KubeCon + CloudNativeCon North America 2019
2019-11-18..2019-11-21
San Diego, United States
[KubeCon + CloudNativeCon North America 2016, KubeCon + CloudNativeCon North America 2017, KubeCon + CloudNativeCon North America 2019, KubeCon + CloudNativeCon North America 2020 Virtual, KubeCon + CloudNativeCon North America 2021, KubeCon + CloudNativeCon North America 2022]
| title | author | length |
|---|---|---|
| Keynote: Closing Remarks – Bryan Liles | Bryan Liles | 01m |
Thanks and congratulations to the Community Award winners and tonight’s presenters, with more keynotes tomorrow 9:00 a.m. The schedule directs attendees to the… | ||
| Keynote: Opening Remarks – Bryan Liles | Bryan Liles | 01m |
Opening remarks summarize Kubernetes project update and claim the CNCF ecosystem is showing measurable ecosystem maturity with projects like Prometheus and… | ||
| Keynote: Closing Remarks – Vicki Cheung | Vicki Cheung | 04m |
Closing remarks list concrete conference logistics and outcomes: a wellness program with therapy dogs, group runs, quiet room, chair yoga and massage chairs… | ||
| Rook: Cloud-Native Storage Orchestr... | Jared Watts, Bassam Tabbara, Travis Nielsen, Alexander Trost | 01h 19m |
Rook packages storage into Kubernetes operators that deploy providers via CRDs and manage day‑2 ops, exposes block/file/object and bucket access through CSI… | ||
| Tutorial: From Notebook to Kubeflow Pipel... | Michelle Casbon, Stefano Fioravanzo, Ilias Katsakioris | 01h 27m |
Kale converts annotated Jupyter notebooks into runnable Kubeflow Pipelines without writing SDK code or CLI commands, producing the long Python pipeline script… | ||
| Doing Things Prometheus Can’t Do with Prometheus | Tim Simmons | 36m |
Argues Prometheus can handle HA, high-cardinality, long retention and basic anomaly detection if configured: run replicated Prometheus behind a proxy for… | ||
| Deploy Secure and Scalable Service... | Derek Collison, Colin Sullivan, Waldemar Quevedo, Jaime Piña | 01h 34m |
NATS is demonstrated as a lightweight, production messaging platform that runs in Kubernetes, with a one-server baseline hitting ~18M msgs/sec (up to ~80M with… | ||
| Tutorial: Attacking and Defending Kube... | Brad Geesaman, Jimmy Mesta, Tabitha Sable, Peter Benjamin | 01h 24m |
Hands-on lab shows a real GKE cluster compromise: an exposed dashboard web shell gives a foothold, kubectl and curl enumerate the environment, then nsenter… | ||
| Tutorial: A Kind Workflow for Contri... | Benjamin Elder, Duffie Cooley, James Munnelly, Patrick Lang | 01h 31m |
Workshop reproduces a Kubernetes bug locally by building the tree twice with Docker and Go inside kind, using a 1.4 GB cached image and the command kind build… | ||
| Networking Optimizations for Multi-Node Deep Learning on Kubernetes | Rajat Chopra, Erez Cohen | 34m |
Shows concrete steps and measurements to get multi‑node DL running at near line rate on Kubernetes using SR-IOV, RoCE, GPUDirect and Multus. Reports that… | ||
| Networking Optimizations for Multi-Node Deep Learning on Kubernetes | Rajat Chopra, Erez Cohen | 34m |
Kubernetes cluster runs multi-node Horovod training using SR-IOV, RDMA over Converged Ethernet (RoCE) and GPUDirect with a Multus + device-plugin setup for… | ||
| Keynote: Opening Remarks – Vicki Cheung | Vicki Cheung | 02m |
Morning opening frames the conference as a maturity checkpoint: projects are growing more advanced, use cases are doing more complex work, and the goal is to… | ||
| Doing Things Prometheus Can’t Do with Prometheus | Tim Simmons | 35m |
Argues that Prometheus handles most observability needs if used thoughtfully: deploy HA by running replicas behind a proxy or using Thanos/Promxy to fan-out… | ||
| Every way we DDoSed our Cortex | Goutham Veeramachaneni | 39m |
Cortex operators get concrete fixes: open-source cortex mixin JSON for dashboards and alerts, use Jaeger traces to pinpoint slow spans (example: single queries… | ||
| Opening Remarks | Bryan Liles | 01m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Closing Remarks | Bryan Liles | 02m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Lightning Talk: Want to Donate a Project to the CNCF? Here's How | Cheryl Hung | 04m |
CNCF project acceptance relies on a nine-member TOC that requires two sponsors to enter sandbox and a two-thirds vote to advance to incubating and graduated… | ||
| Lightning Talk: Easily Observing Operators | Lili Cosic | 04m |
Shows how to add native Prometheus metrics to an operator by importing kube-state-metrics as a library and exposing an HTTP /metrics endpoint in a few lines of… | ||
| Lightning Talk: Is Your Kubernetes Cluster's DNS Working? | Jonathan Perry | 06m |
Kubernetes DNS failures can come from kernel and libc behaviors not visible to CoreDNS metrics: a kernel DNAT race drops parallel DNS packets and… | ||
| Lightning Talk: Open Match - Matchmaking Framework | Robert Bailey | 05m |
Open Match is an open source matchmaking framework built as Kubernetes microservices that plugs into game front ends and server pools, runs custom match logic… | ||
| Lightning Talk: CRDs All the Way Down – Using OPA for Complex CRD Validation and Defaulting | Puja Abbassi | 05m |
Shows how Open Policy Agent (OPA) and Gatekeeper replace hand‑written admission controllers by using mutating and validating webhooks to implement real CRD… | ||
| Lightning Talk: How the Observability Team at Spotify Radically Decreased On-Call Alerts | Lauren Muhlhauser | 05m |
Reliability team takes over legacy monitoring and within six months migrated to Prometheus and Grafana, moved metric forwarding to FFWD and storage to Heroic… | ||
| Lightning Talk: Sharing a GPU Among Multiple Containers | Patrick McQuighan | 05m |
Algorithmia shares a single GPU among multiple containers since 2016 and ships a custom scheduler extender, GPUShare Scheduler Extender, that works with… | ||
| Lightning Talk: Code Kubernetes While You Are Using It | Mario Loriedo | 05m |
A containerized web IDE called Eclipse Che runs inside Kubernetes and spins up a reproducible, four-container workspace (Go tooling, shell, web IDE, Kubernetes… | ||
| Lightning Talk: Kuber-What-Es?! Misadventures in Building UIs for K8s-Based ML Platforms | Alexandra Johnson | 04m |
Team builds Kubernetes-based ML platform to run massively parallel hyperparameter optimization jobs and chooses three UI rules: focus on non-infra users, CLI… | ||
| Lightning Talk: Get Started With Non-Code Contributions to Kubernetes | David Strebel | 05m |
Lists concrete non-code roles and how they actually work: running Kubernetes Office Hours, joining the release team to help cut and coordinate releases… | ||
| Lightning Talk: Boosting Your kubectl Productivity | Mauricio Salatino | 05m |
Claims a 4–7× speedup by using short aliases (for example k for kubectl), shell completion and generated shortcut collections instead of typing full commands… | ||
| Lightning Talk: What Makes a Good Multi-tenant Kubernetes Solution? | Victor Varza | 05m |
Kubernetes primitives alone are insufficient for production multi-tenancy, so Adobe builds a cross‑cloud platform that automates tenant onboarding (namespace… | ||
| KubeFlow’s Serverless Component: 10x Faster, a 1/10 of the Effort | Orit Nissan-Messing | 34m |
Claims a Nuclio + mlrun stack makes pipeline steps up to 10x faster and 1/10 the effort by converting Jupyter cells to functions, auto-building containers, and… | ||
| Walls Within Walls: What if Your Attacker Knows Parkour? | Tim Allclair, Greg Castle | 33m |
A live exploit shows a compromised node using kubelet credentials to talk to the API then delete and recreate its node object to add a payments label and… | ||
| Intro to Thanos: Scale Your Prometheus Monitoring With Ease | Lucas Serven, Dominic Green | 30m |
Thanos extends Prometheus with composable pieces—sidecar and query components, a store-gateway and compactor, plus a remote-receiver that uses a hash ring and… | ||
| Introduction to Virtual Kubelet – Featuring Titus by Netflix | Ria Bhatia, Sargun Dhillon | 36m |
Virtual Kubelet connects Kubernetes to Netflix Titus by treating pods as opaque objects and embedding legacy container metadata as a base64-encoded pod… | ||
| Kubernetes at Cruise: Two Years of Multitenancy | Karl Isenberg | 33m |
Cruise runs Kubernetes with over 40 internal tenants, ~100,000 pods and ~4,000 nodes and reports moving from “barely isolated” to tightly isolated while saving… | ||
| Intro: CNCF CI | Lucina Stricko, Denver Williams | 19m |
The cncf.ci status dashboard provides vendor‑neutral validation of builds, deployments and end‑to‑end tests for CNCF Graduated and Incubating projects, showing… | ||
| Superpowers for Windows Containers | Deep Debroy, Jean Rouge | 26m |
Windows nodes gain a small host binary that runs as admin and exposes specific host operations over named pipes so containerized CSI node plugins can do disk… | ||
| From Issue to PR Merged: A Fluentd “Tail” | Jordan Hamel | 38m |
Fluentd S3 input plugin gains an optional parameter to read cross-account SQS queue URLs so CloudTrail objects from hundreds of AWS accounts land correctly in… | ||
| SIG Cloud Provider Intro | Fabio Rapposelli, Nick Turner | 30m |
SIG Cloud Provider explains that cloud-specific code is being extracted from core into separate repos so providers can ship independently and reduce… | ||
| Living with the Pathology of the Cloud: How AWS Runs Lots of Clusters | Micah Hausler | 35m |
EKS control planes run on public AWS primitives: API Gateway + Lambda front end, CloudFormation stacks per cluster, a dedicated VPC, NLBs, and managed node… | ||
| Panel: Control Plane vs Data Plane: Untangling the Tenets of Multitenancy | Erica Von Buelow, Sanjeev Rampal, Ryan Bezdicek, Adrian Ludwin, Fei Guo | 36m |
Discussion compares concrete solutions: an incubating hierarchical namespace controller that propagates policies down namespace trees, an approach assigning… | ||
| Admission Webhooks: Configuration and Debugging Best Practices | Haowei Cai | 35m |
Admission webhooks graduate to GA in Kubernetes 1.16 and are powerful but brittle: mutating webhooks can be invoked twice so make them idempotent mutating… | ||
| Applying Policy Throughout The Application Lifecycle with Open Policy Agent | Gareth Rushgrove | 39m |
Shows how Open Policy Agent (OPA) and Rego become executable policy: using Conftest to unit-test Kubernetes, Helm and pipfile configs; running those tests… | ||
| Containing the Container: Developer Experience vs Strict Security Posture | Brian Bagdzinski, Sharat Nellutla | 35m |
Verizon runs 2000+ apps across on‑prem, multi‑cloud and edge clusters with 80,000+ workloads and 300k+ deployments in 90 days and security policy forbids no… | ||
| Intro to Kubernetes Sig-Architecture Subprojects | Davanum "Dims" Srinivas, Jordan Liggitt | 31m |
SIG-Architecture breaks into concrete subprojects: API review process governs builtin API changes and reviewer distribution; code organization uses a staging… | ||
| Service Discovery With Hybrid and Multi-Cloud: Introduction to CoreDNS | Yong Tang | 41m |
