KubeCon + CloudNativeCon North America 2017
2017-12-06..2017-12-08
Austin, United States
[KubeCon + CloudNativeCon North America 2016, KubeCon + CloudNativeCon North America 2017, KubeCon + CloudNativeCon North America 2019, KubeCon + CloudNativeCon North America 2020 Virtual, KubeCon + CloudNativeCon North America 2021, KubeCon + CloudNativeCon North America 2022]
| title | author | length |
|---|---|---|
| Keynote: A Community of Builders: CloudNativeCon Opening Keynote | Dan Kohn | 17m |
Cloud Native Computing Foundation reports concrete growth: CNFC expands from 4 to 14 projects, devstats.k8s.io visualizes contributions, Kubernetes ranks top… | ||
| Keynote: CNCF Project Updates | Michelle Noorali | 39m |
Kubernetes 1.9 lands with CSI in alpha and Windows container beta, containerd and CoreDNS reach 1.0 milestones, and Prometheus 2.0 shows real-world wins — ~3x… | ||
| Keynote: Introducing Kata Containers | Imad Sousou | 06m |
Kata Containers is a hardware‑accelerated container runtime that merges Clear Containers and runV to deliver the speed of containers with VM-grade isolation… | ||
| Keynote: Cloud Native CD: Spinnaker and the Culture Behind the Tech | Dianne Marsh | 21m |
Netflix builds Spinnaker as an open-source, multi-cloud continuous delivery and infrastructure platform that merges Asgard and edge-center ideas, supports… | ||
| Keynote: Cloud Native at AWS | Adrian Cockcroft | 16m |
AWS announces a managed Kubernetes service EKS that runs an upstream control plane for customers, a new Fargate option to run managed containers without owning… | ||
| Keynote: Service Meshes and Observability | Ben Sigelman | 20m |
Service mesh handles discovery, interconnection, load balancing and auth at the RPC boundary, but explaining why a transaction is slow requires distributed… | ||
| Keynote: Can 100 Million Developers Use Kubernetes? | Alexis Richardson | 07m |
Asserts Kubernetes can reach 100 million users if ecosystem and education scale: GitHub just hit 100 millionth pull request and has 24 million users now… | ||
| Community Awards | Chris Anasik | 08m |
Announces CNCF community awards, noting growth from about 1,000 to 4,000 attendees and projects from 4 to 14 products, then hands out named prizes: top cloud… | ||
| Keynote: Kubernetes: This Job is Too Hard: Building New Tools, Patterns and Paradigms to Democratize | Brendan Burns | 20m |
Argues that container plus Kubernetes still leaves too many disconnected decisions and presents Metaparticle a language‑centric standard library that compiles… | ||
| Panel: Kubernetes, Cloud Native and the Public Cloud [B] | Dan Kohn | 33m |
Panel collects the six big clouds discussing concrete investments: all offer managed Kubernetes and certify conformance; several announce real projects like an… | ||
| Istio: Weaving the Service Mesh [I] | Shriram Rajagopalan, Louis Ryan | 32m |
Istio wires Envoy sidecars into every pod to provide zero code change service-level features: consistent metrics, OpenTracing spans, traffic splitting (down to… | ||
| Continuous Delivery with Kubernetes at Box [I] | Greg Lyons | 36m |
Box runs Kubernetes across four clusters (three production) hosting about 80 services for ~80,000 organizations and builds a CI/CD pipeline using Jenkins… | ||
| Microservices, Service Mesh, and CI/CD Pipelines: Making It All Work Together [I] | Brian Redmond | 35m |
Live demo builds a MicroSmack app with a Brigade-driven pipeline that builds a Go image, pushes to ACR, and runs Helm to update Istio/Envoy sidecars so traffic… | ||
| How Netflix Is Solving Authorization Across Their Cloud [I] | Manish Mehta, Torin Sandall | 36m |
Netflix describes a cloud authorization system that runs an OPA policy engine in-process or as a sidecar, with an aggregator/distributor pipeline that pushes… | ||
| The Good, the Bad & the Ugly of Migrating Hundreds of Legacy Applications to Kubernetes | Josef Adersberger | 38m |
QAware migrates 400 JEE monoliths onto Kubernetes/OpenShift on AWS, using questionnaires, static analysis (IBM migration tool, SonarQube), a migration database… | ||
| Container Runtime and Image Format Standards - What it Means to be “OCI-Certified” [I] | Jeffrey Borek | 33m |
OCI v1.0 exists for both image format and runtime and a certification program is launching soon; a live run of the OCI Image validator against multiple… | ||
| Embedding the Containerd Runtime for Fun and Profit [I] | Phil Estes | 37m |
A minimal Go client uses containerd’s gRPC API to connect to the daemon, set a namespace, pull and unpack redis:alpine, create a snapshot-backed container… | ||
| Kata Containers: Hypervisor-Based Container Runtime | Xu Wang, Samuel Ortiz | 36m |
Merge of runV and Clear Containers into an OCI‑compatible runtime that runs one VM per pod to provide hardware isolation while staying fast, claiming ~100 ms… | ||
| CRI-O: All the Runtime Kubernetes Needs, and Nothing More | Mrunal Patel | 29m |
CRI-O implements Kubernetes’ CRI with a minimal stack: containers/image and containers/storage for images, OCI runtimes like runc and Clear Containers, a… | ||
| Building Specialized Container-Based Systems with Moby: A Few Use Cases [I] | Patrick Chanezon | 37m |
Moby aggregates components like containerd 1.0 (donated to CNCF and shipping inside Docker CE/17.11+), CRI integration for Kubernetes 1.8, LinuxKit, InfraKit… | ||
| When the Going Gets Tough, Get TUF Going! [I] | David Lawrence, Ashwini Oruganti | 34m |
TUF (The Update Framework) is presented as a concrete signing architecture that prevents tampering, rollbacks and key compromise by splitting trust into four… | ||
