2.0 -//Pentabarf//Schedule//EN PUBLISH VLUR7J@@cfp.cloud-native.rejekts.io -VLUR7J Virtual Rejekts Kickoff: India en en 20200401T070000 20200401T071000 0.01000

Virtual Rejekts Kickoff: India

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/VLUR7J/ Track 1 (UTC) Sayan Chowdhury Prakash Mishra PUBLISH ZKQ8MA@@cfp.cloud-native.rejekts.io -ZKQ8MA Connecting Applications with Operator-backed Services en en 20200401T071000 20200401T074000 0.03000

Connecting Applications with Operator-backed Services

Cloud-Native Environments like Kubernetes comes with its challenges for binding applications. A service backed by a Kubernetes operator, for example, PostgreSQL instance and a shiny front-end Node.js application...Wouldn't it be really fancy if we could just express the intent to bind to any backing service without actually doing the configuration heavy lifting? In this talk, we will review how to enable developers to connect their applications with operator-backed services, such as databases, without having to perform manual intervention (secrets, configmaps, etc.). It thereby provides an intuitive approach for the developers to connect their application to an operator backed service. In a nutshell, improved developer experience. Together with this talk, we would be running through a live demo, to show application and service binding in action, using our open-source Kubernetes Operator, service-binding-operator. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ZKQ8MA/ Track 1 (UTC) Avni Sharma Igor Sutton PUBLISH TKHL3W@@cfp.cloud-native.rejekts.io -TKHL3W Elastic cloud bursting with Virtual Kubelet and KIP en en 20200401T074500 20200401T081500 0.03000

Elastic cloud bursting with Virtual Kubelet and KIP

Tired of hand curating pet worker nodes on each cloud provider? Worried about underutilization of compute on your kubernetes clusters? Wonder if your control plane can ship pods to a different cloud provider? This talk introduces a brand new open source provider for virtual kubelet called KIP (Kubernetes Cloud Instance Provider). KIP enables Kubernetes control plane to consume cloud agnostic right sized cost optimized compute instance for your Kubernetes pods without having to manually curate and maintain cloud vendor specific pet worker nodes. Cloud bursting demo included! PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/TKHL3W/ Track 1 (UTC) Madhuri Yechuri PUBLISH Q3GJZX@@cfp.cloud-native.rejekts.io -Q3GJZX Using OpenEBS successfully for remote working and to reduce costs en en 20200401T082000 20200401T085000 0.03000

Using OpenEBS successfully for remote working and to reduce costs

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/Q3GJZX/ Track 1 (UTC) Uma Mukkara PUBLISH YGVZBZ@@cfp.cloud-native.rejekts.io -YGVZBZ Handover: India to Berlin en en 20200401T085000 20200401T090000 0.01000

Handover: India to Berlin

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/YGVZBZ/ Track 1 (UTC) Ellen Körbes Bill Mulligan PUBLISH 8SDMXM@@cfp.cloud-native.rejekts.io -8SDMXM metal-stack - kubernetes on bare metal en en 20200401T090000 20200401T093000 0.03000

metal-stack - kubernetes on bare metal

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/8SDMXM/ Track 1 (UTC) Markus Fensterer Gerrit Schwerthelm PUBLISH JKU7PC@@cfp.cloud-native.rejekts.io -JKU7PC Inspektor Gadget and traceloop: BPF debugging tools for Kubernetes en en 20200401T093500 20200401T100500 0.03000

Inspektor Gadget and traceloop: BPF debugging tools for Kubernetes

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/JKU7PC/ Track 1 (UTC) Alban Crequy PUBLISH ELRRKL@@cfp.cloud-native.rejekts.io -ELRRKL Virtual K8s: Application Fleet Management at Scale en en 20200401T101000 20200401T104000 0.03000

