2.0 -//Pentabarf//Schedule//EN PUBLISH DTLE89@@cfp.cloud-native.rejekts.io -DTLE89 Day 1 - Registration + Reception en en 20190518T090000 20190518T094500 0.04500

Day 1 - Registration + Reception

PUBLIC CONFIRMED Opening https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/DTLE89/ Main Hall TBA PUBLISH CPJPCG@@cfp.cloud-native.rejekts.io -CPJPCG Cloud Native Rejekts Opening en en 20190518T094500 20190518T095500 0.01000

Cloud Native Rejekts Opening

PUBLIC CONFIRMED Opening https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/CPJPCG/ Main Hall Chris Kuehl PUBLISH VBYM33@@cfp.cloud-native.rejekts.io -VBYM33 Using BPF to debug your Kubernetes application en en 20190518T100000 20190518T103000 0.03000

Using BPF to debug your Kubernetes application

BPF tools for tracing your Linux system is an area with a lot of developments. This has happened in the bcc project and in bpftrace project. Until recently, bcc and bpftrace were designed to trace one Linux system. This is changing with kubectl-trace, a tool adapting bpftrace for the Kubernetes workflow. I’ll present how to use kubectl-trace to trace a Kubernetes pod. I will also present new tools based on bcc to trace syscalls or files opened by a specific pod. Finally, I will explain how it works and what support it requires from the Kubernetes installation. Slides: https://tinyurl.com/rejekts-bpf-kubernetes PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/VBYM33/ Main Hall Alban Crequy PUBLISH MKZDRL@@cfp.cloud-native.rejekts.io -MKZDRL Building flexible policy with OPA and Kubernetes en en 20190518T104000 20190518T111000 0.03000

Building flexible policy with OPA and Kubernetes

Every organization has rules, whether it be that each resource needs to be labelled a specific way or to only use images from specific container repositories. Some of these rules or policies are essential to meet governance or legal requirements and may be based on learning from past experiences. In this session we introduce, how you can audit, validate and mutate Kubernetes resources based custom semantic rules during create, update, and delete operations without recompiling or reconfiguring the Kubernetes API server. These policies are all backed by the Open Policy Agent (OPA), which is a lightweight, general-purpose policy engine for cloud-native environments. We will also demonstrate the work that is being done in the upstream community and provide working samples to start your journey building scalable policy on Kubernetes. Open Source Repository - https://github.com/open-policy-agent/gatekeeper PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/MKZDRL/ Main Hall Rita Zhang Max Smythe PUBLISH XT9PEB@@cfp.cloud-native.rejekts.io -XT9PEB Evaluating Firecracker as a container runtime engine en en 20190518T113500 20190518T120500 0.03000

Evaluating Firecracker as a container runtime engine

Firecracker, an open-source project published by Amazon, opens up a lot of interesting perspective to the container ecosystem. It opens up use cases between containers and VMs, making use of KVM without relying on heavyweight Qemu instances. Its integration with the Kubernetes ecosystem has only started its first step with containerd. Obviously it’s a good starting point. However, it's also time to think about how we should get the new shape of containers integrated with all other high-level container runtimes. In this talk, I would like to talk about alternative ways of integration for getting Firecracker integrated with multiple container runtimes. A proof-of-concept implementation will be also presented during the talk. From the side of Firecracker, its integration with the Kubernetes ecosystem has only started its first steps, only with containerd & Kata containers. For the diversity of Kubernetes ecosystem, however, we should also think about how we should get Firecracker integrated with all other high-level container runtimes in the cloud-native ecosystem. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/XT9PEB/ Main Hall Dongsu Park PUBLISH GRK7DW@@cfp.cloud-native.rejekts.io -GRK7DW Prometheus as exposition format for eBPF programs en en 20190518T121500 20190518T124500 0.03000

Prometheus as exposition format for eBPF programs

Nowadays every application exposes their metrics via an HTTP endpoint readable by using Prometheus. Recently the exposition format got included into the OpenMetrics standard of the CNCF. Nevertheless, this very common pattern by definition only expose metrics regarding the specific applications being observed. This talk wants to expose the idea, and a reference implementation, of a slightly different use case that uses **eBPF** programs as a source of information to allow the exposition and collection of kernel and application probes via a **Prometheus** endpoint. After having showed the architecture of the proposed reference implementation - a Kubernetes operator with a custom resource for BPF programs - we'll demo the entire solution to grab and present some metrics without having touched any application running on the demo cluster. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/GRK7DW/ Main Hall Leonardo Di Donato PUBLISH BTN3CX@@cfp.cloud-native.rejekts.io -BTN3CX Lunch en en 20190518T125000 20190518T142000 1.03000

