9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Autoscale Your on-Premises Bare Metal Kubernetes Clusters - Shukun Song, Fujitsu Limited
On an on-premises bare metal Kubernetes cluster, autoscaling is a difficult task but important as it can increase the efficiency of resource usage to help organizations reduce cost, for example power consumption. In this talk, Shukun will introduce the idea of combining 3 projects, Cluster-API, Metal3-io and Cluster Autoscaler, to achieve autoscaling on a bare metal cluster. Metal3-io is a CNCF sandbox project which aims to provide a Kubernetes-style way to manage bare metal servers and Cluster-API, as a sub-project of Kubernetes, is developed to manage Kubernetes cluster lifecycle. Combining these projects, it is easy to manage bare metal infrastructure and build Kubernetes clusters on it. Machines and clusters are managed as Kubernetes resources and all the provisioning and deprovisioning work can be done automatically with just declaring or configuring those resources. Also, it is possible to combine Cluster Autoscaler as well to increase the efficiency of the physical resources, for example, concentrate applications deployment to some servers if the total usage of the cluster is low, to spare the unused resources. Shukun will introduce the detail of these projects, explain how they are interacting with each other and show how to use them.
Autoscale Your on-Premises Bare Metal Kubernetes Clusters - Shukun Song, Fujitsu Limited
On an on-premises bare metal Kubernetes cluster, autoscaling is a difficult task but important as it can increase the efficiency of resource usage to help organizations reduce cost, for example power consumption. In this talk, Shukun will introduce the idea of combining 3 projects, Cluster-API, Metal3-io and Cluster Autoscaler, to achieve autoscaling on a bare metal cluster. Metal3-io is a CNCF sandbox project which aims to provide a Kubernetes-style way to manage bare metal servers and Cluster-API, as a sub-project of Kubernetes, is developed to manage Kubernetes cluster lifecycle. Combining these projects, it is easy to manage bare metal infrastructure and build Kubernetes clusters on it. Machines and clusters are managed as Kubernetes resources and all the provisioning and deprovisioning work can be done automatically with just declaring or configuring those resources. Also, it is possible to combine Cluster Autoscaler as well to increase the efficiency of the physical resources, for example, concentrate applications deployment to some servers if the total usage of the cluster is low, to spare the unused resources. Shukun will introduce the detail of these projects, explain how they are interacting with each other and show how to use them.
- 1 participant
- 32 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Bare-Metal Chronicles: Intertwinement of Tinkerbell, Cluster API and GitOps - Katie Gamanji, Apple
Within its 8 years of existence, Kubernetes has been the gravitational center of the Cloud Native, elevating a pluggable system that diversified the entire ecosystem. Multiple areas emerged in the industry, galvanizing solutions for components such as network, runtime, storage, and cluster provisioning. The maturity of the cloud native landscape is led by the wider adoption of enterprise and large organizations. However, for these companies deployment and handling of bare-metal infrastructure has always been essential. A pivotal tool to manage cross-provider infrastructure has been Cluster API, leading a unique and radical stance for Kubernetes distribution. In association with a model such as GitOps, Cluster API assembles a mechanism that leverages the concept of a "cluster as a resource". This talk will outline how cloud native tools, such as Tinkerbell and Cluster API unlock a robust deployment of bare-metal infrastructure. Attendees will acquire an understanding of why the usage of ClusterAPI and provisioning automation with GitOps tools, such as ArgoCD, is a powerful concept that leads an organization towards the discovery of a modernized provisioning model.
Bare-Metal Chronicles: Intertwinement of Tinkerbell, Cluster API and GitOps - Katie Gamanji, Apple
Within its 8 years of existence, Kubernetes has been the gravitational center of the Cloud Native, elevating a pluggable system that diversified the entire ecosystem. Multiple areas emerged in the industry, galvanizing solutions for components such as network, runtime, storage, and cluster provisioning. The maturity of the cloud native landscape is led by the wider adoption of enterprise and large organizations. However, for these companies deployment and handling of bare-metal infrastructure has always been essential. A pivotal tool to manage cross-provider infrastructure has been Cluster API, leading a unique and radical stance for Kubernetes distribution. In association with a model such as GitOps, Cluster API assembles a mechanism that leverages the concept of a "cluster as a resource". This talk will outline how cloud native tools, such as Tinkerbell and Cluster API unlock a robust deployment of bare-metal infrastructure. Attendees will acquire an understanding of why the usage of ClusterAPI and provisioning automation with GitOps tools, such as ArgoCD, is a powerful concept that leads an organization towards the discovery of a modernized provisioning model.
