KubeCon + CloudNativeCon North America 2020 Virtual
2020-11-17..2020-11-20
-- online --
[KubeCon + CloudNativeCon North America 2016, KubeCon + CloudNativeCon North America 2017, KubeCon + CloudNativeCon North America 2019, KubeCon + CloudNativeCon North America 2020 Virtual, KubeCon + CloudNativeCon North America 2021, KubeCon + CloudNativeCon North America 2022]
as the organisers put it
register now VIEW THE VIRTUAL SCHEDULE JOIN THE EVENT KubeCon + CloudNativeCon North America 2020 Virtual is a wrap! Thank you to all the attendees and sponsors that joined us online.
| title | author | length |
|---|---|---|
| Coming soon ... KubeCon + CloudNativeCon North America 2020 Virtual! | Constance Caramanolis, Stephen Augustus | 01m |
KubeCon + CloudNativeCon North America 2020 is a virtual four-day conference that runs Nov. 17–20, 2020 and streams a program the co-chairs call “more talks… | ||
| tips for your first | Karen Chu | 01m |
Use the event schedule page to build a daily lineup and filter by track or experience level so you see only sessions that match your goals; treat networking… | ||
| Roadtrip | 01m | |
A 20–30 second promotional clip that loops music and the slogan keep cloud native everywhere three times and ends with a registration URL, offering no… | ||
| Tutorial: Say Goodbye to YAML Engineering with the CDK for K8s | Nathan Taber, Elad Ben-Israel | 01h 17m |
Shows that cdk8s compiles code to standard Kubernetes YAML and replaces hand-editing with reusable constructs: a TypeScript demo on a local kind cluster builds… | ||
| Tutorial: Migration 101: From VMs to Kubernetes | Luke Kysow | 01h 25m |
Step‑by‑step migration that actually builds and runs: Dockerizing the API into a local image, loading it into kind load or pushing to Docker Hub, then applying… | ||
| PID 1, SIG Handling, Hooks & Probes: Managing Container Lifecycle Correctly | Anmol Krishan Sachdeva | 33m |
Explains that containers need a real init to reap zombies and forward signals, demonstrates tini installed as PID 1 preventing defunct processes, and shows the… | ||
| Clean Up Your Room! What Does It Mean to Delete Something in K8s | Aaron Alpar | 26m |
Explains how Kubernetes actually deletes resources by walking examples using kubectl create/get/patch/delete, kubectl proxy and curl to the API, showing… | ||
| Build Your Own Envoy Control Plane | Steve Sloka | 24m |
Step‑by‑step build of an Envoy control plane using Go and the go-control-plane library, with a YAML snapshot cache as source of truth and an FS watcher that… | ||
| A Flight Over the Cloud Native Landscape | Carson Anderson | 32m |
Speed-run tour of 33 projects (specifies 12 graduated and 21 incubating) that maps actual roles and integrations: containerd/CRI-O for runtimes… | ||
| containerd: Rootless Containers 2020 | Akihiro Suda | 14m |
Runs container runtimes and containers without root privileges so the attack surface of runc, containerd, kubelet is reduced; mitigates breakout and… | ||
| Improved TiKV Observability: How We Trace Events under Nanoseconds Latency | Wish Shi, Zhenchi Zhong | 11m |
TiKV adds a custom OpenTracing-compatible tracer (mini-trace) that records every span with only a few nanoseconds overhead, using thread-local buffers to avoid… | ||
| Simplify Application Deployment at the Edge with Harbor | Michael Michael | 15m |
Harbor v2.1 adds a proxy cache that pulls images from Docker Hub into a local project so manifests and digests serve at the edge with Harbor policies… | ||
| A Different Kind of Kubernetes Artifact | Paris Pittman, Nikhita Raghunath | 12m |
Catalogs Kubernetes cultural output: logos, contributor‑summit patches, custom release swag and t‑shirts, emoji sets, sticker and food stunts, and governance… | ||
| Getting Started with Jaeger | Joe Elliott | 16m |
Explains Jaeger’s concrete pipeline: application client libraries -> agent (sidecar or daemonset) -> collector -> optional Kafka for durable queue -> storage… | ||
| Online Learning—Advancing Your Knowledge of Kub... | Grant Shipley, Marissa Bosche | 05m |
Kubernetes adoption scales fast: conference registration grows from 510 to 25,000 in five years and analysts predict a million new apps in five years. VMware… | ||
| Why You Need Observability to Adopt Kubernetes at Scale | Shreyans Parekh | 05m |
AppDynamics ships a Kubernetes Cluster Agent that runs on all distros and container runtimes, correlates cluster metrics with application and business… | ||
| AppDynamics - Path to Kubernetes Observability | Jeffrey Holmes | 13m |
AppDynamics ships a lightweight single-replica pod cluster agent that pulls metrics from metric-server, uses an operator and custom resources to deploy cluster… | ||
| EmpowerUs: Uniting to Drive Tech Sector Growth through Diversity + Inclusion | Ali Fenn, Dean Nelson, Amber Caramella, Parastoo Amin | 41m |
Panel lays out concrete evidence and actions: tech firms with female directors show less than 10% female representation in infrastructure and those with more… | ||
| Say goodbye to YAML engineering with the CDK for Kubernetes | Eli Polonski | 16m |
Shows how cdk8s plus cdk8s+ replace YAML by importing an Elasticsearch Operator CRD into TypeScript using cdk8s import from CRD, generating a complete… | ||
| KubeEdge: Kubernetes Native Edge Computing Framework | Zefeng (Kevin) Wang | 34m |
KubeEdge extends Kubernetes to run on resource-constrained edge sites by adding a cloud core plus lightweight edge hubs and kubelet replacements, using OCI… | ||
| Service Discovery with CoreDNS Plugins in Golang | Yong Tang, John Belamaric | 29m |
CoreDNS shows a concrete example: a Golang source-IP based service discovery plugin that inspects client IP and returns different A records (demo returns… | ||
| Serverless or Servicefull | Sebastien Goasguen | 24m |
Argues that “serverless” is actually servicefull: applications compose managed cloud offerings via events rather than owning servers. Describes a working… | ||
| Security Kill Chain Stages in a 100k+ Daily Container Environment with Falco | Natch Ruengsakulrach | 28m |
MathWorks runs Falco with eBPF and custom rules across a cluster serving 100K+ MATLAB containers daily, and maps detections to the Lockheed Martin kill chain… | ||
| Safely Deploying a 100K line Envoy YAML Configuration to Production | Lisa Lu, Jyoti Ranjan Mahapatra | 19m |
Lyft describes deploying a single Envoy config repo that grows to 100K lines and builds three concrete safeguards: automated scripts that prune dead routes and… | ||
| Project Tye: Building Developer Focused Tooling for Kubernetes and .NET | David Fowler | 20m |
