Alban Crequy
where else to find them
github:alban
linkedin:albancrequy
what they talk about
all 6 in the filters
where they keep going back
- KubeCon + CloudNativeCon North America2 editions2020–2022
all 9 in the filters
on a stage with
all 5 in the filters
who talks about the same things
- Mauricio Vásquez Bernal10 talks
- Marga Manterola12 talks
- Natalia Reka Ivanko9 talks
- Duffie Cooley18 talks
- Anna Kapuścińska10 talks
- John Fastabend10 talks
| title | conference | date |
|---|---|---|
| Using the EBPF Superpowers To Generate Kubernetes Security Policies | KubeCon + CloudNativeCon North America 2022 | 2022-10-24 |
Shows how eBPF captures real runtime behavior to auto-generate seccomp profiles, Linux capabilities lists and Kubernetes NetworkPolicies using Inspektor Gadget… | ||
| Using BPF Iterators to Gain Insight into Kubernetes | Cloud Native eBPF Day North America 2021 | 2021-10-11 |
BPF iterators (added in Linux 5.8) let the kernel itself walk tasks and sockets so a 25-line iterator yields one line per thread or TCP socket with a single… | ||
| Seccomp Notify on Kubernetes | FOSDEM 2021 | 2021-02-06 |
The new Linux superpower coming to a Kubernetes cluster near you!
Until now, you could define seccomp policies in Kubernetes to allow or deny system calls but… | ||
| Beyond the Buzzword: BPF’s Unexpected Role in Kubernetes | KubeCon + CloudNativeCon North America 2020 Virtual | 2020-11-17 |
Claims that BPF delivers per-pod visibility and fast kernel-level hooks inside Kubernetes, demonstrated by deploying a daemonset that installs BPF programs and… | ||
| Pod Security as an Afterthought | Cloud Native Security Day Europe 2020 | 2020-08-17 |
Three open source tools automate pod-hardening by observing live behavior and emitting policies: kube-psp-advisor parses manifests and cluster API to generate… | ||
| Inspektor Gadget and traceloop: BPF debugging tools for Kubernetes | Virtual Rejekts 2020 | 2020-04-01 |
Traceloop captures system calls asynchronously per cgroup using BPF and an overwritable ring buffer so traces sit in memory like a flight recorder until… | ||
| Traceloop: Tracing containers syscalls using BPF | DevConf.CZ 2020 | 2020-01-24 |
traceloop traces syscalls per cgroup or container asynchronously using BPF, recording events into an overwritable ring buffer so traces act like an always‑on… | ||
| Hardening Multi-Cloud Kubernetes Clusters as a Service | KubeCon + CloudNativeCon China 2018 | 2018-11-13 |
SAP and Kinvolk describe a cluster‑as‑a‑service that creates seed control‑plane clusters and per‑tenant worker clusters across clouds, plus automation… | ||
| Towards unprivileged container builds | ContainerDays Hamburg 2018 | 2018-06-18 |
Goal: build container images inside Kubernetes pods without host root or extra privileges. Uses user namespaces to map root-in-container to non-root on host… | ||
| Exploring Container Mechanisms Through the Story of a Syscall | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Follows a single open() syscall inside a container to show the exact kernel subsystems and sequence involved: path lookup in the container mount namespace… | ||
| rkt Deep Dive | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Explains how rkt actually runs containers: rkt uses a pre-mount cgroup tree strategy so systemd in stage1 manages per-app cgroups with only selected subpaths… | ||
| rkt Intro | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
rkt is a Linux-only container runtime that claims no daemon operation and implements the AppC image format and execution model while providing a swappable… | ||
| OCI BoF | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Status update on OCI certification research: a third party (Kinvolk) audits existing test suite repos and finds many failing runtime tests (seccomp crashes… | ||
| nothing matches | ||