Cloud Native Computing Foundation / KubeCon + CloudNativeCon + Open Source Summit China 2021

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

突破地心引力！与KubeEdge一起迈向太空的云原生 | Break Through Gravity! Cloud Native Towards Space With KubeEdge - Qi Zhang, Chief Architect, Huawei Cloud & Shangguang Wang, Beijing University of Posts and Telecommunications

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

主题演讲：构建开源的分布式云原生世界 | Keynote: Build an Open Source Distributed Cloud Native World - Jian Huang, Chief Architect of Huawei Cloud Containers, Huawei Cloud

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

与K8s舰队一起航行，海量节点的多集群管理 | Sailing with K8s Armada: Multi-Cluster Management with Massive Amounts of Nodes – Yifan Shen, PaaS Cloud Platform Architect, ICBC & Kevin Wang, Lead of Cloud Native Open Source Team, Huawei

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Apiserver 生成器：通过聚合 Apiserver 扩展 Kubernetes 系统 | Apiserver Builder: Extending Kubernetes via Aggregated Apiserver - Min Kim, Ant Group

目前有两种可插拔的方式来扩展集群的自定义 Kubernetes 应用程序接口：自定义资源定义（也被称为 CRD）和 Apiserver 聚合（也被称为 AA）。经过多年的发展，自定义资源定义 (CRD) 现在在几个版本的 GA 阶段处于稳定工作状态，但另一方面，我们可能会发现自定义资源定义由于可扩展性有限，并不总是最佳选择——例如，我们将不得不引入多个网络钩子 apiservers，以便在新的资源类型上建立准入/转换。或者，为了保持良好的兼容性，在多个版本之间切换可能在技术上很困难。因此，如果我们希望以编码复杂度为代价实现软件开发工具包框架级的扩展，我们可以将 Apiserver 聚合作为自定义资源定义的替代方案。我作为这个特定的官方 SIG 子项目的维护者已经 3 年多了，我将通过一个名为 apiserver-builder 的强大命令行工具，与观众分享构建您自己的聚合 apiserver 的实用方法。

Currently there're two pluggable ways of extending custom Kubernetes API for your cluster: Custom Resource Definition (also known as CRD) and Apiserver Aggregation (also known as AA). After years' of evolving, CRD is now stably working in GA phase in steady state for several releases but on the other hand we may find that CRD is not always the best option due to its limitted extensibility --- e.g. we will have to introduce multiples webhook apiservers in order to build up admission/conversion over the new resource types. Or it can be technically tough to rolling between multiple versions for with compatibility well-preserved. So we may consider AA as an alternative of CRD if we want sdk-framework-level extensibility at the cost of coding complexity. Being the maintainer of this particular official SIG subproject for over 3 years, I will be sharing audience the practical way of building your own aggregated apiserver by leveraging a powerful command-line tooling named apiserver-builder.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

柏克莱封包过滤器：简介、编程技巧和诀窍 | BPF: Introduction, Programming Tips and Tricks - Wenbo Zhang, PingCAP

柏克莱封包过滤器 (BPF) 已成为 Linux 内核中最重要的子系统之一，其被广泛应用于追踪、联网和安全。其被用于安全有效地扩展内核的功能，而无需更改内核源码或加载内核模块。然而，柏克莱封包过滤器编程远比听起来要费劲的多，这可能会让很多人感到沮丧。在本演讲中，Wenbo 将与您分享 BPF 的前世、今生和未来，以及使用 libbpf 库开发 BPF 工具的一些技巧和诀窍。

Berkeley Packet Filter (BPF) has become one of the most important subsystems in the Linux kernel, widely used in tracing, networking, and security. It is used to safely and efficiently extend the capabilities of the kernel without requiring to change kernel source code or load kernel modules. However, BPF programming is far more strenuous than it may sound, which can be discouraging for many. In this talk, Wenbo will share with you the past, present and future of BPF, and some tips and tricks to developing BPF tools using the libbpf library.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Kubernetes 中 Windows 工作负载管理的最佳实践 | Best Practice on Windows Workload Management In Kubernetes - Benjamin Wang & Wenli Wei, VMware

