Kubernetes Forum Sydney 2019
2019-12-12..2019-12-13
Sydney, Australia
who it's for
kubernetes platform engineers, platform engineers, site reliability engineers, devops engineers, security engineers, cloud architects
topics
Open Policy Agent (OPA) policies; Rego policy templating and testing; kubernetes RBAC and encryption at rest; PodSecurityPolicy and seccomp AppArmor; Kata Containers sandboxing on Kubernetes; Cloud Native Buildpacks and kpack; Getting to know Helm 3; kubernetes operators; service mesh landscape; multicluster strategies and Cluster API; container runtime landscape (OCI CRI); observability in Kubernetes
| title | author | length |
|---|---|---|
| Policing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith Nambiar | Mark Puddick, Amith Nambiar | 25m |
Open Policy Agent runs as an external policy engine hooked into the Kubernetes admission webhook and evaluates Rego policies stored as ConfigMaps; the demo… | ||
| Kubernetes Security Best Practices - Ian Lewis, Google | Ian Lewis | 29m |
Covers concrete steps: enable RBAC everywhere and limit API server access via firewalls or GKE master authorized networks, encrypt etcd with Kubernetes… | ||
| Keynote: Hiding in the Dark - Dan Kohn, Executive Director, Cloud Native Computing Foundation | Dan Kohn | 09m |
Claim that most enterprises are still hiding in holes rather than adopting cloud native practices, backed by specific examples: Kubernetes assembles real… | ||
| Bringing Cloud Native Buildpacks to Kubernetes - Dr Nic Williams, Stark & Wayne | Nic Williams | 38m |
Argues that Cloud Native Buildpacks replace bespoke Dockerfiles by auto-detecting dependencies, producing OCI images that operators can rebase (swap base… | ||
| Keynote: Security and the OODA Loop - Liz Rice, Technology Evangelist, Aqua Security | Liz Rice | 12m |
Applies the OODA loop to Kubernetes with a live demo: a controller reconciles three nginx pods, a tracer (Tracy) shows running executables, a malicious YAML… | ||
| Keynote: Kubernetes and Cloud Native: The Past, Present and Future - Cheryl Hung, Dir. of Ecosystem | Cheryl Hung | 08m |
Kubernetes claims 1.1 million contributions from 35,000 contributors and runs in production at scale with 19% running more than 5,000 containers and 44% using… | ||
| Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security | Liz Rice | 02m |
Round of applause for this morning’s keynotes and for sponsors who make the event possible; attendees are directed to the sponsor showcase now and to coffee… | ||
| Sponsored Keynote: Free Range Kubernetes: Feeding, Watering & Herding - Brian Goodman-Jones | Brian Goodman-Jones | 08m |
Industry survey of 1,100 organizations shows Kubernetes at scale: 91% multiple clusters, 71% on‑prem and 67% public cloud, with edge use like k3s. Real… | ||
| Keynote: Enabling World Class Engineering with Kubernetes at Xero - Jono Cooper, Engineer, Xero | Jono Cooper | 10m |
Xero runs Kubernetes on AWS to consolidate varied team tooling and empower ~1,200 developers, building a cloud-native platform with a four-person platform… | ||
| Filling the Gaps in Kubernetes Test Coverage - Hippie Hacker, ii.coop | Hippie Hacker | 20m |
Kubernetes conformance coverage is measured by an audit-log pipeline called API snoop that parses audit events, stores them in Postgres and a GraphQL layer… | ||
| Securing Untrusted Workloads with Kata Containers on Kubernetes - David Angot & Alex Price | David Angot, Alex Price | 25m |
Atlassian runs Bitbucket Pipelines on Kubernetes using Kata Containers (via containerd/CRI-O) to give each pod its own micro-VM/kernel. Proof-of-concept runs… | ||
| Running Massively Parallel Deep-learning Inference Pipelines on Kub... Suneeta Mall & Martin Abeleda | Suneeta Mall, Martin Abeleda | 29m |
Nearmap builds a custom inference engine called Seer CRD on Kubernetes that uses gang scheduling and per-workflow RWX volumes to run massively parallel… | ||
| Building K8s on AWS & Enabling Developers to Deliver. What to Do Better - Greg Sansom & Fahad Tariq | Greg Sansom, Fahad Tariq | 28m |
Built a Terraform-first AWS platform layered with EKS clusters and common services, delivered to multiple environments and into integration testing in about… | ||
