Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
About: In this half day instructor-led course you will learn the fundamentals of container-based distributed systems, including an overview of the architecture and building blocks of Kubernetes and containers.
This course is delivered in an intimate setting with a ~10:1 student to teacher ratio, so you can get the help you need.
In addition to learning from our Kubernetes experts, you will have the opportunity to:
Course topics include:
In this workshop you'll dive into containers, how they're composed, and their uses. From there you'll stand up a Kubernetes deployment in a cloud or on your local laptop. We'll then dive in to how containers can be managed on platforms like Kubernetes and common workflows for container deployments. Finally, you'll learn about today's security best practices - from building and delivering containers to securing and hardening Kubernetes.
But the end of this workshop, you'll be able to identify the differences in container types, how to setup a secure Kubernetes installation, and the vocabulary + common workflows for running containers on Kubernetes
Prerequisites: Attendees will need to bring a laptop. Temporary cloud credentials will be provided for deployment sections of the workshop. Knowledge of basic Kubernetes components and objects suggested.
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
About: This one day course serves as a crash course to learn the basics of Kubernetes right before KubeCon NA. You will discover the Kubernetes architecture and how to install it. You will then learn how to use its basic primitives (i.e pods, deployments and services) to build your own distributed application. The course will be a mix of lectures, demos and hands-on exercises.
This training course is for you because...
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
Kubernetes provide a powerful abstraction for you to run microservices anywhere and scale to any size. Monitoring a Kubernetes cluster can be challenging specifically when dealing with Logging.
The Kubernetes Enterprise Logging workshop is a full hands-on session where you will learn the basics of Logging, how to implement an unified logging layer in your cluster focusing on an end-to-end solution ready for production.
Workshop Outline:
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
In the adoption of cloud native technologies developers have found one of the greatest challenges is the integration of services in distributed systems. The challenges include service discovery, load balancing, fault tolerance, end-to-end monitoring, dynamic routing for canary deployments and most importantly securing the communication channels.
Istio solves these problems by providing a layer of infrastructure between the services and the network that allows the service communication to be controlled outside the application code. This fundamentally changes how services are connected, managed and secured.
During thisworkshop you will gain hands-on experience to understand how Istio is changing the landscape of cloud native applications. We will walk through deploying each piece of Istio alongside a microservice application running in Kubernetes and in the process create a service mesh to control the communication. We will show features of Istio such as:
Kubernetes is a popular cloud-native open-source orchestration platform for container management, scaling and automated deployment. It includes a rich set of features such as service discovery, multi-tenancy, stateful containers, resource usage monitoring, and rolling updates. Some of the questions we will go over are:
In this code-driven workshop, you will learn how to package, deploy, scale and monitor your Java application using Kubernetes and the AWS cloud.
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
FD.io (Fast Data) is the first truly open data plane project focusing on data IO performance, scalability, efficiency, and programmable flexibility for networking and storage. FD.io provides a modular, extensible user space IO services framework that supports rapid development of high-throughput low-latency resource-efficient IO services. The design of FD.io is hardware, kernel, and deployment (bare metal, VM, container) agnostic. FD.io has been integrated with OpenStack Neutron, OpenDaylight, and Calico to provide a drop in upgrade for all of your dataplane needs. A key component of FD.io is the Vector Packet Processing (VPP) library contributed at the foundation of the project. The commercial-ready code targetable to run on standard x86, ARM, and Power servers is already running in products on the market today. VPP when connected to DPDK for network IO has shown to perform two orders of magnitude faster than currently available open source options implementing switching or routing workloads, reaffirming one of the core principles of FD.io: a focus on performance.
Join us at the FD.io Mini Summit to hear and learn from FD.io community experts who will be sharing information about the projects, use cases, capabilities, integration between FD.io and OpenStack/ODL/OPNFV/Other communities, tools and many more exciting topics. This is a great opportunity for the KubeCon + CloudNativeCon attendees to share their thought leadership and innovations at one of the industry’s premier events.
*No Show Fee - Note that while FD.io Mini Summit is free to attend, anyone that is a no-show onsite will be charged $50 for each event not attended. This helps us in planning accurately for the event.Agenda
9:00am - 9:20am - Welcome & Introduction - Ed Warnicke, CiscoRegistration: This event is Sold Out. You can add yourself to the waitlist here.