随着 Windows 容器的成熟，大部分 Windows 应用程序和服务正在迁移到 Kubernetes。即使拥有 Linux 工作负载管理的成功经验，大规模管理 Windows 工作负载也是一项挑战。您知道 Windows 工作负载的暂存空间吗？您是否曾经因过度配置的暂存空间而导致节点崩溃？我们如何避免孤立磁盘？它怎么可能在滚动更新时陷入困境？如何优雅地关闭守护程序？组托管服务帐户 (GMSA) 作为在 Windows 上运行任务和应用程序的更安全的方式，您知道组托管服务帐户是如何集成到 Windows 群集中的吗？你还在纠结于 Kubernetes 上的组托管服务帐户与动态目录的集成吗？

As Windows containers become mature, a large portion of Windows applications and services are moving to Kubernetes. Even with the successful experience of Linux workloads management, it is challenging to manage Windows workloads at scale. Did you know the scratch space for windows workloads? Have you ever had a node crash caused by over-provisioned scratch space? How do we avoid the orphan disks? how could it be prone to get stuck at rolling update? How gracefully shutdown Daemonset? Group Managed Service Accounts (gMSA) as a more secure way to run tasks and applications on windows, do you know how gMSA integrates into the windows clusters? Are you still struggling on gMSA integration with Active Directory on Kubernetes?

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

超越 CUDA：GPU 与 Vulkan Kompute（AMD、高通、NVIDIA 和 Friends）加速了在跨供应商图形卡上的计算 | Beyond CUDA: GPU Accelerated Computing on Cross-Vendor Graphics Cards with Vulkan Kompute (AMD, Qualcomm, NVIDIA & Friends - Alejandro Saucedo, Seldon Technologies

众多先进的数据处理范式非常适合 GPU 计算提供的并行体系结构，而 Vulkan 和 Kompute 等开源项目所取得的激动人心的进展则使开发人员能够在跨供应商移动和桌面 GPU（包括 AMD、高通、NVIDIA 和 Friends）中利用通用 GPU 计算能力。在本演讲中，我们将从概念和实践方面深入探讨跨供应商 GPU 计算生态系统，以及如何采用这些工具来促进您现有的应用程序。在本演讲中，我们将学习从头开始编写一个简单的几乎能在任何 GPU 上运行的 GPU 加速机器学习算法。我们会对使跨供应商 GPU 加速应用程序成为可能的项目进行概述。我们会向您展示如何利用仅有几行 Python 代码的 Kompute 框架开始使用 GPU 的全部功能，同时也会提供关于如何通过较低级别的 C++ 接口引入优化的直觉知识。

Many advanced data processing paradigms fit incredibly well to the parallel-architecture that GPU computing offers, and exciting advancements in the open source projects such as Vulkan and Kompute are enabling developers to take advantage of general purpose GPU computing capabilities in cross-vendor mobile and desktop GPUs including AMD, Qualcomm, NVIDIA & friends. In this talk we will provide a conceptual and practical insight into the cross-vendor GPU compute ecosystem as well as how to adopt these tools to accelerate your existing applications. In this talk we will learn to write a simple GPU accelerated machine learning algorithm from scratch which will be able to run on virtually any GPU. We will give an overview on the projects that are making it possible to accelerate applications across cross-vendor GPUs. We'll show how you can get started with the full power of your GPU using the Kompute framework with only a handful of lines of Python code, as well as providing an intuition around how optimizations can be introduced through the lower level C++ interface.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

使用 Kubernetes 和 Temporal 构建容错分布式应用程序 | Build fault tolerant, distributed apps with Kubernetes and Temporal - Tihomir Surdilovic, Temporal Technologies Inc.

为了满足不断增长的客户需求，公司必须在多个平台、基础设施、架构和编程语言上多样化其技术解决方案。采用分布式多语言体系结构使我们能够使用最合适的工具和技术为业务问题提供解决方案。它还允许公司从更广泛的潜在候选人中获得技术人才。在本课程中，我们将介绍一种开源的 Kubernetes 原生容错微服务编排平台 Temporal。我们将演示 Temporal 如何让您专注于业务需求 impl，而不考虑您的技术空间，同时解决诸如持久性、通信、错误传播、事务管理和跨 Kubernetes 上运行的多个微服务的可伸缩性等难题。该演示包括四个用 PHP、Go、NodeJS 和 Java 编写的微服务。

