KubeCon + CloudNativeCon North America 2021
2021-10-11..2021-10-15
-- online --
[KubeCon + CloudNativeCon North America 2016, KubeCon + CloudNativeCon North America 2017, KubeCon + CloudNativeCon North America 2019, KubeCon + CloudNativeCon North America 2020 Virtual, KubeCon + CloudNativeCon North America 2021, KubeCon + CloudNativeCon North America 2022]
| title | author | length |
|---|---|---|
| Kubernetes Cloud Provider IBM project Overv... | Sahdev P. Zala, Richard Theis, Guang Ya Liu, Brad Topol | 25m |
Overview of concrete outputs and roadmap rather than high level marketing the project has added three new repositories this year including… | ||
| What You Need to Know About OpenMetrics | Richard Hartmann | 19m |
OpenMetrics is now CNCF-incubating and required by the Prometheus conformance program, and most deployments already use it: thousands of exporters, hundreds of… | ||
| SIG API Machinery Deep Dive - App... | Abu Kashem, Stefan Schimanski, Joe Betz, Federico Bongiovanni | 30m |
Server-side Apply reaches GA in 1.22 and controllers should use the new apply configurations package in client-go to avoid ghost-struct zero-value bugs (eg… | ||
| Vitess: Intro and New Features | Deepthi Sigireddi, Alkin Tezuysal, Andrew Mason, Malcolm Akinje | 40m |
Vitess is a MySQL/MariaDB clustering layer that runs in Kubernetes, serves millions of QPS in production at Slack, Square, JD.com and PlanetScale, and presents… | ||
| Admiral Bash's Island Adventure with Phi... | John Forman, Simon Forster, Danielle Cook, Robert Glenn | 40m |
Announces a concrete, five-stage cloud native maturity model with a public GitHub repo and a downloadable master spreadsheet; maps people, process, policy and… | ||
| Keynote: Building Support For Your Cloud Native Journey | Robert Duffy | 15m |
Enterprise replatforming centers on people not just tech: build a cross‑functional team with product managers and exec sponsorship, listen to allies and… | ||
| Keynote: And Here We Go: Dual-stack Networking in Kubernetes | Lachlan Evenson | 06m |
Dual-stack support for Kubernetes moves from alpha to beta and is slated stable in 1.23, enabling native IPv6 routing to pods and services while retaining IPv4… | ||
| Keynote: Creating a Holistic Developer Experience | Jasmine James | 15m |
Defines a concrete program: a four‑pillar framework — discoverability, usability, capabilities, stability — with specific methods (screen recordings, user… | ||
| Keynote: Where Do We Go From Here? | Constance Caramanolis | 16m |
CNCF grows from about 80 projects in 2020 to 130+ now, but adoption alone is not success — sustainability matters: upgrades, long‑term use, and reduced… | ||
| Keynote: Why a Cloud Native (CNCF) & Open Hardware (RISC-V) Alliance... | Kim McMahon, Katelin Ramer | 10m |
CNCF and RISC-V form an alliance to push open-hardware into cloud native stacks, claiming tangible results: a customer named Goliath deploys a RISC-V… | ||
| Keynote: Welcome to Cloud Native - We’re Here to Help | Vaibhav Kamra | 05m |
Kasten launches a free hands‑on training site learning.kasten.io with community‑created labs, badge tracking and over 3,500 people completing modules in the… | ||
| Keynote: Closing Remarks | Constance Caramanolis, Jasmine James, Stephen Augustus | 05m |
Outgoing co-chairs announce a leadership change and confirm concrete next events: a virtual China mini-con Dec 9–10, KubeCon + CloudNativeCon Europe in… | ||
| Community Awards | Chris Aniszczyk | 08m |
Community Awards list specific winners and concrete results: Tim Banister receives the Top Documentarian prize for work with sig docs, an A Ulricks wins the… | ||
| Keynote: Kubernetes Project Updates | Stephen Augustus | 14m |
Project governance publishes a transparency report and annual governance reports and starts a steering election now; code of conduct enforcement aims to catch… | ||
| Keynote: Closing Remarks | Constance Caramanolis, Jasmine James, Stephen Augustus | 03m |
Closing remarks list logistical items and gratitude: self-care resources live on the wellness and interactive sessions page, including outdoor refresh lounges… | ||
| Keynote: SBOM is Coming: Why You Should Care and How You Can Help | Frederick Kautz, Allan Friedman | 16m |
SBOM means a machine-readable dependency graph listing components and origins so teams can map CVEs, licenses, and maintenance risk to deployed artifacts… | ||
| Keynote: CNCF Technical Oversight at Scale | Cornelia Davis | 17m |
Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The… | ||
| Keynote: Maintaining the Maintainers | Stephen Augustus | 13m |
Maintainers report widespread burnout, a clear gap between contributor and maintainer roles, and concrete fixes that helped: Kubernetes Enhancement Proposals… | ||
| Keynote: APIs, the Universe, and Everything | Vijoy Pandey | 06m |
An open source tool called API Clarity reconstructs OpenAPI specs by passively observing mirrored traffic and flags surprising problems like zombie and shadow… | ||
| Keynote: CNCF Project Updates | Constance Caramanolis, Jasmine James | 12m |
CNCF updates list specific project moves and technical deliverables: five projects (Cilium, KEDA, Flux, Crossplane, OpenTelemetry) move from sandbox to… | ||
| Keynote: From One to Many, the Road to Multicluster | Kaslin Fields | 06m |
A single Kubernetes control plane can scale to 10,000 nodes, yet teams still split into multiple clusters for locality, billing, security or high availability… | ||
| Keynote: Sustaining a Contributor Community’s Next Generation | Christoph Blecker, Paris Pittman | 15m |
Kubernetes sustains growth with documented roles, scoped review teams, and automation: 8k→60k contributors and 40,000 pull requests a year rely on Prow CI and… | ||
| Keynote: A Secure Supply Chain Vision | Luke Hinds | 04m |
Vision emphasizes rising supply chain attacks that increasingly exploit open source, drawing attention from CEOs to the U.S. President and demanding concrete… | ||
| Keynote: Machine Learning on Kubernetes Made Easy With Kubeflow | Masoud Mirmomeni, Jimmy Guerrero | 15m |
Kubeflow powers a self‑service ML platform that lets data teams launch notebook in minutes using preconfigured images (TensorFlow, PyTorch, Spark, GPU… | ||
| Keynote: End Users: Leaders of the Cloud Native Maturity | Katie Gamanji | 11m |
CNCF end user community has 155 members including Niantic, Robinhood and Cardinal Health and reports concrete outcomes: Linkerd cuts one retailer’s hosting… | ||
| Keynote: Closing Remarks | Constance Caramanolis, Jasmine James, Stephen Augustus | 02m |
Announcements list next steps for attendees: an all-attendee party 6–9pm at Xbox Plaza hosted by Cast Veeam and Humio with complimentary Grammy Museum access… | ||
| Keynote: A Different Kind of Cloud Native | Tim Pepper | 08m |
Argues that cloud-native communities miss people who aren’t fully seen and backs that with specifics: Indigenous people count drops from 60 million to 7… | ||
| TAG App Delivery | Jennifer Strejevitch, Alois Reitbauer | 36m |
TAG App Delivery documents concrete outputs: an operator white paper that defines operator patterns and security guidance, a GitOps principles set and an… | ||
| Keynote: Breaking Tradition: The Future of Package Management with Kubernetes | Shatarupa Nandi | 05m |