In February 2017, The Linux Foundation introduced the Open Network Automation Platform (ONAP), which is the merger of the open source OPEN-O and ECOMP projects, code bases, and communities. The ONAP project allows operators to automate, design, orchestrate, and manage services and virtual functions. This Mini Summit examines how open source is moving up the stack and value chain, and The Linux Foundation's harmonization efforts underway to forge a unified vision and ultimately architecture to bring together open source projects and relevant standards. In addition, we will provide an in-depth introduction to the ONAP project, including the trends leading up to the project, scope, organization, etc.
Agenda:
Automating Networks in a Container World
9:00 – 9:10 Welcome & Intro - Phil Robb, The Linux Foundation
*No Show Fee - Note that while ONAP Mini Summit is free to attend, anyone that is a no-show onsite will be charged $50 for each event not attended. This helps us in planning accurately for the event.
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
In this one day hands-on course you will deploy Kubernetes and containers to build out a distributed, highly available, fault tolerant application architecture.
This course is delivered in an intimate setting with a ~10:1 student to teacher ratio, so you can get the help you need. Throughout the course, hands-on exercises reinforce the topics being discussed.
In addition to learning from our Kubernetes experts, you will have the opportunity:
Course topics include:
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
Join experts from Google, IBM, Tigera, and more to hear the latest developments on the Istio project. Connect with the community to hear about use cases, capabilities, and more.
Registration: Add this training on your KubeCon + CloudNativeCon North America conference registration here. If you are already registered for KubeCon + CloudNativeCon North America 2017, modify your registration to add the training or email us at events {at} cncf {dot} io.
About: Join us for a 4-hour use-case driven training session on container visibility, troubleshooting and run-time security monitoring with the Sysdig open source tools (Sysdig and Falco) and learn how containers work under the hood.
Agenda:
For the latest agenda, please refer to the OpenContrail Events page.
● 1:00-1:15pm Welcome and Introduction - Randy Bias
● 1:15- 1:45pm Community Status Recap - Greg Elkinbard
○ Review the progress of community creation over the last several mini-summits
● 1:45 - 2:45pm Status Updates from the project working groups
○ Governance - Greg Elkinbard
○ Technical Steering Committee - Joseph Gasparakis
○ Architecture Review Board - Joseph Gasparakis, Paul Caver, Suhkdev Kapur
○ Infra - Paul Carver, Greg Elkinbard
● 2:45 - 3:00pm Break
● 3:00 - 5:00pm Charter and process document review (forum)
○ Governance
○ Technical Steering Committee
○ Architecture Review Board
● 5:00 - 5:15pm High Level community goals for 2018 (forum)
○ Discuss and set high level community goals for 2018
○ Events priority - identify key marketing events to support next year.
■ OpenStack
■ CNCF/Kubecon and Others
● 5:15 - 5:30 Outreach to other projects (OpenStack, Kubernetes, ONAP, OPNFV, others)
○ Our goal is to become ubiquitous SDN so we need to identify key projects which community will directly support, currently we integrate with OpenStack and CNCF CNI based projects such as Kubernetes and Mesos. Community discuss and set priorities in participating in other projects such as OPNFV, ONAP and others
For any questions, please contact gelkinbard@juniper.net
This free workshop led by The Linux Foundation and VMware will provide an overview and walkthrough of containers and Kubernetes, with key concepts, architecture, and how Kubernetes is used in enterprise environments. The session will include running Kubernetes in enterprise use case scenarios and how enterpises can operationalize Kubernetes adressing day 1 and day 2 needs.
The workshop will finish with a reception right afterwards to allow time for some networking.
What happens when you need to get software to run reliably when moving from one computing environment to another? Imad Sousou, Vice President of the Software and Services Group and General Manager of the Open Source Technology Center for Intel Corporation, will highlight how we can use open source software to support our rapidly changing world.
Created at Netflix, Spinnaker is an open source, multi-cloud continuous delivery and infrastructure management platform for releasing software changes with high velocity and confidence. Spinnaker’s open source community includes Netflix, Google, Microsoft, Oracle, Target, Kenzan, Schibsted, and many others.
In this keynote, you’ll learn how various aspects of Netflix culture, and open source have shaped Spinnaker and how Spinnaker, in turn, has influenced the engineering culture at Netflix. We’ll discuss how lessons learned from an earlier open source product, Asgard, influenced us and drove a Cloud Native first approach.
