Speakers on board

Why Kubernetes as a container orchestrator is a right choice for running spark clusters on cloud?

The intent of this talk is to share the experience of building such a service and deploying it on a Kubernetes cluster. In this talk we will discuss all the requirements which an enterprise grade Hadoop/Spark cluster running on containers bring in for a container orchestrator. This talk will cover in details how Kubernetes orchestrator can be used to meet all our needs of resource management, scheduling, networking and network isolation, volume management etc.

Spark performance tuning for Kubernetes/Serverless workloads

Cloud platforms provide flexibility of creating Spark clusters for short duration either as Function as a server or on Kubernetes. But, it is important to ensure that the spark jobs are written and executed in a way as to get the best mileage from these clusters. Given that the Clusters are billed on the duration of time used, performance of jobs becomes critical not only to improve efficiency but to reduce the Total Cost. This talk covers practical tips and hints on how to tune Spark jobs on popular Resource Managers like Yarn,Kubernetes for best performance. This talk will also address some of the FAQs by users and customers on Spark Clusters on popular Cloud platforms.

Short Bio

Container Expert

Rachit Arora is a Senior Developer at IBM,India Software Labs. He is key designer of the IBM's offerings on Cloud for Hadoop ecosystem . He has extensive experience in architecture, design and agile developmemt. Rachit is an expert in application development in Cloud architecture and development using hadoop and it's ecosystem. He has been active speaker for BigData technologies in various conference like Information Management Technical Conference-2015 , ContainerCon NA-2016, Container Camp Sydeny 2017 etc.

Battle of the Circuit Breakers: Hystrix vs Istio

Kubernetes in general, and Istio in particular, have changed a lot the way we look at Ops-related constraints: monitoring, load-balancing, health checks, etc. Before those products became available, there were already available solutions to handle those constraints. Among them is Hystrix, a Java library provided by Netflix. In particular, Hystrix provides an implementation of the Circuit Breaker pattern, which prevents a network or service failure from cascading to other services. But now Istio also provides the same capability. In this talk, we will have a look at how Istio and Hystrix implement the Circuit Breaker pattern, and what pros/cons each of them has.

Short Bio

Developer Advocate

Nicolas Fränkel is a Developer Advocate with 15+ years experience consulting for many different customers, in a wide range of contexts (such as telecoms, banking, insurances, large retail and public sector). Usually working on Java/Java EE and Spring technologies, but with focused interests like Rich Internet Applications, Testing, CI/CD and DevOps. Currently working for Exoscale. Also double as a teacher in universities and higher education schools, a trainer and triples as a book author.

Spark performance tuning for Kubernetes/Serverless workloads

Cloud platforms provide flexibility of creating Spark clusters for short duration either as Function as a server or on Kubernetes. But, it is important to ensure that the spark jobs are written and executed in a way as to get the best mileage from these clusters. Given that the Clusters are billed on the duration of time used, performance of jobs becomes critical not only to improve efficiency but to reduce the Total Cost. This talk covers practical tips and hints on how to tune Spark jobs on popular Resource Managers like Yarn,Kubernetes for best performance. This talk will also address some of the FAQs by users and customers on Spark Clusters on popular Cloud platforms.

Short Bio

Performance Analyst

I have worked as Performance Analyst in DB2, Apache Spark and various Data Science technologies and tools. I specialize in Performance tuning of Databases, Analytic Engines etc.

Good Enough for the Finance Industry: Achieving High Security with Containers and Microservices

Security is a challenge for most companies. Especially those in periods of rapid growth. It is often taken for granted as we trust the frameworks we use to implement the necessary security protocols for us. However, one only needs to pick up the paper to find out that this simply isn't true. Information security is now a chief concern of many small and mid-size companies as well. We'll show you how we use AWS, Calico, OWASP Dependency Checker, CoreOS’s Clair, and Notary to achieve reliable observable security at the code level, container level, cluster level, and even the AWS account level to maintain the Gold Standard of security (authentication, authorization, and auditing.) We will focus on the security mindset and the specific implementation we have at Ygrene to keep data secure.

Short Bio

Technology Explorer

Austin Adams is a passionately curious technologist who is people oriented, fast learning and excited to challenge tough problems with modern solutions. He focuses his computing energy on the cloud and how to make software that is easy to change and enjoyable for the end user. He currently contributes to open source projects within the cloud-native landscape. He loves to have fun, be with family and work in the community. He is a family man with dreams to have a mini farm and create a sustainable living environment. He Also spends his day hacking on open source software with his best friend and co-speaker Zach Arnold.

Good Enough for the Finance Industry: Achieving High Security with Containers and Microservices

Security is a challenge for most companies. Especially those in periods of rapid growth. It is often taken for granted as we trust the frameworks we use to implement the necessary security protocols for us. However, one only needs to pick up the paper to find out that this simply isn't true. Information security is now a chief concern of many small and mid-size companies as well. We'll show you how we use AWS, Calico, OWASP Dependency Checker, CoreOS’s Clair, and Notary to achieve reliable observable security at the code level, container level, cluster level, and even the AWS account level to maintain the Gold Standard of security (authentication, authorization, and auditing.) We will focus on the security mindset and the specific implementation we have at Ygrene to keep data secure.

Automatically TUF about Container Image Security in Kubernetes

The Update Framework (and its sister project from the CNCF, Notary) are a little known gems in the cloud native community. These projects are however extremely vital for making rigorous guarantees about the contents of your software package (read container image) when it is deployed into an environment like Kubernetes. We'll demystify TUF/Notary at the beginning of this talk, and then do a demonstration for setting up image signing through your build pipeline finally ending in Kubernetes where we will restrict the container images that can be deployed to just ones signed by us (using Validating/Mutating Admission Webhook Controllers.) Our goal is to empower you to take the skills you learn from the talk and implement a similar process in your own CI/CD pipeline.

Short Bio

Software Engineer

Zach Arnold works as a Software Engineer for Ygrene Energy Fund in beautiful Sonoma County, CA. He is an active contributor to open source including the Kubernetes project. As a CNCF junkie, Zach helps his good friend and colleague Austin Adams organize the North Bay CNCF meetup, and in their spare time work on defining security standards for the Cloud Native era in the finance industry.

A journey to Kubernetes

The HanseMerkur have been running Kubernetes over a year in production. In this talk, I would like to give you an insight into our tour to an on premises Kubernetes infrastructure. What does our way looks like and which experiences did we made.

Short Bio

IT Architect

Working in IT for over 20 years in various roles, I have now been working on building a company wide Kubernetes CI/CD-Infrastructure since the last years

Importance of IPv6 in a cloudy World

Some words on why IPv6 is important in a cloud-native world, why you should look into and implement it now.

Short Bio

DevOps Engineer

Rook Maintainer. DevOps Engineer, Cloudibility. Sysadmin, Developer and Gamer with passion. #Kubernetes and #Container. Rook Maintainer. DevOps Engineer at Cloudibility. Certified Kubernetes Administrator.

Trust is good, control is better - A (short) story about Network Policies

Probably everybody who uses Kubernetes in a productive environment with multiple users possibly has looked at policies. Often the operators of the cluster(s) just trust the policies but in some cases it might be useful to control if the policies actually have taken action and often there are just to many Policies in the cluster setup to manually test them all (and obviously you don’t want to do this). Testing the effectiveness of the Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose. Also we will show you some other tools and how they complement our solution. As a takeaway you will get an overview of different testing strategies for policies, as well as understanding challenges in testing policies in general and the Kubernetes ecosystem.

Short Bio

Cloud Platform Engineer

Maximilian Bischoff joined inovex as a Cloud Platform Engineer in 2018. He is working on topics such as kubernetes security and edge computing. Currently his focus is on testing and quality. He studied Computer Science and Media (M.SC). at HdM Stuttgart focusing on Software Engineering. One of his purpose is to create and develop well thought out and maintainable software, which form the cornerstone of successful products.

Trust is good, control is better - A (short) story about Network Policies

Probably everybody who uses Kubernetes in a productive environment with multiple users possibly has looked at policies. Often the operators of the cluster(s) just trust the policies but in some cases it might be useful to control if the policies actually have taken action and often there are just to many Policies in the cluster setup to manually test them all (and obviously you don’t want to do this). Testing the effectiveness of the Network Policies can be done in different approaches. In this talk we will show you the benefits and drawbacks of different approaches and what solution we finally chose. Also we will show you some other tools and how they complement our solution. As a takeaway you will get an overview of different testing strategies for policies, as well as understanding challenges in testing policies in general and the Kubernetes ecosystem.

Short Bio

Cloud Platform Engineer

Johannes Scheuermann has been working as a Cloud Platform Engineer at inovex since 2014. His daily work involves innovative technologies and topics all around the modern data center environment, like Kubernetes, immutable infrastructure and – quite obviously – cloud platforms. Amongst other things Johannes supported the construction of the waipu.tv platform for EXARING and multiple big Kubernetes platforms for 1&1 Internet (web.de, GMX etc.) in a leading role.