To keep up with the increasing customer demands, companies must diversify their tech solutions across multiple platforms, infrastructures, architectures, and programming languages. Adopting distributed polyglot architectures enables us to provide solutions to business problems using the the most appropriate tools and technologies. It also allows companies to acquire technical talent from a much wider pool of possible candidates. In this session we will introduce Temporal, an open-source, Kubernetes-native and fault-tolerant microservices orchestration platform. We will demonstrate how Temporal allows you to focus on business requirements impl, regardless of your tech space, while offloading hard problems such as persistence, communication, error propagation, transaction management, and scalability across multiple microservices running on the Kubernetes. The demo includes four microservices written in PHP, Go, NodeJS and Java.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

CNCF TAG 网络和服务网格工作组 | CNCF TAG Network and Service Mesh Working Group - Lee Calcote, Layer5; Ed Warnicke, Cisco; Ken Owens, Fiserv

随着基于微服务的分布式系统的日益盛行，确实如此：网络作为一门学科，在云原生部署的高效运行中从未如此关键。包括负载均衡、可观察性、认证、授权、策略、速率限制、QoS、网状网络、传统基础设施桥接等在内的网络基元现在正得到整个行业的大量开发和投资，并且是CNCF TAG网络和服务网状工作组的重点关注对象。聆听我们的简介并深入了解工作组内正在管理的服务网状项目。 With the increased prevalence of microservice-based distributed systems, it’s true: networking as a discipline has never been more critical in the efficient operation of cloud native deployments. Networking primitives, including load balancing, observability, authentication, authorization, policy, rate limiting, QoS, mesh networks, legacy infrastructure bridging, and so on are now receiving substantial development and investment throughout the industry and are the subject of focus of the CNCF TAG Network and Service Mesh Working Group.

Join us for an introduction and deep-dive into the service mesh projects being stewarded within the working group.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

云原生存储：存储 TAG 介绍、项目、经管和技术 | Cloud Native Storage: Storage TAG intro, Projects, Landscape & Technology - Alex Chircop, StorageOS & Raffaele Spazzoli, RedHat

本此讨论将介绍 CNCF 的存储 TAG，并讨论 TAG 如何运作，我们如何运用存储 CNCF 项目展开工作，以及为生态系统构建指南和编写白皮书的项目。在此讨论中，我们将介绍：对 TAG 的概述，如何加入以及如何提供帮助——CNCF 中存储项目的概述——目前正在审查的项目。我们还将分享我们近期工作的最新进展，包括：CNCF 存储环境白皮书、业绩与基准测试白皮书、云原生灾难恢复白皮书

This talk will introduce the CNCF Storage TAG and discuss how the TAG operates, how we work with Storage CNCF projects as well as the projects to build guidance and write whitepapers for the ecosystem. During this session we will cover: - Overview of the TAG, how to join and how to help - Overview of storage projects in the CNCF - Projects that are currently being being reviewed. We will also share updates of our latest work including: - the CNCF Storage Landscape whitepaper - the Performance and Benchmarking whitepaper - the Cloud Native Disaster Recovery whitepaper

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

CloudEvents- 版本 1 正处于开始阶段 | CloudEvents - Version 1 is just the beginning - Ryan Horn, Twillio

自从去年 CloudEvents v1.0 发布以来，社区一直在关注还有哪些其他与事件相关的痛点可以从一些标准化活动中受益。为此，我们一直专注于努力缓解与活动管理生命周期的剩余部分相关的挑战…主要是围绕设置订阅。在此次讨论中，您将了解到正在开发的新规范，旨在帮助人们以编程方式发现感兴趣的事件生成器，以及他们如何订阅获得这些事件，这些事件以可互操作的方式交付。

Since CloudEvents v1.0 was released last year the community has been focused on what other eventing-related pain-points might benefit from some standardization. To that end, there's been a focus on trying ease the challenges that are associated with the remaining portion of the lifecycle of event management... mainly around setting up subscriptions. In this session you'll learn about the new specifications being developed aimed at helping people programmatically discover the event producers of interest and how they can subscribe to get those events delivered in an interoperable fashion.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

面向 Vitess 的持续业绩基准测试 | Continuous Performance Benchmarking for Vitess - Alkin Tezuysal & Florent Poinsard & Manan Gupta, Planetscale Inc.