The Prometheus Salon will feature talks from Prometheus developers, including an introduction to Prometheus for beginners, a closer look at how you can use Prometheus to monitor your Kubernetes cluster, and a discussion of the new features in Prometheus 2.0.
The session will include hands-on access to a live Prometheus and Kubernetes cluster, allowing you to experiment with PromQL queries to gain deeper insights into your Kubernetes clusters.
For the latest agenda, please refer to the OpenContrail Events page.
● 1:00- 5:00 Developer Track - Come and learn how to be an OpenContrail project contributor. Leading OpenContrail architects from Juniper Networks will walk you through the code base, teach you how to build, install and test OpenContrail and will answer your OpenContrail questions. This will be an interactive session, so bring your laptop and get ready to play with code.
● 5:15 - 6:45 User Track
○ OpenContrail and Kubernetes Integration – James Kelly will lead an interactive session focused on integration of OpenContrail and Kubernetes. This session will introduce new OpenContrail users to key features of OpenContrail available in Kubernetes environment and will walk users through installation, configuration and operation of OpenContrail in Kubernetes clusters. Bring your laptop and an Amazon EC2 account and get ready to follow along.
○ Real World Deployments - Leading Community members will provide brief overview of their operational OpenContrail/Juniper Contrail environments.
For any questions, please contact gelkinbard@juniper.net
Kata Containers is a merge of 2 hypervisor based container runtime efforts: Hyper's runV and Intel's Clear Containers. With Kata Containers, each container is hypervisor isolated just like an EC2 or GCE instance. It is an OCI compatible runtime and as such can seamlessly work with containerd or hyperd. Moreover it fully supports the Kubernetes CRI APIs and thus can run and manage hypervisor isolated Kubernetes pods through CRI-O, containerd-cri or frakti. Finally, Kata Containers is a multi architecture project as it supports x86, ARM, Power and s390x platforms.
During this talk we will describe the Kata Containers architecture and how it drastically reduces the virtualization overhead in order to be as fast as a namepace based container runtime while being as secure as a legacy VM. We will also run a multi tenant Kubernetes demo in order to show how Kata Containers could become the cornerstone of a secure, infrastructure free, container cloud.
Live from Austin! Join the gRPC community to stump the devs, meet the contributors, and hear about project updates.
The Fluentd Salon is an unconference session for attendees interested in logging in the context of Kubernetes, containers and standalone applications.
The Salon will be facilitated by Fluentd core developers and community members. We will give a brief update about Fluentd v1.0, roadmap and tools around the Fluent ecosystem plus an a space for lightning talks and open discussions. This will be a great networking opportunity.
If you are interested in suggesting a topic or giving a lightning talk (5 minutes presentation), please go ahead and fill the form with the required information.
The rkt salon will feature talks and demos of rkt and rktlet from, and discussions with, core contributors. The salon will include a general update on the rkt project, a demonstration of some core rkt concepts and of rktlet, the Kubernetes CRI implementation using rkt. We'll conclude with an open discussion.
We are also eager to have community members speak about their use of rkt. Please contact us at cncf-rkt-maintainers@lists.cncf.io if you'd like to be added to the schedule.
Those developing and operating modern software infrastructure face a myriad of complexity when trying to secure it. While environments like amazon have vastly simplified the supply chain associated with brining up new physical and virtual infrastructure or services, complexity around managing access to and between these services has grown, and continues to expand. The proliferation of configurations, management tools, and management schemes that exists in the modern datacenter has exploded when dealing with multi-cloud, hybrid (cloud + dc), or legacy systems.
Complexity is the enemy of security. This heterogeneity is its embodiment. Having many different ways to configure access policies on different cloud providers or with different vendors, makes it impossible to understand whom has access to what in any given infrastructure. Without this visibility it is impossible to have intelligibility, and hence security.
Worse, today developers and operators must exist in and support a highly dynamic service environment. That is to say existing services must evolve to support new functionality, and new services must be rapidly brought on line to support features in a highly competitive business environment. The miasma of different configuration schemes creates a great deal of friction against this, and impedes security because it is difficult to holistically understand the impact of changes (let alone make them rapidly). Security must be able to accommodate this temporality.