Secure but flexible - Cloud Native Continuous Delivery in the Finance industry

The story of transitioning a large financial company to practice Continuous Delivery on top of Openshift using only open source solutions. Cloud Native is new and rapidly evolving, which makes enterprise clients anxious -- so they jump to large, monolithic vendor solutions in search of an automatic “right answer.” These solutions can be over complicated and rigid, ultimately stifling innovation. This financial institution needed a system flexible enough to support about fifty development teams independently deploying microservices while enforcing strict security and compliance requirements. Using open source tools we were able to give our client exactly the security and flexibility they needed, without locking them into a one size fits all solution. Our solution is built using the Gitops pattern, Jenkins, Docker and Openshift/Kubernetes - all open tools which can be used at any other company. I will explain the design decisions, the technical solution and the challenges of onboarding development teams to the new platform.

Short Bio

Senior Consultant

Continuous container delivery nerd. After a career in enterprise application development, I spent the past three years making Cloud native tech work for developers at various companies. I'm a senior consultant at Amsterdam-based Container Solutions.

Service Mesh Magic for Managed Kubernetes

A service mesh adds new qualities to your container orchestration: It connects, secures, observes and controls service invocations in a language agnostic way that doesn't require any code changes. This presentation starts with a gentle intro to service meshes. Starting with the shortcomings of Docker and Kubernetes. I will show in a live demo how a service mesh implements cross cutting concerns like traffic shifting, blue/green deployments, and observability. We then have a look at how a service mesh bridges to the world of chaos engineering by giving us the possibility to inject errors at a certain rate. As a practical example I will use Envoy with Istio and AWS App Mesh. To conclude I will critically analyze if and how a service mesh should evolve into becoming a standard component of a managed container service.

Short Bio

Technical Evangelist

Frank Munz works as a Technical Evangelist for Amazon Web Services. He is an expert in middleware and distributed computing. Frank earned a Ph.D. in computer science from the Technische Universität München with summa cum laude for his work on distributed computing and brain research. He published more than 20 peer reviewed scientific papers in computer science and medicine. In 2011 Frank received the Oracle Technologist of the Year award for cloud computing. He was honoured as Oracle ACE Director by Oracle in 2013 and Developer Champion in 2017. Frank is the published author of several top selling computer science books. He loves to talk about IT, technology, and science and frequently speaks at conferences all over the world.

Continuous deployment to Kubernetes with the Google Container Tools

Kubernetes has become the orchestrator of choice to deploy applications. But what about developer's day to day job of developing those applications? Developing with containers is not always easy nor enjoyable. Google has launched a set of Open-Source projects that focus on Developer Experience in a world of containers. Whether you'd like to continuously deploy to Kubernetes with Skaffold, safely build images on a cluster with Kaniko or build images much faster with Jib and Bazel, come learn how to setup a great CI/CD.

Short Bio

Developer Advocate

David is a Developer Advocate at Google Cloud. He's working on Containers Tools, especially on developer experience. Previously, he helped open the R&D office of Docker in Paris to work on Docker for Mac and Docker for Windows.

How AI and Big Data Platform as a Service work together- a showcase

The current industrial environments are mainly not dealing with the potentials AI can bring to those industries. The session will deal with practice examples of the potential usage of AI based technology in the industrial environments. At the beginning we will show how we started in this area and what our main learnings in the beginning were about. We will face issues in the engineering and construction area and go deeper to the methods of how AI can be used to prevent claims and changes and moreover how AI can be used to automate partial engineering tasks along the customer requirements. We will show how our AI technology is able to learn about the historical engineering processes and products and how we integrated those knowledge in the future process and especially the client infrastructure environment.

Short Bio

Managing Director

DATIS IT-Services GmbH, Managing Director

Kubernetes Failure Stories, or: How to Crash Your Cluster

Bootstrapping a Kubernetes cluster is easy, rolling it out to nearly 200 engineering teams and operating it at scale is a challenge. In this talk, we are presenting our approach to Kubernetes provisioning on AWS, operations and developer experience for our growing Zalando developer base. We will walk you through our horror stories of operating 100+ clusters and share the insights we gained from incidents, failures, user reports and general observations. Our failure stories will be sourced from recent and past incidents, so the talk will be up-to-date with our latest experiences.

Short Bio

Head of Developer Productivity

Henning joined Zalando in the beginning of 2010 and accompanied the transformation of Zalando’s technology department through the eras of PHP/MySQL and Java/PostgreSQL to the new world of "Radical Agility". He helped building the STUPS cloud infrastructure to make innovation scale across autonomous teams. His five teams help streamline the developer experience by providing a cloud-native application runtime to 200+ engineering teams.

TestContainers + JUnit5 = elegant end-to-end tests for microservices

This talk suggests to perform automatic testing of the release candidate against other real services started in Docker. TestContainers library facilitates simple start up of services and their dependencies, i.e. (No)SQL databases in containers. The lib has a list of valuable features which significantly simplify a developer’s life. In the demo part a simplified version of a SMS platform is emulated. Apart from Spring Cloud Eureka there are 3 more business services built on Spring Boot. One of them is Acceptor which accepts clients requests, consults Billing on a decision whether to proceed with a request or not. Eventually Sender does an actual submit of an SMS to a mobile operator. Later the operator pushes a delivery report to Sender’s endpoint which should be matched to the submitted message and forwarded to Acceptor and then to client.

Short Bio

Senior Java/Kotlin Engineer

I am a Senior Software Engineer/Developer in Java/Kotlin at Infobip. I am regular attendant of conferences: Spring IO, KotlinConf, Devoxx Belgium, Joker in 2018.

A DevOps State of Mind: Continuous Security with Kubernetes

When it comes to adopting containers in the enterprise, Security is the highest adoption barrier. Is your organization ready to address the security risks with containers for your DevOps environment? In this presentation, you'll learn about best practices for: - Addressing the top container security risks in a container environment including images, builds, registry, deployment, hosts, network, storage, APIs, monitoring & logging, and federation. - Integrating continuous security for containers in the CI/CD pipeline - Deployment strategies for deploying container security updates including recreate, rolling, blue/green, canary and a/b testing.

Short Bio

Chief Technologist, NA West

Chris Van Tuin, Chief Technologist, NA West at Red Hat, has over 20 years of experience in IT and Software. Since joining Red Hat in 2005, Chris has been architecting solutions for strategic customers and partners and is a frequent speaker on DevOps, Security, and Containers. He started his career at Intel in IT and Managed Hosting followed by leadership roles in services and sales engineering at Loudcloud and Linux startups. Chris holds a Bachelors of Electrical Engineering from Georgia Institute of Technology.

6 weeks to migrate!

Few months ago I met a team: 8 developers working on a B2C app of car renting. They were tired, so tired ... Their vagrant was slow, the server crashed two or three times a week without restarting and without any logs, a roll out to production took 2 days to be tested, by hand ... Together we decided to react, let's have the Roll's Royce of the development environnement! Thus I've dockerized the app, I've created a Kubernetes cluster, I've added Spinnaker to the loop and some other stuff. We had some up and down, some smile and tear, but we finally did it and we have no regret. That what's I want to tell you with all the thing we learned along the way.

Short Bio

CTO

Working as a developer, I encountered many issues along my different projects : it took 1 day and a half to install the app on my personal laptop, the deployment is not working and I do not understand why ... That's why I decided to understand the ops world and I co-founded Padok a company helping you to take the advantages of the cloud to develop faster.

Caught in the Hype Cycle? - How to make cloud native transformation a success

Platforms such as Kubernetes offer huge benefits in terms of reducing operations efforts and encapsulating complexity. Due to this attractiveness, we built up a large-scale Kubernetes cluster to be used for our public and internal services. However with every new cloud native service deployed we found a new obstacle preventing it from going live. So we had to solve a number of unexpected challenges. In particular coupling cloud native services to the large existing application landscape turned out to be difficult. Also moving artifacts into the container platform comes with challenges. Consequently in the first 12 months we only moved very few services as many users were disillusioned. We iteratively identified the obstacles - technical and cultural - and developed strategies to resolve them. This presentation will discuss them and help you guide your project to success.

Short Bio

Expert Infrastructure Architect

Sascha Mühlbach currently holds the position of Expert Infrastructure Architect at 1&1 Mail & Media, a sub-division of 1&1 providing free and paid E-Mail services under various brands (e.g., WEB.DE, GMX, Mail.com). In this position, he is responsible for the global operations and advancement strategy of the applications, systems and datacenter infrastructure. Since 2003 he has been working as System Engineer, Architect and Product Manager for different international companies in the telecommunication and hosting sector.

Caught in the Hype Cycle? - How to make cloud native transformation a success

Platforms such as Kubernetes offer huge benefits in terms of reducing operations efforts and encapsulating complexity. Due to this attractiveness, we built up a large-scale Kubernetes cluster to be used for our public and internal services. However with every new cloud native service deployed we found a new obstacle preventing it from going live. So we had to solve a number of unexpected challenges. In particular coupling cloud native services to the large existing application landscape turned out to be difficult. Also moving artifacts into the container platform comes with challenges. Consequently in the first 12 months we only moved very few services as many users were disillusioned. We iteratively identified the obstacles - technical and cultural - and developed strategies to resolve them. This presentation will discuss them and help you guide your project to success.