- 1 participant
- 33 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Behold: A New Way to Deploy Pod Security Policies Using Kyverno! - Abhinav Sinha, Nirmata
Since its genesis, Kubernetes has been the go-to container orchestration solution for enterprises in need of scalable containerized applications implemented on microservices architecture. Any application that is deployed within Kubernetes is executed through one or more Pods, which makes Pod security not just a major concern, but a necessity for Kubernetes clusters, and even more so for business-critical applications. To fulfill this need, Kubernetes introduced PodSecurityPolicy (PSP) in its v1.3 release. However, PodSecurityPolicy was officially deprecated by Kubernetes in v1.21 and has been entirely removed in v1.25, which was a step taken due to some major issues encountered by users throughout the years of its use which could not be addressed without introducing breaking changes. But the removal of PSP in Kubernetes v1.25 does not mean that it’s an end for Pod security. It has been replaced by the new Pod Security Admission (PSA) controller, which utilizes the Kubernetes admission control webhooks. However, it comes with some serious drawbacks as well. In this session, Abhinav will be discussing the usage of Kyverno for deploying Kubernetes policies and demonstrate the new way of deploying PSPs with requirement-specific exceptions following the release of Kyverno 1.8.0.
Behold: A New Way to Deploy Pod Security Policies Using Kyverno! - Abhinav Sinha, Nirmata
Since its genesis, Kubernetes has been the go-to container orchestration solution for enterprises in need of scalable containerized applications implemented on microservices architecture. Any application that is deployed within Kubernetes is executed through one or more Pods, which makes Pod security not just a major concern, but a necessity for Kubernetes clusters, and even more so for business-critical applications. To fulfill this need, Kubernetes introduced PodSecurityPolicy (PSP) in its v1.3 release. However, PodSecurityPolicy was officially deprecated by Kubernetes in v1.21 and has been entirely removed in v1.25, which was a step taken due to some major issues encountered by users throughout the years of its use which could not be addressed without introducing breaking changes. But the removal of PSP in Kubernetes v1.25 does not mean that it’s an end for Pod security. It has been replaced by the new Pod Security Admission (PSA) controller, which utilizes the Kubernetes admission control webhooks. However, it comes with some serious drawbacks as well. In this session, Abhinav will be discussing the usage of Kyverno for deploying Kubernetes policies and demonstrate the new way of deploying PSPs with requirement-specific exceptions following the release of Kyverno 1.8.0.
- 3 participants
- 42 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Best Practices for Applications on Kubernetes for Both Frequent Updates and Stability - Hiroshi Hayakawa, Yahoo Japan Corporation
In a modern architecture represented by microservices, applications are frequently updated and restarted. In order to keep the service running even during application updates, it is not enough to simply deploy to Kubernetes; a variety of efforts are required. In this session, He will introduce various practices to achieve both frequent updates and service stability at the same time for applications running on Kubernetes. Specifically, he will introduce practices such as container health checks, CPU and memory allocation settings, and how to write application implementations and manifests to achieve graceful shutdown. The presentation will go beyond just showing how to configure these settings, and will explain the behavior of resource and container management performed by Kubernetes, from which you can determine the best settings for your individual application. In the second half of the presentation, he will also introduce some unique practices used at Yahoo Japan to run a large number of Java application contianers. Tuning of containerized Java VM and automatic warm-up techniques will be covered.
Best Practices for Applications on Kubernetes for Both Frequent Updates and Stability - Hiroshi Hayakawa, Yahoo Japan Corporation
In a modern architecture represented by microservices, applications are frequently updated and restarted. In order to keep the service running even during application updates, it is not enough to simply deploy to Kubernetes; a variety of efforts are required. In this session, He will introduce various practices to achieve both frequent updates and service stability at the same time for applications running on Kubernetes. Specifically, he will introduce practices such as container health checks, CPU and memory allocation settings, and how to write application implementations and manifests to achieve graceful shutdown. The presentation will go beyond just showing how to configure these settings, and will explain the behavior of resource and container management performed by Kubernetes, from which you can determine the best settings for your individual application. In the second half of the presentation, he will also introduce some unique practices used at Yahoo Japan to run a large number of Java application contianers. Tuning of containerized Java VM and automatic warm-up techniques will be covered.