In this talk we introduce PADME as an architecture for policy admission aimed at solving these problems in a distributed environment. PADME operates by normalizing access policy information across underlying clouds and system. It allows policies to be operated up as known fixed building blocks in order to establish end to end security. Finally, it attacks the problem of policy distribution in a distributed environment so that assertions can be made about the security of a system over time, and in the face of CAP theorem issues.
The Cluster Lifecycle SIG is the Special Interest Group that is responsible for building the user experience for deploying and upgrading Kubernetes clusters. Since splitting out of SIG Cluster Ops in mid-2016 we have primarily focused on creating kubeadm, a streamlined installer tool and building block to simplify the installation and upgrade experience. We have recently begun building a Cluster API to provide an abstraction of machines across different deployment environments along with a common control plane configuration.
In this update session we will present the SIG's mission statement, review recent accomplishments, and discuss our future plans, where you are very welcome to contribute to the discussion. We will also focus on how new contributors can get involved in helping shape the future of Kubernetes cluster lifecycle management.
Join us for an open discussion on CoreDNS! This will be an opportunity to learn more about CoreDNS, as well as discuss use cases, issues, and other matters with some of the maintainers. We’ll start with a short intro and some CoreDNS basics, then proceed to the open discussion. Some of the topics we can discuss:
CoreDNS Roadmap
Using CoreDNS for your cluster DNS in Kubernetes
Status of plans for CoreDNS to replace Kube-DNS as the default cluster DNS
CoreDNS architecture
Available plugins and how to use them
How to write external plugins
Use of CoreDNS with an external policy engine
Use of the “autopath” plugin with Kubernetes and what it does
General Q&A
Informal in-person community meeting for Envoy. We will have a short selection of lightening talks and do general Q&A and discussion.
Join the gRPC contributors for a session looking at OpenCensus and gRPC integrations!
Getting traces and application-level metrics out of an application often requires headaches and a nontrivial amount of manual work, which is a challenge for developers and vendors alike. This is especially true when you have a microservice architecture. OpenCensus offers a simple and automatic way for developers to extract correlated traces and metrics from their application so that they can be processed by the backend of their choice.
Service mesh technology facilitates the discovery, interconnection, and authentication of microservices. While it’s straightforward to use a service mesh to measure peer performance, actually explaining the behavior of transactions in a microservices deployment requires distributed tracing.
In this keynote, Ben will explain why distributed tracing is important, where the service mesh comes into play, and how OpenTracing makes it all elegant and portable. We will illustrate these concepts with a live, audience-interactive demo, and provide guidance for those who want to add these technologies to their own microservice deployments.
The simple truth is that there are more reliable online systems that need to be built then there are people who know how to build them. Building a distributed system is bespoke, manual and hard.
Fortunately, with the development of containers and Kubernetes, a foundation has been created for a new type of development environment to make building systems dramatically easier and more modular. But containers and Kubernetes, while necessary, are not sufficient. In this talk I introduce Metaparticle, a new standard library for easy distributed systems development on Kubernetes.
Metaparticle uses familiar, standard programming languages to enable developers and architects to design, develop and deploy their application from a single, easy to use environment.
Application components can reside within a single or multiple data centers and clouds. Istio’s goal is to connect, manage and secure service endpoints but hybrid cloud scenarios bring certain challenges to effectively achieve those goals. In this BoF session, we would like to discuss the current efforts within the Istio community for Hybrid cloud scenarios and identify Istio/Envoy requirements/gaps.
{code} is proud to sponsor the Cloud Native Computing Foundation Community Awards, which will honor the individuals who have made the greatest impact over the last year throughout the cloud native ecosystem.
Awards will be announced at the ceremony during the Wednesday night keynote, at 5:55pm. Following this, a reception will be held at Cedar Street Courtyard:
The patterns for Kubernetes and how they are changing as more companies start thinking through how they will connect their internal and external resources in one loosely coupled environment. What are the new security patterns and how do they fit with existing infrastructure environments?
Pancake breakfast included. Space is limited.By ensuring everything about containers is standardized and boring, we can now focus on the overall Kubernetes experience when it comes to actually running containers. Freeing Kubernetes to just focus on orchestrating containers from now on and setting the stage for exponential growth. We'll take a brief look at how Kubernetes is prepared to explode in usage because the foundation has been solidified. From container standards to customer-resource definitions to pluggable hardware, Kubernetes is ready for broad usage patterns.
