Open Source Summit + Embedded Linux Conference + OSPOCon 2021: Full Schedule

September 27-30, 2021
Seattle, Washington, USA + Virtual
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit + Embedded Linux Conference + OSPOCon 2021 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Pacific Daylight Time (UTC -7). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

11:15am PDT

(IN-PERSON) Tutorial: Introducing Centaurus: A Cloud Native Infrastructure Project for Large Scale Distributed Cloud - Sponsored by Futurewei

The combination of AI, 5G and edge applications poses major challenges for cloud infrastructure platforms to support low latency and high scalability requirements of next generation cloud workloads. With the convergence of Cloud and Edge computing, cloud infrastructure is becoming more distributed across centralized cloud data centers and remote edge locations. In this tutorial, we will discuss some of the technical challenges facing cloud infrastructure platforms in the age of AI, 5G, and edge. We will introduce Centaurus open-source project, a cloud native infrastructure platform for building distributed cloud. We will present and deep-dive technical architecture and design of Centaurus infrastructure, and discuss major features of current release as well as a future roadmap for the Centaurus project.

Tutorial Agenda

Introduction of Centaurus – Mengni Zhang and Rupal Shirpurkar
Large scale compute platform deep dive – Ying Xiong
Centaurus cloud network & Edge deep dive – Peng Du
Centaurus optimization for AI workload – Ying Xiong
Q/A

Speakers

Mengni Zhang

Project Manager, Futurewei

Rupal Shirpurkar

Rupal Shirpurkar, Business Head (Cloud BU), Click2Cloud Inc., Click2Cloud Inc

As Click2Cloud's Business Head for Product & Strategy, Rupal cultivates global relationships with Microsoft, Alibaba, Huawei, T-Systems, & SoftBank, driving Go-To-Market initiatives for enterprises. Passionate about strategy & Open Source community, she leads Outreach Committee at... Read More →

Ying Xiong

Technical VP and Head of Cloud Lab, Futurewei Technologies, Inc.

20+ Years of ICT, Cloud, Open Source Strategy/Operations/Governance/Compliance (patent, trademark, license, copyright), Business Development, Product Management/Marketing, Partnership Strategy/Recruitment/Management/GTM, Technology Evangelism, Developer Relations, Enterprise Sales... Read More →

Peng Du

Principal Software Architect, Futurewei Technologies

Dr. Du works as a Principal Software Architect at Futurewei Technologies. He contributes to the advancement of Kubernetes cluster resource management, scheduling system, container runtime, etc. Before Futurewei, Dr. Du worked at Amazon AWS and Microsoft Azure. Dr. Du holds a PhD in... Read More →

Monday September 27, 2021 11:15am - 12:05pm PDT
Room 301

Cloud Native Development, Tutorial

Experience Level Any
Talk Type In-person

11:15am PDT

(VIRTUAL) Leveraging WebAssembly to Write Kubernetes Admission Policies - Flavio Castelli & Rafael Fernández López, SUSE

WebAssembly is an emerging technology that allows the creation of portable units of code that can be executed in a safe way, regardless of the architecture and operating system underneath. Many programming languages already support WebAssembly as a compilation target, and more are joining the ranks. This session will show how Kubewarden allows policy authors to write Kubernetes admission policies using the languages and tools of their choice. Policy authors can tap into existing tools, libraries, frameworks and best practices. This not only lowers the barrier to create policies, but also to review and maintain them. Policies are distributed via regular container registries, can be easily downloaded and tested outside of Kubernetes. This makes it easy to combine Kubewarden into DevOps processes. Finally, Kubernetes administrators can benefit from Kubewarden's integrations with consolidated Cloud Native projects to cover aspects such as distribution, testing and observability.

Speakers

Rafael Fernández López

Senior Software Engineer, SUSE

Rafa is a Senior Software Engineer at SUSE that loves to learn and experiment. He has special interest in the intersection between programming languages, distributed systems and infrastructure. When not in front of a computer he enjoys time with family, friends, city walks and ph... Read More →

Flavio Castelli

Distinguished Engineer, SUSE

Flavio Castelli is a Distinguished Engineer at SUSE. His main areas of focus are Linux Containers, Kubernetes and WebAssembly. Flavio loves exploring new technologies, contributing to open source projects and sharing his knowledge.