Argues that Kubernetes needs package management with declarative APIs and shows a working stack called carvo that uses an app CR as a pod-like primitive… | ||
| Hardening the Kubernetes Software Supp... | Adolfo García Veytia, Verónica López González, Nabarun Pal | 31m |
Kubernetes release tooling now produces an SPDX Bill of Materials with v1.22 and emits two BOMs per release (artifacts and source), adds automatic artifact… | ||
| Kubernetes on Edge: Bringing Your Code to Constraine... | Steven Wong, Dejan Bosanac, Kilton Hopkins | 38m |
Demonstrations show two concrete paths: a Docker image built with buildx runs on a Raspberry Pi, a privileged container exposing /dev/gpio0 privileged… | ||
| Keynote: Welcome & Opening Remarks | Priyanka Sharma | 25m |
Conference is the first full hybrid KubeCon; attendance logistics forced in-person resilience while sponsors and LF Events made it happen. CNCF project growth… | ||
| Panel Discussion: CNCF Mentees | Kunal Kushwaha, Ihor Dvoretskyi, Divya Mohan, Uchechukwu Obasi | 35m |
Panelists map exactly how contributors get started: paid, structured mentorships like GSoC, GSoD, LFX (Community Bridge), Outreachy provide three‑month… | ||
| KubeCon + CloudNativeCon North America 2021 Highlight Video | (not provided) | 02m |
A fast montage of conference highlights that sells an in-person return with upbeat music, crowd cheering, and quick stage clips. The video shows a diverse… | ||
| SIG-NETWORK: Updates and Directions | Tim Hockin, Bowei Du | 11m |
Kubernetes networking announces concrete changes: Dual-Stack GA in 1.23 delivers IPv4+IPv6 for pods and services with migration APIs; Gateway API v1alpha2… | ||
| k8snetlook – Root-Causing k8s Network Problems in an Automated Way | Arun Sriraman | 34m |
k8snetlook automates the usual manual checklist by running on the node that hosts the source pod, entering the pod network namespace to pod-side imitation, and… | ||
| Implementation Challenges: From HPC to Containers in the Academy | Lukáš Hejtmánek, V Spišaková | 23m |
Masaryk University runs distributed Kubernetes clusters built on RKE2 with Rancher dashboard and exposes NFS, Ceph RBD and S3 plus GPUs and InfiniBand to… | ||
| Automated, Distributed Systems Testing for Kubernetes Controllers | Lalith Suresh, Xudong Sun | 28m |
Sieve is an automated tester that runs controllers inside instrumented kind clusters, learns execution traces, and then replays 21 event sequences to inject… | ||
| How to Improve Your Kubernetes Experience with Service Mesh and MLOps | Maksim Chudnovskii, Igor Gustomyasov | 29m |
Private cloud runs 50+ on‑prem clusters (500+ compute nodes, 10+ Istio meshes) and collects Istio service‑mesh telemetry into Prometheus/Timeseries storage to… | ||
| Disaster Recovery of Stateful Applications in a Multi-Cluster Environment | Orit Wasserman, Shyamsundar Ranganathan | 35m |
Demonstrates a concrete DR system built on Ceph/Rook + RBD and a CSI extension (VolumeReplication) with Open Cluster Management to align clusters and Ramen DR… | ||
| Postgres Extensions in Kubernetes | Álvaro Hernández | 29m |
An open source Postgres operator called stackris implements dynamic loading of compiled extensions by downloading them into a persistent volume, relocating… | ||
| Container Checkpoint/Restore at Scale for Fast Pod Startup Time | Ritesh Naik | 28m |
MathWorks runs container checkpoint/restore in production since 2016 and reports roughly 70-fold improvement in cold-start latency, turning 30s app… | ||
| Observe with Rust: OpenTelemetry and Tremor | Gary White Jr. | 27m |
Tremor (Rust) handles Wayfair peak load of about 5 GB/s during Cyber Five and replaces a 100-node Logstash fleet, cutting ingest costs from $40k to <$1k per… | ||
| Back to the Drawing Board: Building Containers with SBoMs | Nisha Kumar | 24m |
Containers lose package metadata during multi-stage builds and docker-slim, so static scanners miss contents. Demonstrates how to generate SBoM at build time… | ||
| Unraveling the Mystery of Versioning CRDs | Harsh Thakur | 17m |
Explains a concrete workflow for CRD versioning using kubebuilder scaffolding: a demo splits a single fullName into firstName/lastName, implements a conversion… | ||
| Case Study : Improving Resilience of Applications in Telco Environme... | Uma Mukkara, Samar Sidharth | 33m |
Orange runs OpenStack on Kubernetes at telco scale and uses Litmus to run repeatable chaos workflows with probes and CrossTesting for custom validations… | ||
| Policy Matters! The Why, What, and How of Kubernetes Policy Management | Jayashree Ramanathan, Aradhna Chetal, Jim Bugwadia, Robert Ficcaglia | 27m |
Panel describes concrete outputs: a community policy report CRD that several engines (Kyverno Gatekeeper kube-bench Falco) already emit to standardize results… | ||
| The Future of Multi-Tenancy in Kubernetes | Tasha Drew, Adrian Ludwin, Fei Guo, Jim Bugwadia | 26m |
Working group incubates and graduates tools that map to three canonical models — namespaces-as-a-service, multi-cluster (one cluster per tenant), and virtual… | ||
| OpenTelemetry Collector Deployment Patterns | Juraci Paixão Kröhling | 25m |
Covers concrete OpenTelemetry Collector setups: agent and collector sidecar and daemonset patterns with per-pod tuning, a normalizer that unifies labels… | ||
| Storage and Networking: Rook on Multus | Sebastien Han, Rohan Gupta | 25m |
Demo cluster runs Rook‑Ceph using Rook-Ceph on Multus and macvlan with Whereabouts IPAM, creating network-attachment-definitions for separate public and… | ||
| SIG-Multicluster Intro and Deep Dive | Paul Morie, Jeremy Olmsted-Thompson, Laura Lorenz | 22m |
SIG-Multicluster defines a cluster set concept with predictable namespace sameness, a ClusterProperty CRD publishing a stable cluster id and cluster-set… | ||
| My Container Image has 500 Vulnerabilities, Now What? | Matt Jarvis | 25m |
A Snyk scan finds extreme cases like 800+ vulnerabilities in a Node image but shows concrete fixes: ~40% fixable by upgrading the base image and ~20% resolved… | ||
| Shifting Spotify Engineering from Spreadsheets to Backstage | Johan Haals, Patrik Oldsberg | 27m |
Spotify describes moving from spreadsheets to a developer portal that centralizes metadata in YAML catalog-info.yaml, automates project creation with software… | ||
| Why is Anyone Using Kubernetes Anyway? | Tasha Drew, Josephene Pynadath, Gaby Moreno Cesar, Carl J Pearson | 25m |
SIG Usability runs a two-year JTBD study that turns anonymized, hour-plus interviews into a survey scoring importance versus satisfaction to pinpoint… | ||
| Microservices Made Easy! | Donovan Brown, Jessica Deen | 28m |
Shows concrete steps: a .NET Web API is run with a Dapr sidecar to get service invocation, state (Redis locally then Azure Storage), pub/sub (Redis → Azure… | ||
| Who Killed My Pod? #Whodunit | Suneeta Mall | 32m |
A newly deployed, well‑tested app on a self‑managed Kubernetes cluster repeatedly gets OOMKilled with exit code 137, crashing into CrashLoopBackOff… | ||
| What's New With SIG-Windows: HostProcess and Developer environments | B. Smith, D. Canter, J. Vyas, F. Wilken | 25m |
Updates include HostProcess (alpha in 1.22) which runs container images as real host processes (can mount host volumes, install drivers and services, and run… | ||