It has been amazing to watch Kubernetes emerge as a standard operating environment for distributed systems development over the past few years. In a short few years it has become embraced by almost every significant vendor in the ecosystem and is going from strength to strength. It is emerging not only as a way to not only solve hard problems deploying and running applications, but is supporting the development of new approaches to building and running applications that power the world.
During this session, Craig McLuckie, one of the Kubernetes founders and CEO of Heptio will look ahead to the coming years and talk about some important trends in the ecosystem that will continue to support and drive the success of the project. We will focus on the emergence of expert operations and talk about how Kubernetes is starting to change the organizations that build and manage distributed systems. This will touch on how SRE values are starting to find their way into modern development teams, what tools are still needed to drive ops maturity and the overall value of this trend to companies adopting cloud native technologies. We will discuss the value of continued focus on modularity and extensibility in the cloud native ecosystem as a way to foster innovation in the ecosystem, and also discuss the the emerging role Kubernetes is playing in the increasingly heterogeneous world of cloud.
The Jaeger project was open sourced at the beginning of this year. In this update we will go through the current Jaeger features, give a short demo, and talk about the roadmap for the upcoming year. After this session everybody is welcome to attend the Jaeger Deep Dive Session and Salon.
(Audience: Anybody)
Security hardening for containers, clusters, and operating systems is a very important part of setting up infrastructure and always "Plan A". The world of "Plan A" defends the importance of making sure your cluster is set up securly. Dino comes from the world of "Plan B" and will focus on detecting when security boundaries have been breached. This is necessary for environments where you don't have ability to ensure base OS is fully patched, etc.
Step into the world of Linux kernel features such as seccomp, eBPF, kprobes and Kubernetes tunable security features and learn how to detect and defend against attacks at scale.
Join the OCI Community for a face-to-face meeting on planning for the future, from technical discussions to future roadmap discussions.
Operators of Kubernetes, Unite! SIG Cluster Ops was formed nearly two years ago with the goal of being a installer neutral place for operations to collaborate. Frankly, we've had challenges getting critical mass because operators cluster around their installer groups. This session will discuss rechartering as Working Group and review the mission of the group. We'll also review plans for the next 6 months. If you're hoping Kubernetes can limit the installer explosion, then this session is a good one for you too.
OpenFaaS (or Functions as a Service) is a Cloud Native framework for building serverless functions with containers (as popularised by AWS Lambda). With OpenFaaS you can package any process or container as a serverless function for either Linux or Windows - just bring your Kubernetes or Docker cluster. Avoid vendor lock-in by running functions in your own datacenter or the cloud with your existing CI/CD and container ecosystem. The project focuses on ease of use through its UI and CLI which can be used to test and monitor functions in tandem with Prometheus integration that enables auto-scaling as demand increases.
You can deploy OpenFaaS in 60 seconds on Kubernetes and thanks to concise code templates all you need to write is a handler in your favourite programming language then let your cluster do the heavy lifting.
OpenFaaS was recently trending as the top open-source project on GitHub, won Best Cloud Computing Software 2017 from InfoWorld and has a thriving community with 65 contributors, 1400 commits and over 8k stars.
Come and find out how and why people are leveraging an event-driven architecture along with some cool interactive demos and swag.
https://blog.alexellis.io/introducing-functions-as-a-service/
Note - OpenFaaS is an independent project started by Alex Ellis and is now being shaped by a growing community of contributors and users.
The Technical Oversight Committee (TOC) provides technical leadership to the cloud native community. The CNCF will host a public TOC meeting, inviting the community to discuss the project roadmap for 2018, the upcoming TOC Election Schedule for 2018, along with holding an open Q&A for the community with TOC members. The agenda deck can be viewed here.
The Kubernetes Storage SIG will be attending the salon to hang out with the community and discuss general storage topics. If you have questions you would like answered or want to talk to the storage SIG about using k8s storage or the future storage roadmap, swing by!
This session is dedicated to an in-depth understanding of the Jaeger project. We will give a short demo, talk about various topics including the architecture, adaptive sampling, multi-tenancy, and configuration, and review the roadmap for the upcoming year. After the session attendees should better understand the Jaeger architecture and be ready to make contributions to the project.
(Audience: Developers)There are several projects related to Kubernetes which are about virtualization in one way or the other.