| Building Better Containers: A Survey of Container Build Tools [I] | Michael Ducy | 40m |
Survey of concrete build tools: Buildah (still OS-centric), NixOS containers (declarative but ties to Nix host), Ansible Container (good if already invested in… | ||
| “If you Don’t Monitor your Infrastructure, you Don’t Own it!” Regain Control Thanks to Prometheus | Etienne Coutaud, Guillaume Lefevre | 29m |
Prometheus monitors a French FedEx–scale CQRS stack (Kafka, Spark, Cassandra, Elasticsearch, Scala APIs) across ~90 servers, processing ~2M packages/day and… | ||
| Fluentd and Distributed Logging [I] | Masahiro Nakagawa | 33m |
Fluentd collects container logs via pluggable input/filter/output components, parses lines into JSON key/value records with tag+timestamp, and buffers to local… | ||
| The RED Method: How To Instrument Your Services [B] | Tom Wilkie | 35m |
Defines RED = requests, errors, duration as the three service metrics to record, uses a single Prometheus histogram with labels (method, route pattern, status)… | ||
| Would You Like Some Tracing With Your Monitoring? | Yuri Shkuro | 34m |
Jaeger (OpenTracing-native) is a distributed tracing system used to instrument hundreds of microservices and reveal where transactions actually spend time… | ||
| Full Stack Visibility with Elastic: Logs, Metrics and Traces | Carlos Pérez-Aradros | 35m |
Elastic Beats collect logs, metrics and traces into Elasticsearch and Kibana and the demo shows them correlated in one dashboard. Beats used: filebeat… | ||
| Unified Monitoring of Containers and Microservices [I] | Nishant Sahay | 42m |
Unified monitoring combines Zipkin + Kafka + Elasticsearch and ELK + Beats with an Apache Spark pipeline to detect anomalies and correlate traces, logs and… | ||
| The Power of Application Intent Analysis for Container Security [I] | John Morello | 43m |
Containers’ declarative images, small footprints and immutability let software learn a container’s declarative images and create an image-tied behavioral model… | ||
| Introducing SPIFFE: An Open Standard for Identity in Cloud Native Environments [I] | Evan Gilman | 36m |
Defines a standardized workload identity format (SPIFFE), a node/workload attestation flow, and a local workload API that issues short‑lived X.509 SVIDs… | ||
| IAM on Hybrid Cloud: Next Generation Security Model to Create an Interoperable Cloud [I] | Jeyappragash JJ, Kamil Pawlowski | 30m |
PADME proposes a concrete reference architecture: a common expression syntax plus composable policy bundles, distributed controllers and enforcers, and plugin… | ||
| Building a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A] | Bich Le | 33m |
Deployment Cluster Config and Ops (deco operator) automates creating namespaces, DNS records and CRD-driven apps, injecting s‑tunnel sidecar containers for… | ||
| Establishing Container Trust at Scale [I] | Tim Mackey | 35m |
Argues that container trust must be quantifiable at production scale and demonstrates a working integration that scans every image lifecycle event in… | ||
| How We Built a Framework at Twitter to Solve Service Ownership & Improve Infrastructure Utilization | Vinu Charanya | 29m |
Twitter builds a production system that models, meters and charges infrastructure across Aurora/Mesos, Hadoop and Manhattan, then ties usage to teams so… | ||
| The Mechanics of Deploying Envoy at Lyft | Matt Klein | 35m |
Envoy gets rolled out incrementally: first as an edge proxy, then co‑located with every service until Lyft reaches 100% coverage across hundreds of services… | ||
| Kubernetes, Metadata and You [I] | Liz Rice, Gareth Rushgrove | 37m |
Explains how Kubernetes labels, annotations, ConfigMaps and the Downward API are used alongside image labels/OCI annotations to carry actionable metadata… | ||
| Queueing Theory, In Practice: Performance Modelling in Cloud-Native Territory [I] | Eben Freeman | 30m |
Builds a simple single-core queueing model and derives W ≈ λ s^2 / (2(1−λ s)) then fits it to production microbenchmarks (single-core throughput ~2–3k req/s… | ||
| Cloud Native Logging 101 [B] | Eduardo Silva | 33m |
Cloud native logging requires an end‑to‑end pipeline: collect, parse, filter, buffer, and deliver. It demonstrates using Fluentd (700+ plugins, CNCF project… | ||
| Bottoms-Up Adoption of a Microservices Workflow Using Kubernetes & Envoy | Rafael Schloming | 37m |
Claim: velocity comes from changing the process not the architecture. Practical stack: package language-specific build toolchains into Docker images so each… | ||
| The True Costs of Running Cloud Native Infrastructure [B] | Dmytro Dyachuk | 39m |
A cost model compares running Kubernetes on EC2 versus colocated hardware using past performance data, interviews and generalized pricing; it finds hardware is… | ||
| Pinterest's Journey from VMs to Containers [I] | Michael Benedict | 32m |
Pinterest runs on tens of thousands of EC2 hosts serving ~200M MAUs and hundreds of PB of storage and moves from VM images to Docker images, achieving 75% of… | ||
| DevOps Friendly Doc Publishing for APIs & Microservices | Amanda Whaley | 33m |
An internal doc pipeline called Pub Hub is built and used at Cisco to normalize Swagger/OpenAPI, RAML and Markdown into a consistent site, driven from GitHub… | ||
| Using Containers for Continuous Integration and Continuous Delivery [I] | Carlos Sanchez | 38m |
Describes running Jenkins masters and ephemeral build agents on Kubernetes using the Jenkins Kubernetes plugin to provision pods on demand, statefulsets plus… | ||
