- 173
- 59 292
Kubernetes Community Days UK
United Kingdom
เข้าร่วมเมื่อ 2 ก.ค. 2021
Kubernetes Community Days UK
Event Details & Agenda kcduk.io
#kcduk
Event Details & Agenda kcduk.io
#kcduk
How did that happen? And is it a security problem… | Duffie Cooley
In this presentation we will hear about real world experience as it relates to security related challenged with the Kubernetes project and the infrastructure space in general.
Comment
This talk should widen your perspective around what an attack surface is and how to better understand it. If you were going to assess a project for security what would you look for? How do you determine if a project you want to use has reasonable controls around things like commit access, and software supply chain?
Whether you are a consumer, a contributor or a maintainer there are things you can do to improve the state of security in this space. Join Duffie Cooley and find out how!
Comment
This talk should widen your perspective around what an attack surface is and how to better understand it. If you were going to assess a project for security what would you look for? How do you determine if a project you want to use has reasonable controls around things like commit access, and software supply chain?
Whether you are a consumer, a contributor or a maintainer there are things you can do to improve the state of security in this space. Join Duffie Cooley and find out how!
มุมมอง: 104
วีดีโอ
Building an Application-Specific Container Image Builder| James Laverack
มุมมอง 2202 หลายเดือนก่อน
The ecosystem contains many generic container image builders such as Dockerfiles and Apko, plus ones specialised for particular ecosystems such as Jib (Java) and Ko (Go). When none of that feels quite right, have you ever considered writing your own? In this talk I’ll explore what drove me to write a completely custom application-specific container image builder as part of my long-term goal to ...
I'll Let Myself In: Kubernetes Privilege Escalation Tactics | Iain Smart & Andrew Martin
มุมมอง 4972 หลายเดือนก่อน
Penetration testing Kubernetes shouldn't be easy, but we can make it so! Rogue SRE insider threat? Platform developers with grudges? Hostile internet citizens? Discover how to escalate your privilege, attain persistence, wreak cluster-wide havoc, and hide any trace of your activity in this enthralling exploration of cloud native security! Join us for a learner-friendly yet advanced dive into th...
Building a Self-Service Kubernetes Platform with Open Source Tools | Saranya Nambiar
มุมมอง 2222 หลายเดือนก่อน
Empowering development teams with a self-service Kubernetes platform can significantly enhance productivity and agility, allowing them to deploy and manage their applications independently. This session will explore how to build such a platform using open-source tools like Kubernetes Dashboard, Helm, Kustomize, and Kubeapps. Attendees will learn how to set up a self-service environment that mai...
The Joy of DevEx - Tightening dev feedback loops in K8S | Matthew Revell-Gordon
มุมมอง 1732 หลายเดือนก่อน
If you've ever developed a set of microservices and tried to run and test them locally on your laptop, you'll know that this often doesn't catch many problems, which you only find once you run them in a cloud-based deployment. This can lead to unnecessary expense, and drags on your dev feedback loop. Kubernetes, like most cloud-native technologies, can be a challenge to test locally. Locally-in...
Testing in Modern CI/CD Pipelines: The Good, The Bad, and The Ugly | Cortney Nickerson & Ole Lensmar
มุมมอง 2642 หลายเดือนก่อน
As organizations embrace Continuous Integration and Continuous Deployment (CI/CD) pipelines to accelerate software delivery, testing becomes increasingly vital. Unfortunately, it also becomes more complex, too. In this talk we'll take a look at the various challenges faced by diverse teams when testing in modern CI/CD pipelines. We'll discuss different approaches and tooling that can help reduc...
Building a Platform People Actually Use | Sarah Wells
มุมมอง 6682 หลายเดือนก่อน
It’s frustrating to build something that doesn’t get widely adopted. The answer isn’t to force people to use your platform: it’s to build things that people need, make them safe and simple to use, and document and promote them so people understand what capabilities are available. Sarah will talk about why a paved road approach gives you valuable feedback and allows innovation where it’s most ne...