Project Tye provides a local orchestrator that runs multiple .NET services as processes with tye run, injects service addresses via environment variable… | ||
| Prescriptively Benchmarking Kubernetes System and Application Using K-Bench | Yong Li | 25m |
K-Bench is a configurable framework that provisions Kubernetes resources from YAML, runs 1000-pod startup test style workloads and reports… | ||
| PKI the Wrong Way: Simple TLS Mistakes and Surprising Consequences | Tabitha Sable | 31m |
Kubernetes cluster misconfigurations let TLS become an attack surface: a kind cluster using HashiCorp Vault and OpenSSL allows a web pod to get a Vault CA… | ||
| Panel: Introduction to the Container Orchestrated Device (COD) Working Group | Renaud Gaubert | 22m |
Small working group documents a concrete stack: a declarative Container Device Interface (CDI) that writes vendor JSON to a well-known path to mutate OCI specs… | ||
| Panel: Tales from the Edge: Is the Edge More Important Than the Service Mesh? | Matt Klein | 27m |
Companies report migrating ingress from legacy proxies to Envoy and running into dozens of small interoperability bugs, for example header-casing mismatches… | ||
| Owned by Statistics: Using Kubeflow to Defend vs Attacks on Your ML Models | David Aronchick | 30m |
Shows how a cloud-native MLops pipeline built with Kubeflow Pipelines plus Kale (notebook→pipeline), Katib for hyperparameter search, Rok snapshotting and ML… | ||
| Open Policy Agent Intro | Patrick East, Max Smythe | 30m |
Open Policy Agent is a general-purpose policy engine that evaluates JSON inputs using the Rego declarative language and runs as a binary or sidecar; the demo… | ||
| Notary v2: Redesigning the Secure Supply Chain for Containers | Justin Cormack, Steve Lasker | 32m |
Notary v2 claims to make container signing registry-native by storing OCI artifact signatures as separate JWT objects that reference image digests, not by… | ||
| Managing Developer Workflows with the Kubernetes API | Colin Murphy | 27m |
Adobe builds and runs a custom Kubernetes client (open source at adobe/ported-to-kubernetes) written in Go that enforces deployment conventions, ties secrets… | ||
| Machine Learning on Kubernetes at Shell: A Kubeflow Journey | Alex Iankoulski, Vangelis Koukis | 28m |
Shell runs Kubeflow with Arrikto Rok on EKS using GitOps, Kale and KFP to turn notebooks into pipelines, spawn hundreds or thousands of hyperparameter runs… | ||
| Vitess: Introduction and New Features | Sugu Sougoumarane, Deepthi Sigireddi | 28m |
Vitess presents a MySQL-compatible, cloud-native sharding system that runs on Kubernetes, claims deployments serving millions of queries per second, and… | ||
| The Open Source Revolution: How Kubernetes is Changing the Games Industry | Dominic Green | 23m |
Netspeak builds and launches a mobile MMO in six months, running thousands of concurrent UDP players with thousands of requests/sec and hundreds of gigabytes… | ||
| The Building Blocks of DX: K8s Evolution From CLI to GitOps | Katie Gamanji | 28m |
kubectl exposes ~40 operations and ~70 flags and accepts plugins named kubectl-, which can be simple binaries placed on PATH; a demo installs a greetings… | ||
| Stop Writing Operators | Joe Thompson | 23m |
Argues Stop writing operators by default and shows concrete alternatives: use a Helm chart or GitOps, a simple CRD controller, an external manager, or a… | ||
| Static Analysis of Kubernetes Manifests | Barak Schoster | 29m |
Scans of public GitHub repos find widespread Kubernetes misconfigurations—public endpoints, missing CPU limits, and containers with runAsNonRoot overridden—so… | ||
| SIG Multicluster Intro | Paul Morie, Jeremy Olmsted-Thompson | 21m |
SIG Multicluster maps current engineering: kube‑fed v1/v2 tradeoffs (v2 uses CRDs, needs transformations), cluster registry exists as an API-only project with… | ||
| Service Mesh Specifications and Why They Matter in Your Deployment | Lee Calcote, Kush Trivedi | 39m |
Three open specs claim to solve interoperability and performance: SMI conformance on seven meshes is exercised via Meshery which implements SMI and is the… | ||
| Logging: Fluentd & Fluent Bit | Eduardo Silva, Masahiro Nakagawa | 22m |
Fluentd is a Ruby core with C extensions that runs a plugin-based pipeline for collection, filtering, buffering and routing; it recommends file buffer for… | ||
| Introduction and Deep Dive into containerd | Michael Crosby, Derek McGowan, Phil Estes, Wei Fu | 30m |
Overview of containerd's concrete changes and how to use them: containerd 1.4 (Aug) adds cgroups v2 and SELinux work, the project reports usage growing by over… | ||
| Intro to CNCF’s Telecom Initiatives | Taylor Carpenter | 17m |
CNCF runs three concrete efforts: Telecom User Group collects operator requirements and meeting notes so vendors and users converge on real needs; CNF Testbed… | ||
| How to Multiply the Power of Argo Projects By Using Them Together | Hong Wang | 25m |
Argo CD, Argo Workflows, Argo Events and Rollouts are combined to build a working pipeline that needs only YAML and three kubectl commands to deploy: a… | ||
| How to Build a Cloud Native Image Recognition Solution | Rolando Carrasco, Akshai Parthasarathy | 36m |
A cloud-native pipeline that combines OCI API Gateway, Fn Project functions, Object Storage, OKE and Google AutoML OCR/NLP exposes a single API that classifies… | ||
| High Performance Networking for Distributed DL Training in Production K8s | Nivedita Viswanath | 25m |
An 800‑GPU production cluster (100 DGX‑1 nodes) runs RoCEv2 rings for GPU‑to‑GPU traffic and isolates storage/control on dual 10G Ethernet; pods get RDMA VFs… | ||
| Helm: Past, Present, Future | Matt Butcher, Bridget Kromhout, Matt Farina | 35m |
Project starts Oct 19, 2015 and evolves from centralized stable/incubator charts to a distributed chart model plus Artifact Hub to stop maintainer burnout… | ||
| Hands-On Stateful Serverless Applications with K8s and Stateful Functions | Seth Wiesman | 35m |
Stateful Functions (Apache Flink) provides a replacement for a separate database by routing messages through the Flink cluster and offering exactly-once… | ||
| Five Hundred Twenty-five Thousand Six Hundred K8s CLI’s | Phillip Wittrock, Gabbi Fisher | 26m |
A practical survey compares five CLI patterns and demos real tooling: helm templating deploys kube-state-metrics/Prometheus successfully, kustomize overlays… | ||
| Harbor- Enterprise Cloud Native Artifact Registry | Steven Zou, Daniel Jiang, Alex Xu, Steven Ren | 31m |
