KubeCon + CloudNativeCon North America 2022
2022-10-24..2022-10-28
-- online --
[KubeCon + CloudNativeCon North America 2016, KubeCon + CloudNativeCon North America 2017, KubeCon + CloudNativeCon North America 2019, KubeCon + CloudNativeCon North America 2020 Virtual, KubeCon + CloudNativeCon North America 2021, KubeCon + CloudNativeCon North America 2022]
as the organisers put it
REGISTER explore sponsorship opportunities VIEW THE SCHEDULE Join the event post event survey KubeCon + CloudNativeCon North America 2022 is a wrap! Thank you to all the attendees, speakers…
| title | author | length |
|---|---|---|
| KubeCon + CloudNativeCon North America 2022 Highlight Video | (not provided) | 03m |
Rapid montage of attendee reactions and short clips claim a high-energy, welcoming conference where engineers swap ideas, demo projects and meet maintainers of… | ||
| How Salesforce is using ArgoWorkflows for provisioning add-ons | Mayank Kumar, Andy Chen | 35m |
Salesforce migrates add-on provisioning from Spinnaker to Argo Workflows, converting pipeline templates into Kubernetes CRD workflows that run Helm and… | ||
| Knative: More Than Just Serverless Cont... | Lance Ball, Naina Singh, Mauricio Salatino, Evan Anderson | 35m |
Knative adds a function-first workflow: small functions (<40 lines) turn into OCI images via Cloud Native Buildpacks and are deployed with the Funk CLI… | ||
| Tutorial: So You Want To Develop a Clust... | Anusha Hegde, Winnie Kwon, Richard Case, Avishay Traeger | 01h 24m |
Hands‑on guide to building a Cluster API infrastructure provider for Docker that actually provisions each node as a container, creates a container… | ||
| SIG Testing: Intro And Updates | Benjamin Elder, Michelle Shepardson, Chao Dai, Antonio Jose Ojea Garcia | 42m |
SIG Testing maintains Prow, KIND, kubetest and e2e frameworks and reports concrete changes: kind reboot handling now preserves node IPs and adds image-loading… | ||
| Keynote: Closing Remarks | Ricardo Rocha, Emily Fox, Frederick Kautz | 01m |
Closing remarks announce the all attendee party running 6 p.m to 9pm with sponsorship listed as Caston by veeam and snake and three venue options so attendees… | ||
| SIG Testing: Intro And Updates | Benjamin Elder, Michelle Shepardson, Chao Dai, Antonio Jose Ojea Garcia | 34m |
SIG Testing lays out concrete changes to Kubernetes test infrastructure: who maintains Prow CI, KIND local clusters, kubetest and the e2e-framework; what was… | ||
| Keynote: Closing Remarks | Ricardo Rocha, Emily Fox, Frederick Kautz | 02m |
Housekeeping updates include on-site wellness offerings such as group Bike Tour, daily meditation and chair yoga, and a quiet room plus Joe Lewis statue as a… | ||
| Keynote: Closing Remarks | Ricardo Rocha, Emily Fox, Frederick Kautz | 03m |
Congratulations to award winners and applause for an active, hybrid community connecting in Detroit and online; breakouts begin at 11 A.M. and backstage… | ||
| ⚡ Lightning Talk: Back To Basics: How To Measure Etcd Performance And Not To Die Trying | David Perez Rodriguez | 06m |
etcd performance diagnosis uses the built-in etcd benchmark tool and disk tests like fio against a three-member etcd cluster created from the provided scripts… | ||
| Lightning Talk: Paying Down Debt: Converting Kubernetes To Use Go "Workspaces" | Tim Hockin | 06m |
Kubernetes replaces its decades-old GOPATH hacks with Go 1.18 workspaces by adding a go.work file, enabling multi-module builds and unifying 30 scattered… | ||
| Lightning Talk: Where Did All My IPs Go? | Cynthia Thomas | 06m |
Kubernetes needs at least three IP blocks — for pods, nodes, and services — and historic practice of assigning one large contiguous CIDR causes fragmentation… | ||
| Lightning Talk: Lightweight Dapr Microservices In WebAssembly | Vivian Hu | 04m |
Dapr microservices run as WebAssembly modules using the WasmEdge runtime, claiming sub‑millisecond startup and near‑native speed while keeping a secure… | ||
| ⚡ Lightning Talk: Open Source, Kubernetes, And CloudNative From the Eyes Of a High-Schooler | Rishit Dagli | 05m |
Claims hands-on experience contributing to Kubernetes and CNCF projects as a recent high-school grad and shows how that happened via new contributor meetups… | ||
| Lightning Talk: Build a Twitter Translation Bot In 5 Minutes With Knative Functions | Lance Ball | 05m |
Shows a runnable pipeline that turns Twitter Search results into translated tweets using Knative Functions, a Camel K Kamelet polling the Twitter Search API… | ||
| Lightning Talk: Securing Envoy: Catching Vulnerabilities With Continuous Fuzz Testing | Teju Nareddy | 05m |
An out of bounds bug in an unescape routine is reproduced by a one-parameter fuzz input that exposes a trailing backslash causing undefined behavior in C++… | ||
| Lightning Talk: Metrics, How To Measure What Is Going On In Your Community | Peter O'Neill | 06m |
Advice: stop reporting raw followers, stars and installs and instead measure daily weekly monthly active users, successful onboarding (first comment or first… | ||
| ⚡ Lightning Talk: A Puzzling Solution. How To Be Better At Accepting Others Experiences. | Duffie Cooley | 07m |
Solves a Rubik's Cube live on stage to demonstrate how expertise hides hard work, intends to show a Bluetooth cube but AV rules block it, has to troubleshoot a… | ||
| ⚡ Lightning Talk: The CNCF Cloud Native Glossary: Trusted. Simple. Community-driven. | Catherine Paganini | 05m |
Cloud Native Glossary (glossary.cncf.io) is a community‑maintained, trusted, vendor‑neutral source that launched at KubeCon NA 2021 and provides short, minimal… | ||
| 73,000 Pods a Day, Lessons From Misadventures In Multi-Tenant | Shane Corbett, Wil Reed | 37m |
Claim: thinking in CPU time not cores fixes massive multi‑tenant surprises. After instrumenting clusters with Prometheus and cAdvisor and querying… | ||
| Backstage: Shaping the Future Of Developer Experience | Ben Lambert, Francesco Corti | 26m |
Backstage is an open platform that indexes an organization’s technology via the Software Catalog, scaffolds new services with software templates that create… | ||
| Tutorial: How To Write a Reconciler Using K8s Controller-Runtime! | Scott Rigby, Somtochi Amauche Onyekwere, Niki Manoledaki, Soulé Ba, Amine Hilaly | 01h 27m |
Hands-on 90‑minute tutorial builds two CRDs and reconcilers that manage a mock CFP API (speakers and proposals) using controller-runtime and kubebuilder, runs… | ||
| Beyond Kubebuilder - Generating Entire Kubernetes Controller Implementations | Amine Hilaly, Jay Pipes | 37m |
Built a Kubernetes controller factory that consumes AWS API models and a generator.yaml to output full controllers (not just scaffolds), mapping AWS SDK Go… | ||
| Jaeger: The Future with OpenTelemetry and Metrics | Jonah Kowall, Joe Elliott | 35m |
Jaeger deprecates native clients in favor of OpenTelemetry clients and shows a working Java agent auto‑instrumentation that adds HTTP and DB attributes with no… | ||
| KEDA - Real Time And Serverless Scaling In Kubernetes | Zbynek Roubalik, Jeff Hollan | 35m |
KEDA converts external event counts into Kubernetes autoscaling decisions by creating a ScaledObject (or ScaleJob) that produces HPA metrics. Demo uses… | ||
| Cgroups V2: Before You Jump In | Tony Gosselin, Mike Tougeron | 29m |
Adobe enables Flatcar 2969.0.0 and finds cgroups v2 breaks telemetry (metrics missing, HPA stops) and causes Java/runtime issues so clusters had to be rolled… | ||
| How To Build a Distributed System (And Should You?) | Rebecca Bilbro, Patrick Deziel | 38m |
A geo-distributed global directory service is built and deployed to clusters in the US, Germany, and Singapore using gRPC, Kubernetes, LevelDB and Prometheus… | ||
| Tutorial: Unleash the Full Potential Of Kubernetes Scheduler: Configuration, Extension And Operation In Production | Yuan Chen, Yibo Zhuang, Wei Huang, Chen Wang | 01h 29m |
kube-scheduler internals and actionable knobs: shows a live demo that deploys a second scheduler with two profiles on a 3-worker kind/Minikube cluster and… | ||
| Running Isolated VirtualClusters With Kata & Cluster API | Chris Hein, Eric Ernst | 35m |
Demonstrates a working setup that runs per-tenant Kubernetes control planes inside one supercluster using vCluster and Cluster API, and isolates workloads by… | ||
| Like Peas And Carrots: Argo CD And Crossplane For Infrastructure Management | Jesse Suen, Viktor Farcic | 33m |
Shows a concrete Argo CD + Crossplane setup that manages AWS infra: three Crossplane providers (aws, helm, kubernetes), reusable irsa composition to create IAM… | ||
| Resize Your Pods In-Place With Deterministic eBPF Triggers | Pablo Chico de Guzman, Vinay Kulkarni | 33m |
Demonstrates a concrete system that detects a build command and expands a running pod’s resources without restart by combining Kubernetes’ upcoming in-place… | ||
| Kcp: Towards 1,000,000 Clusters, Name^WWorkspaced CRDs | Stefan Schimanski | 41m |
kcp turns the apiserver into a partitioned control plane that offers workspaces — cheap, millisecond-created logical clusters implemented by passing a logical… | ||
| Simplified Experience Of Building Cluster API Provider In Multitenant Cloud | Sahithi Ayloo, Arun Krishnakumar | 35m |
