Defining a Kubernetes Pipeline – A Case Study That Gets You Ready for Microservices
Steve Taylor, Co-founder and CTO, DeployHub
Nathan Martin, President and Co-founder, Sagecore Technologies

Sagecore creates value by providing enterprise (ERP) solutions which are tailored to the needs and workflows of businesses, non-profits, education and government entities. With the increasing need for performance, security and manageability for an expanding customer base, Sagecore realized Kubernetes could provide these benefits and more!

The transition to Kubernetes and Docker was the best decision Sagecore had made. It enabled monitoring, collaboration and tighter library management as one service could be re-used by multiple Sagecore customers deployed into multiple private clusters.

While Kubernetes was extremely powerful, the process of deployment and management of Kubernetes was time-consuming and not as scalable as it needed to be. This is why Sagecore connected with DeployHub. DeployHub provided the platform for cataloging, sharing and deploying components and microservices with dependency tracking.

This presentation will tell the story about how Sagecore created a scalable and manageable Kubernetes pipeline using DeployHub to perform both configuration management and deployments of the shareable services and components.

Containers at Risk: A Review of 21,000 Cloud Environments
Dan Hubbard, CEO, Lacework

Securing workloads in public clouds requires a different approach than the one used for traditional data centers. The need to operate security at cloud speed, respond to continuous change and adapt at scale all require a dramatic shift in the type of security solution required by today’s operation.

This session will deliver a detailed analysis of the threats and risks discovered by recent research done by Lacework when it comes to deploying containers and orchestration services such as Kubernetes running on AWS.

Deep Dive into Containers Security
Shiri Ivtsan, Product Manager, WhiteSource

Many organizations are using containers to develop and manage their applications. Containers enable development teams work faster, deploy more easily and efficiently, and operate at a much larger scale. However, there are many security measures that need to be taken across the entire software development lifecycle, especially when it comes to open source security.
In this session, Shiri Ivtsan, Product Manager at WhiteSource, will discuss:

1) The complexity and security challenges with containers
2) The greatest risks when deploying containers
3) The three steps to take before shipping a Docker container
4) How to automate your container security process

Observability in Jenkins X
Oscar Medina, Developer Advocate, CloudBees

If you are using Jenkins X, you’re already building at rapid pace.However, most miss the opportunity to gain real insights into their build and release pipeline.Oscar will show you how you can increase observability by activating metric capture and analysis during a containerized application deployment with Jenkins X.This entails modifying the declarative Tekton pipelines. In this session/demo, Oscar shows you how to do just that.

Application Observability with Kubernetes – Understanding the Benefits of Tracing, Logs and Metrics
Kevin Crawley, Developer Advocate, Instana

In this session, we will discuss how distributed tracing, logs and metrics (and analyzing their aggregates) offers the deepest level of observability available for cloud native workloads.
Join our session to learn about:
– The theory behind observability
– Best practices for analyzing data (traces, logs, metrics)
– How or ship faster, and handle change management for large and complex distributed systems

Kubernetes Best Practices and Architecture
Eamon Bauman, Field Engineer, Ranchers Labs
Samira Barouti, Cloud Software Architect, CloudOps

During this information session we will gain first-hand knowledge of a variety of Kubernetes best practices and architecture through an interview style presentation. Hosted by both Rancher and CloudOps, this presentation will help us navigate this complicated landscape by highlighting the answers to some of our most interesting questions about Kubernetes by engaging the experts directly.

Operators: Distributing Software in the Kubernetes Ecosystem
Josh Wood, OpenShift Developer Advocate, Red Hat

Kubernetes scales and manages stateless applications quite easily. Stateful applications require more work. Databases, caching systems and file stores are harder to dynamically manage with data intact, and sometimes come with their own notion of clustering. Operators are Kubernetes agents that know how to deploy, scale, manage, backup and even upgrade complex, stateful applications. Operators are a pattern for extending Kubernetes and are at the heart of Red Hat’s OpenShift Kubernetes distribution. Operators make it easier to consume foundation software on orchestrated clusters, they present a Kubernetes-native mechanism for automating, packaging and distributing software.

With Red Hat’s OperatorHub.io catalog, an SDK supporting a growing list of languages, and a vibrant community of partners and developers already building them, Operators enable a flexible way to extend Kubernetes automation to arbitrarily complex applications.

Naked and Afraid: Surviving the Kubernetes Sprawl
Moe Anderson, VP Engineering, SaltStack
Gareth Greenaway, Senior Software Engineer, SaltStack

In this session Gareth and Moe will reflect on the accelerated adoption of Kubernetes and the challenges it introduces. From management to lifecycle integration and compliance, enterprises are starting to look for solutions to these challenges. This “chat amongst friends” will uncover some of the proven best practices and techniques to consider when tackling this journey.

The Evolution of the Kubernetes Landscape
Brandon Jung, VP Alliances – Cloud Native, GitLab

We will give you an overview of the players in the Kubernetes landscape, how these providers got to where they are now and what this means for the space moving forward.

Kubernetes Security 101
Ali Naqvi, Sr. Director, Solutions Architects, Aqua Security

Kubernetes is fundamentally a complex system with lots of different potential attack vectors aimed at data theft, currency mining and other threats. This talk provides an overview of the current state of security-related features in Kubernetes, and gives directional starting points on how to secure Kubernetes components and the applications that run on top of these Kubernetes components. For the topics explored, pointers on where to further investigate will be offered.