Vitess 是围绕 MySQL 构建的可扩展分布式数据库系统。时下，业绩是一个相当重要的市场因素，我们得快速又准确的处理一切事宜。随着京东、Slack 和 GitHub 等大型用户的加入，Vitess 必须确保为其用户提供完美的性能。为满足这一需求，我们为 Vitess 创建了一个基准测试监控工具，即 AreWeFastYet。在本次演讲中，我们将首先介绍 Vitess，然后将讨论我们如何跟踪 Vitess 的性能，最后将概述我们创建的基准测试工具。

Vitess is a scalable distributed database system built around MySQL. Nowadays, performance is a considerable market factor, and things have to go fast and right. With large scale adopters such as JD.com, Slack and GitHub, Vitess has to ensure it’s delivering flawless performance to its users. In order to meet this need, we created AreWeFastYet, a benchmarking monitoring tool for Vitess. In this talk, we will first introduce Vitess and then discuss how we track the performance of Vitess and an overview of the benchmarking tools we created.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Crossplane：将基础设施和服务组成定制平台应用程序接口 | Crossplane: Compose Infrastructure and Services Into Custom Platform APIs - Viktor Farcic & Aaron Eaton & Muvaffak Onuş, Upbound

在此次讨论中，我们将介绍 Crossplane 项目，描述整体愿景，并深入探讨一些具体的架构和实践范例。Crossplane 最近被批准为 CNCF 的孵化项目，生产应用者的社区也在持续发展。我们将学习如何使用 Crossplane 的通用控制面来配置和管理您的所有基础设施，以及如何建立您自己的定制平台和抽象，为您的开发人员提供自助服务。我们还将了解更多关于该项目和社区的部分最新进展，以及即将发布的项目进展规划。Crossplane 是一种社区驱动型项目，因此与项目维护人员进行合作、分享您的观点以及运用案例来影响规划方向的机会非常多！

In this session, we will introduce the Crossplane project and describe the overall vision as well as deep dive into some specific architecture and practical examples. Crossplane has recently been approved as a CNCF incubating project and the community of production adopters continues to grow. We will learn about how to provision and manage all of your infrastructure using Crossplane's universal control plane and how to build your own custom platform and abstractions that enable self-service for your developers. We'll also learn more about some of the recent advancements in the project and community, as well as the upcoming roadmap for where the project continues to progress. Crossplane is a community driven project, so there will be plenty of opportunities to collaborate with the project maintainers and share your perspective and use cases to influence the roadmap direction!

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

企业和 Harbor：互相帮助的良好伙伴关系 | Enterprise and Harbor: A Good Partnership in Helping Each Other - Ye Liu & Ludwig Isaac Lim, HP

Ye Liu 和 Ludwig Lim（惠普公司）- Harbor 是一种安全、非常稳定和成熟的开源镜像注册表。惠普研发 IT 部门在部署 Harbor 时，将 Harbor 作为惠普公司的一个 docker 镜像注册表来运行；Ye 和 Ludwig 与 Harbor 团队和社区合作，使 Harbor 应用于惠普的工作。他们想谈一谈企业和 Harbor 如何进行合作，从而互惠互利。本次讨论分为两个小节，1) 企业如何帮助 Harbor 发展；2) 回馈：将 Harbor 调整为企业级的内部 Docker 注册表 -Ye 和 Ludwig 想分享他们在 Harbor 发展工作中的经验，并通过分享他们所学到的使 Harbor 适应企业生态系统的知识来回馈 Harbor 社区。

Ye Liu and Ludwig Lim (HP Inc.) – Harbor is a secure, very stable and mature open-source image registry. HP R&D IT runs Harbor as an docker image registry for HP Inc. In deploying Harbor; Ye and Ludwig work with the Harbor Team and community in making Harbor work for HP. They would like to talk about how an enterprise and Harbor can partner together and benefit each . This talk is divided into two sections 1) How an enterprise can help in Harbor development 2) Giving Back : Tuning Harbor into Enterprise Grade Internal Docker Registry – Ye and Ludwig would like to share their experience in their Harbor journey and give back to the Harbor community by sharing what they learned to make Harbor fit into an enterprise ecosystem.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

介绍和深入了解 TAG 应用程序交付 | Introduction and Deep - Dive into TAG App Delivery - Hongchao Deng, Alibaba & Thomas Schuetz, Dynatrace

TAG 应用程序交付专注于简化 Kubernetes 上的应用程序交付，以及改善开发者的体验。此次讨论将展示围绕运营商、混沌工程、应用交付方法和演示应用的最新发展情况。无论您是刚开始了解云原生应用交付，还是想要了解最新进展，此次讨论将基于应用交付领域的 CNCF 项目反馈，为您提供正在进行的活动信息、最新发展情况和所选定的发展趋势信息。