| What You Need to Know Before Using Local Persistent Volumes | Sébastien Guilloux | 35m |
Local PersistentVolumes require explicit provisioning and operational work: choose manual, static using the local-pv static provisioner daemonset that creates… | ||
| McK8s: Container Orchestration in Kubernetes Multi-Clusters | Mulugeta Ayalew Tamiru | 33m |
An integrated system that extends KubeFed to place, autoscale, offload and provision clusters using KubeFed, Cluster API, Prometheus, Cilium and Surf is… | ||
| Rook: Intro and Ceph Deep Dive | Travis Nielsen, Sebastien Han, Blaine Gardner, Satoru Takeuchi | 30m |
Rook is an operator that deploys and manages Ceph inside Kubernetes, delivering block, file and S3-compatible object storage; recent v1.7 (Aug 2021) adds… | ||
| Roll Out the Red Carpet for Production Kubernetes Clusters with a Kube-vip | Dan Finneran | 32m |
Kube-vip provides a single highly available control-plane VIP using Kubernetes leader election (replacing unstable Raft), removes the need for separate… | ||
| RabbitMQ on Kubernetes Deep Dive | David Ansari | 31m |
Demos a RabbitMQ Cluster Operator that boots a cluster with a single custom resource, creates dependent services/secrets, and performs rolling upgrades while… | ||
| Manage More Clusters with Less Hassle, with Argo CD Application Sets | Jonathan West, Kshama Jain | 35m |
Argo CD ApplicationSet is a Kubernetes custom resource plus controller that generates standard Argo CD Applications from a templated application and pluggable… | ||
| Deep Dive CoreDNS | Yong Tang, Miek Gieben, John Belamaric | 18m |
CoreDNS is a plugin-first DNS server used as Kubernetes’ default since 1.13 and released 1.8.0 (Oct 22, 2020) which adds transfer, local and minimal plugins… | ||
| SIG Events: Using CloudEvents to Create an Interoperable CI/CD Ecosystem | Andrea Frittoli | 28m |
PoC wires Tekton pipelines and Keptn orchestration through CloudEvents and a Knative Eventing broker so pipeline.started, pipeline.finished and artifact… | ||
| Cloud Native and Kubernetes Observability Panel: The State of Union | Bartek Plotka, Liz Fong Jones, Josh Suereth, Frederic Branczyk, Rags Srinivas | 33m |
Panel gives concrete outcomes and tooling: real cases where tracing and metrics reduced 99th percentile latency by half, adoption paths using OpenTelemetry… | ||
| Cloud-Agnostic Design for Fun and Profit | Alex Meijer, Anusha Iyer | 36m |
Two-year case study of a startup that keeps running nearly free on rotating startup credits by rebuilding the same platform across providers. Uses Kubernetes… | ||
| Kubernetes Supply Chain Security: The Software Factory | Andrew Martin | 36m |
Claims that a Kubernetes Software Factory can greatly reduce supply chain risk while not eliminating it, and that signing is easy, verification is hard. Shows… | ||
| Kubernetes Exposed! Seven of Nine Hidden Secrets That Will Give You Pause | Ian Coldwater, Brad Geesaman | 29m |
Kubernetes defaults bite: individual TLS certs can’t be revoked so you must rebuild CA chains; Kubernetes disables Docker’s seccomp defaults unless cluster and… | ||
| Building a Multi Cluster/Env Service Mesh at Airbnb | Weibo He, Stephen Chan | 36m |
Airbnb runs Istio with a single external control plane and a flat VPC network (AWS VPC CNI + prefix delegation) to avoid gateway hops, scale across tens of… | ||
| Sigstore: How We Started, Where We Are, Where We are Headed | Bob Callaway, Dan Lorenc | 40m |
Sigstore provides a free, automated code-signing service modeled after Let's Encrypt for code signing and already protects Kubernetes release images… | ||
| What Kind of CPU is it Anyways? Airbnb's Journey to Heterogeneous Clusters | David Morrison, Evan Sheng | 35m |
Airbnb migrates Kubernetes from many single-instance-type clusters to mixed-instance clusters using EC2 ASGs and cluster autoscaler, cutting operational… | ||
| Overview and State of Linkerd | Oliver Gould | 28m |
Linkerd is an ultra‑light Kubernetes service mesh with a Rust data‑plane proxy (linkerd2‑proxy) built on tokio/hyper/h2/tower, claiming much lower latency and… | ||
| Trimaran: Real Load Aware Scheduling in Kubernetes | Abdul Qadeer, Chen Wang | 33m |
Trimaran adds two scheduler scoring plugins, TargetLoadPacking and LoadVariationRiskBalancing, plus a cluster-wide LoadWatcher that pulls Prometheus, SignalFX… | ||
| Creating Cloud Native Security | Emily Fox, Brandon Lum, Andres Vega | 40m |
Tech Security TAG defines concrete outputs not vague theory: a white paper and an interactive security map (desktop-only) that maps controls to tools, a living… | ||
| Using SLOs for Continuous Performance Optimizations of Your K8s Workloads | Andreas Grabner | 37m |
Keptn implements automated SLO-based performance validation for Kubernetes by pulling SLIs from Prometheus, Dynatrace or other providers, grading builds on a… | ||
| Effortless Profiling on Kubernetes | Eden Federman | 20m |
Tool demonstrates live, no-restart profiling on Kubernetes by launching a sidecar profiler pod that shares PID and filesystem and copies out flamegraphs. It… | ||
| Cloud Provider Extraction: What We’ve Done, Where We Are and What's Left | W Fender, S Wong, N Turner | 35m |
Status report on removing in-tree cloud provider code: the API Server no longer needs the cloud provider library and SSHTunnels deleted, cloud loops move into… | ||
| GitOps+Jenkins-CI With Declarative Everything | Kingdon Patrick Barrett | 37m |
Shows Jenkins deployed declaratively via Flux Helm Controller using a HelmRelease CRD (replicas bumped from 0 to 1), Jenkins builds run on Kubernetes agents… | ||
| Security Through Transparency: Kubernetes SIG Security Update | Ian Coldwater, Savitha Raghunathan, Rey Lejano, Pushkar Joglekar | 22m |
Kubernetes SIG Security reports concrete outputs: prowjobs every six hours scan build-time dependencies and release images for vulnerabilities; a programmatic… | ||
| Movienight 101: How to Power a Video Streaming with Kubernetes and WebRTC | Rachel Sheikh | 14m |
Prototype implements webrtc peer-to-peer streaming with Firebase signaling, OBS for capture, Google STUN and a TURN fallback when NATs block direct paths (≈14%… | ||
| Shh, It’s a Secret: Managing Your Secrets in a GitOps Way | Jake Wernette, Josh Kayani | 35m |
A GitOps-friendly secret flow that actually replaces placeholders in committed YAML during Argo CD’s repo-server step and requires no cluster operator: the… | ||
| Putting Into Practice the Skills You've Learned Contributing to Kubernetes | Kiran "Rin" Oliver | 14m |
Concrete steps for turning Kubernetes contributions into career progress: join the Kubernetes Slack and SIG meetings, review PRs, do issue triage (note the… | ||
| A Safari of Kubernetes and its Natural Habitat | Noah Abrahams | 27m |
A lighthearted run-through of concrete failures and fixes: developers clone apps via Argo CD and Helm until node IPs exhaust, autoscaling adds nodes but hits… | ||
| Cloud Native Apps with Server-Side WebAssembly | Liam Randall | 32m |
Server-side WebAssembly compiles one binary that runs on Kubernetes, on a laptop, and across AWS and GCP with live failover demonstrated: the same Wasm module… | ||
| The Control Loop As An Application Development Framework | Nick Santos | 26m |