Harbor v2.1 adds a pull-through proxy cache for upstream registries and a background non-blocking GC with a dry-run size estimate so pushes continue during… | ||
| Evolution of Metric Monitoring and Alerting: Upgrade Your Prometheus Today | Bartłomiej Płotka | 31m |
Prometheus claims to be the de facto open-source metrics engine with hundreds of integrations and a growing ecosystem: Alertmanager for routing notifications… | ||
| Empowering Cloud Native Networking with Arm Ecosystem | Trevor Tao, HanYu Ding | 26m |
Arm demonstrates a working cloud native networking stack on arm64 with concrete results: Cilium, OVN-k8s, Envoy are enabled and Istio+Envoy service mesh runs… | ||
| Elastic Scheduling with TiKV | Song Gao, Yutong Liang | 22m |
Elastic scheduling adds an operator + PD-based pipeline that auto-scales TiKV on Kubernetes: TiKV exports metrics to Prometheus, PD pulls metrics and runs a… | ||
| Dragonfly: Make Image Distribution Efficiently and Safely in Cloud Native | Yuxing Liu, Tao Peng | 27m |
Dragonfly is a P2P image distribution system built from dfdaemon/dfget/supernode that schedules downloads at block granularity (default 4 blocks per schedule)… | ||
| DevOps Performance From a Different Dataset: What 30M Workflows Reveal | Michael Stahnke | 36m |
CircleCI analyzes 30M+ builds from 44K orgs and 160K projects and reports concrete metrics: 50% finish under 4 minutes, average pipeline duration ~25 minutes… | ||
| Contour, A High Performance Multitenant Ingress Controller for Kubernetes | Michael Michael | 25m |
Contour acts as a control plane for Envoy, providing a high performance multitenant Kubernetes ingress that streams xDS updates without reloads. Recent work… | ||
| Constructing Chaos Workflows with Argo and LitmusChaos | Uma Mukkara, Sumit Nagal | 26m |
Describes a working pipeline that combines LitmusChaos and Argo to run chaos workflows that invoke ChaosToolkit-based experiments (BYOC) via the Litmus… | ||
| Codename VIFL - How to Migrate MySQL Database Clusters to Vitess | Guido Iaquinti, Rafael Chacon | 30m |
Migrates over a thousand MySQL shards to Vitess using vreplication and vtgate, upgrading MySQL56 → MySQL57 and converting primary‑primary topology to… | ||
| CloudEvents - v1.0 and Beyond - Discovery/Subscriptions | Doug Davis, Clemens Vasters | 21m |
CloudEvents v1.0 is released and the project adds concrete specs: CloudEvents v1.0 with binary and structured encodings, active SDKs in Go C# Java and… | ||
| Cloud Native & SD-WAN: Improving K8s Application Experience Over SD-WAN | Alberto Rodriguez-Natal | 21m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2021 Virtual from May 4–7, 2021. Learn more at https://kubecon.io. The… | ||
| Case Study: Integrating Azure IPv6 PrivateLink with Kubernetes | Meixing Le, Michael Wiederhold | 28m |
Databricks integrates Azure PrivateLink IPv6 by deploying an IPv6-to-IPv4 proxy pods into a dedicated node pool backed by an IPv6-enabled Azure VMSS and a… | ||
| Beyond File and Block Storage in Kubernetes | Sidhartha Mani | 09m |
Kubernetes gains a concrete proposal to manage networked object storage via the Container Object Storage Interface (COSI) and a Bucket API that implements four… | ||
| Being a Good Citizen of the Multi-operator World | Devdatta Kulkarni | 27m |
Operator developers get concrete guidance and tools to run multiple Operators together: an Operator Maturity Model with categories (consumability, security… | ||
| An SLO-Driven Approach to Enhance Kubernetes Cluster Reliability | Qian Ding, Cong Chen | 25m |
Ant Financial runs Kubernetes clusters with thousands of nodes and millions of pods and defines concrete SLOs such as 99% pods ready within 5 minutes measured… | ||
| Keynote: Kubernetes Project Update | Stephen Augustus | 11m |
Kubernetes project updates cover governance, CI and features: a banner condemning racism goes live on kubernetes.io and chair/technical-lead meetings become… | ||
| Sponsored Keynote: Kubernetes Everywhere | Briana Frank | 05m |
Kubernetes serves as a common infrastructure layer across on‑prem, edge, and public cloud so the public cloud consumption model runs close to devices rather… | ||
| The Cloud Native Journey of Volcano Engine | Xin Zhang | 04m |
Claims a production cloud‑native stack that supports 600M DAU and 1.5B MAU across ByteDance apps, built into a reusable one set coherent framework that spans… | ||
| CNCF Projects Update | Constance Caramanolis | 12m |
Project rollups hit concrete milestones and user stories: Falco records 700,000 kernel-module downloads in 10 days, 60 new contributors, rule-based runtime… | ||
| The Rise of the End Users | Diane Mueller | 06m |
End-user organizations move from feedback to code: enterprises donate full projects — Jaeger from Uber, Envoy from Lyft, Backstage from Spotify — and companies… | ||
| The Cloud Native Journey @Apple | Alena Prokharchyk | 14m |
Apple migrates from Mesos/JRVis to Kubernetes aiming to run the majority of workloads on a namespace-as-a-service model with SRE owning multi-tenant clusters… | ||
| Are Certifications Worth It? | Cheryl Hung | 14m |
Announcement of a new Certified Kubernetes Security Specialist with six community‑chosen domains: cluster setup and hardening, system hardening, microservice… | ||
| #TeamCloudNative: Diversity-Powered Resilience | Priyanka Sharma | 24m |
Announcements cover concrete wins and projects: a cross‑org inclusive naming initiative with Kubernetes naming working group and partners like IBM and Red Hat… | ||
| Envoy Q&A | Matt Klein, Harvey Tuch | 34m |
QUIC and HTTP/3 support is actively landing using quiche-based QUIC and is close to an MVP with maintainers integrating it into envoy; Windows port is… | ||
| Introduction to Autoscaling | Guy Templeton, Joe Burnett | 34m |
Covers how Kubernetes reduces cost and handles load using Horizontal Pod Autoscaler, Vertical Pod Autoscaler and Cluster Autoscaler with concrete mechanics… | ||
| Production CI/CD w/CNBs: Tekton, Gitlab & CircleCI(plus), Oh My! | David Freilich, Natalie Arellano | 29m |
Demonstrates Cloud Native Buildpacks producing runnable OCI images using the pack CLI, the lifecycle/creator binary, and integrations with GitLab, CircleCI… | ||
| Kubernetes: Putting the Focus on Upstream Usability with SIG Usability | Tasha Drew, Gabby Cesar | 22m |
SIG Usability reports a user research pipeline using jobs to be done methodology, a screening survey and planned qualitative interviews, with a screening… | ||
| Kata Containers Performance Evaluation and Optimization on Arm64 | Jia He | 30m |