Leveraging WebAssembly to Write Kubernetes Admission Policies pdf

Monday September 27, 2021 11:15am - 12:05pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Security/Authentication

Experience Level Mid-level
Talk Type Virtual
Presentation Slides Attached Yes

11:15am PDT

(VIRTUAL) Tutorial: Hack My Mis-Configured Kubernetes - Sponsored by Snyk

Kubernetes is a powerful and highly configurable tool, but by default, it’s extremely insecure. In this live hacking session, I’ll show how an attacker can expand the blast radius of an application exploit through to control of the entire cluster whilst demonstrating the misconfigurations which allow this to occur and showing how you can avoid these scenarios in the real world.

Speakers

Eric Smalling

Senior Developer Advocate, Snyk

Eric is a 30+ year enterprise software developer, architect, and consultant with a focus on CI/CD, DevOps, and container-based solutions over the last decade. He is a Docker Captain, is certified in Kubernetes (CKA, CKAD, CKS), and has been a Docker user since 2013. As a Senior Developer... Read More →

Eric Smalling Snyk Hack my Kubernetes Slides pdf

Monday September 27, 2021 11:15am - 12:15pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development

Experience Level Mid-level
Talk Type Virtual
Presentation Slides Attached Yes

1:30pm PDT

(IN-PERSON) The Secret to Brewing up a Good API - David Dymko, Vultr

While a cup of coffee may seem like its two parts of hot water and coffee grinds, there is much more to it. The same can be said for a well-designed API. A good API does more than just take input and return output. It offers a few key items that make it enjoyable and easy to work with. These key items are documentation, URI Design, Consistent Typing, Pagination, Informative Errors, Authentication/Rating Limiting, and JSON/Open API Specifications. These can sometimes be overlooked or not get the extra polish they deserve which detracts from the API. David will cover each of these in detail giving you the insight to make your APIs stand out from the rest.

Speakers

David Dymko

Technical Lead Cloud Native Development, Vultr

David Dymko is the Technical Lead for Cloud Native Development at Vultr. He leads the development of products such as Load Balancers, API v2, and Vultr Kubernetes Engine, in addition to contributing and maintaining various open-source projects within Vultr's organization. Prior to... Read More →

dymko oss slides pdf

Monday September 27, 2021 1:30pm - 2:20pm PDT
Room 301

Cloud Native Development, APIs

Experience Level Entry-level
Talk Type In-person
Presentation Slides Attached Yes

1:30pm PDT

(VIRTUAL) Under the Hood with Fluent Bit Operator: Kubernetes-native Log Processor - Feynman Zhou, QingCloud & Dhruv Kela, DigitalOcean

Fluent Bit has various configuration options for inputs, filters, parsers, and outputs plugins. Usually, these configuration options are put into one single file. It's not convenient if you just want to modify configurations for just one plugin especially if you want to modify it with Kubernetes API because the entire configuration file has to be loaded and parsed. Besides, Fluent Bit has to be restarted every time the configuration file is modified and this means the Pods of the entire DaemonSet have to be recreated in a K8s cluster. To address these concerns, the KubeSphere observability team initiated Fluent Bit Operator with which you can configure Fluent Bit with CRDs like FluentBit, FluentBitConfig, Input, Filter, Parser, Output in a Kubernetes-native way. What's more, Fluent Bit DaemonSet Pods will not be recreated every time a config changes. It supports dynamic configuration and provides great flexibility in building the Kubernetes-native logging layer. DigitalOcean adopts Fluent Bit Operator as the Kubernetes log processor and made great contributions to Fluent Bit Operator. In this talk, we will introduce the Fluent Bit Operator and its architecture, then deep dive into the KubeSphere logging system based on Fluent Bit Operator.