TAG App Delivery focuses on simplifying application delivery on Kubernetes as well as improving developer experience. This session will showcase recent development around operators, chaos engineering, application delivery methods and demo applications. Whether you are just getting started with cloud-native application delivery or getting up to speed on the latest, this session will provide you with ongoing activities, recent developments and selected trends based on feedback from CNCF projects in the app delivery space.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

为有状态工作负载保持持久卷的健康性 | Keep Persistent Volumes Healthy for Stateful Workloads - Xing Yang, VMware & Yuquan Ren, ByteDance

越来越多的有状态工作负载已被迁移至 Kubernetes 平台。这些工作负载依靠持久卷来储存数据。然而，在有状态工作负载配置卷并予以使用后，底层储存系统可能会发生很多情况。该卷可能会因意外被删除、该卷所在的磁盘可能会发生故障、磁盘可能会持续退化影响其性能等。Kubernetes 如何及早发现这些问题并提醒用户？Kubernetes 引入了卷健康监测功能，以发现这些存储问题，并通过发送事件信息将这些问题公开给用户。虽然这种方式很有用，但是需要用户手动修复这些问题。如果 Kubernetes 侦测到卷异常情况后也有方法进行自动修正呢？在此次讨论中，我们将讨论目前卷健康监测功能有何作用，以及我们正在做哪些努力以将此功能提升至下一层次？

More and more stateful workloads have been migrated to Kubernetes platforms. These workloads rely on persistent volumes to store data. However, many things could happen to the underlying storage system after a volume is provisioned and used by a stateful workload. The volume could be deleted by accident, the disk that the volume resides on could fail, the disk may be degrading which affects its performance, etc. How can Kubernetes detect these problems early and alert users? The volume health monitoring feature has been introduced in Kubernetes to detect these storage issues and expose them to users by sending events. This has been very helpful, however, the problem has to be fixed by users manually. What if Kubernetes also has a way to do automatic correction after detecting abnormal volume conditions? In this session, we will discuss what the volume health monitoring feature can do currently and what we are working on to move this feature to the next level.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

CNCF 项目更新 | CNCF Project Updates - Ricardo Rocha, Computing Engineer, CERN

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

有人会说开发人员吗？ 发现、理解和改进开发人员工作流程的方法 | Does Anyone Speak Developer? Methods to Discover, Understand and Improve Developer Workflows - Jasmine James, Engineering Manager, Twitter

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

主题演讲: Kubernetes 项目更新 | Keynote: Kubernetes Project Updates - Jasmine James, Engineering Manager, Twitter

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

国情咨文 | Linux Foundation Update - Jim Zemlin, Executive Director, The Linux Foundation

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Cloud Native 中的科学 | Science in Cloud Native - Ricardo Rocha, Computing Engineer, CERN

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

欢迎和开幕词 | Welcome & Opening Remarks - Priyanka Sharma, Executive Director, Cloud Native Computing Foundation

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Kubernetes 数据保护工作组的介绍和深入研究 | Kubernetes Data Protection WG Intro & Deep Dive - Xiangqian Yu, Google

数据保护工作组致力于促进 Kubernetes 的数据保护支持。该工作组一直致力于确定缺失的功能，并在多个 SIG 之间进行协调，设计能在 Kubernetes 中实现数据保护的功能。在此次讨论中，该工作组的联席主席将讨论 Kubernetes 中数据保护的当前情况及其未来的发展方向。他们还将讨论各利益相关方（包括备份和存储供应商、应用开发者和最终用户等）如何能加入这个工作组并为之做出贡献。有关本工作组的详细信息，请参阅：https://github.com/Kubernetes/community/tree/master/wg-data-protection.