Short Bio

Expert Infrastructure Architect

David Meder-Marouelli currently has the position of a systems architect with 1&1 Mail & Media, one of the largest E-Mail providers in Germany (including brands like GMX & WEB.DE). In this position he is responsible for all projects related to automation. After his PhD in physics and some years in grid computing he joined 1&1 in 2007 and has gained experience in several positions from system administrator to systems architect since then. Recently the focus has been on continuous delivery and container technologies.

Write maintainable integration test with Docker

Integration tests are extremely valuable but very hard to maintain and to write. You need to provision and manage the lifecycle for the dependencies that your application uses such as caches and databases. Testcontainer is an open source community all focused on solving this kind of problems across many languages. Gianluca is the maintainer of the Golang implementation that uses the Docker API to expose a test-friendly library that you can use in your test cases. During this talk, he will show you how to use testcontainer to write unit tests in Go with very low overhead.

Short Bio

Site Reliability Engineer

Gianluca Arbezzano is an SRE at InfluxData. He is a big Open Source contributor for several projects including and not limited to OpenTracing, Docker, and InfluxDB. He is also a Docker Captain and a CNCF Ambassador. He is passionate about troubleshooting applications at scale, observability, and distributed systems. He is familiar with several programming languages, such as Javascript and Golang and is an active speaker and writer, sharing his experiences and knowledge on projects that he is contributing to.

A Hitchhiker's Guide to Cloud Native API Gateways

Good APIs are the center piece of any successful digital product and cloud native application architecture. But for complex systems with many API consumers the proper management of these APIs is of utmost importance. The API gateway pattern is well established to handle and enforce concerns like routing, versioning, rate limiting, access control, diagnosability or service catalogs in a microservice architecture. So this session will have a closer look at the cloud native API gateway ecosystem: Ambassador, Gloo, Kong, Tyc, KrakenD, et.al. But which one of these is the right one to use in your next project? Let's find out. Leander will start off by briefly explaining the API gateway pattern and derive a simple criteria catalog. He will then continue by comparing and showcasing the most promising ones.

Enterprise Cloud native is The New Normal

The world of IT and technology is moving faster than ever before. Cloud native technology and application architecture have been influencing and disrupting the software engineering discipline for the past years and there is no end in sight. But according to Gardner we are currently entering the trough of disillusionment. So does this mean we followed the wrong path and that we should turn back? Hell no!!! Despite of all disbelievers and trolls: cloud native is neither a failure nor a hype anymore! It will become mainstream. We already see widespread adoption at all our customers. Of course there still is a lot of room for improvement. No doubt about that. Technology, methodology, processes, operations, cloud native architecture and software development need to mature even further to become boring and ready for the enterprise. This is software industrialization in its purest form. And our skills and expertise are required to make this happen.

Short Bio

Principal Software Architect

M.-Leander Reimer is a principal software architect, passionate developer and #CloudNativeNerd working for QAware GmbH. He is continuously looking for innovations in software engineering and ways to combine and apply state-of-the-art technology in real-world projects. Currently he is responsible for several projects concerned with the cloud native evolution of legacy applications. He is a regular speaker at national and international conferences and he is teaching cloud computing as a part time lecturer.

Atomic Host - Working with a git like operating system

Atomic Host is an immutable operating system for hosting containers​​​. It's based upon rpm-ostree which is a hybrid packet manager for managing bootable, immutable, versioned filesystem trees from upstream RPM content. This talk gives you a first introduction about what Atomic Host exactly is, how you can use it and most importantly what the common use cases are. After you're familiar with the key concepts, we'll build our very own custom OSTree within a quick demo session and learn, how we can integrate it into an Atomic Host based distribution.​​ To finish this talk, I'll give some insights about the limitations and best practices of Atomic Host and rpm-ostree.

Short Bio

Professional Software Developer

Marcel Lambacher is working as a Professional Software Engineer for the Zühlke Engineering GmbH in Stuttgart. He started to get into programming since he was 12 years old and began with simple 2D games, but fell in love with backend development and DevOps eventually. He is participating in different OSS projects and always in the mood for a long hacking session during the night.

Fasten your Seatbelts ! Deployment Automation using Dockers and Ansible

In this session, we’ll discuss how we combine Docker , Ansible and Jfrog Artifactory to achieve more streamlined continuous integration . We’ll cover: * A quick history of our deployment challenges and what led us to Docker. * The benefits of our new deployment approach — easy to Setup and minimal investment * Our Experience in running Integration tests on docker containers * How we combine Docker and the Jfrog products like Artifactory for more streamlined continuous integration and deployment

Short Bio

Principal Software Engineer

Switching the Engine (DNS) in Kubernetes: Benchmarks and Possibilities

DNS is one of the core components making Kubernetes run. It’s essential for most services and service discovery. It’s critical, underappreciated and overlooked at the same time. With the recent switch from Kube-DNS to CoreDNS as the main engine for DNS we wanted to take a retrospective look at the improvements and a future look at new possibilities. In this talk I’ll discuss common DNS issues such as UDP packet loss and resulting tail latency issues, compare the performance and reliability of Kube-DNS and CoreDNS, plus spec out and test possible iterative setups with advanced CoreDNS features such as local Daemonset caching, TCP support, prefetching, DNS over GRPC and GRPC based watches.

Short Bio

Founder

Michael Grosser has contributed to Kubernetes and CoreDNS for some time. As a Google Developer Expert for Kubernetes and GCP he is excited about technology and reading DNS RFCs. He is the founder of Okkur Labs and Rekkur Solutions (formerly SeeTheProgress). Okkur Labs is an open source lab enabling people around the world to participate in open source by compensating and mentoring. Current projects include TXTDirect, which enables standardized DNS TXT record based redirects + Syna, which provides a modular static site generation theme + Resumic, which is set out to provide a data based resume standard.

Quirks of scaling up your Custom Controllers

Ashutosh will present the quirks of scaling up Custom Controllers - around implementing mutex, handling upgrades and best practices around versioning of the CRs. The talk is based on the experiences of running Custom Controllers in openebs project. CRs are crucial part of Kubernetes ecosystem enabling projects to put their own sauce within Kubernetes environment. Whenever it comes to access/modify a resource in the world of concurrent programming the very first thing that would come to our mind is mutexes to avoid undesired behaviours. This talk will walk through live examples of code and CR YAMLs.

Short Bio

Software Engineer

Passionate about storage, cloud and algorithms. Polyglot programmer, love Kubernetes, opensource and hacks at OpenEBS.

Quirks of scaling up your Custom Controllers

Ashutosh will present the quirks of scaling up Custom Controllers - around implementing mutex, handling upgrades and best practices around versioning of the CRs. The talk is based on the experiences of running Custom Controllers in openebs project. CRs are crucial part of Kubernetes ecosystem enabling projects to put their own sauce within Kubernetes environment. Whenever it comes to access/modify a resource in the world of concurrent programming the very first thing that would come to our mind is mutexes to avoid undesired behaviours. This talk will walk through live examples of code and CR YAMLs.

Short Bio

Software Engineer

Amit is an architect at MayaData with a mission to simplify storage. He is passionate about opensource and the world of opportunities that opensource creates along. He is the primary maintainer of one such opensource project called https://github.com/openebs/ . He loves to code, coach and speak about Go, Kubernetes and OpenEBS.

Securing container delivery with open source tools

This lab will walk through how to secure the delivery pipeline system, and how to secure your containers during runtime. We'll start by focusing on the container build process and how to simplify patch management for containers; also, container security scanning and how to know if your container is void of malicious code and vulnerabilities. We'll then move on to registries, how to create an environment that developers can use in their workflow and how to secure that for production ready containers. Finally we'll focus on runtime, how to make sure our containers are doing what they're supposed to do, and not what they shouldn't be doing. This will be using all open source solutions, you'll be able to see how the world of security continues to improve with open source.

Should I build it or buy it?

Cloud Native software is all the rage right now; Kubernetes, Prometheus, Envoy being some of the top contenders. But, what is the best way to consume some of this open source technology? You can find a vendor for almost anything, but would it be better to buy an implementation or build your own? In this session, Travis will explore the landscape and the maturity of some of the different solutions. He’ll also discuss some considerations and tips around making these decisions.

Short Bio

Director of Engineering

Travis Jeppson is the Director of Engineering at Nav, Inc., a venture-backed startup providing free business and personal credit reports for small business owners. Jeppson, a graduate of The University of Utah, has more than 10 years of experience in software development. A lifelong-learner, Jeppson always has a book recommendation if asked. In his spare time, you'll find Jeppson spending time with his kids or tearing apart car engines.

Kubernetes Day 3- The State of Kubernetes Development Tooling

With Kubernetes emerging as the de facto standard for service orchestration, discussion is shifting from 'How does Kubernetes work?' to more specific concerns such as 'How do I achieve an optimal development workflow?' The answer lies in finding combinations of tools that work together in synergy. They should produce end to end workflows that perform effectively in the real world, while also covering a wide range of development stages—building, deploying, debugging, and so on. Goal in mind, let's dive into the tooling available in the current landscape—tools such as Helm, Draft, Skaffold, Forge, Telepresence, Garden, and Tilt. We'll map their capabilities to developer needs, then outline workflows developers can use in practice right away.