Closing Panel with Keynote Speakers | Cheryl Hung, Chris Plank, Sarah Wells & Daniel Bryant
มุมมอง 1142 หลายเดือนก่อน
We'll be inviting our keynote speakers to discuss their key takeaways and insights from the event on this closing panel
An Odyssey with ArgoCD. From Git to Helm | Farah Adbib & Antonio Alferez
มุมมอง 4082 หลายเดือนก่อน
GitOps is a widely adopted paradigm in which the desired state is declared in a Git repository and automatically applied by a continuous delivery tool. ArgoCD is one of the most widely used tools for implementing GitOps. However, choosing the right source for your ArgoCD can be challenging, as different options have different trade-offs. While Git repositories are a popular choice, they are not...
Chaos & Behind the Scenes of Kubernetes in Production Blunders | Vinuja Khatode & Rohit Ghumare
มุมมอง 1972 หลายเดือนก่อน
In the fast-paced world of AI and cloud-native deployments, chaos can often become an uninvited guest. At Tune AI, we've encountered significant challenges while building and deploying a developer platform for Large Language Models (LLMs). This talk will delve into the incidents we faced and their resolutions while managing our deployed platform on Kubernetes in production, highlighting three c...
Building the future, together | Cheryl Hung
มุมมอง 362 หลายเดือนก่อน
As one of the earliest cloud native evangelists and pioneers, I’ve met tens of thousands of people through the Kubernetes community. I’ll share with you the memorable moments that inspired me, some funny encounters with cloud native “celebrities”, and where I’ll be investing my time going forwards.
From free kicks to git commits | Steve Wade
มุมมอง 532 หลายเดือนก่อน
Join me as I share my unconventional journey from professional footballer to technology, specifically focusing on building self-service platforms for developers on Kubernetes. This talk will chart the course of my career transformation, highlighting the pivotal moments that led me from the sports field to the tech field. Starting with my initial passion for football, I will delve into the lesso...
/config - The Configuration Endpoint Your API Always Needed | Yaara Letz
มุมมอง 2222 หลายเดือนก่อน
Users and developers often face significant challenges in configuring and debugging a product they run. This happens mainly due to a lack of real-time access to the current configuration status. They usually don’t know if the environment variable they try to add was correctly set. This opacity makes debugging difficult. The use of documentation for config is also cumbersome and slow. This and m...
Lightning talk - CVEs and K8s: A Love Story? - Marcus Tenorio
มุมมอง 502 หลายเดือนก่อน
Lightning talk - CVEs and K8s: A Love Story? - Marcus Tenorio
Unikorns all the way down: Building a managed Kubernetes service with ClusterAPI | Nick Jones
มุมมอง 4692 หลายเดือนก่อน
This talk is about building and operating a managed Kubernetes service using ClusterAPI plus a selection of other projects including ArgoCD and vCluster. I'll cover why we're doing this, introduce ClusterAPI, and then the service we've developed to tie it all together and present it as an easy-to-consume self-service API. I'll also discuss what else we've had to build along the way to ensure it...