Speakers

Dhruv Kela

Engineer II, DigitalOcean

Dhruv is an Engineer with the Marketplace team at DigitalOcean. He is passionate about open source technologies and building highly performant services. He is also one of the maintainers of the Fluent Bit Operator project. Dhruv has a Master’s in computer science from SUNY Stony... Read More →

Feynman Zhou

Developer Advocate, QingCloud

Feynman is a developer advocate and CNCF Ambassador at KubeSphere. He is growing and maintaining the KubeSphere community for three years, which helps thousands of users to widely adopt Kubernetes and reduce the learning curve of using cloud-native technologies. He is the DZone Core... Read More →

OSS 2021 Under the hood with Fluent Bit Operator K8s native log processor (1) pptx

Monday September 27, 2021 1:30pm - 2:20pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Observability: Metrics + Logging + Tracing + Service Mesh

Experience Level Mid-level
Talk Type Virtual
Presentation Slides Attached Yes

2:30pm PDT

(IN-PERSON) AI Pipelines Workflows and ML lineage using Tekton Pipelines - Tommy Li & Animesh Singh, IBM

The Tekton Pipelines project provides Kubernetes-style resources for declaring CI/CD-style pipelines. However, it's not very user-friendly for data scientists since it's purely defined with Kubernetes custom resources and missing some data-driven features for running AI workflows. Furthermore, Tekton lacking many pipeline features that could be useful in ML use cases, such as looping or recursively running over a subset of the pipelines. Therefore, the Kubeflow pipelines with Tekton (KFP-Tekton) project extend the Tekton pipeline capabilities by building a custom task controller for Tekton. Tekton custom tasks allow any project to develop new and specialized pipeline features. KFP-Tekton introduces a few new concepts such as any sequencer, pipeline loops, and recursion for data scientists who need to run ML workflows on top of a managed Tekton service. In addition, KFP-Tekton brings all the KFP features such as lineage tracking based on Tekton to provide a much better user experience.

Speakers

Animesh Singh

Distinguished Engineer and CTO - Watson Data and AI OSS Platform, IBM

Animesh Singh is CTO and Director for IBM Watson Data and AI Open Technology, responsible for Data and AI Open Technology strategy. Creating, designing and implementing IBM’s Data and AI engine for AI and ML platform, leading IBM`s Trusted AI efforts, driving the strategy and execution... Read More →

Tommy Li

Senior Software Developer, IBM

Tommy Li is a senior software developer in IBM focusing on Cloud, Kubernetes, and Machine Learning. He is one of the Kubeflow committers and worked on various open-source projects related to Kubernetes, Microservice, and deep learning applications to provide advanced use cases on... Read More →

Monday September 27, 2021 2:30pm - 3:20pm PDT
Room 301

Cloud Native Development, Architectures & Architectural Patterns

Experience Level Mid-level
Talk Type In-person

2:30pm PDT

(IN-PERSON) How CNCF is Enabling End User Driven Open Source - DeVauna Lee Bolar, Cloud Native Computing Foundation

The CNCF end user community is a vendor-neutral group of more than 150 organizations using cloud native technologies to build their products and services. These experienced practitioners help power CNCF’s end user-driven open source ecosystem, steering production experience and accelerating cloud native project growth.

CNCF is powered by contributions from our global community. To ensure the growth and longevity of our projects, we are enabling more end user driven open source than ever before. What are some of the ways CNCF is doing this? Join this presentation to find out more!
You’ll learn about:

How CNCF enables end users to better navigate the ecosystem
End user collaboration opportunities
Ways to engage with CNCF and other experienced practitioners
How CNCF can help your end user organization get started

Speakers

DeVauna Lee Bolar

Business Development Specialist, CNCF

DeVauna Lee is responsible for developing and driving strategic growth for the foundation with the global member community, partnerships, and CNCF events.

Monday September 27, 2021 2:30pm - 3:20pm PDT
Room 302

Cloud Native Development

Experience Level Any
Talk Type In-person

3:50pm PDT

(IN-PERSON) Securing Serverless Functions on Kubernetes with Quarkus Extensions - Daniel Oh, Red Hat

While business applications are evolving to serverless functions running on Kubernetes, security concerns become bigger due to managing multiple security layers from infrastructure to container, application, and APIs. To address each of these concerns, cloud service providers showcase new security services and features with an integrating managed Kubernetes platform. Enterprise can also adopt open source tools to secure sensitive information that should be stored and retrieved by applications. There’s one commonality to bring these solutions to your Kubernetes environment. You need to use or add new tools/features to applications which are probably the extra burdens for you as well as making another layer to secure. What if you could handle this problem in Kubernetes native way without any 3rd party solutions? More importantly, developers can augment the security functionality for the serverless functions based on Java, one of the most popular languages for developing enterprise applications. This session teaches you how to secure Java serverless functions on Kubernetes with Quarkus extensions by best practices, use cases, and example code with a demo.

