kubernetes

Lightning Talk: Oh Sh*t! The Config Changed!

November 17, 2019

The majority of production incidents for Pusher's platform team during 2018 had the same root cause… a broken config! Kubernetes doesn't have a sense of versioning for configmaps and secrets and, i …

Lightning Talk: Ready, Steady, CKA!

November 17, 2019

Its a race with time to pass most exams, and the Certified Kubernetes Administrator (CKA) is no different. The CKA was developed by the CNCF, and is fast becoming one of the most strategic certificat …

Lightning Talk: Slow Starting Containers, How to Check Their Health?

November 17, 2019

Kubernetes uses probes to know when to send traffic to or restart a Container. For example, liveness probes could catch a deadlock, where an application is running, but unable to make progress. Restar …

Building Images Efficiently and Securely on Kubernetes with BuildKit

November 16, 2019

BuildKit is a modern container image builder that focuses on efficiency and security, mostly known as the backend of Docker 18.06+ and Jessie Frazelle's img. (But it is even useful as a standalone t …

Keynote: 2.66 Million

November 16, 2019

Over the last 4 years, Kubernetes has redefined what it means to run software. It empowers people to do more than they could do before - to ship faster, to use less resources, to understand the behavi …

Keynote: Getting Started in the Kubernetes Community

November 16, 2019

Kubernetes is its community. Kubernetes is where it is today only because of the people behind it. The foundation of this thriving community lies on the Kubernetes Community Values. In this talk, we w …

Keynote: Stitching Things Together

November 16, 2019

Kubernetes Security and How to Fix K8s Cluster at Scale

November 16, 2019

As a hosting provider, we have the challenge to run and manage multiple Kubernetes clusters for various customers on our infrastructure, similar to e.g. Google or Azure in a secure way. The majority o …

Lightning Talk: How to Regain the Trust of Your Users

November 16, 2019

Regaining the trust of your users is a hard task to accomplish. The secret is to know your infrastructure better and show that to your users. In this talk Eduard will show the approach Booking.com too …

Network Machinery: A United-Front for Network Troubleshooting with CRDs

November 16, 2019

The current state of network troubleshooting in Kubernetes is complicated. The knowledge of how to troubleshoot Kubernetes networking is scattered all over the place either in the heads of highly skil …

Rootless, Reproducible, and Hermetic: Secure Container Build Showdown

November 16, 2019

Rootless container image builds (as distinct from rootless runtimes) have crept ever closer with orca-build, BuildKit, and img proving the concept. And they are desperately needed: a build pipeline wi …

Envoy SDS: Fortifying Istio Security

November 15, 2019

In Istio 1.1, Citadel Agent is introduced to dynamically provision x.509 certificates and private keys to workloads through the Envoy Secret Discovery Service (SDS) API. Running on Kubernetes nodes as …

From Snowflake Servers to Snowflake Clusters - The GitOps Journey

November 15, 2019

At MasterCard, we have a unique hard requirement of one dedicated cluster per application due to security and other challenges. In an effort to prevent snowflake clusters, we provided a base set of se …

Ingress V2 and Multicluster Services

November 15, 2019

With app modernization, weve entered a new phase of structuring services. Services have evolved over time to span multiple clusters as well as hybrid deployments that encompass both on-prem and multi …

Intro: CNCF CI

November 15, 2019

The new and improved CNCF CI status dashboard – cncf.ci – provides a third party validation of builds, deployments and end-to-end testing for CNCFs Graduated and Incubating projects. The CNCF CI st …

Intro: Kubernetes (Release) SIG

November 15, 2019

SIG Release and the Release Team are looking for volunteers! This session will feature past and current release team members describing what the Release Team does: We will discuss how Kubernetes proje …

Intro: Kubernetes WG for Multitenancy

November 15, 2019

This presentation will be an overview of the work the multitenancy group has been doing, defining soft and hard multitenancy and reviewing the project plan for addressing both that the working group i …

Intro: Service Catalog SIG

November 15, 2019

This is an introduction to the Kubernetes Service Catalog project. Service Catalog lets you provision cloud services, regardless of where they are hosted, directly from the comfort of native Kubernete …

P2P Docker Image Distribution in Hybrid Cloud Environment with Kraken

November 15, 2019

Docker image is a foundational building block of container based infrastructure, but distributing high volume of docker images in a multi-zone, hybrid cloud system has been a scaling problem for many. …

Tutorial: Back to Basics: Hands-On Deployment of Stateful Workloads on Kubernetes

November 15, 2019

Ever wonder how to use a volumeClaimTemplate? Why you would choose a StatefulSet over a Deployment or vice versa?Complicated stateful applications are normally deployed via operators; however, it is …

Databases on Kubernetes Using a Custom Operator: Day 1, Day 2, and Beyond

November 14, 2019

We started the journey of building a managed cloud version of the graph database Neo4j. A bit later we started developing an operator to manage multiple database clusters in k8s.Handling persistence a …

Intro: Azure SIG

November 14, 2019

In the SIG Azure Intro, were going to tell you all about why SIG Azure exists and the team behind managing it. From there, well talk about whats happened over the last few releases, Kubernetes 1.14 …

Intro: SPIFFE

November 14, 2019

Modern software development relies on many microservices working together, that in production may be distributed over different middleware systems, container schedulers, PaaS platforms and even differ …

Tutorial: Cloud-Agnostic Serverless

November 14, 2019

Serverless design patterns have grown in popularity because they allow developers to move faster by focusing on business logic without worrying about the underlying infrastructure where their code is …

Unit Testing Your Kubernetes Configurations Using Open Policy Agent

November 14, 2019

Open Policy Agent provides a high-level declarative language to author and enforce policies on structured data, for instance Kubernetes configurations. OPA is typically used as a service to enforce au …

Intro: CoreDNS

November 13, 2019

CoreDNS is a flexible and extensible DNS server with a focus on service discovery. Best known for its ability to serve as the cluster DNS of Kubernetes, CoreDNS is now the default DNS and part of the …

Istio New Workload Identity Provision Pipeline Based on Envoy SDS

November 13, 2019

Istio introduces a new workload identity provision system based on envoy SDS (secret discovery service) from release-1.1; as the main developer who works on this project, my talk covers:1. Background …

Kanary - Automated and Integrated Canary Testing Using CRD and an Operator

November 13, 2019

The Kubernetes ecosystem provides primitives to easily deploy applications. Now, how might we simplify validation of a new application version before triggering its complete rollout? Canary testing is …