Virtual Rejekts 2020
2020-04-01..2020-05-18
-- online --
who it's for
kubernetes operators, platform engineers, site reliability engineers, cloud engineers, security engineers, devops engineers, observability engineers
topics
service-binding-operator integration; OpenEBS local persistent volumes; virtual kubelet and KIP bursting; metal-stack bare metal provisioning; BPF syscall tracing with traceloop; Virtual k8s multi-cluster fleet; istiod single-binary Istio; Kyverno policy engine; OpenTelemetry application observability; Calico eBPF networking; Prometheus federation monitoring; Cluster API deep dive
| title | author | length |
|---|---|---|
| Connecting Applications with Operator-backed Services | Igor Sutton, Avni Sharma | 36m |
Demonstrates using the open-source service-binding-operator to automatically collect credentials and config from Operator-backed services (Postgres, etc.)… | ||
| Using OpenEBS successfully for remote working and to reduce costs | Uma Mukkara | 38m |
Describes running stateful Kubernetes workloads on a home server or laptop using OpenEBS plus Director for metrics and migration, with live migration to cloud… | ||
| Elastic cloud bursting with Virtual Kubelet and KIP | Madhuri Yechuri | 27m |
KIP (Kubernetes Cloud Instance Provider) plus virtual kubelet lets a single Kubernetes control plane burst pods to other clouds by creating just‑in‑time… | ||
| metal-stack - kubernetes on bare metal | Gerrit Schwerthelm | 34m |
metal-stack is an open source bare‑metal MaaS: a REST API plus a cloud controller manager integrated with Gardener to create Kubernetes clusters. It uses… | ||
| Inspektor Gadget and traceloop: BPF debugging tools for Kubernetes | Alban Crequy | 30m |
Traceloop captures system calls asynchronously per cgroup using BPF and an overwritable ring buffer so traces sit in memory like a flight recorder until… | ||
| Virtual K8s: Application Fleet Management at Scale | Jakub Pavlik | 28m |
A Kubernetes-compatible control plane called Virtual k8s creates a digital twin for each site and replicates Kubernetes objects across clusters using k8s API… | ||
| Istio as a monolith | Dawid Ziolkowski | 21m |
Istio consolidates its former ~6 control-plane services (Pilot, Galley, Citadel, Mixer, Injector, etc.) into istiod single binary, keeping the same API while… | ||
| Kubernetes Native Policy Management with Kyverno! | Shuting Zhao, Jim Bugwadia | 31m |
Kyverno is a Kubernetes-native policy engine implemented as CRDs plus an admission controller that processes requests from the API server (deployed via a… | ||
| How to beat an existential crisis by becoming Cloud Native. | Pini Reznik | 30m |
Argues that survival means changing more than infra — it’s organizational, financial and cultural work as well as tech, because newcomers can build an entire… | ||
| Kubernetes The Fun Way | Dan Acristinii | 27m |
Collection of playful case studies shows concrete builds: an Arm64 single-board Kubernetes cluster running Rook Ceph on USB flash drives to host Wordpress, a… | ||
| Yes, we need a new dashboard! | Joaquim Rocha | 23m |
Headlamp is an open‑source Apache 2.0 Kubernetes dashboard built with React + Material‑UI frontend and a Go backend, designed for multi‑cluster use with… | ||
| How to Train your Red Team (for Cloud Native) | Andrew Martin | 32m |
Describes a practical method: build threat models, encode exploits as attack trees, map concrete controls to prune branches, then validate by running automated… | ||
| Noverlay Networks for Health and Wellbeing | Karthik Prabhakar | 40m |
Argues that many Kubernetes deployments pile unnecessary overlays and end up with four to five layers of load balancing (envoy sidecars, kube-proxy, ingress… | ||
| Calico Networking with eBPF | Shaun Crampton | 32m |
Calico adds an eBPF dataplane that compiles C to BPF via clang and uses TC BPF hook plus socket enhancements, with Felix generating per-host bytecode; it… | ||
| Attack of the mutant tags! | Álvaro Iradier | 29m |
Mutable image tags cause concrete failures: a race-condition demo shows Kubernetes scheduling two pods with the same tag but different digests after… | ||
| Using k8s, Bare Metal, & 5G to achieve autonomous drone delivery! | Cody Hill | 32m |
Uses Packet bare-metal plus Sprint 5G to run an edge IoT stack that actually controls flying drones: k3s Kubernetes, OpenFaaS, NATS/Emitter, Postgres… | ||
| What We’ve Learned Building a Multi-Region DBaaS on Kubernetes | Josh Imhoff | 33m |
Cockroach Cloud runs a global DBaaS on Kubernetes, with 70 production clusters since November, using one k8s cluster per customer and statefulsets plus… | ||
| The need for a Cloud Native Tunnel | Alex Ellis | 33m |
A lightweight cloud-native tunneling stack called inlets uses an outbound WebSocket to bridge private networks to cheap cloud hosts (DigitalOcean/Packet) and… | ||
| Kubernetes Ingress-Nginx Security from Beginner to Expert | Fernando Diaz | 25m |
Walks through a live demo cluster that deploys ingress-nginx, a simple echo app and Service, then shows concrete configs that work: basic auth via Kubernetes… | ||
| Observable Applications Using OpenTelemetry | Johannes Liebermann | 42m |
Explains why distributed tracing is worth the cost, shows OpenTelemetry as the merged standard replacing OpenTracing/OpenCensus, and demos instrumenting a… | ||
| The Easy Button to Kubernetes Networking with Open vSwitch | Antonin Bas | 19m |
Open vSwitch provides a programmable OpenFlow dataplane that Antrea uses as a mostly decentralized CNI to implement Pod connectivity, NetworkPolicy enforcement… | ||
| Advanced Integrated Monitoring with Prometheus Federation | Charles Pretzer | 30m |
Concrete setup for Prometheus federation: a VM running a primary Prometheus binary scrapes two Linkerd clusters’ Linkerd Prometheus endpoints over a load… | ||
| Making the Business Case for DevOps | Dan Garfield | 29m |
Calculations and case studies show where DevOps pays off: use annual revenue divided by minutes to value downtime (example $200,000 per minute from Amazon)… | ||
| Secure Shell Access Without SSH | Justin Garrison | 38m |
Argues that SSH can be replaced by AWS Systems Manager Session Manager to get shells without opening port 22 or giving instances public IPs, using the SSM… | ||
| Cluster API Deep Dive | Vince Prignano, Cecile Robert-Michon | 33m |
Live demo shows a management cluster initialized with clusterctl, the Azure infrastructure provider, and kubeadm bootstrap / KubeadmControlPlane, then creates… | ||
| Discover and Secure your APIs in Minutes | Madhukar Nayakbomman | 28m |
Live demo shows Hipster Shop deployed in staging and prod, a CLI calling Volterra public APIs discovers service-to-service paths (client, server, method, URL)… | ||
| nothing matches | ||