CoreDNS is a plugin-driven DNS server that serves Kubernetes and hybrid/multi-cloud service discovery, claims Kubernetes uses it as the default DNS since 1.11… | ||
| Using TUF to Mitigate Repository Compromises | Marina Moore, Justin Cappos | 41m |
TUF (The Update Framework) presents a concrete design to limit damage from repository compromises by using threshold signatures, periodic root key rotation… | ||
| Dragonfly Intro: Plugin Framework and New Distribution Strategy | Haibing Zhou, Ben Ye | 39m |
Dragonfly is a p2p image/file distrib system with a new decentralized mode that removes the heavyweight supernode by syncing peer/file state via Serf gossip… | ||
| Intro: Brigade | Matt Butcher, Radu Matei | 37m |
Brigade is a Kubernetes-native event-driven scripting framework that runs JavaScript to chain containers into workflows, triggers via gateways for GitHub… | ||
| Introduction to CRI-O | Mrunal Patel, Peter Hunt | 38m |
CRI-O implements the Kubernetes CRI with OCI compatibility, calls runtimes like runC and supports Kata and gVisor, uses containers/storage and… | ||
| KubeVirt Intro: Virtual Machine Management on Kubernetes | Steve Gordon, Chandrakanth Jakkidi | 38m |
KubeVirt brings full virtual machines into Kubernetes by adding CRDs for VirtualMachine and VirtualMachineInstance, running VMs inside virt-launcher pods and… | ||
| Porting Envoy to Windows; A Progress Report | Yechiel Kalmenson, William A. Rowe, Jr. | 31m |
Envoy builds on Windows now compile with a patched Bazel and upstream Bazel’s params-file fix, external deps are bundled into a static EXE, and Windows header… | ||
| Intro to SIG Service Catalog | Jonathan Berkhahn, Mateusz Szostok | 33m |
Service Catalog connects Kubernetes to Open Service Broker API brokers so developers run three commands to get a real service: svcat marketplace to list… | ||
| Intro: Kubernetes SIG PM | Stephen Augustus | 28m |
SIG PM runs the KEP-driven process for Kubernetes: maintain the KEP template, track ~150 enhancement‑tracking issues, and accept roughly 45 KEPs per release… | ||
| Polymorphic Reconcilers in Kubernetes - Advanced DuckTyping | Scott Nichols, Matt Moore | 36m |
Shows a concrete system in Knative that uses partial schemas to reconcile heterogeneous resources: a sync binding injects a SINK env var into deployments jobs… | ||
| Jaeger Intro | Yuri Shkuro, Pavol Loffay | 35m |
Jaeger reconstructs request executions into a live service graph and Gantt-style traces, demoed with the hotrod app run via Docker Compose and an all-in-one… | ||
| Adapting Kubernetes to Constrained IP Address Environments | Mahesh Narayanan, Satyadeep Musuvathy | 36m |
Kubernetes treats every pod as a first‑class IP so clusters quickly exhaust space: giving each node a /24 means a 100‑node cluster needs roughly a /17 and more… | ||
| Enabling Kubeflow with Enterprise-Grade Auth for On-Prem Deployments | Yannis Zarkadas, Krishna Durai | 28m |
Kubeflow deploys ML services as CRDs like TFJob and uses namespaces for per-user isolation; the demo shows notebook access blocked with 403 when headers don’t… | ||
| The Devil in the Details: Kubernetes’ First Security Assessment | Aaron Small, Jay Beale | 36m |
Year‑long community audit produces 241 pages, a four‑month core assessment, and 37 vulnerabilities reported through the Product Security Committee. Third‑party… | ||
| Measuring and Optimizing Kubeflow Clusters at Lyft | Konstantin Gizdarski, Richard Liu | 40m |
Lyft builds Infraspend to scrape Prometheus from many Kubeflow clusters, persist metrics into Hive/Druid/Superset, and join those snapshots to AWS cost reports… | ||
| Kubernetes in Your 4x4 – Continuous Deployment Directly to the Car | Rafal Kowalski | 34m |
Prototype deploys a full k3s cluster inside each vehicle with ECUs as worker nodes and a local containerd registry, using Jenkins + MongoDB for orchestration… | ||
| Russian Doll: Extending Containers with Nested Processes | Christie Wilson, Jason Hall | 31m |
Kubernetes pods start all containers together, so the solution overrides each container’s entrypoint by injecting a statically linked Go binary into a shared… | ||
| eBay Search On K8s | Mohnish Kodnani, Yashwanth Vempati | 34m |
eBay runs its Cassini search on Kubernetes serving ~1.4 billion active listings and ~300K QPS by modeling the query layer as a resizable grid: columns =… | ||
| Making the Most Out of Kubernetes Audit Logs | Laurent Bernaille, Robert Boll | 36m |
Datadog reports running clusters of 1000+ nodes and demos show the API server emitting about 900 calls per second on a 2,500‑node cluster. Audit logging is… | ||
| Extending containerd | Samuel Karp, Maksym Pavlenko | 36m |
containerd exposes five concrete extension points and shows working examples: a custom ECR resolver replaces registry logic in the Go thick client and… | ||
| Intro to the Kubernetes Working Group for Multi-tenancy | Tasha Drew | 28m |
Working Group maintains runnable code: hierarchical namespace controller (HNC) copies policy objects via a HierarchyConfig CR and propagates changes; a tenant… | ||
| Introduction to Windows Containers in Kubernetes | Michael Michael, Deep Debroy | 35m |
SIG-Windows reports that Windows container support is stable in 1.14 with milestones since: CSI support in 1.16, kubeadm-based Windows node join scripts, and… | ||
| Intro: Flux | Stefan Prodan, Alexis Richardson | 42m |
Flux is a GitOps operator that continuously reconcil es cluster state from a Git repo (default 5-minute sync) and updates workloads by shelling out to… | ||
| OPA Introduction & Community Update | Rita Zhang, Patrick East | 40m |
OPA is a Rego-based policy engine with 70+ contributors and ~1,200 Slack users that evaluates JSON inputs and now runs via HTTP, Go embedding or WebAssembly… | ||
| Intro: OpenEBS | Amit Kumar Das, Vishnu Itta | 36m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Building the Cloud Native Kernel: Kubernetes Release Engineering | Tim Pepper, Stephen Augustus | 37m |
Kubernetes release engineering now targets reproducible distro tooling instead of 3k-line bash scripts, replacing Onaga with Go utilities like crevel toolbox… | ||
| PodOverhead: Accounting for Greater Cluster Stability | Eric Ernst | 31m |
Kubernetes 1.16 adds the PodOverhead feature (alpha, feature gate required) to account for resources outside containers so nodes stop overcommitting… | ||
| Building Blocks: How Raw Block PVs Changed the Way We Look at Storage | Jose A. Rivera, Rohan Gupta | 34m |
Rook-Ceph uses Kubernetes raw block PVs (volumeMode: Block) to provision OSDs via storageClassDeviceSet PVC templates, making OSDs portable with portable=true… | ||
| Running Apache Samza on Kubernetes | Weiqing Yang | 35m |
Apache Samza runs natively on Kubernetes using K8s primitives for scheduling, storage and failure recovery, with a Kubernetes-backed scheduler replacing YARN… | ||
| How to Backup and Restore Your Kubernetes Cluster | Annette Clewett, Dylan Murray | 39m |
Demonstrates a reproducible backup-and-restore pipeline that successfully deletes and recovers a namespace running WordPress + MySQL, using Velero + Restic to… | ||
| 10 Weird Ways to Blow Up Your Kubernetes | Melanie Cebula, Bruce Sherrod | 35m |
Airbnb reports running 700+ services across 1000s of nodes and dozens of clusters and demonstrates ten concrete failure modes: cron jobs that never end when… | ||
| Running Istio and Kubernetes On-prem at Yahoo Scale | Suresh Visvanathan, Mrunmayi Dhume | 33m |
Yahoo runs 18 production clusters and a single on‑prem cluster that manages 150K+ containers, ~1k applications and 1–1.5M RPS. Built an Athens identity… | ||
| Scaling Resilient Systems: A Journey into Slack's Database Service | Rafael Chacon, Guido Iaquinti | 42m |
Claims a Vitess-based database fleet scales from zero to 2.7 Million QPS and runs on 2000+ nodes with plans for 3500, deployed on AWS with cells that map to… | ||
| Building Reusable DevSecOps Pipelines on a Secure Kubernetes Platform | Steven Terrana, Michael Ducy | 35m |
Centralized, tool‑agnostic pipeline templates plus modular libraries replace 60 copied Jenkinsfiles and cut new pipeline development from about 4–6 months to… | ||
| Airbnb Service Discovery: Past, Present, Future (Challenges of Change) | Chase Childers | 43m |
Airbnb runs a homegrown SmartStack (Nerve + Synapse + HAProxy + ZooKeeper) for service discovery and moves it into Kubernetes, replacing Nerve with Mini… | ||
| Developing Edge with Kubernetes | Dejan Bosanac, Ted Ross | 37m |
Shows a working prototype of an application‑level network (scupper.io) that spins a router container per Kubernetes cluster, tunnels services by name across… | ||
| Introduction to Autoscaling | Marcin Wielgus, Vivek Bagade | 35m |
Explains how Kubernetes autoscaling actually works: Horizontal Pod Autoscaler adjusts replicas from CPU or custom metrics toward a target utilization… | ||
| Intro: Kubernetes SIG Apps | Adnan Abdulhussein, Matt Farina | 34m |
SIG Apps owns the workloads APIs — Deployments, StatefulSet, DaemonSet, Jobs, CronJobs and PodDisruptionBudgets — and the docs and tutorials around them. The… | ||
| Towards Continuous Computer Vision Model Improvement with Kubeflow | Derek Hao Hu, Yanjia Li | 37m |
Snapchat uses Kubeflow Pipelines to close the loop: seed images from Scan and logs query a visual Our Story image index with nearest-neighbor search, crop… | ||
| Enforcing Automatic mTLS With Linkerd and OPA Gatekeeper | Ivan Sim, Rita Zhang | 37m |
Shows Linkerd auto-injection turning an unencrypted emoji app into fully encrypted east‑west traffic observable as cleartext then gone under Wireshark, with… | ||
| Five Things You Didn’t Know You Could Do with SPIFFE and SPIRE | Andrew Jessup, Andres Vega | 32m |
A live five-service banking demo shows workloads in GKE with Envoy sidecars and one MySQL on AWS RDS authenticating via SPIFFE/SPIRE using x.509 SVIDs and OIDC… | ||
| Making an Internal Kubernetes Offering Generally Available | James Wen | 33m |
Two years of work yield an internal GKE offering that moves 33% of eligible stateless backends via a self-service path: 15 production clusters with about 2,500… | ||
| Weighing a Cloud: Measuring Your Kubernetes Clusters | Han Kang, Elana Hashman | 37m |
Practical checklist for cluster debugging: collect Prometheus metrics and query with PromQL, inspect kube-apiserver logs and health endpoints, and read etcd… | ||
| Building a Database as a Service on Kubernetes | Abhi Vaidyanatha, Lucy Burns | 35m |
PlanetScale describes a production Database-as-a-Service on Kubernetes that uses Vitess over MySQL, a rewritten Vitess operator to provision clusters, etcd per… | ||
| Rethinking the K8s DNS for the Modern Enterprise | Deepa Kalani, Venil Noronha | 34m |
Proposes a concrete design: a drafted per-namespace DNS CRD that binds groups of namespaces to tenant DNS servers and routes pod DNS through an Envoy DNS… | ||
| Only Slightly Bent: Uber’s Kubernetes Migration Journey for Microservices | Yunpeng Liu | 36m |