Short Bio

Developer Relations

Ellen's a developer advocate at Garden, and also an avid gopher—actively involved with Women Who Go, and responsible for the most comprehensive Go course in Portuguese. They first got acquainted with Kubernetes while writing code for kubectl, in a SIG-CLI internship. They've spoken at conferences like Velocity and GOTO, and at countless local meet-ups. As a point of pride, Ellen has received the 'Best Hair' award at GOTO Copenhagen.

Let's try Fedora Silverblue — an immutable desktop OS!

Developing everything in containers? Then you might be ready for Fedora Silverblue — an immutable desktop OS built for container workflows! Silverblue is built on top of rpm-ostree providing atomic upgrades, easy rollbacks, and even installing individual packages when necessary. Come for a quick overview covering the basics of rpm-ostree, Flatpak (containerized graphical application), and the overall experience of using a container-oriented desktop.

Short Bio

Software Engineer

Open source enthusiast. Software Engineer with Red Hat working on Fedora. Every working day is different, but most of my activities tend to be in the Fedora community, focusing on advocacy and innovations of the Linux distribution. This includes looking at ways how to make the build infrastructure more effective, exploring ways how we can define and manage different lifecycles within the distribution, and also making sure everything is understandable and well documented. I also enjoy automating things with horrible shell scripts, making graphical design, and writing.

Cloud Native: the Business Side

For developers, the benefits of a cloud native approach are quickly clear. However, these advantages are not as readily apparent to people who don’t code - yet those same people usually hold decision making and budgetary power. This talk seeks to explain the what, why, and business benefits of being cloud native without diving into code. Audience members will learn how to explain cloud native technologies to non-coders and give the business case for a cloud native approach at the organizational level.

Short Bio

Kubernetes Success

On his first day of work at his previous company, Bill was told to set up a Kubernetes cluster without knowing how to even pronounce Kubernetes. Many blog posts, youtube videos, and errors later, Bill has successfully been able to explain Kubernetes to even his grandmother. He currently works at Loodse to help anyone, anywhere have a Kubernetes cluster in one click.

Securing Cloud Native Apps on Managed Kubernetes: Deep Dive

Brand new for 2019, this is the workshop to attend if you want to harden your Kubernetes clusters, configure a service mesh, securely deploy internal and external workloads and implement security metrics and observability to catch malicious behaviour in the act. Each attendee will have a GKE cluster and a microservices-based web app deployed into it. Attackers have compromised your app and are mining cryptocurrency on your public cloud bill. Your job is to identify how they got in, get them out and keep them out. You will install and configure a range of native Kubernetes security features and cloud native tools including Istio, OpenTracing, Elasticsearch, Prometheus, Weave Flux and more as we power through this intensive, hands-on workshop.

Short Bio

CTO

Marc is CTO at 4ARMED, an independent technical consultancy helping organisations create, deploy and manage more secure, resilient, cloud native software. He’s been at the pointy end of securing online environments for twenty years and spends most of his time performing application security reviews, training developers and penetration testers and working with companies on secure digital transformations.

Hands-on introduction to Kubernetes

Kubernetes has become the de-facto standard to run you containerized applications in the cloud: over the past years, we have seen a very steep adoption curve and many interesting projects around it. This workshop aims to give an introduction to Kubernetes. We will start by understanding Kubernetes' basics concepts and principles and step by step move to more advanced topics. By the end of this workshop, you will have a grasp on how Kubernetes works under the hood and what you can achieve with it. Also, you will be able to deploy a simple application to Kubernetes and scale it.

Short Bio

Engineering Manager

Andrea Giardini is the Engineering Manager for the SRE team of Camunda GmbH. He’s been fascinated by the DevOps mindset since the early days of the movement and has worked extensively with containers and cloud computing, gaining experience across a wide array of platforms. Before joining Camunda, Andrea worked at CERN in Geneva on a project to detect and manage configuration drifts inside the CERN infrastructure. At Camunda, he’s responsible for the infrastructure that builds and tests open-source projects.

GitOps by courtesy of Jenkins-X

The talk will introduce Jenkins-X basics from an operations point of view. Then it will cover the GitOps methodology and how it is realized by JX. Besides, it will show what other benefits JX brings to a development team by simplifying the setup of new, or importing existing microservice applications to k8s.

Short Bio

Feelance Software Architect

Gerd Aschemann is always working at the verge of development and operations. As a freelance software architect he extends the technology stack of his customers introducing a well-suited architecture with appropriate tools and components. During the last years he has accompanied some Cloud-Native software projects taking care of the transition from developing the software artifacts to running them in production.

Why do we want to introduce DevOps?

Introducing DevOps in a large enterprise is difficult. But wait – why do we want to introduce DevOps in the first place? Good question. I will answer the question in my lightning talk and show you what happens when you introduce DevOps and what did not happen.

Short Bio

Principal Consultant & Partner

Romano Roth is an experienced software consultant and DevOps enthusiast working at Zühlke. He’s passion lies in radically transforming monolithic waterfall IT organizations into scalable agile DevOps teams.

How to run a JupyterHub on Kubernetes

One of the most popular tools among data scientists are Jupyter Notebooks. The open source web application provides an environment to document and execute code, inspect the results and visualize data without leaving the environment. We show, how Docker and kubernetes enable the deployment of a pre-configured data science environment, the so-called JupyterHub. The shared resources of the multi-user version of the notebooks can be managed efficiently by kubernetes. This makes it easy for business analysts and data scientist to access computational environments and resources in the cloud without having to worry about dependency management, installation and maintenance tasks. #kubernetes #jupyterhub #datascience

Short Bio

Data Scientist

Maren works as data scientist at Zoi GmbH. The mathematician is passionate about data science and machine learning in the big data environment. She particularly enjoys working on the containerization of data science workflows.

Distributed Load Testing using Containers

In DellEMC Enterprise Servers Validation Organization, we perform Load testing using different workloads (Web, FTP, Database, Mail, etc.) on Servers to identify the performance of the servers under heavy load. Knowing how DellEMC Enterprise Servers perform under heavy load (% CPU, % Memory, % Network, % Disk) is extremely valuable and critical. This is achieved with the help of a Load Testing Tools. Load testing tools available in market comes with its own challenges like Cost, Learning Curve and Workloads Support. Here in this talk we are going to demonstrate how we have built JAAS (JMeter As A Service) using Containers and opensource tools and how this solution playing a crucial role in Delivering Servers Validation efforts.

Short Bio

Senior Principal Engineer

Automation Technologist at DellEMC Infrastructure Solutions Group, is a Masters in Software Systems from BITS Pilani with a total experience of 13+ years in Leading Product Validation and Automation Development efforts. The domains Vishnu has worked on include Server, Storage and System Management Software. Responsible of Delivering Zeno - Continues Test Automation framework, JAAS(JMeter As A Service), ICEMAN(Information CollEctor Monitor Analyzer) and Process Improvement and Automation Tools. 9 Patents Granted by USPTO and 128 Disclosures recognized by Dell Patent Committee. Presented Technical papers in Pycon(Python developer forum), STeP-IN and Quality Connect 2018 Conferences.

What does the kubelet say?

Etcd goes 'store', kube-proxy goes 'route', API server goes '418', what does the kubelet say? Kubelet is one of the central components in the kubernetes cluster. Most of us are taking it for granted that is would just work and start our containers. CNI handles the networking part, kube-proxy the service part, but kubelet does more than just starting containers. In this talk, I cover kubelet on a high level before deep diving in the belly of the beast and its interfacing with CNI, container runtime and ultimately Linux kernel.

Short Bio

DevOps

His parents committed a grave mistake, and at young age introduced him to Pascal and Logo. Since then he programmed in various languages, from C, C++ to Haskell, Go and Rust. Doing algorithms & data structures competitions since age 12. Distributed systems and kubernetes are his interest areas, as well as watching Marvel action movies. He has passed CKA exam and organizes local distributed systems meetup.

Secure Software on Azure Kubernetes Services

By applying some essential security measures, you can make your Azure Kubernetes Service solution a much harder target for hackers. But how do you do that, while still deploying to production multiple times a day? You can do this by embedding application security into your development process. For example, you model threats your application may face and add countermeasures up front. And inside the delivery pipeline, you monitor your repository for vulnerabilities. But there's more! In this talk I'll show you what you need to know.

Short Bio

Cloud architect

Loek is a Cloud Architect at Xpirit and a Microsoft Azure MVP. He helps companies to make their transition to the Cloud as efficient as possible; from strategy to implementation. As an active member of open source projects, forums and as international speaker, he loves to exchange knowledge with other community members.

Creating a fast Kubernetes Development Workflow

Kubernetes is very powerful in orchestrating where your services are running, but building docker images, writing and updating all the necessary YAML files and applying them to your cluster can still become an annoying maintenance overhead. In this talk you will learn how to create a fast, low friction development workflow with Kubernetes and tools like Telepresence and Forge which enables you to quickly and safely build, test and deploy your services.

Deploying your first Micro-Service application to Kubernetes

Kubernetes is a very powerful container orchestration platform that is quickly gaining traction and gives you lots of benefits in deploying, running and scaling your microservice web application. But it has also a steep learning curve. In this workshop you will deploy your first application which consists of multiple Micro-Services to Kubernetes and learn how you can use Persistant Storage and set upsensible Monitoring and Logging tooling.

