Keynote: Cloud Native Observability & Security from Google Cloud
summary
Announces GVisor, an open source container sandbox that intercepts application system calls in user space to give VM-like isolation while staying lighter weight and demonstrably blocks a Dirty COW exploit in the live demo; shows the new Stackdriver Kubernetes Monitoring which centralizes metrics, logs, events and metadata across clusters, ingests Prometheus metrics without code changes, offers an event heatmap, drilldowns by node/workload/service, BigQuery log queries and aggregations (sum/max/95th), and is available in GKE alpha.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 0:18GWeiser
- 1:01Demo
- 2:50Communities Monitoring
- 3:44StackDriver Demo
- 5:13Kubernetes Monitoring
- 5:36Community Podcast
related talks
35mThe Enemy Within: Running Untrusted Code with gVisor
35mThe Enemy Within: Running Untrusted Code with gVisor
25mIsolating Kubernetes Workloads with gVisor
30mAccelerating AI Securely with GVisor
25mCloud-Native Sandboxes for Microservices: Understanding New Threats and Attacks
02h 00mKubernetes Security for Developers.
56mThe Future of AppSec is Cloud-Native
35mCloud Native Security for the Rest of Us