To IPv6 - The Dual-stack Adoption Advisory Panel | Bridget Kromhout, Tim Hockin, Dinesh Majrekar, Lachie Evenson, Rags Srinivas | 33m |
Kubernetes adds concrete dual‑stack support (introduced in v1.20 and dual-stack graduated v1.23), with core APIs, CNI changes, and an admin network policy… | ||
| "My CNI Plugin Did… What?!": Debugging CNI with Style & Aplomb | Doug Smith, Daniel Mellado Area | 34m |
Shows concrete steps to debug CNI: locate the CNI binary and config directories, check kubelet args (config may be non‑default), and remember the… | ||
| Better Bandwidth Management with eBPF | Daniel Borkmann, Christopher M. Luciano | 31m |
Isovalent implements eBPF-based EDT rate limiting that moves enforcement to the physical egress, uses per-packet timestamps plus a multi-queue fair qdisc… | ||
| Logs Told Us It Was DNS, It Felt Like DNS, It Had To Be DNS, I... | Laurent Bernaille, Elijah Andrews | 36m |
Rolling restarts spike client retries and latency; logs point to DNS but low-level ENA metrics and VPC flow logs show conntrack table exceeded and hundreds of… | ||
| Observing Fastly’s Network at Scale Thanks to K8s and the Stri... | Fernando Crespo, Daniel Caballero | 37m |
Fastly describes Autopilot: a telemetry pipeline that ingests sFlow/NetFlow over DTLS from many PoPs, enriches with pmrt and Prometheus metrics, buffers in… | ||
| Metrics as a First-Class Citizen in the E2E Testing Landscape | Matej Gera, Jéssica Lins | 33m |
Claims that instrumented apps can drive E2E tests by asserting on exposed Prometheus metrics rather than external exit codes, implemented with a Go e2e… | ||
| From Monitoring to Observability: Left Shift your SLOs with Chaos | Michael Friedrich | 35m |
Argues that SLOs belong in CI/CD by showing a C++ memory-leak bug that only appears under DNS failures, detected by instrumented metrics and a Prometheus… | ||
| Distributing PromQL for Fast and Efficient Kubernetes Fleet Monitor... | Moad Zardab, Filip Petkovski | 30m |
Thanos implements query pushdown (feature-flagged) to pre-evaluate idempotent PromQL functions at Prometheus sidecars and a reference vertical sharding… | ||
| Show Me Your Labels and I’ll Tell You Who You Are | Sandor Guba | 27m |
Uses Kubernetes labels to drive actual log routing and policies: parses nginx access logs into fields, emits Prometheus counters and an alert when 4xx/5xx… | ||
| Navigating the CNCF Landscape, the Right Way | D. Mohan, S. Raghunathan, K. Kushwaha, S. Pathak | 41m |
CNCF landscape lists ~1,019 cards with 2,957,938 total stars and groups projects into sandbox → incubating → graduated so you can check maturity before… | ||
| Kubectl Said What? | Christopher Hanson | 35m |
Shows exact kubectl commands and fields to inspect real failures: use kubectl get with -o yaml/json and jsonpath, check kubectl describe for events, and query… | ||
| From Student to SRE That Loves CNCF in No Time | Jacob Valdemar Andreasen | 24m |
Started with no Kubernetes knowledge and reaches CKA in 1.5 years after a five‑month internship, building a Go release manager and contributing a working… | ||
| Charting Your Own Course Through the Cloud Native Landscape | Matt Stratton, Whitney Lee | 35m |
Defines a repeatable learning loop: collect, skim, narrow, learn, repeat with concrete tactics — use Anki spaced-repetition and a stats plugin to track daily… | ||
| Writing Crossplane Providers with Code Generation | Muvaffak Onus, Hasan Türken | 01h 39m |
Builds a real Crossplane provider for PlanetScale using the Crossplane Runtime and the provider-template scaffold, writing two CRDs (Database and Password)… | ||
| Kubernetes Everywhere: Lessons Learned From Going Multi-Cloud | Niko Smeds | 27m |
Grafana Labs expands Kubernetes across AWS, Azure, DigitalOcean, GCP and Linode in more than 30 regions with inter-cloud VPNs and private IP routing; team uses… | ||
| What Anime Taught Me About K8s Development & Tech Careers | Annie Talvasto | 28m |
Casual, analogy-driven primer that maps specific Kubernetes concepts to anime tropes: labels as named moves/roles, pods as small deployable shinobi units… | ||
| A Treasure Map of Hacking (and Defending) Kubernetes | Andrew Martin | 38m |
Shows concrete exploits and mitigations: an npm preinstall backdoor executes as the installer and reads SSH/GPG/cloud tokens; a malicious container image with… | ||
| Lightning Talk: Secure Multi User HPC Jobs in Kubernetes with Kyverno | Trey Dockendorf | 05m |
Ohio Supercomputer Center uses Open OnDemand + Kubernetes and Kyverno to run interactive HPC apps (RStudio, Jupyter) for classrooms, enforcing user file access… | ||
| Lightning Talk: Beginner to Maintainer Journey of a Student | Debabrata Panigrahi | 06m |
Student moves from zero Kubernetes knowledge to approver-level contribution within a year by using LFX mentorship, KCD Bengaluru code walkthroughs, and SIG… | ||
| Lightning Talk: Locating and Debugging Failures with Linkerd... | Alejandro Pedraza, Edidiong Asikpo | 05m |
Linkerd locates a failing service in an emoji-voting app using the Linkerd viz dashboard to show web → voting errors and a consistently failing "donut" pod… | ||
| Lightning Talk: Tell Your SD-WAN About Your Service Mesh External Services! | Alberto Rodríguez | 05m |
Don’t miss out! Join us at our upcoming hybrid event: KubeCon + CloudNativeCon North America 2022 from October 24-28 in Detroit (and online!). Learn more at… | ||
| Lightning Talk: Scaling Container Builds with Software Supply Chains | Duane DeCapite | 05m |
Claim: Buildpacks plus Flux plus Cartographer automate container builds end to end so hundreds of apps share base layers and can be updated without developer… | ||
| Lightning Talk: What Made Your Container Fat? Visualizing the Size of Container Layers | Dan Čermák | 05m |
A small web app visualizes which layer inflates an image by showing file system usage per layer and highlighting the culprit among dozens (the demo mentions… | ||
| Lightning Talk: What I’ve Learned by Running Local CNCF Chapter Cloud-native Islamabad | Saim Safdar | 06m |
Built a local CNCF chapter in Islamabad that runs 25+ webinars and 20+ meetups since March 2020, using community.cncf.io for registration and live streaming… | ||
| Lightning Talk: Introducing O-Cloud, or How 5G Leverages Kubernetes | Nikolay Nikolaev | 05m |