| Continuous Integration at Scale on Kubernetes [B] | Karthik Gajjala | 27m |
eBay runs a CIaaS on Kubernetes that does roughly 10,000 builds a day (≈300k/month) by provisioning Jenkins via a CIConfig CRD and a controller that creates… | ||
| Expand Your Spinnaker Pipeline to the Desktop [I] | Sean Korten | 29m |
Demonstrates a working proof of concept that adds minikube as a cloud provider into Spinnaker by deploying a small SSH pod (pushed to GCR) that establishes a… | ||
| Deploying to Kubernetes Thousands of Times Per/Day | Dan Garfield, William Denniss | 53m |
Claims delivery pipelines support thousands of Kubernetes deployments per day by treating images as immutable release artifacts tied to git, running automated… | ||
| Panel: Ask Me Anything: Microservices and Service Mesh [B] | Jason McGee | 36m |
Panel summarizes practical tradeoffs and deployments: Istio as a pluggable control plane with Envoy/Linkerd data planes, large-scale reality is Envoy on ~20k… | ||
| Ask Your Proxy, It Knows Everything | Blake Mizerany | 30m |
Proposes replacing app-level user/role, feature-flag and discovery logic with a smart edge proxy that enriches requests with identity and attribute headers… | ||
| Building an Edge Computing Platform for Network Services Using Cloud Native Technology [I] | Stephen Wong, Vikram Dham | 27m |
A small-platform prototype runs containerized CNFs on Kubernetes, using BPF via BCC for pluggable data paths and a Kubernetes sidecar event handler model to… | ||
| The Makers of Marvels: How Developers Are Rebuilding the Enterprise, One Brick at a Time | Abby Kearns | 23m |
Cloud Foundry integrates container runtime (Kubo/kubernetes on BOSH) with an application runtime so operators can run containerized workloads and 12‑factor… | ||
| Next Generation Services at Indeed Using gRPC [I] | Jaye Pitzeruse | 24m |
Indeed runs over 160 Boxcar services and about 20 HTTP/REST services and migrates by adding a sidecar that speaks HTTP/2 and gRPC, translating calls into… | ||
| The Art of Documentation and Readme.md for Open Source Projects | Ben Hall | 35m |
Argues that a README and docs must give the right information at the right stage of a user journey and shows concrete fixes: use interactive in-browser… | ||
| Distributed Workflows for Microservices-Style Applications [I] | Yun Qin | 19m |
A lightweight workflow library implements cross‑service business flows using NirmataOSS Workflow (Java + ZooKeeper + Curator) and models task relationships as… | ||
| Modifying gRPC Services Over Time [I] | Eric Anderson | 36m |
Covers concrete rules and tools for evolving gRPC APIs: put v1 in package and add per-RPC Request/Response messages so new parameters fit, use field mask for… | ||
| A Practical Guide to Prometheus for App Developers [B] | Ilya Dmitrichenko | 38m |
Step‑by‑step Node.js instrumentation showing a plain /metrics endpoint, replacing a hand‑rolled /hits counter with a Node.js Prometheus client and exposing… | ||
| The Service Mesh: Past, Present, and Future [B] | William Morgan | 36m |
Service mesh is presented as a separate runtime layer that moves retries, timeouts, TLS and circuit-breaking out of apps into a pair of proxies per hop, giving… | ||
| Microservices Patterns with NGINX Proxy in an Istio Services Mesh [I] | A.J. Hunyady | 32m |
NGINX runs as an nginx sidecar proxy replacing Envoy in an Istio data plane, with an agent that generates nginx configuration from Pilot and supports HTTP and… | ||
| The Road to More Usable Kubernetes | Joe Beda | 36m |
Argues Kubernetes must get easier and shows concrete progress: cluster bootstrapping with kubeadm and Kubicorn, observability via Prometheus, and conformance… | ||
| Building Helm Charts From the Ground Up: An Introduction to Kubernetes [I] | Amy Chen | 33m |
Builds an nginx Helm chart and deploys it to a Kubernetes cluster launched with Rancher, showing the actual templates: Deployment, Service, Ingress. Uses Helm… | ||
| Kubernetes Distributions and 'Kernels' | Tim Hockin, Michael Rubin | 36m |
Kubernetes has ~3M LOC split across ~90 repositories and currently ships quarterly; the proposal separates a fast-moving “kernel” release every ~6 weeks from a… | ||
| Vault and Secret Management in Kubernetes | Armon Dadgar | 31m |
Vault provides a single secrets broker that generates dynamic secrets (unique DB users and passwords) with TTL-based leases that can be renewed or revoked… | ||
| Helm Chart Patterns | Vic Iglesias | 29m |
Public Helm Charts repo hosts 130 charts, 2,000 merged PRs, ~100 contributors and ~10,000 weekly visitors, backed by CI that lints, installs and verifies pods… | ||
| Running Mixed Workloads on Kubernetes at the Institute for Health Metrics and Evaluation | Tyrone Grandison | 37m |
IHME integrates traditional HPC (15,000 cores, petabytes of inputs, 30 TB final outputs) and containerized services on a single Kubernetes cluster using Univa… | ||
| Embracing Cloud Native at a Thriving, Established Company | Brian Akins | 39m |
MailChimp migrates a 17‑shard PHP monolith toward microservices by running Kubernetes clusters on bare metal, managing clusters with Puppet, and integrating… | ||
| Scaling to 5000+ Unique K8s Deployments, How We Did It | Nicole Hubbard | 30m |
Company migrates 60,000 WordPress sites off VMs by replacing 300,000 per-site PHP deployments with a custom Go PHP app server and a pooling model that reduces… | ||
| Automating and Testing Production Ready Kubernetes Clusters in the Public Cloud | Ron Lipke | 32m |
