KubeCon + CloudNativeCon Europe

Operating kube-apiserver Without Hiccups

November 12, 2019

Kube-apiserver is the central component of every Kubernetes cluster. Keeping it available at all times is crucial for reliable operation. At the same time we want to restart kube-apiserver, for versio …

Scale Kubernetes Service Endpoints 100x

November 12, 2019

Service and endpoints have been core primitives in K8s since 1.0. As k8s deployments gets larger, the scalability of k8s service endpoints has become a bottleneck, causing high overhead on network, cp …

Fine-Grained Permissions in Kubernetes: Whats Missing, and How to Fix That

November 11, 2019

In this talk, we will walk through a number of common scenarios where Kubernetes lacks sufficient access control tools, or where access control is often not properly applied. For example, it is common …

Intro: Harbor

November 11, 2019

As container technology become widely adopted in the industry, how to manage containerized applications poses new challenges to platform engineers. One of the challenges is to securely and efficiently …

Laying the Foundation: Real World Kubernetes Deployment Patterns

November 11, 2019

Enterprise deployments often find themselves gridlocked in debates concerning the "correct" approach for deploying Kubernetes. Should we use immutable images or a complex configuration management solu …

Reproducible Development and Deployment with Bazel and Telepresence

November 11, 2019

As the system grows in size and complexity the pain of maintaining an up-to-date local environment becomes less and less sustainable. Developers will eventually have to deal with large docker-compose …

Streamlining Kubernetes Application CI/CD with Bazel

November 11, 2019

Creating a repeatable Kubernetes application deployment pipeline with the Bazel build system offers a number of advantages over traditional Kubernetes application CI/CD approaches. We will describe ho …

The Kubernetes Control Plane for Busy People Who Like Pictures

November 11, 2019

Lets dive into the modular design of the Kubernetes control plane together. Well talk about the specific resources and controllers which make Kubernetes what it is, and how this pattern generalizes- …

Tutorial: A Day in the Life of a Cloud Native Developer

November 11, 2019

In this 90 minute, hands on tutorial, attendees will get a chance to work with a comprehensive set of modern cloud native tools from the CNCF software stack. The tutorial will take users on an end to …

Tutorial: Building Security into Kubernetes Deployment Pipelines

November 11, 2019

How secure is your deployment pipeline? Is image integrity verified or can any user deploy any image to production? Are those images scanned for known CVEs? And are security policies enforced to harde …

Tutorial: Introduction to Kubeflow Pipelines

November 11, 2019

In this session, you will learn how to install and use Kubeflow Pipelines to create a full machine learning application on Kubernetes.Starting with an empty environment, you will create a Kubernetes c …

What WePay Learned From Processing Billions of Dollars on GKE Using Linkerd

November 11, 2019

WePay processes billions of dollars worth of payments each year. As the number of services that process payment requests grow in WePays infrastructure, so does the challenge of monitoring, debugging, …

Birds of a Feather: Radio Access Network LTE/CBRS Edge

November 10, 2019

Discussion on deploying and running Kubernetes clusters across micro datacenters supporting edge applications. In specific, we'll be talking about how Packet Host has architected its Kubernetes deploy …

Building an Enterprise-ready Lambda Experience (with Hands-On Demo) - Alexandre Gonzlez Rodrguez, BBVA Next Technologies &

November 10, 2019

To create a lambda experience is easy, to do that in a mission-critical environment is not that easy. We will talk about two parallel journies: how we implemented this at BBVA (an international 100 ye …

Es-operator: Building an Elasticsearch Operator From the Bottom Up

November 10, 2019

Operating stateful applications is a challenge and Elasticsearch clusters are no exception. At Zalando, the search infrastructure heavily rely on large scale Elasticsearch clusters consisting of 100s …

Intro: Open Policy Agent

November 10, 2019

Come to this session to learn about the OPA Gatekeeper project! Gatekeeper integrates OPA with Kubernetes to provide new features like parameterized CRD-based policies, auditing, policy library, and m …

Intro: TUF / Notary

November 10, 2019

Software distribution and packaging systems are rapidly becoming the weak link in the software lifecycle. This talk provides an accessible overview of two CNCF projects (Notary and TUF), that provide …

Istio Multi-Cluster Service Mesh Patterns Explained

November 10, 2019

This session will review the various multi-cluster service mesh deployment patterns that are available with Istio. We will explain the pros and cons of each approach to ensure that you have the inform …

KEPs: Evolving Kubernetes at the Speed of Trust

November 10, 2019

What is Kubernetes? Every now and again we try to enumerate the scope of the Kubernetes Project; but this only represents a snapshot of our best understanding of the value that Kubernetes provides to …

Learn how to Leverage Kubernetes to Support 12 Factor for Enterprise Apps

November 10, 2019

12 Factor is a software methodology for building scalable microservice applications that provides best practices designed to enable applications to be built with portability, resilience, and scalabi …

Portable, Universal Single Sign-On for Your Clusters

November 10, 2019

In order to enable Single Sign-On in your cluster you need to configure the Kubernetes API server. This is an issue if you are using services where the control plane is managed for you. Some managed s …

Birds of a Feather: Financial Services User Group

November 9, 2019

This session is open to those interested in running Kubernetes and cloud native platforms in a regulated financial services context.The CNCF Financial Services User Group (FSUG) is a brand new group o …

BoF Deep Dive: Chaos Engineering

November 9, 2019

Can we actually learn in production are we doomed to remain in panic mode? In this session, we will be exploring how Chaos Engineering can help us learn and improve our production system by experiment …

Intro: Cluster Lifecycle SIG

November 9, 2019

SIG Cluster Lifecycle is the Special Interest Group that is responsible for building the user experience for deploying and upgrading Kubernetes clusters. Our mission is examining how we should change …

Intro: CNCF Security SIG

November 9, 2019

CNCF Security SIG representing cross-cutting concerns including authentication, authorization, auditing, policy enforcement, privacy and compliance. The SAFE WG has transformed into CNCF SIG, and thi …

Intro: Dragonfly

November 9, 2019

As cloud native becomes more and more popular in industry, how to distribute images efficiently and safely is a new challenge for enterprises. Dragonfly is an open source intelligent P2P based image a …

Intro: Rook

November 9, 2019

In this talk, we will be introducing the Rook project to attendees of all levels and experience. Rook is an open source cloud-native storage orchestrator for Kubernetes, providing the platform, framew …

Intro: Virtual Kubelet

November 9, 2019

Virtual Kubelet has most recently been accepted into the CNCF as a sandboxed project. In this session we will go through the benefits of the project and the landscape of providers that contribute to V …