Lunch

PUBLIC CONFIRMED Break https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/BTN3CX/ Main Hall TBA PUBLISH LH3PPX@@cfp.cloud-native.rejekts.io -LH3PPX Highly Effective Kubernetes Deployments with GitOps en en 20190518T142000 20190518T145000 0.03000

Highly Effective Kubernetes Deployments with GitOps

Over the last year, I’ve had the privilege of working with a number of development teams as they modernize workloads, make them cloud native, and move them to Kubernetes. In this talk, I’ll talk about how many are converging on a GitOps workflow to make their Kubernetes deployments secure, auditable, and simpler and describe the end to end process and tooling you can use to achieve this. This is a practical cloud neutral talk and you’ll walk away with tools and techniques you can apply to your own Kubernetes deployments. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/LH3PPX/ Main Hall Edaena Salinas PUBLISH VNXFFH@@cfp.cloud-native.rejekts.io -VNXFFH Building a CI pipeline for Kubernetes distributions on the cheap en en 20190518T150000 20190518T153000 0.03000

Building a CI pipeline for Kubernetes distributions on the cheap

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/VNXFFH/ Main Hall Kosy Anyanwu PUBLISH HVZJJ7@@cfp.cloud-native.rejekts.io -HVZJJ7 Observing Enterprise Kubernetes Clusters At Scale en en 20190518T154000 20190518T161000 0.03000

Observing Enterprise Kubernetes Clusters At Scale

Giant Swarm operates Kubernetes clusters for enterprise, offering a control plane for Kubernetes as a product, and 24/7 support for any managed Kubernetes clusters. As part of this offering, a high degree of observability and monitoring is necessary to respond to and debug operational issues. In this talk, we will present the learnings from our observability journey to the community, with a focus on how we’ve progressed with Prometheus. This will detail our path to our current usage of Prometheus, our current architecture and drawbacks, and our plans for the future. As part of this discussion, we’ll cover our architectural choices for monitoring our Kubernetes management platform, before moving onto our current setup and areas we’d like to improve. Towards how we’d like to improve, we’ll go into our plans to horizontally scale our Prometheus setup, as well as integrate with Cortex. We will also dive into our use of post mortems and continuous delivery to provide continuous improvement. This will touch on some related aspects, such as how our alerting has evolved over time, and how we have implemented new Prometheus exporters to improve the observability of Kubernetes, such as through exposing network and DNS metrics. Our main aim with this talk is to present how we’re managing observability in a holistic sense. We also believe that the community would be enriched by our learnings, as they can see which decisions we made have had positive outcomes (and which ones haven’t!). PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/HVZJJ7/ Main Hall Joe Salisbury PUBLISH VNVWCU@@cfp.cloud-native.rejekts.io -VNVWCU Artifact Registries; Extending OCI Image and Distribution en en 20190518T163500 20190518T170500 0.03000

Artifact Registries; Extending OCI Image and Distribution

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/VNVWCU/ Main Hall Steve Lasker PUBLISH C7HJP8@@cfp.cloud-native.rejekts.io -C7HJP8 Deep Dive: Deploying Kubernetes on Bare Metal Using the Cluster API en en 20190518T171500 20190518T174500 0.03000

Deep Dive: Deploying Kubernetes on Bare Metal Using the Cluster API

Today, the Cluster API project has provider implementations for a variety of cloud environments. Users are interested in using the Cluster API to operate clusters in heterogeneous bare metal environments. While machine provisioning varies widely across these environments, software provisioning remains largely the same. Because of this commonality, the cost of maintaining a separate provider for each environment outweighs the benefits. Attendees will learn how a single Cluster API provider can be used to operate clusters across different bare metal environments. We will show how to implement a webhook to provision machines in a bare metal environment, and how to integrate it with the Cluster API provider. We will also explain in depth the challenges of deploying Kubernetes in a uniform way across different environments using existing tooling (e.g. kubeadm). PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/C7HJP8/ Main Hall David Watson & Jason DeTiberus PUBLISH 88DYSP@@cfp.cloud-native.rejekts.io -88DYSP Lessons learned while scaling Kubernetes to 5k nodes en en 20190518T175500 20190518T182500 0.03000

Lessons learned while scaling Kubernetes to 5k nodes

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/88DYSP/ Main Hall Thomas Graf PUBLISH VTTMJ9@@cfp.cloud-native.rejekts.io -VTTMJ9 Day 2 - Registration and Reception en en 20190519T090000 20190519T100000 1.00000

