kubernetes

Building Reusable DevSecOps Pipelines on a Secure Kubernetes Platform

Building Reusable DevSecOps Pipelines on a Secure Kubernetes Platform

December 22, 2019

Onboarding development teams can often be the critical point in determining if a team will adopt modern Cloud Native and DevSecOps practices. If there is too much friction for developers to build, sca …
Containing the Container: Developer Experience vs Strict Security Posture

Containing the Container: Developer Experience vs Strict Security Posture

December 22, 2019

Within Verizon IT we manage multiple multi-tenant Kubernetes clusters across on-prem and multiple clouds hosting hundreds of applications. Containers, Kubernetes, and cloud-native are central pillars: …
Intro: Brigade

Intro: Brigade

December 22, 2019

Brigade is a lightweight, Kubernetes-native framework which allows the creation of event-driven workflows. Using JavaScript, Brigade chains together containers and controls their execution in an in-cl …
KubeEdge Kubernetes Native Edge Computing Framework

KubeEdge Kubernetes Native Edge Computing Framework

December 22, 2019

KubeEdge is an open source edge computing framework that extends the power of kubernetes from central cloud to edge. In this session attendees will learn about: - Why KubeEdge is useful for Edge Compu …
Kubernetes at Cruise: Two Years of Multitenancy

Kubernetes at Cruise: Two Years of Multitenancy

December 22, 2019

Cruise has been working on self-driving cars for six years and growing exponentially for most of that time. Two years ago they started using Kubernetes, betting on namespace-level multitenancy to prov …
Only Slightly Bent: Ubers Kubernetes Migration Journey for Microservices

Only Slightly Bent: Ubers Kubernetes Migration Journey for Microservices

December 22, 2019

Uber started using docker containers at scale in 2015, and has gone through a few generations of cluster management and service discovery technologies. In early 2019, we started working on migration f …
ROCKSET: The design and implementation of a data system for low-latency queries for search and analytics

ROCKSET: The design and implementation of a data system for low-latency queries for search and analytics

December 22, 2019

Most existing big data systems prefer sequential scans for processing queries. Igor Canadi and Dhruba Borthakur challenge this view, offering an overview of converged indexing: a single system called ROCKSET that builds inverted, columnar, and document indices. Converged indexing is economically feasible due to the elasticity of cloud-resources and write optimized storage engines.
Running Apache Samza on Kubernetes

Running Apache Samza on Kubernetes

December 22, 2019

Apache Samza is a distributed stream processing framework that allows you to process and analyze your data in real-time. It has been widely used at Linkedin and other companies on a large scale. Recen …
Low Latency Multi-cluster Kubernetes Networking in AWS

Low Latency Multi-cluster Kubernetes Networking in AWS

December 21, 2019

Lyft is migrating their entire service stack of hundreds of microservices to Kubernetes on AWS. A critical component to Lyfts successful migration is their open source set of CNI plugins which implem …
Making the Most Out of Kubernetes Audit Logs

Making the Most Out of Kubernetes Audit Logs

December 21, 2019

The Kubernetes audit logs are a rich source of information: all of the calls made to the API server are stored, along with additional metadata such as usernames, timings, and source IPs. They help to …
OPA Introduction & Community Update

OPA Introduction & Community Update

December 21, 2019

Come to this session to learn about the Open Policy Agent (OPA) project. OPA is a general-purpose policy engine that solves a number of policy-related use cases in Kubernetes and the wider cloud nativ …
SIG Cloud Provider Intro

SIG Cloud Provider Intro

December 21, 2019

The long-term goal of SIG Cloud Provider is to promote a vendor-neutral ecosystem for our community. New vendors providing support for Kubernetes should feel equally empowered to do so as any of today …
The Release Team Shadow Program - Mentoring For the Future

The Release Team Shadow Program - Mentoring For the Future

December 21, 2019

Each Kubernetes release is guided by a team of specialist community members to shepherd the process and to culminate in a new release of the worlds most popular container orchestration tool. After Re …
Beyond Storage Management

Beyond Storage Management

December 20, 2019

Kubernetes added alpha support for persistent volume snapshotting in 1.12 through the Container Storage Interface (CSI). While having some limitations, this feature is critical to stateful workloads a …
eBay Search On K8s

eBay Search On K8s

December 20, 2019

eBay currently has billions of items available for search. The search engine at any given time can get around 100Ks of queries per second for search within this inventory.In order to support this sca …
Service Mesh: There and Back Again