Uber evaluates moving thousands of microservices from Mesos to Kubernetes, aiming to support secure service mesh and ML workloads without rewriting services… | ||
| Mario’s Adventures in Tekton Land | Vincent Demeester, Andrea Frittoli | 36m |
Tekton team replaces bash-heavy CI with Tekton pipelines, moves releases and image builds into Kubernetes, and runs nightly builds on a dedicated dogfooding… | ||
| Fluentd: Cloud Native Logging | Yuta Iwama, Masahiro Nakagawa | 37m |
Fluentd is a Ruby-based streaming log router with 900+ plugins that routes events (tag, time, JSON record) through input → filter → buffer → output stages; it… | ||
| Introduction to CNI, the Container Network Interface Project | Bryan Boreham, Dan Williams | 37m |
CNI defines a small JSON-based spec and an executable plugin model that Kubernetes and other runtimes call via add/del/check/version; kubelet actually invokes… | ||
| No-Nonsense Observability Improvement | Cory Watson | 31m |
Six practical moves: promote the work so leadership and teams see wins; teach the basics with hands-on onboarding and follow-up practice; run game days, load… | ||
| Understanding and Troubleshooting the eBPF Datapath in Cilium | Nathan Sweet | 38m |
eBPF programs power Cilium’s datapath using XDP for early drops, cgroup eBPF for transparent client‑side load balancing and sockops for per‑socket shaping… | ||
| Introducing KFServing: Serverless Model Serving on Kubernetes | Ellis Bigelow, Dan Sun | 39m |
KFServing provides a Kubernetes CRD to serve TF PyTorch scikit-learn and custom containers, implementing CPU/GPU auto-scaling, scale to and from 0, and two-way… | ||
| Cortex 101: Horizontally Scalable Long Term Storage for Prometheus | Chris Marchbanks | 28m |
Cortex implements horizontally scalable, highly available, multi-tenant long‑term storage for Prometheus by vendoring Prometheus code and PromQL, accepting… | ||
| Beyond Storage Management | Andrew Large, Yinan Li | 35m |
Kubernetes adds CSI volume snapshots (alpha in 1.12, moving to beta around 1.17) but snapshots alone aren’t enough: production-grade protection needs volume… | ||
| Panel: Is Service Mesh Ready for Edge-Native Applications? | Wendy Cartee, Ramki Krishnan, Srini Addepalli, Parveen Patel, Ravi Chunduru | 35m |
Panelists argue service mesh can work at the edge but only with concrete changes: sidecars consume ~50% of node resources so designs move to multi‑tenant… | ||
| Intro: Harbor - Enterprise Cloud Native Artifact Registry | Steven Ren, Alex Xu | 41m |
Harbor is an on‑prem/cloud native registry that stores, signs (Notary) and scans images and Helm charts, now with nearly 10k GitHub stars and 120+… | ||
| A Peek Inside the Enterprise Cloud at Salesforce | Xiao Zhou, Thomas Hargrove | 32m |
Salesforce runs Kubernetes across 2600+ hosts in 20+ private data centers and uses an in-house operator that resyncs desired state and overrides manual edits… | ||
| Intro to Cloud Native Buildpacks | Terence Lee, Emily Casey | 48m |
Cloud Native Buildpacks (CNCF sandbox) show a concrete pipeline: pack CLI runs a lifecycle of detect build analyze export restore and cache to produce layered… | ||
| Intro to gRPC | Jayant Kolhe, Eric Anderson | 33m |
gRPC is a production-ready RPC framework (v1.25, six-week cadence) that uses proto IDL to generate idiomatic client/server stubs across many languages and runs… | ||
| Intro to Cloud Provider Azure | Rita Zhang, Craig Peters | 26m |
Azure Kubernetes work focuses on moving the cloud provider out-of-tree cloud provider so it can ship faster and be versioned independently, upgrading Azure… | ||
| Vitess: Stateless Storage in the Cloud | Sugu Sougoumarane | 45m |
Vitess runs MySQL-based storage as a stateless storage system by pushing state into many small shards (recommended ~200–300 GB) and relying on semi-sync… | ||
| Intro: Linkerd | William Morgan | 35m |
Linkerd is a CNCF service mesh with a Go control plane (~200 MB control plane) and a tiny data plane in Rust, claiming low latency at scale; benchmarks… | ||
| CAP_NET_RAW And ARP Spoofing in Your Cluster: It's Going Downhill From Here | Liz Rice | 33m |
A demonstration shows a compromised pod using CAP_NET_RAW to open raw sockets and perform ARP spoofing on the node’s bridge to hijack CoreDNS lookups… | ||
| Blazin’ Fast PromQL | Tom Wilkie | 34m |
Prometheus’ single-threaded PromQL engine limits large queries, so Cortex builds a query front-end that does step alignment, per-day partial queries and result… | ||
| Kubernetes SIG Instrumentation - Intro | Frederic Branczyk, Piotr Szczesniak | 28m |
SIG Instrumentation outlines concrete deliverables: kube-state-metrics produces per-API-object metrics like expected vs actual replicas, and metrics-server… | ||
| CNCF Network SIG Intro & Deep-Dive | Lee Calcote, Matt Klein | 37m |
SIG Network announces a formal charter and biweekly cadence to handle concrete tasks: project reviews for new CNCF entrants, cross‑project coordination, and… | ||
| Hardware-based KMS Plug-in to Protect Secrets in Kubernetes | Raghu Yeluri, Haidong Xia | 38m |
Proposal to extend the Kubernetes KMS plugin so encryption and decryption run inside a CPU-protected Trusted Execution Environment (example: Intel SGX)… | ||
| The Release Team Shadow Program - Mentoring For the Future | Guinevere Saenger, Lachlan Evenson | 33m |
Program trains and onboard shadows to do concrete release work: six roles (enhancements, CI signal, bug triage, docs, comms, release lead), three-month cycles… | ||
| CNCF Project Maintainers Birds of a Feather | Amye Scavarda Perrin | 12m |
Room discussion catalogs concrete maintainer pain points: accounts lose access and require manual recovery, the CLA requests route to the Linux Foundation… | ||
| Community Bridge BoF | Ihor Dvoretskyi, Shubhra Kar | 45m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| SIG Usability: Intro and How to Get Started | Tasha Drew | 23m |
SIG Usability explains why a new SIG exists, how to join via the Google group and GitHub repo, and what concrete projects are underway: a draft Kubernetes user… | ||
| Intro: Contributor Experience SIG | Elsie Phillips, Paris Pittman | 31m |
SIG defines a contributor as anyone generating a GitHub event and supports a project split into subprojects: mentoring with contributor ladders and mentoring… | ||
| Securing the Software Supply Chain with in-toto | Santiago Torres-Arias, Justin Cappos | 34m |
in-toto provides an explicit supply-chain model that declares steps, participants and accepted inputs then records what actually happens using layout and link… | ||
| Scaling Kubernetes to Thousands of Nodes Across Multiple Clusters, Calmly | Ben Hughes | 30m |
Airbnb moves from a few handcrafted clusters at ~600 nodes to tens of clusters totaling >7,000 nodes by adopting a multi‑cluster model, hitting practical… | ||
| An Introduction to Helm | Matt Farina, Josh Dolitsky | 37m |
Helm is a Kubernetes package manager that packages apps as charts (templates + values), installs them with helm install, upgrades in-place, and rolls back… | ||
| Managing Helm Deployments with Gitops at CERN | Ricardo Rocha | 32m |
CERN deploys Helm charts from private chartmuseum repos, wraps applications as umbrella charts with per-environment releases, and encrypts values via a custom… | ||
| How the Department of Defense Moved to Kubernetes and Istio | Nicolas Chaillan | 41m |
Department of Defense migrates production to Kubernetes and Istio using OCI‑compliant, hardened containers stored in a signed artifact repo (170 images) with… | ||
| Service Mesh: There and Back Again | Hema Lee, Cody Vandermyn | 39m |
Nordstrom evaluates Linkerd on Kubernetes, builds a custom CNI plugin so proxies don’t need NET_ADMIN, and bakes that plugin into node images for reliability… | ||
| CNCF SIG-Security Intro | Sarah Allen, Brandon Lum | 34m |
CNCF SIG‑Security runs a specific security assessment process that produces a prioritized recommendations list (not a line‑by‑line code audit), using a… | ||
| Birds of a Feather (BoF): SODA: The Path To Data Autonomy | Steven Tan, Anjaneya "Reddy" Chagam | 32m |
SODA frames an open data-autonomy stack that unifies disparate back-end storage (scale-out, scale-up, S3/object, NVMe) and exposes REST APIs and a GUI to… | ||
| Managing Apache Flink on Kubernetes - FlinkK8sOperator | Anand Swaminathan | 42m |
An open-source operator uses a FlinkApplication CRD to create one Flink cluster per CR and manages the full lifecycle via a controller runtime state machine… | ||
| Cloud Provider Subproject AWS / User Group AWS | Nishi Davidson, Justin SB | 30m |
SIG AWS becomes Provider AWS under SIG Cloud Provider and the talk lays out concrete migration steps: an external cloud controller manager migration with a 0.1… | ||
| How to Migrate a MySQL Database to Vitess | Sugu Sougoumarane, Morgan Tocker | 37m |
Stepwise canary migration routes a small percentage of production traffic to VTGate stateless proxy which speaks MySQL and adds about a millisecond or two per… | ||
| Keynote: CNCF Maintainer + Ambassador Awards | Chris Anizczyk | 08m |
Ceremony honors the recent loss of Brad Childs, co-chair of SIG Storage who helped shape the storage community, then celebrates CNCF’s fourth anniversary and… | ||
| Keynote: Reflections | Kelsey Hightower | 13m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Keynote: Beyond Badges—How Inclusive Communities Accelerate Innovation | Kostadis Roussos | 05m |
Company announces its biggest technology bet in a decade: embedding Kubernetes in vSphere and shifting focus from infrastructure-up to developer-down… | ||
| Keynote: (Open)Telemetry Makes Observability Simple | Sarah Novotny, Liz Fong Jones | 20m |
A merged OpenTracing and OpenCensus becomes OpenTelemetry that provides a single instrumentation API, a language-neutral collector and SDKs for seven… | ||
| Keynote: Modernizing Virtualization Technology for Cloud Native Computing | Arjan van de Ven | 05m |
Argues for rebuilding the VMM layer as composable modules rather than a monolithic hypervisor, claiming rust-vmm crates let teams assemble workload-specific… | ||
| Keynote: Kubernetes Project Update | Vicki Cheung | 09m |
Kubernetes 1.16 ships 31 enhancements: 15 new features in alpha, 8 promoted to beta and 8 stable. Storage gains include volume resize via an external… | ||
| Sponsored Keynote: Bringing Confidential Computing to Kubernetes | Lachlan Evenson | 05m |
Kubernetes can now allocate hardware-backed trusted execution to containers using the Open Enclave SDK and an SGX device plugin that advertises per-node… | ||
| Keynote: NATS: Past, Present and the Future | Derek Collison | 21m |
NATS is a lightweight cloud‑native messaging system with 30+ client languages, over 100 million server downloads and more than a thousand contributors; it runs… | ||
| Sponsored Keynote: Keep Kubernetes Caffeinated | Erin A Boyd | 05m |
Operators automate deployment and operations of complex stateful systems using the Rook operator to orchestrate file, object and block storage across clusters… | ||