O-Cloud proposes running 5G RAN workloads on commodity hardware using Kubernetes alongside bare metal and VNFs, with the O-RAN Alliance’s work group 6 defining… | ||
| Lightning Talk: Thank you Keptn Obvious! Making SLOs observable with Prometheus a... | Andreas Grabner | 06m |
Shows how Prometheus metrics map to measurable SLOs and then how Keptn automatically enforces them by triggering remediation playbooks, scaling actions, or… | ||
| A Guided Tour of Cilium Service Mesh | Liz Rice | 43m |
Cilium extends its eBPF-based CNI into a service mesh that routes L3/L4 in-kernel and calls out to Envoy only for layer 7 visibility, demonstrated by a live… | ||
| Simplifying Service Mesh Operations with Flux and Flagger | Mitch Connors, Stefan Prodan | 36m |
Service mesh upgrades are automated using GitOps: Flux + Flagger automate control- and data-plane upgrades by opening pull requests when a new Istio version… | ||
| Linkerd End User Panel: Case Studies from Production | Catherine Paganini, Kasper Borg Nissen, Fredrik Klingenberg, Eli Goldberg, Christian Hüning | 37m |
Linkerd is used in production to solve concrete problems: gRPC load balancing replaces brittle client-side routing for ~40 microservices, mutual TLS encrypts… | ||
| Kubernetes Networking 101 | Randy Abernethy | 01h 27m |
90 minute hands on tutorial that boots an upstream kubeadm Kubernetes 1.23 cluster (single node), installs Docker runtime and Cilium (eBPF overlay or routing)… | ||
| PolicyReport CRD: Manage Admission Control, Runtime, and Scan Reports! | Anushka Mittal, Mritunjay Sharma, Frank Jogeleit, Stephen Adeniyi | 30m |
PolicyReport CRD standardizes outputs from multiple engines so a single cluster can hold unified findings instead of scattered logs. Adapters map Falco (via… | ||
| SPIRE: Intro & Deep Dive Into Windows Support | Agustín Martínez Fayó, Marcos Yacob | 34m |
SPIRE implements SPIFFE identities on Windows as an experimental feature with both server and agent runnable on Windows (tested on Windows Server 2022 and… | ||
| Removing Language Barriers for Spanish-speaking Professionals | Rael Garcia Arnés, Victor Morales | 30m |
Spanish Kubernetes docs are actively translated using a concrete fork/branch/PR workflow: content in Markdown, a sign CLA step, local builds with the Google… | ||
| Intro + Deep Dive: SIG Scalability | Marcel Zięba, Wojciech Tyczyński | 43m |
SIG Scalability defines a multi‑dimensional scalability envelope and six SLOs, measures them with cluster-loader2 and simulates large clusters with kubemark… | ||
| Keynote: The Cloud Native Chasm | Emily Fox | 11m |
Argues that cloud native projects need project-specific security choices, not generic checklists, and gives concrete practices: use security reviews and CNCF… | ||
| Keynote: Closing Remarks Day 3 | Jasmine James, Ricardo Rocha, Emily Fox | 02m |
Apple wins an award and organizers celebrate reconnecting in Valencia after a year of change while announcing breakouts start at 11am and a leadership handoff… | ||
| End User Awards | (not provided) | 03m |
Apple wins the CNCF End User Award for providing major contributions to the cloud native ecosystem, supplying code, documentation, project expertise, and… | ||
| Keynote: Exploring the Frontiers of Cloud Native | Bryan Che | 07m |
Cloud native gets pushed into space, oil rigs and cars using edge tooling that claims full state sync so fleets stay online; Huawei reports over 200,000… | ||
| Keynote: Push It to the Limit: From Canary Deployments to Canary Clusters | Henrik Høegh | 15m |
Lunar moves from canary deployments to full canary clusters by shifting most state out of Kubernetes and automating failover steps: GitOps with Flux, Route 53… | ||
| Keynote: CNCF Project Updates | Jasmine James, Ricardo Rocha, Emily Fox | 18m |
Project updates list concrete releases and measurable outcomes: Chaos Mesh 2.0 and 2.2 with 60+ adopters adds JVM and HTTP chaos plus a daily reporting system… | ||
| Keynote: How Developers Help Scale Kubernetes Security | Connor Gorman | 04m |
Kubernetes security scales by pushing fixes and policy into developer workflows and tooling rather than relying on small security teams alone. Notes a 5.6… | ||
| Keynote: Supporting the Community – So Open Source Projects Can Grow and Thrive | Le Tran | 06m |
Kasten by Veeam describes four initiatives to grow open source contribution: four initiatives are giving developers paid time to work upstream, documenting a… | ||
| Keynote: Nurturing The Whole Project | Josh Berkus, Catherine Paganini | 10m |
Open source projects need more than code: explicit numbers and tools matter. The CNFC offers contributor growth framework and a templates repo with governance… | ||
| Keynote: Opening Remarks Day 3 | Jasmine James, Ricardo Rocha, Emily Fox | 02m |
Day three opens with brief logistics and thanks: event operations and volunteers get credit, audio‑visual coordination by Tantalus Productions keeps slide… | ||
| Keynote: Closing Remarks Day 2 | Jasmine James, Ricardo Rocha, Emily Fox | 03m |
Announces a new mascot Owlina Alelina donated by the oppa project, gives logistics for tonight’s party with shuttles at the main entrance and the party running… | ||
| Keynote: PlatformOps: It’s all about Developer Experience | Ben Hale | 06m |
Claims that PlatformOps must treat developers as customers and that VMware Tanzu Application Platform is a developer‑oriented layer on Kubernetes used to… | ||
| Keynote: Building Bridges: Cloud Native and High Performance Computing | Ricardo Rocha | 19m |
CERN describes replacing an online farm with Kubernetes since 2017, moving petabytes/sec of detector data down to tens of gigabytes and running a couple… | ||
| Keynote: Landscape Sustainability: The Pillars of Cloud Native Gro... | Dave Zolotusky, Katie Gamanji | 15m |
TOC reports 36 projects in flight and breaks them down as 22 sandbox 10 incubation 4 graduation, describes recent process changes (revamped annual reviews and… | ||
| Keynote: THE API IS PEOPLE! | Stephen Augustus | 04m |
Starts from concrete entry points: SIG Contributor Experience for Kubernetes and TAG Contributor Strategy at the CNCF for maintainer paths, then maps to… | ||
| Keynote: Securing Shopify's Software Supply Chain | Shane Lawrence | 16m |