Builds a Cluster API infrastructure provider for VMware Cloud Director (vcd), using kubebuilder scaffolding and clusterctl to install components, CSI/CPI/CNI… | ||
| Kubernetes to Cloud Attack Vectors: Demos Inside | Danny Hershko Shemesh, Alon Schindel | 37m |
Managed Kubernetes defaults create real attack paths: demos show IMDSv1 enabled by default on EKS allowing pods to assume node IAM and the default EKS node… | ||
| Running the Observability As a Service For Your Teams With Thanos | Ben Ye, Bartłomiej Płotka | 36m |
Thanos moves Prometheus to a multi-cluster SaaS model by adding concrete features: bucket-prefix multitenancy (single S3 bucket with per-tenant prefixes)… | ||
| How To Handle Node Shutdown In Kubernetes | Xing Yang, Ashutosh Kumar | 37m |
Explains concrete behavior and hacks: kubelet uses systemd inhibitor locks for graceful shutdown, introduced in 1.20; non‑graceful handling is an alpha in 1.24… | ||
| Improving Longhorn Performance With SPDK | Keith Lucas, David Ko | 35m |
Longhorn rewrites its engine to run as a single SPDK process per node, replacing per-volume iSCSI/TGT paths with a custom SPDK BDev and NVMe over Fabrics for… | ||
| Secure Multi-Tenant GitOps Application & Infrastructure Rollouts At Adobe | Vikram Sethi, Manabu McCloskey | 37m |
Adobe builds a GitOps flow that provisions cloud infra and apps from Git using Crossplane + Argo, Argo Rollouts for advanced deploys and OPA Gatekeeper for… | ||
| Fluent Bit V2.0: Unifying Open Standards For Logs, Metrics & Traces | Eduardo Silva, Anurag Gupta | 33m |
Fluent Bit 2.0 claims unified support for logs, metrics and traces and demonstrates it by sending OpenTelemetry spans to Jaeger, Prometheus metrics to Grafana… | ||
| Migrating From Single-Node Kubernetes Control Plane To HA In Product... | Cong Yue, David Oppenheimer | 38m |
Databricks migrates a fleet of 60 regions from a single-VM control plane to a three‑replica HA design, using etcd snapshot and disk clone to preserve cluster… | ||
| Implementing Private 5G Networks For Enterprises With Kubernetes | Amar Kapadia, Christian Huebner | 31m |
Private 5G runs as containerized network functions on Kubernetes using commodity servers and radios instead of purpose-built appliances, claiming deployment… | ||
| Storage Wars | Seán C McCord | 36m |
Survey of container storage types and practical tradeoffs with concrete recommendations: compares object (MinIO), block (OpenEBS, Longhorn, Linstore) and… | ||
| Whose Packet Is It Anyway? Life of a Packet Through a Service Mesh | Kevin Leimkuhler, Doug Jordan | 33m |
Traces a TCP packet through a sidecar mesh and shows exactly how iptables rewrites destination to the proxy (inbound port 4143, outbound 4140) and how the… | ||
| Building Container Images In Kubernetes: It’s Been a Journey! | Laurent Bernaille, Eric Mountain | 35m |
Datadog migrates image builds into Kubernetes using buildkit in rootless mode, achieving native multi-arch builds and retiring Docker runners; over 90% of… | ||
| Building Multi-Architecture Images With Buildpacks | Aidan Delaney | 39m |
Overview of how Cloud Native Buildpacks currently produces OCI images using pack and kpack, the lifecycle steps (detect/restore/build/export), and that… | ||
| Intro To Volcano: Cloud Native Batch System | William Wang | 24m |
Volcano extends Kubernetes to run batch and HPC workloads, now at incubation in CNCF with feature releases every 3 months; the project reports ~450… | ||
| API Evolution With CRDs: Best Practices For Authoring & Fuzz Testing APIs | James Munnelly, Andrea Tosatto | 30m |
Recommend authoring OpenAPI v1 schemas for full server-side validation and defaulting, use Kubebuilder/controller-runtime for types, and avoid long-lived… | ||
| Zero Trust Supply Chains with Project Sigstore and SPIFFE | Andres Vega, Jake Sanders | 31m |
Describes a concrete zero‑trust pipeline: CI builds an image, Cosign requests a short‑lived certificate from Fulcio after an OIDC check, Rekor records the… | ||
| Keynote: Welcome + Opening Remarks | Priyanka Sharma | 44m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from April 17-21, 2023. Learn more at… | ||
| Using the EBPF Superpowers To Generate Kubernetes Security Policies | Mauricio Vásquez Bernal, Alban Crequy | 40m |
Shows how eBPF captures real runtime behavior to auto-generate seccomp profiles, Linux capabilities lists and Kubernetes NetworkPolicies using Inspektor Gadget… | ||
| Essential Patterns For Designing And Implementing Your Operator | Michael Hrivnak, Austin Macdonald | 36m |
Operator development starts easy with kubebuilder and operator-sdk but matures into real problems: avoid putting behavior in annotations (no versioning, no… | ||
| How To Build Production Grade DevOps Platform Using Argoproj | Alexander Matyushentsev, Leonardo Luz Almeida | 35m |
Demo of a production Argo-based platform shows concrete choices: use an Argo CD instance configured for multi-tenancy with SSO (OIDC + Dex), casbin for RBAC… | ||
| Keynote: What We Learned Dissecting the World’s Most Popular Containers | Ayse Kaya | 14m |
Slim.AI’s analysis of public images uses open-source scanners on 900,000+ scanned containers and the top 165 images that cover >30% of pull volume. Findings… | ||
| Cloud Governance With Infrastructure As Code (IaC) With Kyverno And Crossplane | Dolis Sharma | 35m |
Crossplane provisions AWS resources via Kubernetes CRDs using plain YAML and kubectl, and the demo actually creates EC2 instances and S3 buckets from those… | ||
| Paradox Of Choice: How To Pick an Application Definition That Works For You! | Anusha Ragunathan, Kevin Downey | 31m |
Intuit evaluates Helm, Kustomize (KRM plugins), KubeVela and Crossplane with POCs and a weighted scorecard across learning curve, effort, GitOps fit and… | ||
| SBOM X-Ray Superpowers: Making Better SBOMs, Using SBOMs | Brandon Lum, Chris Phillips | 26m |
Demonstrates a producer-driven workflow that attaches SBOMs to artifact SHA256 fingerprints, records attestations in the Rekor transparency log and uses… | ||
| Flagger, Linkerd, And Gateway API: Oh My! | Jason Morgan, Sanskar Jaiswal | 35m |
Flagger automates progressive delivery by driving traffic shifts via Gateway API HTTPRoute objects rather than mesh-specific APIs; Linkerd ships an extension… | ||
| Multi-Cluster Stateful Set Migration: A Solution To Upgrade Pain | Peter Schuurman, Matt Schallert | 32m |
Shows a concrete method to move an M3DB-backed StatefulSet between GKE clusters using multi-cluster services for discovery, a Kubernetes enhancement like… | ||
| CoreDNS Intro And Deep Dive | Yong Tang | 38m |
CoreDNS is at 1.10.0 with ~9,800 stars, 332 contributors and 28 maintainers; it adds plugins (including a highly requested v plugin) and security fixes… | ||
| Advanced API Machinery Topics: Aggregated API Servers and OpenAPI v3 | David Eads, Jeffrey Ying, Federico Bongiovanni | 28m |
Kubernetes ships openapi v3 in Kubernetes 1.24 that preserves structural-schema features (oneOf, anyOf, default, nullable), exposes /openapi/v3 and per-group… | ||
| 2022 Observability TAG Update | Alolita Sharma, Matt Young | 38m |
OpenTelemetry adds continuous profiling signal after a community vision and OTEP process, with coordination meetings and a merged proposal; Cortex proves… | ||
| Don't Be Greedy: Rightsize Your Kubernetes Cluster With Prometheus | Jesus Angel Samitier, David Lorite Solanas | 36m |
Rightsize Kubernetes by measuring actual container usage with Prometheus, pulling metrics from cAdvisor and kube-state-metrics, computing requests by either… | ||
| Securing the IaC Supply Chain | Jesse Sanford, Jason Hall | 21m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2023 in Amsterdam, The Netherlands from April 17-21. Learn more at… | ||
| Lessons Learned From Etcd the Data Inconsistency Issues | Marek Siarkowicz, Benjamin Wang | 35m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe 2023 in Amsterdam, The Netherlands from April 17-21. Learn more at… | ||
| Windows HostProcess Containers For Configuration And Beyond | James Sturtevant, Mark Rossetti | 37m |
HostProcess containers run as processes on the Windows host so kubernetes can deploy kube-proxy, CNIs and daemons as pods with rolling updates; feature goes… | ||
| Kubernet-Bees: How Bees Solve Problems Of Distributed Systems | Simon Emms, Christian Weichel | 36m |
Claims concrete parallels between bee colonies and Kubernetes: bees implement auto-scaling via the queen and a real-world swarming failover that spawns a new… | ||
| Don't Mind the Gap: Securely Accessing Cloud Resources From Anywhere With SPIFFE/SPIRE | Evan Gilman | 34m |
Claim: replace long‑lived cloud API keys by exchanging short‑lived SPIFFE SVIDs for cloud creds using OIDC. Implementation uses a SPIRE server + agent… | ||
| Efficient Scheduling Of High Performance Batch Computing For Analytics Workloads With Volcano | Krzysztof Adamski, Tinco Boekestijn | 28m |
ING runs a self‑service analytics platform serving over 300 internal projects and more than 2000 users and replaces Hadoop/YARN by adding Volcano to Kubernetes… | ||
| Keynote: Beyond Automation: Kubernetes Success Requires a GitOps Mindset | Shatarupa Nandi | 06m |
