Experimenting with CUE and Carvel to Enable GitOps for Applications
Explore CUE and Carvel integration for GitOps in Kubernetes. Learn to define, manage, and deploy configurations using these tools, with live demos and practical insights for existing environments.
How Bloomberg Uses AI to Speed Up Over-the-Counter Trading
Explore how Bloomberg leverages AI and Kubernetes to enhance over-the-counter trading efficiency, focusing on detecting offers in group chats and streamlining negotiations for traders.
Building a Batch Processing Platform for Data Pipelines Using Argo and Kubernetes
Explore Intuit's scalable batch processing platform using Kubernetes and Argo for efficient data pipeline management, addressing scheduling, orchestration, and dependency challenges in AI and data engineering.
On Data Locality in Kubernetes
Explore data locality challenges in Kubernetes, discussing approaches to optimize I/O throughput and workload scheduling for data-intensive applications in cloud-native environments.
GitOps Implementation: Working Through the Lesson Plan
Explore Teachers Pay Teachers' journey implementing GitOps and ArgoCD, covering implementation choices, sync strategies, configuration management, and lessons learned in improving their CICD platform.
GitOps with Flux and OCI Registries
Explore GitOps using Flux with OCI registries for continuous deployment. Learn to deploy, sign, and verify workloads, and understand the architecture behind Flux OCI as a source.
Policy-Based GitOps: How Policies Can Help Secure and Automate GitOps Workflows
Explore how Kubernetes-native policies enhance GitOps workflows, addressing automation and security gaps. Learn to leverage Kyverno with GitOps for improved management across clusters and multi-tenant services.
Introducing the OWASP Top Ten for Kubernetes
Explore OWASP's Top Ten Kubernetes risks, learn about common security issues, and discover strategies to enhance your containerized infrastructure's protection.
Hands-on Workshop: Batten Down the Hatches - A Cluster Security Journey
Hands-on workshop guiding security engineers through a Kubernetes cluster security audit. Learn inventory, assessment, least privilege enforcement, and compliance in a real-world environment.
Network Policies - The Not-So-Hard Way
Practical workshop on implementing Cilium Network Policies in Kubernetes. Learn fundamentals, approaches, and tools for securing application traffic and creating effective network policies.
Pwning the CI with GitHub Action Workflows - Security Challenges and Exploits
Explore GitHub Actions vulnerabilities and CI security risks. Learn to identify and mitigate potential exploits in workflows and configurations to safeguard your development pipeline.
The Eye of Falco: Detecting Container Escape Techniques with Linux Capabilities
Explore container security vulnerabilities and learn how Falco can detect and respond to container escape techniques based on Linux capabilities, with real-world CVE examples.
Policy-Based Governance for End-to-End Integrity Control of Policies
Explore policy-based governance for end-to-end integrity control in Open Cluster Management, focusing on manifest signing, secure secret delivery, and admission control for enhanced Kubernetes security.
DockerSlim and Kyverno - Enhancing Kubernetes Workload Security
Explore how DockerSlim and Kyverno enhance Kubernetes workload security through container image minification, automated AppArmor and SecComp profiles, and simplified cluster security management.
See It to Believe It: Bringing Observability to Container Builds
Explore an open framework using tetragon to enhance runtime visibility and automated attestation for Tekton-based CI pipelines, focusing on container build security and integrity assurance.
Who's Verifying Your Signatures? Approaching Private Container Image Signing
Explore container image signing for private use, comparing open-source and internal challenges. Learn about leading frameworks and their scalability for secure software delivery.
Sigstore - How We Learned to Stop Trusting Registries and Love Signatures
Explore InfluxData's journey in implementing container image signing for their SaaS offering, covering the process, challenges, and technical details from DevOps and security perspectives.
Cgroups V2: Before You Jump In - Lessons from Adobe's Experience
Explore cgroups v2 in Kubernetes: challenges, impacts on cloud-native architecture, and new features. Learn from Adobe's experience to guide your transition and avoid potential pitfalls.
Deploying Straight to Production - Best Practices and Tools for Continuous Delivery
Explore best practices for platform engineering and developer experience, with a live demo showcasing CNCF projects to build a platform that empowers application teams and facilitates continuous delivery.
Orchestrating Interconnected Apps Across Geographically Distributed Kubernetes Clusters
Explore multi-site Kubernetes orchestration with Nephio, addressing workload deployment, config specialization, policy conformance, and automated management for complex, interconnected applications.
SIG-Scheduling Deep Dive
Explore SIG-Scheduling's role in Kubernetes, focusing on kube-scheduler and related projects. Learn about current goals, ongoing work, and opportunities for new contributors.