Virtual K8s: Application Fleet Management at Scale

The Edge ecosystem spans across all verticals such as Retail, Manufacturing, Industrial, Robotics, etc. As more organizations begin to move to edge deployments in the number of 1000s using Cloud Native technologies, there are clear deployment, lifecycle management, and operational challenges. This talk will focus on architectural & technology principles of managing large scale kubernetes application deployments for globally scaled applications. We will use our experience with a large retail customer development used to validate the approach. The solution uses standard k8s APIs, defines new concepts on fleet management leveraging standard techniques for replications controlled by annotations and CRDs. The learning will benefit both project owners and operators of large scale systems, with a focus on growing existing projects to take into these approaches. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ELRRKL/ Track 1 (UTC) Jakub Pavlik PUBLISH GXQEPP@@cfp.cloud-native.rejekts.io -GXQEPP Istio as a monolith. Why sometimes consolidation is a good thing and what does it mean for the users. en en 20200401T104500 20200401T110000 0.01500

Istio as a monolith. Why sometimes consolidation is a good thing and what does it mean for the users.

Istio moving to a single binary is a great opportunity to talk about differences between a "monolith" and a "single binary microservice". Explain why monolith isn't always a bad thing. On top of that - this moves solves one of the most common "disadvantage" of Istio so I will also explain what does it mean for the users and how does Istio future could look like. PUBLIC CONFIRMED Short Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/GXQEPP/ Track 1 (UTC) Dawid Ziolkowski PUBLISH MT8JWT@@cfp.cloud-native.rejekts.io -MT8JWT Handover: Berlin to Amsterdam en en 20200401T110000 20200401T111000 0.01000

Handover: Berlin to Amsterdam

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/MT8JWT/ Track 1 (UTC) Alessandro Vozza Lian Li PUBLISH WDTTHP@@cfp.cloud-native.rejekts.io -WDTTHP How to beat an existential crisis by becoming Cloud Native. en en 20200401T111000 20200401T114000 0.03000

How to beat an existential crisis by becoming Cloud Native.

This talk is based on our O'Reilly book - Cloud Native Transformation https://www.amazon.com/Cloud-Native-Transformation-Practical-Innovation/dp/1492048909 Patterns from the book can be found here: https://www.cnpatterns.org/ An important mental model that shows the scope of the story is Cloud Native Maturity Matrix: https://info.container-solutions.com/cloud-maturity-matrix PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/WDTTHP/ Track 1 (UTC) Pini Reznik PUBLISH XDGMZR@@cfp.cloud-native.rejekts.io -XDGMZR Kubernetes The Fun Way en en 20200401T114500 20200401T121500 0.03000

Kubernetes The Fun Way

Each of the case studies is accompanied by a demo, lessons learned and videos/gifs which are supposed to look fun: - Running a Kubernetes cluster on Arm64 single board computers in my living room and creating a ceph pool managed by Rook using USB Flash Drives just to run a Wordpress blog; - Building a Kubernetes operator for drones, attaching worker nodes to the drones, and launching them in the air; - Using a mobile app to trigger vm shutdowns in order to test the resilience of "cloud-native" applications; - The fourth one is still under development and will be about creating your own Kubernetes as a Service using Typhoon K8s. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/XDGMZR/ Track 1 (UTC) Dan Acristinii PUBLISH RKPBZ8@@cfp.cloud-native.rejekts.io -RKPBZ8 Platform Endgame - Kube CF en en 20200401T122000 20200401T125000 0.03000

Platform Endgame - Kube CF

We understand that Cloud Foundry and Kubernetes overlap in a few aspects, but we strongly believe that they don't need to compete. In our view, they are complementary projects, that can serve a wider range of use cases when deployed together. As mentioned before, both projects have large communities, and with this project we're looking to have them collaborate and come up with solutions that benefit real customers. Kube CF is not just an idea. Both SUSE and IBM have product offerings that deliver this solution to customers. We also consider this to be an amazing use-case for Kubernetes. Cloud Foundry is a complex piece of software, and having it run reliably on Kubernetes has been a great effort, which resulted in us implementing native operators with controllers that bridge the gap. A project like this drives innovation. The operators we've built offer building blocks that can be reused in other contexts: rolling updates with automated canaries and recovery, support for re-usable errands, job output persistence, secret generation, automated reaction on configuration change, support for service routing to active/passive services and configuration discovery and linking. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/RKPBZ8/ Track 1 (UTC) Vlad Iovanov Mario Manno PUBLISH BDP8YE@@cfp.cloud-native.rejekts.io -BDP8YE Yes, we need a new dashboard! en en 20200401T125500 20200401T131000 0.01500

Yes, we need a new dashboard!