- 5 participants
- 33 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Building a FaaS Platform Using CNCF OSS Projects (Knative, Crossplane, Tekton, ArgoCD) - Mauricio Salatino, VMware
Functions-as-a-Service platforms have proven to speed development productivity and reduce infrastructure costs when running on public clouds. But installing and managing the infrastructure needed to build your custom Functions-as-a-Service platform on top of Kubernetes requires a lot of work and a deep understanding of how to wire different CNCF projects together to provide a good developer experience. During this presentation, Viktor and Mauricio will demonstrate the use of tools like Crossplane, Knative Functions, Tekton, and ArgoCD to build a self-service FaaS platform. In this presentation, you will learn: Why knowing how to build these platforms is important The different personas involved in these platforms and how to make sure that they all have optimized experiences How to wire different tools together to build a cohesive platform Which APIs are involved in such platforms The live demo presented in this session will also be shared as a step-by-step tutorial for the audience to reproduce in their environments.
Building a FaaS Platform Using CNCF OSS Projects (Knative, Crossplane, Tekton, ArgoCD) - Mauricio Salatino, VMware
Functions-as-a-Service platforms have proven to speed development productivity and reduce infrastructure costs when running on public clouds. But installing and managing the infrastructure needed to build your custom Functions-as-a-Service platform on top of Kubernetes requires a lot of work and a deep understanding of how to wire different CNCF projects together to provide a good developer experience. During this presentation, Viktor and Mauricio will demonstrate the use of tools like Crossplane, Knative Functions, Tekton, and ArgoCD to build a self-service FaaS platform. In this presentation, you will learn: Why knowing how to build these platforms is important The different personas involved in these platforms and how to make sure that they all have optimized experiences How to wire different tools together to build a cohesive platform Which APIs are involved in such platforms The live demo presented in this session will also be shared as a step-by-step tutorial for the audience to reproduce in their environments.
- 2 participants
- 31 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Capacity-aware Dynamic Volume Provisioning For LVM-based Local Storage - Satoru Takeuchi, Cybozu
This presentation introduces a CSI plugin named TopoLVM, which supports capacity-aware dynamic provisioning for LVM-based local storage.
Kubernetes applications usually use network storage to run their pods in arbitrary nodes. However, there are some cases where local storage is better than network storage (e.g., users prefer performance and/or cost-efficiency). TopoLVM is created to use local storage as conveniently as possible.
Satoru will show what kind of features TopoLVM supports:
- Dynamic volume provisioning
- Topology-aware pod scheduling
- Volume resizing
- Thin-provisioning
In addition, he will also introduce how to use TopoLVM and how it works.
Capacity-aware Dynamic Volume Provisioning For LVM-based Local Storage - Satoru Takeuchi, Cybozu
This presentation introduces a CSI plugin named TopoLVM, which supports capacity-aware dynamic provisioning for LVM-based local storage.
Kubernetes applications usually use network storage to run their pods in arbitrary nodes. However, there are some cases where local storage is better than network storage (e.g., users prefer performance and/or cost-efficiency). TopoLVM is created to use local storage as conveniently as possible.
Satoru will show what kind of features TopoLVM supports:
- Dynamic volume provisioning
- Topology-aware pod scheduling
- Volume resizing
- Thin-provisioning
In addition, he will also introduce how to use TopoLVM and how it works.
