2.0 -//Pentabarf//Schedule//EN PUBLISH MRPMHL@@cfp.cloud-native.rejekts.io -MRPMHL Why Is CI still Doing Your Promotions? en en 20251108T101000 20251108T104000 0.03000

Why Is CI still Doing Your Promotions?

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/MRPMHL/ Crystal Dining Room Nitish Kumar Faeka Ansari PUBLISH ZCZSMW@@cfp.cloud-native.rejekts.io -ZCZSMW The Paranoid's Guide to Deploying Skynet's Interns en en 20251108T111000 20251108T114000 0.03000

The Paranoid's Guide to Deploying Skynet's Interns

While we're all racing to build the next generation of intelligent applications, we're bolting them onto deployment architectures that treat them like any other legacy system or worse, blindly deploying them without a plan. This is a mistake, and it's going to get weird. You will leave this session understanding why segmentation of components by trust level isn't just a good idea, but absolutely vital. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/ZCZSMW/ Crystal Dining Room Dan Fernandez PUBLISH PHPK7Y@@cfp.cloud-native.rejekts.io -PHPK7Y How to Use an AI Assistant with Your Monitoring System en en 20251108T114500 20251108T121500 0.03000

How to Use an AI Assistant with Your Monitoring System

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/PHPK7Y/ Crystal Dining Room Mathias Palmersheim PUBLISH YQGRTY@@cfp.cloud-native.rejekts.io -YQGRTY Building Trust in Every Artifact with SBOMs en en 20251108T140000 20251108T143000 0.03000

Building Trust in Every Artifact with SBOMs

The talk will provide clear, actionable guidance for integrating SBOMs into real-world pipelines using cloud-native tooling, specifically cosign, kyverno, kubewarden. As the cloud-native ecosystem continues to mature, supply chain security is becoming a critical concern - not just for security teams, but for developers and platform engineers as well. By sharing practical techniques for generating, storing, and validating SBOMs, we would like to: - Help teams improve the security and transparency of their build and release processes - Encourage adoption of open standards like SPDX, CycloneDX, and in-toto - Stressing why Trivy has become a standard for vulnerability scanning in cloud-native environments. - Highlight the value of OCI-native approaches to artifact metadata, promoting registry-driven workflows - Build an understanding of how DevOps and DevSecOps teams can respond more quickly and confidently to emerging threats - Empower organizations to meet growing compliance demands without slowing down software delivery SBOMs are a very powerful tool that is emerging but not fully used by development teams. We want to help expand their usage. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/YQGRTY/ Crystal Dining Room Nigel Douglas Esteban Garcia PUBLISH BSVWYC@@cfp.cloud-native.rejekts.io -BSVWYC Expanding Your Toolbox: Beginners Guide to Controlling Kubernetes Logs en en 20251108T143500 20251108T150500 0.03000

Expanding Your Toolbox: Beginners Guide to Controlling Kubernetes Logs

This talk includes a 15-minute live demo showcasing key integration phases: 1. Deploying a real workload: Start with a Kubernetes cluster running a real application (a CMS) that generates log data. 2. Installing a telemetry pipeline: Deploy a telemetry pipeline to the cluster to begin streaming logs from all containers. 3. Streaming to an output: Route collected logs to an external destination for analysis or storage. 4. Optimizing log volume: Refine the pipeline to filter out noisy or unnecessary logs—reducing telemetry costs and improving signal-to-noise ratio. 5. Filtering logs: Enrich logs with metadata, isolate error-level telemetry, and ensure only the necessary logs (e.g., error logs from the CMS) are exported securely from the cluster. Demo source: gitlab.com/o11y-workshops/logs-control-easy-install PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/BSVWYC/ Crystal Dining Room Eric D. Schabell PUBLISH 3JKGF7@@cfp.cloud-native.rejekts.io -3JKGF7 VM-Class Secure, Millisecond-Fast Cloud-Native Apps With Hyperlight + Nanvix en en 20251108T151000 20251108T154000 0.03000