Short Bio

Software Engineer

Bastian is a System Engineer at SysEleven, a full-service hosting company, where he focuses on bringing the power Kubernetes to its customers. Before that he was caring about performance, monitoring, web-security and developer productivity at ResearchGate, the social network for researchers and scientists. When he is not developing stuff or looking at graphs, he likes to cycle, do Yoga, go to beer gardens and frequently speaks at international conferences on software architecture, scaling web applications and open standards and protocols.

Managing large scale networks using Salt and Docker

Network automation: there’s more to it than just configuration management - it’s a perfect opportunity for event-driven infrastructure. Numbers speak for themselves: the network has never been that stable before. But this comes with a complexity cost, which is what we’ll analyse in this talk. Cloudflare runs one of the largest and the best connected global networks. Thanks to a variety of advantages, including scalability and flexibility, we chose Salt as the principal tool to manage our network infrastructure. The price paid for these advantages is the management complexity: one Salt Proxy Minion process is required for each network device managed. As our fleet consists on over a thousand network devices (and growing), we therefore need to manage thousands of process, distributed globally. Additionally, the architecture requires one or more Salt Master processes. Due to scalability and redundancy reasons, we have deployed over 100 Salt Masters. Using Docker we have managed to nicely scale this entire conglomerate and prepare the environment for future growth.

Short Bio

Network engineer

Mircea works as network engineer for Cloudflare, spending most of his time writing code for network automation. Sometimes he likes to talk about the stuff he’s working on and how automation really helps to maintain reliable, stable and self-resilient one of the biggest global networks. Previously, he was involved in research and later worked for EPFL in Switzerland and an European service provider based in France. Besides networking, he has a strong passion for radio communications (especially mobile networks), mathematics and physics.

Container Isolation Approaches for Multi-Tenant Container Workloads and Serverless Computing

Container virtualization has become the tool of choice for running isolated applications in cloud environments. Linux-Containers virtualize at the operating system level, with multiple containers running atop the operating system kernel directly. Therefore, threats to one container are potentially threats to many others. Especially for PaaS and Serverless providers, the secure execution of untrusted workloads on their platform in order to mitigate software vulnerabilities from spreading has high priority. Containers face a variety of different threats, vulnerabilities and historical weaknesses that need to be considered and defended against. In this talk we will look at different approaches for securing container workloads. gVisor, Kata Containers, Nabla Containers and Firecracker are presented and compared with each other.

Short Bio

Student

Christian is a master student in computer science. Parallel to his studies, he works as a research assistant at the University of Applied Sciences in Hamburg, specializing in cloud solutions and virtual infrastructures. He is interested in topics like cluster provisioning, (hard-)multitenancy and serverless solutions on Kubernetes. He is also a maintainer for plugins of the CI/CD platform Drone.io and loves Open Source projects, especially if they are written in the programming language Go.

Diversity, actually

What if we decided to solve, once and for all, the problem of underrepresentation of women, gender minorities, people of color, or any other group the same way we handle our problems in production, by identifying the problems and then fixing them?

Short Bio

Senior Software Engineer

Ronna has been a software engineer for the past 15 years, leads the Berlin chapter of Women Who Go and offers free mentorships to women and gender minorities. A happy feminist who advocates that coding is for everyone.

Conflict of generations : Container and Microservices vs. 'Classic'

What to do in integrating classic, monolithic structures with the dynamic demands of a modern, container-based microservices platform? Just get on with it and 'turn a sports car into a steamroller'? Or is there a path to 'peaceful' coexistence? We offer an experience report.

Short Bio

Management Consultant und Consulting Lead

Jan Ole is a management consultant and consulting lead at Cassini Consulting AG. He specializes in the combination of agile and classic Project managment Methods combining them into , hybrid project management, and advises enterprise and SME clients on everything around IT operations. In his most recent project he was responsible for the introduction and integration of a container platform into a classic IT environment.

Moving to Kubernetes: the Bad and the Ugly

Over those past two years we’ve deployed a new platform based on Kubernetes for developing, testing and deploying XING's applications. Today most of our workloads run on this platform but the road sometimes felt a bit bumpy. From misconfiguration, to software bugs in the Kubernetes ecosystem or even Kernel race conditions, we encountered a variety of problems. In this talk we will discuss some of those issues and how we fixed, mitigated or worked around them.

Short Bio

Software Architect

Maxime is a Software Architect in the Back-End Architecture team at Xing. Over the past two years he worked on a project to build a Platform as a Service based on Kubernetes.

Large scale kubernetes on the road

At car2go we are running 50 k8s clusters in different regions using multiple cloud providers. This talk is about the ups and downs, the pains, and gains when providing a seamless kubernetes experience to our developers.

Short Bio

DevOps Engineer

Combined 5 years at car2go, 9 years DevOps, and 11 Linux Administration experience.

Locking down Kubernetes on Azure

Getting Kubernetes up and running on Microsoft Azure can be as easy as a couple of clicks. Preparing the environment for handling highly sensitive workload requires a bit more work. Starting with a fully automated setup of all Azure and Kubernetes components down to restricting communication of system components and workload to the bare minimum. We will show you how to combine different Azure and Kubernetes security features to achieve a setup you can trust with your data.

Short Bio

Cloud Solution Architect

Oliver Lohmann is working as a Cloud Solution Architect at Microsoft. He has 15+ years of professional experience in the industry focusing on software development and consulting. For the last 7 years, Oliver was part of Microsoft’s transformational journey to a Linux-loving Open Source company. Oliver studied at the University of Applied Sciences in Wedel and the University of Canterbury in New Zealand. He has a Diploma in Media Informatics and a Postgraduate Diploma in Computer Security and Forensics.

Locking down Kubernetes on Azure

Getting Kubernetes up and running on Microsoft Azure can be as easy as a couple of clicks. Preparing the environment for handling highly sensitive workload requires a bit more work. Starting with a fully automated setup of all Azure and Kubernetes components down to restricting communication of system components and workload to the bare minimum. We will show you how to combine different Azure and Kubernetes security features to achieve a setup you can trust with your data.

Short Bio

CTO

Darko Krizic is Co-founder and CTO of PRODYNA with 25+ years of experience. He studied Computer Science at the University of Applied Sciences in Frankfurt/Germany. His focus is enterprise wide, large scale software architecture using state-of-the-art technologies and methodologies.

Organizing the YAML mess with Kustomize

Writing and maintaining Kubernetes deployment YAMLs can become quite messy with a growing number of services and environments. This talk will introduce you to Kustomize which is the Kubernetes SIG CLI answer and follows a purely declarative and template-free approach. It works without any in-cluster components and encourages a fork / modify / rebase workflow. With its overlay concept, redundancies between similar service and environment deployments can be drastically reduced.

Short Bio

Software Architect

Florian has a Master of Science in Computer Science from the University of Applied Sciences Darmstadt and 15+ years of experience in professional software development. He is leading the Cloud Initiative at PRODYNA and is actively involved in applying cloud native technologies to solve our customers most demanding IT challenges. He represents PRODYNA at the Cloud Native Computing Foundation and contributes to various open-source projects.

Kubernetes at XING: what it takes to build a coherent development environment

My name is Egor Balyshev, and I am a proud member of the team who built the new platform for XING on top of Kubernetes. In this session I will walk you through the design of our internal PaaS, talk about problems we encountered and solutions we found, reflect on Kubernetes programming interface and provide real examples of making developers' lives easier with automation and closed feedback loops. Keywords: Kubernetes, PaaS, GitHub, Jenkins, Golang, Groovy, custom controllers, Prometheus, CLI, lessons learned.

Short Bio

Software architect

Egor Balyshev has been developing software for 18 years, primarily focusing on web based applications. For the last 4 years he has been working as a software architect at XING, a career-oriented social networking website. His topics of interest include distributed systems, user interfaces and large-scale applications. In his free time he enjoys reading, video editing, cycling, 3D printing and piloting FPV drones.

DevOps stories on adopting the mindset

Finding your place and grasping the idea of DevOps is very much depending on the personal motivation and the environment you work. They do not teach you this in schools or trainings. In this talk, I am going to share my journey. You will see the representation of a story that adopts DevOps as a mindset rather than team structures or tools. The talk will be a story-line that is supported by real-world examples from the experiences of an engineer’s road-map to DevOps.

Short Bio

Site Reliability Engineer

Busra is an enthusiastic Sofware Engineer at trivago in the team called Cloud Operations where she is in the heart of DevOps and SRE. Before that, she worked at Ericsson as a Cloud System Developer. She touches technologies like Docker, Kubernetes, Packer and Terraform in her daily work. Has special love for Python. She loves automating things, solving problems and learning every day. There are a couple of international conferences where she gave talks. She is also an amateur photographer, and blogger.

Knative

This talk gives an overview of Knative and its subcomponents: 'Knative build' brings the build aspect to Kubernetes. It adds an abstraction for building OCI images directly from within a Kubernetes cluster. We will also talk about the follow-up project 'Tekton pipelines'. 'Knative serving' provides primitives for serverless frameworks. It especially knows how to scale-to-zero and is already used in several FaaS frameworks. 'Knative eventing' is an eventing specification for sending CloudEvents, an emerging CNCF standard, from sources to sinks.