- 2 participants
- 24 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Distributed Tracing Integration with OpenTelemetry and Knative - Daniel Oh & James Falkner, Red Hat
Scaling application platforms give site reliability engineers a significant burden on collecting telemetry data from a single cluster to multiple clouds. You’re probably handy to observe metrics with comprehensive dashboards by 3rd party application performance monitoring tools in the traditional environments. However, the application topologies are getting more complex due to distributing cloud-native microservices. Infrastructures have also been varying from Linux containers to IoT edge devices, public cloud, and Kubernetes. This is a new challenge for dev and ops to trace application chains. This talk guides you through the distributed tracing integration with OpenTelemetry for serverless functions. OpenTelemetry allows you to collect telemetry data such as metrics, logs, and traces then enables you to analyze applications’ performance and behavior. I’ll also showcase a live demo of how to trace metrics of reactive RESTful APIs with step-by-step instructions below: - Collect local telemetry data by OpenTelemtry collector and Quarkus Dev mode - Visualize the telemetry data through the Jaeger console locally - Deploy the reactive serverless functions to verify telemetry data using OpenTelemetry and Jaeger operators
Distributed Tracing Integration with OpenTelemetry and Knative - Daniel Oh & James Falkner, Red Hat
Scaling application platforms give site reliability engineers a significant burden on collecting telemetry data from a single cluster to multiple clouds. You’re probably handy to observe metrics with comprehensive dashboards by 3rd party application performance monitoring tools in the traditional environments. However, the application topologies are getting more complex due to distributing cloud-native microservices. Infrastructures have also been varying from Linux containers to IoT edge devices, public cloud, and Kubernetes. This is a new challenge for dev and ops to trace application chains. This talk guides you through the distributed tracing integration with OpenTelemetry for serverless functions. OpenTelemetry allows you to collect telemetry data such as metrics, logs, and traces then enables you to analyze applications’ performance and behavior. I’ll also showcase a live demo of how to trace metrics of reactive RESTful APIs with step-by-step instructions below: - Collect local telemetry data by OpenTelemtry collector and Quarkus Dev mode - Visualize the telemetry data through the Jaeger console locally - Deploy the reactive serverless functions to verify telemetry data using OpenTelemetry and Jaeger operators
- 3 participants
- 34 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Environmental Sustainability: An Energy-Aware Datacenter Operating System - Ying-Feng Hsu & Yuki Sogawa, Osaka University
Data centers are currently using 2% of the world's energy. With the increases in the scale of cloud edge computing systems and other services, data center power consumption is expected to increase about 15 times in the next 10 years. High-performance applications and services are always beneficial, but this does not mean that power consumption needs to increase as a result. This talk covers an energy-aware datacenter operating system (EADOS) that manipulates several types of open-source software to realize energy savings in distributed computing environments. EADOS uses Zabbix and Prometheus continuously collect thousands of data center operating parameters from all servers, sensors, and HVAC cooling systems. Those collected data are further optimized by Apache Kafka stream processing to produce event-driven, machine-learning ready data on a runtime basis, which facilitates the building of various machine learning models. A Kubernetes based workload optimizer use instructions from machine learning models to enable optimal Pods to Nodes assignment to realize data center energy efficiency and service performance. We will use a real data center with 200+ servers to demonstrate this concept to show how EADOS enhances business effects through a lens of environmental sustainability.
Environmental Sustainability: An Energy-Aware Datacenter Operating System - Ying-Feng Hsu & Yuki Sogawa, Osaka University
Data centers are currently using 2% of the world's energy. With the increases in the scale of cloud edge computing systems and other services, data center power consumption is expected to increase about 15 times in the next 10 years. High-performance applications and services are always beneficial, but this does not mean that power consumption needs to increase as a result. This talk covers an energy-aware datacenter operating system (EADOS) that manipulates several types of open-source software to realize energy savings in distributed computing environments. EADOS uses Zabbix and Prometheus continuously collect thousands of data center operating parameters from all servers, sensors, and HVAC cooling systems. Those collected data are further optimized by Apache Kafka stream processing to produce event-driven, machine-learning ready data on a runtime basis, which facilitates the building of various machine learning models. A Kubernetes based workload optimizer use instructions from machine learning models to enable optimal Pods to Nodes assignment to realize data center energy efficiency and service performance. We will use a real data center with 200+ servers to demonstrate this concept to show how EADOS enhances business effects through a lens of environmental sustainability.
- 4 participants
- 27 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Generalizing Policy-as-Code for Compliance Posture Management on Multi-Cloud Infrastructure - Takuya Mishina, IBM
Compliance posture management is an essential feature of enterprise Kubernetes-based infrastructure. There exists various tools and rule sets ("policy as code") to ensure the compliance posture of Kubernetes clusters, but some of complicated Kubernetes usecases such as multi-cloud and managed services require additional functionality for such off-the-shelf rule sets. This presentation shares the extension of ComplianceAsCode, an open source predefined rule suite. The new functionality of ComplianceAsCode enabled Compliance Operator, an open source compliance posture management tool, to support multi-cloud and managed usecases achieved by HyperShift, which deploys multiple Kubernetes control planes on another Kubernetes cluster. Attendees as users will be able to learn how to manage the compliance posture of multi-cloud and managed Kubernetes products and services using ComplianceAsCode, and as developers they can learn how to design and implement flexible policy-as-code for various types of Kubernetes usecases.