PUBLIC CONFIRMED Short Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/BDP8YE/ Track 1 (UTC) Joaquim Rocha PUBLISH NH7CJH@@cfp.cloud-native.rejekts.io -NH7CJH Handover: Amsterdam to London en en 20200401T131000 20200401T132000 0.01000

Handover: Amsterdam to London

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/NH7CJH/ Track 1 (UTC) Charlotte Godley Mark Coleman PUBLISH CKPRTM@@cfp.cloud-native.rejekts.io -CKPRTM How to Train your Red Team (for Cloud Native) en en 20200401T132000 20200401T135000 0.03000

How to Train your Red Team (for Cloud Native)

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/CKPRTM/ Track 1 (UTC) Andrew Martin PUBLISH 8TNRXT@@cfp.cloud-native.rejekts.io -8TNRXT Attack of the mutant tags! en en 20200401T135500 20200401T142500 0.03000

Attack of the mutant tags!

In this talk we will start explaining the meaning of tag mutation, and how you can end up running the same tag but different images in different environments if you don’t take care. Then we will focus and make a demo on some race-condition problems with Kubernetes that can lead to security problems, allowing an attacker to bypass an image scan triggered by admission controller. We will share our experience with Harbor registry, and how lack of knowledge on the internals of the Docker registry and how the API works can lead to misassumptions leading to destruction or corruption of data. For example, in Harbor UI a user can remove an image by tag, but the underlying Docker registry API delete manifest endpoint (https://docs.docker.com/registry/spec/api/#deleting-an-image deletes by digest). So, deleting a tag will result in the deletion of all the tags pointing to the same manifest. Also, users might wonder why the garbage collection is releasing very little space and ignore the fact that due to CA IDs, manifests are preserved in the registry when a tag is mutated. This prevents the old tag layers from being reclaimed by the GC. Finally, we will see how registries usually allow enabling immutability as a feature and open a debate about tag mutability: should tags be always mutable? Always immutable? Should we use regular expressions? Which approach is the best? Join this session to find out. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/8TNRXT/ Track 1 (UTC) Álvaro Iradier PUBLISH ZBCDWF@@cfp.cloud-native.rejekts.io -ZBCDWF Calico Networking with eBPF en en 20200401T143000 20200401T150000 0.03000

Calico Networking with eBPF

Sometimes referred to as the Linux kernel’s “super power”, eBPF allows you to write mini programs that can be attached to various low-level hooks and executed inside the Linux kernel, for a wide variety of uses including networking, security, and tracing. You’ll see a lot of non-networking projects leveraging eBPF, but for Calico our focus is on networking, and in particular, pushing the networking capabilities of the latest Linux kernel’s to the limit while maintaining Calico’s reputation for simplicity, reliability and scalability. In this talk you will learn the basics of how eBPF works, how it can be leveraged for networking, and what the benefits (and drawbacks) are for users interested in switching from Linux’s standard networking pipeline to Calico’s new eBPF optimized dataplane. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ZBCDWF/ Track 1 (UTC) Shaun Crampton PUBLISH SL8PYQ@@cfp.cloud-native.rejekts.io -SL8PYQ Handover: London to New York en en 20200401T150000 20200401T151000 0.01000

Handover: London to New York

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/SL8PYQ/ Track 1 (UTC) Stephen Augustus Jonathan Gold PUBLISH TDRNTS@@cfp.cloud-native.rejekts.io -TDRNTS Using k8s, Bare Metal, & 5G to achieve autonomous drone delivery! en en 20200401T151000 20200401T154000 0.03000

Using k8s, Bare Metal, & 5G to achieve autonomous drone delivery!

