KubeCon + CloudNativeCon North America

Deep Dive: Kubernetes IoT Edge WG

Deep Dive: Kubernetes IoT Edge WG

December 13, 2019

What are the workloads that are unique or common to running Kubernetes on the edge? How do they take advantage of existing Kubernetes features, or require refinements and new capabilities? Well dive …
Deep Dive: TUF

Deep Dive: TUF

December 13, 2019

When VCS systems, build pipelines, or signing servers are are compromised, attackers get to distribute malicious versions to millions of unsuspecting users. We present how Datadog used TUF and in-toto …
Encoding 250,000 Songs a Day with batch/v1 Jobs

Encoding 250,000 Songs a Day with batch/v1 Jobs

December 13, 2019

Tasked with rebuilding the way we deliver music to DJ's, the Beatport Infrastructure team set out to use Kubernetes to construct scalable compute for executing batch and on-demand encoding workloads i …
Fly Your Containerized Environments by Joint Work of Harbor and Dragonfly

Fly Your Containerized Environments by Joint Work of Harbor and Dragonfly

December 13, 2019

With the emergence and development of Kubernetes, it's becoming possible to run and operate large-scale containerized applications and services in enterprise environments. How to securely and effectiv …
HomeAway's Multi-Cloud Traffic Director

HomeAway's Multi-Cloud Traffic Director

December 13, 2019

Case Study about how HomeAway built a global Multi Cloud Traffic Management solution using Content Distribution Networks and a hybrid of public and private clouds. Over the last two years we have grow …
Vitess at HubSpot: How We Moved Hundreds of MySQL Databases into Kubernetes

Vitess at HubSpot: How We Moved Hundreds of MySQL Databases into Kubernetes

December 13, 2019

In early 2017, HubSpot faced a growing problem: our MySQL infrastructure was complex, expensive, and failing to scale. Hundreds of databases running on more than a thousand EC2 instances were managed …
Deep Dive: CoreDNS

Deep Dive: CoreDNS

December 12, 2019

CoreDNS is a DNS server written in Go. It can be used in a multitude of environments because of its flexibility. The flexibility is due to CoreDNS unique plugin-based architecture: if some functional …
Deep Dive: Falco

Deep Dive: Falco

December 12, 2019

In any Cloud Native architecture, theres a seemingly endless stream of events that happen at each layer. These events can be used to detect abnormal activity and possible security incidents, as well …
Deep Dive: Testing SIG

Deep Dive: Testing SIG

December 12, 2019

This presentation is intended for contributors who want to know more about how testing is done for the project or want to write new test jobs themselves. We will briefly explain that open source Kuber …
Deep Dive: Virtual Kubelet

Deep Dive: Virtual Kubelet

December 12, 2019

This deep dive session will take you through what it means to be a provider or developer within the virtual kubelet project. We will go deeper into the virtual kubelet interface and discuss design dec …
Deep Dive: VMware SIG

Deep Dive: VMware SIG

December 12, 2019

Kubernetes allows using topology labels to affect the schedulers placement of pods. This is used to spread pods across availability zones, while still respecting resource access and availability conc …
Sharded and Federated Prometheus Servers to Monitor Distributed Databases

Sharded and Federated Prometheus Servers to Monitor Distributed Databases

December 12, 2019

At eBay we have developed a geo-distributed transactional document store called NuData. It is deployed on Kubernetes. The current deployment has thousands of pods across three datacenters, and is moni …
Deep Dive: Knative Productivity BoF

Deep Dive: Knative Productivity BoF

December 11, 2019

We will take a deep dive into Knative productivity infrastructure which covers test, perf, release and metrics. We will walk you through the life of a change, what type of tests it has to go through, …
Is Istio the Most Next Gen Next Gen Firewall Ever Created?

Is Istio the Most Next Gen Next Gen Firewall Ever Created?

December 11, 2019

Istio is emerging as a popular service mesh layer for cloud native apps and it delivers a variety of great features for devops scenarios. While security is one of its core tenets, Istio has far more p …
Kata and gVisor: A Quantitative Comparison

Kata and gVisor: A Quantitative Comparison

December 11, 2019

In the past year, hyper.sh+intel released Kata Containers, and Google released gVisor. The two projects shared many features: - both aim to work with kubernetes CRI seamlessly; - both could be treat …
Kubernetes the Database

Kubernetes the Database

December 11, 2019

In the operations world, one of the hardest problems is keeping track of your inventory: Which machines belong to which teams? Which machines are in service? How long have they been there? At New Reli …
Performance Testing Ingress for Internet-Scale Workloads

Performance Testing Ingress for Internet-Scale Workloads

December 11, 2019

Have you ever wondered how much ingress traffic a Kubernetes cluster could handle? How many nodes would it take to handle the traffic of an Alexa top-40 website? Understanding these numbers and how yo …
Running MySQL on Kubernetes

Running MySQL on Kubernetes

December 11, 2019

MySQL is the world's most popular open source database and there are a number of ways to run it on Kubernetes. This talk will explain and demonstrate how running a complex stateful application such as …
Single Sign-On for Kubernetes

Single Sign-On for Kubernetes

December 11, 2019

User management is hard. At Pusher, with an expanding engineering team, we wanted to build a simple identity management experience within our Kubernetes infrastructure. In this talk, I explore authent …
The Life of a Kubernetes Watch Event

The Life of a Kubernetes Watch Event

December 11, 2019

The watch event is essential to the kubernetes architecture. Its the key to maintaining high availability in the kubernetes control plane. Have you ever wondered how a watch event is propagated? In t …
Automated Kubernetes Scalability Testing

Automated Kubernetes Scalability Testing

December 10, 2019

Kubernetes supports large clusters according to the docs, but how does it actually scale? Who came up with those limits? What are the actual numbers? To challenge this we built a CI/CD environment gea …
Collecting Operational Metrics for a Cluster with 5,000 Namespaces

Collecting Operational Metrics for a Cluster with 5,000 Namespaces

December 10, 2019

Kubernetes is popular to provide a multi-tenant, shared infrastructure layer for many eng teams within an org. This is great for the teams, as they have a stable, scalable cluster to build upon. Howev …
Deep Dive: Big Data SIG

Deep Dive: Big Data SIG

December 10, 2019

This presentation will cover two projects from sig-big-data: Apache Spark on Kubernetes and Apache Airflow on Kubernetes. Kubernetes became a native scheduler backend for Spark in 2.3 and we have been …
Deep Dive: Harbor

Deep Dive: Harbor

December 10, 2019

Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. It has been widely used by organizations large and small around the world to resolve the image man …
Deep Dive: NATS

Deep Dive: NATS

December 10, 2019

The NATS project and its ecosystem have been continuously evolving since joining the CNCF and in this session we will share a retrospective of what is the current state of the art and overall directio …
Deep Dive: Scheduling SIG

Deep Dive: Scheduling SIG

December 10, 2019

This talk will be useful for cluster operators who are interested in learning about new scheduling features in Kubernetes. The talk will provide insights about ways to run clusters more efficiently an …
Adding a New Storage Provider to Rook

Adding a New Storage Provider to Rook

December 9, 2019

The CNCF hosted Rook project has built a framework for running stateful workloads on Kubernetes, enabling storage providers to seamlessly and effectively integrate into cloud native environments. This …
Container Security and Multi-Tenancy Tales from Kata and Nabla

Container Security and Multi-Tenancy Tales from Kata and Nabla

December 9, 2019

With the introduction of the Kubernetes CRI many different choices have emerged for users to run their various containerized workloads. There have been concerns about the complexity of making traditio …