VM-Class Secure, Millisecond-Fast Cloud-Native Apps With Hyperlight + Nanvix

'Benefits to the ecosystem' section of our KubeCon submission: The integration of Hyperlight and Nanvix brings significant benefits to the cloud-native ecosystem by enabling applications to run with strong isolation in a virtualized sandbox environment, while simultaneously enhancing performance and workload density. This combination leverages the lightweight, Rust-based microkernel architecture of Nanvix and the fast, open-source VMM capabilities of Hyperlight, a CNCF project, to reduce cold start times and maintain language-level compatibility. Notably, Hyperlight+Nanvix can boot up apps in tens of milliseconds, providing rapid responsiveness for cloud-native services. Currently, Hyperlight+Nanvix supports popular programming languages such as Rust, Python, and Wasm, facilitating the acceleration of cloud-native deployments. Future plans include expanding support to additional languages like JavaScript and Go, as well as deeper integration with Kubernetes. This architecture not only improves resource efficiency but also unlocks new possibilities for container isolation through containerd shims, making it a versatile and forward-looking solution for modern cloud-native applications. Attendees of this talk will walk away with concrete insights and architectural guidance on how to speed up their cloud-native applications with Hyperlight+Nanvix. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/3JKGF7/ Crystal Dining Room Danilo (Dan) Chiarlone Pedro Henrique Penna PUBLISH GUBJVM@@cfp.cloud-native.rejekts.io -GUBJVM Beyond the Default Scheduler: Navigating GPU Multitenancy in the AI Era en en 20251108T160000 20251108T163000 0.03000

Beyond the Default Scheduler: Navigating GPU Multitenancy in the AI Era

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/GUBJVM/ Crystal Dining Room Shivay Lamba Hrittik Roy Saiyam Pathak PUBLISH VN9YBE@@cfp.cloud-native.rejekts.io -VN9YBE Welcome to Cloud Native Rejekts NA 2025! en en 20251108T093000 20251108T094000 0.01000

Welcome to Cloud Native Rejekts NA 2025!

PUBLIC CONFIRMED Opening/Sponsor Keynote Speech https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/VN9YBE/ Theater Ralph Squillace Jaiveer Katariya PUBLISH MEJ3TC@@cfp.cloud-native.rejekts.io -MEJ3TC Catch Me If You Can: A Kubernetes Escape Story en en 20251108T094000 20251108T101000 0.03000

Catch Me If You Can: A Kubernetes Escape Story

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/MEJ3TC/ Theater Jed Salazar James Petersen PUBLISH 8LRE7M@@cfp.cloud-native.rejekts.io -8LRE7M Migrating Bloomberg's Internal Private Cloud From NGINX to the World of Istio en en 20251108T101000 20251108T104000 0.03000

Migrating Bloomberg's Internal Private Cloud From NGINX to the World of Istio

Migrating from a traditional ingress controller in a live environment with thousands of internal users can be challenging — but it doesn’t have to be. In this session, we’ll share our journey transitioning from NGINX to Istio as an ingress solution for Bloomberg's internal private cloud platform that is provided to the firm's engineers as a managed service for application deployment. We’ll discuss what motivated the change, the architectural and operational adjustments we made, the challenges we faced during the migration, and the benefits we achieved post-deployment. Attendees will gain practical insights and best practices for adopting Istio in production environments, including how to plan and execute a migration with minimal disruption -- while unlocking new capabilities. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/8LRE7M/ Theater Kavya Elchuri Sahil Thandra PUBLISH QKCFNE@@cfp.cloud-native.rejekts.io -QKCFNE Ease The Move From DevOps to MLOps: A Case For ModelSpec + KitOps en en 20251108T111000 20251108T114000 0.03000

Ease The Move From DevOps to MLOps: A Case For ModelSpec + KitOps

- Understand MLOps Challenges: Learn to identify the key operational hurdles in deploying and managing AI/ML models. - Discover a New Solution: Get introduced to ModelSpec and KitOps, a practical framework for streamlining MLOps. - Apply DevOps Principles to AI: Find out how to use familiar cloud-native concepts to manage AI workloads efficiently. - Improve Team Collaboration: Learn how to bridge the gap between your data science and operations teams with a unified workflow. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/QKCFNE/ Theater Ram Iyengar PUBLISH X3LUL3@@cfp.cloud-native.rejekts.io -X3LUL3 Make your Developer's Pains go Away, with the Right Level of Abstraction for your Platform en en 20251108T114500 20251108T121500 0.03000

Make your Developer's Pains go Away, with the Right Level of Abstraction for your Platform