Shopify describes concrete controls: codify build recipes with in-toto so builds are reproducible, scan artifacts with trivy and produce SBOMs in CycloneDX… | ||
| Keynote: Kubernetes Project Updates | Jasmine James, Ricardo Rocha, Emily Fox | 08m |
Kubernetes announces concrete changes: dockershim removed (v1.24) and container images are now officially signed for supply‑chain security; cgroup v2 brings a… | ||
| Keynote: Closing Remarks Day 1 | Jasmine James, Ricardo Rocha, Emily Fox | 02m |
Quick logistical roundup: wellness programming includes a group bike tour, daily meditation and chair yoga, plus a quiet room for low‑interaction time; evening… | ||
| Keynote: Supporting the Community – So Open Source Projects Can Grow and Thrive | Le Tran | 06m |
Describes four concrete initiatives that grow contributors: time, clear vision, training resources, and open source first. Provides specifics: developers get… | ||
| Keynote: Incremental Deep Learning For Satellite with KubeEdge... | Xiaoman Hu, Zhipeng Huang, Yue Bao | 15m |
Experiment shows cloud-native incremental learning running on LEO satellites using KubeEdge Sedna with a TinyMS front end and MindSpore training on ground. A… | ||
| Keynote: Finding Your Power to Accelerate to a Sustainable Future | Kate Mulhall, Emma Collins | 07m |
Data growth and AI compute are driving energy demand—AI power doubles roughly every four months and data centers risk using about 8% of global electricity by… | ||
| Keynote: 7 Years of Running Kubernetes for Mercedes-Benz | Jens Erat, Peter Mueller, Sabine Wolz | 16m |
Seven-year journey from a single shared Kubernetes 0.9 cluster to ~900 clusters on Cluster API, all on-premises and now migrating to public clouds. Built an… | ||
| Crossplane Intro & Deep Dive - Compose Your Custom Cloud Platform | Jared Watts, Steven Borreli, Yury Tsarev, Christopher Haar | 35m |
Crossplane lets teams compose custom platform APIs declaratively—no controller code required—by wiring XRDs, Compositions and provider CRDs into Kubernetes… | ||
| CoreDNS: Intro and Deep Dive | John Belamaric, Yong Tang | 38m |
CoreDNS is the default DNS for Kubernetes and now ships features and fixes you should care about: releases from 1.8.5 to 1.9.2 fixes Go 1.17.6 vuln and a March… | ||
| Contour Ingress Intro and Deep Dive | Nick Young, Orlin Vasilev, Nigel Brown | 38m |
Contour is a control plane for Envoy with concrete metrics and features: 230 contributors, 41 new this year, 16 releases and 620 PRs with an average 12-hour PR… | ||
| CNCF TAG-Runtime: Cloud Native Open... | Alex Scammon, Zbynek Roubalik, Ricardo Aravena, Samuel Ortiz | 33m |
CNCF TAG-Runtime maps projects, meetings and working groups that enable running cloud‑native workloads: a Armada multi-cluster batch scheduler and… | ||
| Cloud Native Storage: The CNCF Storage TAG, Projects... | Alex Chircop, Xing Yang, Raffaele Spazzoli | 42m |
CNCF Storage TAG lays out three whitepapers: a storage landscape mapping layers and attributes, a performance and benchmarking guide that warns about caching… | ||
| Updates from The Update Framework | Lukas Pühringer, Jussi Kukkonen | 27m |
The Update Framework provides cryptographic signing, multi-role delegations and expiry rules to give compromise resilience and freshness guarantees; a… | ||
| Staring Into the Abyss with the Security Technical Advisory Group | Andres Vega, Brandon Lum | 32m |
Security TAG outlines concrete artifacts and next steps: a revised v2 white paper with a ransomware and EU compliance section, a secure software factory… | ||
| Overview and State of Linkerd | Matei David | 36m |
Linkerd presents itself as a CNCF‑graduated, production‑proven service mesh running four plus years in production and cited for securing 22k pods in a case… | ||
| Optimize Kubernetes on vSphere with Event-Driven Automation | Steven Wong, Michael Gasch | 44m |
A downloadable appliance called VMware Event Broker Appliance listens to vCenter, converts vSphere alarms and the 1800+ vSphere events into CloudEvents +… | ||
| SIG Architecture Intro and Update | Davanum "Dims" Srinivas, John Belamaric | 37m |
SIG Architecture defines concrete rules and gates that shape Kubernetes evolution: it runs the API review workflow that vets new fields and CRDs for version… | ||
| Kubernetes SIG Apps Updates | Maciej Szulik, Janet Kuo, Ken Owens | 26m |
SIG Apps reports concrete progress: TTLAfterFinished GA is promoted so jobs auto-delete after a TTL; index jobs and suspendable jobs add per-pod indices and… | ||
| SIG Security Update: We Lift Tog... | Tabitha Sable, Pushkar Joglekar, Rey Lejano, Savitha Raghunathan | 37m |
SIG Security announces an ongoing third‑party audit led by NCC Group audit against Kubernetes 1.24 after the 2019 review found 34 findings in 2019; scope… | ||
| Three Surprising K8s Networking “Features” and How to Defend Against Them | James Cleverley-Prance | 33m |
Nmap and OpenSSL enumeration reveals API server certificate SANs that leak the service network CIDR, and unauthenticated /version and UDP scans find kubelet… | ||
| Multi-Cloud Workload Identity With SPIFFE | Jake Sanders, Charlie Egan | 40m |
Prototype uses SPIFFE SVIDs issued via cert-manager and the cert-manager-csi-driver-spiffe, with cert-manager-trust and a spiffe-connector server to exchange… | ||
| Throw Away Your Passwords: Trusting Workload Identity | Ric Featherstone | 34m |
Explains how Kubernetes service account tokens become token review API workload identity, why projected (bound) tokens limit impersonation, and how the service… | ||
| Too Much to Choose – Making Sense of a Smorgasbord of Security Standard | Anais Urlichs, Rory McCune | 35m |
Compares concrete standards: CIS Benchmark (checks are prescriptive, target kubeadm/AKS/EKS/GKE/OpenShift and specific k8s versions like 1.20/1.23), NSA… | ||
| Full Mesh Encryption in Kubernetes with WireGuard and Calico | Peter Kelly | 35m |
Calico configures WireGuard interfaces per node and maps WireGuard peers to nodes and allowed IPs to pod IPs to create an eventual-consistent host-to-host… | ||
| Attacking & Defending Kubernetes TEE Enclaves in Critical Infrastructure | Robert Ficcaglia | 36m |
Explains that hardware TEEs like SGX and TDX can cryptographically attest, seal, and isolate pod-level workloads but are not a silver bullet: side‑channel and… | ||