Argues that Kubernetes’ control-loop primitives make a useful app framework and shows Tilt pulling in controller-runtime, an embedded local API server, and… | ||
| Customizing Kustomize with Client-Side Custom Resources | Katrina Verey, Jeff Regan | 37m |
Kustomize extends via client‑side KRM functions packaged as containers, not templates, and recommends containerized KRM functions over legacy plugins or… | ||
| Capacity Scheduling for Elastic Resource Sharing in Kubernetes | Qingcan Wang, Yuan Chen | 36m |
Kubernetes gets an ElasticQuota CRD plus three scheduler plugins (pre-filter, reserve, post-filter) that enforce per-namespace minimum and maximum requests… | ||
| Helm: The Charts and the Curious | Karena Angell, Paul C Czarkowski, Andrew Block, Scott Rigby | 38m |
Covers concrete Helm practices: using helm create with custom starters and library charts to reduce boilerplate, templating with Go/Sprig, hooks and lookups… | ||
| Panel Discussion: OpenGitOps and the GitOps Working Group | Cornelia Davis, Dan Garfield, Christian Hernandez, Chris Sanders, Leonardo Murillo | 45m |
Panel announces OpenGitOps 1.0 as four concrete principles created with ~80–90 participants from 60+ companies, aiming for vendor-neutral conformance… | ||
| TAG Observability Update | Matt Young, Alolita Sharma | 29m |
TAG Observability reports active work on cross‑project interoperability, due‑diligence for project incubation (Pixie noted), an end‑user white paper in… | ||
| Kubernetes Data Protection WG Intro & Deep Dive | Xing Yang, Xiangqian Yu | 30m |
Working Group catalogs concrete gaps and prototypes APIs: Kubernetes has volume snapshot support but lacks an export-oriented volume backup API and an… | ||
| Envoy Maintainer Q&A | Lizan Zhou | 12m |
Roadmap focuses on two concrete efforts: HTTP/3 support actively driven by Google, and stabilizing WebAssembly extensions via the proxy-wasm project (current… | ||
| Exploiting a Slightly Peculiar Volume Configuration with SIG-Honk | Ian Coldwater, Brad Geesaman, Rory McCune, Duffie Cooley | 34m |
A hacker crew reads CVE-2021-30465 in runc, builds a proof-of-concept exploit that uses an emptyDir symlink race during volume mount to win a TOCTOU and mount… | ||
| Cloud Native Storage: Storage TAG Intro, Projects, Landscape & Technology | Alex Chircop, Raffaele Spazzoli | 35m |
Storage TAG runs due diligence on CNCF storage projects (Rook, Vitess, etcd, TiKV, Dragonfly) and publishes three actionable whitepapers: Storage Landscape… | ||
| Building Catalogs of Operators for OLM the Declarative Way | Joe Lanford, Anik Bhattacharjee | 33m |
Catalogs move from single-file sqlite images to a declarative file-based catalog of YAML/JSON index files, letting each operator keep package metadata and… | ||
| Kubernetes SIG Docs: A Deep Dive | Jim Angel, Chris Metz, Brad Topol | 32m |
Kubernetes documentation is stored as markdown and generated by Hugo + Doxy theme, published by Netlify preview builds that run the hugo command and flip… | ||
| How NOT to Start with Kubernetes | Christian Heckelmann | 31m |
Argument: don’t default to Kubernetes; pick it only when the tradeoffs match. Details: a manual kubeadm POC leads to upgrade broke cluster, Rancher can lock in… | ||
| SIG Instrumentation Introduction and Deep Dive | Han Kang, David Ashpole, Elana Hashman, Frederic Branczyk | 24m |
SIG Instrumentation covers concrete work: it migrates Kubernetes to structured logging (kubelet moved in 1.21) with CI static checks to block non‑JSON logs and… | ||
| EmpowerUs | Aparna Dhinakaran, Elenore Bastian, Sophia Vargas, Colleen Coll | 01h 03m |
Panelists argue concrete tactics for influence and combating imposter syndrome: cite Stack Overflow numbers (developers who are women ~5% globally, ~9% in the… | ||
| The Hitchhikers Guide to Container Security | Tunde Olu-Isa, Jed Salazar | 26m |
Demo shows a privileged Pod using hostPID and hostNetwork plus a hostPath mount of /etc/kubernetes on a control-plane node to read admin.conf and drop a… | ||
| Testing Kubernetes Clusters - Building Confidence in Your Changes | Guy Templeton, Matteo Ruina | 30m |
Skyscanner builds a Sonobuoy plugin that runs targeted Kubernetes e2e tests (reusing upstream e2e code) and wires test exit codes into Spinnaker CD, giving… | ||
| Fine-Grained User Authorization for Kubernetes with OPA and LDAP | Cagri Cetin, Quentin Long | 26m |
Yelp builds an OPA-based authorization system that replaces shared admin certs, tying human users to Okta/Active Directory JWTs and pulling team and service… | ||
| A K8s-Based Workload Allocation Optimizer for Minimizing Power Consumption | Ying-Feng Hsu | 24m |
Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The… | ||
| A Tall Tale of GitOps | Prasanjit Singh | 23m |
Claims that GitOps makes infrastructure reproducible by using Git as the single source of truth, automating changes via CI/CD + Git pull request workflow and… | ||
| A Safer Curl | Bash for the Cloud | Carolyn Van Slyck | 27m |
Quick one-liner replacement for curl | bash that isolates installers in a container, packages Helm/Terraform/CLIs into a versioned OCI bundle, and fetches… | ||
| Beyond Block Diagrams: Different Ways of Understanding K8s Architecture | Kim Schlesinger | 23m |
Shows three concrete ways to see Kubernetes operate: a time-sequence diagram that traces kubectl create -f pod.yaml step‑by‑step (API server writes to etcd… | ||
| Know Your Enemy: Mapping Security Risks Using Threat Matrix for Kubernetes | Yossi Weizman, Ram Pliskin | 21m |
Microsoft publishes an updated Threat Matrix for Kubernetes that maps concrete TTPs (examples: node-managed identity token theft, CoreDNS configmap poisoning… | ||
| Taking Your Database Beyond the Border of a Single Kubernetes Cluster | Christopher Bradford, Ty Morton | 26m |
Runs Apache Cassandra as a six‑node cluster (2 nodes per zone across 3 zones) and expands to Cassandra across two regions by creating a second Kubernetes… | ||
| Insights into Unsecured Kubernetes in the Wild | Jay Chen, Aviv Sasson | 35m |
Internet scans and honeypot logging find 2,100 unsecured clusters (about 5,300 nodes, 31,340 CPUs, 75,270 pods) leaking secrets and images; attackers deploy… | ||
| Registries After Dark | Daniel Mangum, Jon Johnson | 28m |
Explains how registries implement the OCI and distribution specs, showing real uploads with crane copy and curl, and demonstrating a proxy registry that… | ||
| How We Built a Cloud On K3s: The Learnings Of Growing Up Fast | Alex Jones, Anais Urlichs | 16m |
Civo builds a managed cloud on k3s by packing tenant k3s clusters as VMs run inside pods using libvirt + kubevirt VMs, deployed on zero‑touch open‑compute… | ||
| Improving Dev Experience: How We Built a Cloud Native Dev Stack At Scale | Srinidhi S, Venkatesan Vaidyanathan | 32m |
Razorpay builds a cloud native “dev stack” that lets hundreds of engineers run ephemeral service fleets on EKS using devspace file sync to hot‑reload local… | ||
| Conformance Testing the Kubernetes API: Tooling that Makes the Difference | Stephen Heywood, Caleb Woodbine | 20m |
Conformance work uses a small toolchain: apisnoop.cncf.io (snoop DB + audit logger + web) ingests OpenAPI and audit logs to find untested endpoints, while… | ||