| Keynote: Hiding in the Dark | Dan Kohn | 08m |
Claim: most enterprises still hide with long release cycles because majority of enterprises not cloud native and real failures are like zombies. Concrete… | ||
| Keynote: CNCF Project Updates | Bryan Liles | 24m |
CNCF updates call out concrete moves: CoreDNS graduates for simple, pluggable DNS; Vitess graduates and claims 35 million QPS on Singles Day with ~4,000… | ||
| Keynote: CNCF Updates | Cheryl Hung | 10m |
CNCF reports concrete growth and resources: 129 end‑user members and 500+ member companies, AWS donates $200,000 cloud credits to project maintainers for… | ||
| Take Envoy Beyond a K8s Service Mesh - to Legacy Bare Metal & VMs + More | Steve Sloka, Steven Wong | 33m |
Demonstrates using Envoy plus Contour and Gimbal to bridge Kubernetes, VMs, bare metal and Windows: a routing cluster holds Kubernetes Services/endpoints that… | ||
| Keynote: Closing Remarks | Vicki Cheung, Bryan Liles | 02m |
Announces upcoming Kubernetes Forums in Seoul, Sydney, Bengaluru and Delhi and confirms KubeCon + CloudNativeCon 2020 dates and cities with exact schedules… | ||
| Low Latency Multi-cluster Kubernetes Networking in AWS | Paul Fisher | 34m |
Lyft migrates hundreds of microservices to Kubernetes on AWS using an open source CNI that assigns real VPC IPs to pods, ties clusters into a flat network, and… | ||
| KubeEdge – Kubernetes Native Edge Computing Framework | Jason Wu, Sean Wang | 35m |
KubeEdge is an edge framework that actually runs container workloads pushed from cloud Kubernetes clusters and keeps 100% Kubernetes API compatible so images… | ||
| Panel: What’s Essential in an OSS Project Launch Playbook? | Betty Junod, Jian He, Karen Chu, Matt Butcher, Ronan Flynn-Curran | 33m |
Playbook items are concrete: set a governance threshold like no more than 49% from one company so control cannot be monopolized; publish a code of conduct and… | ||
| Design Decisions for Communication Systems | Eric Anderson | 36m |
Compares low‑level primitives (pipes, FIFOs, shared memory, UNIX domain sockets) and their properties — ordered, buffered, local — to higher‑level designs like… | ||
| Sharing is Caring: How to Begin Speaking at Conferences | Jenny Burcio, Ashlynn Polini | 33m |
Covers concrete steps for turning an idea into a conference slot: how CFPs are judged at DockerCon, why 13% acceptance rate matters, and how to write the… | ||
| Introducing Metal³: Kubernetes Native Bare Metal Host Management | Russell Bryant, Doug Hellmann | 36m |
Metal3 exposes a baremetalhost CRD to represent inventory, inspects hardware into status fields, and uses Ironic provisioning (bundled and self-hosted) to… | ||
| Liberating Kubernetes From Kube-proxy and Iptables | Martynas Pumputis | 35m |
Claims Kubernetes runs without kube-proxy, iptables or netfilter by replacing service logic with eBPF programs at TC ingress and socket connect hooks inside… | ||
| Storage on Kubernetes - Learning From Failures | Hemant Kumar, Jan Šafránek | 37m |
Several real failures and fixes are described with concrete fixes and remaining gaps: restoring PV/PVC YAMLs without sanitizing UIDs triggers… | ||
| Debugging Live Applications the Kubernetes Way: From a Sidecar | Joe Elliott | 32m |
Builds a sidecar "toolset" container that runs perf + Flame Graphs, LTTng user-space tracepoints, and BCC/uProbe dynamic tracing against a .NET Core sample but… | ||
| How Ancestry Got Kubernetes to Run 2x Better Per Dollar Using AI | Darek Gajewski | 26m |
Ancestry hooks a machine learning optimizer into CI/CD and Kubernetes to run live canary experiments that tune pod-level settings — starting with CPU and… | ||
| Panel: Improving and Managing Kubernetes at Scale | Xiang Li, Corin Dwyer | 34m |
Multiple companies report concrete limits and fixes: control plane and etcd benchmarking shows storage and API server as bottlenecks; an 8k nodes -> 40k pods… | ||
| A Week in the Life of the Kubernetes Community | Dawn M Foster, Jorge Castro | 36m |
Weekly schedule maps actual entry points: SIGs own code areas, OWNERs files assign ownership, calendar YAML feeds 17 meetings on Tuesday and public… | ||
| Day 2 Operations with Windows Containers | Michael Michael, Patrick Lang | 38m |
Kubernetes on Windows requires concrete steps: Windows nodes auto-label by OS and will auto-add version in 1.17, use runtime-class Windows2019 to steer… | ||
| Piloting Around the Rocks: Avoiding Threats in Kubernetes | Robert Tonic, Stefan Edwards | 39m |
Trail of Bits performs the first full security review of Kubernetes using source review, dynamic testing, and threat modeling, producing a reusable threat… | ||
| Intro to Longhorn: Open Source Cloud-Native Distributed Block Storage Built On and For K8s | Sheng Yang | 48m |
Open source block storage for Kubernetes implemented as per-volume microservices with about 40,000 lines of Go and a CSI driver; installs with one-click… | ||
| Introduction to the CNCF App Delivery SIG | Alois, Lei Zhang | 41m |
SIG explains concrete outputs and next steps for app delivery: a dictionary/white paper of cloud native application delivery, an application delivery model… | ||
| A Toolkit for Simulating Kubernetes Scheduling at Scale | Yuan Chen | 36m |
A simulator runs a real Kubernetes control plane and emulates thousands of kubelets inside containers to simulate 10K+ nodes and ~200K pods on a single… | ||
| Advanced Model Inferencing Leveraging KNative, Istio & Kubeflow Serving | Animesh Singh, Clive Cox | 35m |
Kubeflow Serving integrates Istio and Knative to deliver model serving with scale-to-zero and request‑based autoscaling, built-in canary traffic splitting, and… | ||
| SIG Usability: Deep Dive | Vallery Lancey | 32m |
SIG Usability details a concrete change: Kubernetes currently defaults to an open pod network and the proposal is to add namespace v2 which auto-creates a… | ||
| Did Kubernetes Make My p95s Worse? | Jian Cheung, Stephen Chan | 29m |
Airbnb finds Kubernetes itself is not the sole culprit but several concrete factors raise p95s: migrations often change hardware generations so performance can… | ||
| Case Study: AI-as-a-Service on Kubernetes at Scale and In Production | Itay Gabbay | 35m |
Case study of an AI‑as‑a‑service built on OpenShift + Kubernetes that runs massive ML pipelines with GPU scheduling and multi‑tenant namespaces, uses… | ||
| Multiple Networks for Kubernetes Workloads | Piotr Skamruk, Doug Smith | 35m |
Explains how CNI multiplexers run a default CNI plus N additional plugins to give pods multiple interfaces, with Multus CNI as the reference meta-plugin and… | ||
| Beyond Getting Started: Using OpenTelemetry to Its Full Potential | Sergey Kanzhelev, Morgan McLean | 37m |
Live demos show Node.js + OpenTelemetry automatically instrumenting HTTP calls and producing a root span plus child spans (three spans visible in Jaeger), then… | ||
| gRPC Deep Dive: Prevent Your Service From Overtaking Itself | Lidi Zheng | 32m |
gRPC implements built-in per-stream flow control and connection-level windows so fast senders don’t swamp receivers, using a token-bucket style window and… | ||
| Deep Dive: CNI | Bryan Boreham, Dan Williams | 39m |
CNI is a small spec plus a Go library (libcni) that runtimes call to exec plugins; spec sits at v0.4 while plugins evolve faster and the project is pushing… | ||
| To Infinite Scale and Beyond: Operating Kubernetes Past the Steady State | Austin Lamon, Jago Macleod | 35m |
Spotify runs 280 teams and 1,500 engineers deploying about 1,200 microservices many times per day, so the operational focus is on automating frequent cluster… | ||
| Thanos Deep Dive: Inside a Distributed Monitoring System | Bartłomiej Płotka, Frederic Branczyk | 39m |
Thanos extends Prometheus with a store API that lets queriers fan out to sidecars and a store gateway serving object storage, enabling global queries and… | ||
| Is There a Place for Performance Sensitive Workloads in Kubernetes? | Gergely Csatari, Levente Kale | 40m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Intro: Prometheus | Matt Layher, Ganesh Vernekar | 33m |
Prometheus is a single Go binary that scrapes instrumented apps and exporters (Go/Python/Java/Ruby/C/Rust), stores samples in a local TSDB with a write‑ahead… | ||
| Building and Managing a Centralized Kubeflow Platform at Spotify | Keshi Dai, Ryan Clough | 38m |
Spotify moves ML workflows into Kubernetes using Kubeflow and Kubeflow Pipelines, builds a centralized platform on GKE with Terraform modules driving GCP… | ||
| Knative - The Security Platypus? | Ariel Shuper | 32m |
Knative extends Kubernetes to run event-driven containers but inherits a different threat model than Lambda: a live demo uses the OWASP serverless vuln on AWS… | ||
| CoreDNS Deep Dive | John Belamaric | 37m |
Describes three concrete extension paths: clone from GitHub, modify plugin.cfg, build with Docker/go image to produce a static CoreDNS binary that includes an… | ||
| Panel: Enterprise-grade, On-prem Kubeflow in the Financial Sector | Laura Schornack, Jeff Fogarty, Josh Bottum, Thea Lamkin | 37m |
Enterprise Kubeflow on-prem details: deployments use Arrikto-style local-disk provisioning with dynamic local PV snapshots exported to object storage for… | ||
| Using TUF and in-toto to Tighten the Release Process. | Santiago Torres-Arias, Justin Cappos | 37m |
Describes a concrete pipeline hardening: use TUF to enforce root / targets / snapshot / timestamp roles with separated keys, threshold signing and built-in… | ||
| Build Your Own Private 5G Network on Kubernetes | Frank Zdarsky, Raymond Knopp | 33m |
Claims that a full private 5G stack runs on commodity servers and cheap radios using OpenAirInterface and Kubernetes. It uses OpenAirInterface, commodity USRP… | ||
| Kubernetes Storage Cheat Sheet for VM Administrators | Manu Batra, Jing Xu | 30m |
Compares VM and Kubernetes storage with concrete mappings: use PersistentVolumeClaim (PVC) to request space and PersistentVolume (PV) to represent actual… | ||
| Kubeflow: Multi-Tenant, Self-Serve, Accelerated Platform for Practitioners | Kam Kasravi, Kunming Qu | 34m |
Kubeflow adds a profile CR that creates a per-user workspace namespace with owner/invite/revoke controls, a UI and CLI for self-service, and admin-resettable… | ||
| CNCF Research User Group | Bob Killen | 38m |
CNCF Research User Group organizes a mission-driven repo, runs a 21-response survey and an “awesome” resources list, and coordinates with upstream… | ||
| Deep Dive: Contributor Experience SIG | Christoph Blecker, Nikhita Raghunath | 39m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Deep Dive Into API Machinery | Antoine Pelisse, Stefan Schimanski | 28m |
Details on marking CRD fields immutable, strict defaulting/validation/equality and new list semantics in v1.16 (lists-as-set and lists-as-map with key fields)… | ||
| Intro: vSphere Cloud Provider and CSI | Fabio Rapposelli | 38m |
Explains that Kubernetes integration with vSphere moves from in-tree code to CSI and out-of-tree cloud provider, both now GA (cloud-provider v1.0.3, capv… | ||