| Gateway API: Beta to GA | Rob Scott, Nick Young | 43m |
Gateway API graduates core pieces—GatewayClass, Gateway, and HTTPRoute—to Beta as a CRD-based official Kubernetes API with webhook validation, requiring… | ||
| SIG Contributor Experience Deep Dive | Alison Dowdney, Christoph Blecker, Bob Killen | 33m |
SIG Contributor Experience runs the community plumbing: managing 100+ mailing lists and calendars, a 150,000‑user Slack with moderator bots and a… | ||
| Kubernetes SIG CLI: Intro and Updates | Eddie Zaneski, Katrina Verey, Maciej Szulik | 36m |
SIG CLI maintains kubectl, kustomize and libraries, and reports concrete changes: discovery cache interval moves from 10 minutes to 6 hours, completions and… | ||
| Kubernetes IoT Edge Working Group: Edge Device Onboa... | Steven Wong, Kate Goldenring, Kilton Hopkins | 39m |
Secure Device Onboard implements the FIDO-backed rendezvous/owner/manufacturer flow with device vouchers and a TPM-stored manufacturer key hash; demo uses a… | ||
| What Is the CNCF TAG Observability and How You Can Join Our Effort! | Bartłomiej Płotka, Alolita Sharma, Richard Hartmann, Matt Young | 30m |
TAG Observability coordinates CNCF projects and community work to turn observability theory into runnable artifacts: a near-complete white paper in the GitHub… | ||
| The Maintainer's Toolkit: Must-know CNCF Resources for Project O... | Catherine Paganini, Dawn M Foster | 31m |
TAG Contributor Strategy provides ready-made governance and contributor tooling: a repo of contributing.md template, contributor ladder and three governance… | ||
| Backstage: Restoring Order To Your Chaos | Dave Zolotusky | 35m |
Backstage is an extensible developer portal that consolidates CI/CD, docs, APIs and ownership into a service catalog with YAML-backed entities and relations… | ||
| Prometheus Intro and Deep Dive | Julius Volz, Björn Rabenstein, Matthias Rampke | 32m |
Prometheus overview plus recent changes: claims of handling 10 million active time series and ~1 million samples/sec with about 1–2 bytes per sample… | ||
| SIG Cloud Provider: Portable K8s Across all Clouds, Roadmap and Updates | Nick Turner, Steven Wong | 27m |
Kubernetes is actively moving cloud-specific code from the monolithic repo into out-of-tree components: the control loops move from the kube-controller-manager… | ||
| What's New in Operator Framework? | Jonathan Berkhahn, Varsha Prasad, Jesus Rodriguez, Austin Macdonald | 28m |
Operator SDK adds a Quarkus-based Java operator plugin that scaffolds native Java operators using the Java Operator SDK library, and a hybrid-helm scaffolding… | ||
| Building for the (Inevitable) Next Cloud Outage | Pavel Nikolov | 39m |
Three k3s Kubernetes clusters in New York, Amsterdam and Sydney advertise the same BGP anycast address via the Bird daemon so user requests hit the nearest… | ||
| Why Kubernetes Can't Get Around FinOps – Cost Management Best Pra... | Vanessa Kantner, Manuela Latz | 35m |
Claims that 70% of companies either estimate or don't monitor Kubernetes costs, and that cost answers require linking cloud bills, discounts and reservations… | ||
| Transparent Live Migration of Services Between Kubernetes Cluster | Adam Janikowski, Jörg Schad | 30m |
ArangoDB proves live, cross-region and cross-cloud migration of stateful clusters with its Kube-Arango operator, migrating individual DB members one-by-one… | ||
| Reproducing Production Issues in your CI Pipeline Using eBPF | Matthew LeRay, Omid Azizi | 29m |
eBPF captures kernel send/receive events (and OpenSSL calls for TLS) to record real production requests into Pixie, which converts them into structured HTTP… | ||
| The Soul of a New Command: Adding ‘Events’ to kubectl | Bryan Boreham | 38m |
Adds kubectl alpha events (shipped in Kubernetes 1.23) that actually sorts by event time across two incompatible event APIs (v1 and events.k8s.io/v1), uses Go… | ||
| Case Study: Bringing Chaos Engineering to the Cloud Native Develo... | Uma Mukkara, Ramiro Berrelleza | 29m |
A concrete case shows cloud-native chaos run from the dev loop: a Litmus YAML chaos workflow (a pod-delete experiment that kills the Postgres pod for 45s every… | ||
| How a Couple of Characters (and GitOps) Brought Down Our Site | Guy Templeton, Stuart Davidson | 48m |
A single-line Helm template change causes Argo CD to interpret zero target clusters and Argo CD autoprune deleted 478 services across every cluster and region… | ||
| Scaling K8s Nodes Without Breaking the Bank or Your Sanity | Brandon Wagner, Nick Tran | 26m |
Explains using EC2 Spot to cut node costs up to 90% discounts while handling the two-minute interruption notice via rebalance recommendations and the AWS Node… | ||
| Tweezering Kubernetes Resources: Operating on Operators | Kevin Ward | 40m |
Operators extend the Kubernetes API but often run with dangerous permissions: scanning every operator on operator hub finds ~90 use a dedicated namespace yet… | ||
| How to Migrate 700 Kubernetes Clusters to Cluster API with Zero D... | Tobias Giese, Sean Schneeweiss | 31m |
Mercedes‑Benz migrates its legacy Terraform/Jenkins/Ansible fleet management into Cluster API, replacing a pipeline that managed 700 clusters and ~3,500… | ||
| Your Manila CephFS Share Backups Belong to S3 | Robert Vasek | 36m |
CERN backs ~74 TB of production CephFS used by 65 projects and manages backups by snapshotting a PVC, creating a volume from that snapshot, mounting it and… | ||
| Autoscaling Elasticsearch for Logs on Kubernetes | Radu Gheorghe, Ciprian Hacman | 32m |
An operator autoscaling Elasticsearch/OpenSearch for logs changes index templates to alter primary shard count, changes shards in template and rotates indices… | ||
| Service Mesh at Scale: How Xbox Cloud Gaming Secures 22k Pods with Linkerd | Christopher Voss | 22m |
Xbox Cloud Gaming runs Linkerd across 26 AKS clusters with ~50 microservices per cluster and 700–1,000 pods each, securing 22k pods with zero config mTLS and… | ||
| Implementing Anti-patterns: Kubernetes Cross-namespace Resource Ownership | Tom Coufal | 33m |
Kubernetes forbids namespace-scoped ownerReferences (warning since v1.20) so a solution creates paired CRDs called meteor and its shadow comma, uses finalizers… | ||
| Cluster API Intro and Deep Dive | Yuvaraj Balaji Rao Kakaraparthi, Vince Prignano | 38m |