Many platform teams build Internal Developer Platforms (IDPs) to make developers’ lives easier. But the wrong abstraction choices often have the opposite effect: developers get stuck wrestling with endless YAML files, manually navigating security checklists, and troubleshooting infrastructure instead of writing code. In this session, we’ll share a proven approach to avoiding that trap — choosing the right level of abstraction for your Kubernetes-based platform. Using the open source tools Score and Kro, we’ll walk through a live demo showing how to fully automate complex infrastructure and security requirements behind the scenes, so developers never have to think about them. You’ll learn how to: - Minimize cognitive load and boost the “developer joy” factor. - Combine GitOps workflows with platform automation for smooth deployments. - Enable production-grade deployments with minimal developer effort. The goal: platforms that teams actually want to use — because they solve real problems instead of creating new ones. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/X3LUL3/ Theater Artem Lajko Mathieu Benoit PUBLISH EBZREM@@cfp.cloud-native.rejekts.io -EBZREM Building Kubernetes AI Agents at Scale: Generating Synthetic Training Data for Autonomous Operation en en 20251108T140000 20251108T143000 0.03000

Building Kubernetes AI Agents at Scale: Generating Synthetic Training Data for Autonomous Operation

The modern AI industry is evolving at a break-neck pace; as new techniques and models become available, the rapid (re)-training of AI agents is critical for companies to remain competitive. Moreover, doing this training in a cost-effective manner provides these companies with a longer runway to get their products to market. Lastly, while AI agents trained to manage Kubernetes can often solve simple problems on small clusters, they have thus far have failed to work in large, general-purpose clusters like those seen in many companies’ production infrastructure. In this talk, users will learn how they can build a custom, personalized set of training data for AI Kubernetes agents, based on a relatively small amount of initial data. This capability will enable them to stay competitive in a rapidly-changing ecosystem, while keeping costs under control. We will also provide users with an easy-to-use “sandbox” training environment where agents can interact with the Kubernetes API and observe the effects of these interactions on the training data. This work was done in collaboration with a team of researchers at Harvey Mudd College, and will additionally benefit the ecosystem by facilitating the flow of knowledge from the academic community into industry. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/EBZREM/ Theater David Morrison PUBLISH X3YHRS@@cfp.cloud-native.rejekts.io -X3YHRS Brewed for Scale: How Homebrew Virtualized macOS DevOps with Kubernetes en en 20251108T143500 20251108T150500 0.03000

Brewed for Scale: How Homebrew Virtualized macOS DevOps with Kubernetes

Since 2019, Homebrew has used a macOS native orchestration and CI solution that brought scalability, virtualization, resource flexibility, and workload customization to its cloud environment. When you have the intensive demand Homebrew does from downloading upstream source code and building binary packages to support multiple versions of macOS across both Intel and Apple Silicon architecture, the ability to scale and customize is critical. This work benefits the entire macOS ecosystem, as faster CI cycles mean quicker delivery of up-to-date software to millions of Homebrew users. Optimized infrastructure gives contributors and maintainers of the project the power to iterate with confidence, regardless of their local development setup. By sharing these strategies, we aim to inspire other projects facing similar macOS CI challenges to adopt their own sustainable, scalable best practices. This presentation will appeal to a variety of audiences including platform engineers, CI/CD architects, SREs, and FOSS maintainers who are interested in reproducible builds, improving or scaling macOS CI workloads, or designing pipelines that fit the needs of a high-volume, fast-paced open source project. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/X3YHRS/ Theater Rin Oliver Brandon Valentine PUBLISH 8JVWUX@@cfp.cloud-native.rejekts.io -8JVWUX In-SPIRE-ing Identity: Using SPIRE for verifiable container isolation en en 20251108T151000 20251108T154000 0.03000

In-SPIRE-ing Identity: Using SPIRE for verifiable container isolation

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/8JVWUX/ Theater Marina Moore PUBLISH H7EYBC@@cfp.cloud-native.rejekts.io -H7EYBC Managing Millions of Storage Volumes at Scale: Inside DigitalOcean's ArgoCD Strategy en en 20251108T160000 20251108T163000 0.03000

Managing Millions of Storage Volumes at Scale: Inside DigitalOcean's ArgoCD Strategy

