cluster

Kubernetes Security and How to Fix K8s Cluster at Scale

Kubernetes Security and How to Fix K8s Cluster at Scale

November 16, 2019

As a hosting provider, we have the challenge to run and manage multiple Kubernetes clusters for various customers on our infrastructure, similar to e.g. Google or Azure in a secure way. The majority o …
From Snowflake Servers to Snowflake Clusters - The GitOps Journey

From Snowflake Servers to Snowflake Clusters - The GitOps Journey

November 15, 2019

At MasterCard, we have a unique hard requirement of one dedicated cluster per application due to security and other challenges. In an effort to prevent snowflake clusters, we provided a base set of se …
Ingress V2 and Multicluster Services

Ingress V2 and Multicluster Services

November 15, 2019

With app modernization, weve entered a new phase of structuring services. Services have evolved over time to span multiple clusters as well as hybrid deployments that encompass both on-prem and multi …
Intro: CNCF CI

Intro: CNCF CI

November 15, 2019

The new and improved CNCF CI status dashboard – cncf.ci – provides a third party validation of builds, deployments and end-to-end testing for CNCFs Graduated and Incubating projects. The CNCF CI st …
Intro: Service Catalog SIG

Intro: Service Catalog SIG

November 15, 2019

This is an introduction to the Kubernetes Service Catalog project. Service Catalog lets you provision cloud services, regardless of where they are hosted, directly from the comfort of native Kubernete …
P2P Docker Image Distribution in Hybrid Cloud Environment with Kraken

P2P Docker Image Distribution in Hybrid Cloud Environment with Kraken

November 15, 2019

Docker image is a foundational building block of container based infrastructure, but distributing high volume of docker images in a multi-zone, hybrid cloud system has been a scaling problem for many. …
Tutorial: Back to Basics: Hands-On Deployment of Stateful Workloads on Kubernetes

Tutorial: Back to Basics: Hands-On Deployment of Stateful Workloads on Kubernetes

November 15, 2019

Ever wonder how to use a volumeClaimTemplate? Why you would choose a StatefulSet over a Deployment or vice versa?Complicated stateful applications are normally deployed via operators; however, it is …
Databases on Kubernetes Using a Custom Operator: Day 1, Day 2, and Beyond

Databases on Kubernetes Using a Custom Operator: Day 1, Day 2, and Beyond

November 14, 2019

We started the journey of building a managed cloud version of the graph database Neo4j. A bit later we started developing an operator to manage multiple database clusters in k8s.Handling persistence a …
Unit Testing Your Kubernetes Configurations Using Open Policy Agent

Unit Testing Your Kubernetes Configurations Using Open Policy Agent

November 14, 2019

Open Policy Agent provides a high-level declarative language to author and enforce policies on structured data, for instance Kubernetes configurations. OPA is typically used as a service to enforce au …
Intro: CoreDNS

Intro: CoreDNS

November 13, 2019

CoreDNS is a flexible and extensible DNS server with a focus on service discovery. Best known for its ability to serve as the cluster DNS of Kubernetes, CoreDNS is now the default DNS and part of the …
Kubernetes Failure Stories and How to Crash Your Clusters

Kubernetes Failure Stories and How to Crash Your Clusters

November 13, 2019

Bootstrapping a Kubernetes cluster is easy, rolling it out to nearly 200 engineering teams and operating it at scale is a challenge. In this talk, we are presenting our approach to Kubernetes provisio …
Operating kube-apiserver Without Hiccups

Operating kube-apiserver Without Hiccups

November 12, 2019

Kube-apiserver is the central component of every Kubernetes cluster. Keeping it available at all times is crucial for reliable operation. At the same time we want to restart kube-apiserver, for versio …
Scale Kubernetes Service Endpoints 100x

Scale Kubernetes Service Endpoints 100x

November 12, 2019

Service and endpoints have been core primitives in K8s since 1.0. As k8s deployments gets larger, the scalability of k8s service endpoints has become a bottleneck, causing high overhead on network, cp …
Reproducible Development and Deployment with Bazel and Telepresence

Reproducible Development and Deployment with Bazel and Telepresence

November 11, 2019

As the system grows in size and complexity the pain of maintaining an up-to-date local environment becomes less and less sustainable. Developers will eventually have to deal with large docker-compose …
Streamlining Kubernetes Application CI/CD with Bazel