Platform operations manages over 30 clusters and several production apps by putting configuration in a central Git repo and using Carvel tools: Carvel… | ||
| SLSA FRSCA Recipe For Secure Supply Chain | Parth Patel, Michael Lieberman | 33m |
Claims an end-to-end secure factory that reaches SLSA Level 3 by combining Tekton Pipelines/Chains, Sigstore/Cosign, SPIFFE/SPIRE, Kyverno, Tetragon, Vault and… | ||
| A Raccoon And a Group Of Turtles Secure Clusters Together! | Pushkar Joglekar, Naadir Jeewa | 32m |
A community-run self-assessment produces the first security review of Cluster API: team narrows scope to create clusters on popular clouds, builds detailed… | ||
| Cilium Updates, News And Roadmap | Thomas Graf, Bill Mulligan, Liz Rice, Purvi Desai, Chandan Aggarwal | 34m |
Cilium reports broad cloud adoption with data plane V2 now default on GKE/Autopilot, available in Anthos and announced for AKS, plus modularization work to let… | ||
| Edge Computing Is Hot. Find Out the Business Value From Three Experts | Larry Carvalho, Stu Miniman, Marilyn Basanta, Muneyb Minhazuddin | 36m |
Panelists show concrete deployments: roadside units in London and Turin using Intel 5G software and on-device AI inferencing to coordinate multimodal traffic… | ||
| Building a Day1/Day2 Application Operations Platform On CNCF Projects | Alois Reitbauer, Alex Jones | 37m |
Shows how to build a Day1/Day2 platform using GitOps plus CNCF pieces: Flux/Argo for repo sync, Crossplane/Cluster API for infra… | ||
| Get Projects Approved By Articulating the Business Value Of a Cloud Native Solution | Larry Carvalho, Krisztian Flautner, Betty Junod, Chris Rosen | 40m |
Three customer cases show concrete outcomes: a bank stitches legacy systems into a cloud native stack using Cisco Calisti service mesh to decouple lifecycles… | ||
| What’s New In Chaos Mesh And Deep Dive Into Multi Clusters Support | Ed Huang, Chao Zheng | 33m |
Chaos Mesh adds a multi-cluster coordinator/agent model that lets one central controller submit and observe experiments on remote clusters, and extends cloud… | ||
| Istio Today and Tomorrow: Sidecars and Beyond | Mitch Conners, Lin Sun | 40m |
Istio now offers an ambient sidecarless topology that runs a per-node ztunnel for multi-tenant L4 mTLS and optional per-service-account Waypoint proxy for L7… | ||
| Keynote: CNCF Project Updates | Ricardo Rocha, Emily Fox, Frederick Kautz | 18m |
Graduated projects report concrete changes: Vitess 15 GA adds VTArc for automatic cluster recovery and VTAdmin UI; containerd 1.6 LTS lands and 1.7 beta… | ||
| A Containerd And Friends Update: What’s New In Runtimes? | Phil Estes, Mike Brown, Maksym Pavlenko, Michael Zappa | 35m |
containerd ships a new stable 1.6 LTS line extended through 2025 and a 1.7 beta that adds a sandbox API to group containers and swap in hypervisor or remote… | ||
| The 10 Biggest Mistakes You Shouldn’t Make In Open Source | Bill Mulligan, Divya Mohan | 34m |
Clear, actionable list of pitfalls with examples: don’t skip basic etiquette and empathy, don’t assume only code matters—documentation, blog posts, newsletters… | ||
| No One Is Saving Us But Us | Tabitha Sable, Paris Pittman | 26m |
Argues that open source sustainability needs mutual aid not miracles, citing 950 families in 16 months from the Detroit/ Human Utility model and an example… | ||
| Untrusted Execution: Attacking the Cloud Native Supply Chain | Andrew Martin | 37m |
Argues that supply chain compromise happens at source, CI, build host and runtime and that real defenses are provenance and tamper detection not slogans… | ||
| SIG Cluster Lifecycle Intro | Fabrizio Pandini, Cecile Robert-Michon | 41m |
SIG Cluster Lifecycle coordinates 21 subprojects with about 400 developers across 80 companies and builds concrete tools: kubeadm for fast node bootstrapping… | ||
| KubeEdge: From Fixed Location To Movable Edge, Latest Updates And Future | Zefeng (Kevin) Wang, Yin Ding | 22m |
KubeEdge extends Kubernetes with a cloud-core / edge-core architecture using WebSocket or QUIC for two‑way control, CSI/CRI/CNI support and Mosquitto for… | ||
| Achieving End-To-End Software Supply Chain Security With in-toto | Santiago Torres-Arias, Aditya Sirish A Yelgundhalli | 35m |
Claims that in-toto provides end-to-end provenance that ties Git commits, PR reviews, tags, builds and OCI images into verifiable artifacts; implementations… | ||
| Leveraging Community To Transform Ford's Software Development Teams | Rebecca Riss, Satish Puranam | 34m |
Ford shifts from Cloud Foundry (started 2016) to Kubernetes to handle stateful workloads, reaches production by 2017, and standardizes a single GCP onboarding… | ||
| Chaos Engineering Applied To the FinTech Domain | Rajeshwar Vadheraju, Neelanjan Manna | 25m |
FIS applies LitmusChaos with Dynatrace/Prometheus, Jenkins CI/CD and load generators to run declarative CRD/operator-based experiments such as pod HTTP… | ||
| Balancing Yin (Community) And Yang (Company) In OSS | Nikhita Raghunath, Kiran Mova | 36m |
Kubernetes shows shrinking reviewer capacity and slower merges: PR reviews drop -24% PR reviews, monthly commits fall 32% 2020, 45% 2021, 41% 2022, and the… | ||
| Armoring Cloud Native Workloads With LSM Superpowers | Barun Acharya | 21m |
KubeArmor converts declarative policies into kernel enforcement (AppArmor/SELinux labels and BPF bytecode) and uses eBPF for observability to enforce inline… | ||
| From Pre-Population To Disasters: Manage And Protect the State Of VMs | Michael Henriksen | 28m |
KubeVirt storage shows concrete APIs and integrations: the DataVolume API creates PVCs and populates disks; DataImportCron polls registry hourly and updates a… | ||
| How to Get Involved in CNCF Environmental Sustainability TAG | Marlow Weston, Huamin Chen | 22m |
CNCF launches the Environmental Sustainability TAG (chartered September 2022) to build cloud‑native energy metrics, a public landscape doc and recommendations… | ||
| SIGs Aren’t Silos: A Case Study Into Solving Inter-Domain Problems In Kubernetes Development | Swetha Repakula, Antonio Jose Ojea Garcia | 34m |
A Kubernetes lifecycle refactor (v1.22) enforces terminal pod states and stops removing IPs for evicted pods, which causes evicted pods keep IPs and lets the… | ||
| Who Knew Dogfood Could Taste This Good? A WebAssembly In Production Story | Taylor Thomas, Brooks Townsend | 36m |
Cosmonic runs its entire backend as WebAssembly modules on the wasmCloud runtime, proving Wasm is production-ready by operating the platform in prod with… | ||
| Kubernetes Community Days For Fun And For Community Profit | Bill Mulligan, Katie Greenley | 35m |
Kubernetes Community Days scale local meetups into half‑day, single‑track or multi‑day events using the KCD GitHub repo for planning, templates for… | ||
| Staring Into the Abyss With the Security Technical Advisory Group | Andrew Martin, Ragashree Shekar, Marina Moore | 24m |
Security TAG explains its charter, runs biweekly meetings with work tracked on GitHub, and performs security assessments and joint reviews to help projects… | ||
| Mentoring WG And You | Nate Waddington, Jay Tihema | 34m |
Mentoring Working Group runs CNFC-paid mentorships via LFX mentorship (about 14 programs representing ~10 projects per semester), joins Google Summer of Code… | ||
| Kubernetes Data Protection WG Deep Dive | Xiangqian Yu | 30m |
Working Group presents concrete APIs and implementations: an object-bucket API Cozy reaches Alpha in 1.25 for provisioning buckets and access, a Volume… | ||
| Keynote: Fostering Kubernetes Community Growth Through Learning | Le Tran | 05m |
Kasten by Veeam launches a free training site, Learning.Kasten.io, claiming to lower entry barriers with 5.6 million Kubernetes users and 1.7 million new in… | ||
| SIG Architecture Intro And Deep Dive | John Belamaric, Davanum "Dims" Srinivas | 31m |
SIG Architecture defines API conventions, runs API reviews and enhancement proposals, manages deprecation (Docker shim removal), and enforces production… | ||
| Envoy Maintainer Q+A | Matt Klein | 35m |
Project reports that HTTP/3 GA is available, packaging will add RPMs and DEBs coming in months, and an Envoy Gateway Ingress controller exists for Kubernetes… | ||
| Enterprise Cloud Native Artifact Registry | Yan Wang, Daojun Zhang, Chenyu Zhang, Vadim Bauer | 35m |
Harbor 2.6 adds a cache layer that serves manifests from Redis and shows pulls drop from ~9s to <0.5s at 1k concurrency, raises TPS from ~600 to >4,000 and… | ||
| How SIG Release Cooks Trustworthy Artifacts From Raw Source Code | Carlos Panato, Adolfo García Veytia, Jeremy Rickard, Sascha Grunert | 38m |
Three releases per year plus monthly or biweekly patch releases, with v1.25 shipping 40+ enhancements, get built on Google Cloud Build into binaries and… | ||
| Kubernetes SIG CLI: Intro And Updates | Eddie Zaneski, Katrina Verey, Sean Sullivan | 35m |
SIG CLI maintains kubectl, kustomize, plugin tooling and new client-side projects like krm functions and focuses on concrete changes: completion improvements… | ||
| Overview Of Challenges And Solutions For Orchestrating Applications To Multiple DC And Edge Clusters | Ritu Sood, Cathy Zhang | 28m |