Service Mesh: There and Back Again

December 20, 2019

You might have heard about service mesh and its amazing benefits. Maybe you believe its the next big thing, but will it truly meet expectations? As any start to a relationship, things look fun and ea …
The Devil in the Details: Kubernetes First Security Assessment

The Devil in the Details: Kubernetes First Security Assessment

December 20, 2019

In October of last year, the Kubernetes project created a new Security Audit working group and began Kubernetes first comprehensive third-party security assessment. In the months that followed, we wo …
Applying Policy Throughout The Application Lifecycle with Open Policy Agent

Applying Policy Throughout The Application Lifecycle with Open Policy Agent

December 19, 2019

Open Policy Agent is built to be used as a library in other tools and there are already several open source projects using OPA as generic policy engine. This is powerful because it allows end users to …
Enabling Kubeflow with Enterprise-Grade Auth for On-Prem Deployments

Enabling Kubeflow with Enterprise-Grade Auth for On-Prem Deployments

December 19, 2019

Kubeflow is an open source machine learning platform built on Kubernetes. Every service in Kubeflow is implemented either as a Custom Resource Definition (CRD) (e.g., TensorFlow Job) or as a standalon …
Five Things You Didnt Know You Could Do with SPIFFE and SPIRE

Five Things You Didnt Know You Could Do with SPIFFE and SPIRE

December 19, 2019

Zero Trust networking and secure authentication are hot topics in security team meetings all over the world. But how do you actually get started? The open-source SPIFFE and SPIRE projects are your fou …
Hardware-based KMS Plug-in to Protect Secrets in Kubernetes

Hardware-based KMS Plug-in to Protect Secrets in Kubernetes

December 19, 2019

Secrets are a key pillar of K8S security, and K8S 1.10+ enhanced the protection of secrets at-rest in the etcd, with support for an external KMS (via KMS plug-ins), and supporting envelope encryption. …
A Peek Inside the Enterprise Cloud at Salesforce

A Peek Inside the Enterprise Cloud at Salesforce

December 18, 2019

This talk offers a peek inside the enterprise cloud infrastructure at Salesforce. Kubernetes is open source software which is becoming the de facto standard for running services as scale.Enterprise da …
Architectural anti-patterns when delivering a software ecosystem with Kubernetes

Architectural anti-patterns when delivering a software ecosystem with Kubernetes

December 18, 2019

The link between architecture and how to deploy a software environment is one of the most important factors to creating a highly available, fast, accessible, reliable, and easy-to-change software service. Laurentiu Spilca explores considerations and common pitfalls when delivering your software with Kubernetes.
Automating stateful applications with Kubernetes Operators (sponsored by OpenShift)

Automating stateful applications with Kubernetes Operators (sponsored by OpenShift)

December 18, 2019

Kubernetes scales and manages stateless applications quite easily. Stateful applications can require more work. They can be harder to dynamically manage with data intact and sometimes come with their own notion of clustering. Jan Kleinert offers an overview of OperatorsKubernetes agents that know how to deploy, scale, manage, back up, and even upgrade complex stateful applications.
Building Blocks: How Raw Block PVs Changed the Way We Look at Storage

Building Blocks: How Raw Block PVs Changed the Way We Look at Storage

December 18, 2019

Raw block PersistentVolumes (PVs) allow applications to consume storage in a new way. In particular, Rook-Ceph now makes use of them to provide the backing store for its clustered storage in a more Ku …
CAP_NET_RAW and ARP Spoofing in Your Cluster: It's Going Downhill From Here

CAP_NET_RAW and ARP Spoofing in Your Cluster: It's Going Downhill From Here

December 18, 2019

Did you know that by default, your applications running in Kubernetes can open raw network sockets? This talk demonstrates how, in the right circumstances, the CAP_NET_RAW capability that allows this …
How the Department of Defense Moved to Kubernetes and Istio

How the Department of Defense Moved to Kubernetes and Istio

December 18, 2019

This session will showcase the DoD Enterprise DevSecOps initiative and its architecture. It describes how the Department of Defense is securing OCI compliant containers, moving to Kubernetes and Istio …
Intro to SIG Service Catalog

Intro to SIG Service Catalog

December 18, 2019

This is an introduction to the Kubernetes Service Catalog extension project. Service Catalog lets you provision cloud services directly from the comfort of native Kubernetes tooling, regardless of whe …