Generalizing Policy-as-Code for Compliance Posture Management on Multi-Cloud Infrastructure - Takuya Mishina, IBM
Compliance posture management is an essential feature of enterprise Kubernetes-based infrastructure. There exists various tools and rule sets ("policy as code") to ensure the compliance posture of Kubernetes clusters, but some of complicated Kubernetes usecases such as multi-cloud and managed services require additional functionality for such off-the-shelf rule sets. This presentation shares the extension of ComplianceAsCode, an open source predefined rule suite. The new functionality of ComplianceAsCode enabled Compliance Operator, an open source compliance posture management tool, to support multi-cloud and managed usecases achieved by HyperShift, which deploys multiple Kubernetes control planes on another Kubernetes cluster. Attendees as users will be able to learn how to manage the compliance posture of multi-cloud and managed Kubernetes products and services using ComplianceAsCode, and as developers they can learn how to design and implement flexible policy-as-code for various types of Kubernetes usecases.
- 2 participants
- 24 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
How to Hold Upstream Training in Japan and Get New Contributors!!! - Akihito Inoh & Xie Ziyi, NEC
We held kubernetes upstream training sessions at public events in Japan - e.g. CloudNative Days Tokyo, OpenSourceSummit Japan - 7 times in 3 years and get lots of new contributors. It's true to get more contributors is something difficult, because of some problems: language, culture and chance to know how to contribute. We'd like to share the experience and how we arranged the training session based on kubernetes-sigs/contributor-playground.
How to Hold Upstream Training in Japan and Get New Contributors!!! - Akihito Inoh & Xie Ziyi, NEC
We held kubernetes upstream training sessions at public events in Japan - e.g. CloudNative Days Tokyo, OpenSourceSummit Japan - 7 times in 3 years and get lots of new contributors. It's true to get more contributors is something difficult, because of some problems: language, culture and chance to know how to contribute. We'd like to share the experience and how we arranged the training session based on kubernetes-sigs/contributor-playground.
- 5 participants
- 30 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Keynote: Hello eBPF! Goodbye Sidecars? - Liz Rice, Chief Open Source Officer, Isovalent
The Sidecar model is often used in Kubernetes deployments to add common tools like observability, service mesh and security into application pods.
eBPF is a kernel technology that lets us dynamically change the way that the kernel behaves - and it’s revolutionizing the way we instrument applications running under Kubernetes. Tools built with eBPF have the power to observe, secure and connect all the processes on a (virtual) machine, so there’s no need to inject a sidecar container into every pod.
Does eBPF mean we’ll be saying goodbye to sidecars? Attend this talk to find out!
Keynote: Hello eBPF! Goodbye Sidecars? - Liz Rice, Chief Open Source Officer, Isovalent
The Sidecar model is often used in Kubernetes deployments to add common tools like observability, service mesh and security into application pods.
eBPF is a kernel technology that lets us dynamically change the way that the kernel behaves - and it’s revolutionizing the way we instrument applications running under Kubernetes. Tools built with eBPF have the power to observe, secure and connect all the processes on a (virtual) machine, so there’s no need to inject a sidecar container into every pod.
Does eBPF mean we’ll be saying goodbye to sidecars? Attend this talk to find out!
- 1 participant
- 19 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Keynote: Reverse Engineering Cloud Native: Interoperability and Community - Katie Gamanji, Senior Field Engineer & Kohei Ota, Senior Field Engineer, Apple
Kubernetes has become the default container orchestrator framework, setting the standards for application deployment in a distributed environment. In the past years, numerous tools have been developed to extend Kubernetes capabilities and enhance its features. Simultaneously, the expansion of the technology landscape prompted the growth of the adopter base and the number of scenarios where cloud native can be applied. The organic adoption and development of new tools, created the ecosystem and community as we know it today.
This keynote will feature the core principles that define the next generation’s identity of cloud native practitioners using a reverse engineering approach. It will present the interoperability of tools, inclusivity at the community and adopters level, and a culture of change and education that drives the ubiquity of the cloud native.
Keynote: Reverse Engineering Cloud Native: Interoperability and Community - Katie Gamanji, Senior Field Engineer & Kohei Ota, Senior Field Engineer, Apple
Kubernetes has become the default container orchestrator framework, setting the standards for application deployment in a distributed environment. In the past years, numerous tools have been developed to extend Kubernetes capabilities and enhance its features. Simultaneously, the expansion of the technology landscape prompted the growth of the adopter base and the number of scenarios where cloud native can be applied. The organic adoption and development of new tools, created the ecosystem and community as we know it today.
This keynote will feature the core principles that define the next generation’s identity of cloud native practitioners using a reverse engineering approach. It will present the interoperability of tools, inclusivity at the community and adopters level, and a culture of change and education that drives the ubiquity of the cloud native.