Built cloud-agnostic Kubernetes clusters deployed to AWS and Google using Chef for bootstrapping, an overlay network with Calico, and farm-style provisioning… | ||
| GitOps - Operations by Pull Request | Alexis Richardson, William Denniss | 35m |
Conference claim: a 15–20 person team moves from deploying once or twice a week to automated, multiple daily deployments and reports productivity doubled… | ||
| Kubernetes on AWS: Practices & Opinions | Arun Gupta, Raffaele di Fazio | 35m |
EKS offers a managed control plane (EKS) where masters run in AWS and worker nodes stay in customer accounts; AWS promises an upstream‑compatible API and deep… | ||
| Load Testing Kubernetes: How to Optimize Your Cluster Resource Allocation in Production | Harrison Harnisch | 34m |
Buffer uses load testing to pick per-pod resource limits so containers stop being killed and nodes pack more pods. Using loader.io for ramp and duration tests… | ||
| Securing Cluster Networking with Network Policies | Ahmet Alp Balkan | 31m |
NetworkPolicy is a whitelist-only API (introduced in Kubernetes 1.3, stable in 1.7) that applies per-namespace via pod selectors and can restrict ingress and… | ||
| 101 Ways to Crash Your Cluster | Marius Grigoriu, Emmanuel Gomez | 36m |
Series of Nordstrom postmortems that name concrete failure modes and fixes: Prometheus plus bursty Flink jobs cause page allocation stalls and OOM kills… | ||
| Large Scale Teaching Infrastructure with Kubernetes | Yuvi Panda | 35m |
UC Berkeley runs a Kubernetes-backed JupyterHub that serves 1,200–3,500 students in semester courses and is being readied for a MOOC with ~100,000 signups… | ||
| The Architecture of a Multi-Cloud Environment with Kubernetes | Brian Redbeard | 36m |
Argues that production multi‑cloud Kubernetes is practical today: use config-as-code in git, secrets via git-crypt or Vault, CI pipelines that run terraform… | ||
| kubeadm Cluster Creation Internals: From Self-Hosting to Upgradability and HA | Lucas Käldström | 37m |
kubeadm bootstraps a minimal, best-practice cluster by generating a root CA and per-component certificates, writing static pod manifests that the kubelet… | ||
| Keynote: Kubernetes Secret Superpower | Chen Goldberg, Anthony Yeh | 21m |
Kubernetes now supports building controllers outside core using extension points like the API aggregation layer and CRDs, and a demo shows MetaController… | ||
| Keynote: Red Hat: Making Containers Boring (again) | Clayton Coleman | 06m |
Red Hat describes making Kubernetes deliberately boring by running very large, dense hosted clusters (notably OpenShift Online Starter) and using Prometheus to… | ||
| Keynote: Pushing the Limits of Kubernetes with Game of Thrones | Zihao Yu, Illya Chekrygin | 21m |
HBO moves 15,000 pods into production to survive Game of Thrones Season 7 premiere, provisioning clusters on AWS with Terraform modules, autoscaler tweaks and… | ||
| Keynote: Progress Toward Zero Trust Kubernetes Networks | Spike Curtis | 06m |
Announces Calico support for application-layer policy that unifies Kubernetes NetworkPolicy with Istio’s mutually authenticated TLS, enforcing cryptographic… | ||
| Keynote: The Road Ahead on the Kubernetes Journey | Craig McLuckie | 20m |
Kubernetes is asserted as the new standard operating environment driven by three forces: a technically strong community, early end users embedding it in… | ||
| client-go: The Good, The Bad and The Ugly | Lili Cosic | 24m |
client go is a generated Go library for talking to Kubernetes clusters that works both in cluster using service account tokens and outside cluster via… | ||
| Extending Kubernetes 101 | Travis Nielsen | 34m |
Shows how to design a CRD schema, run Kubernetes 1.8’s code generators to produce a strongly typed clientset/informers/deepcopy set, implement an operator in… | ||
| Kubernetes Feature Prototyping with External Controllers and Custom Resource Definitions | Tomas Smetana | 32m |
Prototypes persistent-volume snapshots out-of-tree using CustomResourceDefinitions and an external controller so development skips long Kubernetes proposal… | ||
| Using Custom Resources to Provide Cloud Native API Management | Frank B Greco Jr | 33m |
Open-source Kubernetes-native API gateway called Kanali that replaces many ELBs with a single pod deployment, implements API key management with non‑breaking… | ||
| Extending Kubernetes: Our Journey & Roadmap | Daniel Smith, Eric Tune | 35m |
Overview of concrete extension work and timelines: storage gets CSI alpha in 1.9 while flex volumes stay supported; device plugins are alpha (1.8); cloud… | ||
| Extending the Kubernetes API: What the Docs Don't Tell You | James Munnelly | 34m |
Shows how to actually extend Kubernetes by building a custom API server and controller that persist alerts to etcd and notify Pushbullet, proving the approach… | ||
| Kuberneters in Hybrid Environments Using Cloud Interconnect | Marc Chisinevski | 20m |
F5 Container Connector runs as a Kubernetes ingress controller on GKE and uses the BIG-IP REST API to create virtual servers in colo (demo uses Equinix) that… | ||
| Multi-Cluster Ops in a Hybrid World | Vitaliy Zinchenko, Kire Filipovski | 39m |
Uses Kubernetes Federation plus two new components to auto-provision clusters on demand: Navarchus (controller that reads federated desired state and decides… | ||
| Hybrid-Cloud, HIPAA Compliant Enterprise with Kubernetes | Steve Sloka | 35m |
UPMC runs Kubernetes on-prem (VMware, Red Hat Atomic/CoreOS) and in AWS us-east-1 across three AZs, with CI pipelines pushing images to ECR and VPNs to… | ||
| Managing and Running Multiple Kubernetes Clusters in Hybrid Setups | Sebastian Scheele | 37m |