Day 2 - Registration and Reception

PUBLIC CONFIRMED Opening https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/VTTMJ9/ Main Hall TBA PUBLISH QGAV7J@@cfp.cloud-native.rejekts.io -QGAV7J Getting Developers to Adopt Your Service en en 20190519T100000 20190519T103000 0.03000

Getting Developers to Adopt Your Service

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/QGAV7J/ Main Hall Jessica Andersson PUBLISH NUPMTF@@cfp.cloud-native.rejekts.io -NUPMTF The App Developer's Kubernetes Toolbox en en 20190519T104000 20190519T111000 0.03000

The App Developer's Kubernetes Toolbox

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/NUPMTF/ Main Hall Adnan Abdulhussein PUBLISH KMUEGQ@@cfp.cloud-native.rejekts.io -KMUEGQ Knowing what your Kubernetes cluster is doing en en 20190519T113500 20190519T120500 0.03000

Knowing what your Kubernetes cluster is doing

This talk builds on and extends two other talks from previous KubeCon events: - Reveal Your Deepest Kubernetes Metrics (KubeCon 2018 Europe) - Monitor The World Meaningful Metrics for Kubernetes Applications and Clusters (KubeCon 2018 NA) It will start where the other talks end and show real world examples of using metrics from kube-state-metrics for the higher abstraction level Kubernetes objects in combination with other exporters such as aws-limits and log files to get insights into the Kubernetes cluster we are running internally for other development teams at Meltwater. By running Kubernetes in production for over a year we have learnt (sometimes the hard way) to focus on the overall state of the cluster without loosing the possibility to dig into specific details as well as knowing about the state of the cloud environment the cluster runs in. The hard way gave us learnings on which metrics we were lacking and which ones were not needed. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/KMUEGQ/ Main Hall Federico Hernandez PUBLISH 7YSFAF@@cfp.cloud-native.rejekts.io -7YSFAF Hardware vulnerabilities in cloud-native environments en en 20190519T121500 20190519T124500 0.03000

Hardware vulnerabilities in cloud-native environments

The talk aims to raise awareness as well as spread in-depth understanding of the impact CPU information disclosure flaws have on Kubernetes and its workloads. Our motivation is to educate our audience to empower folks to be able able to judge by themselves whether their workloads are secure, and to provide options and mitigations should workloads be at risk. Knowledge from this session will help the community to better understand this new vulnerability class, and to maintain security in Kubernetes deployments. The talk will roughly follow the path of our blog post on the impact of hardware security vulnerabilities in cloud-native environments: https://kinvolk.io/blog/2019/03/hardware-vulnerabilities-in-cloud-native-environments/ . PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/7YSFAF/ Main Hall Thilo Fromm PUBLISH PTN7FW@@cfp.cloud-native.rejekts.io -PTN7FW Lunch en en 20190519T125000 20190519T142000 1.03000

Lunch

PUBLIC CONFIRMED Break https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/PTN7FW/ Main Hall TBA PUBLISH ZW8MXF@@cfp.cloud-native.rejekts.io -ZW8MXF Kubernetes Operators en en 20190519T142000 20190519T145000 0.03000

Kubernetes Operators

The Operator pattern for custom Kubernetes controllers extends the platform to automate the management of stateful, complex applications -- think databases, file stores, and other critical components that often have their own notions of clustering. Operators provide a philosophy and a toolkit for extending Kubernetes orchestration to this class of application, as well as, recursively, mechanisms for managing the lifecycle of the Kubernetes platform itself. This talk, a freestyle rap based on a rejected Kubecon proposal, will examine and demo Kubernetes Operators and make you want to use Operators and write one for your own application. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/ZW8MXF/ Main Hall Josh Wood PUBLISH RNVGKN@@cfp.cloud-native.rejekts.io -RNVGKN Visualizing Canary Rollouts with Istio and Helm en en 20190519T150000 20190519T153000 0.03000

Visualizing Canary Rollouts with Istio and Helm

The secret sauce uses a little-known feature of Helm to create arrays of Kubernetes stacks and Codefresh to manage custom health-checks and keeping the rollouts synchronized. You don't want to miss this very visual and interactive talk. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/RNVGKN/ Main Hall Dan Garfield PUBLISH 9LP3TL@@cfp.cloud-native.rejekts.io -9LP3TL Preemptive Autoscaling on any Cloud en en 20190519T154000 20190519T161000 0.03000