Cluster API reaches v1 with v1beta1 APIs and about 30 providers and shows production adoption (Twilio >100 clusters, Mercedes ~700 moved, U.S. Army in… | ||
| Build Your Own Cluster API Provider the Easy Way | Anusha Hegde, Richard Case | 30m |
Explains how to implement Cluster API providers that actually run: defines the three provider types (infrastructure, bootstrap, control plane), shows required… | ||
| Learnings From Providing A Platform API With Kubernetes And Crossplane | Hannes Blut, Jan Willies | 31m |
Deutsche Bahn builds a unified platform API using Kubernetes with Crossplane as the control plane, running a couple thousand managed resources and shaping… | ||
| Jet Energy Corrections with GNN Regression using Kubeflow @ CERN | Daniel Holmberg, Dejan Golubovic | 24m |
Graph neural network and deep‑set regressors are trained on a 10 GB S3 dataset via Kubeflow pipelines with Katib random search for hyperparameters, multi‑GPU… | ||
| Kubernetes as a Substrate for ATLAS Compute | Fernando Barreiro Megino, Lukas Heinrich | 34m |
ATLAS integrates Kubernetes as a native compute substrate using Harvester plugins and Kubernetes Job controllers to run production and interactive workloads… | ||
| Scaling and Orchestrating “Good Bot” With Kubernetes | Aris Cahyadi Risdianto | 34m |
A Kubernetes-based orchestrator deploys containerized human agents that run javascript-enabled browser workloads, file transfers and app interactions, with a… | ||
| Cloud-Native Building Blocks: An Interactive Envoy Proxy Workshop | Adam Sayah, Jim Barton | 01h 25m |
Hands-on workshop that provisions a K3s browser lab via Instruct and walks through raw Envoy configs (Docker Compose examples) to create listeners, filter… | ||
| Why, How to, and Issues: Tail-Based Sampling in the OpenTelemetry Collector | Reese Lee | 39m |
OpenTelemetry Collector performs tail-based sampling by buffering full traces and applying policies in a tail sampling processor so a 20-call load generator… | ||
| Prometheus Sparse High-Resolution Histograms in Action | Ganesh Vernekar | 35m |
Demonstrates a proof‑of‑concept that encodes entire histograms into a single sample so Prometheus stores one series per histogram instead of one per bucket… | ||
| Alerting in the Prometheus Ecosystem: The Past, Present and Future | Josue (Josh) Abreu | 23m |
Explains why the Alertmanager is horizontally scalable inside Cortex/Mimir by shard by tenant id, using hash rings for routing, gRPC for notification-state… | ||
| Better Reliability Through Observability and Experimentation | Julie Gunderson, Kerim Satirli | 37m |
Shows how observability plus controlled experiments shorten time to detect (TTD) and harden systems using OpenTelemetry/OpenTracing, Gremlin-style fault… | ||
| OpenTelemetry: The Vision, Reality, and How to Get Started | Dotan Horovits | 34m |
Companies run 5–10 tools for telemetry today; OpenTelemetry promises one unified framework with concrete pieces: language APIs/SDKs, auto-instrumentation, an… | ||
| Operating Prometheus in a Serverless World | Colin Douch | 30m |
Cloudflare builds and runs a custom Prometheus-compatible collector called the gravel gateway (implemented in Rust) that accepts standard text exposition… | ||
| Registries After Dark, Part 2: Distributed Random Access Merkledags | Daniel Mangum, Jason Hall | 35m |
Builds a RISC‑V emulator in Rust, compiles a tiny C program with a RISC‑V cross compiler and translates each store into an OCI image layer so each memory write… | ||
| Keep Calm and Containerd On! | Anusha Ragunathan | 27m |
Intuit migrates 220+ Kubernetes clusters (avg ~16,000 nodes) from dockerd to containerd, replacing the docker shim and using crictl plus kubelet’s… | ||
| Cloud Native Mentorship: Tips for Being a Great Mentor to CNCF Students | Lucas Servén Marín | 26m |
Mentorship focuses on concrete practices: define explicit goals and ask each student what they want to learn, run weekly check‑ins (even if brief), timebox… | ||
| You're a Community Manager? But What Do You REALLY Do?! | Nanci Lancaster, Karen Chu | 38m |
Manages contributor onramps and maintainer churn by maintaining contributor guides, codes of conduct, and running contributor summits; runs events logistics… | ||
| GitOps to Automate the Setup, Management and Extension a K8s Cluster | Kim Schlesinger | 01h 25m |
Uses Terraform to provision a DigitalOcean managed Kubernetes cluster called kubecon-cluster, bootstraps Flux CD which creates a GitHub repo (kubecon-workshop)… | ||
| Understanding Kubernetes Through Real-World Phenomena and Analogies | Lucas Käldström | 36m |
Explains why Kubernetes is structured around a declarative desired-state API and closed-loop reconciliation rather than imperative commands, showing how… | ||
| From `docker push` to Bytes on Disk: Inside Distribution | Wayne Warren, Adam Wolfe Gordon | 38m |
DigitalOcean describes how its Container Registry uses CNCF Distribution codebase and implements the OCI Distribution API so a push becomes bytes on disk via… | ||
| Choosing Cloud Native Technologies for the Journey to Multi-cloud | Adelina Simion | 27m |
Form3 migrates payment services to managed Kubernetes on AWS, GCP and Azure, using Cilium for cross‑cloud networking, NATS JetStream as the event bus and… | ||
| Digging Into Your App's Container Image Layers for Sneaky Vulnerabilities | Pablo Galego | 26m |
Uses Trivy to scan a Spring Boot image (initial run shows ~200 vulnerabilities) and narrows to actionable items with --severity=CRITICAL and --ignore-unfixed… | ||
| Implementing Cert-manager in K8s | Jose Manuel Ortega | 38m |
Don’t miss out! Join us at our upcoming hybrid event: KubeCon + CloudNativeCon North America 2022 from October 24-28 in Detroit (and online!). Learn more at… | ||
| Sharing Knowledge: Writing Good Docs for Quick Approval | Jared Bhatti | 38m |
Led Kubernetes SIG Docs 2016–2020, argues that simple process shifts cut PR churn from weeks to hours by requiring an issue that states audience and plan, sign… | ||
| Cloud Native Chaos Engineering with Lit... | Karthik S, Uma Mukkara, Udit Gaurav, Saiyam Pathak | 29m |
LitmusChaos is a Kubernetes-native chaos platform with a centralized control plane, agent-based executors and a public hub that already holds 50+ experiments… | ||