Compares concrete tools and gaps: Kubedge lightweight kubelet treats edge devices as nodes for sub‑1 vCPU/128 KB footprints and websocket sync, ArgoCD… | ||
| The Course Of True Community Management Never Did Run Smooth, In 1 Act | Karsten Wade, Jen Madriaga | 29m |
One-act conversation argues that community management needs practical peer-to-peer systems not another policy chapter: reference to Open Source Way 2.0 and… | ||
| Kubernetes SIG Apps Updates | Janet Kuo, Ken Owens, Maciej Szulik | 27m |
SIG Apps reports concrete API and controller changes: index jobs (per-pod ordinal injected) and job suspension land for better batch control; job finalizers… | ||
| Tutorial: Becoming a Kubernetes Developer: Writing Your First Operator | Abby Bangser | 01h 31m |
Hands-on tutorial builds a CRUD operator in about 90 minutes, generating CRDs and controller scaffolding with kubebuilder + make run, deploying an app… | ||
| Data On Kubernetes, Deploying And Running PostgreSQL And Patterns For Databases In a Kubernetes Cluster. | Chris Milsted, Gabriele Bartolini | 37m |
Cloud Native PostgreSQL runs as a Kubernetes operator that directly manages PVCs instead of StatefulSets, pairs with a CSI-plugin for local NVMe and storage… | ||
| Multi-Tenancy For Argo Workflows And Argo CD At Adobe | Srinivas Malladi | 38m |
Adobe runs Argo Workflows and Argo CD in a hub‑and‑spoke setup that enforces namespace‑level isolation using Azure AD group annotations on service accounts… | ||
| Migrating From PodSecurityPolicy | Tim Allclair, Sam Stoelinga | 35m |
Kubernetes removes PodSecurityPolicy in v1.25 and recommends migrating to the built-in Pod Security admission; a fast path uses namespace labels and… | ||
| Longhorn: Intro, Deep Dive And Q+A | David Ko, Joshua Moody | 38m |
Cloud-native block storage for Kubernetes that runs without external databases and uses CRDs plus a CSI plugin, Longhorn claims synchronous 3-replica… | ||
| Multicluster Kubernetes Management Made Easy With Open Cluster Management | Joshua Packer | 29m |
Open Cluster Management (CNCF Sandbox) provides a Kubernetes API-based hub-spoke control plane for fleet inventory, work distribution, dynamic placement and… | ||
| Stateful Apps On Kubernetes - Bring Them On! | Diane Patton, Gunna Marripudi, Scott Surovich, Scott Miller, Lisa-Marie Namphy, Tina Gill | 35m |
Enterprise teams run databases in Kubernetes as first-class apps, deployable by developers with CI/CD, operators and CSI drivers, and they report surprising… | ||
| Towards Something Better Than CRDs In a Post-Operator World | Stefan Schimanski | 36m |
Argues that CRDs can become first-class, provider-hosted APIs and demonstrates a working prototype: QBind plus a small cluster-side connector sinks secrets to… | ||
| 100Gbit/S Clusters With Cilium: Building Tomorrows Networking | Daniel Borkmann, Nikolay Aleksandrov | 28m |
Cilium implements an IPv6-only data plane using eBPF at XDP, adds net4↔6 gateways (stateful and stateless), and a DNS64 flow for legacy IPv4 services; kernel… | ||
| Keynote: What a RUSH! Let’s Deploy Straight to Production! | Whitney Lee, Mauricio Salatino | 16m |
Platform engineering claims developer teams can push changes without wrestling infra by exposing a declarative platform API; demo proves it by creating an… | ||
| Webhook Fatigue? You're Not Alone: Introducing the CEL Expression Language Features Solving This Problem | Joe Betz | 35m |
Kubernetes ships CEL for CRD validation (available since 1.23; x-kubernetes-validations in beta by 1.25) to handle multi-field checks, immutability and… | ||
| Kubernetes On the Edge With K3s For a Smart Metering Use Case | Harry Lee | 36m |
Edge cluster runs k3s on 4‑core/8GB NUC as the central aggregator for IoT meters, provisioned via PXE and Ansible, with Prometheus/Grafana and Fluent Bit for… | ||
| Kyverno Introduction And Overview | Chip Zoller, Dolis Sharma | 37m |
Kyverno is a Kubernetes-native admission controller that validates, mutates and generates resources using YAML policies and a CLI for dry runs and CI… | ||
| TUF-En Up Your Signatures | Marina Moore, Justin Cappos | 26m |
TUF is a compromise‑resilient update framework used by sigstore, Notary and Google Fuchsia that limits damage when repositories or signing keys are breached… | ||
| Tutorial: Build Your Own Heroku With Cloud Native Stack | Muvaffak Onus, Sidarta Oliveira | 01h 29m |
Builds a Heroku‑style PaaS by wiring Backstage + Crossplane + Argo CD together so a developer clicks a template, Backstage scaffolds a repo, GitHub Actions… | ||
| CloudEvents And Beyond! | Doug Davis | 33m |
CloudEvents stays a tiny spec for routing by adding four required attributes to messages and already supports HTTP, AMQP, MQTT, NATS and bindings like protobuf… | ||
| Remote Control Planes With Konnectivity; What, Why And How? | Jussi Nummelin, Rastislav Szabo | 36m |
Claim: Kubernetes control planes run remotely in a different datacenter while worker nodes stay local, using Konnectivity as the reference implementation of… | ||
| Five Ways With a CNI: Understanding Kubernetes Networking For Performance.. | Stig Telfer, Erez Cohen | 36m |
Lab uses HP DL380 Gen10 nodes with ConnectX‑6 2×100Gb, Ubuntu 20.04, Kubernetes 1.23.7, iperf2, Intel IMB, Kubeflow MPI operator, Volcano scheduler, OpenFOAM… | ||
| Run As “Root”, Not Root: User Namespaces In K8s | Marga Manterola, Rodrigo Campos Catelin | 22m |
A single PodSpec boolean hostUsers: false isolates container UIDs via Linux user namespaces so root in-container maps to uid 0 → uid 65536 on the host… | ||
| How We Revolutionized Developer Experience With 3.5 Platform Engineers | Jessica Andersson | 25m |
A three‑and‑a‑half person platform team transforms developer workflow for about 30 developers by shipping three concrete changes: 3.5 platform engineers deploy… | ||
| Keynote: A Cloud Native Swiss Knife | Ricardo Rocha | 17m |
Kubernetes log streaming by label removes node-level complexity, and ephemeral debug containers (stable in 1.25) lets operators attach a debugging image into a… | ||
| Exiting Ingress With the Gateway API | Rob Scott, Shane Utt | 33m |
Gateway API graduates to Beta with 15+ implementations and a CRD-based install for Kubernetes 1.16+, promising features missing from Ingress: native traffic… | ||
| Connect All the Things! Using NATS To Simplify Communication Everywhere | Jeremy Saenz, Todd Beets | 37m |
NATS is an open source messaging fabric that claims to replace many point-to-point patterns with location-independent addressing and subject wildcards… | ||
| Orchestrating Interconnected Apps Across Geographically Distributed Kubernetes Clusters | John Belamaric | 35m |
Nephio presents a concrete platform that uses Kubernetes everywhere plus configuration as data to automate deploying interrelated workloads across hundreds of… | ||
| Cloudy With a Chance Of Chaos: Verifying the Resiliency Of Cloud-Native Applications | Bella Wiseman | 36m |
A case study verifies resilience of a cloud-native service running on ECS Fargate by stopping tasks via AWS CLI, observing a 20% error rate for 3–10 minutes as… | ||
| It's Dangerous To SLSA Alone Out There! Take This Artifact Knowledge Graph! | Mihai Maruseac, Michael Lieberman | 34m |
A knowledge graph called guac ingests SBOMs, in-toto/SLSA attestations, Sigstore records and VEX feeds, correlates them in Neo4j and answers blast‑radius… | ||
| Kubernetes For GPU Powered Machine Learning Workloads In Academia | Camille Rodriguez, John-Paul Robinson | 31m |
Project builds a bare‑metal Kubernetes cluster tuned for ML: three control‑plane nodes, Juju models for scaling, and MAAS for automated provisioning. It… | ||
| Tutorial: Set Up Your Shell For Kubernetes Productivity And Be Efficient Quickly | Sebastien Thomas, Archy Khayretdinov | 01h 32m |
Hands-on setup that boots local Kubernetes using podman replaces Docker Desktop and kind (one control plane + one worker, second cluster with a different k8s… | ||
| What's Going ARM: Adopting ARM64 At Airbnb | Melanie Cebula | 27m |
Airbnb pilots ARM64 by targeting one or two price-sensitive workloads, upgrading OSes (Ubuntu 22.04 / Amazon Linux 2022), and adding ARM64 CI workers to build… | ||
| Mentor-Mentee Framework To Build the Next Generation Of Cloud Native | Kunal Kushwaha, Mark Boost | 29m |
A practical mentor‑mentee framework lays out cadence and deliverables: fortnightly meetings, session‑by‑session topics, short‑ and long‑term goals and a… | ||
| Customer Centric Observability: How Intuit Reduced Time To Detect Customer Impact From 30+ Minutes To Under 3 Minutes. | Vinit Samel, Nagaraja Tantry | 32m |
Claim: MTTD falls from over 30 minutes to under 3 minutes by detecting Failed Customer Interactions (FCI) end to end. Implementation uses a tiny front-end… | ||
| Keynote: AWS ❤️ K8s | Nathan Taber | 06m |
AWS details concrete contributions to Kubernetes and CNCF projects and names numbers and projects. AWS builds the cloud provider and helps Cluster API and… | ||
| Securing Edge Workloads With Cert-Manager And SPIFFE | Sitaram Iyer, Riaz Mohamed | 38m |
Shows a working system that issues unique X.509 identities per workload using cert-manager, a SPIFFE CSI driver, trust-manager and a policy approver. Demo runs… | ||