In this saloon users and developers have the opportunity to get an overview and discuss the different virtualization related projects.
The first part of the session will focus around differentiating the use-cases of the individual projects. And the second part is about discussing and identifying shared problems in order to understand how a potential collaboration between the groups could look.
After this session an attendee should have a clear picture on each projects use-cases and goals, as well as their technical differences and similarities.
Kubernetes has supported "soft" multitenancy since the beginning, with features such as namespaces, ResourceQuota, and resource-based scheduling. Over the years Kubernetes has added a number of sophisticated features to strengthen its multitenancy support, for example RBAC, PodSecuityPolicy, NetworkPolicy, priority/preemption, etc.
Now is a good time to take stock of Kubernetes' multitenancy support from the perspective of different types of users -- for example small organizations where everyone trusts each other, large enterprises that need isolation between many internal teams and applications sharing a cluster, SaaS providers hosting instances of their SaaS for many users in a single cluster, and infrastructure providers offering hosted "Kubernetes as a Service" -- and ask what are the key gaps remaining to be filled. Do we need hierarchical namespaces? Better mechanisms to hide shared resources so users can't see who they're sharing the cluster with? Multitenancy policies (quota, RBAC, etc.) that span namespaces, or that apply to a label-selected subset of objects within a namespace? Split-horizon DNS? Resource scheduling within the control plane to ensure no tenant monopolizes the API server, controllers, scheduler, etc.? Where on the spectrum from "soft multitenancy" to "hard multitenancy" should Kubernetes aim (and what do these terms mean, anyway?)
In this session we will discuss what multitenancy means to us as a community, and where we should focus our multitenancy efforts in 2018.
SIG OpenStack coordinates the cross-community efforts of the OpenStack and Kubernetes communities. This includes co-ordinating improvements to and documentation of the OpenStack cloud provider implementation in Kubernetes as well as supporting efforts to deploy OpenStack itself using Kubernetes. Attend this session to learn more about the SIG's mission, recent accomplishments, and future plans.
Data Science & Programming literacy is an important aspect of literacy in the 21st century, but teaching these skills at scale is quite difficult. At UC Berkeley, we are trying - our 'Foundations of Data Science' course has no pre-requisites, and routinely attracts more than a 1000 students from across majors.
Requiring students to have local programming environments installed & debugged is a non-starter at this scale. We have been running a Kubernetes based JupyterHub environment that allows them to do all their programming with a web based environment with Jupyter Notebooks. This is an important change in many ways:
1. Lets students start instantly with writing code, rather than dealing with the accidental complexity of installing software locally
2. Acts as an equalizer - a student using a chromebook borrowed from the library has no disadvantage over someone using an expensive Macbook Pro
3. This is course critical infrastructure, and needs high availability at low human / dollar cost
In this talk we'll go over how we have:
1. Used Kubernetes to make reduce our costs while allowing a larger group of people to deploy safely to various cloud providers.
2. Extracted our JupyterHub deployment into a project part of Project Jupyter (Zero to JupyterHub) that is being adopted at other universities & organizations.
If your answer is YES to any of the above questions this salon is the one stop shop for you!!!
We will introduce you to a range of technologies that work with kubernetes allowing you to enhance your container solution with focus on optimizing performance of your containerized application followed by an interactive hands-on session.
We are eagerly waiting for you to share our experience in creating and using these technology ingredients for creating our recipe “high performance data plane in NFV use cases”.
Attendees that register will also get an Intel USB stick* with information on K8S NFV features.
*Hurry!! Limited spaces available.
The Containerd Salon will include an introduction to containerd and cri-containerd, a getting started with Containerd, and a walk-through for setting up Kubernetes with cri-containerd. There will also be time for Q&A and discussion with the developers of both projects.
This session will be an interactive discussion around distributed tracing, metrics, logging and how to use them all together via OpenTracing APIs. There will be a self-guided demo for tracing for beginners up to experienced users. We will work as a group and include brainstorming how to add visibility into your distributed systems. There will be a Birds of a Feather session to discuss the changes to the OpenTracing APIs and the direction of the project. The Salon will be facilitated by OpenTracing core developers and community members.