Kata Containers on Arm64 ships virtiofs 10–20× I/O versus virtio9p, adds nvdimm/persistent memory and kvm ptp, and enables a vm template cloning path that cuts… | ||
| Intro + Deep Dive - Provider IBM Cloud | Sahdev P. Zala, Richard Theis, Brad Topol | 24m |
IBM Cloud Provider is an open subproject that implements the cloud controller manager for IKS and ROKS, delivering three IKS releases this year and three… | ||
| Building a Global Supercomputer with Virtual Kubelet | Dmitry Mishin, Adrien Trouillaud | 30m |
Nautilus aggregates donated campus and international hardware into a single Kubernetes fabric and runs Admiralty plus Virtual Kubelet to federate many… | ||
| Whatever Can Go Wrong, Will Go Wrong – Rook/Ceph and Storage Failures | Sagy Volkov | 30m |
Claims that Rook/Ceph heals fast are tested with a 3-node AWS cluster with 6 OSDs and a load generator called Sherlock driving 12 MySQL pods with 100GB PVCs… | ||
| What is the Kubernetes Code of Conduct Committee and What is it Working On | Karen Chu, Aeva Black | 13m |
Elected five-member committee limits membership to no more than two people per company, handles tier-two incidents across GitHub, Slack, events and unofficial… | ||
| Tune It Up! Enabling Low Latency in Kubernetes Clusters | Francesco Romani, Yanir Quinn | 25m |
Demonstrates turning Kubernetes nodes into low‑latency hosts by installing a real‑time kernel and applying node tunings via machine-config-operator, managing… | ||
| The Stateful Landscape: The Then and Now and the Future | Erin A Boyd, Quinton Hoole, Alex Chircop | 27m |
SIG meets twice monthly and maintains the CNCF Storage White Paper v2 and a Performance & Benchmarking v1 that include sample tools so teams can run their own… | ||
| The Cloud Native Journey at Adobe | Carlos Sanchez | 25m |
Migrates Adobe Experience Manager to Kubernetes running more than 10 clusters across regions with per-customer namespaces and hundreds of sandboxes, using… | ||
| Standardizing Cloud Native Application Delivery Across Different Clouds | Hongchao Deng | 25m |
Introduces a platform called cube vita that implements the Open Application Model (OAM) to make Kubernetes application delivery application-centric rather than… | ||
| Speeding Up Analysis Pipelines with Remote Container Images | Ricardo Rocha, Spyridon Trigazis | 30m |
CERN describes using containerd remote snapshotter and estargz to lazy‑load huge analysis images (an atlas/athena release ~17.2 GB uncompressed, 5.4 GB… | ||
| SIG CLI Intro and Updates | Phillip Wittrock, Maciej Szulik, Sean Sullivan | 21m |
SIG CLI lists kubectl, kustomize, krew (about ~120 plugins), kui and CLI libraries, and shows concrete changes: kubectl code is moved to a staging import path… | ||
| SIG Architecture Intro and Update | John Belamaric, Derek Carr | 33m |
SIG Architecture defines API conventions, runs the API review process, manages code organization and staging repos, and owns conformance tests and promotion… | ||
| Serverless for ML Inference on Kubernetes: Panacea or Folly? | Manasi Vartak | 27m |
Benchmarks compare AWS Lambda, Google Cloud Run (Knative) and Verta containers on Kubernetes (ModelDB/KubeFlow workflows) for ML inference and find concrete… | ||
| Selecting the Right Identity Provider for Kubernetes: A Comparative Survey | Cameron Seader | 31m |
Compares Dex, UAA, Keycloak, OpenUnison and Gluu against concrete markers: protocol support, deployment, client libraries, federation, certification and scale… | ||
| Secure Policy Distribution With OPA | Ash Narkar | 22m |
OPA pulls gzipped bundles of policies and data and now verifies a signatures.json file containing JWTs that list filenames and SHA hashes, using RS256 (or… | ||
| Proxyless Service Mesh with gRPC | Menghan Li | 20m |
gRPC adds a proxyless service mesh via xDS so apps talk to the control plane directly and avoid sidecars; the xDS client in gRPC 1.33 supports xDS v2 and v3… | ||
| Progressive Delivery Techniques with Flagger | Stefan Prodan | 33m |
Progressive delivery automation using Flagger plus GitOps recreates deployments as a canary workflow inside clusters: Flux v2 applies manifests, Flagger clones… | ||
| Practice of Fine-grained Cgroups Resources Scheduling in Kubernetes | Xianlu Chen, Qingcan Wang | 23m |
Alibaba runs scheduling across hundreds of thousands of nodes and millions of containers and describes a Kubernetes-based system that does dynamic cgroup… | ||
| Persistent Memory in Kubernetes | Patrick Ohly | 22m |
Persistent memory provides byte-addressable non-volatile memory that sits between DRAM and SSDs and enables much larger in-memory datasets with faster… | ||
| Overview and State of Linkerd | William Morgan, Tarun Pothulapati | 20m |
Linkerd is an ultra-light, security-first service mesh that ships a Rust micro-proxy and third‑party audits and claims lower memory/latency than Istio; it runs… | ||
| Optimizing Storage Assignment via Pod Scheduling Under Disturbance Factors | Kenji Morimoto | 23m |
Uses WaitForFirstConsumer plus Topology Spread Constraints to turn local-disk PV placement into pod scheduling, then retunes kube-scheduler so spread becomes… | ||
| Observability Brings Clarity in 5G World | Yamini Sridaran, Praveen George | 27m |
Built a telco observability platform that collects thousands of Prometheus metrics, ships structured logs with Fluentd to Elasticsearch/Kibana, and performs… | ||
| Navigating the App Delivery Landscape While Solving Everyday Problems | Lei Zhang, Alois Reitbauer | 43m |
Live demo shows a one-service "potato head" app implemented with raw Kubernetes manifests, a Helm chart, flux git-operator syncing commits to a cluster, Argo… | ||
| NATS Streams and Services: From Zero to Hero | Waldemar Quevedo Salinas, Jaime Piña | 31m |
NATS is shown running as a lightweight single-binary messaging plane with a live nats.chat demo that uses websockets and on-the-fly dynamic credentials issued… | ||
| Multi-Cluster is Easier Than You Think with Linkerd and Ambassador | Thomas Rampelberg | 28m |
Concrete howto for connecting two Kubernetes clusters (GKE + Docker Desktop) using Linkerd and Ambassador with working demo of a Linkerd service mirror that… | ||
| How the OOM-Killer Deleted My Namespace, and Other Kubernetes Tales | Laurent Bernaille | 31m |
Datadog runs dozens of clusters (some ~4,000 nodes) and shares three root-cause stories: a refactored Helm chart moved the Namespace out of the release so helm… | ||
| MLOps at Snapchat: Continuous Machine Learning with Kubeflow & Spinnaker | Kevin Dela Rosa | 22m |
Snap implements continuous ML for Scan computer vision by containerizing notebook code into modular Docker components, wiring those into Kubeflow Pipelines for… | ||