| Introduction to the Kubernetes WG Batch | Aldo Culquicondor, Abdullah Gharaibeh, Alex Wang | 37m |
Kubernetes WG Batch forms to add concrete batch features to core Kubernetes: it ships index jobs (pod indexing for static partitioning), a suspend field and… | ||
| Kubernetes SIG UI Introduction and Updates | Sebastian Florek, Marcin Maciaszczyk, Shu Muto | 22m |
Kubernetes Dashboard is at v2.5.1 (supports Kubernetes up to 1.23.6; 1.24 support approved) and ships as one binary with a TypeScript front end, Go backend… | ||
| Kubernetes SIG Storage Deep Dive | Xing Yang, Jan Šafránek | 36m |
SIG Storage describes CSI migration that replaces in-tree volume plugins by translating existing StorageClass/PV objects to CSI at runtime using an in-memory… | ||
| SIG Instrumentation Introduction and Deep Dive | Damien Grisonnet, Patrick Ohly | 35m |
SIG Instrumentation enforces concrete changes: it replaces unstructured logs with structured logging completed for kubelet (v1.21) and kube-scheduler (v1.24)… | ||
| SIG Autoscaling Updates and Feature Highlights | Michael McCune, Joachim Bartosik, Guy Templeton, David Morrison | 33m |
HPA reaches v2 stability with v2 stable merged (PR 102534) and deprecates v2beta1 by 1.25 and v2beta2 by 1.26; serialization stays compatible but some… | ||
| Unraveling the Magic Behind Buildpacks | Sambhav Kothari, Natalie Arellano | 39m |
Demo constructs an OCI image from first principles and created an OCI image layout by hand, producing a BusyBox-based image that is built BusyBox image with no… | ||
| Thinking Cloud Native, CloudEvents Future | Scott Nichols | 40m |
CloudEvents provides an envelope to wrap any payload so routers and connectors can route on stable metadata instead of fragile, service‑specific payloads, with… | ||
| Intro to the Cloud Native Maturity Model | Danielle Cook, Simon Forster, Robbie Glenn, John Forman | 34m |
Cartografos Working Group publishes a Cloud Native Maturity Model with five levels (build, operate, scale, improve, optimize), mapped to five domains: people… | ||
| Cilium: Welcome, Vision and Updates | Thomas Graf, Liz Rice, Laurent Bernaille | 36m |
Cilium runs eBPF programs in-kernel to replace iptables/ipvs and provides sidecar-free service mesh and L7 policies, with production adoption: tens of… | ||
| Argo’s Vibrant Ecosystem and Community | Alex Collins, Alexander Matyushentsev, Dan Garfield | 30m |
Argo’s ecosystem highlights concrete deliverables: Argo CD Autopilot bootstraps a Git repo, creates directory structure and makes Argo CD self-managed; Argo… | ||
| CNCF 101 | Kristi Tan, Charley Mann | 27m |
CNCF is the foundation that hosts cloud native projects and governance: it lists 117 projects, reports 152,000 contributors across 186 countries, and supported… | ||
| Threat Modelling Kubernetes: A Lightspeed Introduction | Lewis Denham Parry | 38m |
Fast primer that shows how to threat‑model Kubernetes end to end: build a data‑flow diagram, map STRIDE and Microsoft threat matrix entries to attack trees… | ||
| Emissary + Linkerd: A Guide to End-to-end Encryption for your Cluster | Flynn, Jason Morgan | 35m |
Demo shows Emissary (Envoy) terminating TLS at the edge and Linkerd adding in-cluster mTLS so browser-to-pod encryption is continuous, using a Let's Encrypt… | ||
| Make the Secure Kubernetes Supply Chain Work for You | Adolfo García Veytia | 34m |
Kubernetes adds concrete supply-chain controls since 1.22: projects generate SBOMs (SPDX), produce SLSA provenance attestations outside the build to avoid… | ||
| Fun with Continuous Compliance | Ann Wallace, Zeal Somani | 40m |
Shopify describes running thousands of GKE clusters and thousands of builds per month and shows a concrete pipeline: Buildkite builds images, images are… | ||
| Kubernetes Steering Committee AMA | Christoph Blecker, Bob Killen, Tim Pepper, Davanum "Dims" Srinivas, Paris Pittman, Stephen Augustus | 36m |
Explains concrete governance problems and responses: the project has 70,000 contributors but a chronic need more reviewers and maintainers, so working groups… | ||
| KubeEdge: From Fixed Location to Movable Edge, Latest Updates and... | Kevin Wang, Yin Ding | 33m |
KubeEdge runs a cloud-core / edge-core model (edge-core is a kubelet derivative) using websocket long connections and local sqlite state so edge nodes stay… | ||
| Jaeger: Present and Future | Pavol Loffay, Jonah Kowall | 45m |
Jaeger now collects metrics from traces by using an OpenTelemetry pipeline with a span metrics processor that generates Prometheus-compatible histograms… | ||
| Helm Project 2022: How You Can Benefit, Ho... | Scott Rigby, Matt Butcher, Martin Hickey, Andrew Block | 42m |
Helm 3.8 ships with OCI registry GA so charts can live in container registries (Docker Hub support lagging); Helm renders templates into Kubernetes manifests… | ||
| Flux Security Deep Dive | Stefan Prodan | 38m |
Flux v2 defines an authorization model that maps to Kubernetes RBAC and uses the impersonation API so controllers act under tenant-scoped service accounts… | ||
| Fluent Bit: Logs, OpenMetrics, and OpenTelemetry all-in-one | Eduardo Silva, Anurag Gupta | 36m |
Fluent Bit now collects logs, OpenMetrics and OpenTelemetry metrics in the same agent: a JavaScript app exports OTLP metrics to OTLP HTTP input on 8080, Fluent… | ||
| From Kubernetes to PaaS to … Err, What’s Next? | Daniel Bryant | 32m |
Argues that the next layer after Kubernetes is a developer control plane — a platform treated as a product with staffed platform teams, golden paths and UX-led… | ||
| Disrupting the Downtime Continuum | Taylor Thomas, Brooks Townsend | 32m |
Claims that WebAssembly plus wasmCloud lets teams avoid rebuilding thousands of containers after a vulnerability and demonstrate it live: a Rust xkcd web actor… | ||
| No Docker, No YAML and a Polyglot Developer Experience on Top o... | Thomas Vitale, Mauricio Salatino | 33m |
Demonstrates a Kubernetes CaaS that turns source into running endpoints without Dockerfiles by combining Knative Serving and Knative Eventing with Paketo… | ||
| Seeing is Believing: Debugging with Ephemeral Containers | Aaron Alpar | 39m |
Ephemeral containers land as a beta feature in Kubernetes 1.23 and let a new container join a running Pod to share network and (optionally) PID/user… | ||
| The Power of Cloud Native in Financial Institutions | Mateusz Pruchniak | 39m |
