cluster

Sponsored Keynote: Recursive Kubernetes: Cluster API and Clusters as Cattle

Sponsored Keynote: Recursive Kubernetes: Cluster API and Clusters as Cattle

November 8, 2019

If Kubernetes is the gold standard for managing fleets of applications, whats the gold standard for managing fleets of Kubernetes clusters? Cluster Lifecycle SIG is taking that challenge head on with …
Sponsored Keynote: What I Learned Running 10,000+ Kubernetes Clusters

Sponsored Keynote: What I Learned Running 10,000+ Kubernetes Clusters

November 8, 2019

After years of running Kubernetes, I've learned a few things about scale. When you have one cluster, you can manage it by hand. For 2-10 clusters, familiar tools work OK. But for more than 10, it's ti …
Building HA Multi-Cloud Clusters Using WireGuard as a Network Overlay

Building HA Multi-Cloud Clusters Using WireGuard as a Network Overlay

November 6, 2019

Kubernetes abstracts away infrastructure, enabling the community to leverage a single, powerful interface anywhere we like, from bare-metal to public clouds like AWS or GCP. However, not all infrastru …
Data Without Borders - Using Rook Storage Orchestration at a Global Scale

Data Without Borders - Using Rook Storage Orchestration at a Global Scale

November 6, 2019

The Rook project has established robust and reliable patterns for orchestrating storage systems running on-top of Kubernetes clusters. However, storage systems often need to extend beyond a single clu …
Intro: Vitess

Intro: Vitess

November 6, 2019

This session will cover a high level overview of all the Vitess features. Following this, we'll go over a tutorial on how to bring up a fully functional Vitess cluster in Kubernetes. Once up, we'll go …
Resize Your Pods w/o Disruptions aka How to Have a Cake and Eat a Cake

Resize Your Pods w/o Disruptions aka How to Have a Cake and Eat a Cake

November 5, 2019

Whether youre using Vertical Pod Autoscaler or controlling Pod resources on your own, one thing is certain: applying new settings is disruptive as it requires Pods to be killed and recreated. Why sho …
From New Cluster to Insight. Deploying Monitoring and Logging to Kubernetes

From New Cluster to Insight. Deploying Monitoring and Logging to Kubernetes

November 4, 2019

The question that most people ask after spinning up their first Kubernetes cluster is "how do I do monitoring and logging". In this session we'll utilize open source tools like Prometheus, Helm, Graf …
Intro: Brigade

Intro: Brigade

November 4, 2019

Brigade is a lightweight, Kubernetes-native framework which allows the creation of event-driven workflows. Using JavaScript, Brigade chains together containers and controls their execution in an in-cl …
Treating Network Assets as Scheduleable Resources

Treating Network Assets as Scheduleable Resources

November 4, 2019

Several cloud-providers now offer a managed Kubernetes solution. Customers launch their worker nodes within a Virtual Private Cloud (VPC) and in majority of these environments, Container Network Inter …
Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105

Crafty Requests: Deep Dive Into Kubernetes CVE-2018-1002105

November 3, 2019

You may have heard about CVE-2018-1002105, one of the most severe Kubernetes security vulnerabilities of all time. But how does this flaw work? How can it be exploited, and what does it all mean? Thi …
Hacking Helm

Hacking Helm

November 3, 2019

Helm is the best way to build, package, and run Kubernetes manifests. However it has been considered by some as a fairly insecure way to deploy software, mostly due to its server component Tiller. Let …
Koping with Change: What kops Learned Adopting etcd3, cluster-api and CRDs

Koping with Change: What kops Learned Adopting etcd3, cluster-api and CRDs

November 3, 2019

Kubernetes continues to adds features rapidly, but this makes it hard to install and operating a reliable kubernetes cluster. kops is an official OSS installation tool that makes kubernetes installati …
Deep Dive: Service Catalog SIG

Deep Dive: Service Catalog SIG

November 2, 2019

Join us for a deep dive into how the Kubernetes Service Catalog works under the covers. Starting with a quick overview of Service Catalog and some of the challenges we faced while bridging the differe …
Lifecycle of a kubectl Command: Harden Kubernetes Setup with Automation

Lifecycle of a kubectl Command: Harden Kubernetes Setup with Automation

November 2, 2019

We at Booking.com run tens of on-premise multi-tenant Kubernetes clusters at scale. To automate integration with our existing bare-metal infrastructure and for running kubectl auth pipeline, we run an …
Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