| Kubernetes SIG Apps Updates | Janet Kuo, Ken Owens, Maciej Szulik | 16m |
SIG Apps reports CronJob to GA and PodDisruptionBudget to stable, plus concrete controller work: DaemonSet gains maxSurge, StatefulSet gains minReadySeconds… | ||
| Real-Time Data Anonymization the Serverless Way | Yuval Lifshitz, Huamin Chen | 25m |
Architecture that anonymizes images on upload by extending Ceph with a Ceph SQS-compatible API so KEDA can pull notifications directly from object storage and… | ||
| Cloud Provider OpenStack Intro & Update | Anusha Ramineni, Lingxian Kong | 31m |
Cloud Provider OpenStack runs a set of Kubernetes integrations: OpenStack Cloud Controller Manager, Octavia Ingress Controller, Cinder and Manila CSI drivers… | ||
| Cloud Native Superpowers with eBPF | Liz Rice | 24m |
eBPF runs small programs in the kernel and attach to execve or network events, with a verifier that enforces safety so code cannot crash or loop; demos use… | ||
| What's New in CRI-O? | Mrunal Patel, Urvashi Mohnani, Sascha Grunert, Peter Hunt | 26m |
CRI‑O 1.22+ shows concrete changes: installable packages and static binaries, kubelet runtime endpoint set to CRI‑O socket, and demos of cluster bring‑up… | ||
| Kubernetes and Checkpoint Restore | Adrian Reber | 26m |
CRIU-based container checkpointing is shown working end-to-end: ptrace plus injected parasite code dumps process state and memory, file descriptors and FS… | ||
| Getting Involved in the K8s Release Shadow Program | Divya Mohan | 26m |
Kubernetes Release Shadow Program runs as a mentorship for 3–4 months of voluntary work coordinating release artifacts (no coding required) across verticals… | ||
| The Prometheus Conformance Program | Richard Hartmann | 11m |
A public test suite validates Prometheus behavior and grants a time‑limited trademarked mark when relevant compliance scores hit 100%, with results either… | ||
| Fluid - Build Data Orchestration in Kubernetes | Yang Che, Yuandong Xie | 29m |
Fluid is an open source Kubernetes data-orchestration layer that exposes DataSet and Runtime CRDs, runs cache runtimes (Alluxio/JuiceFS-style) and adds a cache… | ||
| Flux's Roadmap to General Availability | Hidde Beydals, Michael Bridgen | 24m |
Flux v2 is a collection of controllers with stable APIs that multiplex sources, sinks and updates and aim for GA once end-to-end test coverage and standardized… | ||
| Faster Container Image Distribution on a Variety of Tools with Lazy Pulling | Kohei Tokunaga, Tao Peng | 30m |
Pulling causes 76% of container start time while only 6.4% of bytes are read, so lazy pulling downloads needed file chunks on demand instead of the whole… | ||
| Level Unlocked: GitOps to the Edge and Infrastructure Provisioning | Katie Gamanji | 26m |
GitOps implements zero‑touch infra and edge delivery: a Helm chart stored in git and watched by FluxCD (30s polling) drives ClusterAPI controllers to provision… | ||
| Clusterless - Utilizing a Cluster of Clusters Seamlessly | Fei Guo, Chris Hein | 29m |
Design treats multiple clusters as Pod resource providers and preserves no new APIs by scheduling at pod/namespace granularity using virtual cluster… | ||
| Panel Discussion: OSS101 - Introduction to Open Source for Students | Savitha Raghunathan, Joe Kutner, Mritunjay Sharma, Anushka Mittal | 34m |
Panel explains exactly how to get from zero to a first contribution: finding good first issues on GitHub, submitting documentation fixes (one corrected README… | ||
| Panel Discussion: Marketing as Code: How to Rock Out with Non-Code Contributions | Bart Farrell, Kunal Kushwaha, Kaslin Fields, Matt Broberg, Chris Short | 38m |
Panel lays out concrete steps: join SIG and upstream marketing meetings weekly, learn minimal git and markdown, pick a small task and sustain it for three to… | ||
| Kubernetes SIG Storage Introduction and Update | Xing Yang, Michelle Au | 34m |
SIG Storage describes concrete changes: CSI migration translates legacy in-tree volume types (aws-ebs, azure-disk, azure-file, gcepd, cinder, vSphere) to CSI… | ||
| Deciphering Your Way to the World of Golang | Mritunjay Sharma | 34m |
A small Go CLI decodes a hex string, tries all 256 keys with single-byte XOR brute force, scores each candidate by summing English-letter weights, and picks… | ||
| Regulations, Ethics And Messy Data: Tales From An Open Source Analyst | Sophia Vargas | 35m |
Shows concrete pitfalls and fixes for building open source metrics: Git history and GitHub APIs change over time, historical snapshots disagree, and bot noise… | ||
| A Vulnerable Tale About Burnout | Julia Simon | 33m |
Personal burnout escalates through stacked life events and perfectionist habits, leads to a medical leave of 3.5 months, and resolves via structured rest, talk… | ||
| Kubernetes SIG CLI: Intro and Updates | Eddie Zaneski, Katrina Verey, Sean Sullivan | 25m |
SIG CLI manages kubectl, kustomize, plugins and new GUI framework kui, and outlines concrete KEPs and release targets: KEP 2775 proposes kubectl delete… | ||
| Kubernetes VMware User Group: Using GPUs with K8s on vSphere | Steven Wong, Myles Gray | 39m |
Demonstrates Bitfusion 4.0 pooling four vSphere GPUs (each ~16 GB VRAM, shown as Tesla D4) into server VMs and serving them to pods on GPU-less nodes via a… | ||
| Function to Container - Building a FaaS Experience | Evan Anderson | 31m |
Argues that developer-friendly FaaS comes from auto-generating the container shape rather than exposing Dockerfiles, and shows a working demo using buildpacks… | ||
| How Event Driven Autoscaling in Kubernetes Can Combat Climate Change | Annie Talvasto, Adi Polak | 38m |
Shows that event driven autoscaling actually cuts cloud waste and carbon by scaling on message load using KEDA on AKS with Azure Service Bus (demo uses a .NET… | ||
| Notary: State of the Container Supply Chain | Justin Cormack, Steve Lasker | 35m |
Notary v2 decouples identity from location so cryptographic signatures travel with images rather than staying tied to a registry, using the notation client and… | ||
| How to put a Database in Kubernetes | Jeffrey Carpenter | 35m |
Shows how databases map to Kubernetes primitives with concrete examples: a single‑node MySQL deployed via a Deployment plus a single persistent volume claim… | ||
| Migrating to Service Mesh at Scale to Support Billions of $ Transactions | Imre Nagi, Giri Kuncoro | 32m |
Gopay moves its Kubernetes fleet behind a service mesh to run billions of dollars in payments at peaks of 15,000 tx/min, building a developer-facing platform… | ||
| Securing Content Repositories with the Update Framework (TUF) | Marina Moore, Joshua Lock | 22m |
Explains how TUF guarantees freshness, consistency and integrity using cryptographic signatures, short-expiry timestamps, role separation, threshold keys and… | ||
| Turn Contributors into Maintainers with TAG Contributor Strategy | Josh Berkus, Catherine Paganini | 31m |
Provides ready-to-use templates and a measurable process to turn contributors into maintainers: a contributor ladder template (six levels in the repo, typical… | ||
| Serving Machine Learning Models at Scale Using KServing | Animesh Singh | 40m |
KServe adds a Model Mesh component that packs many models into shared runtimes and routes to them using a distributed model mesh LRU cache, reducing per-model… | ||