mBank builds cloud landings in two public clouds plus private cloud, runs several apps across them and organizes a 77‑person Cloud Center of Excellence… | ||
| Tower of Babel: Making Apache Spark, Kubeflow, and Kubernetes Play Nice | Holden Karau | 36m |
Uses Apache Spark + Mahout to run a distributed SVD that lets denoising avoid a single-node 500 GB RAM requirement, reads DICOM CT lungs from S3 into PVCs and… | ||
| Accelerating High-Performance Machine Learning at Scale i... | Alejandro Saucedo, Elena Neroslavskaya | 36m |
Deploys Distil GPT-2 from the Hugging Face hub, converts it to a quantized ONNX artifact with Optimum, and serves it locally with MLServer before scheduling… | ||
| How Cookpad Leverages Triton Inference Server To Boost Their Model S... | Jose Navarro, Prayana Galih | 32m |
Cookpad converts PyTorch models into a Triton-ready package, uploads the directory to S3, and deploys via CI/CD so multiple models run concurrently on one GPU… | ||
| Improving GPU Utilization using Kubernetes | Maulin Patel, Pradeep Venkatachalam | 38m |
Google Kubernetes Engine adds two concrete GPU-sharing features: time sharing (context-switched slices, configurable e.g. up to 10 shared nvidia.com/gpu… | ||
| Unlimited Data Science Libraries, One Container Image, No Insta... | Guillaume Moutier, Kenneth Hoste | 41m |
Kubernetes hosts a read-only shared rocks volume that provides thousands of prebuilt scientific packages via environment modules so notebook and RStudio pods… | ||
| Scaling Open Source ML: How Wolt Uses K8s To Deliver Great Food to Mill... | Stephen Batifol, Ed Shee | 33m |
Wolt runs an end-to-end MLOps platform on Kubernetes serving ML for 12M+ users, integrating Flyte for orchestration, MLflow autolog for experiment tracking… | ||
| Supporting Long-Lived Pods Using a Simple Kubernetes Webhook | Clément Labbe | 30m |
A lightweight Go admission webhook (simple-kubernetes-webhook) injects tolerations for a per-pod lifespan remaining value (user-set up to seven days) and a… | ||
| Confidential Containers Explained | James Magowan, Samuel Ortiz | 38m |
Project is a CNCF sandbox that runs Kubernetes pods inside per-pod confidential VMs (Kata-like runtime) using TEEs such as AMD SEV, Intel TDX/SGX and IBM SE… | ||
| Building Digital Twins for DFDS With Crossplane and Kubernetes | Tobias Andersen, Matthias Lübken | 38m |
DFDS prototypes a Kubernetes-based digital twin platform that composes IoT sensors into prototypes, instances and aggregates using Crossplane and CRDs, tying a… | ||
| Network-aware Scheduling in Kubernetes | José Santos | 36m |
Framework implements two controllers and three scheduler plugins plus a netperf feeder and uses Calico bandwidth CNI to treat bandwidth as an extended… | ||
| Kubernetes is Your Platform: Design Patterns For Extens... | Rafael Fernández López, Fabrizio Pandini | 31m |
Provides concrete patterns and tradeoffs for making controllers extensible, drawn from Cluster API and Kubewarden experience: use multiple controllers with… | ||
| Building a Nodeless Kubernetes Platform | William Denniss | 40m |
Google builds a “nodeless” mode called GKE Autopilot that keeps real node objects visible but removes the VM API, uses cluster autoscaler and node… | ||
| K8s and Active Directory Can Be Friends! How to Use Dex to Bridge the Gap | Onkar Bhat | 01h 07m |
Shows a concrete path to keep Active Directory auth when moving apps to Kubernetes by deploying OpenLDAP as an AD stand‑in, installing Dex as an OIDC bridge… | ||
| Intro to Kubernetes, GitOps, and Observability Hands-On Tutorial | Joaquin Rodriguez, Tiffany Wang | 01h 17m |
Hands-on deploy of a containerized .NET imdb app to a k3d cluster using GitHub Codespaces, with kubectl and K9s for inspection, FluxCD for FluxCD reconciling… | ||
| The CRDs that Broke the Camel's Back | Alper Rifat Ulucinar | 37m |
Installing ~2,000 CRDs causes two failures: client-side discovery hits a token‑bucket limiter (default burst 300, rate 50 qps; older bug used 100/5) so… | ||
| Getting the Optimal Service Efficiency That Autoscalers Won’t Give You | Mauro Pessina | 37m |
An AI-driven, iterative optimizer applies Kubernetes and JVM settings, runs JMeter load tests, collects KPIs via Elastic APM, and uses reinforcement learning… | ||
| Autoscaling Kubernetes Deployments: A (Mostly) Practical Guide | Natalie Serrino | 35m |
Covers cluster autoscaler, vertical and horizontal pod autoscalers with concrete knobs: min/max replicas, stabilization windows, and step caps; shows HPA… | ||
| Working your Cluster: Smarter Scheduling Decisions for Your Work... | Madalina Lazar, Denisio Togashi | 34m |
An extender called Telemetry Aware Scheduler uses real node telemetry to filter and score nodes (not just CPU/memory), supporting multi‑metric rules and… | ||
| How Lombard Odier Deployed VPA to Increase Resource Usage Efficiency | Vincent Sevel | 34m |
Lombard Odier deploys the Kubernetes Vertical Pod Autoscaler via an OpenShift operator across multiple clusters (1300–1400 pods today, planning ~20,000) to… | ||
| OSS Docs and How to Scale Them: Common Themes From the CNCF Ecosystem | Celeste Horgan | 36m |
CNCF data shows a three-person docs team supports 140+ projects and large projects like Kubernetes have ~400 pages per language, so documentation needs differ… | ||
| Good Governance Practices for CNCF Projects | Dawn M Foster | 35m |
CNCF provides ready-to-use templates (maintainer, contributor ladder, reviewing, subprojects) and expects projects to document roles, processes and security… | ||
| The Risks of Single Maintainer Dependencies | John McBride | 40m |
Cobra is a Go CLI library with ~26,000 GitHub stars and ~900 commits that ships in Kubernetes, Helm, Etcd, Istio, Linkerd and more; one person currently signs… | ||
| Multi-cluster Failover Using Linkerd | Charles Pretzer | 01h 31m |
Walks through a hands‑on setup: two Kubernetes clusters (east/west) each run Linkerd control planes in HA (3 replicas), install Linkerd multi-cluster (gateway… | ||
| Automated Progressive Delivery Using GitOps and Service Mesh | Yasen Simeonov, Henrik Blixt | 36m |
Intuit shows an automated progressive delivery pipeline combining Argo Rollouts with an Envoy/istio service mesh, deployed across ~230 clusters and >7 million… | ||