| Human-Friendly, Production-Ready Data Science Stack With Metaflow & Kubernetes | Savin Goyal, Saravanan | 32m |
Metaflow + Kubernetes integration lets data scientists write Python DAGs locally and transparently scale steps to Kubernetes or AWS Batch while keeping every… | ||
| Observability In ArgoCD/Rollouts Using Streaming ML For Reducing MTTR | Vigith Maurice, A Kalamkar | 25m |
At Intuit one third of P1/P2 outages trace to change across ~2500 Kubernetes services, so a K8s-native DAG streaming platform is built that runs real-time… | ||
| Surviving From Endless Issues Coming From 7K+ Kubernetes Clusters | Wanhae Lee, Seok-yong Hong | 32m |
Kakao reports running 7K+ clusters (100K+ nodes) and a huge on-call load, and describes building an open source CLI called detect that collects Kubernetes API… | ||
| Class Resources: Kubernetes’ Fastest Way Of Shushing Noisy Neighbors | Markus Lehtonen, Peter Hunt | 36m |
Class Resources introduces a CRI+API extension that tags containers with opaque class identifiers to control cache, memory bandwidth and block I/O, implemented… | ||
| Learn About Helm And Its Ecosystem | Andrew Block, Karena Angell, Matt Farina, Scott Rigby | 35m |
Helm is a Kubernetes package manager with a stable API and a formal backwards compatibility guarantee, follows semantic versioning and ships minor releases… | ||
| Tips To Fight Impostor Syndrome | Aurélie Vache | 37m |
Provides nine practical rules with concrete steps: make a mind map and list achievements to externalize skills, join peers and communities to get consistent… | ||
| Prometheus - Intro, Deep Dive, And Open Q+A | Goutham Veeramachaneni, Ganesh Vernekar | 36m |
Prometheus is a metrics-focused, pull-based system that scales to about 1 million samples/sec on a single node, compresses samples to ~1.2–1.6 bytes each, and… | ||
| One VTOrc To Rule Them All – High Availability In a Distributed Database System | Deepthi Sigireddi, Manan | 32m |
Vitess cluster management service VTOrc is a replacement orchestrator that is GA in Vitess 15 and already runs in production at PlanetScale, performing… | ||
| Sustainability Research the Cloud Native Way | Chen Wang, Huamin Chen | 35m |
Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF and system counters to export energy and performance metrics to Prometheus, staying… | ||
| It’s Complicated: Relationships Between Objects In OCI Registries | Josh Dolitsky, Sajay Antony | 36m |
Working group defines an artifact manifest with subject field to link non-image blobs to an image and adds a reference API (referrers) that returns an image… | ||
| “Why Can’t Kubernetes Devs Just Add This New Feature? Seems So Easy!” | Ricardo Katz, Carlos Panato | 34m |
KEP-driven lifecycle requires formal design, SIG buy-in, and multi-release testing, so even small ideas take years not weeks. Examples: kubectl colors issue… | ||
| Edge-Native: The New Paradigm For Operating And Developing Edge Apps | Krisztian Flautner | 32m |
Argues cloud-native principles applied to the edge let teams operate thousands of NAT‑hidden sites with a declarative pull model and a central control plane… | ||
| Multi-Tenancy: Tips, Tricks, Tools And Tests | Adrian Ludwin, Tasha Drew, Ryan Bezdicek, Fei Guo | 24m |
Working group defines three concrete tenancy models: namespace-as-a-service, control-plane-as-a-service, and cluster-as-a-service, with concrete tooling that… | ||
| Writing Reliable, Scalable, Fault Oblivious Code On K8s the Easy Way | Kendall Roden, Alice Gibbons | 31m |
Demo code wires a front end -> order API -> Kafka -> archive -> scheduled loyalty job architecture running on Kubernetes, using Dapr sidecar and over 100 Dapr… | ||
| What Container Runtime Do I Need? | Abubakar Siddiq Ango | 35m |
Explains why the choice of runtime depends on constraints: containerd + runc handle image lifecycle and low‑level process creation via Linux namespaces… | ||
| ADHD: Understanding, Awareness, And Shared Experience | Bart Farrell, Heba elAyoty, Farrah Campbell, Rich Burroughs | 33m |
Four participants with ADHD describe lived timelines from recent diagnoses (several within the last 18 months and one at 37 years old) and concrete strategies… | ||
| How the Basics Of Kubernetes Auth Scale For Organizations | Leigh Capili | 33m |
Explains how Kubernetes RBAC composes into a scalable, least-privilege model: roles, clusterroles, rolebindings and clusterrolebindings mapped to users, groups… | ||
| Edge-Native Application Principles: Taking Your App Beyond the Cloud | Kate Goldenring, Amar Kapadia | 37m |
Working group identifies nine edge-native principles (grouped into five categories) and publishes a draft white paper plus a project spreadsheet mapping tools… | ||
| Path To Production: Sustainable Compliance In Strict Environments | Chip Zoller, Brandt Keller | 37m |
A concrete path to continuous compliance using policy and machine-readable controls: OSCAL documents map tool capabilities (Big Bang, Iron Bank, Kyverno) to… | ||
| Rook: Intro And Deep Dive With Ceph Storage | Travis Nielsen, Blaine Gardner, Alexander Trost, Satoru Takeuchi | 26m |
Rook runs a Kubernetes operator that automates deploying and managing a Ceph cluster (monitors, OSDs, MDS, RGW) to provide block, file and object storage… | ||
| Thriving With Kubernetes On-Call: Best Practices & Lessons Learned | Sunil Shah, Ramya Krishnan, Ashley Cutalo, Madhu C.S., Fabio Kung | 35m |
Large-scale companies describe concrete practices: primary/secondary rotations (week-long or daily, Netflix-style versus three-day at others), three to six… | ||
| Keynote: From Silicon to Serverless: A Full Stack Journey | Cathy Zhang | 06m |
Intel outlines concrete wins and ongoing work: hardware topology-aware scheduling that pins workloads to NUMA nodes to boost performance and lower cloud cost… | ||
| Keynote: CI/CD Isn't Reserved for Software! | Erin A Boyd, Matt Farina | 15m |
TOC reports 18 graduated projects, 37 incubating and 81 sandbox projects — 130+ projects — and unveils a new GitHub sandbox process using issue-based templates… | ||
| A New Way To Roll: Supply Chain Choreography For Enterprise Grade Kubernetes | Kirti Apte, Steve Watkins | 34m |
Presents a Kubernetes-native CI/CD model called Cartographer that turns pipeline steps into reusable supply chain templates, wiring outputs (image URL, config… | ||
| Overview And State Of Linkerd | Alex Leong | 35m |
Linkerd is a lightweight service mesh built around a Rust proxy that enforces mTLS by default, bootstraps identities from Kubernetes service accounts, and… | ||
| How the Argo Project Transitioned From Security Aware To Security First | Henrik Blixt, Michael Crenshaw | 34m |
Argo recounts concrete changes: after 15 CVEs in four months and a vendor-driven zero day that triggered major press, the project creates a permanent private… | ||
| Improving User Experience For Device Consumption In Kubernetes | Alexander Kanevskiy, Patrick Ohly, Kate Goldenring | 32m |
Kubernetes adds concrete device UX: device plugins exist since v1.10 (2017) but are limited; CNCF Sandbox project akri discovers IP cameras, USB and OPC-UA… | ||
| FinKube – Making the Business Case For Kubernetes At Your Company | Somik Behera | 29m |
An open‑source ROI toolkit (download at finkube.io) provides an eight‑sheet ROI Excel workbook plus slides and test‑case templates to quantify Kubernetes… | ||
| Hack Back; Let’s Learn Security With CTFs! | Lewis Denham Parry, Natalia Reka Ivanko | 33m |
A runnable CTF repo demonstrates a real chain: GitLab credentials harvested via OSINT lead to a leaked kubeconfig in an S3 bucket, giving kubectl access… | ||
| Energizing the Manufacturing Industry With Kubernetes And Cloud Native | Marcel Wagner | 30m |
IndustryFusion builds a cloud native digital twin for metal processing that runs machine gateways, factory servers, and cloud on CNCF certified Kubernetes… | ||
| The Windows Operational Readiness Specification | Amim Moises Salum Knabben, Xinqi Li | 23m |
Introduces a concrete spec that maps Windows requirements to upstream e2e tests and a runnable tool that auto-downloads or builds the matching Kubernetes test… | ||
| The State of the Cloud Native Network: Deep-dive from TAG-Network | Ed Warnicke, Lee Calcote | 39m |
Cloud native networking centers on one CNI per cluster that gives every pod a flat L3 IP plus isolation via NetworkPolicies and service discovery via… | ||
| Trust But Verify: Bringing Supply Chain Integrity To CD GitOps | Yuji Watanabe, Hirokuni Kitahara | 34m |
Proposes end-to-end signature protection for CD GitOps by verifying source repo signatures, signing generated Kubernetes manifests, and enforcing them at… | ||
| Kubernetes Policy, Governance, And Compliance: A WG Policy Update | Jim Bugwadia, Anca Sailer, Jayashree Ramanathan, Robert Ficcaglia | 36m |
The working group publishes a policy architecture paper, a policy-report CRD that standardizes results retrievable via the Kubernetes API, and adapters for… | ||
| Beyond Orchestration: The Cloud Native Runtimes Ecosystem for Performance and Security | Alexander Jung | 30m |
Unikraft builds application-tailored unikernel VM images with 3.1 ms boot demos and typical footprints of a few megabytes, claiming 3–5 ms boot times and… | ||