| How H-E-B Curbside Adopted Linkerd During a Pandemic | Justin Turner, Garrett Griffin | 20m |
H-E-B moves a curbside monolith to Kubernetes and adopts Linkerd to get observability, retries/timeouts, and mTLS fast enough for COVID demand. Integration… | ||
| Having Cloud Native Fun with HonkCTL | Jeffrey Sica | 26m |
A Kubernetes CTF called honkCTL becomes a hands-on sandbox that teaches security and RBAC by letting players pivot through namespaces and service accounts. It… | ||
| gRPC Communication Patterns – A Deep Dive | Kasun Indrasiri, Danesh Kuruppu | 24m |
Clear, hands-on breakdown of gRPC mechanics: how unary, server-, client- and bi-directional streaming map to HTTP/2 streams, the length‑prefix framing (1 byte… | ||
| Enhancing the Kubernetes Scheduler for Diverse Workloads in Large Clusters | Yuan Chen, Yan Xu | 30m |
Apple extends the Kubernetes scheduling framework with concrete plugins and measurements: a static IP prefilter+filter plugin that checks node IP maps and… | ||
| End User Panel: GITOPS in the Enterprise -Real World Experiences | Cheryl Hung | 38m |
Enterprise teams describe GitOps as infrastructure and cluster state stored in Git driving automation that cuts toil and enables self service. They run Flux CD… | ||
| Eating Your Vegetables: How to Manage 2.5 Million Lines of YAML | Daniel Thomson, Jesse Suen | 33m |
Intuit manages about 2.5 million lines of YAML across ~200 clusters, ~2,500 Git repos and ~9,000 namespaces using GitOps and a Kustomize-centered workflow. The… | ||
| DevOps All the Things: Creating a Pipeline to Validate Your OPA Policies | Goran Osim | 18m |
Pipeline generates Gatekeeper constraint templates from plain Rego, runs Rego unit tests and static checks with confTest, and blocks bad commits via git… | ||
| CRI-O: The Runtime Control Room | Sascha Grunert, Peter Hunt, Urvashi Mohnani, Mrunal Patel | 31m |
CRI-O implements the Kubernetes CRI using OCI images/runtimes and focuses on secure, admin-facing knobs: dynamic reload (SIGHUP) with drop-in files and a regex… | ||
| Contributing to Kubernetes Conformance Coverage | Hippie Hacker, Caleb Woodbine | 23m |
Describes how an audit-driven pipeline finds and fixes conformance gaps using apisnoop.cncf.io backed by snoop db, ingesting OpenAPI and CI audit logs (2–5 GB)… | ||
| Making the Business Case for Contributing to Open Source | Tobie Langel | 23m |
Companies see concrete returns: Black Duck finds 96% of apps use OSS, >50% of codebase, and contributions reduce technical debt by upstreaming fixes and… | ||
| Cloud Native Machine Learning Systems at Day Two and Beyond | Sophie Watson, William Benton | 26m |
Kubernetes becomes the default infra for ML but it leaves gaps around reproducibility, interactive velocity, and model monitoring; expect to use CI/CD (Tekton)… | ||
| Beyond the Buzzword: BPF’s Unexpected Role in Kubernetes | Andrew Randall, Alban Crequy | 25m |
Claims that BPF delivers per-pod visibility and fast kernel-level hooks inside Kubernetes, demonstrated by deploying a daemonset that installs BPF programs and… | ||
| CNCF Project Paperwork Working Session | Josh Berkus, Carolyn Van Slyck, Dawn M Foster | 13m |
Explains exact CNCF paperwork: clone the templates repo on GitHub, use Apache-2 and the CNCF Code of Conduct, add a contributing guide and lightweight roadmap… | ||
| Lives On the Line. Learning Disaster Response From the Coronavirus Pandemic | Kris Nova | 46m |
Shows concrete lessons from COVID‑19 applied to cloud native systems: China sequences and open‑sources the genome by January 12, enabling vaccine work; R0 ~2–3… | ||
| Leveraging Service Meshes for Accelerating Serverless Workflows | Paarijaat Aditya, Manuel Stein | 22m |
Claims that co-located functions cut workflow latency are backed by measurements: direct calls between services hit a median of 620 µs (1 KB), Knative Serving… | ||
| Kubernetes-native Security with Starboard | Liz Rice, Daniel Pacak | 23m |
Starboard turns multiple security tools into Kubernetes CRDs so you can run scans with kubectl or view results in Octant; a demo runs kube-bench on a four-node… | ||
| Kubernetes VMware User Group Intro: Best Practices for Running on VMware | Steven Wong, Myles Gray | 33m |
Overview of concrete outcomes and compatibility: introduces the out‑of‑tree vSphere CSI driver tied to a new CNS control plane that provisions first class… | ||
| Kubernetes SIG-Network: Intro and Deep-Dive | Tim Hockin, Bowei Du, Rich Renner | 51m |
Covers concrete fixes and APIs: kube-proxy uses iptables/ipvs and CNI for pod IPs, CoreDNS is default, and IPAM handles allocations; node-local DNS runs as a… | ||
| Kubernetes CronJobs - Does Anyone Actually Use This [in Production]? | Kevin Yang | 23m |
Lyft runs 500+ CronJobs and discovers Kubernetes’ controller does a full sync loop every 30s that lists all CronJobs, causing API client rate‑limiting when… | ||
| Kubernetes and Logging: Do It Right | Eduardo Silva | 26m |
Fluent Bit is a small C-based logging agent that runs as a daemon set on each node, reads /var/log/containers, enriches logs by querying the Kubernetes API for… | ||
| Kubelet Deep Dive: Writing a Kubelet in Rust | Kevin Flansburg | 20m |
Rewrites Kubelet in Rust as the crestlet project, shipping a reusable kubelet crate plus two working kubelet implementations that run Wasm (using wasmtime and… | ||
| Jaeger Deep Dive | Yuri Shkuro, Pavol Loffay, Annanay Agarwal | 36m |
Walkthrough of Jaeger architecture, sampling and OpenTelemetry integration with concrete choices: span size ~2 KB and 10k QPS across 100 instances gives 170… | ||
| Intro to Scaling Prometheus with Cortex | Tom Wilkie, Ken Haines | 20m |
Cortex provides a horizontally scalable, highly available Prometheus-compatible TSDB that accepts Prometheus remote_write traffic, shards via a distributed… | ||
| Intro to Kubernetes Docs | Celeste Horgan, Brad Topol, Tim Bannister | 26m |
Kubernetes docs live in the website repo (k8s.io) as markdown rendered by Hugo with a customized doxy theme; source lives on GitHub, CI uses Prow + Netlify for… | ||
| Intro: CNCF SIG-Runtime | Ricardo Aravena, Renaud Gaubert | 27m |
SIG-Runtime catalogs concrete projects and working artifacts: container device interface (CDI) is a unified device plugin spec built on CNI with two POCs… | ||
| Improving Network Efficiency with Topology Aware Routing | Rob Scott | 27m |
Kubernetes adds zone and region labels on EndpointSlices and updates kube-proxy to watch only local slices, using an algorithm that subsets endpoints by zone… | ||