- 2 participants
- 14 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Migrating 5G Core to the Edge, Wisely and Confidently with Kubernetes - Marco Antonio Gonzalez Ortiz, Ericsson
In recent times, Multi-Access Edge Computing (MEC), a 5G specification, has risen as a game-changing solution for data exchange latency and cybersecurity threats identified among the variety of profitable use cases identified while migrating 5G to the edge. This proposal will describe three simple, yet consistent migration stages of a pre-existing 5G-Core Cloud Native solution to an ETSI-compliant 3GPP 5G EdgeApp (Edge Application) architecture. The first stage will include a review of the different considerations while re-architecting Kubernetes for an EdgeApp. Etcd performance in large Edge environments will be examined, along with pod-scheduling strategies and consistent data-storage for persistent data in a K8s cluster. Subsequently, an integrated MEC-5G architecture will be presented, along with MEC deployment scenarios, including MEC application mobility in a 5G containerized solution. The second stage will involve a thorough review of existing Kubernetes open-source edge projects: k0s, K3S, microK8S and KubeEdge, analysing their deployment costs, Edge-oriented level of maturity, documentation and community support. The final stage will outline some interesting examples of deployed MEC Use-cases, including AI platform for edge devices and 5G-Core over Bare-metal.
Migrating 5G Core to the Edge, Wisely and Confidently with Kubernetes - Marco Antonio Gonzalez Ortiz, Ericsson
In recent times, Multi-Access Edge Computing (MEC), a 5G specification, has risen as a game-changing solution for data exchange latency and cybersecurity threats identified among the variety of profitable use cases identified while migrating 5G to the edge. This proposal will describe three simple, yet consistent migration stages of a pre-existing 5G-Core Cloud Native solution to an ETSI-compliant 3GPP 5G EdgeApp (Edge Application) architecture. The first stage will include a review of the different considerations while re-architecting Kubernetes for an EdgeApp. Etcd performance in large Edge environments will be examined, along with pod-scheduling strategies and consistent data-storage for persistent data in a K8s cluster. Subsequently, an integrated MEC-5G architecture will be presented, along with MEC deployment scenarios, including MEC application mobility in a 5G containerized solution. The second stage will involve a thorough review of existing Kubernetes open-source edge projects: k0s, K3S, microK8S and KubeEdge, analysing their deployment costs, Edge-oriented level of maturity, documentation and community support. The final stage will outline some interesting examples of deployed MEC Use-cases, including AI platform for edge devices and 5G-Core over Bare-metal.
- 1 participant
- 23 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Possibility of OCI Container Runtime with Rust - Toru Komatsu, Japan
It goes without saying that the Rust language has received a lot of attention in recent years, including the adoption of Rust as a second language in the Linux kernel. Toru has been exploring the possibility of developing a container runtime using Rust in the vicinity of OCI Runtime and developing youki, the OCI container runtime in Rust that He has worked on for over a year and a half. He thought it would be a good fit for the language since OCI Runtime requires development at a relatively kernel-like layer. Youki is now listed as one of the reference implementations of the OCI Runtime specification and is at a level where it can be used from docker and podman. The next step is to consider using it with Kubernetes. In this session, He will discuss the possibility of using Rust in a container runtime. He will share his experiences with youki. From these experiences, He feels that Rust is a language that should contribute more to the container runtime field. At the beginning of the presentation, I will explain container technology such as cgroups and Linux namespaces for those who have not had much exposure to OCI Runtime.
Possibility of OCI Container Runtime with Rust - Toru Komatsu, Japan
It goes without saying that the Rust language has received a lot of attention in recent years, including the adoption of Rust as a second language in the Linux kernel. Toru has been exploring the possibility of developing a container runtime using Rust in the vicinity of OCI Runtime and developing youki, the OCI container runtime in Rust that He has worked on for over a year and a half. He thought it would be a good fit for the language since OCI Runtime requires development at a relatively kernel-like layer. Youki is now listed as one of the reference implementations of the OCI Runtime specification and is at a level where it can be used from docker and podman. The next step is to consider using it with Kubernetes. In this session, He will discuss the possibility of using Rust in a container runtime. He will share his experiences with youki. From these experiences, He feels that Rust is a language that should contribute more to the container runtime field. At the beginning of the presentation, I will explain container technology such as cgroups and Linux namespaces for those who have not had much exposure to OCI Runtime.