| Deep Dive: Brigade | Matt Butcher, Kent Rancourt | 38m |
Brigade routes external events into Kubernetes by having gateways create a Kubernetes secret that the controller watches; a minimal Rust gateway example is… | ||
| Helm 3 Deep Dive | Taylor Thomas, Martin Hickey | 36m |
Helm 3 is released with no more Tiller and a client-only architecture; release metadata moves from ConfigMaps to per-namespace Kubernetes Secrets and follows… | ||
| Mitigating Noisy Neighbours: Advanced Container Resource Management | Alexander Kanevskiy | 36m |
Claims a working proof of concept that adds fine grained control beyond CPU/memory by proxying CRI calls and pushing node level knobs into runtimes and the… | ||
| Deep Dive into Autoscaling | Marcin Wielgus, Vivek Bagade | 37m |
Explains HPA, VPA and Cluster Autoscaler internals and how they interact to cut cloud bills: recommend price expander by default, describe expanders… | ||
| Going Beyond the Node – Using VK to Realize Crazy Ideas | Brian Goff, Deep Kapur | 37m |
Virtual-kubelet (vk) runs as a node by importing its library and implements node and pod controllers to register nodes and reconcile pod lifecycle; providers… | ||
| Intro: Scheduling SIG | Wei Huang, RaviSantosh Gudimetla | 39m |
Explains the scheduler’s actual workflow: informer-based cache, priority queue, optimistic binding with asynchronous HTTP bind calls, and filter+score phases… | ||
| Developing Operators with the Kubernetes Operator Pythonic Framework (kopf) | Sergey Vasilyev | 34m |
Kopf is a Python operator framework that claims you can implement an operator in three lines of code and run it locally with kopf run file.py. It provides… | ||
| K9P: Kubernetes as 9P Files | Terin Stock | 30m |
K9P exposes a Kubernetes cluster as a Plan 9 9P filesystem: resources map to directories, writing a number to a scale file changes ReplicaSet/Deployment sizes… | ||
| Panel: GitOps User Stories | Tamao Nakahara, Stefan Prodan, Javeria Khan, Hubert Chen, Edward Lee | 35m |
Git commits drive deployments, not manual kubectl: teams use Flux and a Flux Helm operator to continuously apply repo state, Flagger to do canary rollouts… | ||
| Deep Dive: Prow | Steve Kuznetsov, Alvaro Aleman | 33m |
Prow is a Kubernetes-native CI/CD and automation system; the talk covers new features added to Prow such as a revamped Prow monitoring stack, integration of… | ||
| Deep Dive: Kubernetes Working Group for Multi-tenancy | Sanjeev Rampal, Adrian Ludwin | 35m |
Working Group demonstrates concrete artifacts: a tenant CRD that self-provisions tenant admin namespaces and per-tenant namespaces, a hierarchical namespace… | ||
| Use Your Favorite Developer Tools in Kubernetes With Telepresence | Abhay Saxena | 42m |
Telepresence lets code run on a laptop while the Kubernetes cluster and API gateway treat it as if it were in-cluster, demonstrated by swapping a deployment… | ||
| Fidelity’s Move to “Finance Grade” Kubernetes with GitOps | Alexis Richardson, Rajarajan Pudupatti SJ | 32m |
Fidelity builds a reproducible, auditable GitOps platform on AWS EKS where a global platform repo tags platform versions and per-cluster repos hold a pointer… | ||
| Let's Try All the CRI Runtimes: Part 2: Answering the Why Question! | Phil Estes | 37m |
Compares Docker, containerd and cri-o plus sandboxes Kata, Firecracker and gVisor and explains why each is chosen: Docker stays dominant for compatibility and… | ||
| Intro to the CNCF SIG Storage | Quinton Hoole, Alex Chircop | 33m |
SIG Storage maintains a public repo, meets twice a month on the second and fourth Wednesdays, and publishes concrete artifacts: a storage landscape white… | ||
| Serverless Platform for Large Scale Mini-Apps: From Knative to Production | Yitao Dong, Ke Wang | 39m |
Ant Financial describes a production serverless stack built on Knative that fixes cold starts, cost and scale. They implement a pod pool prewarm that injects… | ||
| Scaling Your Cluster (Both Ways) | Scott Coulton, Patrick Chanezon | 31m |
Shows how to scale pods and node capacity using virtual kubelet backed by Azure Container Instances (ACI) and how KEDA integrates with Kubernetes’ Horizontal… | ||
| How Container Networking Affects Database Performance | Tyler Duzan, Vadim Tkachenko | 35m |
Percona XtraDB Cluster (3‑node PXC) on Kubernetes is benchmarked with sysbench/TPCC on a 4‑node lab: 10Gb internal NICs, 1Gb external, local SSDs, iperf for… | ||
| Moving from Legacy Infrastructure to the Cloud in a Government Organization | Chris Carty | 35m |
City of Ottawa builds a hybrid Kubernetes platform with fully automated CI/CD pipelines using Flux, Open Policy Agent, Linkerd, Prometheus and NetApp Trident… | ||
| Don’t Catch Feelings, Catch Issues With Kuberhealthy | Joshulyne Park, Shilla Saebi | 25m |
Kuberhealthy is a synthetic-monitoring operator that runs user-provided check containers and claims to catch cluster and app issues before developers see them… | ||
| Stitching a Service Mesh Across Hundreds of Discrete Networks | Jason Webb, Anil Attuluri | 39m |
Intuit runs about 160 clusters and ~5,400 globally unique namespaces and moves from a shared Istio control plane to per-cluster control planes plus a… | ||
| OPA Deep Dive | Tim Hinrichs, Torin Sandall | 45m |
OPA is a lightweight policy engine that takes JSON inputs and returns JSON decisions, used as a local daemon or Go library and integrated via Kubernetes… | ||
| Fluent Bit: Logging and Data Processing on the Edge | Eduardo Silva, Masoud Koleini | 44m |
Fluent Bit is a C-based, MessagePack-backed log agent with a pluggable input/filter/output pipeline and an added stream processing on the edge layer that runs… | ||
| Deep Dive: Apps SIG | Janet Kuo, Ken Owens | 43m |
Controller code lives in the kubernetes repo under package/controller and runs inside the controller manager binary; it uses shared informer caches (always… | ||
| Growth and Design Patterns in the Extensions Ecosystem | Eric Tune | 33m |
GitHub scraping finds about 67,000 CRDs and roughly 56,000 distinct KRM types across two years, with ~136 types inside CNCF projects and a projection of ~1,000… | ||
| Practical Way to Build Kubernetes Native Java Controller | Zibo He, Min Jin | 31m |
A Java-native controller runtime ports Kubernetes controller primitives onto the official Java client, implementing Informer/store/queue/leader-election so… | ||
| Public Technical Oversight Committee (TOC) Meeting | Liz Rice, Alexis Richardson, Joe Beda, Jeff Brewer, Michelle Noorali, Matt Klein | 41m |
CNCF TOC describes a governance shift: nine-member TOC expands to two more TOC members with elections in February, and SIGs now act as project filters and… | ||
| Are We There Yet? My Experience Leading a Kubernetes Release Team | Claire Laurence | 26m |
9-month journey that goes from 9 months and 3 releases to running the 1.15 cycle: leads manage a fully distributed volunteer team via Slack, GitHub, Zoom and… | ||
| Realizing End to End Reproducible Machine Learning on Kubernetes | Suneeta Mall | 30m |
Nearmap processes petabyte-scale aerial imagery and demonstrates an end-to-end reproducible ML pipeline on Kubernetes that actually runs at scale: 2,000 GPUs… | ||
| How to Include Latency in SLO-based Alerting | Björn Rabenstein | 36m |
Concrete recipe: convert latency violations into errors by counting requests above a threshold (e.g., 99.9% < 1s for writes, 99.95% < 2.5s for reads) using… | ||
| Jaeger Deep Dive | Yuri Shkuro, Pavol Loffay | 40m |
Explains Jaeger internals: Go collectors and UDP/agent or sidecar forwarding, storage choices (Cassandra, Elasticsearch, Badger local), React UI, and… | ||
| Deep Dive: Flux the GitOps Operator for Kubernetes | Stefan Prodan | 48m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Binary Authorization in Kubernetes | Aysylu Greenberg, Liron Levin | 36m |
Kritis enforces deploy‑time image policies in Kubernetes using Grafeas metadata and an admission webhook; Helm charts install a Grafeas server (in‑memory or… | ||
| CNCF SIG-Security Deep Dive | Jeyappragash Jeyakeerthi, Zhipeng Huang | 33m |
SIG-Security outlines an active policy stack: a partly implemented formal verification engine that encodes a policy spec, checks execution correctness and… | ||
| SIG Cloud Provider Deep Dive | Walter Fender, Yassine Tijani | 43m |
SIG Cloud Provider explains how cloud code leaves the Kubernetes tree and what actually gets built to migrate safely: cloud controller managers move… | ||
| SIG Service Catalog Deep-Dive | Jonathan Berkhahn, Mateusz Szostok | 32m |
Service Catalog migrates from the old aggregate API server to CRD-based resources, replacing field-selector queries by copying fields into labels… | ||
| SIG Release - Deep Dive: Release Engineering Subproject | Stephen Augustus, Hannes Hörl | 38m |
Release engineering is extracting the release pipeline from Google-only infrastructure into community-owned systems, instrumenting each release stage and… | ||
| Scaling SPIRE for Performance and Availability | Tyler Julian | 34m |
SPIRE is the SPIFFE runtime that bootstraps workload identity using short-lived X.509 certs served by local agents and signed by a control-plane server; agents… | ||
| SIG Testing Intro | Sean Chase, Erick Fejta | 31m |
Kubernetes SIG Testing manages over 180 GitHub repos and publishes results from over 10,000 jobs per day using a CI system that runs arbitrary images as prowl… | ||
| Minikube | Thomas Strömberg, Medya Ghazizadeh | 47m |
Minikube runs real kube binaries (supports ~Kubernetes 1.11–1.17), uses kubeadm for cluster bootstrap, caches images for offline use, and ships monthly… | ||
| Deep Dive: Kind | Benjamin Elder, Antonio Jose Ojea Garcia | 31m |
Kind runs Kubernetes nodes as Docker containers and boots a single-node cluster in ~30 seconds, letting teams build and run k8s from source and side‑load… | ||
| Running Large-Scale Stateful Workloads On Kubernetes at Lyft | Surinder Singh, Anmol Khurana | 34m |
Lyft runs stateful Spark/Flink and ML pipelines on a homegrown platform called Flight and drives tens of thousands of concurrent jobs and tens of millions of… | ||
| CSI Volume Snapshots: On the Way to Faster and Better Backups | Adnan Abdulhussein, Nolan Brubaker | 28m |
CSI Snapshot API gives a single, provider-agnostic way to create and restore block or file-volume snapshots; Kubernetes exposes… | ||
| Panel: Tech Community Share Out: Maintaining a Healthy Balance with Work | Chris Lentricchia, David McAllister, PJ Hagerty, Nanci Lancaster, Amanda Brazzell | 36m |
Panelists present concrete, actionable tactics for preventing burnout: adopt a no screens before work morning routine, use five-minute breathing exercises… | ||
| A Series of Fortunate CloudEvents | Ian Coffey | 33m |
Creates a tiny running system on a kind cluster with Knative Eventing (broker + ingress/filter channels), container sources and triggers to route CloudEvents… | ||
| From Brownfield to Greenfield: Istio Service Mesh Journey at Freddie Mac | Shriram Rajagopalan, Lixun Qi | 40m |