Preemptive Autoscaling on any Cloud

Cluster autoscalers automatically adjust the number of nodes in your cluster without operator intervention. Scaling up is important to meet resource demand while scaling down is useful for cost savings when nodes are underutilized. Within the Kubernetes ecosystem, there are various methods for achieving autoscaling. We’ll do a deep dive into Cerebral, an open source, provider agnostic, preemptive autoscaler with pluggable metrics backends and autoscaling engines. We’ll demo how to use it with a standard backend such as Prometheus, as well as explore use cases for custom backends: scaling based on a growing application queue, for example. This methodology will be contrasted with others such as the Kubernetes Cluster Autoscaler. The audience will also leave with an understanding of different scaling strategies: random, least waste, cost-optimized, and so on. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/9LP3TL/ Main Hall Matt Kelly Ashley Schuett PUBLISH GMZRW7@@cfp.cloud-native.rejekts.io -GMZRW7 Always up-to-date - Dissecting A Kubernetes Upgrade en en 20190519T163500 20190519T170500 0.03000

Always up-to-date - Dissecting A Kubernetes Upgrade

Giant Swarm manages cloud infrastructure for enterprises. It means we are in charge of providing Kubernetes clusters to our customers, as well as managing them so they are always running and up to date. Since Cloud Native environments are composed of a mixture of different components, people usually struggle to have everything up to date. In order to make it safe and robust, we have created a versioned system where all components of the platform are tracked under a bundle. It brings some benefits like immutability and testability. A bundle is made of a list of components like the VM, underlying operative system, the Kubernetes release, container runtime, load balancers, VPC peerings, DNS server, etc. Every component defines the version and the changelog since the last occurrence. Behind the curtain, a control plane in the form of a Kubernetes cluster holds a system of interconnected operators in charge of ensuring the desired state of the tenant clusters. A custom resource holds the entire configuration of the clusters including the version bundle. Every time there is a component(s) released we create a new bundle. After it is tested, it is promoted to the end user who can trigger the upgrade in her existing clusters. As this approach is similar to upstream cluster API efforts, we believe that the community can benefit from our learnings after two years of building and running this architecture. The audience will see which decisions we made, and why using Kubernetes to manage Kubernetes clusters is a great approach in order to keep the clusters up to date in such a dynamic environment. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/GMZRW7/ Main Hall Fernando RIpoll PUBLISH ZJKBJX@@cfp.cloud-native.rejekts.io -ZJKBJX OpenMetrics: Prometheus Unbound en en 20190519T171500 20190519T172000 0.00500

OpenMetrics: Prometheus Unbound

Nowadays every application exposes their **metrics** via an HTTP endpoint readable by using **Prometheus**. Recently the **exposition format** got included into the **OpenMetrics standard** of the **CNCF**. But why a standardization process was needed and is good? And what are the **novelties** and **differences** OpenMetrics introduces? This lightning talk will answer those questions while presenting the upcoming OpenMetrics official standard. PUBLIC CONFIRMED Lightning talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/ZJKBJX/ Main Hall Leonardo Di Donato PUBLISH M3QJJY@@cfp.cloud-native.rejekts.io -M3QJJY Which service mesh should I use? en en 20190519T173000 20190519T173500 0.00500

Which service mesh should I use?

PUBLIC CONFIRMED Lightning talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/M3QJJY/ Main Hall Lee Calcote PUBLISH SFTA7W@@cfp.cloud-native.rejekts.io -SFTA7W Zero downtime upgrades of Kubernetes en en 20190519T174000 20190519T174500 0.00500

Zero downtime upgrades of Kubernetes

The team at Meltwater develops and provides Kubernetes as a Service in a multi-tenant setup internally for 40+ development teams. The base cluster is deployed with Kops and then enhanced with add-ons by the team. During our first "kops rolling-update" runs we have experienced nodes going into "Not ready". Mainly do to bug #48638/#41916 and the way nodes reach the masters through DNS round-robin. Though our way of doing the upgrade was "triggered" by kops, we think the process and its steps, in particular the way we monitor the upgrade itself and the API functionality during the upgrade, could be interesting and applied to any Kubernetes instance. PUBLIC CONFIRMED Lightning talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/SFTA7W/ Main Hall Simone Sciarrati PUBLISH ZKNBXH@@cfp.cloud-native.rejekts.io -ZKNBXH Build Cloud Native Application Bundles with Porter en en 20190519T175500 20190519T182500 0.03000