Benefits of a Service Mesh When Integrating Kubernetes with Legacy Services

November 1, 2019

Having Kubernetes for your service landscape is great. Having a service mesh technology inside is even better - but there are legacy services, too. Leveraging the benefits of a service mesh is possibl …
Deconstructing Apache Hadoop: A Dialogue About a Cloud-Native Refactor

Deconstructing Apache Hadoop: A Dialogue About a Cloud-Native Refactor

November 1, 2019

Many existing applications like the Big Data stack is in a community debate over moving to K8s. They see it as the future, but there are lots of unknowns and complex problems to solve. This is a dialo …
Ready? A Deep Dive into Pod Readiness Gates for Service Health Management

Ready? A Deep Dive into Pod Readiness Gates for Service Health Management

November 1, 2019

This talk will be a deep dive on pod readiness gates, a new Kubernetes API for extending pod readiness with custom external controllers and introduce its usage in real world scenarios with service h …
Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

Reinventing Networking: A Deep Dive into Istio's Multicluster Gateways

October 31, 2019

Service mesh software is challenging the current networking state of the art. With Istios gateways technology, it is possible to connect large numbers of Kubernetes clusters. Connectivity between clo …
Container Forensics: What to Do When Your Cluster is a Cluster

Container Forensics: What to Do When Your Cluster is a Cluster

October 30, 2019

When responding to an incident in your containers, you dont necessarily have the same tools at your disposal that you do with VMs - and so your incident investigation process and forensics are differ …
Co-Evolution of Kubernetes and GCP Networking

Co-Evolution of Kubernetes and GCP Networking

October 29, 2019

This talk will explore the trials and tribulations behind the evolution of GCP Networking for Kubernetes and evolution of Kubernetes to meet provider requirements. Our key guiding principle is to pro …
Deep Dive: Kubernetes (VMware) SIG

Deep Dive: Kubernetes (VMware) SIG

October 29, 2019

Deep Dive into the Cluster API Provider for vSphere The Cluster API is a Kubernetes project to bring declarative, Kubernetes-style APIs to cluster creation, configuration, and management. This is desi …
Migrating South East Asia's Biggest Payments Company to Kubernetes

Migrating South East Asia's Biggest Payments Company to Kubernetes

October 29, 2019

Go-pay, one of the biggest payment companies in south east asia, is a Indonesian Unicorn. At peak hours Go-pay does ~15k Financial transactions/minute. The complete infra used to run on ~1500 VMs with …
Smarter Kubernetes Access Control: A Simpler Approach to Auth

Smarter Kubernetes Access Control: A Simpler Approach to Auth

October 29, 2019

Configuring Kubernetes authorization policies with RBAC is an important part of securing any cluster. Unfortunately implementing effective and maintainable policies can be quite challenging. Many orga …
10 Ways to Shoot Yourself in the Foot with Kubernetes, #9 Will Surprise You

10 Ways to Shoot Yourself in the Foot with Kubernetes, #9 Will Surprise You

October 28, 2019

Kubernetes is a very powerful and complicated system, and many users dont understand the underlying systems. Come learn how your users can abuse container runtimes, overwhelm your control plane, and …
Improving Availability for Stateful Applications in Kubernetes

Improving Availability for Stateful Applications in Kubernetes

October 28, 2019

Over 40% of Kubernetes clusters run stateful applications. However, there are still challenges with deployment, especially with choosing a storage backend that is best suited to support your applicati …
Deep Dive: Cluster Lifecycle SIG (Kubeadm)

Deep Dive: Cluster Lifecycle SIG (Kubeadm)

October 27, 2019

The Cluster Lifecycle SIG is the Special Interest Group that is responsible for building the user experience for deploying Kubernetes clusters. Our objective is to simplify creation, configuration, up …
Deep Dive: NATS

Deep Dive: NATS

October 27, 2019

The NATS project took a big leap in 2018 towards making it possible to be used as the core component build a global overlay network to connect services securely. In NATS v2.0, its feature set has been …
Going from 5s to 5ms: Benefits of a Node-Local DNSCache

Going from 5s to 5ms: Benefits of a Node-Local DNSCache

October 27, 2019

DNS is one of the most heavily used services in Kubernetes clusters.The kubernetes community has long struggled with these mysterious 5s connection delays or DNS failures.This talk discusses how this …