A hosted control plane runs for many tenants by deploying each cluster’s control plane as containers inside one management Kubernetes, providing per-cluster… | ||
| Building a Cluster Management API using Kubicorn | Robert Bailey, Kris Nova | 34m |
Demo shows a working declarative cluster API implemented with kubicorn and a controller that exposes machines CRD objects; creating a cluster takes ~7.5… | ||
| Pontoon: An Enterprise Grade Serverless Framework Using Kubernetes – As Used in VMware | Gaurav Kumar, Mageshwaran Rajendran | 27m |
Pontoon is an in-house serverless framework built on Kubernetes using Jobs and Deployments, a Java API server (Zeno/Zenon), a priority queue for events, a… | ||
| Fission: Serverless Functions for Kubernetes | Soam Vasani | 33m |
Fission is a Kubernetes-native serverless framework that keeps a pre-warmed pool of language containers so functions load in about 100–200 ms cold start (demo… | ||
| FaaS and Furious - 0 to Serverless in 60 Seconds, Anywhere | Alex Ellis | 34m |
OpenFaaS is a container-based functions framework that can deploy in 60 seconds to Kubernetes or Docker and gives each function an HTTP API, Prometheus metrics… | ||
| Building Serverless Application Pipelines | Sebastien Goasguen | 39m |
Shows a Kubernetes-native FaaS built on kubeless CRD that injects function code via ConfigMap, creates Deployments/Services, and auto-creates HPAs using… | ||
| State of Serverless | Mark Peek, Doug Davis | 37m |
CNCF runs a serverless working group that produced a white paper and a public Google Doc inventory of platforms and tools, and is prioritizing open events as… | ||
| Building and Running an Enterprise-grade Serverless Platform on Kubernetes | Ying Huang | 41m |
FunctionStage runs FaaS on Kubernetes using OBS for object events, Kafka for async requests and a certified CentOS base image; it demonstrates an… | ||
| Squash: A Debugger for Kubernetes Apps | Idit Levine | 32m |
A Kubernetes debugger that wires existing debuggers into clusters, Squash attaches gdb and dlv sessions to pods via a daemonset client and a server proxy… | ||
| Testing Distributed Software on Kubernetes with PowerfulSeal | Miko Pawlikowski | 21m |
Testing Distributed Software on Kubernetes with PowerfulSeal [I] - Mikolaj Pawlikowski, Bloomberg
When it's about distributed systems, testing is hard. But… | ||
| Developing Locally with Kubernetes | Ryan Jarvinen | 38m |
Shows how to run a full Kubernetes dev loop on a laptop using minikube start, mounting a local repo into a pod for live edits, and using kubectl run --dry-run… | ||
| Developer Tooling for Kubernetes Configuration | Gareth Rushgrove | 37m |
Extracts Kubernetes OpenAPI JSON schemas into per-version files (about 25,000 files totalling ~750,000 lines) and uses them to validate YAML client-side with a… | ||
| Deploying Kubernetes Without Scaring Off Your Security Team | Paul C Czarkowski, Major Hayden | 30m |
Shows a practical path to get enterprise security buy-in by wiring familiar tools together: ansible playbooks provision bare metal or cloud hosts, apply… | ||
| Kubernetes Deconstructed: Understanding Kubernetes by Breaking It Down | Carson Anderson | 33m |
Starts from a real kubectl deploy of a namespace, Deployment, Pods, Service and Ingress and then traces where each object actually lands: the API server… | ||
| The Easy--Don't Drive Yourself Crazy--Way to Kubernetes Networking | Gerard Hickey | 32m |
Kubernetes networking works like three stacked networks: physical, pod, and service, and every pod gets a routable IP so pods talk directly. Practical rules… | ||
| The Elements of Kubernetes - Foundational Concepts for Apps Running on Kubernetes | Aaron Schlesinger | 38m |
Gives concrete best practices: use resource limits, readiness and liveness probes to enable horizontal pod autoscaling, prefer the crash-only pattern instead… | ||
| Multi-Tenancy Support & Security Modeling with RBAC and Namespaces | Fred Vong, Michael Y. Chen | 38m |
Shows how Kubernetes namespaces plus RBAC implement two concrete models: an exclusive cluster where users can create namespaces and cluster admins retain full… | ||
| Compliance and Identity Management in Kubernetes | Marc Boorshtein | 29m |
Claims that automating identity workflows removes admins from access requests and produces auditable proof for frameworks like FISMA/NIST, demonstrated working… | ||
| Certifik8s: All You Need to Know About Certificates in Kubernetes | Alexander Brand | 36m |
Explains how a single cluster CA signs all component certs, with the controller-manager holding the CA key and two controllers that auto-approve kubelet CSRs… | ||
| Preventing Attacks at Scale | Dino Dai Zovi | 57m |
Shows how to detect container breaches end-to-end: process execution and outbound connections are captured at the kernel via Linux tracing rather than slow… | ||
| Welcome to Kubernetes - Introduction and Toolkit for Getting Started with Kubernetes | Guinevere Saenger | 35m |
A newcomer-focused roadmap that lists exact steps: follow the Kubernetes Basics web tutorial with its terminal simulator, spin a cluster on Google Cloud, walk… | ||
| Using Kubernetes API from Go | Alena Prokharchyk | 38m |
Shows how to use client-go to build a real tool that monitors node image storage and alerts on size changes, using trash to vendor dependencies and dapper to… | ||
| You Have Stateful Apps - What if Kubernetes Would Also Run Your Storage? | Annette Clewett | 37m |