| Beyond Namespaces: Virtual Clusters are the Future of Multi-Tenancy | Lukas Gentele | 34m |
v-cluster runs a full control plane as a pod inside a namespace: a statefulset with a separate API server and datastore (k3s + sqlite by default) plus a syncer… | ||
| AIoT Ops - Using Kubernetes and ML Ops to Build Edge ML Applications | Asheesh Goja | 45m |
Claim: a full ML Ops pipeline runs on the edge so training, drift detection, quantization and redeploy happen without cloud dependency. Implementation uses… | ||
| Untangling the Multi-Cloud Identity and Access Problem With SPIFFE Tornjak | B Lum, M Sabath | 26m |
Claim: replace fragile cloud-to-cloud federation and long‑lived keys with an organization‑wide workload identity. Implementation uses SPIFFE/SPIRE/Tornjak… | ||
| Keeping Up with the CVEs: How to Find a Needle in a Haystack? | Pushkar Joglekar | 35m |
An internal image scan returns 314159 vulnerabilities, forcing a practical triage: ignore unfixed or irrelevant CVEs, prioritize only fixable CVEs in the code… | ||
| From Storming to Performing: Growing Your Project's Contributor Experience | Matt Butcher, Karen Chu | 35m |
Practical checklist for growing an open source project: use GitHub Pages or Netlify for a quick website, keep a current quick-start and maintainer guide, adopt… | ||
| Public Technical Oversight Committee (TOC) Meeting | Chris Aniszczyk | 35m |
Technical governance separates funding (Governing Board) from technical decisions made by the TOC, which oversees 120 projects and uses three maturity levels… | ||
| gRPC Proxyless Service Mesh with Security | Sanjay M Pujare | 34m |
Adds mTLS for xDS-managed gRPC by wiring Traffic Director (xDS) security configs to gRPC channels and servers, and shipping a certificate provider plugin… | ||
| Thanos: Highly Available, Pluggable, Long Term Metric Storage for Everyone! | Wiard van Rij | 27m |
Thanos provides a Prometheus-compatible path to scale and keep metrics for years by running a sidecar next to each Prometheus that uploads TSDB blocks to an… | ||
| Quantifying the Business Value of Cloud-Native Data Management | Prashanto Kochavara | 28m |
A pseudo customer example uses 100 apps × 100 GB with 100 captures/day and a 10% change rate to show concrete savings: enabling test-data management drives a… | ||
| A New Generation of NATS | Matthias Hanel, Jean-Noël Moyne | 29m |
NATS v2 adds JetStream as a new persistence layer replacing STAN, claiming an optimized raft quorum (1/3/5 clusters) with mirroring, file or memory storage… | ||
| Large-Scale Practice of Persistent Memory in Alibaba Cloud | Junbao Kan, Qingcan Wang | 30m |
Alibaba Cloud describes a production PMEM stack that puts persistent memory into Kubernetes as volumes and reports real node capacity to the scheduler, with a… | ||
| Deploying Unikernels in Production with Kubernetes | Alex Jung | 25m |
KubeKraft implements a runtime and containerd plugin that lets Kubernetes pull OCI-packed unikernel images and launch them via runu as VMs instead of… | ||
| Measuring the Health of Your CNCF Project: Going Beyond Stars and Forks | Dawn M Foster | 27m |
Stars and forks don’t prove health; measurable signals do. The talk shows using devstats and CHAOSS-derived metrics to track time-to-first-response, median… | ||
| CNCF Governing Board Session | Arun Gupta, Aparna Sinha, Priyanka Sharma | 36m |
Overview of how the foundation runs itself: a 28-member governing board handles strategy, budgets and administration while a separate TOC controls project… | ||
| Harbor - Enterprise Cloud Native Artifact Registry | Alex Xu, Yan Wang, Steven Zou, Deng Qian, Ziming Zhang | 33m |
Harbor explains concrete changes and working demos: the 2.3 release is out and 2.4 adds OpenTelemetry tracing instrumenting core, registry and jobservice to… | ||
| Argo and Tekton: Pushing the Boundaries of the Possible on Kubernetes | Alex Collins, Jason Hall | 38m |
Argo Workflows and Tekton run workflow engines on Kubernetes and show concrete workarounds and limits: they use entrypoint rewriting (emissary/commandlet) to… | ||
| Stream vs. Batch: Leveraging M3 and Thanos for Real-Time Aggregation | Gibbs Cullen | 19m |
Compares two concrete implementations: M3 uses streaming roll‑up rules on the ingest path to reconstitute aggregated metrics as new counters/gauges and serve… | ||
| SPIFFE: In Theory and in Practice | Evan Gilman, Andrew Harding | 36m |
SPIFFE provides a platform-agnostic workload identity: workloads get cryptographically verifiable SVIDs (supported types X.509 and JWT SVIDs) via a node-local… | ||
| SIG-Autoscaling: Introduction + HPA/VPA Updates | Joe Burnett, Marcin Wielgus | 24m |
Overview of Kubernetes autoscaling fundamentals and concrete changes: Horizontal Pod Autoscaler computes independent recommendations per metric and picks the… | ||
| Fluentd and Fluent Bit | Eduardo Silva | 34m |
Fluent Bit is a C-based, lightweight log and now metrics agent that claims ~10x better performance than Fluentd (Ruby) in recent benchmarks and registers ~2M… | ||
| Correlating Signals in Opentelemetry: Benefits, Stories, and the Road Ahead | Morgan McLean, Jaana Dogan | 28m |
OpenTelemetry’s collector and SDKs capture traces, metrics, logs and resource metadata and let back ends correlate them so investigations jump from service… | ||
| The Argo Ecosystem: Tailoring Your Installation Through Community Add-ons | Jesse Suen, Alexander Matyushentsev | 35m |
Argo maintains an incubator with over three dozen ecosystem projects and demos how specific add-ons work together: argo-cd-image-updater watches registries and… | ||
| Building Prometheus Metrics Support in OpenTelemetry | Alolita Sharma | 22m |
OpenTelemetry now has OTLP stable (Apr 2021) and a stable metrics data model (July 2021) and is building full Prometheus interoperability by adding a… | ||
| Design Up Front: Socializing Ideas with Enhancement Proposals | K Garrison, A Kaplan, C Wilson | 34m |
Kubernetes, Tekton and Shipwright run structured enhancement proposals stored in GitHub single source of truth repos with a README design and a metadata file… | ||
| Intro and Deep Dive to the CNF Working Group | Ian Wells, Jeffrey Saelens, Taylor Carpenter | 24m |
CNF Working Group defines concrete best practices for running Cloud Native Network Functions on Kubernetes, with an emphasis on portability, flexibility… | ||
| SIG-Scheduling Intro and Deep Dive | Wei Huang | 34m |
Overview of kube-scheduler internals and concrete knobs: how the cache, queue, plugin-based scheduling framework and binding flow pick nodes; plugin examples… | ||
| Tools That I Wish Existed 3 Years Ago To Build a SaaS Offering | Mauricio Salatino | 35m |
Shows concrete tooling and workflows to build a SaaS conference platform end to end: Tekton pipelines run service builds and environment syncs, Helm charts… | ||
| Introduction to Open Policy Agent | Ash Narkar, Rita Zhang | 29m |
Open Policy Agent (OPA) is a graduated CNCF policy engine with ~150 contributors, ~4,500 Slack members and ~5,000 GitHub stars that uses the declarative… | ||
| The Hitchhiker's Guide to Kubernetes Vulnerabilities | Robert Clark, Micah Hausler | 29m |
Historical analysis shows 39 vulnerabilities tied to Kubernetes releases with a big spike around 1.14 in 2019 and most recent discoveries driven by the bug… | ||