Build Cloud Native Application Bundles with Porter

When we deploy to the cloud, most of us aren't dealing with just a single cloud provider or even deployment tool. It seems like even the simplest of applications today need a load balancer, SSL certificates, persistent file storage, DNS, and somewhere in there is your application. That is a lot to figure out! The Cloud Native Application Bundles specification was created to help address that problem, helping you manage everything in a single package and focus on what you know best: your application. [Porter](https://porter.sh) is a tool that delivers an easy to use, declarative approach to building these bundles. Porter helps you build bundles without needing to be a CNAB expert. Come learn how Porter makes it easier to manage cloud native applications in the messy imperfect hybrid cloud world that we live in. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/ZKNBXH/ Main Hall Carolyn Van Slyck Jeremy Rickard PUBLISH LEQHTE@@cfp.cloud-native.rejekts.io -LEQHTE Monitoring the NATS messaging system at scale with Elastic Beats en en 20190519T113500 20190519T120500 0.03000

Monitoring the NATS messaging system at scale with Elastic Beats

In this session we plan to cover the whole process of turning an internal requirement into a very meaningful integration between a CNCF incubating project (NATS) and a CNCF silver member’s project (Elastic Beats). First part of the session is going to be about the problem we had to solve. As a team working on Kubernetes microservices, we are using NATS as a messaging queue to ensure the resiliency of the critical paths. Furthermore, we rely on EFK to monitor our stack. Consequently, monitoring of NATS had to be achieved through EFK stack as well. In the second part of the session we will describe how we came up with the solution, trying to motivate the audience to follow the same successful path when facing similar situations. After investigating our available options, we noticed that Beats project, the Elastic data shipper, could fit in our case if NATS monitoring was supported. And here comes the motivational part. Those days, during an organized hackathon we grabbed the opportunity to work into creating our own NATS Beat which was later added to the official list of community Beats. Today, after Beats maintainers’ request, NATS has its own module in the core of Beats project. Final part of the session will be dedicated on how to actually use Beats for shipping monitoring data of a running NATS server to an Elasticsearch instance. The audience will have the opportunity to realize the value of NATS module and the benefit of putting effort in community projects. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/LEQHTE/ Sidebar MICHAEL KATSOULIS Stamatis Katsaounis PUBLISH MWPDUY@@cfp.cloud-native.rejekts.io -MWPDUY Test Driven Development Is Dead en en 20190519T121500 20190519T124500 0.03000

Test Driven Development Is Dead

In this session we'll uncover why both Unit Testing and Integration Testing as a practice doesn't actually help engineers or operations understand how their applications run in production nor does it help them sleep at night when PagerDuty goes off at 3am. We'll discuss how modern software delivery organizations are leveraging advances in monitoring and logging systems to analyze the behavior of their production systems in near real time and uncover the mysticism surrounding observability. We'll smash the ban hammer on those bits of code which should never be tested and show real world examples of tooling such as Opentracing and Prometheus that enable organizations to focus on what matters: is my production application working like it should. Ultimately, sufficiently advanced monitoring is indistinguishable from testing and in this talk I'll prove it. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/MWPDUY/ Sidebar Kevin Crawley PUBLISH W3VULB@@cfp.cloud-native.rejekts.io -W3VULB Moving the CNI to User Space en en 20190519T142000 20190519T145000 0.03000

Moving the CNI to User Space

Existing container networking solutions rely on Linux Kernel networking (using iptables, eBPF, Open vSwitch etc.) . This constrains both performance and flexibility. User-Space networking offers better performance (especially when combined with technologies such as vector-based forwarding such as d.io VPP) and enables new features to be developed and deployed without requiring changes to the Linux kernel. Contiv-VPP is a CNI plugin for Kubernetes that leverages fd.io VPP and which provides a full implementation of Kubernetes network policy and of Kubernetes services (usually implemented by kube-proxy, which programs Linux kernel netfilter rules). We will provide a detailed description, and live demos of Contiv-VPP, and will discuss the challenges we encountered in our implementation. Finally we will show how user space networking enables Cloud-native Network Functions such as firewalls and VPN gateways. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/W3VULB/ Sidebar Giles Heron PUBLISH XFNRUH@@cfp.cloud-native.rejekts.io -XFNRUH Consistent user authentication in multi-cloud hosted Kubernetes clusters en en 20190519T150000 20190519T153000 0.03000

Consistent user authentication in multi-cloud hosted Kubernetes clusters

During this talk I will show how a reverse proxy in front of the Kubernetes API can implement uniform OIDC authentication across hosted Kubernetes solutions. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-eu-2019/talk/XFNRUH/ Sidebar Christian Simon