When Platforms Meet Application Developers | Abby Bangser & Mauricio Salatino
มุมมอง 1262 หลายเดือนก่อน
When Platforms Meet Application Developers | Abby Bangser & Mauricio Salatino
Natwest Bank’s Platform Engineering and Platform as a Product journey to date | Chris Plank
มุมมอง 2802 หลายเดือนก่อน
Natwest Bank’s Platform Engineering and Platform as a Product journey to date | Chris Plank
Lightning talk - Kubernetes on Raspberry Pi - Chris Wraith
มุมมอง 1032 หลายเดือนก่อน
Lightning talk - Kubernetes on Raspberry Pi - Chris Wraith
Comprehensible Kubernetes: Empowering Scientists with Scalable and Secure Platforms for HPC and AI
มุมมอง 1092 หลายเดือนก่อน
Comprehensible Kubernetes: Empowering Scientists with Scalable and Secure Platforms for HPC and AI
Sustainability Chronicles: Innovate Through Green Technology With Kepler and KEDA | Katie Gamanji
มุมมอง 1072 หลายเดือนก่อน
Sustainability Chronicles: Innovate Through Green Technology With Kepler and KEDA | Katie Gamanji
Lightning talk - CNCF BIPOC Program - William Rizzo
มุมมอง 312 หลายเดือนก่อน
Lightning talk - CNCF BIPOC Program - William Rizzo
How many clusters do you need? | Tim Bannister
มุมมอง 1492 หลายเดือนก่อน
How many clusters do you need? | Tim Bannister
The operator antipattern | Gerald Schmidt
มุมมอง 1572 หลายเดือนก่อน
The operator antipattern | Gerald Schmidt
Platform Orchestrators: The missing middle of Internal Developer Platforms? | Daniel Bryant
มุมมอง 3002 หลายเดือนก่อน
Platform Orchestrators: The missing middle of Internal Developer Platforms? | Daniel Bryant
Take the Helm! Navigating 1k Releases per Day | Giorgia Fiscaletti
มุมมอง 1052 หลายเดือนก่อน
Take the Helm! Navigating 1k Releases per Day | Giorgia Fiscaletti
Deep dive into Kubernetes Runtime Security | Saeid Bostandoust
มุมมอง 2732 หลายเดือนก่อน
Deep dive into Kubernetes Runtime Security | Saeid Bostandoust
Lightning talk - Learning the Kubernetes Codebase using Shoulder.dev - Ben Hall
มุมมอง 1092 หลายเดือนก่อน
Lightning talk - Learning the Kubernetes Codebase using Shoulder.dev - Ben Hall
From Chaos to Control: Streamlining Kubernetes Ingress with Cilium | Shedrack Akintayo
มุมมอง 1002 หลายเดือนก่อน
From Chaos to Control: Streamlining Kubernetes Ingress with Cilium | Shedrack Akintayo
Charting the Course: The History and Evolution of Kubernetes Security | Rory McCune
มุมมอง 3402 หลายเดือนก่อน
Charting the Course: The History and Evolution of Kubernetes Security | Rory McCune
The journey from Old-Cluster to NewNewNewCluster while maintaining support of the DAFNI Platform
มุมมอง 422 หลายเดือนก่อน
The journey from Old-Cluster to NewNewNewCluster while maintaining support of the DAFNI Platform
Debian presentation on an apple 😅😅
Great presentation with great insights. Thank you!
Proud of You Saeed
27:23 canarytokens
18:52 Testkube demo
the solution for the last problem as described in Kubecon Flux event. Create your Helm charts in OCI-based registries ( like ECR, Azure DevOPS, Docker Hub), and use that chart's version from there. so you will not download so many YAML files and store in your etcd database. however, excellent presentation. Thanks.
Sinks
Amazing talk on Flux, my preferred GitOps Controller!
good explanation with valid points
sinks, not syncs?
nice work, Chris - lots to think about in there!
Awesome😮!!
Amazing talk!!
Love your delivery. A great warmth and friendliness, clearly evident in your presence.
i am about applying admission controller policy by CrowdStrike on my K8S openshift clusters .. would you advise to apply or eliminate this policy on namespaces or apply only on K8S assets ? thanks
This was from last years conference, so the speakers don't always check on here, and they don't get notified of comments. Best bet is to track Nic down on LinkedIn to ask him the question directly.
Good one
Nice
An excellent discussion , Tx for sharing it . What will be the state of apps and argocd , when REDIS get restarted ? , assuming there is no HA configured and its an Autosync enabled environment
It might be a basic question as I am a newbie. where do we set all these tuning parameters in ha/install? 1. Should we configure them via values.yaml and helm install argocd? 2. Should we directly edit the configmaps like argocd-cm? I really want to practice GitOps for ArgoCD install itself where these tuning parameters are captured in Git and can be applied any number of times.. considering that what is a better approach?
If you install argo using helm chart, you can override them using values file. If installed manually, kustomization or want to override them in cluster, argocd-cm and argocd-cmd-params-cm configmaps.
Thanks @ssbostan. This is one of the best argocd videos I have watched on TH-cam. 👏
Thnk u
Great talk
So you completely recommend against raw manifests? I see that in other talks, this pattern is recommended, as it reduces the compute load on the repo server and also helps show actual changes, rather than abstract changes to Helm and Kustomise values.