Freddie Mac migrates a hybrid estate of VMs and Kubernetes with Istio/Envoy to get uniform mTLS, telemetry and policy without refactoring every app. POCs add a… | ||
| KubeEdge Deep Dive | Sean Wang | 45m |
KubeEdge extends Kubernetes to run containers at the edge and claims a real deployment that will manage roughly a quarter million containers across China. It… | ||
| KubeVirt Deep Dive: Virtualized GPU Workloads on KubeVirt | David Vossel, Vishesh Tanksale | 37m |
KubeVirt runs full VMs as pods using virt-controller, virt-launcher and virt-handler, mapping VM CPU/memory to pod requests and PVCs for VM disks. NVIDIA… | ||
| There's a Bug in My Service Mesh! What Do You Do When the Mesh is At Fault? | Ana Calin, Risha Mars | 28m |
Paybase runs 50+ microservices and adds Linkerd sidecar proxies for gRPC load balancing; deployment surfaces obscure bugs where headers get split across HTTP/2… | ||
| Cruise’s Self-Driving Networking Journey | Bernard Van De Walle, Jon Yucel | 32m |
Cruise scales Kubernetes across GCP regions to an average of 7k pods and solves cross-VPC routing by replacing point-to-point VPNs with interconnects with BGP… | ||
| Open Source Weave Ignite - The GitOps VM | Mark Emeis | 44m |
Weave Ignite packages Firecracker microVMs with OCI images + containerd + CNI so VMs look and behave like containers; it uses device‑mapper snapshots, an… | ||
| On the Security of Copying To and From Live Containers | Ariel Zelivansky, Yuval Avrahami | 29m |
Survey of copy implementations across Docker, Podman and Kubernetes shows concrete attacks: a Docker copy exploit POC loads container-controlled shared libs… | ||
| Emitting, Consuming, and Presenting: The Event Lifecycle | Jesse Dearing | 44m |
Shows how to emit real Kubernetes Event objects (must include UID and resourceVersion to appear in kubectl describe), consume them with a Python watch or use… | ||
| Redesigning Notary in a Multi-registry World | Justin Cormack | 36m |
Notary 2.0 redesign proposes storing signature objects in the registry next to blobs so signatures travel with images, using detached signatures that sign… | ||
| Shipping Metrics From the Edge | Matthias Loibl | 28m |
Edge Prometheus runs on tiny devices (k3s on Raspberry Pi) and uses remote_write to replicate Prometheus WALs into a scalable ingestion layer: a Thanos receive… | ||
| CRI-O: Under the Hood | Mrunal Patel, Sascha Grunert | 37m |
CRI-O shows how it actually orchestrates container lifecycles by calling lower-level runtimes such as runc to create and stop containers and by exposing… | ||
| Implementing a Consumer Focused SLA for a Kubernetes Based PaaS | Shrenik Dedhia | 37m |
Box runs ~150 services on ~25,000 pods (9,000 in the largest cluster) and moves from crude API 500 checks and synthetic probes to a consumer-facing SLA based… | ||
| Meet the Gears Behind Kubernetes APIs: Introduction to SIG API-Machinery | Federico Bongiovanni | 33m |
SIG API-Machinery runs the kube-apiserver, controller framework, client-go and extension plumbing that make custom resources behave like native objects; CRDs… | ||
| Deep Dive: Harbor - Enterprise Cloud-native Artifact Registry | Steven Zou, Daniel Jiang | 43m |
Harbor demonstrates concrete features: quota management counts artifacts and storage per project and rejects pushes past threshold, tag retention runs… | ||
| Intro: SIG Cluster Lifecycle | Timothy St. Clair | 35m |
SIG Cluster Lifecycle is shipping a composable installer stack: kubeadm as the universal bootstrapper (phased, reusable commands) plus cluster add‑ons and an… | ||
| Intro: Telepresence | Daniel Bryant, Rafael Schloming | 30m |
Telepresence swaps a deployment with a two-way proxy so a locally running process receives real ingress traffic and calls cluster services (demo: swapped the… | ||
| Deep Dive: Cloud Native Buildpacks | Joe Kutner, Stephen Levine | 46m |
Cloud Native Buildpacks produce OCI images from source using the pack CLI and a builder image that bundles a lifecycle, buildpacks and a stack (Heroku uses… | ||
| Kubernetes SIG Instrumentation - Deep Dive | Han Kang, David Ashpole | 40m |
Kubernetes adds a concrete metrics lifecycle: a metric stability framework that tags metrics with stability and deprecation, enforces registration through… | ||
| The Myth of the Monocluster | Matt Silverlock | 31m |
Argues a single monolithic Kubernetes cluster increases blast radius and operational friction, citing control-plane and DNS bottlenecks (about 30 public… | ||
| Geo-partitioning with Vitess | Deepthi Sigireddi, Jiten Vaidya | 48m |
Shows a working Vitess cluster on GKE that enforces data residency by mapping country bytes to shard ranges, using a custom multi-column region Vindex that… | ||
| Developer Experience on CD: Build a CD Platform to K8s that Developers Love | Euccas Chen, Tobi Ogunnaike | 36m |
Pinterest builds a Kubernetes-first CD platform called Hermez that reduces manifest size (380 lines to 25 via 60 CRDs), integrates with existing systems like… | ||
| Writing a Kubernetes Operator: the Hard Parts | Sébastien Guilloux | 34m |
Built an Elastic operator (ECK) using Kubebuilder and controller-runtime and describes concrete problems and fixes: caches are eventually consistent so… | ||
| Cloud Native Architecture: Monoliths or Microservices? | Goutham Veeramachaneni, Edward Welch | 35m |
Argues that building a single binary composed of modular components lets projects start simple and scale into microservices later — examples: Thanos, Loki and… | ||
| Panel: Beyond Codes of Conduct: Igniting Diversity in Your Community | Jemma Bolland, Lara Owen, Shanis Windland, Kevin Stewart | 42m |
Kubernetes community keeps a strict code of conduct and even bans harmful attendees, and GitHub lists concrete features: explicit consent for repo invites, a… | ||
| Leveling Up Your CD: Unlocking Progressive Delivery on Kubernetes | Daniel Thomson, Jesse Suen | 35m |
Intuit describes a concrete progressive delivery stack: Argo Rollouts plus new CRDs for analysis templates and experiments, tying canary and blue‑green… | ||
| Are You About to Break Prod? Acceptance Testing with Ephemeral Environments | Erin Krengel, Sean Holung | 34m |
Demonstrates a concrete pipeline that spins ephemeral environments with Pulumi and deploys the exact Docker image used in production, runs Kubernetes Jobs to… | ||
| Education as a Service: Containerization and Orchestration of CS50 IDE | Kareem Zidane, David J. Malan | 30m |
CS50 IDE moves from one-VM-per-student to Kubernetes, creating a namespace per user with a PVC and single-container pod that mounts a public SSH key and serves… | ||
| Birds of a Feather: Telecom User Group | Cheryl Hung, Dan Kohn, Taylor Carpenter | 27m |
CNF Testbed shows a reproducible pipeline for migrating VNFs to Kubernetes with runnable examples in the CNF testbed repo and live provisioning on Packet bare… | ||
| Deep Dive: CNCF CI | W. Watson, Denver Williams | 34m |
cncf.ci v3 validates builds, deployments and e2e tests for CNCF projects (8 graduated, 15 incubating) in neutral bare-metal clusters on Packet, supporting x86… | ||
| Wait, People Run Kubernetes on Mainframes? | Elizabeth K. Joseph | 29m |
Mainframes run Linux and are a viable Kubernetes host: there are s390x Kubernetes builds and distributions (SUSE, Ubuntu, RHEL) with tested packages, OpenShift… | ||
| NHD - A Topology-Aware Scheduler for K8s for Low-Latency & HPC Applications | Cliff Burdick | 47m |
A Kubernetes custom scheduler that places pods by NUMA + PCIe + hyperthreading topology and enforces core isolation via an isolcpus + cpusets daemon, it… | ||
| Krane: A Developer-Centric Deploy Tool | Daniel Turner, Katrina Verey | 31m |
Krane is an open-source Ruby CLI and gem from Shopify that manages a Kubernetes namespace and turns Kubernetes’ async convergence into a clear pass/fail… | ||
| Flyte: Cloud Native Machine Learning & Data Processing Platform | Ketan Umare, Haytham Abuelfutuh | 38m |
Flyte is Kubernetes native, runs as Lyft’s orchestration fabric for ML and ETL, and executes 10M+ containers per month across ~3500 workflows. It provides a… | ||
| Deep Dive into Cloud Provider Azure | Pengfei Ni, Brendan Burns | 35m |
Covers Azure’s concrete engineering: decoupling the cloud provider into an out-of-tree cloud provider with a Cloud Controller Manager and cloud-node-manager… | ||
| The Great Cardinality Disasters of Our Time | Bryan Boreham, Chris Marchbanks | 39m |
Prometheus deployments hit real limits: queries over 100,000 series slow or time out, a single server struggles past ~10 million series, and mislabels can… | ||
| Deep Dive: Linkerd | Oliver Gould | 35m |
A pragmatic history of Linkerd explains decisions and the current architecture: a small Rust proxy sidecar per pod, a Go control plane with Kubernetes… | ||
| OpenFaaS Cloud + Linkerd: A Secure, Multi-Tenant Serverless Platform | Charles Pretzer, Alex Ellis | 31m |
Combines OpenFaaS Cloud with Linkerd to deliver a multi-tenant serverless platform that auto-builds and deploys from Git (demo shows 11 seconds from git push… | ||
| Throttling: New Developments in Application Performance with CPU Limits | Dave Chiluk | 39m |
Explains that CFS quota slices and per-CPU expiration cause unexpected throttling on high-core nodes: a leftover 1ms slice per CPU can cost up to 0.87 CPU loss… | ||
| How Spotify Migrated Ingress HTTP Systems to Envoy | Erica Manno, Vladimir Shakhov | 36m |
Spotify replaces a brittle Nginx/HAProxy perimeter with Envoy proxies and a unified control plane, migrating 130 HTTP upstreams and a web player that handles… | ||
| Everything Worked Before Kubernetes | Vicki Cheung | 14m |
A history of growing pain from single monoliths to distributed services and machine learning fleets shows why ops becomes the bottleneck and why the community… | ||
| Network, Please Evolve – Chapter 2 | Vijoy Pandey | 06m |
Demonstrates a concrete solution for multi‑cluster DB replication that hides IPs and routes by adding one line to Kubernetes CRDs to extend your CRD with a DB… | ||
| The Long Road to IPv4/IPv6 Dual-stack Kubernetes | Tim Hockin, Khaled (Kal) Henidak | 17m |
Kubernetes lands IPv4/IPv6 dual-stack in phases: a KEP in mid‑2018, late‑2017 start, then a three‑phase plan—egress, ingress, ecosystem—and the project changes… | ||
| Making the Impossible Possible with Kubernetes | Rae Wang | 05m |
Kubernetes powers concrete outcomes: physicists at CERN recreate Higgs-boson workflows on Kubernetes, a gaming platform MVP ships in three months enabling… | ||
| E2E 5G Cloud Native Network | Heather Kirksey, Azhar Sayeed, Qiao Fu | 34m |
Live prototype of a fully containerized end-to-end 5G network spans lab POPs in France, Montreal and San Diego and actually rings a phone: an IMS-backed live… | ||
| Cloud Provider OpenStack Community Session | Kendall Nelson, Aditi Sharma | 18m |
Overview of concrete migration steps and current feature state for OpenStack integration: Kubernetes moves providers out of tree so users must deploy cloud… | ||
| Introduction to Notary | Justin Cormack | 33m |