Shows container-native storage built from GlusterFS and gluster-kubernetes running on OpenShift/Kubernetes, using the heketi REST API and StorageClass for… | ||
| Istio: Sailing to a Secure Services Mesh | Spike Curtis, Dan Berg | 32m |
Istio wires Envoy sidecars into each pod to provide mutual TLS using an Istio CA that mints SPIFFE IDs and mounts certificates, while Mixer enforces… | ||
| Disaster Recovery for your Kubernetes Clusters | Andy Goldstein, Steve Kriss | 35m |
Describes a practical DR workflow that backs up Kubernetes API objects via the discovery API and snapshots persistent volumes on major clouds using Heptio Ark… | ||
| Moving from Mesos to Kubernetes Without Anyone Noticing | Anubhav Mishra | 31m |
Hootsuite runs Mesos/Marathon and implements a migration that moves 20 microservices to Kubernetes with a three‑person ops team in about six weeks while… | ||
| Kubernetes in the Datacenter: Squarespace’s Journey Towards Self-Service Infrastructure | Kevin Lynch | 37m |
Squarespace migrates hundreds of VMs into Kubernetes using Calico BGP on a leaf‑spine L3 fabric to announce pod and service IPs, replaces Graphite+Sensu with… | ||
| Persistent Storage with Kubernetes in Production - Which Solution and Why? | Cheryl Hung | 36m |
Compares storage options for Kubernetes with concrete rules and examples: presents eight principles for cloud‑native storage, explains Kubernetes PV/PVC and… | ||
| kubectl apply, and The Dark Art of Declarative Object Management | Aaron Levy | 36m |
kubectl apply computes a three-way diff (local, live, last-applied-configuration) and stores the last-applied blob as an annotation to decide… | ||
| What Happens When Something Goes Wrong? On Kubernetes Reliability | Marek Grabowski, Tina Zhang | 34m |
Kubernetes auto-recovery is concrete: kubelet restarts crashed containers with exponential backoff and supports liveness/readiness probes (etcd needed a longer… | ||
| Highly Available Services During Maintenance Events | Maisem Ali, Eric Tune | 27m |
Explains how to keep services available while nodes are rebooted or upgraded by using PodDisruptionBudget to limit concurrent evictions and graceful… | ||
| UDP in K8S: Signed, Sealed, but Delivered? | Amanpreet Singh | 19m |
UDP in K8S: Signed, Sealed, but Delivered? [I] - Amanpreet Singh, Crowdfire
This talk is based on my personal experience working with Kubernetes in… | ||
| Kubernetes Ingress Controller with Apache Traffic Server [I] | Mrunmayi Dhume | 29m |
Oath runs 12 Kubernetes clusters across six datacenters serving 100+ apps at ~150k RPS and ~40k containers; the ingress uses Apache Traffic Server plus a… | ||
| Running Mesos Frameworks on Kubernetes with the Open-Source Universal Resource Broker | Fritz Ferstl | 22m |
Open-source Universal Resource Broker (URB) claims to run Mesos frameworks as Kubernetes pods, letting Spark, Hadoop, Storm, Jenkins, Marathon and Chronos… | ||
| The Oregon Trail to Kubernetes [I] | Joshua Roppo | 35m |
Small team migrates from Google Compute Engine to GKE running 2000 CPUs, abandons YAML templating and implements Kubernetes resources as client-go-based CLI… | ||
| Evolving and Supporting Stateful, Multi-Tenant Decisioning Applications in Production | Keith Gasser | 35m |
Kubernetes runs a stateful, multi-tenant decisioning platform that stitches Apache NiFi for ETL, Kafka as the persistent stream backbone, Flink for real‑time… | ||
| From Monolith to Microservices with Kubernetes and Linkerd | Mason Jones | 34m |
Starts from a seven‑year PHP monolith and incrementally adopts Docker, Consul, Linkerd and Kubernetes, first running 15 services across 20 servers with Salt +… | ||
| Using Kubernetes to Change Legacy Systems and Processes in the Public Sector | Audun Fauchald Strand | 39m |
Kubernetes becomes the tool to modernize a decades-old public sector stack: two clusters (production + not‑production) host apps isolated by namespaces and… | ||
| Keynote: Manage the App on Kubernetes | Brandon Philips | 05m |
Argues for treating an app as a versioned bundle of containers plus manifests and shows a working Tectonic console demo that publishes a catalog, deploys Vault… | ||
| Keynote: What is Kubernetes? | Brian Grant | 18m |
Frames Kubernetes as 10 ways to view Kubernetes: a nucleus of kubelet execution and the API server as control plane where controllers continuously reconcile… | ||
| Keynote: What's Next? Getting Excited about Kubernetes in 2018 | Clayton Coleman | 20m |
Kubernetes ecosystem already shows 4,300 attendees and 2,200 GitHub projects and the roadmap for 2018 focuses on concrete changes: service meshes like… | ||
| Keynote: Kubernetes at GitHub | Jesse Newland | 20m |
GitHub runs 20% of production services on on‑prem Kubernetes, including github.com, using multiple clusters each with roughly 1,500 CPUs and 5 TB RAM per… | ||
| Keynote: Kubernetes Community | Sarah Novotny | 20m |
Kubernetes grows from 150 → 4,000 attendees in two years, exposes governance gaps, and solves them with a steering committee elected (Oct), SIGs that push… | ||
| Keynote: Opening Remarks | Michelle Noorali | 01m |
Opening remarks welcome attendees, mention surprise snow and a lively party the night before, and announce conference dates and locations Barcelona May 20–23… | ||
| Closing Remarks | 01m | |
KubeCon returns to Copenhagen the first week of May with CFP deadline: January and a push to collect user stories and short talks, while many projects that… | ||
| Kubernetes Storage Evolution: Enabling High Performance Distributed Datastores | Erin A Boyd, Michelle Au | 28m |