| Full Stack Cloud Native Packaging – An Intro to CNAB - Ben Griffin & Clarence Bakirtzidis, Microsoft | Ben Griffin, Clarence Bakirtzidis | 27m |
CNAB packages application images, infrastructure code and the installer image into an OCI-pushed JSON bundle that can be cryptographically signed and verified… | ||
| Smooth Operator - A Rough Guide to Kubernetes Operators - Olive Power, VMware | Olive Power | 28m |
Defines operators as controllers for custom resources that codify operational knowledge into Kubernetes API actions, with concrete examples like database… | ||
| Navigating the Service Mesh Landscape - Paul Bouwer, Microsoft | Paul Bouwer | 26m |
Compares Istio, Linkerd and Consul by design goals, actual features and operational costs: Istio: full‑featured, extensible, multi‑cluster and VM support but… | ||
| Adventures in Production with GitOps, Secure Pipelines & Compliance - Brandon Lum & Ricardo Aravena | Brandon Lum, Ricardo Aravena | 27m |
A concrete pipeline shows GitOps with security wired in: a Tekton CI on a local cluster clones a Flask repo, runs Python Safety static checks, builds a… | ||
| So You Want to Geo-Partition Your Data... - Deepthi Sigireddi & Jiten Vaidya, Planetscale, Inc. | Deepthi Sigireddi, Jiten Vaidya | 30m |
A production Vitess cluster runs across four GKE clusters (Asia, Australia, Europe, US) with a sharded user DB keyspace split into four shards; a custom Vindex… | ||
| Dr etcd; or; How I Learned to Stop Worrying and Love the Datastore - Nick Young, VMware | Nick Young | 19m |
Practical war stories about running etcd: upgrade path that lets a cluster be upgraded online in under 30 minutes, using immutable instances plus attached data… | ||
| OPA Policy Templating and Testing - Tejas Cherukara, ANZ Bank & Ben Ebsworth, Digio | Tejas Cherukara, Ben Ebsworth | 25m |
Shows how OPA policy becomes a production artifact: Rego is generated from templated Jinja policies with a shared library for common functions, unit tests are… | ||
| Keynote: Opening Remarks - Liz Rice, Technology Evangelist, Aqua Security | Liz Rice | 01m |
Brief energetic welcome to the conference, checks the room mood and hands the program to the next session, explicitly announcing New Relic will present… | ||
| Keynote: Getting to Know Helm 3 - Scott Coulton, Principal Cloud Advocate, Microsoft | Scott Coulton | 11m |
Helm 3 is stable and removes Tiller so cluster operations use normal kube credentials and releases are stored as secrets in namespaces; the client now follows… | ||
| Sponsored Keynote: The Future of Observability in K8s - Nik Jain & Steve Ng, New Relic | Nik Jain, Steve Ng | 12m |
New Relic outlines concrete observability plumbing for Kubernetes: use OpenTelemetry + Prometheus for metrics and traces, support both agentless and… | ||
| Keynote: Closing Remarks - Liz Rice, Technology Evangelist, Aqua Security | Liz Rice | 03m |
Closing remarks list concrete dates, locations, and logistics for next events: Bengaluru Feb 17–18 and Delhi Feb 20–21 with schedule announced this week… | ||
| Kubernetes Scalability: Federation & Cluster API - Katie Gamanji, Condé Nast International | Katie Gamanji | 25m |
Conde Nast builds a centralized, globally distributed Kubernetes platform spanning nine clusters and five regions, having migrated two thirds of its estate and… | ||
| Keynote: Multicluster Strategies to “Kubernetify” Legacy Apps - Sai Vennam, Developer Advocate, IBM | Sai Vennam | 11m |
Covers concrete patterns and tools to move legacy apps into Kubernetes: use multiple clusters for dev/test/prod, multi-region failover and multi-cloud… | ||
| OCI, CRI, ??: Making Sense of the Container Runtime Landscape in Kubernetes - Phil Estes, IBM | Phil Estes | 23m |
OCI forms the interoperability layer born in 2015 with the runtime spec and runc implementation (2017), and Kubernetes uses the CRI abstraction so any… | ||
| Sponsored Keynote: Down with Container Silos. All Hail the Unified Approach: Bringi... Andrew Assauw | Andrew Assauw | 08m |
Argues that containers, app runtimes and serverless should run on one platform, not three separate silos, and proposes a concrete stack: Kubernetes + Istio +… | ||
| nothing matches | ||