Data Protection WG is dedicated to promoting data protection support in Kubernetes. The Working Group is working on identifying missing functionalities and collaborating across multiple SIGs to design features to enable data protection in Kubernetes. In this session, the co-chairs of this WG will discuss what is the current state of data protection in Kubernetes and where it is heading in the future. They will also talk about how interested parties (including backup and storage vendors, application developers, and end users, etc.) can join this WG and contribute to this effort. Details of the WG can be found here: https://github.com/kubernetes/community/tree/master/wg-data-protection.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Kubernetes SIG 存储介绍和更新 | Kubernetes SIG Storage Introduction and Update - Xing Yang, VMware & Michelle Au, Google

Kubernetes SIG 存储负责确保不同类型的文件和块存储在容器调度的任何地方都可用，确保存储容量管理（容器临时存储的使用，卷的体积调整等），根据存储影响容器的调度（数据引力，可用性等），以及存储的通用操作（快照等）。在此次讨论中，我们将对 SIG 存储进行介绍，然后深入探讨 SIG 存储目前正在开展的一些项目，提供最新状态更新，并讨论未来可能出现的情况。

Kubernetes SIG Storage is responsible for ensuring that different types of file and block storage are available wherever a container is scheduled, storage capacity management (container ephemeral storage usage, volume resizing, etc.), influencing scheduling of containers based on storage (data gravity, availability, etc.), and generic operations on storage (snapshotting, etc.). In this session, we will give an introduction to SIG Storage and then deep dive into some projects that SIG Storage is currently working on, provide an update on the current status, and discuss what might be coming in the future.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

面向 Gitee 项目的开源软件项目健康指标 | OSS Project Health Metrics for Gitee Projects - Yehui Wang, Huawei & Georg Link, Bitergia

本演讲涉及衡量开源项目的健康性和可持续性。GrimoireLab 是一个开源工具，已经存在了很多年，但是到目前为止还不支持 Gitee。对于不断发展的中国开源社区来说，Gitee 是一个很受欢迎的平台。以一种真正开源的方式，国际贡献者为 GrimoireLab 工具添加了 Gitee 支持。我们将分享此种改进可以给开源项目带来何种见解。我们将展示 Gitee 平台上的人如何通过 GrimoireLab 获得相关指标和见解来帮助了解他们项目的健康和可持续性。为圆满结束本演讲，我们将分享衡量开源项目健康状况的最佳实践。CHAOSS 项目已经确立了最佳实践并提供了相关建议，可以帮助项目维护人员、开源项目主管或社区经理通过指标理解他们的开源项目。

This talk is about measuring the health and sustainability of open source projects. GrimoireLab is an open source tool for this and has been around for many years but up to now was not supporting Gitee. Gitee is a popular platform for the growing China open source community. In a true open source way, international contributors added Gitee support to the GrimoireLab tools. We will share what kind of insights this improvement can give to open source projects. We will show how anyone on the Gitee platform can now get metrics and insights with GrimoireLab to help understand their projects’ health and sustainability. To round off the presentation, we will share best practices for measuring open source project health. The CHAOSS project has established best practices and recommendations that can help project maintainers, open source program officers, or community managers to get started understanding their open source projects through metrics.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

关于与开源社区接洽的指标需求 | On the Need for Metrics to Engage with Open Source Communities - Willem Jiang, Huawei & Daniel Izquierdo, Bitergia

作为所有企业战略的一部分，开源是这一生态系统中的关键。这些是各组织可以在有或没有商业利益的情况下展开合作或直接与竞争对手合作的中立场所。技术的采用、消费或生产应该考虑到这些开源项目所处的阶段。例如，包括对项目的可持续性、其他项目利益相关者、项目领导者和其他人的影响的分析。开源在中国现在是一个热门话题。由于缺乏经验，许多大公司总是想知道如何衡量开源社区的成就以及他们的参与所带来的投资回报率。CHAOSS——开源软件社区健康分析，是指标定义和所有这些的软件实现方面的领先社区，可允许所有人使用开源工具分析开源软件。在本演讲中，听众可了解 CHAOSS 社区，其为一个 Linux 基金会项目，也可了解某些关键指标，用于分析公司（如华为）内部使用的开源项目，以减轻与使用外部软件相关的风险。

As part of any corporation strategy, open source is key in this ecosystem. These are neutral places where organizations can play together either with or without commercial interest or directly participating with competitors. Technology adoption, consumption, or production should take into account the stage of these open source projects. And this includes, as example, analysis such as sustainability of the project, influence of other project stakeholders, project leaders, and others. Open source is a hot topic in China now. Due to the lack of experience, a lot of large corporations always wonder how to measure the success of the open source community and their participation’s ROI. CHAOSS - Community Health Analytics for Open Source Software -, is the leading community in the metrics definition and software implementation of all of this and allows anyone to analyze open source software with open source tools. In this talk, the audience will learn about the community of CHAOSS, a Linux Foundation project, and some of the key metrics to analyze open source projects used within a corporation as Huawei to mitigate the risks associated with using external software.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