Short Bio

Principal Software Engineer

Roland Huß is a software engineer at Red Hat who worked as tech lead on Fuse Online and landed recently in the OCF team for coding on Knative. He has been developing in Java for over twenty years now and found recently another love with Golang. However, he never forgot his roots as a system administrator. Roland is an active open source contributor, lead developer of the JMX-HTTP bridge Jolokia and some popular Java build tools for creating container images and deploying them on Kubernetes and OpenShift. He is also co-author of a "Kubernetes Patterns" book. And he loves chilli pepper.

Knative

This talk gives an overview of Knative and its subcomponents: 'Knative build' brings the build aspect to Kubernetes. It adds an abstraction for building OCI images directly from within a Kubernetes cluster. We will also talk about the follow-up project 'Tekton pipelines'. 'Knative serving' provides primitives for serverless frameworks. It especially knows how to scale-to-zero and is already used in several FaaS frameworks. 'Knative eventing' is an eventing specification for sending CloudEvents, an emerging CNCF standard, from sources to sinks.

Short Bio

Principal Software Engineer

Matthias Wessendorf works on the Messaging team at Red Hat, focusing on event-driven architectures, data-streaming and serverless workloads. He is an active contributor to the Knative project. Matthias is a regular speaker at international conferences and is a long standing member of the Apache Software Foundation.

Short Bio

Vice President

Entrepreneur and innovator in cloud. Founder of Heptio. Co-founded of the Kubernetes project. Original product lead for Google Compute Engine. Created and chaired the Cloud Native Computing Foundation. Working to bring cloud native computing to the enterprise.

5 years of Kubernetes

Kubernetes celebrates 5 years since the commit #1. Ihor Dvoretskyi, Developer Advocate at the Cloud Native Computing Foundation will highlight the most notable achievements of the Kubernetes community, together with the wide Cloud Native ecosystem

Short Bio

Developer Advocate

Ihor Dvoretskyi is a Developer Advocate at Cloud Native Computing Foundation, focused on Kubernetes-related efforts in the open source community. He is a Product Manager for Kubernetes, co-leading the Product Management Special Interest Group, focused on enhancing Kubernetes as an open source product. Besides that, he is participating in Kubernetes release process as a features lead for multiple Kubernetes releases. A Linux user since 2005 with a deep engineering background, Ihor has been responsible for projects tightly bound to the cloud computing space, containerized workloads and Linux systems. His recent speaking appearances include talks at Kubernetes Leadership and Contributors Summits, OpenStack Summits NA and APAC, OpenSource Summit EU, ContainerDays EU, Google DevFests and other industry-leading events.

How to build a time machine?* *And not get sucked into a blackhole.

We all use Git to explore move back and forth in our code history: a deployment goes wrong? just rollback to an earlier commit. In this talk, I am going to show you how to do the same thing with your Kubernetes cluster by applying coding practices to your infrastructure: using git, unit tests, code reviews and pull requests for Kubernetes and your infrastructure.

Short Bio

CEO and co-founder

Khash founded Cloud 66 at the beginning of 2012 when he found himself frustrated by the manual way infrastructure was provisioned and configured. Finding PaaS very expensive and restricted, and scripting languages like Chef overly complex and not suitable for the cloud workloads, he set out to change the way applications are deployed to the cloud. Before starting Cloud 66, Khash worked as a senior architect at Chicago Mercantile Exchange, VP of Fixed Income Division at Lehman Brothers and SunGard Trading and Risk Systems and founded Sentimnt, as social search engine, and worked in various startups in London and San Francisco. As well as his role as the CEO, Khash is responsible for all Cloud 66 products and has deployed and operated 1000+ node Kubernetes clusters.

Short Bio

Software Developer

I am passionate about containers, Go, Docker and Kubernetes. I am interested in distributed systems and love building infrastructure tools. I also love maintaining and managing open source communities and talking about my work at conferences!

Life on the Edge

With Rancher labs release of k3s distribution, there is a new game changer for Edge Computing and Embedded Setups running kubernetes. Does k3s run on raspberry pi? Do you need a lot compute resources? Can it be used of IOT? Michael Vogeler will have a close look at k3s. He will show some insights regarding the management and use cases of k3s.

Short Bio

Head of System Engineering

Michael Vogeler is a Head of System Engineering, technology Nerd working for PlusServer GmbH Hamburg. He is always looking for new exciting technologies regarding the Cloud native World and specialized in DevOps, CI/CD, Kubernetes, Cloud Computing, Infrastructure and more.

Large scale kubernetes on the road

At car2go we are running 50 k8s clusters in different regions using multiple cloud providers. This talk is about the ups and downs, the pains, and gains when providing a seamless kubernetes experience to our developers.

Short Bio

DevOps Engineer

DevOps Engineer who loves music, tech & code with a passion for automation, open source projects and building cloud-native solutions.

# How To Manage Kubernetes Clusters using Cluster-API

For a long time we've managed our infrastructure and Kubernetes clusters using various imperative scripts and tools. The question that often arises is can we manage our clusters the same way we manage our workload? Cluster-API is a Kubernetes SIG-Cluster-Lifecycle project focused on bringing declarative, Kubernetes-style APIs for the most common cluster lifecycle operations—create, destroy, update and repair. In this talk you'll learn what is Cluster-API and how it works. You'll see how you can integrate it in your workflow and build tooling around it, regardless of are you running on one of the most popular cloud providers, or on on-premise or bare-metal.

Short Bio

Software Engineer

Marko is a Software Developer at Loodse and a student at the University of Belgrade. Marko works on Cluster Lifecycle related problems, contributes to the Cluster API project, and maintains the Cluster API provider for DigitalOcean. Marko is also a maintainer of the Kubicorn project, a successful solution for Kubernetes cluster provisioning. In 2018, Marko was a Google Summer of Code student under the CNCF, working on Kubernetes. In his free time, Marko enjoys reading books, writing blog posts about things he works on, and walking out in the evenings.

How AI and Big Data Platform as a Service work together- a showcase

The current industrial environments are mainly not dealing with the potentials AI can bring to those industries. The session will deal with practice examples of the potential usage of AI based technology in the industrial environments. At the beginning we will show how we started in this area and what our main learnings in the beginning were about. We will face issues in the engineering and construction area and go deeper to the methods of how AI can be used to prevent claims and changes and moreover how AI can be used to automate partial engineering tasks along the customer requirements. We will show how our AI technology is able to learn about the historical engineering processes and products and how we integrated those knowledge in the future process and especially the client infrastructure environment.

Short Bio

CEO

Christopher Blaschke is founder, CEO and innovator of the young tech company KENDAXA Group. He is responsible for the technology and its development, as well as for the further development of the AI-based KENDAXA Data Intelligence Platform [KX-DI]. With a background in law, mathematics, and physics, he began work early on developing his own tools and programs, and continues to research artificial intelligence and data science in collaboration with universities and research institutes.

The Workaday World of Docker Captain

This workshop explains the concepts and best practices of containerization of the entire development flow of projects written in different programming languages. Spawn a complete development environment on-demand, running entirely in Docker - a programming language itself, helper tools like debuggers and static analyzers, but also a complete desktop editor running in a web browser, anywhere. See how to efficiently utilize Docker to work on your project and how to prepare it for the orchestration, get the maximum out of possibilities that Dockerfile and docker-compose.yml files give. Learn how to monitor and (remotely) debug your containers, diagnose individual build steps and misbehaving entrypoint, dump the network traffic or even bring up an entire Kali Linux Desktop in your browser and use its tools for analysis.

Short Bio

Software Architect

Łukasz Lach is a software architect at GOG.com (CD Projekt RED), working on games such as Gwent, The Witcher Card Game. He is currently the only Docker Captain in Poland, and additionally - Docker Community Leader in Warsaw and Docker Certified Associate. At the University of Warsaw, he conducts classes with students of the 2nd and 3rd year on the subject of efficient and scalable Internet applications based on Docker. He leads the Docker community in Warsaw, organizes local meetups and workshops.

The Open Service Broker API - Introduction and Lessons Learned

This talk provides an overview on usage of the Open Service Broker API in practice. We show the fundamental concepts how to develop, publish and consume services using a service broker. We report from our experience and present lessons learned based on a real-world project.

Short Bio

Software Engineer

Nico is a Software Engineer at Loodse and currently focused on a yet-to-be-announced new Open Source project, which relies heavily on the Open Service Broker API and helps businesses to offer their applications as managed services accross multiple kubernetes clusters. > In his spare time he is building stuff with 3D printers and produces dust on his DIY CNC router.

The Open Service Broker API - Introduction and Lessons Learned

This talk provides an overview on usage of the Open Service Broker API in practice. We show the fundamental concepts how to develop, publish and consume services using a service broker. We report from our experience and present lessons learned based on a real-world project.

Short Bio

Senior Software Engineer

Tobias Placht is a Senior Software engineer at QAware. His current focus is on Kubernetes, Continuous Delivery and providing the best possible Developer Experience Tobias studied computer science in Munich and has been with QAware since 2016.