Kubernetes adds reproducible local disk support by extending PV/PVCs so admins register local PersistentVolumes with nodeAffinity and the scheduler binds… | ||
| Economics of using Local Storage Attached to VMs on Cloud Providers [I] | Pavel Snagovsky | 35m |
Compares AWS/GCP block (EBS) vs instance store and object options, claiming local instance SSDs deliver ~10x IOPS at roughly 1/10th the cost but sacrifice… | ||
| Providing Containerized Cinder Services to Baremetal Kubernetes Clusters [I] | John Griffith | 25m |
Claims that a containerized Cinder can run from the cinder repo via make + docker-compose and act as a standalone block service for bare‑metal Kubernetes… | ||
| Block Volumes Support in Kubernetes [I] | Mitsuhiro Tanino | 35m |
Adds raw block volume support as an alpha feature in Kubernetes 1.9, introducing two new API fields volumeMode and volumeDevices and a feature gate… | ||
| Local Ephemeral Storage Resource Management | Jing Xu | 40m |
Kubernetes adds explicit ephemeral storage as a schedulable resource with per-container requests and limits, pod-level aggregation, and emptyDir sizeLimit to… | ||
| Hybrid Cloud Powered by Kubernetes [I] | Aparna Sinha, Eric Brewer, Matthew DeLio | 35m |
Kubernetes runs the same app in Google Cloud and on-prem kiosks to keep a single inventory; demo builds a regional GKE cluster (six nodes across 3 zones) and a… | ||
| Zero Configuration Pattern of Kubernetes on Bare Metal [A] | Rob Hirschfeld | 36m |
Demonstrates immutable bootstrapping on bare metal using Digital Rebar and kubeadm to auto-provision nodes without SSH or external orchestration; two clusters… | ||
| Cost-effective Compute Clusters with Spot and Pre-emptible Instances | Bich Le, Arun Sriraman | 36m |
Kubernetes clusters mix GKE preemptible node pools and kops with AWS spot pools (maxPrice in instance groups) to push 60–80% lower hourly costs for transient… | ||
| Self-Hosted Kubernetes: How and Why [I] | Diego Pontoriero | 34m |
Self-hosted Kubernetes runs the control plane as Deployments and DaemonSets so upgrades and autoscaling use native Kubernetes primitives; bootkube and kubeadm… | ||
| Using Kubo to Manage your Kubernetes Clusters [I] | Oleksandr Slynko, Brendan Nolan | 34m |
Kubo is an OSS BOSH release that instantiates vanilla Kubernetes clusters with BOSH-managed releases and multi-IAAS support (GCE, vSphere, AWS, OpenStack… | ||
| Cluster-in-a-Box: Deploying Kubernetes on lxd [B] | Rye Terrell, Marco Ceppi | 35m |
Deploy multiple Kubernetes clusters inside a single VM using LXD machine containers and Ubuntu images, deploying with kubeadm/Canonical Distribution plus… | ||
| Linkerd Salon | William Morgan | 01h 03m |
Linkerd runs production traffic at NCBI across about 2,000 services and handles roughly half of external traffic from ~17 requests/sec, using a host-level… | ||
| Setting Sail with Istio [B] | Lachlan Evenson | 39m |
Installs Istio v0.12 onto a vanilla Kubernetes 1.8.2 cluster via the upstream Helm chart, registers the Envoy sidecar injection (initializer), and deploys the… | ||
| Reliable Application Roll Out and Operations with Istio [B] | Lin Sun, Mandar Jog | 35m |
Istio shows concrete rollout primitives: Envoy sidecar plus Pilot and Mixer enforce routing, telemetry and policy without app code changes; route rules do… | ||
| Enable your Microservices with Advanced Resiliency and Fault Tolerance Leveraging Istio | Animesh Singh, Tommy Li | 30m |
Claims that Istio extracts resiliency from apps into the platform and uses Envoy sidecars, Pilot and Mixer to enforce routing, rate limits and circuit… | ||
| Istio’s Mixer: Policy Enforcement with Custom Adapters | Limin Wang, Torin Sandall | 34m |
Explains how Istio Mixer maps request attributes to adapter instances and handlers, shows a simple custom adapter that checks whether a string is in a… | ||
| IoK: Istio-on-Kubernetes Deep Dive [I] | Daneyon Hansen | 35m |
Deploys Istio on Kubernetes with the Bookinfo app so every pod gains an Envoy sidecar plus an init container iptables step that redirects traffic; the init… | ||
| Modern Big Data Pipelines over Kubernetes [I] | Eliran Bivas | 35m |
Claims Kubernetes replaces YARN as a single scheduler for Spark Presto TensorFlow Kafka Cassandra and Elasticsearch, and shows a live demo: create namespace… | ||
| Kafka Operator: Managing and Operating Kafka Clusters in Kubernetes [A] | Nenad Bogojevic | 33m |
Deploys Kafka and Zookeeper as StatefulSet + headless service to preserve stable IDs and DNS, schedules brokers with nodeSelectors and anti‑affinity onto… | ||
| Distributed Database DevOps Dilemmas? Kubernetes to the Rescue | Denis Magda | 32m |
Shows a concrete integration: Apache Ignite uses a Kubernetes Service-backed IP finder that returns pod IPs so cluster nodes auto-discover and form a… | ||
| Democratizing Machine Learning on Kubernetes [I] | Joy Qiao, Lachlan Evenson | 34m |
Open-source repo provides a lightweight Kubernetes setup and a GUI deep learning workspace to launch Jupyter and distributed TensorFlow jobs; benchmarks use… | ||
| Kube-native Postgres [I] | Josh Berkus | 36m |
Patroni moves PostgreSQL to be Kubernetes-native by dropping etcd and using the Kubernetes API for leader election, storing leadership in ConfigMap+Endpoint… | ||
| Don’t Hassle Me, I’m Stateful | Jeff Bornemann, Michael Surbey | 32m |
Deploys a full MongoDB replica set on OpenShift using Kubernetes StatefulSet (introduced in Kubernetes 1.5, heading GA in 1.9), with a single shard, config… | ||
| A Scheduling Simulator for Capacity Estimation of Kubernetes Clusters | Avesh Agarwal | 37m |