This talk gives the community a real-world end user story, large-scale example of GitOps in action using ArgoCD to manage complex, stateful workloads. By sharing lessons learned from operating across 13+ regions, we’ll show how CNCF open source tools can handle high-stakes infrastructure without compromising velocity or safety, through the lens of how DigitalOcean’s Storage Platform, StorK8s, powers millions of volumes globally. DigitalOcean has been running storage platform AKA StorK8s for the past 10+ years, and in this talk storage team senior engineer Nikhil and dev advocate Yash will share learnings with hands on practical patterns, deployment strategies, and tooling ideas on GitHub that attendees can apply to their own environments, helping push GitOps adoption forward across the open source and CNCF ecosystem. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/H7EYBC/ Theater Yash Sharma Nikhil Pathak PUBLISH YPWVLM@@cfp.cloud-native.rejekts.io -YPWVLM Truly Portable Code: Serverless WebAssembly in a Distributed World en en 20251108T163500 20251108T170500 0.03000

Truly Portable Code: Serverless WebAssembly in a Distributed World

What if you could build serverless applications that cold-start in under a millisecond, run anywhere—from your laptop to Kubernetes to the edge—and require no changes to move between environments? This talk introduces Spin, a CNCF open-source WebAssembly (Wasm) developer toolkit designed for performance, portability, and simplicity. Attendees will learn how to build a Spin app, write polyglot WebAssembly functions with sub-millisecond cold starts, and run them locally using the Spin CLI. The same app will then be deployed to Azure Kubernetes Service with SpinKube, the open-source Spin runtime for Kubernetes, and to Fermyon Wasm Functions, Akamai’s multi-tenant, globally distributed PaaS — all without rewriting or cross-compilation. The talk shows how WebAssembly and Spin enable true portability across the compute continuum, letting developers build once and run anywhere with no vendor lock-in. This talk demonstrates how Spin is reshaping what serverless can be. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/YPWVLM/ Theater Caleb Schoepp PUBLISH M3TVS3@@cfp.cloud-native.rejekts.io -M3TVS3 Beyond YAML: Building Platform APIs with kro en en 20251108T171000 20251108T171500 0.00500

Beyond YAML: Building Platform APIs with kro

If you’re a platform engineer, DevOps practitioner, or Kubernetes enthusiast who’s tired of juggling endless YAML files, this lightning talk is for you. We’ll explore how Kube Resource Orchestrator (kro) turns complex deployments into clean, reusable Platform APIs that app teams can use without touching low-level manifests. In just 5 minutes, you’ll learn what kro is, how it works, and why it might be the missing abstraction in your platform engineering toolkit. PUBLIC CONFIRMED Lightning Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/M3TVS3/ Theater Engin Diri PUBLISH 3FQ7NM@@cfp.cloud-native.rejekts.io -3FQ7NM The Dragonfly 5-Minute Formula for Speedy Container Delivery en en 20251108T171500 20251108T172000 0.00500

The Dragonfly 5-Minute Formula for Speedy Container Delivery

PUBLIC CONFIRMED Lightning Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/3FQ7NM/ Theater Aditya Soni Hrittik Roy PUBLISH 9RUPBC@@cfp.cloud-native.rejekts.io -9RUPBC From Messy to Modular: Fixing Multi-Tenant Ingress with Gateway API's XListenerSet en en 20251108T172000 20251108T172500 0.00500

From Messy to Modular: Fixing Multi-Tenant Ingress with Gateway API's XListenerSet

Managing Ingress in multi-tenant Kubernetes clusters is complex and error-prone, especially when teams need to share ports or protocols. The new XListenerSet extension in Gateway API provides a clean way to delegate listener configuration safely. In this talk, I’ll present a real-world use case where XListenerSet resolved conflicts and improved isolation between teams. PUBLIC CONFIRMED Lightning Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/9RUPBC/ Theater Mengin Nicolas PUBLISH PQWWSW@@cfp.cloud-native.rejekts.io -PQWWSW More Lightning Talks - Signup sheet at registration en en 20251108T172500 20251108T181500 0.05000

More Lightning Talks - Signup sheet at registration

PUBLIC CONFIRMED More Lightning Talks - Sign up sheet at registration (limited slots available) https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/PQWWSW/ Theater PUBLISH VS7TPL@@cfp.cloud-native.rejekts.io -VS7TPL Closing Keynote en en 20251108T181500 20251108T182000 0.00500

Closing Keynote

PUBLIC CONFIRMED Lightning Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atlanta-2025/talk/VS7TPL/ Theater Duffie Cooley