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/TDRNTS/ Track 1 (UTC) Cody Hill PUBLISH NFECW8@@cfp.cloud-native.rejekts.io -NFECW8 What We’ve Learned Building a Multi-Region DBaaS on Kubernetes en en 20200401T154500 20200401T161500 0.03000

What We’ve Learned Building a Multi-Region DBaaS on Kubernetes

We are presenting a unique case study from a Kubernetes user. We will be sharing our team's experience using kubernetes to build a multiregion database as a service. Unique aspects include (a) running a stateful service across multiple regions, (b) heavily using the k8s API to build automation on top of k8s, and (c) offering a service that dynamically allocates k8s clusters on public cloud providers. In particular, (a) could help inform the design of future k8s multiregion networking/federation capabilities. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/NFECW8/ Track 1 (UTC) Carlo Salomon Ruiz Josh Imhoff PUBLISH ZJG8CL@@cfp.cloud-native.rejekts.io -ZJG8CL The need for a Cloud Native Tunnel en en 20200401T162000 20200401T165000 0.03000

The need for a Cloud Native Tunnel

This talk is different from the one at San Diego, which introduced a problem around IPv4 addresses running out, and some of the ways tunnels could help us gain IPs again. The recording at San Diego also got corrupted and was lost. This talk provides an overview of the problem and gives developers and ITOps a new, essential tool for their tool belt. I'll also be giving examples of real-world case-studies and customer interest and adoption. https://github.com/inlets/ https://blog.alexellis.io/https-inlets-local-endpoints/ PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ZJG8CL/ Track 1 (UTC) Alex Ellis, Founder @ OpenFaaS Ltd, CNCF Ambassador PUBLISH DJHL3Y@@cfp.cloud-native.rejekts.io -DJHL3Y Handover: New York to Boulder en en 20200401T165000 20200401T170000 0.01000

Handover: New York to Boulder

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/DJHL3Y/ Track 1 (UTC) Chris Kuehl Kim McMahon PUBLISH LNCSKT@@cfp.cloud-native.rejekts.io -LNCSKT Kubernetes Ingress-Nginx Security from Beginner to Expert en en 20200401T170000 20200401T173000 0.03000

Kubernetes Ingress-Nginx Security from Beginner to Expert

This presentation will cover: - Explaining what ingress is and how it works - How to configure the ingress controller - How to enhance ingress security (Basic Auth, Mutual Auth, WAF, etc.) - How to troubleshoot errors with the ingress controller PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/LNCSKT/ Track 1 (UTC) Fernando Diaz PUBLISH T9W3A9@@cfp.cloud-native.rejekts.io -T9W3A9 Observable Applications Using OpenTelemetry en en 20200401T173500 20200401T180500 0.03000

Observable Applications Using OpenTelemetry

Following are the key topics covered in the talk: - Tracing vs. traditional monitoring and logging - Distributed tracing: what makes it great and why it is hard - Introduction to OpenTelemetry - A look into some of the OpenTelemetry libraries (most likely Go and Python) - Demo: making a distributed application observable using OpenTelemetry - Context propagation: what makes it tricky and how it is handled in the OpenTelemetry implementation PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/T9W3A9/ Track 1 (UTC) Johannes Liebermann PUBLISH 38GQVE@@cfp.cloud-native.rejekts.io -38GQVE The Easy Button to Kubernetes Networking with Open vSwitch en en 20200401T181000 20200401T182500 0.01500

The Easy Button to Kubernetes Networking with Open vSwitch

PUBLIC CONFIRMED Short Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/38GQVE/ Track 1 (UTC) Antonin Bas PUBLISH V8KREC@@cfp.cloud-native.rejekts.io -V8KREC Watching the Watcher: Advanced Integrated Monitoring with Prometheus Federation en en 20200401T183000 20200401T190000 0.03000

Watching the Watcher: Advanced Integrated Monitoring with Prometheus Federation

This talk is meant for individuals who are exploring new ways to use cloud native technologies and want to know more about components which are becoming ubiquitous, like Prometheus. Attendees will learn what Prometheus offers as a time-series data store, as well as what it does not offer. After the basics of Prometheus are addressed, the talk will go into the anatomy of a Prometheus installation covering architecture and hardware requirements. Next, the talk will cover Prometheus as a component in a distributed application in a production environment, where there may be other instances of Prometheus running. As a result, attendees will learn how to install and configure a standalone Prometheus as part of a larger distributed application with basic security and redundancy so that it can recover quickly in the event of a catastrophic outage. Next, attendees will learn how to link (federate) the standalone instance of Prometheus with the instance of Prometheus that is deployed with the Linkerd service mesh. Finally, the session will discuss alternatives to Prometheus federation using the CNCF project Cortex. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/V8KREC/ Track 1 (UTC) Charles Pretzer PUBLISH 9339QZ@@cfp.cloud-native.rejekts.io -9339QZ Handover: Boulder to Seattle en en 20200401T190000 20200401T191000 0.01000