SIG Apps is the Special Interest Group that covers deploying and operating applications in Kubernetes. Being an area with a large surface area there's a lot going on. In this update session we'll look at how SIG Apps is setup along with a little history followed by updates on:
Join us for an evening filled with the best eats, libations, live music and games the city has to offer!
The KubeCon + CloudNativeCon North America 2017 All-Attendee Party will be hosted along Austin’s famed Rainey Street on the evening of Thursday, December 7, spread out across eight different venues. Check the website for details on each venue.
Badges and ID are required to get in to all venues. Don't forget a jacket!
Note: Banger's is the only all ages venue.
Yoga by Lauran Janes will be offered from 7:00 - 8:00am at the ACC. Bring your favorite yoga mat or towel, or use one of the complimentary ones provided. Please be sure to wear loose fitting, comfortable clothing. No mat? No problem we will have 25 mats available to those who need one.
Yoga is open to all attendees, and no prior experience is needed! Space is limited and will be first come, first served.
In this talk, Jesse will provide an overview of the on-premesis Kubernetes deployments that currently power 20% of GitHub's production services. He'll also review the challenges GitHub has faced and overcome so far during their Kubernetes journey, and highlight ongoing and future Kubernetes enhancements that GitHub is excited about.
Kubernetes has yet to close the developer gap from source code to app running in a production Kubernetes cluster. Many build bespoke tools. How can the Kubernetes community come together to build decomposable solutions that help people define their app, deploy it, and manage its lifecycle over time? Learn about the progress we are making together to elevate the conversation from container orchestration to application lifecycles management.
The Kubernetes ecosystem has grown tremendously over the last three years. Each release pushes the boundaries of what we can accomplish and brings new participants and new success stories. That success has a price: how do we do what's best for the community and for our users, and what's on deck for 2018?
Kubernetes has been described many different ways. How should one think about the platform? It partly depends on the problems you are trying to solve with it. I will discuss 10 ways to view Kubernetes based on use cases, how those uses relate to its features and architecture, how Kubernetes supports the features, and how the architecture is evolving to support them better.
SIG Apps is the Special Interest Group that covers deploying and operating applications in Kubernetes. In this working session we'll organize around application development and operation topics and then attempt to move forward on the highest priority ones, as decided by those in attendance. This is a working session where the audience is involved. Topics in this session could involve Helm, Charts, the workload APIs, Jobs and CronJobs, shared libraries for tool development, interoperability between tools, and more. So, bring you ideas and interest, come to the deep dive, and help make the application development and operation experience better.
What's coming up for kubernetes on AWS and general face-to-face discussion of issues, experiences and plans.
Grafeas is an open source project whose goal is to provide organizations with a central source of truth for tracking software artifact metadata across an ever growing set of software development teams, pipeline, and technologies (see grafeas.io and github.com/grafeas).
This meet-up is an opportunity to meet in person and discuss community collaboration opportunities and priorities for the project. Topics we may discuss include: extending the types of artifacts and metadata we support, metadata signing, Kubernetes integration, hybrid cloud stories, etc.
Looking forward to meeting you and discussing your ideas! (Also, you might consider attending the Grafeas BoF session Wednesday evening.)
The Node SIG is the Special Interest Group that is responsible for Kubernetes node management. We work on things including Kubelet, container runtime, node level performance and scalability, node reliability, node lifecycle management, node resource management, node monitoring, node/pod level security, kernel interactions, etc. Basically, most things happen on a Kubernetes node is related to sig node.
In this session, we'll mainly cover 3 topics:
* Secure Container (Tim Allclair, Google): VM sandboxes, docker entitlements, and container hardening. What are the right levels of abstractions for container security, and how can we make secure containers more usable?
* Containerd (Stephen Day, Docker): Status update of containerd 1.0 and cri-containerd, the containerd-based implementation of Kubernetes Container Runtime Interface.
* CRI-O (Mrunal Patel, Red Hat): Status update of cri-o, the OCI-based implementation of Kubernetes Container Runtime Interface.
Besides the topics above, we'll also have free discussion about Node SIG's future plan, where you are very welcome to contribute to the discussion.
In this session we will start with basic tracing concepts, give an overview of the Jaeger project, and finish with more advanced topics like adaptive sampling, dependency graphs and tracing with Envoy proxy. There will be a demonstration using Jaeger with OpenTracing in a real world application. The session will also cover the roadmap for the next year and an open discussion.
(Audience: Anybody)