A Scheduling Simulator for Capacity Estimation of Kubernetes Clusters - Avesh Agarwal, Red Hat
Capacity planning is very important for meeting dynamic demands… | ||
| Shipping in Pirate-Infested Waters: Practical Attack and Defense in Kubernetes [A] | Greg Castle | 38m |
Three live demos show an attacker exploiting a shell injection to download a backdoor and use Metasploit and nmap to probe the cluster then steal a stolen… | ||
| CNI, CRI, and OCI - Oh My! [I] | Elsie Phillips, Paul Burt | 28m |
Covers three concrete standards and what they actually do: CNI: two calls (ADD/DEL) and plugins that now support IPv6, plugin chaining and port forwarding… | ||
| Effective RBAC | Jordan Liggitt | 40m |
RBAC v1 in Kubernetes 1.8 maps requests to roles and bindings: use clusterrole/rolebinding (global vs namespaced) to define and grant permissions, and run the… | ||
| Real Security for Services on Kubernetes [I] | Eric Wang, Yun Zhang | 32m |
Databricks builds a system called Genie that issues time-boxed TLS certs (employee certs signed by an internal CA) after Google group SSO and Vault issuance… | ||
| Securing Shopify's PaaS on GKE [I] | Jonathan Pulsifer | 40m |
Shopify runs its PaaS on GKE serving most internal and business‑critical services and faces missing features like NetworkPolicies and PodSecurityPolicies, so… | ||
| Hacking and Hardening Kubernetes Clusters by Example [I] | Brad Geesaman | 40m |
Live-recorded demos show how a container shell plus five curl/bash commands and a mounted default service account token or an exposed kubelet can dump secrets… | ||
| Enforcing Bespoke Policies in Kubernetes [I] | Torin Sandall | 35m |
Shows a working external admission webhook written in Go (~150 lines) that blocks kubectl exec into privileged containers in the production namespace, using… | ||
| ConfigMaps 102: Using ConfigMaps in Dynamic Application Deployments | Trevor McKay | 43m |
Shows that embedding a tiny Kubernetes client (client-go) in an app lets the app read and compose ConfigMaps on demand, avoiding name/order/startup constraints… | ||
| One Chart to Rule Them All: Continuous Deployment with Helm at Ticketmaster | Michael Goodness | 34m |
Ticketmaster builds and maintains a single, 251-line Helm webservice chart that deploys apps across a hybrid fleet (about 15 clusters) using GitLab CI, with… | ||
| CrashLoopBackoff, Pending, FailedMount and Friends: Debugging Common Kubernetes Cluster | Joe Thompson | 35m |
Step‑by‑step debugging workflow that shows how to get actionable data with kubectl logs and get events, when to SSH into nodes for journalctl or container… | ||
| Webhooks for Automated Updates [B] | Rajashree Mandaogane | 31m |
A microservice uses Docker Hub automated builds and Docker Hub webhooks to detect new image tags (reads push_data.tag and repository.repo_name), then issues a… | ||
| Monitoring Kubernetes: Follow the Data [B] | Ilan Rabinovitch | 26m |
Datadog aggregates hundreds of trillions of anonymous metrics and shows concrete adoption and behavior numbers: 41% of Docker environments use Kubernetes as of… | ||
| Planes, Raft, and Pods: A Tour of Distributed Systems Within Kubernetes [B] | Bo Ingram | 35m |
Examines etcd + Raft to show how Kubernetes enforces consistency via leader election, terms and majority quorum (e.g., a 5-node cluster needs 3 to stay… | ||
| Let's Build Kubernetes, With a Spreadsheet and Volunteers! | Justin Garrison | 36m |
Builds a working Kubernetes control plane on stage using volunteers as nodes, balloons as containers and a simple spreadsheet-style database for state. Shows… | ||
| From Screen to Pods: Bootstrapping a Cloud Agnostic System using Kubernetes [I] | Patrick McQuighan | 36m |
Algorithmia migrates from AWS VM-based deployment to a Kubernetes-first platform, running across multiple clouds and on-prem in under an hour, reducing… | ||
| All You Need to Know to Build Your GPU Machine Learning Cloud [B] | Ye Lu | 38m |
Built a private GPU ML cloud that provisions containerized jobs in seconds and raises utilization by moving from shared workstations to Kubernetes + Docker… | ||
| Building GPU-Accelerated Workflows with TensorFlow and Kubernetes [I] | Daniel Whitenack | 34m |
A runnable Kubernetes pipeline uses containers, an object store and Pachyderm data versioning to wire pre‑processing, TensorFlow training on GPU and… | ||
| ''Hot Dogs or Not" - At Scale with Kubernetes [I] | Vishnu Kannan, David Aronchick | 35m |
Portable ML pipeline that runs unchanged from laptop minikube to GKE with GPUs, packaged as cube flow components deployable via kubectl. Includes JupyterHub, a… | ||
| eBay Geo-Distributed Database on Kubernetes [A] | Chengyuan Li, Xinglang Wang | 35m |
eBay runs a geo-distributed document DB on Kubernetes with thousands of storage engines, using a local volume plugin that exposes bare-metal SSDs as PV/PVCs… | ||
| Running MySQL on Kubernetes [I] | Patrick M. Galbraith | 35m |
Describes how to run MySQL on Kubernetes using StatefulSets, PVC templates and an MySQL operator that deploys a highly available Group Replication cluster with… | ||
| Accelerating Humanitarian Relief with Kubernetes [I] | Erik Schlegel, Christoph Schittko | 32m |
Project Fortis ingests Twitter, RSS, Instagram and live radio, runs Spark Streaming on Kubernetes with Kafka and spark native to extract entities, geotags via… | ||
| Keynote: KubeCon Opening Keynote | Kelsey Hightower | 23m |
Kubernetes becomes “boring” by automating cluster creation and deployments: a demo requests an 8-node cluster on Google Kubernetes Engine, a CI/CD pipeline… | ||
| nothing matches | ||