| Prow! Leveraging Developer-Centric CI for Your OSS Project! | Nabarun Pal, Arsh Sharma | 36m |
Prow is a Kubernetes-native CI that runs tests as Kubernetes pods by creating a prowjob CRD (hook → trigger → prowjob → plank → pod → cryer → GitHub status)… | ||
| Public Technical Oversight Committee (TOC) Meeting | Chris Aniszczyk | 39m |
Meeting lists the 11-member TOC, explains project stages as sandbox -> incubation -> graduation, and says the CNCF hosts about 128 projects. Submission to… | ||
| Kubernetes for Mac: How to Consume Shiny AWS Mac Shapes for iOS Builds | Madhuri Yechuri, Zach Gray | 37m |
Evaluates running iOS builds on AWS mac1.metal by comparing manual EC2 orchestration to Kubernetes-managed fleets, using Flare.build for Bazel remote execution… | ||
| Effective Disaster Recovery: The Day We Deleted Production | Rick Spencer, Wojciech Kocjan | 37m |
A one-line config change in an Argo CD app-of-apps setup where auto-sync plus prune ran against a name-collision one-line typo caused prune deleted a… | ||
| West Side CD: The Deployment Ballet Goes On | Benoit Moussaud | 32m |
Cartographer claims to replace centralized CI/CD orchestration with a Kubernetes-native choreography that wires reusable CRDs into supply chains; it provides… | ||
| Emissary-ingress: Intro and Deep Dive | Flynn, Luke Shumaker, Alice Wasko | 30m |
An Envoy‑based Kubernetes API gateway that focuses on developer‑centric self‑service routing and centralized auth, rate‑limit and observability, with… | ||
| Real World SPIFFE Scenarios and Outcomes | Andres Vega, Frederick Kautz | 49m |
SPIFFE provides short‑lived X.509 workload identity with one-hour certificates and automated rotation, implemented by SPIRE and consumed by Envoy, Istio and… | ||
| Maintainers, Project Services and CNCF | Amye Scarvada Perrin, Jeffrey Sica | 38m |
Outlines the CNCF project path and concrete services: projects apply as sandbox → incubating → graduating with TOC due diligence and tag liaisons… | ||
| Kubernetes Event-driven Autoscaling with KEDA | Zbynek Roubalik, Jorge Turrado | 37m |
KEDA provides event-driven autoscaling by adding a ScaleObject CRD that creates an HPA per ScaleObject and runs an operator that handles zero→one while HPA… | ||
| Falco to Pluginfinity and Beyond | Leonardo Grasso, Jason Dellaluce | 23m |
Falco now ships a new plugin system (a year in the making) that loads dynamic shared libraries to add event sources, fields and rule hooks at runtime; a… | ||
| Create Your First CNCF Serverless Workflow Project with Kogito and Kna... | Ricardo Zanini Fernandes | 35m |
Shows how to use Kogito + Quarkus to author a CNCF Serverless Workflow (YAML/JSON) that creates a REST microservice, calls an external service via OpenAPI… | ||
| Trampoline Pods: Node to Admin PrivEsc Built Into Popular K8s Plat... | Yuval Avrahami, Shaul Ben Hai | 38m |
Research shows popular K8s platforms initially ship powerful daemonset trampoline pods on 62.5% of distributions; after disclosure that drops to 25%. Attack… | ||
| How Attackers Use Exposed Prometheus Server to Exploit... | David de Torres Huerta, Miguel Hernández | 22m |
Exposed Prometheus servers let attackers enumerate cloud provider, AZ, VPC, node MACs, kernel versions, container image names/tags and registries… | ||
| The Hitchhiker's Guide to Pod Security | Lachlan Evenson | 31m |
Built‑in Pod Security admission is beta in 1.23 and evaluates Pod specs against three standards — privileged, baseline, restricted — applied per namespace via… | ||
| containerd: Project Update and Deep Dive | Derek McGowan | 21m |
Kubernetes deprecation of dockershim around 1.24 drives many new users to containerd and adoption of nerdctl spikes. Releases: 1.5 remains widely supported… | ||
| Overview and State of Knative | Mauricio Salatino, Carlos Santana | 38m |
Knative reports a stable serving API (v1.0+) and recent CNCF incubation with clear modules: Serving, Eventing and a Functions developer UX. The func CLI… | ||
| It’s All for the Users. More Durable, Secure, and Pluggable. KubeVirt v0.53 | Alice Frosi | 36m |
KubeVirt v0.53 adds concrete, production-ready features: automated mediated-device vGPU slicing and SR-IOV affinity, unprivileged VMs and initial TPM/SEV… | ||
| Releasing Kubernetes Less Often and More Secure – The SIG Release Update | Adolfo García Veytia, Carlos Panato, Sascha Grunert, Stephen Augustus | 19m |
SIG Release reduces cadence from four to three releases per year after a community survey, reinstates automated fast‑forwarding of release branches to avoid… | ||
| Keynote: Welcome + Opening Remarks | Priyanka Sharma | 51m |
Opening remarks report real numbers and concrete actions: 7,000 in-person and 10,000 virtual attendees, 128 CNCF projects (up from 114 six months ago), and… | ||
| SIG Auth Deep Dive | Margo Crawford, Mike Danese | 36m |
SIG Auth updates include Pod Security Admission GA (1.25) and removal of PodSecurityPolicy, certificates API and token requests reaching GA, and the… | ||
| Scaling Databases with Vitess | Harshit Gangal, Manan Gupta | 41m |
Vitess provides horizontal sharding for MySQL and shows a live migration path: the demo uses the move_tables command plus a vtgate/vttablet sidecar and a… | ||
| Distributing Supply Chain Artifacts with OCI & ORAS Artifacts | Steve Lasker | 40m |
Shows how existing OCI registries store images plus SBOMs, detached signatures and scan results by adding a manifest type and a subject link so an SBOM… | ||
| Story of Correlation: Integrating Thanos Metrics with Observabi... | Bartłomiej Płotka, Kemal Akkoyun | 33m |
Thanos extends Prometheus with horizontal, highly available storage and a Store API used to stitch metrics into a global view; the project reports ~400… | ||
| Been There, Done That: Tales of Burnout from the Open Source W... | Savitha Raghunathan, Divya Mohan | 41m |
Personal accounts show burnout from juggling Kubernetes SIG Docs, SIG Release and Litmus Chaos duties alongside day jobs, internships like Google Season of… | ||
| Does Green Software need Open Hardware? | Cliff Grossner, Kate Mulhall, Dinesh Marjrekar | 01h 01m |
Open Compute Project shows concrete work: an open telemetry-aware scheduler, a GPU-aware scheduler and an open power manager (next release adds P-state/C-state… | ||
| nothing matches | ||