| Intro to Cloud Native Buildpacks | Javier Romero, Sambhav Kothari | 24m |
Cloud Native Buildpacks turn app source into OCI images without Dockerfiles and demonstrate concrete tooling: a local pack CLI build of a Spring Boot app… | ||
| Do Not Disturb Mode: Fine-Tuning Resources for Latency Sensitive Workloads | A Kervinen, P Hunt | 21m |
Kubernetes gains node-local class-based QoS via cri-o 1.22 enabling Intel RDT for cache and memory bandwidth and a block I/O class file for cgroup-level… | ||
| Building a Successful Open Source Community as an End-user Company | Henrik Blixt, Kareena Hirani | 31m |
Intuit carries Argo after acquiring Applatix and grows four modular projects — argo cd, argo rollouts, argo workflows, argo events — used for GitOps… | ||
| Intro + DeepDive: SIG Scalability | Wojciech Tyczyński, Marcel Zięba | 29m |
SIG Scalability defines SLIs/SLOs, publishes limits like 30 pods per node and 10,000 services, and runs automated performance suites using cluster-loader and… | ||
| Cortex: Intro and Production Tips | Bryan Boreham, Alvin Lin | 20m |
Cortex is a Prometheus-compatible, multi-tenant time-series store that runs across dozens of servers and handles millions of samples per second, using S3-style… | ||
| Contour, a High Performance Multitenant Ingress Controller for Kubernetes | Steve Sloka, Alex Xu | 35m |
Contour is a high-performance, multitenant Kubernetes ingress control plane that configures Envoy and demonstrably routes HTTP traffic by… | ||
| The Hidden Costs - How "free" is Kubernetes really? | Matthias Haeussler, Thorsten Jakoby | 29m |
Kubernetes adoption uncovers many nonobvious costs: VM billing means container density matters, observability and audit logs can generate half a million… | ||
| Real-time Kubernetes: How Entain Australia 10x'd throughput with Linkerd | Steve Gray | 19m |
Entain Australia runs ~300 microservices across five clusters (≈3,000 pods) processing ~10 billion external updates per month and hits hot paths with gRPC… | ||
| How We Reduced Write Latency in TiKV? | Liqi Geng | 18m |
Raftstore turns out to be the biggest write-latency bottleneck, so the team extracts disk work into a dedicated IO thread and implements asynchronous ready… | ||
| Conprof - Profiling in the cloud-native era | Matthias Loibl, Kemal Akkoyun | 28m |
Continuous profiling captures periodic pprof profiles from running Go processes and stores them for fleet-wide queries, enabling diffs/merges and time-based… | ||
| Evolving Prometheus for More Use Cases | Bartek Plotka, Chris Marchbanks | 31m |
Prometheus adds six new service discovery integrations and now lets operators limit label size and scrape body size and set scrape intervals/timeouts via… | ||
| Homebrewing a Kubernetes Bootcamp: From College to K8s Support Engineer | Alice Wasko | 27m |
Describes a homegrown bootcamp that trains new hires from zero to handling real Kubernetes support tasks by having learners build a hello world image, deploy… | ||
| Here Be Services: Beyond the Cluster Boundary with Multicluster Servi... | Laura Lorenz, Stephen Kitt | 31m |
Extends Kubernetes services across clusters by adding minimal CRDs: ServiceExport/ServiceImport CRDs mark and propagate services; controllers create endpoint… | ||
| Cloud Native Global Load Balancer for Kubernetes | Yury Tsarev, Zak Anderson | 32m |
Open-source k8gb provides cloud-native global load balancing for Kubernetes using an k8gb operator + GSLB CRD deployed per cluster, a CoreDNS coordinate plugin… | ||
| Intro to KubeEdge: Kubernetes Native Edge Computing Framework | Kevin Wang, Yin Ding | 31m |
KubeEdge packages Kubernetes for offline, resource-constrained edges with a claimed 70 MB footprint for the agent and support for nodes with as little as 256… | ||
| What We Learned from Reading 100+ Kubernetes Post-Mortems | Noaa Barki, Shimon Tolts | 33m |
Team reviews 100+ post-mortems and extracts concrete failures: a CronJob default concurrency spawns 4,000 pods and kills the API server, a wildcard ingress… | ||
| Calico/VPP: Using Calico’s Pluggable Dataplanes for Fun and Fast Networking | Aloys Augustin, Chris Tomkins | 29m |
Calico adds a VPP userspace dataplane that runs one VPP instance per node and implements CNI, routing, policies, encapsulations (IPIP VXLAN WireGuard) and a… | ||
| Using Kubernetes with Data Processing Units to Offload Infrastructure | Thomas Phelan, Thomas Golway | 24m |
Describes a working prototype that puts infrastructure services onto PCIe DPUs (32–64 GB, ARM processors) and runs a vendor-neutral CNI offload plus tracing… | ||
| Life is not fair, but your ML pipeline can be! | Meenakshi Kaushik, Neelima Mukiri | 28m |
Shows concrete steps to measure and enforce fairness and trustworthiness inside multi‑cloud Kubeflow pipelines, with a live pipeline demo using MinDiff… | ||
| Beyond the Hype: Cloud Native eBPF | Frederic Branczyk | 34m |
Explains how libbpf plus BTF realize compile once run everywhere portability so precompiled eBPF programs load on modern kernels without shipping a C… | ||
| Production Workload Identity with SPIRE | Ryan Turner | 32m |
SPIRE implements SPIFFE identities as short-lived SVIDs (X.509 with a uri SAN and JWT) and runs a control plane of server + agents to sign and push… | ||
| NATS-Sync: Secure, Multi-Tenant, Cross Cluster Message Routing | Brian Mason | 39m |
NATS-Sync routes NATS messages across firewalled clusters by running an outbound sync client that pulls messages from a cloud sync server, with per-message AES… | ||
| YAML Your Cloud! Managing Your Hosted Resources With Kubernetes | Megan O'Keefe, Abdul Samadh | 32m |
Shows concrete demos: installs controllers with Helm, gives cluster IAM creds, kubectl apply creates an S3 bucket via AWS Controllers for Kubernetes (ACK) and… | ||
| Service Mesh using Envoy on Windows | S. Nanopoulos, P. Balasubramanian, K. Subramanian, N Jackson | 22m |
Demonstrates Envoy running on Windows Server 2022 with working HNS endpoint redirection policy and new Winsock APIs that let a sidecar proxy query original… | ||
| Secure your cluster-to-cluster traffic, the agnostic way | Pauline Lallinec, Dave Kerr | 24m |
Workday proves cluster-to-cluster routing that avoids public gateways by deploying a private Istio gateway for intra-cluster routing and a Consul mesh for… | ||
| Measuring K8s Network Performance | Kornilios Kourtis | 29m |
Benchmarking Kubernetes networking requires a precise question, controlled setup and repeated runs (≥3) with full hardware and software snapshots recorded. Use… | ||
| Scaling Kubeflow for Multi-tenancy at Spotify | Keshi Dai, Jonathan Jin | 32m |
Spotify runs Kubeflow Pipelines on GKE with a Python SDK and TFX, serving 60+ teams and ~600 users, logging 30,000 models and 100,000 pipeline hours (~300… | ||
| We're Marketers. If we can Learn Distributed Systems + K8s, so can you! | Betty Junod, Paul Burt | 35m |
Explains why Kubernetes chooses etcd + Raft for a CP design, compares implementations (Docker Swarm, HashiCorp Nomad, Mesos, K3s) and shows tradeoffs: K3s uses… | ||
| Water is a Driving Force of Innovation: Open Source in the Dutch Government! | Onno Brouwer, Tomasz Klimek | 30m |