- 2 participants
- 26 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Secure and Debuggable: Debugging Slim, Scratch and Distroless Kubernetes Containers - Saiyam Pathak, Civo Limited & Kyle Quest, Slim AI
You reduced the attack surface of your containers with docker-slim or manually optimised scratch or distroless images, and you are super excited about it, but now you have a problem. How do you debug your app? You can't simply "kubectl exec" to your containers because there's no shell. You can't even "kubectl cp" to copy and run your debug tools! Kubernetes 1.25 is out, and the Ephemeral Containers capability is finally GA, which means it'll be available everywhere for you to use to debug your applications. In this talk, You'll learn how to use Ephemeral Containers as debugging tool sidecars to make your application container images as small as possible. You'll learn how "kubectl debug" uses Ephemeral Containers and its gotchas (what you get and don't get with "kubectl debug" by default). You'll also learn how it's possible to use Ephemeral Containers without "kubectl debug". Speakers will also discuss the existing debugging tool container images and how you can use them.
Secure and Debuggable: Debugging Slim, Scratch and Distroless Kubernetes Containers - Saiyam Pathak, Civo Limited & Kyle Quest, Slim AI
You reduced the attack surface of your containers with docker-slim or manually optimised scratch or distroless images, and you are super excited about it, but now you have a problem. How do you debug your app? You can't simply "kubectl exec" to your containers because there's no shell. You can't even "kubectl cp" to copy and run your debug tools! Kubernetes 1.25 is out, and the Ephemeral Containers capability is finally GA, which means it'll be available everywhere for you to use to debug your applications. In this talk, You'll learn how to use Ephemeral Containers as debugging tool sidecars to make your application container images as small as possible. You'll learn how "kubectl debug" uses Ephemeral Containers and its gotchas (what you get and don't get with "kubectl debug" by default). You'll also learn how it's possible to use Ephemeral Containers without "kubectl debug". Speakers will also discuss the existing debugging tool container images and how you can use them.
- 2 participants
- 30 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
Supercharge Your Kubernetes AI Deployments with Wasm - Rishit Dagli, Narayana Junior College; Incoming University of Toronto & Shivay Lamba, Meilisearch
Machine Learning inference (though what we talk about can be applied to other computationally intensive tasks) is often a computationally intensive task and could greatly benefit from the speed of WebAssembly. What if I told you, that you could improve the performance of your application deployed on Linux containers. Enter Wasm and Kubernetes. This talk starts off by introducing the audience to WebAssembly (Wasm) and how they could make use of the speed and security among others of Wasm for their deployments. Another problem we face is that the standard WebAssembly provides very limited access to the native OS and hardware, such as multi-core CPUs, GPU, or TPUs which is not ideal for the kind of systems we target. The talk also shows how one could use the WebAssembly System Interface (WASI) to get security, portability, and native speed for Machine Learning models. The talk then shows how one can use Krustlet to run Wasm on Kubernetes with a demo of deploying a model while also talking about necessary considerations while doing so.
Supercharge Your Kubernetes AI Deployments with Wasm - Rishit Dagli, Narayana Junior College; Incoming University of Toronto & Shivay Lamba, Meilisearch
Machine Learning inference (though what we talk about can be applied to other computationally intensive tasks) is often a computationally intensive task and could greatly benefit from the speed of WebAssembly. What if I told you, that you could improve the performance of your application deployed on Linux containers. Enter Wasm and Kubernetes. This talk starts off by introducing the audience to WebAssembly (Wasm) and how they could make use of the speed and security among others of Wasm for their deployments. Another problem we face is that the standard WebAssembly provides very limited access to the native OS and hardware, such as multi-core CPUs, GPU, or TPUs which is not ideal for the kind of systems we target. The talk also shows how one could use the WebAssembly System Interface (WASI) to get security, portability, and native speed for Machine Learning models. The talk then shows how one can use Krustlet to run Wasm on Kubernetes with a demo of deploying a model while also talking about necessary considerations while doing so.
- 2 participants
- 29 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
The Architecture of Microservice Transaction Based on Distributed Consensus with Kubernetes - Jumpei Nishitani, Hitachi, Ltd.
When constructing an enterprise system by Microservice Architecture, the engineers faced various problems. We think the most difficult problem is how to update data in the Database consistently. Most engineers will choose a Microservices design pattern called “DB per Service” when we construct microservices with a Database. The engineers must consider Transaction Management. If you construct Transaction Management like the “Saga Design pattern”, your application will be complex, and you must work a lot to maintain data consistency in system runtime as an operator. That’s why Saga does not have sufficient functionality to construct a transactional system that supplies consistency and scalability. To resolve this problem, Microservice Transaction Management System that balanced strong consistency, loosely coupled, and high productivity is necessary. We will introduce the concept of Microservice Transaction management based on distributed consensus.