Notary implements TUF for container images and is already used by Docker Hub, Azure Container Registry and Harbor; it separates a metadata server and an… | ||
| SIG Auth Update and Deep Dive | Mo Khan, Mike Danese, Tim Allclair | 01h 32m |
SIG Auth reports active work to stabilize long-lived beta features, clean up deprecated admission controllers, and close tech debt; pod security policy (PSP)… | ||
| Intro + Deep Dive - Provider IBM Cloud | Sahdev P. Zala, Brad Topol, Richard Theis, Ian Watts | 01h 08m |
IBM details concrete work: a plan to migrate KCM to CCM (targeting Kubernetes 1.17), a dependency matrix and a public tracking sheet, and a migration challenge… | ||
| Governance on K8s: How to Solve Ownership, Metering & Capacity Planning | Micheal Benedict, Yongwen Xu | 33m |
Pinterest runs thousands of services on tens of thousands of hosts serving 250M+ users and 300+ PB of data, and builds a governance platform that ties every… | ||
| KubeDirector - Deploying Complex Stateful Applications on Kubernetes | Joel Baxter, Thomas Phelan | 32m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Supercharge Your Microservices CI/CD with Service Mesh and Kubernetes | Brian Redmond | 34m |
Demo shows an end-to-end CI/CD canary pipeline that actually works: GitHub Actions builds images, pushes to ACR, AKS deploys, Flagger drives traffic splits via… | ||
| Securing Your Services with Authentication, Authorization, and RBAC in gRPC | Luis Pabón | 30m |
Shows a working gRPC auth system that uses JWT tokens validated with either a shared secret or public/private keys and optionally via OpenID Connect (Keycloak… | ||
| How Kubernetes Components Communicate Securely in Your Cluster | Maya Kaczorowski | 31m |
Explains exactly which Kubernetes pieces hold trust: the kube-apiserver, kubelet and etcd, and what is actually protected. Claims the apiserver→kubelet path is… | ||
| Kubernetes Policy Enforcement Using OPA At Goldman Sachs | Miguel Uzcategui, Tim Hinrichs | 37m |
Goldman Sachs runs OPA on 12 shared Kubernetes clusters (avg 159 namespaces/cluster) for both validating admission control (e.g., preventing conflicting… | ||
| Handling Risky Business: Cluster Upgrades | Puneet Pruthi | 35m |
Company builds a small Golang controller called k8srotator that runs as a single-pod custom controller on each cluster, watches ConfigMap triggers, flips a… | ||
| Fine Grained Mesh Metrics for Better Visibility With Native Performance | Mandar Jog, Kuat Yessenov | 36m |
Adds a compact metadata exchange protocol between Envoy sidecars plus a cacheable key/payload design and optional HTTP/2 metadata frames or TLS ALPN… | ||
| Evolving the Kubernetes Ingress APIs to GA and Beyond | Christopher M. Luciano, Bowei Du | 35m |
Ingress moves into networking.k8s.io with concrete GA work: rename backend → defaultBackend, add pathType: Exact/Prefix/ImplementationSpecific (fixes ambiguous… | ||
| Panel: State of the Kubernetes Union - Steering Committee Discussion | Davanum "Dims" Srinivas, Timothy St. Clair, Jorge Castro, Paris Pittman, Derek Carr, Christoph Blecker, Nikhita Raghunath | 37m |
Kubernetes governance reports concrete steps: meeting times shift to be PAC-friendly and a steering public channel is opened on Slack for real-time… | ||
| Exporting Kubernetes Event Objects for Better Observability | Mustafa Akın, Ahmet Şeker | 25m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| KEDA: Event Driven and Serverless Containers in Kubernetes | Jeff Hollan | 36m |
KEDA 1.0 is an open source Kubernetes operator that provides event-driven autoscaling by feeding queue and stream metrics into the HPA, supporting Kafka… | ||
| Solving Multi-Cluster Network Connectivity With Submariner | Chris Kim, Miguel Angel Ajo Pelayo | 32m |
Connects Kubernetes clusters at IP-level connectivity by establishing IPSec tunnels between elected gateway nodes, with a central broker cluster stores… | ||
| WIGM and Why You Want an Operator | Carson Anderson | 34m |
A tiny app called WIGM (Wasteful Individual GIF Mirror) fetches one GIF, builds an HTML page and serves it with bash on top of nginx to illustrate why an… | ||
| Kubernetizing Big Data and ML Workloads at Uber | Mayank Bansal, Min Cai | 33m |
Uber plans to move Hive/Spark workloads off YARN to Kubernetes to save millions by co‑locating BigData/ML and microservices, and re‑architects Peloton as… | ||
| Life Outside the Cluster: Adding Virtual Machines to an Envoy Service Mesh | Megan O'Keefe, Ameer Abbas | 30m |
Shows a working setup that adds GCE VMs to an Istio/Envoy mesh running on GKE: a VM runs Envoy and a node agent, a Kubernetes Service plus an Istio service… | ||
| Tutorial: Deep Dive into the Operator Framework for Kubernetes | Melvin Hillsman, Michael Hrivnak, Matt Dorn | 01h 29m |
Hands-on tutorial that builds two working operators: a Go-based podset operator that creates pods, stores their names in status and scales between replica… | ||
| Intro + Deep Dive: Specialized Network Protocols for IoT+Edge with Kubernetes | Steven Wong, Dejan Bosanac | 01h 25m |
Survey of protocols compares AMQP, MQTT, CoAP, DDS, OPC UA and Kafka by tradeoffs: resource needs, storage vs transport, and lossy-network behavior; shows… | ||
| Tutorial: Zero to Operator in 90 Minutes! | Solly Ross | 01h 33m |
Hands-on tutorial that builds a Kubernetes operator for the guestbook app using KubeBuilder v2, Kind and server‑side apply, with CRD v1 generation, OpenAPI… | ||
| Cloud Native Runtime Security with Falco | Kris Nova, Abhinav Srivastava | 01h 33m |
Falco captures kernel syscalls via an eBPF probe (with a kernel‑module fallback), enriches each event with container and Kubernetes metadata, and runs as a… | ||
| CloudEvents - Intro, Deep-Dive and More! | Doug Davis, Clemens Vasters, Klaus Deissner, Vladimir Bacvanski | 01h 19m |
CloudEvents v1.0 defines a stable event envelope (JSON default, Avro/Kafka/AMQP bindings, HTTP binary/structured encodings) that over 30 companies adopt and… | ||
| Am I Using It Right? Checking Best Practices on Live Kubernetes Clusters | Varsha Varadarajan, Adam Wolfe Gordon | 33m |
Open source tool clusterlint checks running Kubernetes clusters by fetching all API objects into memory and running parallel checks that report actionable… | ||
| The Gotchas of Zero-Downtime Traffic /w Kubernetes | Leigh Capili | 33m |
Kubernetes defaults cause intermittent 503/502s during rollouts because endpoints are removed before pods finish draining and SIGTERM gets sent; kube-proxy and… | ||
| Kubernetes at Reddit: Tales from Production | Greg Taylor | 32m |
Reddit describes rapid org-wide Kubernetes adoption after a March 2019 InfraRed launch with a two-week onboarding cadence, now running about 45 services in… | ||
| Tinder's Move to Kubernetes | Chris O'Brien, Chris Thomas | 18m |
Tinder moves 200 services to Kubernetes using a builder-container CI/CD that pushes images to ECR and updates Deployments, then peels traffic over with… | ||
| Envoy on Fire: A Practical Look at Debugging a Service Mesh | Lita Cho, Ryan Cox | 33m |
Shows how to triage Envoy with concrete tools: curl the admin config dump to see bootstrap and xDS provenance, enable trace-level logs to find DNS or xDS… | ||
| Prometheus Deep Dive | Ben Kochie | 32m |
Prometheus is an intentionally uncoordinated system with a local TSDB and right‑ahead log, designed to run close to targets for reliable alerting; it… | ||
| GPU as a Service Over K8s: Drive Productivity and Increase Utilization | Yaron Haviv | 34m |
Demonstrates an open source stack that turns notebooks into elastic, GPU-backed functions: MLRun builds and runs jobs on Kubernetes, auto-packages code… | ||
| Intro + Deep Dive: Cloud Native Network Function (CNF) Testbed | Taylor Carpenter, Denver Williams | 01h 21m |
Cloud Native Network Function Testbed splits deployment into two composable stages: hardware provisioning via Terraform + Ansible on Packet bare‑metal… | ||
| Serving HTC Users in Kubernetes by Leveraging HTCondor | Igor Sfiligoi | 31m |
Describes deploying HTCondor inside Kubernetes to serve true HTC workloads—persistent central manager plus scalable execute nodes—claiming production use… | ||
| Five Cool Things You Can Do with Network Service Mesh | Ed Warnicke, Nikolay Nikolaev, Frederick Kautz | 01h 21m |
Network Service Mesh (NSM) shows concrete demos: an HTTP reverse proxy maps headers into NSM labels and consistently routes to different nginx endpoints via… | ||
| SIG Cluster Lifecycle (Cluster API) | Vince Prignano, Ashish Amarnath | 46m |
Cluster API provides a declarative way to create and upgrade Kubernetes clusters across clouds by running controllers and CRDs on a kind management cluster… | ||
| Panel: State of the Operators: Hubs, Frameworks, SDKs, and Beyond | Diane Mueller, Sonam Saxena, Andre Tost | 35m |
Panelists review who is actually building operators and what works: Operator Hub (operatorhub.io) and Operator SDK plus controller-runtime and kubebuilder are… | ||
| Tutorial: Service Mesh for the Developer Workflow | Christian Posta, Nic Jackson | 01h 31m |
Hands-on tutorial shows exactly what gets built and how it runs: a Kubernetes app wired to Envoy sidecars and Consul control plane, tracing added by… | ||
| Tutorial: Debug Your Kubernetes Apps | Arun Gupta, Re Alvarez Parmar | 01h 32m |
Cluster debugging focuses on exact failure modes and fixes: IP exhaustion on AWS CNI explains why 240 replicas stop at ~224; deploy CNI metrics helper to… | ||
| Staying in Tune: Optimize Kubernetes for Stability and Utilization | Randy Johnson, Koushik Radhakrishnan | 39m |
Explains how setting pod requests vs limits drives scheduling, overcommit and eviction behavior, and shows that memory is incompressible so hitting the… | ||
| OpenTelemetry: The First Release, What’s Next, and How to Get Involved | Morgan McLean, Tristan Sloughter, Sergey Kanzhelev, Chris Kleinknecht | 01h 08m |
OpenTelemetry ships a v1 set of client libraries, an in‑process API/SDK split, and a collector/agent sidecar that can sample, redact and transform telemetry… | ||
| Enforcing Service Mesh Structure using OPA Gatekeeper | Sandeep Parikh | 35m |
Describes deploying OPA Gatekeeper as a Kubernetes admission controller that embeds Rego rules inside a constraint template and applies per-namespace… | ||
| Tutorial: Mastering Multi-version CRDs: From YAML to a Serious Development Project | Stefan Schimanski, Joe Betz | 01h 39m |
Starts from a YAML-only CRD and converts it into a multi-version, production-grade API using codegen and webhooks. Uses controller-gen to emit OpenAPI schemas… | ||
| The Elephant in the Kubernetes Room: Team Interactions at Scale | Manuel Pais | 36m |
Kubernetes adoption requires an explicit internal platform team rather than expecting every product team to run clusters; Airbnb builds a small CLI called cube… | ||
| K3s Under the Hood: Building a Product-grade Lightweight Kubernetes Distro | Darren Shepherd | 34m |
K3s packages a full Kubernetes control plane as a single 50MB binary that runs a ~300MB single-node server and ~150MB agents by combining components (API… | ||