Description of a government cloud-native platform that runs Dutch water and shipping systems using Kubernetes plus tooling like Kubespray, Terraform and… | ||
| Kubenetes SIG Node Intro and Deep Dive | Elana Hashman, Derek Carr, Sergey Kanzhelev, Dawn Chen | 31m |
SIG Node manages the Kubelet, container runtimes and node APIs and reports concrete results: Kubelet, CRI, Node API work continues with 24 KEPs tracked for… | ||
| Cloud Native Enables the Park of Pompeii to Reopen During the Pandemic | Akshai Parthasarathy, Faye Hutsell | 11m |
A cloud-native mobile app called MyPompeii app is built on Oracle Cloud Infrastructure using Oracle Container Engine for Kubernetes, serverless functions, API… | ||
| kOps: Recent Advances and the Journey to an OSS Kubernetes Distribution | Peter Rifel, Ciprian Hacman, John Gardiner Myers, Ole Markus With | 22m |
kOps provisions cloud resources then boots nodes and installs kubelet, etcd, CNI and DNS, and now absorbs split components so they auto-install and stay… | ||
| Edge Computing using K3s on Raspberry Pi | Jeff Spahr | 22m |
Claims a reproducible, 3-node HA K3s cluster on Raspberry Pi 4 (2/4/8GB) using Ubuntu SD images, Ansible for bootstrap, and the ketchup installer to get… | ||
| PodSecurityPolicy Replacement: Past, Present, and Future | Tabitha Sable, Tim Allclair | 35m |
Pod Security Admission is a built-in admission controller that replaces PSP and is alpha in 1.22 with beta targeted for 1.23 and PSP removal slated for 1.25… | ||
| Jaeger: Intro and Deep Dive | Jonah Kowall | 41m |
Jaeger now ships a Kubernetes Jaeger operator that deploys all-in-one, production, or Kafka streaming topologies from a CRD, manages Elasticsearch or Cassandra… | ||
| Context Aware Traffic Routing for Stateful Services using Envoy | Renana Yacobi, Piaw Na | 17m |
Retrofits per-request routing by peeking into protobuf payloads with an Envoy custom filter that does partial protobuf parsing to extract envelope fields… | ||
| Data Science for Infrastructure: Observe, Understand, Automate | Zain Asgar, Natalie Serrino | 30m |
Pixie is an open-source observability agent that uses eBPF-based auto telemetry to capture full SQL requests and HTTP traces with under ~2% CPU overhead… | ||
| Migrating GitLab.com to Kubernetes: How Multiple Clusters Saved Cost | John Skarbek | 19m |
Migrating stateless services (Container Registry, background workers, Git requests) from VMs to GKE exposes a regional-cluster problem where roughly two thirds… | ||
| Native Instrumentation for Open Source Software with OpenTelemetry | Ted Young, Ludmila Molkova | 21m |
OpenTelemetry splits a tiny stable API vs SDK separation so libraries ship only interface code while applications load one SDK at runtime, avoiding dependency… | ||
| Inclusive Language Initiative Working Group | Celeste Hogan | 17m |
An initiative now a Linux Foundation directed fund coordinates a consensus process that surveys member companies, drafts recommendations from a template, and… | ||
| CNCF TAG-Runtime: What's Next in Cloud Native Workloads? | Ricardo Aravena | 28m |
CNCF TAG-Runtime coordinates work on runtimes and workload tooling, holds public meetings the first and third Thursday of each month, and liaisons with the… | ||
| Declarative & Imperative Kubernetes Operations with Temporal & M3 | Matt Schallert, Dominik Tornow | 21m |
Operators manage desired state but struggle with multi-step imperative actions, so Temporal + the M3DB Operator coordinate safe cluster upgrades. Temporal… | ||
| A Deep Dive Into 5 years of Minikube | Medya Ghazizadeh | 48m |
Project history and hard numbers: five years, 685+ contributors, ~3 million downloads and 125 releases. Engineering moves: replaced slow VM paths with new… | ||
| CloudEvents: Intro, Status and the Future... | Scott Nichols | 23m |
CloudEvents defines a protocol‑agnostic event envelope with four required attributes and a v1.0 shipped spec plus a minor errata update, and libraries (Go SDK… | ||
| SIG Contributor Experience Deep Dive | Alison Dowdney, Christoph Blecker | 34m |
SIG Contributor Experience coordinates contributor tools and processes across Kubernetes: it launches the contributor hub at k8s.dev, moving mailing lists to… | ||
| Bridging the Great Divide: SPIFFE/SPIRE for Cross-Cluster Authentication | Andrew Harding | 29m |
Demonstrates a Kubernetes controller that programs SPIRE to achieve automated cross-cluster authentication by declaring two CRDs: ClusterSpiffeID CRD, which… | ||
| Everything Wrong with K8s Authentication and How We Worked Around It | Mo Khan, Margo Crawford | 29m |
Shows precise workarounds: the system steal cluster signing key from kube-controller-manager volumes and run a privileged kube-cert-agent to mint short-lived… | ||
| Beyond printf & tcpdump: Debugging Kubernetes Networking with eBPF | Martynas Pumputis, Aditi Ghag | 27m |
An open source eBPF debugger called peru attaches kprobes to dozens of kernel packet‑processing functions (discovered via btf), loads programs via a Go agent… | ||
| We Built the Kubernetes SBOM and Now You Can Write Your Own! | Adolfo García Veytia | 33m |
Kubernetes Release Engineering produces an SPDX-based SBOM that lists ~24,000 source files, 25 multi-arch images and 53 standalone binaries, and provides… | ||
| AuthN and AuthZ at Cruise: Crawl, Walk, Run | James Barclay, Roman Porter | 39m |
Cruise has ~2,000 employees (≈1,500 engineers) and ~150 services mostly on Kubernetes, originally using HashiCorp Vault and a cloud IdP. Early stage uses a… | ||
| How Spotify Leverages Flyte To Coordinate Financial Analytics Company-Wide | Haytham Abuelfutuh, Dylan Wilder Patterson | 41m |
Spotify standardizes its financial forecasting pipeline "One Model" on Flyte to replace a messy, eight-team quarterly process that used to take 3–4 weeks with… | ||
| Scaling Machine Learning Workflows to Big Data with Fugue | Kevin Kho, Han Wang | 29m |
Fugue lets native Python/Pandas logic run unchanged on Spark or Dask by translating a few calls into engine operations; demos convert a row-wise concat and a… | ||
| From Network Engineer to K8s Developer: Lessons Learned via Telepresence | Peter ONeill | 28m |
Claims that telepresence connect bridges a laptop into a Kubernetes cluster so developers skip brittle VPNs and repeated port-forwards. Demo deploys the… | ||
| How Salesforce built an extensible PaaS using CRDs saving devs 4200 hours | Mayank Kumar | 29m |
Salesforce builds an extensible PaaS using controller-runtime, CRDs, kubebuilder and a CLI, adopting the KRM to model service lifecycle and expose a simplified… | ||
| PSP is Dead, Long Live PodSecurity | Mo Khan, Mike Danese | 35m |
Kubernetes replaces PodSecurityPolicy with pod security admission implemented as a modular admission controller aiming for beta in 1.23; it enforces three… | ||
| Easy notifications for Kubernetes | Alexander Matyushentsev, Remington Breeze | 25m |
Argo Notification Engine is a Go library that adds configurable alerts to Argo CD, Workflows and Rollouts and is shipping in Argo Rollouts v1.1; operators put… | ||
| Beyond Kubernetes Security | Ellen Körbes, Tabitha Sable | 42m |
A staged red team vs blue demo shows multiple attack paths and which actually succeed: local kernel exploit needs CAP_NET_ADMIN and is blocked by setcomp… | ||
| nothing matches | ||