Topics Covered: 1) Container image scanning and container security, 2) Security boundaries (pod, namespace, node, cluster) 3) Securing the control plane and Kubernetes APIs, 4) Authentication and authorization, including new tools available, 4) Runtime considerations, secrets management and more!

Reality-Check: Key Considerations for Your Kubernetes Operationalization Strategy
Oleg Chunikhin, CTO, Kublr
Terry Shea, CRO, Kublr

While Kubernetes provides the ‘right level’ of abstraction to develop and run containerized applications in multiple environments, these abstractions as well as the numerous cloud-native and legacy technologies involved make deployment a complex endeavor.

Oleg Chunikhin, CTO of Kublr, and Terry Shea, CRO, will discuss the Kubernetes ecosystem and what they see as a comprehensive, production-ready Kubernetes management platform. Topics will include the relationship between Kubernetes and infrastructure automation solutions – both cloud-based and environmentally independent, DevOps tooling/pipelines, and Kubernetes and other frameworks like Apache Spark or service meshes.

The 4 Pillars of DevSecOps Observability
Frank Reno, Senior Technical Product Manager, Sumo Logic

As modern development teams continue to own more of the full lifecycle of microservices, it is time to add a new pillar to the 3 pillars of Observability -Security. Learn how, with an integrated analytics platform approach, you can combine log, metrics, and traces with security events to provide true, meaningful DevSecOps visibility. We will cover how it is possible to bring both a DevOps and a SecOps perspective together and enable your team to move faster, and more confidently, forward.

Kubernetes Monitoring and Metrics with Time Series
Gianluca Arbezzano, Site Reliability Engineer, InfluxData

In this presentation, Gianluca Arbezzano, SRE of InfluxData, will look into monitoring Kubernetes with InfluxDB. He will cover metrics that should be collected, when to use push and pull metric collection, and the role that Prometheus plays in any K8s monitoring environment.

Continuous Kubernetes Cluster Hygiene in Your CI+CDPipeline
Gadi Naor, CTO & Co-Founder, Alcide

Kuberentes adoption is growing by the day. As the pace and complexity of Kubernetes deployments are increasing, misconfiguration drifts translate into security risks. DevOps, who are now also tasked with security responsibilities, are dealing, on a daily basis, with questions like:

• Am I pulling software from an approved list of Image registries?
• Can I prevent tainted CI/CD deployments?
• Are my all of my clusters conform to X?

In this presentation we will talk about the unique challenges of this use case, such as how to automatically generate ‘good’ profile/baseline for each cluster, and make sure your continuous cluster hygiene level checks are automatically tuned.

Securing Kubernetes, Istio Service Meshes, and the Workloads That Run on Them
Gary Duan, CTO & Co-Founder, NeuVector

With the recent Kubernetes vulnerabilities, it has become clear that orchestration tools such as Kubernetes and Istio can be an attractive target for hackers. These systems need to be monitored and secured just as much as the application workloads which run on them.

Join Gary Duan, NeuVector co-founder and CTO, in this session for an overview of the attack surface of a container infrastructure, and how to protect against attacks with built-in security features of these tools combined with third party offerings which extend security for business critical deployments.

Why to Cloud Native
Karthik Gaekwad, Principal Member of Technical Staff, Oracle

You’ve most likely heard of Kubernetes, serverless and cloud native technologies, and how everyone is using it. But why? Is it just a passing phase in tech? Or is there something more to it than just another set of technologies? Join Karthik Gaekwad in this talk to explore why you should consider the cloud native stack for your new software development projects, and how you can leverage the power of Kubernetes and serverless in your application development.

Tracing is More Than Traces: The Insights in Trace Aggregates
Daniela Miao, Engineering Manager, LightStep

The value proposition for distributed tracing is well-understood: assembling and visualizing end-to-end transactions helps to identify latency bottlenecks complex distributed kubernetes-based environments. Yet the data from traces –when aggregated –can reveal much more, and can do so with greater precision and certainty. This talk presents the profound insights trace aggregates help unlock, including sources of resource contention, latency anomalies in the context of service infrastructure, and correlations of metrics with high-cardinality characteristics of the distributed system. The talk demonstrates, using concrete examples, how novel applications of aggregated traces reveal new opportunities for performance improvements. However, aggregation is not possible without a standardized tracing output format, as well as a proliferation of traces via cloud-native service mesh integration.

Uncharted Rapids: The Challenge of Storage for Kubernetes
Shailesh Mittal, Founding Member & Senior Software Architec, Datera

Within the Kubernetes ecosystem, storage remains one of the greatest challenges. Why?Because traditional storage was not built for Kubernetes, and many storage solutions are simply not up to the challenges of monolithic and microservices-based applications running in dynamic Kubernetes environment.Explore the challenges of application data management. Learn how an AI/ML storage architecture can complement Kubernetes by matching its simplicity, scale and flexibility, so that non-storage admins can quickly deploy persistent volumes in a self-service model. Discover composable storage that provides dynamic volumes mapped to Kubernetes namespaces and orchestrated according to Kubernetes, PVCs to not only work in a Kubernetes environment, but actually optimize it.