Kubevirt 101 - learn the new way to operate VMs

In this session we will talk about what KubeVirt is and how it works under the hood on a Kubernetes platform. KubeVirt is a project that allows users to create and manage virtual machines within a Kubernetes cluster. It helps you to reduce complexity in your infrastructure to manage containers and VMs side by side with a single orchestration tool.

Short Bio

CEO

Sebastian Scheele is the CEO and co-founder of Loodse. With Loodse, he wants to empower IT teams to focus on their core expertise: writing groundbreaking applications. Sebastian is passionate about the potential of container and cloud native technologies and has shared his expertise at various conferences including KubeCon NorthAmerica, KubeCon Europe and ContainerDays Hamburg. Sebastian is a CNCF ambassador and has published several articles on Kubernetes in leading tech media including The New Stack.

Kubevirt 101 - learn the new way to operate VMs

In this session we will talk about what KubeVirt is and how it works under the hood on a Kubernetes platform. KubeVirt is a project that allows users to create and manage virtual machines within a Kubernetes cluster. It helps you to reduce complexity in your infrastructure to manage containers and VMs side by side with a single orchestration tool.

Short Bio

Manager

Fabian Deutsch is working at Red Hat and used to be much more active in the Fedora community as he is today, worked on the oVirt project for a few years, and is now involved in KubeVirt. In the past he had the opportunity to speak at several conferences (KubeCon EU, oVirt workshops, FrOsCon, and devconf.cz).

Using Helm to speed up your engineering and Shift Left

Helm provides excellent application portability and makes a whole new engineering workflow possible that eliminates bottlenecks, saves money, and is enabling teams to become high-velocity engineering machines. See how real companies are using Helm to build software faster with downloadable slides to help you make the business case back at HQ.

Short Bio

Solution Architect

Guy Salton is a Solution Architect specializing in the fields of DevOps, Cloud Computing, Kubernetes, Containers, CI/CD, Web/Mobile Testing, Networking, and Infrastructure. Guy shares his technical knowledge by speaking at conferences and Meetups around the world in addition to publishing DevOps-focused blog posts and delivering online webinars.

Best Practices for the successful usage of the Container Technology

IT priorities are shifting. In the past, consolidation and cost reduction were priorities. Nowadays agility and speed are getting more and more important. To give you one example. In the past you have been developing solutions for a single system. Today it is essential that applications are able to be deployed on multiple platforms. This is one example of why the spread of container technology continues to grow rapidly. Both developers and IT operations departments use containers for different reasons. In this presentation you will learn best practice approaches on how container technology can be used purposefully and profitably in your company.

Short Bio

Sr. Software Engineer

Stefan is working in the tools and release engineering team. He is an early adopter of Docker on Windows, giving feedback and sharing his experience as a Microsoft MVP. He is a maintainer of several Docker related Chocolatey packages. He also is member of the Hypriot team that gives the community a very easy experience for Docker on ARM devices. He is also a member of the Hypriot team, providing the community with a very easy experience for Docker on Raspberry Pi's.

The Open Service Broker API - Introduction and Lessons Learned

This talk provides an overview on usage of the Open Service Broker API in practice. We show the fundamental concepts how to develop, publish and consume services using a service broker. We report from our experience and present lessons learned based on a real-world project.

Short Bio

Senior Cloud Platform Engineer f

Nico works as a Senior Cloud Platform Engineer for DG-i (Dembach Goo Informatik GmbH & Co. KG) in Cologne. He designs and implements cloud platforms based on Kubernetes and OpenShift on private and public clouds, mainly for regulated businesses.

7 Deadly Sins of React

My talk is about some common anti-patterns seen with React. I teach React at an evening coding bootcamp and also work as Lead Front-End developer during my day job. Over the last 2 years, I have taught tens of people how to write applications in React and spotted some mistakes and anti-patterns people often make. These include unnecessary state and props fields, visibility props, non-generic “generic” components, controlled components used in a non-controlled manner, directory location disparity between related components and many others… This talk will summarise my experience and observations dealing and resolving such anti-patterns and what we can do to avoid them.

Short Bio

Developer

Ersel Aker is a full-stack developer based in Manchester, UK. He has been working with FinTech and SaaS startups using Python, Nodejs and React. He is the author of Spotify terminal client library, and contributor to various open source projects. He organizes Microservices Manchester meetup quarterly and teaches JavaScript at a local part-time coding bootcamp.

Two years in production with Kubernetes - an experience report

At Lunar Way we have been running Kubernetes in production for over two years. This presentation will be an experience report describing the ups and downs, but also focusing on where we are headed. We started running Kubernetes in March 2017 to support at that time, 7 microservices. Today we manage around 80 microservices in production. In this presentation, Kasper will also discuss other Cloud Native technologies such as Prometheus and fluent.

Short Bio

Cloud Architect

Kasper holds a Master degree in Computer Technology and worked as an DevOps & Infrastructure Consultant at LEGO prior to working at Lunar Way. Kasper wrote his master thesis, “KubeCloud - A Small Scale Cloud Computing Environment”, on how Universities could leverage small-scale cloud environments built out of Raspberry Pis. Kasper and his fellow master thesis partner wrote about this on kubecloud.io and are still actively blogging about Cloud Native technologies. Kasper is the founder of the “Cloud Native Aarhus” meetup group along with the nordic cloud native community: Cloud Native Nordics. Kasper is further a CNCF Ambassador.

Akka and Kubernetes, the beginning of a beautiful relationship

One of the best features of Akka is Akka Cluster. Akka cluster allows for building distributed applications, where one application or service spans multiple nodes. From its initial release in 2013, Akka Cluster needed a node management system to manage the Akka nodes and to provide a resilient and elastic platform. With Kubernetes Akka finally has the node management system that is has been waiting for. Akka Cluster has been designed to gracefully handle nodes leaving and joining a running cluster while continuing to run. Kubernetes adds and removes nodes as needed to increase capacity or to recover from failures. In effect, there is a perfect symbiosis between Akka Cluster and Kubernetes. In this talk, we will look at and demonstrate how Akka Java Cluster and Kubernetes work together and how together they form a beautiful relationship.

Short Bio

Developer Advocate

Hugh McKee is a developer advocate at Lightbend. He has had a long career building applications that evolved slowly, that inefficiently utilized their infrastructure, and were brittle and prone to failure. That all changed when he started building reactive, asynchronous, actor-based systems. This radically new way of building applications rocked his world. As an added benefit, building application systems became way more fun than it had ever been. Now he is focused on helping others to discover the significant advantages and joys of building responsive, resilient, elastic, message-driven applications.

An introduction to Kubernetes

This talk will cover the most common primitives in Kubernetes from defining a Pod to networking. After the talk, you will know its objects well enough to deploy your application to a Kubernetes cluster with confidence. You will get a solid understanding of the mechanics and components and be equipped with a Kubernetes vocabulary.

Short Bio

Consultant

As a DevOps consultant Henrik regularly works with build servers, Container technologies like Kubernetes, version control, and agile task management systems but also spend a great deal of time working with general organizational, architectural and process related challenges for customers.

Automated Container Security for DevSecOps

Security is often overlooked when organizations move quickly to the cloud. So how do you maintain the speed and flexibility of application delivery and build security into your CI/CD pipeline and operations? Hybrid cloud teams focused on DevOps need to embrace security that integrates into their pipeline and runtime environments making it easier to improve both your security and development speed.

Short Bio

Advisory Technology Consultant – Architect

Markus Schönberger is Advisory Technology Consultant - Architect at Trend Micro. In this position, he focuses on the development of appropriate countermeasures against complex malware and threats penetration attempts by hackers, business spies, and other cyber criminals. The focus of his work is the protection of data centers and virtualization and endpoint security.

Automated Container Security for DevSecOps

Security is often overlooked when organizations move quickly to the cloud. So how do you maintain the speed and flexibility of application delivery and build security into your CI/CD pipeline and operations? Hybrid cloud teams focused on DevOps need to embrace security that integrates into their pipeline and runtime environments making it easier to improve both your security and development speed.

Short Bio

Senior Director Sales

Hannes Steiner is Enterprise Sales Director at Trend Micro since May 2016. In this position he is responsible in Germany for the distribution of key accounts to the Japanese IT security provider. The business economist brings in-depth knowledge of the German enterprise market, the IT enterprise, from the various IT sales and management positions he has held over the course of more than 15 years of his career.

Istio: Control and Observability for Microservices

Istio is a new open platform to connect, manage, and secure micro-services jointly launched by IBM, Google, and Lyft. This session will provide a technical overview of the Istio project and demonstrations of using Istio with microservices and Kubernetes. Istio is a new open platform to connect, manage, and secure micro-services jointly launched by IBM, Google, and Lyft. This session will provide a technical overview of the Istio project and demonstrations of using Istio with microservices and Kubernetes. Specifically: Service mesh - what it is, why, and who is using it Making the deployment more secure (Using istio to get mutual tls authentication between services) Rolling out a new version to 1% of users (Using istio for traffic splitting) Making the deployment more robust (Using istio for circuit breaking and automatic request retries) Controlling the front door (Using Istio-ingressgateway instead of default Kubernetes Ingress)

Short Bio

Software Developer & Dev Advocate

Belinda Vennam is a developer advocate at IBM, with a focus on cloud & serverless. Prior to this role, she was a developer on the IBM Cloud Functions team and a contributor to the open-source Apache OpenWhisk project. Belinda loves to travel, volunteer, and learn and share about what's happening in the cloud.