| Image-Builder Deep Dive | Moshe Immerman, Tushar Aggarwal | 22m |
Project consolidates three image-build systems into one repo and produces Kubernetes host images with reproducible phases, provider support, and a planned CLI… | ||
| App Testing at Scale: How Bitnami Tests Thousands of Releases Per Month | Juan Jose Martos Castro | 22m |
Bitnami runs automated pipelines that validate 180 applications across containers and Windows installers on 20+ platforms, producing thousands of releases per… | ||
| All You Can Eat Networking. Kubernetes Goodness for the Hungriest Workloads | Aloys Augustin | 30m |
Calico integrates a VPP userspace data plane to replace Linux networking, using a Calico+VPP data plane driven by a calico-vpp agent and tun interfaces so pods… | ||
| Accelerate and Autoscale Deep Learning Inference on GPUs with KFServing | Dan Sun | 37m |
KFServing v1beta1 plus Knative autoscaling and activator deploys TensorFlow/PyTorch BERT on GPUs using TF-Serving or Triton, enabling 20x speedup versus CPU… | ||
| Absorbing Thanos Infinite Powers for Multi-Cluster Telemetry | Bartłomiej Płotka | 39m |
Thanos turns Prometheus into a global, highly available monitoring system by adding sidecar upload to object storage (any S3‑compatible), a querier that… | ||
| A High-Schooler’s Guide to Kubernetes Network Observability | Drew Ripberger | 31m |
Kube-netc uses eBPF (Datadog’s eBPF library) to capture per-connection bytes in/out, aggregates those counts in a tracker, enriches each IP by querying the… | ||
| A Walk Through the Kubernetes UI Landscape | Joaquim Rocha, Henning Jacobs | 28m |
Survey of open source UIs lists Kubernetes Dashboard (first release 2015) and KDash as single-cluster, non-extensible options, Kubevious as a single-cluster… | ||
| A Special Interest in Cloud Native Security | Emily Fox, Brandon Lum | 15m |
SIG Security publishes a 36-page white paper that defines cloud-native security layers, maintains a supply chain catalog of real compromises with threat… | ||
| 10 More Weird Ways to Blow Up Your Kubernetes | Jian Cheung, Joseph Kim | 36m |
Test clusters hit 56,000 replica sets when a deployment’s collisionCount climbs to ~100,000 because topologySpreadConstraints aren’t copied into ReplicaSets; a… | ||
| More Power, Less Pain: Building an Internal Platform with CNCF Tools | David Sudia | 15m |
GoSpotCheck builds an internal PaaS with no dedicated platform team, composing Buildpacks, Helm, OpenTelemetry, Prometheus, Envoy/Linkerd service mesh and gRPC… | ||
| Kubernetes and etcd Features That Unlocked 15k Node Clusters | Wojciech Tyczyński | 15m |
Kubernetes and etcd changes enable real 15,000‑node clusters: Google and Bayer run clusters with ~250k cores and 1.5 PB RAM to process ~15 billion… | ||
| Moving Cloud Native Beyond HTTP: Adding Protocols to Unlock New Use Cases | Jonathan Beri | 13m |
An IoT startup discovers Kubernetes lacks built‑in support beyond HTTP so it builds its own load balancing and routing, prompting a community doc at… | ||
| Scaling Machine Learning Without Compromising Privacy | Nanda Vijaydev | 05m |
Claims a concrete stack for locking down distributed ML pipelines at scale: SPIRE/SPIFFE identities for transient service and user identities, OPA policy… | ||
| Using the OpenTelemetry Collector to Empower End Users | Constance Caramanolis | 16m |
An executable pipeline called OpenTelemetry Collector receives metrics and traces via multiple protocols, converts them to an internal format, applies… | ||
| Diversity + Inclusion Workshop: Removing Barriers to Innovation in Becoming a Better Ally, Sponsored by Amazon Web Services | Christopher Lafayette | 01h 01m |
A practical workshop that turns diversity talk into actions: it runs a mid-session reflection prompt — write what you haven't done — and prescribes concrete… | ||
| Marvin, Where is My Secure API? | Vijoy Pandey | 06m |
A proposed system called Marvin monitors the full app lifecycle from repo to runtime and scores or flags APIs so developers pick curated secure APIs, security… | ||
| The Great "k8s.gcr.io" Vanity Domain Flip | Stephen Augustus, Linus Arver | 35m |
Two-year effort (late 2018–mid 2020) rewrites Google’s promotion system into a Go-based container image promoter that reads production state in ~30 seconds… | ||
| What’s in a Name? A WG Naming Deep Dive | Celeste Horgan | 24m |
Working Group Naming forms in June 2020 to replace harmful terms across Kubernetes, using past fixes like petset → StatefulSet (2016) as a template and… | ||
| Virtual Application Networks for Cloud Native Applications | Ted Ross | 25m |
A Virtual Application Network (VAN) implementation called Skupper shows multi-site Kubernetes connectivity by linking four clusters (minikube laptop, OpenShift… | ||
| Using Open Policy Agent to Meet Evolving Policy Requirements | Jeremy Rickard | 32m |
Managed Kubernetes for 30+ teams meets FedRAMP High and PCI by running OPA + kube-mgmt sidecar as validating and mutating admission webhooks written in Rego… | ||
| Uniform Workload Identity Everywhere: SPIRE Integrations and Extensibility | Ryan Turner | 33m |
SPIRE implements the SPIFFE spec with a plugin-based control plane that issues SVIDs over a Unix domain socket and chains to existing PKI; built-in upstream… | ||
| Tutorial: From Notebook to Kubeflow Pipelines to KFServing: the Data Science Odyssey | Karl Weinmeister | 49m |
Deploys MiniKF in ~15 minutes, uses Jupyter + Kale converts notebooks to Kubeflow Pipelines without Docker builds, snapshots environment with Rok so notebook… | ||
| Tutorial: DevOps Tooling for Java Developers in a Cloud Native World | Melissa McKay, Stephen Chin | 01h 25m |
Covers concrete practices: use Git-based workflows, compile Java with Maven/Gradle, push binaries to an artifact registry (recommend Artifactory) and promote… | ||
| Tutorial: Building an Enterprise Infrastructure Control Plane on Kubernetes | Daniel Mangum | 01h 19m |
Shows how to model external infra as Kubernetes CRDs and implement controllers using controller-runtime, Helm, kind and Crossplane to manage GitHub teams and… | ||
| TiFlash: Make TiKV 10x Faster and HTAP-able | Xiaoyu Ma, Liquan Pei | 18m |
Adds a columnar engine called DeltaTree (inspired by ClickHouse) to TiKV/TiDB, implementing real‑time updatable, append‑then‑compact column segments to avoid… | ||
| Intro & Deep Dive: Kubernetes Data Protection WG | Xing Yang, Xiangqian Yu | 25m |
Kubernetes Data Protection WG organizes bi‑weekly meetings since January 2020 and maps concrete gaps: VolumeSnapshot moved from alpha (1.12) to beta (1.17) and… | ||
