Cluster Grey Zone: Risks in Managed Cluster Middleware
30 min

Cluster Grey Zone: Risks in Managed Cluster Middleware

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Shay Berkovich Barak Sharoni
kubernetes cloud-security managed-kubernetes eks gke aks cluster-middleware attack-surface privilege-escalation container-security threat-modeling fluent-bit node-problem-detector
Chaos Engineering 2023 with Chaos Mesh
36 min

Chaos Engineering 2023 with Chaos Mesh

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Saiyam Pathak
chaos-engineering chaos-mesh kubernetes resilience reliability microservices distributed-systems cloud-native testing ci-cd observability performance
Running Not Root Made Easy
29 min

Running Not Root Made Easy

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Luboslav Pivarc
kubernetes non-root security pods containers virtual-machine capabilities selinux apparmor runtime kubevirt
Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper and Ratify
37 min

Checking the Chains at the Gate: Building Supply Chain Policies with Gatekeeper and Ratify

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Jeremy Rickard
kubernetes supply-chain-security gatekeeper ratify opa rego oci admission-controller policy-as-code sbom ci-cd
Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments
34 min

Mind the Gap! Bringing Together Cloud Services and Managed K8s Environments

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Christophe Tafani-Dereeper Diego Comas
kubernetes cloud-services aws-eks azure-aks gcp-gke iam security server-side-request-forgery workload-identity secrets-management access-control incident-response
Kubernetes Defensive Monitoring with Prometheus
27 min

Kubernetes Defensive Monitoring with Prometheus

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
David de Torres Huerta Mirco De Zorzi
kubernetes prometheus monitoring security falco cloud-native container-security threat-detection anomaly-detection observability cncf
Improve Vulnerability Management with OCI Artifacts โ€“ It Is That Easy!
36 min

Improve Vulnerability Management with OCI Artifacts โ€“ It Is That Easy!

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Itay Shakury Toddy Mladenov
vulnerability-management oci-artifacts sbom supply-chain-security container-security trivy notary oras cicd kubernetes container-registry signing
It Is More Than Just Correlation - A Debug Journey
28 min

It Is More Than Just Correlation - A Debug Journey

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Simon Pasquier Vanessa Martini
kubernetes observability debugging api open-source cloud-native troubleshooting korrel8
Love, Death and Robots - with Wasm & K8s on Boston Dynamics Spot
29 min

Love, Death and Robots - with Wasm & K8s on Boston Dynamics Spot

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Max Kรถrbรคcher Kevin Hawryluk
kubernetes wasm webassembly containers robotics boston-dynamics-spot iot cloud-native devops gitops argocd security
Efficient Access to Shared GPU Resources: Mechanisms and Use Cases
35 min

Efficient Access to Shared GPU Resources: Mechanisms and Use Cases

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Diogo Guerra Diana Gaponcic
gpu-scheduling kubernetes nvidia-mig time-slicing resource-management high-energy-physics machine-learning inference ci-cd benchmarking
Emergent Load Testing: Rules for Organized Chaos
38 min

Emergent Load Testing: Rules for Organized Chaos

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Nicole van der Hoeven
load-testing chaos-engineering observability grafana-k6 kubernetes performance-testing software-testing emergent-behavior api-testing browser-testing
Device Plugins 2.0: How to Build a Driver for Dynamic Resource Allocation
40 min

Device Plugins 2.0: How to Build a Driver for Dynamic Resource Allocation

KubeCon + CloudNativeCon - KubeCon + CloudNativeCon Europe 2023
Kevin Klues Alexey Fomenko
kubernetes device-plugins dynamic-resource-allocation resource-scheduling gpu-sharing mig-devices custom-controllers kubelet cdi resource-drivers nvidia intel