Handover: Boulder to Seattle

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/9339QZ/ Track 1 (UTC) Matt Baldwin Kaslin Fields PUBLISH ULC7KL@@cfp.cloud-native.rejekts.io -ULC7KL Making the Business Case for DevOps en en 20200401T191000 20200401T194000 0.03000

Making the Business Case for DevOps

We'll provide tools to calculate cost savings and investment for investments into DevOps including personnel, CI/CD, monitoring, and more. Everyone cares about DevOps when features can't be delivered or services fail. We'll show you how to avoid the pitfalls of reactive DevOps in 2020. Then, instead of painful retrospectives about the investment that should have been made, you can celebrate what a good job you've done. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ULC7KL/ Track 1 (UTC) Dan Garfield PUBLISH MY7CVR@@cfp.cloud-native.rejekts.io -MY7CVR Secure Shell Access Without SSH en en 20200401T194500 20200401T201500 0.03000

Secure Shell Access Without SSH

SSH is a staple of server management. As simple as it is it comes with lots of complications. Open ports, users management, authorized_keys, and bastions are just some of the things you need to consider. What if there were an easier way? What if you didn't need to open port 22 and you didn't need VPN access? What about auditing shell sessions and current connections? AWS Systems Manager Session Manager has managed to have the worst product name in the cloud, but it also may be the most useful for securing access to your infrastructure. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/MY7CVR/ Track 1 (UTC) Justin Garrison PUBLISH TWB333@@cfp.cloud-native.rejekts.io -TWB333 Cluster API Deep Dive en en 20200401T202000 20200401T205000 0.03000

Cluster API Deep Dive

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/TWB333/ Track 1 (UTC) Vince Prignano Cecile Robert-Michon PUBLISH CN3CTC@@cfp.cloud-native.rejekts.io -CN3CTC Handover: Seattle to San Francisco en en 20200401T205000 20200401T210000 0.01000

Handover: Seattle to San Francisco

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/CN3CTC/ Track 1 (UTC) Katy Farmer Tasha Drew PUBLISH NDUMDV@@cfp.cloud-native.rejekts.io -NDUMDV Discover and Secure your APIs in Minutes en en 20200401T210000 20200401T213000 0.03000

Discover and Secure your APIs in Minutes

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/NDUMDV/ Track 1 (UTC) Madhukar Nayakbomman PUBLISH ZPSXZU@@cfp.cloud-native.rejekts.io -ZPSXZU Noverlay Networks for Health and Wellbeing en en 20200401T213500 20200401T220500 0.03000

Noverlay Networks for Health and Wellbeing

- How many load balancers does it take to replace a pod? - How do these interplay with pods connectivity approaches? Can there be optimizations? - Is it possible to optimize routing (or addressing) by zone or topology across various abstractions, or does each successive abstraction get in the way of others? We'll compare some of the options for these, and contrast with the lessons from network history books. PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/ZPSXZU/ Track 1 (UTC) Karthik Prabhakar PUBLISH 7CGL3P@@cfp.cloud-native.rejekts.io -7CGL3P Kubernetes Native Policy Management with Kyverno! en en 20200401T221000 20200401T224000 0.03000

Kubernetes Native Policy Management with Kyverno!

PUBLIC CONFIRMED Talk https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/7CGL3P/ Track 1 (UTC) Jim Bugwadia Shuting Zhao PUBLISH XUFB8A@@cfp.cloud-native.rejekts.io -XUFB8A Virtual Rejekts wrapup en en 20200401T224000 20200401T225000 0.01000

Virtual Rejekts wrapup

PUBLIC CONFIRMED Handover https://cfp.cloud-native.rejekts.io/virtual-rejekts-2020/talk/XUFB8A/ Track 1 (UTC) Arun Teja Godavarthi Chris Kuehl