I preferred rendered manifest model or rendered helm with kustomization. Check CNCF talks for more info about these patterns.
Does someone know where the code is?
Watch this space. It will take a couple of weeks but I'll put together a public repo with the demo code
@@stephenjudd9799 did you managed to finished the demo code?
@@stephenjudd9799 did you managed to finish the demo code?
@@stephenjudd9799 Thanks!
@@stephenjudd9799 Did you managed to finish the demo code?
Awesome project! Making it CNCF is a great move.
Nice to see more focus on argocd scaling but some of the tunnings presented are inaccurate or just plain wrong like the one about the memory usage of plain manifests with the directory plugin.
I don't know what you mean but based on the docs when using raw manifests with directory plugin, memory usage can be grown up to 300x of the on the rest size.
Amazing job!
Please mates... Make a k8sgpt Karpenter open source project with crossplane!
looks line an amazing idea wanna collab on it to produce together maybe?🤔🤔🤔🤔
Guy had no clue What to come an year later!
It would have been nice if there was a link to the code demoed
Apologies for not answering sooner - I didn't realise there were any comments until today! It will take me a couple of weeks but I'll setup a public Github repo with the demo code (other people have asked also)
@@stephenjudd9799 Would be really helpful if we could have this code, it's really well explained :)
@@stephenjudd9799 did you have any updates about it? i really need this :(
@@stephenjudd9799 Any updates about this? i really need it :(
@@stephenjudd9799 did you managed to finish the code?
Nice deep dive for scaling ArgoCD. Do you have the repo of all the configs that you showed in the last slide to understand the moving parts ?
We really need the in-depth topics like this, thankssss 💯
I don't know if I'm distracting from the agenda but few seconds in and this kubedemy stuff sounds hella interesting 2 me 🥳🥳
Thanks for having me!
Amazing talk
Spotted a few recognizable faces on there!
Brilliant 👏 👏
You are perfect!
Legit! Thanks!
This is such an simple yet very inspiring talk Malavika Balachandran. Appreciate the energy throughout the presentation.
Not sure how the helmfile operator helps to solve the bootstrapping problem, if terraform installs it? Why can’t you run the helmfile command with terraform and solve the bootstrapping this way without the need for an operator?
Not clear to me as well. Instead of using terraform we need to install custom operator…. But how? With tf?
"The main idea behind having an operator is to have a system running constantly, looking for events to take action and maintain the desired state. For example, if the helmfile command executed by the terraform command fails, how can it be retried? Additionally, how can the argocd version be upgraded automatically? With an operator, these tasks can be easily automated."
My personal opinion is that using TF for deploying stuff into K8s clusters is an anti-pattern as you now have 2 sources of truth for the K8s cluster state: the K8s control plane and a tfstate file, so the chance of drift increases. I also don't much like the K8s related providers, i.e. the Helm, Helmfile and Kubernetes ones. I think the kubectl one is ok but it hasn't been touched for years. All that said, I did use TF to deploy my Helmfile operator into my K8s cluster (using raw manifests and the kubectl provider) as a 'one off', i.e. once the operator was installed I would never need to use TF to deploy anything else into the cluster.
Would you look at that. Just what I was looking for. Brilliant. Thanks!
I love it when you release a new video! Get the following you deserve > Promo`SM!
Super useful/interesting talk! Thanks Giorgia :)
You all did a great job on this project!
This was an excellent talk, and finally helped me understand what Falco is supposed to do. The Falco tagline of "cloud native runtime security" is really vague and confusing.
Thank you so much for demo on ESO. could you please give demo on AWS secrets provider
Feel free to contact me , I have the end to end to solution with ESO and AWS SM although in the POC capacity and I am sure same is similar for Azure Vault
The talk was really good , but the heading / subject of the talk seemed to be quite distant from what was discussed in the talk . I understood that Spot instances might be good , but the message about k8 getting doomed was not convincing enough .
3:30 I don't think you need to recompile your kernel if loading or creating a kernel module , IIRC?
great stuff :)