代理开放政策深潜 | Open Policy Agent Deep Dive - Anders Eknert, Styra

组织依靠 Wiki 和部落知识来记录和执行管理其系统行为的重要规则，但今天，许多组织追求“策略即代码”，以更好地控制和可视化其系统。与在文档中编写策略或依靠手动检查不同，组织利用策略引擎在其所有系统中编写和实施规则。开放策略代理 (OPA) 是一个由云原生计算基金会托管的开源通用策略引擎。开放策略代理的核心是一种领域无关的声明性语言，它将策略作为代码来体现。开放策略代理帮助您以代码的形式实现策略，以便您可以将最佳实践（如单元测试、试运行和代码审阅）应用到策略中。加入 Anders，了解如何将策略作为代码应用于微服务和 Kubernetes，包括核心语言特性，如搜索、组合和复杂的面向文档的数据查询。

Organizations have relied on wikis and tribal knowledge to document and enforce important rules that govern how their systems behave, but today, many organizations pursue "policy as code" for greater control and visibility over their systems. Instead of writing policies in documents or relying on manual checks, organizations leverage policy engines to codify and enforce rules across all of their systems. The Open Policy Agent (OPA) is an open source general-purpose policy engine hosted by the Cloud Native Computing Foundation. At OPA’s core is a domain-agnostic declarative language that embodies policy as code. OPA helps you implement policy as code so that you can apply best practices like unit testing, dry runs, and code review to your policies. Join Anders for a deep dive session that shows how to apply policy as code across microservices and Kubernetes, covering core language features like search, composition, and querying of complex document-oriented data.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Rook：介绍和 Ceph 平台深探 | Rook: Intro and Ceph Deep Dive - Travis Nielsen, Red Hat & Satoru Takeuchi, Cybozu, Inc.

Rook 项目将被介绍给所有层次和经验的参与者。Rook 是 Kubernetes 的开源云原生存储运营商，为不同的存储解决方案提供平台、框架和支持，以与 Kubernetes 进行原生整合。Rook 将存储软件转变为自我管理和自我修复的存储服务。将对 Ceph 存储提供商进行深入研究，展示 Rook 如何为您的生产数据提供稳定的存储块、共享文件系统和对象存储。我们将介绍 V1.8 版本发布的最新功能，进一步说明 Rook 是如何为生产环境使自身持续增强的。Rook 于 2020 年 10 月被云原生计算基金会接纳为毕业项目。

The Rook project will be introduced to attendees of all levels and experience. Rook is an open source cloud-native storage operator for Kubernetes, providing the platform, framework, and support for a diverse set of storage solutions to natively integrate with Kubernetes. Rook turns storage software into self-managing and self-healing storage services. A deep-dive will be presented for the Ceph storage provider to show how Rook provides stable block, shared file system, and object storage for your production data. The recent features in the v1.8 release will be covered to further illustrate how Rook continues to be enhanced for production environments. Rook was accepted as a graduated project by the Cloud Native Computing Foundation in October 2020.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

解决服务网格应用者的困境 | Solving the Service Mesh Adopter’s Dilemma - Anita Ihuman, Layer5

我该使用哪种服务网格，如何开始？有哪些不同的服务网格，它们的对比情况如何？了解不同服务网格的功能性，并直观地操作网格配置。本次闪电式演讲介绍了一种开源多服务网格管理平面，Meshery，其提供（五种并且未来还会持续增长）不同的服务网格，还介绍了其示例应用程序，并对服务网格部署的性能进行基准测试。Meshery 促使对 Istio 的各种配置场景进行基准测试，比较网格内外以及不同网格之间的服务（应用程序）的性能。其根据部署最佳实践检查网格和服务配置。部分服务网格项目使用 Meshery 作为每个版本的性能基准工具。

Which service mesh should I use and how do I get started? What are the different service meshes, and how do they contrast? Learn about the functionality of different service meshes and visually manipulate mesh configuration. This lightning talk introduces Meshery, an open source, multi-service mesh management plane that provisions (five and counting) different service meshes, their sample applications and benchmarks the performance of service mesh deployments. Meshery facilitates benchmarking various configuration scenarios of Istio, comparison of performance of services (applications) on and off the mesh and across different meshes. It vets mesh and services configuration against deployment best practices. Some of the service mesh projects use Meshery as their performance benchmark tool for each release.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