| Walk-through: Debugging an RBAC Problem in Istio (But Without the Swearing) | Matt Turner | 31m |
Reproduces a real Istio RBAC outage and shows exact steps to find the root cause: requests get 403 because Envoy sidecar denies them when caller identity is… | ||
| How Yelp Moved Security From the App to the Mesh with Envoy and OPA | Daniel Popescu, Ben Plotnick | 40m |
Yelp replaces app-level auth with a host-side mesh using Envoy for mTLS and JWT-based authn and OPA for authz, protecting hundreds of services serving >100M… | ||
| Tutorial: Everything You Need To Become a GitOps Ninja | Alex Collins, Alexander Matyushentsev | 01h 19m |
Defines GitOps as Git as the single source of truth and an agent that ensures the cluster matches that repo, and walks through a hands-on lab using Argo CD… | ||
| Creating a Micro Open-Source Community with Helm | Katie Gamanji | 22m |
Condé Nast runs a self-hosted Kubernetes platform (Tectonic) across nine clusters in five regions and migrates ~35 sites, serving ~260M pageviews; Helm is the… | ||
| Identity Bootstrapping in Multi-tenant Multi-cluster Kubernetes | Manish Mehta, Derek Suzuki | 37m |
Volterra demonstrates pod-level x.509 identities issued by a per-customer CA with private keys generated and stored inside each pod so keys never leave the… | ||
| Prepare to Be Boarded! A Tale of Kubernetes, Plunder, and Cryptobooty | James Condon | 31m |
A Kubernetes honeypot exposed via dashboard and insecure API takes 31 days to compromise despite constant internet scanning. Daily scans show about 500 exposed… | ||
| Gone in 60 Minutes: Migrating 20 TB from AKS to GKE in an Hour with Vitess | Derek Perkins | 33m |
Claims a production migration of 20 TB in under an hour from AKS to GKE using Kubernetes plus Vitess, performed by taking backups to GCS, restoring shards… | ||
| Making Plugins Mainstream: Developing a Plugin Manager for Kubectl | Ahmet Alp Balkan | 38m |
A package-style manager called krew makes kubectl plugins discoverable, installable, upgradeable and removable across platforms by using simple plugin… | ||
| Building a Medical AI with Kubernetes and Kubeflow | Jeremie Vallee | 35m |
Moves heavy ML workloads from bare metal into Kubernetes and Kubeflow, combining Kubernetes, Kubeflow, Argo, Istio, OPA, Flux, Prometheus, Grafana, Vault to… | ||
| Running High-performance User-space Packet Processing Apps in Kubernetes | Abdul Halim, Peng Liu | 36m |
Shows how to run real DPDK VNFs on Kubernetes using DPDK testpmd + pktgen and SR‑IOV passthrough, with Multus, an SR‑IOV device plugin and an SR‑IOV Network… | ||
| Supercharge Kubeflow Performance on GPU Clusters | Meenakshi Kaushik, Neelima Mukiri | 34m |
Lab tests on a Cisco UCS 480 ML with eight GPUs use a ResNet TF benchmark and show image throughput rising as GPUs scale and falling by ~40–50% without NVLink… | ||
| Ready to Serve! Speeding-Up Startup Time of Istio-Powered Workloads | Michal Malka, Etai Lev-Ran | 36m |
Measured Istio-enabled pod startup increases from about 3.5s to ~8.5s (≈+5s) when using sidecar injection; timing comes from per-container tracing spans… | ||
| Cloud Native Smart Contract with Knative | Jay Guo, Ying Chun Guo | 34m |
Hyperledger Fabric offloads smart contract lifecycle to Tekton and Knative so peers stop requiring a local Docker daemon and contracts run as on‑demand… | ||
| Deep Linking Metrics and Traces with OpenTelemetry, OpenMetrics and M3 | Rob Skillington | 37m |
Claim: metric datapoints carry trace IDs as exemplars in OpenMetrics so dashboards can jump straight to the exact trace. Implementation uses OpenTelemetry… | ||
| Intro + DeepDive: SIG Scalability | Wojciech Tyczyński, Mateusz Matejczyk | 01h 05m |
Defines a practical scalability envelope using SLIs/SLOs (roughly 99% of API calls within 1s and 99% of pod startups within 5s), tests against concrete limits… | ||
| Everything You Always Wanted to Know About SIG-CLI but Were Afraid to Ask | Phillip Wittrock, Maciej Szulik, Sean Sullivan | 01h 30m |
kubectl is actively extracted from the monorepo into a staging repo (95% of commands already moved, hourly sync to kubernetes/kubectl) so releases can be… | ||
| SIG Cluster Lifecycle (kops) | Justin Santa Barbara | 35m |
kops updates focus on concrete engineering: etcd-manager and etcdadm migrate clusters to etcd3, a new control-plane controller securely applies node labels… | ||
| Workshop on Defining a Reference Model for Cloud-Native Application Delivery | Alois Reitbauer, Lei Zhang | 37m |
Proposal of a layered reference model that pins down what “application” means (metadata + resource graph) and where projects actually sit: application… | ||
| CNCF's Serverless WG - Tell Me Where it Hurts | Doug Davis, Mark Peek, Ruben Romero Montes | 01h 32m |
CNCF Serverless WG forms in 2017 and publishes a white paper (30+ contributors) in early 2018; cloud events spins out as a sandbox in Dec 2017 and reaches… | ||
| Containerd Mini-Summit | Phil Estes, Lantao Liu, Derek McGowan, Yu-Ju Hong | 01h 33m |
Project status and concrete changes: containerd is a graduated CNCF project with a couple hundred contributors, 13 maintainers, and adoption across GKE, IKS… | ||
| K8s Conformance & SIG Architecture Conformance Subgroup | Hippie Hacker, Dan Kohn, John Belamaric | 35m |
Kubernetes conformance program starts two years ago and grows from about 22–24 to 102 certified vendors, with badges valid for one year unless re-certified… | ||
| Release the Kraken: Bring Sidecar Containers to Next Level | Di Xu, Xiaoyu Zhang | 25m |
Sidecar lifecycle and upgrade control for large Kubernetes fleets: introduces Sidecar Set (Alibaba open source) that adds a new CRD plus a mutation webhook to… | ||
| Deep Dive Into the Latest Kubernetes Scheduler Features | Abdullah Gharaibeh | 42m |
Kubernetes scheduler core is refactored into a scheduling framework alpha with extension points (preFilter, filter, score, normalizeScore, reserve, permit… | ||
| CoreDNS: Beyond the Basics | Cricket Liu, John Belamaric | 35m |
CoreDNS claims production-ready DNSSEC with both on-the-fly signing (sign plugin) and traditional zone signing using dnssec-keygen (example uses ECDSA keys and… | ||
| Securing Communication Between Meshes and Beyond with SPIFFE Federation | Evan Gilman, Oliver Liu | 32m |
Demonstrates SPIFFE federation enabling cross-domain authentication between an Istio mesh and a SPIRE-managed VM fleet: it exchanges authority public keys via… | ||
| Linux Distribution Build Tools for Custom Container Images | Nisha Kumar, Joshua Lock | 34m |
Experiments use Debian/Debos, Buildroot, Yocto and Guix to build reproducible container images and evaluate ease, size, effort and SBOM availability. Debos… | ||
| Building a Dev/Test Loop for a Kubernetes Edge Gateway with Envoy Proxy | Flynn | 26m |
Open source Ambassador sits on Envoy and is hard to test so the project replaces slow, brittle compiler tests with a fast local path plus targeted end to end… | ||
| RDMA Enabled Kubernetes for High Performance Computing | Jacob Anders, Feng Pan | 34m |
Describes a Kubernetes setup that wires RDMA-capable NICs into pods using Multus CNI plus a custom SR-IOV device plugin and SR-IOV CNI, coordinates with CPU… | ||
| Building and Scaling Cloud Native Nordics; Tips, Tricks, and Lessons Learned | Lucas Käldström, Kasper Borg Nissen | 37m |
Built a decentralized Cloud Native Nordics network of 12 meetup groups across five countries with almost 6,000 members and 95 meetups, using a GitHub-backed… | ||
| Bringing the Envoy Service Mesh to Mobile | Jose Nino, Michael Schore | 36m |
Lyft builds Envoy Mobile as a multi-platform networking library (Swift/Kotlin) and ships Envoy Mobile 0.2 into an alpha release of the Lyft app, running the… | ||
| Envoy Overview and Maintainer Q&A | Harvey Tuch, Lizan Zhou, Stephan Zuercher, Snow Pettersen | 01h 02m |
A fast C++14 network proxy that becomes an out‑of‑process universal data plane, built with L3/L4 and L7 filter stacks and pluggable extensions; supports… | ||
| SIG-Network Intro & Deep-Dive | Tim Hockin, Vallery Lancey | 01h 28m |
Kubernetes networking primer then deep dive into recent work: CNI + NetworkPolicy behavior, Services/Endpoints and kube-proxy internals, and a new endpoint… | ||
| Intro + Deep Dive: Kubernetes Storage SIG | Saad Ali | 01h 27m |
SIG Storage defines and builds Kubernetes block and file volume plumbing, and shows concrete progress: CSI lands as the extensibility layer (now powering 50… | ||
| Improving Performance of Deep Learning Workloads With Volcano | Ti Zhou | 37m |
Join us for Kubernetes Forums Seoul, Sydney, Bengaluru and Delhi - learn more at kubecon.io
Don't miss KubeCon + CloudNativeCon 2020 events in Amsterdam… | ||
| Keynote: Finding the Joy in Chaos Engineering | Ana Medina, Lenny Sharpe | 20m |
Target describes building a resiliency capability using Gremlin and a homegrown TRAP platform to run GameDays across Kubernetes (EKS/GKE/AKS) in an environment… | ||
| Keynote: Seamless Customer Experience at Walmart Stores Powered by Kubernetes@Edge | Maneesh Vittolia, Sriram Komma | 18m |
Walmart moves its POS into Kubernetes@Edge clusters so registers keep working during WAN outages, serving ~265 million customers weekly across ~11,000 stores… | ||
| Keynote: Hello From the Other Side: Dispatches From a Kubernetes Attacker | Ian Coldwater | 19m |
Attackers treat a cluster as a graph and commonly enumerate permissions with kubectl auth can-i, map relationships with Octant, and probe admission… | ||
| Keynote: In Search of the Kubernetes "Rails" Moment | Bryan Liles | 21m |
Argues Kubernetes needs a "Rails moment" — concrete defaults and developer ergonomics rather than more features — and demonstrates a working tool, Octant… | ||
| Inside Kubernetes Services | Dominik Tornow, Andrew Chen | 27m |
Kubernetes Services implement an anycast domain not a running process: Service, Endpoints and the EndpointsController map selectors to pod IPs, kube-proxy… | ||
| Balancing Power and Pain: Moving a Startup From a PaaS to Kubernetes | David Sudia, Toni Rib | 37m |
A three‑person ops effort moves a Heroku-hosted Rails stack onto GKE with Terraform, CircleCI, Harness, Ambassador, Prometheus, Jaeger and Sumo Logic, fixing… | ||
| kubeadm deep dive (SIG Cluster Lifecycle) | Fabrizio Pandini, Yago Nobre | 37m |
kubeadm reaches GA and adds concrete features: a working cluster API bootstrapper so Cluster API can create and manage kubeadm-provisioned clusters across… | ||
| Intro + Deep Dive: Multicluster SIG | Irfan Ur Rehman, Paul Morie, Quinton Hoole | 01h 00m |
SIG updates focus on concrete artifacts: KubeFed near-beta that actually syncs and propagates Kubernetes resources (adds propagation status, skips conflicting… | ||
| Component Standard Working Group | Leigh Capili, Michael Taufen | 24m |
Working group builds a standard stack so cluster components move from ad hoc flags to Kubernetes-style APIs: a kubelet v1beta1 component config exists… | ||
| nothing matches | ||