| Flux Maturity, Feature, and Contrib Update | Kingdon Patrick Barrett, Somtochi Amauche Onyekwere | 33m |
Flux 0.36 ships verified OCI artifact support so manifests and Helm charts can live in registries, with OCI repository support plus a flux CLI flux push oci… | ||
| OpenTelemetry: Meet the Community, Build the Roadmap | Morgan McLean, Daniel Dyla, Ted Young, Alolita Sharma | 39m |
OpenTelemetry reports that tracing is stable across most languages, metrics GA is complete, logs remain unstable but progressing, and a new profiling signal… | ||
| The Challenges Managing a Kubernetes-Based Machine Learning Infrastructure | Yuzhui Liu, Keith Laban, Ed Shee, Keshi Dai | 42m |
Panelists explain who uses their platforms, list the concrete stack and tradeoffs, and report operational numbers: on‑prem Bloomberg runs Spark, notebooks… | ||
| OpenMetrics; the State Of 1.X And the Plans For 2.0 | Richard Hartmann | 34m |
OpenMetrics 1.0 is stable text format compatible with Prometheus but adds underscore_created metadata, second-resolution timestamps, explicit push and… | ||
| Evolving the Cloud Native Maturity Model | John Forman, Robert Glenn, Danielle Cook, Simon Forster | 33m |
Cartografos publishes a five-phase maturity model that maps concrete expectations: Build (pre-production), Operate (one app in production), Scale (many apps… | ||
| Unified Chaos Injection And SLO Validation Experiments In Kubernetes | Srinivasan Parthasarathy, Shubham Chaudhary | 26m |
Demonstration shows a unified workflow that launches a Helm-packaged experiment which runs load generation, collects metrics and validates SLOs while Litmus… | ||
| How CNET (And Friends) Use the CNCF Landscape To Run High Traffic, Dynamic, Scalable, And Cost-Effective Websites. | Corey McGalliard | 34m |
CNET moves 45 billion edge requests a month and ~20,000 req/s at origin and runs an automated pipeline that builds sandboxed environments in about five… | ||
| SIG Contributor Experience Deep Dive | Nabarun Pal, Madhav Jivrajani, Marky Jackson, Kaslin Fields | 38m |
Kubernetes reports 73,000 contributors with ~10,000 new in the last year and uses concrete programs to onboard and scale work: six group mentoring cohorts just… | ||
| What's New With SIG Windows | Mark Rossetti, James Sturtevant, Jay Vyas, Dimitrie Mititelu | 27m |
OS field in PodSpec is stable (Kubernetes 1.25) and returns richer OS-mismatch errors; HostProcessContainers stable in 1.26 with a slim base image (~25 KB) and… | ||
| Keynote: Kubernetes Project Updates | Ricardo Rocha, Emily Fox, Frederick Kautz | 06m |
SIG Security publishes JSON CVE feeds, completes a Cluster API self‑assessment pilot, releases a 2022 security audit and a pragmatic security checklist for… | ||
| Notary: State Of Development | Justin Cormack | 37m |
Notary v2 moves signatures and attestations into registries using OCI 1.1 and ORAS; images get attached SBoMs and vulnerability scans and are signed with a… | ||
| Kubernetes Infra SIG: Intro And Updates | Davanum "Dims" Srinivas, Arnaud Meukam, Benjamin Elder | 37m |
SIG Infra shifts half the hosting from Google to community-controlled projects and runs 20 regional Artifact Registry instances that route pulls through a tiny… | ||
| Consumers To Contributors: Open Source As a Competitive Advantage | Brendan O'Leary | 34m |
Shows data that 30–50% of shipped proprietary software is open source and a 2022 survey that names access to innovation as the top reason firms choose OSS… | ||
| Intro + Deep Dive: SIG Scalability | Marcel Zięba | 39m |
SIG Scalability defines a multi‑dimensional scalability envelope and enforces concrete SLOs (e.g., 99th‑percentile mutating API latency ≤1s in 5‑minute… | ||
| 9-1-1: Cloud Native - Kubernetes For Public Safety Systems | Marc Boorshtein | 29m |
Case study of a 10 year Identity and Access Management platform serving ~10,000 users across 22 jurisdictions and in production since 2013 that migrates from… | ||
| Inclusive, Accessible Tech: Bias-Free Language In Code And Configurations | Anne Gentle | 36m |
Shows a concrete process: inventory repos into four categories, prioritize tiered word lists and treat them like an API contract, and automate detection with a… | ||
| Keynote: CNCF Project Updates Continued | Ricardo Rocha, Emily Fox, Frederick Kautz | 12m |
A fast run through concrete project milestones and asks: cupboard 0.57 aligns releases with Kubernetes, adds VM snapshots, USB support and virtctl… | ||
| CRI-O’s Senior Year | Peter Hunt, Urvashi Mohnani, Mrunal Patel | 40m |
CRI-O announces graduation readiness, ships a Rust rewrite of its container monitor conmon-rs that runs one monitor per pod, exposes a Go client over capn… | ||
| BoF: Intro to Open Source Licenses and Q&A | Jeff Shapiro | 36m |
Room-format Q&A that starts with license basics and spends most time on concrete pitfalls: differences between permissive vs copyleft, why AGPL affects hosted… | ||
| Cloud Native Storage: The CNCF Storage TAG, Projects, Technology & Landscape | Alex Chircop, Raffaele Spazzoli | 38m |
CNCF Storage TAG catalogs projects (etcd, Rook, Vitess, TiKV, Harbor, Dragonfly, Longhorn) and publishes practical guidance: a CNCF Storage TAG landscape, a… | ||
| SIG Security: Empowerment Through Autonomy | Ala Dewberry, Savitha Raghunathan, Tabitha Sable | 34m |
SIG Security runs concrete projects: the Self-Assessments subproject offers a GitHub intake template and a repeatable workflow (map architecture, build threat… | ||
| Production Practice For Large-Scale Financial Application Platform In China Merchants Bank | Jiahang Xu, Jianbo Sun | 30m |
China Merchants Bank runs a large private cloud with VMs, Kubernetes, serverless and Hadoop and builds an application uniform control plane using KubeVela to… | ||
| Arsenal Of Democracy: What Open Source Can Learn From the Motor City | Shane Lawrence | 29m |
Draws direct parallels between Detroit’s manufacturing history and modern open source, arguing for concrete practices: adopt software bill of materials and… | ||
| SIG Cloud Provider Update | Michael McCune, Bridget Kromhout | 35m |
Kubernetes is removing in‑tree cloud provider code under enhancement 23.95 and aims to enable feature gates enabled by default in 1.26 so kubelet and… | ||
| Contributing To the Kubernetes Website: A Guide For Everyone | Divya Mohan, Rey Lejano, Tim Bannister, Natali Vlatko, Arsh Sharma | 08m |
Kubernetes documentation lives in one upstream source and publishes localized sites from language repos named like kubernetes-docs-<langcode> via the GitHub… | ||
| How Adobe Planned For Scale With Argo CD, Cluster API, And VCluster | Joseph Sandoval, Dan Garfield | 36m |
Adobe standardizes on Argo CD plus Cluster API and vcluster to spin ephemeral test clusters from PRs, bootstrapping them via Argo ApplicationSets and… | ||
| Crossplane Intro And Deep Dive - The Cloud Native Control Plane Framework | Jared Watts, Nic Cope, Matthias Lübken, Bob | 36m |
Crossplane is a Kubernetes-native control plane framework that exposes cloud resources as Kubernetes API objects and ships a v1.10 release while targeting CNCF… | ||
| SLO-Based Observability For All Kubernetes Cluster Components | Matthias Loibl, Nadine Vehling | 34m |
Pyrra is an open source SLO tool that deploys as a single controller or binary, creates SLO CRDs and recording/alerting rules for Prometheus (also supports… | ||
| Introduction to Cloud Custodian, simple rules for your Cloud, Cluster, and Terraform | Jorge Castro, Kapil Thangavelu, Sonny Shi, John Anderson | 36m |
Cloud Custodian provides a single YAML policy engine that runs across AWS/Azure/GCP, Kubernetes and Terraform, with both pull and real-time admission… | ||
| Enterprise Grade Minecraft On Kubernetes | Casey West | 34m |
Runs a single-instance Minecraft server on Kubernetes with a Recreate deployment strategy, SSD-backed storage class (Retain, expandable) and ReadWriteOnce… | ||
| Bare-Metal Chronicles: Intertwinement Of Tinkerbell, Cluster API And GitOps | Katie Gamanji | 35m |
Shows a concrete stack: Cluster API + a kpt (Cluster API provider for Tinkerbell) provider, Tinkerbell hardware templates/workflows, Helm for templating, and… | ||
| Cgroupv2 Is Coming Soon To a Cluster Near You | David Porter, Mrunal Patel | 46m |
Kubernetes 1.25 enables cgroupv2 GA and recommends using the systemd cgroup driver with kernel ≥5.8; containerd and runC already support it and SIG‑Node added… | ||
| cert-manager - Past, Present and Future | Jake Sanders, Ashley Davis | 26m |
cert-manager runs as a Kubernetes operator that issues and renews X.509 certificates, claims 15 million image pulls per day, and pledges not to break its V1… | ||
| DoorDash’s Journey From StatsD To Prometheus With 10 Million Metrics/Second | Emma Wang, Ben Raskin | 35m |
DoorDash migrates its monitoring from StatsD to Prometheus, moving from delta counters and precomputed percentiles to histograms not percentiles, deploying… | ||
| OPA | Peter O'Neill | 39m |
Open Policy Agent describes a graduated CNCF policy engine with 300+ contributors and 85 integrations that runs Rego policies against JSON inputs; new Rego… | ||