| Automatically Making Dashboards Load 100X Faster | Shreyas Srivatsan | 23m |
Claims automatic dashboard speedups up to 100x by detecting slow Prometheus queries from query logs and generating pre-aggregations using recording rules or an… | ||
| The Past, Present, and Future of Kubernetes on Raspberry Pi | Alex Ellis | 34m |
History and roadmap for running Kubernetes on Raspberry Pi with concrete recipes: a demo cluster runs k3s on Raspberry Pi 3/4 with three masters, etcd/sql (or… | ||
| Taking Envoy Beyond C++ with WebAssembly | Idit Levine, Yuval Kohavi | 26m |
Claims that Envoy can run polyglot filters as WebAssembly modules and that those filters load dynamically without recompiling or restarting Envoy. Demo builds… | ||
| Simplifying Windows Runtime and Deployment in Kubernetes | Michael Michael, Mark Rossetti | 27m |
Updates announce Windows Server 2019 and Nano Server 1809 support into 2024, single‑file mappings fixed, and containerd moving to stable with planned GPU and… | ||
| SIG Scheduling Deep Dive | Wei Huang, Abdullah Gharaibeh | 29m |
Kube-Scheduler now exposes a pluggable framework and a component config API that enables scheduling profiles (since 1.18) so one cluster image can run multiple… | ||
| Serverless Workflow – New Approach to Container Orchestration | Tihomir Surdilovic | 26m |
CNCF Serverless Workflow defines a JSON/YAML DSL for orchestrating event-driven services using CloudEvents + OpenAPI mappings, a Java and Go SDK, a TCK, KPI… | ||
| Seccomp: What Can It Do For You? | Justin Cormack | 34m |
Seccomp is a Linux syscall filter that Docker enables by default and that blocks high-risk subsystems, and the Docker default policy prevents real CVEs… | ||
| Scaling to Millions of ML Models to Solve the Problems of SRE and Security | Sandeep Pombra | 29m |
Claims scaling millions of models over petabytes of metrics and logs using Kubernetes, Prometheus, Cortex, Databricks Spark and Apache Arrow with per-node… | ||
| Scalable and Multitenant Networking in XDP and Kubernetes Operators | Sherif Abdelwahab, Ying Xiong | 28m |
A Kubernetes networking implementation using XDP/eBPF programs plus CRD operators that creates VPC and subnet objects and programs constant-time provisioning… | ||
| Rook: Intro and Ceph Deep Dive | Blaine Gardner, Alexander Trost, Travis Nielsen, Sebastien Han | 30m |
Rook brings Ceph inside Kubernetes and automates deployment, upgrades and day‑two ops via an operator plus CRDs, a CSI driver and native object provisioning… | ||
| Panel: Linux in the Kubernetes Era: Does The OS Still Matter? | Tasha Drew, Kiko Reis | 34m |
Panel argues the OS still matters but its role shifts: general-purpose distros (Ubuntu, CentOS) remain useful while cloud vendors ship lightweight derivatives… | ||
| Observing Cloud Native Observables with the New SIG Observability | Bartłomiej Płotka | 16m |
A new SIG forms to move cloud‑native observability from buzzword to delivered work, already completing due‑diligence and incubation approvals for Cortex and… | ||
| Managing Cloud Native Artifacts for Large Scale Kubernetes Cluster | Henry Zhang, Mingming Pei | 22m |
Demonstrates running Harbor as a scale-out registry with Harbor 2.1 proxy cache, cross-data-center replication, non‑blocking garbage collection and RBAC, plus… | ||
| Kubernetes Working Group for Multi-Tenancy Project Overview | Tasha Drew | 23m |
Three incubating projects with concrete outputs and measurable behavior are described The Hierarchical Namespace Controller adds parent child namespace CRDs… | ||
| Kubernetes Operators: Safety First Through Model Checkers | Neven Miculinic | 24m |
Shows that applying TLA+/PlusCal model checking to Kubernetes operator designs finds real bugs that unit and fault-injection tests miss — example model of a… | ||
| Kubernetes IoT Edge Working Group: Using Event Driven Architecture at Edge | Steven Wong | 25m |
Shows a working pipeline that converts tiny-device MQTT telemetry into structured CloudEvents and routes them into Kubernetes services and storage. Uses Camel… | ||
| Tutorial: Introduction to Using the Container Storage Interface (CSI) Primitives | Michael Mattsson | 01h 24m |
Shows how to install a CSI driver (uses the HPE CSI driver via Helm), run 11 hands-on labs and inspect csiDrivers/csiNodes, then demo dynamic provisioning… | ||
| Introduction to SIG Cluster Lifecycle | Lubomir I. Ivanov, Justin Santa Barbara | 20m |
SIG Cluster Lifecycle focuses on simplifying creation, configuration, upgrade, downgrade and teardown of Kubernetes clusters by building tools that chain… | ||
| Intro and Deep Dive: Kubernetes SIG Instrumentation | David Ashpole, Han Kang, Frederic Branczyk | 26m |
SIG Instrumentation overhauls Kubernetes telemetry: metrics API is refactored with a stability framework (beta, GA targeted in 1.21) and features like dynamic… | ||
| Into the Deep Waters of API Machinery | Federico Bongiovanni, Daniel Smith, David Eads | 32m |
Explains why a namespace stays stuck: the namespace finalizer blocks deletion until the namespace lifecycle controller can discover and delete all contained… | ||
| Inside Kubernetes Ingress | Dominik Tornow | 20m |
Kubernetes Ingress is a composition of Network Ingress (admission of traffic into the cluster) and kubernetes Ingress (HTTP routing inside the cluster)… | ||
| In Search Of A `kubectl blame` Command | Nick Santos | 25m |
Attempts try to attribute which apply caused which pod change and most fail or trade correctness for performance. Approaches shown: naive injected labels that… | ||
| How to Effectively Manage Kubernetes in a Regulated Environment | Darien Ford | 12m |
Bank-grade Kubernetes operations at scale: Capital One says it adopted Kubernetes in 2016, exited on-prem data centers in September, and finds compliance is… | ||
| High Performance KubeVirt in Action | Huamin Chen, Marcin Franczyk | 27m |
A production Gardener extension wires KubeVirt to Multus CNI and Rook Ceph to run hundreds to thousands of VMs with separated control and data networks using… | ||
| GitOps Is Likely More Than You Think It Is | Cornelia Davis | 34m |
Argues GitOps is more than CI/CD: it centers on pull-based reconciliation into clusters, not pushing from CI, and separates CI from CD for security and scale… | ||
| Extending Service Mesh to the Edge | Stephen Wong | 27m |
Demonstrates a working system called Clovisor that reads Istio route rules and programs kernel eBPF to steer sessions onto different WAN links (demo uses two… | ||
| Everything You Should Be Doing, But Aren’t: DevSecOps for K8s Workflows | Steven Terrana | 26m |