Streamlining Kubernetes Application CI/CD with Bazel

November 11, 2019

Creating a repeatable Kubernetes application deployment pipeline with the Bazel build system offers a number of advantages over traditional Kubernetes application CI/CD approaches. We will describe ho …
Tutorial: Building Security into Kubernetes Deployment Pipelines

Tutorial: Building Security into Kubernetes Deployment Pipelines

November 11, 2019

How secure is your deployment pipeline? Is image integrity verified or can any user deploy any image to production? Are those images scanned for known CVEs? And are security policies enforced to harde …
Tutorial: Introduction to Kubeflow Pipelines

Tutorial: Introduction to Kubeflow Pipelines

November 11, 2019

In this session, you will learn how to install and use Kubeflow Pipelines to create a full machine learning application on Kubernetes.Starting with an empty environment, you will create a Kubernetes c …
Birds of a Feather: Radio Access Network LTE/CBRS Edge

Birds of a Feather: Radio Access Network LTE/CBRS Edge

November 10, 2019

Discussion on deploying and running Kubernetes clusters across micro datacenters supporting edge applications. In specific, we'll be talking about how Packet Host has architected its Kubernetes deploy …
Es-operator: Building an Elasticsearch Operator From the Bottom Up

Es-operator: Building an Elasticsearch Operator From the Bottom Up

November 10, 2019

Operating stateful applications is a challenge and Elasticsearch clusters are no exception. At Zalando, the search infrastructure heavily rely on large scale Elasticsearch clusters consisting of 100s …
Istio Multi-Cluster Service Mesh Patterns Explained

Istio Multi-Cluster Service Mesh Patterns Explained

November 10, 2019

This session will review the various multi-cluster service mesh deployment patterns that are available with Istio. We will explain the pros and cons of each approach to ensure that you have the inform …
Portable, Universal Single Sign-On for Your Clusters

Portable, Universal Single Sign-On for Your Clusters

November 10, 2019

In order to enable Single Sign-On in your cluster you need to configure the Kubernetes API server. This is an issue if you are using services where the control plane is managed for you. Some managed s …
Intro: Cluster Lifecycle SIG

Intro: Cluster Lifecycle SIG

November 9, 2019

SIG Cluster Lifecycle is the Special Interest Group that is responsible for building the user experience for deploying and upgrading Kubernetes clusters. Our mission is examining how we should change …
The Multicluster Toolbox

The Multicluster Toolbox

November 9, 2019

The Kubernetes community has been talking about "multicluster" for several years. The topic is often associated with the Federation (v2) project. While Federation offers a solution to a problem (top-d …
Using K8s Audit Logs to Secure Your Cluster

Using K8s Audit Logs to Secure Your Cluster

November 9, 2019

K8s Audit Logs are a new feature in K8s 1.11/1.13 which allow an operator to see a stream of events from the API server that show the changes being made to your cluster. In this talk, well describe h …
Keynote: A Journey to a Centralized, Globally Distributed Platform

Keynote: A Journey to a Centralized, Globally Distributed Platform

November 8, 2019

For over a century Cond Nast International has set the benchmark for print and digital publishing. With brands like Vogue, GQ, Wired, Cond Nast Traveller under our umbrella we are operating in more …
Keynote: How Spotify Accidentally Deleted All its Kube Clusters with No User Impact

Keynote: How Spotify Accidentally Deleted All its Kube Clusters with No User Impact

November 8, 2019

During Spotify's Kubernetes migration, David's team deleted most of their production Kubernetes clusters. Accidentally. Twice. With little to no user impact. David shares how they recovered and learne …
Keynote: Reperforming a Nobel Prize Discovery on Kubernetes

Keynote: Reperforming a Nobel Prize Discovery on Kubernetes

November 8, 2019

Back in 2012, CERN announced one of its most important achievements, the discovery of the Higgs boson leading to the 2013 Nobel Prize in Physics. In this presentation, we will redo the data analysis t …
Sponsored Keynote: Expanding the Kubernetes Operator Community

Sponsored Keynote: Expanding the Kubernetes Operator Community

November 8, 2019

Operators enable you run those tricky stateful services and complex distributed systems on Kubernetes. Kubernetes Operators are embedded with all of the special knowledge for running an app, from th …