The Architecture of Microservice Transaction Based on Distributed Consensus with Kubernetes - Jumpei Nishitani, Hitachi, Ltd.
When constructing an enterprise system by Microservice Architecture, the engineers faced various problems. We think the most difficult problem is how to update data in the Database consistently. Most engineers will choose a Microservices design pattern called “DB per Service” when we construct microservices with a Database. The engineers must consider Transaction Management. If you construct Transaction Management like the “Saga Design pattern”, your application will be complex, and you must work a lot to maintain data consistency in system runtime as an operator. That’s why Saga does not have sufficient functionality to construct a transactional system that supplies consistency and scalability. To resolve this problem, Microservice Transaction Management System that balanced strong consistency, loosely coupled, and high productivity is necessary. We will introduce the concept of Microservice Transaction management based on distributed consensus.
- 1 participant
- 30 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
The Narrative of Reliability: A Chaos Engineering Case Study with LitmusChaos - Prithvi Raj, Harness
How can Cloud-Native environments continue to run smoothly as they grow and include more services? The only constant is change. We live in a world where technology is progressing at a rapid speed in every direction. With technologies like Kubernetes, applications are developing rapidly. We don't have outages as regularly as we did five years ago. But everything comes at a cost, greater innovation brings more complexity, making it a never-ending game to stay on top of application dependability concerns. There are business-critical services operating on Cloud-Native infrastructures today, and the need of the hour is a compelling technique for improving the millions of applications in production. Breaking things on purpose became a reality and was coined the term 'Chaos Engineering', a theory that turned into practice to ensure resiliency through constant testing. This session helps you understand the basic building blocks of Chaos Engineering for your Cloud-Native systems and covers the various aspects that need to be adhered to while moving in that direction such as basic principles, benefits, the LitmusChaos tool in the CNCF ecosystem, the history, the roadmap for the future, and much more to pave your path towards reliability
The Narrative of Reliability: A Chaos Engineering Case Study with LitmusChaos - Prithvi Raj, Harness
How can Cloud-Native environments continue to run smoothly as they grow and include more services? The only constant is change. We live in a world where technology is progressing at a rapid speed in every direction. With technologies like Kubernetes, applications are developing rapidly. We don't have outages as regularly as we did five years ago. But everything comes at a cost, greater innovation brings more complexity, making it a never-ending game to stay on top of application dependability concerns. There are business-critical services operating on Cloud-Native infrastructures today, and the need of the hour is a compelling technique for improving the millions of applications in production. Breaking things on purpose became a reality and was coined the term 'Chaos Engineering', a theory that turned into practice to ensure resiliency through constant testing. This session helps you understand the basic building blocks of Chaos Engineering for your Cloud-Native systems and covers the various aspects that need to be adhered to while moving in that direction such as basic principles, benefits, the LitmusChaos tool in the CNCF ecosystem, the history, the roadmap for the future, and much more to pave your path towards reliability
- 4 participants
- 30 minutes
9 Jan 2023
Don't miss out! Join us at our upcoming event: KubeCon + CloudNativeCon Europe in Amsterdam, The Netherlands from 18 - 21 April, 2023. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.
What Anime Taught Me About K8s & Tech Careers - Annie Talvasto, Camunda
From One piece and Naruto to Neon Genesis Evangelion and Dragon Ball, Japanese animation is a cultural phenomenon. This session will take you through both the landscape of anime and Kubernetes, with helpful beginner tips to get you started on your cloud native journey. The session will also cover what the heroes of East blue and Planet 4032-877 can teach us about career development in the tech world. Importance of perseverance, inclusion & diversity as well as always having a snack at hand - come and learn how anime can boost your Kubernetes and tech career to the next level!
What Anime Taught Me About K8s & Tech Careers - Annie Talvasto, Camunda
From One piece and Naruto to Neon Genesis Evangelion and Dragon Ball, Japanese animation is a cultural phenomenon. This session will take you through both the landscape of anime and Kubernetes, with helpful beginner tips to get you started on your cloud native journey. The session will also cover what the heroes of East blue and Planet 4032-877 can teach us about career development in the tech world. Importance of perseverance, inclusion & diversity as well as always having a snack at hand - come and learn how anime can boost your Kubernetes and tech career to the next level!
- 2 participants
- 28 minutes