Deploying to production - a CI guide

Everyone is doing continuous integration today. In this workshop we will explore ways how to deploy applications to production kubernetes clusters using build runners on kubernetes and kaniko as well as practices to implement deployments into your pipelines.

Short Bio

Cloud and Kubernetes Expert

Chris is constantly challenging himself by trying to juggle the busy life of consulting next to training people how to do it themselves. Some things he is doing: Helping companies use cloud and understand the ideas behind DevOps, training people on AWS, Google Cloud and Kubernetes, maintaining the Kubernetes kops project, assembling Kubernetes releases and organising conferences like FrOSCon.

State of Containers in Big Data and Big Compute

This session will show what makes big data and big computing facilities different from traditional containerized environments and why that hinders container adoption. After highlighting the problems Christian will discuss how the lack of easy data and hardware access can be overcome and how the delicacies of kernel and user-land drivers are addressable using the OCI image specification and CI/CD showcasing tensorflow workloads.

Short Bio

Technical Account Manager

With a 10y journey rooted in the HPC parts of the german automotive industry, Christian started to support CAE applications and VR installations. When told at a conference that HPC can not learn anything from the emerging Cloud and BigData companies, he became curious and was leading the containerization effort of the cloud-stack at Playstation Now. Christian joined Docker Inc in 2017 to help push the adoption forward and be part of the innovation instead of an external bystander.During the day he helps Docker customers in the EMEA region to fully utilize the power of containers; at night he likes to explore new emerging trends by containerizing them first and seek application in the nebulous world of DevOps.

DITTO - Hybrid IAM for microservices architecture

How is your organization protecting users and data in a microservice setting? For authorization, the microservices community has typically adopted the API Gateway pattern. In contrast, a fully distributed approach has been recently growing through Open Policy Agent (OPA) which places access control rules storage and enforcement in front of each individual service. In this talk, we want to introduce Ditto, an open source IAM system developed at real.digital, that sits in between API Gateways and OPA. We will showcase Ditto's attributes and how it has been designed to shine in a microservice architecture. Finally, we will show how you can integrate it into your services with examples of integrations with Kubernetes and Istio.

Short Bio

Software Engineer

Ph.D. João Oliveira has been focusing on distributed systems design, architecture, and implementation for the past 10+ years, since the start of his academic career in Brazil. After landing in Germany, he now tackles a transformational moment at real.digital, a successful e-commerce platform. João is leading the team that researches, sets standards, creates tooling, and supports other teams during the company shift towards a microservices world.

DITTO - Hybrid IAM for microservices architecture

How is your organization protecting users and data in a microservice setting? For authorization, the microservices community has typically adopted the API Gateway pattern. In contrast, a fully distributed approach has been recently growing through Open Policy Agent (OPA) which places access control rules storage and enforcement in front of each individual service. In this talk, we want to introduce Ditto, an open source IAM system developed at real.digital, that sits in between API Gateways and OPA. We will showcase Ditto's attributes and how it has been designed to shine in a microservice architecture. Finally, we will show how you can integrate it into your services with examples of integrations with Kubernetes and Istio.

Short Bio

Software Engineer

Joschka is a Software Engineer and recent Co-founder of the startup Mooncamp based in Cologne. He previously worked for real.digital, a successful e-commerce company, where he was responsible for supporting the companies growth by shifting the organization's tech architecture to microservices. Joschka is fascinated by cloud technologies and complex engineering problems.

Explore Kubernetes Network Plugins Using a Desk-based Bare metal Cluster

Kubernetes is a highly extensible framework, where each of the cluster services can be customized depending on the use case. The extensibility also comes from the standardization of interfaces for various infrastructure components like compute/runtime, network or storage using the CRI, CNI, CSI etc., To get a clear understanding or to make a comparative study of various available options is only possible by trying each. To try these options, we require a multi-node cluster or more than one cluster. The platforms such as Raspberry-Pi, LePotato presents itself a viable option to build such multi-node home grown clusters as Kubernetes can be easily compiled and deployed on ARM architectures. In this talk, Harshvardhan Karn and Sumit Lalwani will present the usage of Raspberry-Pi, LePotato to evaluate the different CNI options like calico, flannel, cilium.

Short Bio

Software Engineer - Developer

I work at MayaData Inc. The company responsible for building MayaOnline, a SaaS Platform, and OpenEBS, an open source storage platform that provides persistent and containerized block storage. Currently working on MayaOnline, and couple of OpenSource software like Litmus.

Explore Kubernetes Network Plugins Using a Desk-based Bare metal Cluster

Kubernetes is a highly extensible framework, where each of the cluster services can be customized depending on the use case. The extensibility also comes from the standardization of interfaces for various infrastructure components like compute/runtime, network or storage using the CRI, CNI, CSI etc., To get a clear understanding or to make a comparative study of various available options is only possible by trying each. To try these options, we require a multi-node cluster or more than one cluster. The platforms such as Raspberry-Pi, LePotato presents itself a viable option to build such multi-node home grown clusters as Kubernetes can be easily compiled and deployed on ARM architectures. In this talk, Harshvardhan Karn and Sumit Lalwani will present the usage of Raspberry-Pi, LePotato to evaluate the different CNI options like calico, flannel, cilium.

Short Bio

Software Engineer

Sumit is a software engineer at MayaData working on MayaOnline (SaaS platform) which provides visibility and controls for the operation of OpenEBS based stateful workloads on Kubernetes. He is passionate about opensource. He loves to code.

Kubernetes and AWS Lambda can play nicely together

Vendor lock-in is a major worry for many engineers . A new innovative approach, will for the first time, allow open-source serverless to run on AWS Lambda or Kubernetes using the same deployment artifact, packaged using the tools we love: containers. Worried about vendor lock-in with serverless computing, but enjoy the scale, price and simplicity of AWS Lambda? OpenFaaS is an open-source function as a service (FaaS) platform on the CNCF serverless landscape. With OpenFaaS you can package anything as a serverless function and deploy to Kubernetes using containers. Due to UNIX-like primitives in the core architecture, it was possible to extend the system to run functions on both Kubernetes and AWS Lambda depending on user preference. The core components of OpenFaaS still run on Kubernetes but the functions are deployed and invoked on AWS Lambda In this talk we explain how the provider model in OpenFaaS separates the control plane from the function execution plane. The live demonstration deploys a function to Kubernetes using kubectl, then invokes the deployed function via Kubernetes on AWS Lambda

Short Bio

Platform Architect

Edward is a member of the OpenFaaS core contributor team. Edward has spent the last year experimenting with ways to enable open-source serverless to leverage the economic benefits of cloud vendor services such as AWS Lambda and container as a service platforms like AWS Fargate. Professionally Edward is the Platform Architect at payments fintech Form3, leading the development of a novel distributed payment system allowing connectivity, payment processing, clearing and settlement services for a wide range of regulated financial institutions, including leading banks and fintechs.

The Silence of the Lambs: Promoting and Inspecting Source Code and Binaries, in Continuous Delivery

This session discusses concepts and integrates latest DevOps enabler tools to inspect source code and its packaged binaries as part of a holistic Continuous Delivery pipelines. The comprehensive, interactive live demo is derived from couple of real-world success stories. Often real-world success stories, interactive, practical demos, and integrations of state-of-the-art tools are missing to underpin Continuous Delivery concepts. Also reality-checks are often missing since presentations usually promote textbook approaches. This session fills the gap. After setting the stage with some few slides, this session delivers lot of tips and tricks while going through a holistic live demo to bring a new change from a Git push to the Cloud.

Short Bio

Principal DevOps Engineer

Michael supports enterprises in implementing Continuous Delivery, DevOps and/or SCM/ALM. He has written a couple of books including 'DevOps for Developers', 2012, and 'Agile ALM', 2011. He was recognized to be Oracle Java Champion in 2006, Oracle Developer Champion in 2017, Jenkins Ambassador in 2018, and Oracle Groundbreaker Ambassador in 2018. Besides his project support, workshops, and trainings, Michael writes and presents about his unique approach, regularly, see below. More information: http://huettermann.net.

Kubernetes Pod: deep dive

The latest container orchestrators have finally driven us to think for abstraction without worrying about the underlying concrete implementation: until we're talking about containers we know the 'black magic' behind the hood (namespaces, cgroups, overlayfs). Even the container approach helped the world to leverage applications delivery it has become obsolete (sic) since the newest cloud-native architectures require complex patterns such as Ambassador, Configurator, Adapter and much more. People assume that a Pod is just a container, often: obviously this is not true... and by the way, who knows what is a Pod exactly, how is made of, and how Kubernetes orchestrates it? The goal of this talk is to provide a low-level description of what a Pod is and how Kubernetes help us to work with this kind of resource in order to approach container patterns, demonstrating with a live coding demo how to build a simple Pod in order to understand the Kubernetes internals that provides this computational resources abstractions.

Short Bio

Cloud DevOps Engineer

Former full stack web developer, switched to the dark side of DevOps practicing over Microsoft Azure and Amazon Web Services, automating everything to build and design scalable cloud-native infrastructures.