更新的 “Hitchhiker "指南对 Kubernetes 的评估依赖性 | The Hitchhiker's Guide to Evaluating Dependency Updates to Kubernetes - Arsh Sharma, VMware

本次演讲将讨论在 Kubernetes 这样的大型项目中跟踪依赖关系的重要性，以及“depstat”，这是一个为跟踪 Kubernetes 代码库的依赖关系更新而创建的工具。Kubernetes 存储库每天都会收到许多 pull 请求，其中许多请求会带来依赖关系的变更。大多数时候，维护人员必须手动发现这些更改，确定它们对整个依赖谱的影响，然后 ping 此 pull 请求作者以采取行动。为了避免这种情况并帮助更好地跟踪依赖项更新，创建了 depstat。Depstat 是一个上游项目，用于分析 go 模块支持的项目的依赖关系。它目前作为 Kubernetes 代码库中 prow 作业的一部分运行，并提供四个关键的依赖关系相关指标。“depstat”还提供了通过创建图形直观分析依赖关系的能力。

This talk will be about the importance of tracking dependencies in a large project like Kubernetes and about "depstat" which is a tool created to track dependency updates to the Kubernetes codebase. The Kubernetes repository receives many pull requests each day many of which bring dependency changes with them. Most of the time, the maintainers manually have to spot these changes, determine their effects on the overall dependency tree, and then ping the pull request authors to take action. To avoid this and help better track the dependency updates, depstat was created. depstat is an upstream project which analyzes dependencies for go modules enabled projects. It currently runs as part of a prow job in the Kubernetes code repository and provides four crucial dependency-related metrics. "depstat" also provides the ability to analyze dependencies visually by creating a graph.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

揭开企业级 Argo CD 的构成秘密 | Unveil the Secret Ingredients for Argo CD in the Enterprise-Scale - Hong Wang & Yuan Tang, Akuity Inc.

与电影《功夫熊猫》中的面汤毫无秘密配方不同的是，大量优质研究已注入企业级 Argo CD 产品之中。您知道 Argo CD 可支持数以千计的应用程序吗？您是否曾经尝试过连接数以百计的 Kubernetes 集群？单个应用中存在上千个对象的情况如何？我们将深入研究 Argo CD 产品，向您提供解答和最佳实践。此外，我们还会分享和讨论一些与其他 Argo 产品有着良好协同的案例。

Unlike the fact that there is no secret ingredient in Kung Fu Panda’s noodle soup, a good amount of effort has been baked into the enterprise-scale Argo CD product. Do you know Argo CD can support thousands of applications? Have you tried to connect hundreds of Kubernetes clusters? What about the case with thousands of objects in a single application? We will deep dive into the Argo CD product, bring answers and best practices to you. In addition, several great synergy examples with other Argo products will be shared and discussed.

Don’t miss out! Join us at our next event: KubeCon + CloudNativeCon Europe 2022 in Valencia, Spain from May 17-20. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

大限将至! 定义Kubernetes的技术债务将在2022年最终得到偿还! | The End is Near! The Technical Debt of Defining Kubernetes Will Finally Be Paid in 2022! - Hippie Hacker, ii

认证的Kubernetes一致性计划使组织有信心，他们的工作负载将从一个Kubernetes安装到下一个Kubernetes的互操作。
在2017 / 1.9，我们没有一个正式的定义，近90％的Kubernetes不知是什么。CNCF将重点放在提高Kubernetes API的一致性测试覆盖率上，这样你的工作负载就可以在所有的云中运行。
这一努力使我们从1.15的20%的端点一致性测试到1.23的80%以上。
我们将回顾Kubernetes社区的所有专职成员的努力工作，从早期的开创性工作，到最后的原点。终点已近! The Certified Kubernetes Conformance Program enables organizations to have confidence that their workloads will interoperate from one installation of Kubernetes to the next.
In 2017 / 1.9, we didn’t have a formal definition for nearly 90% of what Kubernetes is. The CNCF turned the spotlight on improving the conformance test coverage of the Kubernetes API, so your workloads would run in all-the-clouds.
This effort has brought us from ~20% of endpoints conformance tested in 1.15 to over ~80% by 1.23.
We will look back at all the hard work by the dedicated members of the Kubernetes community, from the early pioneering work, to this final home stretch. The End is Near!