Shows a concrete DevSecOps scaffold that scales CI/CD across microservices by separating pipeline business logic from tool implementations using the Jenkins… | ||
| Enhancing K8s Networking with SmartNICs | Dave Cremins | 26m |
Argues that bare‑metal Kubernetes at the edge plus SmartNIC offloads delivers deterministic 5G‑grade networking by moving OVS/DPDK flows, inline forwarding… | ||
| Design Patterns for Extendable, Scalable K8s Extensions | Max Smythe, Rita Zhang | 25m |
OPA Gatekeeper is an admission webhook that implements CRDs-that-create-CRDs: constraint templates are CRDs that dynamically create constraint CRDs, with… | ||
| A New Approach to Logging as a Stack: Fluent Bit + PostgreSQL (FPS) | Jonathan Gonzalez | 19m |
Fluent Bit outputs directly into PostgreSQL using JSONB storage and PL/pgSQL triggers to split and route logs into tables, with a default table to avoid data… | ||
| A Future Journey: How to Migrate 100 Clusters Between Clouds Without Downtime? | Tobias Schneck | 41m |
Claims live migration of many clusters with no downtime by creating a VPN-based overlay, spinning up target-cloud nodes and moving workloads while keeping API… | ||
| Declarative Testing Clusters with KUTTL | Ken Sipe | 27m |
Shows how KUTTL runs declarative cluster tests using YAML files, the kuttl CLI, KinD clusters, Helm and operator workflows, and fetching test suites from a… | ||
| Customizing OPA for a "Perfect Fit" Authorization Sidecar | Patrick East | 34m |
Shows how to build a custom OPA binary in Go that actually ships and runs: a custom.fetch.jwks Rego builtin that uses the builtin context cache to fetch and… | ||
| Collaborative Leadership: Governance Beyond Company Affiliation | Dawn M Foster | 25m |
Argues that contributing projects into neutral foundations reduces vendor lock‑in using concrete examples: Kubernetes in the CNCF enabled multi‑vendor… | ||
| CNCF SIG Network Intro & Deep-Dive | Lee Calcote | 29m |
SIG Network organizes networking work across CNI, CoreDNS, Envoy, gRPC, Linkerd, NATS and Network Service Mesh and tracks about 60 service‑mesh deployment… | ||
| CNCF Serverless WG: CloudEvents and Serverless Workflow | Doug Davis, Tihomir Surdilovic | 26m |
Overview of concrete outcomes and a live demo: CloudEvents v1.0 now includes transport bindings and JSON and Avro encodings with active SDKs for Java, Go… | ||
| Cluster Reconciliation: Managing Resources Across Multiple Clusters | Vallery Lancey | 33m |
Proposes a concrete design: a cluster inventory API that declares the exact YAML desired per cluster and a cluster reconciler that creates, updates, and… | ||
| Cluster API Deep Dive | Katie Gamanji, Carlos Panato | 21m |
Cluster API is at v1alpha3 and introduces a v1alpha3 control plane resource plus five CRDs: Cluster, ControlPlane, Machine, MachineSet, MachineDeployment and… | ||
| Bypass Falco | Leonardo Di Donato | 36m |
Demonstrates concrete bypasses against Falco: an execveat syscall undetected demo shows a process spawning a shell without triggering rules, an apk symlink… | ||
| Building, Managing and Automating Clusters at Scale With Prow | Michael Splain | 20m |
Describes using Prow as the CI engine to drive cluster lifecycle: pre/ post/ periodic jobs, tide batch merges, and webhook plugins that run kops + Terraform +… | ||
| Building Linux Distributions for Fun and Profit | Marga Manterola | 30m |
Describes migrating a fleet from Ubuntu LTS to Debian testing as a rolling release, with automation for weekly upgrades, puppet-managed config and health… | ||
| Building Better Communication for Kubernetes Contributors with Marketing | Matt Broberg | 28m |
Upstream Marketing maps where 40,000 contributors actually communicate, designates the k-dev mailing list as the single reliable channel, and classifies… | ||
| Building a Cloud Native Feature Store with Feast on Kubeflow | Willem Pienaar, Oleksii Moskalenko | 32m |
Feast is a cloud-native feature store that deploys via Helm to Kubernetes, uses Postgres for a central registry, runs Spark ingestion jobs for batch and… | ||
| API Priority and Fairness: Kube-APIServer Flow-control Protection | Min Jin | 30m |
Kubernetes adds an APIPriorityAndFairness feature gate (alpha in 1.18) that classifies requests into priority levels and flow schemas, implements shuffle… | ||
| Analyzing Operational Data at Scale Using ML at Intuit | Amit Kalamkar, Vigith Maurice | 23m |
Intuit runs ~2000 services on Kubernetes and builds an Operational Data Lake that ingests events and metrics via stream processing into a schematized… | ||
| CNCF End User Tech Radar, November 2020 | Cheryl Hung, Jackie Fong, Mya Pitzeruse, Smaïne Kahlouch | 36m |
The CNCF End User Tech Radar shows Postgres outscores MySQL and core adopters list MySQL, Postgres, Kafka, Redis, Elasticsearch and Memcached as safe bets… | ||
| Predictions from the Technical Oversight Committee (TOC) | Liz Rice | 09m |
CNCF revamps the sandbox process to make early experimentation easier, and predicts some sandbox projects will fail or merge while others consolidate… | ||
| SIG-Honk AMA Panel: Hacking and Hardening in the Cloud Native Garden | Ian Coldwater, Duffie Cooley, Brad Geesaman, Rory McCune | 30m |
Explains practical red-team and blue-team tactics: start with external network and API-server audit logs, scan configs and cloud credentials, and hunt for… | ||
| Everyone is a Cloud Engineer Now | Guinevere Saenger, Leah Petersen | 05m |
Claims that broad cloud adoption means everyone is a cloud user and that cloud teams must hire from nontraditional backgrounds. Examples include Ada Developers… | ||
| Slow Down: Releasing Deliberately | Stephen Augustus | 13m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2021 Virtual from May 4–7, 2021. Learn more at https://kubecon.io. The… | ||
| Public Technical Oversight Committee (TOC) Meeting | Chris Aniszczyk | 35m |
TOC outlines concrete changes: the board runs with 10 active members, updates public meeting cadence and opens nominations for six new slots in January… | ||
| CNCF Maintainer + Ambassador Awards, hosted by Chris Aniszczyk | Chris Aniszczyk | 07m |
Virtual KubeCon draws ~23,000 attendees while CNCF hands out concrete recognitions: top ambassador goes to Ian Coldwater for broad cloud-native security… | ||
| Intro & Deep Dive: Kubernetes SIG-Storage | Xing Yang, Michelle Au | 31m |
SIG‑Storage lists concrete deliverables: Azure Disk and vSphere CSI migration beta in 1.19, CSI Windows beta in 1.19, and enhancements to volume expansion and… | ||
| nothing matches | ||