| Cloud-Native WebAssembly: Containerization On the Edge | Michael Yuan | 38m |
Cloud-native WebAssembly claims runtime images drop from hundreds of megabytes to 2 MB images, start in sub‑millisecond startup instead of tens or hundreds of… | ||
| Fuzzing Session: Finding Bugs and Vulnerabilities Automatically | David Korczynski, Adam Korczynski | 39m |
Fuzzers run across CNCF projects and find thousands of real defects, with more than 200 projects fuzzed and bug reports triaged into fixes. Integration with… | ||
| Building Multi-Tenant Routing And Scaling With Envoy | Yiming Peng | 26m |
AWS App Runner uses Envoy + xDS as the runtime control plane to implement multi-region, multi-tenant HTTP routing, load balancing and auto scaling for a… | ||
| You Like It Or Not; You Need It! - PKI And Certificate Management | Shweta Vohra | 36m |
Argues that PKI is essential for microservices and service mesh and shows a working OpenSSL demo that builds a root and intermediate CAs and signs leaf certs… | ||
| Tutorial: kubectl Create Cluster: Production-ready Kubernetes with Cluster API 1.0 | K Muldoon, S Singhal, Y Rao Kakaraparthi, S Büringer, J Francis | 01h 30m |
Hands-on tutorial that proves Cluster API 1.0 manages fleets from a local laptop: it uses clusterctl, kind, kubeadm, cert-manager and the Docker provider… | ||
| SIG-Multicluster Intro And Deep Dive | Jeremy Olmsted-Thompson, Laura Lorenz, Paul Morie | 23m |
SIG archives kube‑fed and defines a cluster set pattern with namespace sameness and a simple about API CRD (cluster property) to store cluster IDs and… | ||
| Lessons From Scheduling 20 Million Windows Containers a Month | Julian Portillo | 32m |
Relativity runs ~192 million Windows containers for production and ~50 million canary runs over nine months and faced ~105k Windows node failures; solutions… | ||
| Tips And Tricks To Successfully Migrate From Jaeger To OpenTelemetry | Vineeth Pothulapati | 30m |
Stepwise migration from Jaeger to OpenTelemetry is practical: a Java/Go demo app is fully re‑instrumented live, and a lightweight openTelemetry shim lets… | ||
| Fast Image Pulls Using IPFS And Opportunistic Caching | Christian Weichel, Manuel de Brito Fontes | 34m |
Cluster runs a node-local proxy called registry facade that dynamically assembles OCI manifests, pushes missing blobs into IPFS (via nerdctl-registry and… | ||
| NRI: Extending Containerd And CRI-O With Common Plugins | Krisztian Litkey, Mike Brown | 45m |
NRI turns runtime extension into a formal protobuf protocol with ttrpc services, letting plugins modify a controlled subset of the OCI spec (annotations, env… | ||
| Emissary + Linkerd Resilience Patterns: Rate Limits, Retries & Timeouts | Flynn, Daniel Bryant | 36m |
Demo builds a tiny three‑service app behind Emissary (edge) and Linkerd (service mesh), with services intentionally failing 20% of requests and occasional >1s… | ||
| Machine Learning Using Various GPU Technology With Kubeflow. | Jihye Choi | 32m |
POC combines NVIDIA A100 MIG up to 7 instances with Kubeflow and finds MIGs give 3–7× speedup on light models when running seven MIG slices simultaneously… | ||
| Feature Work In GRPC; XDS And Not | Eric Anderson, Kevin Nilson | 26m |
gRPC reports concrete progress: foundational xDS plumbing is done, an observability public preview ships (logs, traces, alerts), and core features implemented… | ||
| Computational Fluid Dynamics (CFD) Analysis With Kubernetes, Kubeflow, And OpenFOAM | Erik Jacobs | 37m |
Kubeflow’s MPI operator runs OpenFOAM CFD jobs on an OpenShift Kubernetes cluster by creating a launcher pod that SSH‑bootstraps work across MPI operator… | ||
| Stateless Collectors For Stateful Data: Scaling Prometheus As a Node Agent | Danny Clark | 35m |
Argues for running Prometheus as a node agent (DaemonSet) that scrapes only co‑located pods and forwards metrics to a remote backend (Google’s Monarch)… | ||
| MetaOps: Metadata Operations For End-To-End Data & Machine Learning Platforms | Alejandro Saucedo | 37m |
Argues that artifact stores and ad hoc schemas fail at production scale where thousands of models and many-to-many deployments exist, shows Seldon Core… | ||
| The Evolution and Innovation of CubeFS | Leon Chang | 33m |
CubeFS is a cloud-native distributed file system compatible with S3/POSIX/HDFS, provides replication and erasure coding and LRC (reducing redundancy from ~3x… | ||
| Extend Your Microservices With Pluggable Components Via Dapr | Artur Souza, Yaron Schneider | 36m |
Dapr 1.9 adds pluggable components so components no longer must be compiled in Go; they run as separate containers or local processes and register over Unix… | ||
| How We Make TiKV- a Distributed Storage, More Cost-Effective On the Cloud | Sunny Bains, Yang Zhang | 29m |
TiKV hibernates idle Raft regions to cut CPU and heartbeat traffic, and migrating nodes to ARM yields about 20% lower power cost for similar performance… | ||
| Accelerates Image Distribution In Multi-Cluster With Dragonfly | Wenbo Qi | 29m |
Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from April 17-21, 2023. Learn more at… | ||
| Kubernetes Networking Infrastructure Offload | D Daly, N Jain, N Bitar, Moshe Levi, Vytautas Valancius | 38m |
Panel argues moving Kubernetes networking data plane into infrastructure accelerators yields concrete gains: use of IPU/DPU and SR‑IOV switchdev offloads… | ||
| SIG-Network: Intro & Deep-Dive | Rob Scott, Bowei Du, Surya Seetharaman, Andrew Stoycos | 42m |
Overview of concrete SIG-Network work: production details on Gateway API (route vs Gateway model, L4 alpha and mesh gamma effort), the new Admin Network Policy… | ||
| So, What If I Don’t Want My Persistent Storage To Be Yet Another Bindmount? | Deep Debroy, Feng Wang | 29m |
Proposes moving filesystem mount and post‑mount work into the microVM guest so the host avoids multiple bind‑mounts and virtio‑fs penalties; a Kata prototype… | ||
| Keynote: Cloud Native 101: Motor City Edition | Jeffrey Sica, Bob Killen | 17m |
About 60–65% of KubeCon attendees are new and the keynote maps cloud native to concrete claims: Kubernetes and most CNCF tooling use declarative config (pizza… | ||
| Emissary-Ingress: Intro And Deep Dive | Flynn, Alice Wasko, Lance Austin | 28m |
Emissary‑ingress is a Kubernetes API gateway built on Envoy that generates the large Envoy configs for you and focuses on developer‑centric self‑service… | ||
| Vitess: Introduction And New Features | Deepthi Sigireddi, Matt Lord, Rohit Nayak | 40m |
Vitess is a MySQL-compatible, cloud-native sharding layer that demos VReplication move-tables workflow moving tables and resharding live, achieving hundreds of… | ||
| Understanding the Future of Ingress-nginx | James Strong, Ricardo Katz | 35m |
Community survey shows most users value load balancing and open source, run a mix of Kubernetes versions (many still on 1.21 or older), and ask for Helm docs… | ||
| Dynamically Testing Individual Microservice Releases In Production | Matt Turner | 35m |
Claim: deploy candidate pods into production and run realistic end‑to‑end tests without exposing users by using Istio to route only test traffic via an… | ||
| One API To Rule Them All? What the Gateway API Means For Service Meshes | Keith Mattix II, John Howard | 32m |
Argues that Gateway API becomes a single, Kubernetes-native way to express north‑south and east‑west routing by adding HTTPRoute for meshes so meshes can share… | ||
| Current State and the Future of Cortex | Alvin Lin, Alan Protasio | 37m |
Cortex now ships an OpenTelemetry bridge so traces can be exported to Jaeger, Zipkin, Kafka or AWS X‑Ray for real‑time bottleneck hunting, and a partitioning… | ||
| So, SBOMs Matter…Now What? | Sophie Wigmore, Frankie Gallina-Jones | 34m |
Paketo Buildpacks integrates Syft as a library to generate SBOMs at each build step (not just the final OCI image), emitting CycloneDX, SPDX and Syft schemas… | ||
| SneakOps – Getting Users To Use GitOps Without Them Even Knowing About It! | Éamon Ryan, Hedley Simons | 34m |
A messy shared Grafana with 50–100 active users and dozens of duplicated demo dashboards becomes two environments—Wild West sandbox and locked production—by… | ||
| SIG-Scheduling Deep Dive | Wei Huang, Qingcan Wang, Kante Yin, Kensei Nakada | 39m |
Overview of concrete scheduler changes and runnable tools: config now supports a multi-point extension so enabling plugins is just a name list (available in… | ||
| B’Envoy-age to Pre-Quantum Encryption | Daniel Rouhana, Emma Dickenson, Doron Podoleanu | 30m |
Builds nginx, Envoy and Istio images that run Open Quantum Safe libs and a post-quantum TLS stack, proving a world first post Quantum service mesh and a… | ||
| Turn Me On With Cloud-Native Feature Flags! | Alex Jones | 31m |
Open Feature provides a vendor-agnostic API and a Kubernetes-native path: a lightweight FlagD sidecar binary plus an OpenFeature Operator that injects it via a… | ||
| How Intuit Manages Cloud Resources Via GitOps | Jerome Kuptz, Ameen Radwan | 33m |
Intuit builds and runs an open source service called Cello that executes infrastructure-as-code via GitOps, integrating with GitHub, Jenkins and Vault and… | ||
| Chaos Engineering For Hybrid Targets With LitmusChaos | Uma Mukkara, Karthik S, Prithvi Raj Venkat Raj | 34m |
An installable Kubernetes control plane (Chaos Center + agents called chaos delegate) orchestrates experiments across on‑prem, AWS, Azure, VMs and multiple… | ||
| Sig Auth Deep Dive | Rita Zhang, Mo Khan, Tim Allclair | 36m |
Pod Security Admission graduates to stable in 1.25 and replaces most PSP use cases; certificate signing now honors requested durations down to 10 minutes. KMS… | ||
| Unsung Hero Of the Cloud Native Revolution: Container Linux Then And Now | Vincent Batts | 31m |
Walks through the lineage from CoreOS (2013) to Flatcar, Fedora CoreOS, Bottlerocket, Talos and k3OS and shows concrete engineering choices: A/B partitions… | ||
| Keptn Beyond 1.0: Sailing into the Future | Thomas Schuetz, Andi Grabner, Brad McCoy, Ana Medina | 36m |
Keptn 1.0 focuses on a Kubernetes-native Keptn Lifecycle Controller that injects pre- and post-deployment checks into the cluster, calls existing GitOps tools… | ||
| Keynote: How to Become an Open Source Mechanic | Emily Fox | 10m |
Cloud native projects suffer a contributor shortfall: usage far outpaces contribution with less than 5% contribute back, leading to maintainer burnout and… | ||
| Kubernetes SIG Storage Deep Dive | Xing Yang, Mauricio Poppe | 32m |
Kubernetes SIG Storage outlines concrete 1.25/1.26 milestones: CSI inline ephemeral volumes and local ephemeral capacity isolation reach GA; COZI object… | ||
| Build a Cloud Native Asynchronous Messaging System For Scale With Redis | Madelyn Olson | 36m |
Shows a concrete pattern: use Redis Streams with XADD/XGROUP/XREAD and XAUTOCLAIM to implement an authoritative or ephemeral event log, deployed on Kubernetes… | ||
| Smart Green Computing Cloud Native Operations | William Caban, Federico Rossi | 33m |
Proof-of-concept runs on a three-node cluster whose nodes simulate power from coal, petroleum and natural gas, enforcing a per-node CO2 threshold (demo target… | ||
| What's New In Operator Framework? | A Greene, Austin Macdonald, Varsha Prasad Narsing, Jonathan Berkhahn | 34m |
Operator Framework now ships concrete tools: Operator SDK adds a plug‑in system (examples: Grafana plugin for scaffolded Prometheus dashboards and deploy-image… | ||
| SIG Instrumentation Introduction And Deep Dive | Damien Grisonnet, Han Kang, David Ashpole | 40m |
SIG Instrumentation standardizes observability across Kubernetes components and shows concrete work: structured logging lands in kubelet 1.21 and scheduler… | ||
| Decentralized Routing For a Sharded Application On Service Mesh | Vinay Gonuguntla, Pankaj Sikka | 34m |
Intuit moves shard routing out of a central API gateway into the client Envoy sidecar by calling an external lookup service (plus a distributed cache) from a… | ||
| What We Learned From the Gateway API: Designing Linkerd’s New Policy CRD | Matei David | 24m |
Linkerd implements new resources: Server and ServerAuthorization CRDs that select pods and a single port so authorization attaches to the traffic receiver, not… | ||
| Preventing Controller Sprawl From Taking Down Your Cluster - When a Scalable Pattern Stops Being Scalable | Madhu C.S. | 44m |
Controllers rely on expensive list+watch semantics so heavy mutation rates break guarantees: a buggy change to the in-house archetype adds conflicting… | ||
| Security In the Cloud With Falco: Overview And Project Updates | Jason Dellaluce, Luca Guerra | 28m |
Falco now ships official ARM64 packages, adds gVisor integration to observe sandboxed workloads, and offers a next‑gen eBPF probe that claims better… | ||
| Putting Hackers Breaching Your Cluster In Automatic Quarantine | Ziv Nevo | 26m |
Claim: breaches are inevitable so enforce egress at pod level. Survey of 15 Helm packages finds only four include any egress controls. Built an automation flow… | ||
| Hands-Off Features Releases With Keptn, OpenFeature, And OpenTelemetry | Michael Beemer, Johannes Bräuer | 27m |
Keptn orchestrates a Helm deployment of a new Fibonacci microservice, OpenFeature (flagd) gates the new code behind a flag and k6 runs targeted tests by… | ||
| Tamland: How GitLab.Com Uses Long-Term Monitoring Data For Capacity Forecasting. | Andrew Newdigate | 33m |
A capacity-forecasting pipeline called Tamland pulls normalized Prometheus recording rules (utilization ratio 0–1) from Thanos long-term metrics, aggregates by… | ||
| When the Logs Just Don’t Cut It: Root-Causing Incidents Without Re-Deploying Prod | Phillip Kuznetsov | 30m |
Production pod is crash‑looping on a money validity panic; logs don’t show the bad value. The demo attaches a bpftrace u-probe to the running binary (no… | ||
| Keynote: A Glimpse Into the Future of Cloud Native: Emergent Infrastructure | Frederick Kautz | 15m |
Argues that cloud native now behaves like an emergent system with no global control and limited observability, and that Open Standards plus existing protocols… | ||
| Tutorial: Reducing the Sticker Price Of Kubernetes Security | Pushkar Joglekar | 01h 29m |
Shows how to verify Kubernetes release images from sbom.k8s.io by running cosign keyless verification over ~15 images (uses sigstore transparency logs), how to… | ||
| The Insider Threat: Third-Party Applications In Your Cluster | Dagan Henderson, Will Kline | 36m |
A chain of three real vulnerabilities—Kiali hard‑coded JWT secret, Fleet logging SSH keys, and an unauthenticated Longhorn API—lets an attacker go from outside… | ||
| Content Addressable CRDs: Type Uniqueness Across Kubernetes Clusters | Daniel Mangum | 47m |
Proposes making CRD definitions globally unique by packaging CRDs plus controllers as OCI content-addressable packages and using digests to verify type… | ||
| From Security Testing To Deployment In a Single PR | Sarah Khalife, Grant Griffiths | 38m |
Automates build, image build, dependency and IaC scans from one PR using GitHub Actions and a single YAML that triggers tfsec and Trivy plus CodeQL and… | ||
| Kubernetes SIG Node Intro And Deep Dive | Sergey Kanzhelev, Dawn Chen, Derek Carr | 28m |
SIG Node outlines concrete changes: cgroup v2 stable lands after parity with v1 in 1.24 and targets production feedback; in-place pod resizing alpha appears… | ||
| Training AI To Code Using the Largest Code Dataset | Tommy Li, Animesh Singh | 37m |
Project CodeNet is a 14 million–sample, 500 million–line dataset across 55 languages (CDLA v2) used with the Machine Learning Exchange to preprocess, subset… | ||
| Keynote: Finding Clarity in a Cloudy Landscape | Stephen Augustus | 04m |
OpenClarity presents three concrete tools: API Clarity captures API traffic (service-mesh aware) to analyze calls and flag risky endpoints; Kube Clarity… | ||
| Keynote: Cloud Native Security Market Trends and Drivers | John Morello | 07m |
Prediction: within two years two-thirds of workloads in cloud and containerization is near universal so teams run containers on Kubernetes, provider-specific… | ||
| SIG Autoscaling Updates And Feature Highlights | Marcin Wielgus, Jayant Jain, Diego Bonfigli | 45m |
Updates list concrete changes and timelines for Cluster Autoscaler, Horizontal Pod Autoscaler and Vertical Pod Autoscaler: HPA becomes multithreaded and… | ||
| What Data Tells Us About Software Supply Chain Security & What To Do About It | Josh Bressers, Tracy Miranda, John Yeoh, Eric Tice | 32m |
Research scans 3 million Dockerfiles to find popular base images, revealing a Node base with 800 vulnerabilities and some CVEs dating to 2003–2004; only about… | ||
| The DEF Con Code of Conduct Lawsuit - Lessons learned and Tips for Managing Legal | Joanna Lee | 35m |
DEF CON faces a lawsuit in the U.S. District Court for the Eastern District of Pennsylvania after banning Chris Hadnagy and disbanding a village following… | ||
| Keynote: What It's Like to Bring DevOps to a Software Factory in Central America | Alvin Estrada | 12m |
A software factory migrates from 10% cloud in 2019 to 80% of loads in 2020 while shrinking feature dev and test time from two weeks to one day, achieved by… | ||
| Keynote: Opening Remarks | Ricardo Rocha, Emily Fox, Frederick Kautz | 01m |
Opening remarks announce a survey in two weeks and state that quantified attendee feedback will directly shape CNCF event planning and pandemic-era logistics… | ||
| Community Awards | Chris Aniszczyk | 07m |
Conference recognizes concrete community achievements and scale rather than hype, announcing a Top documentation tie: Catherine Paganini and Ray Leno, a… | ||
| Kubernetes Steering Committee AMA | Christoph Blecker | 39m |
Overview of how Kubernetes governance actually works: SIGs own code, working groups are time‑bound, and committees handle security and conduct; steering… | ||
| BoF: How Can We Build Stronger User Support Groups? | Steven Wong | 37m |
Local Kubernetes meetups hit 200–250 monthly attendees pre‑COVID and collapse during the pandemic while some cities (Atlanta, London) grow online; Zoom fatigue… | ||
| Public Technical Oversight Committee (TOC) Meeting | Chris Aniszczyk | 34m |
Overview of how the TOC makes technical calls, how projects move from sandbox to incubation to graduation, and why the sandbox process is being rewritten and… | ||
| nothing matches | ||