Speakers

Daniel Oh

Senior Principal Developer Advocate, Red Hat

Daniel Oh is Java Champion and Senior Principal Developer Advocate at Red Hat to evangelize developers for building Cloud-Native Microservices and Serverless Functions with Cloud-Native Runtimes(i.e. Quarkus, Spring Boot, Node.js) and OpenShift/Kubernetes. Daniel also continues to... Read More →

[OSS 2021]Securing Serverless Functions with Quarkus Kubernetes Extensions pdf

Monday September 27, 2021 3:50pm - 4:40pm PDT
Room 302

Cloud Native Development, Serverless and Functions-as-a-Service

Experience Level Mid-level
Talk Type In-person

3:50pm PDT

(VIRTUAL) Hail Hydrate! From Stream to Lake Using Open Source - Timothy J Spann, StreamNative

A cloud data lake that is empty is not useful to anyone. How can you quickly, scalably and reliably fill your cloud data lake with diverse sources of data you already have and new ones you never imagined you needed. Utilizing open source tools from Apache, the FLiP stack enables any data engineer, programmer or analyst to build reusable modules with low or no code. FLiP utilizes Apache NiFi, Apache Pulsar, Apache Flink and MiNiFi agents to load CDC, Logs, REST, XML, Images, PDFs, Documents, Text, semistructured data, unstructured data, structured data and a hundred data sources you could never dream of streaming before. I will teach you how to fish in the deep end of the lake and return a data engineering hero. Let's hope everyone is ready to go from 0 to Petabyte hero.

Speakers

Timothy Spann

Principal Developer Advocate, Cloudera

Tim Spann is the Principal Developer Advocate for Data in Motion @ Cloudera where he works with Apache Kafka, Apache Flink, Apache NiFi, Apache Iceberg, TensorFlow, Apache Spark, big data, the IoT, machine learning, and deep learning. Tim has over a decade of experience with the IoT... Read More →

Hail Hydrate! From Stream to Lake Using Open Source pdf

Monday September 27, 2021 3:50pm - 4:40pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Data Flow Management

Experience Level Entry-level
Talk Type Virtual
Presentation Slides Attached Yes

3:50pm PDT

(VIRTUAL) Robocat Meets Octopus and Octocat: Interoperability in CI/CD - Jerop Kipruto, Google & Priti Desai, IBM

You may have heard of ArgoCD and GitHub Actions, but have you heard of Tekton? With the rapid emergence of CI/CD tools for cloud-native applications, how do you decide which tool is right for you? Tekton is a powerful yet flexible cloud-native open-source framework for creating CI/CD systems. It’s highly optimized for building, testing and deploying cloud-native applications by abstracting away implementation details. It’s Kubernetes-native thus inherently integrates into key Kubernetes facilities around scheduling, typing, decoupling, extensibility, security, etc. Oftentimes, users migrating to Tekton bring their existing pipelines and try to directly translate them to Tekton pipelines. The challenge here is that the core building blocks of each platform differ so it might be impossible or complicated to directly translate. In this talk, we will show that “one size fits all” is not scalable. Instead, we can leverage multiple CI/CD tools that provide different capabilities and interoperate to solve complex CI/CD use cases. We will discuss how core components compare between Tekton and other common CI/CD tools. Moreover, we will demonstrate how Tekton (Robocat) integrates and interoperates with ArgoCD (Octopus) and GitHub Actions (Octocat).

Speakers

Priti Desai

Software Engineer, IBM

Implements CI/CD with Tekton and Serverless with OpenWhisk. Returning from cdCon 2020 with more interesting topics. OpenStack Evangelist in the past and have presented at various OpenStack summits including Paris, Vancouver, and Japan.

Jerop Kipruto

Senior Software Engineer, Google

Jerop Kipruto is a Senior Software Engineer at Google where she makes it easier and safer for developers to build and ship cloud native applications. She is a maintainer and governing board member of the Tekton project, and she is a frequent speaker at industry conferences, including... Read More →

Monday September 27, 2021 3:50pm - 4:40pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, CI/CD (Configuration Management)

Experience Level Mid-level
Talk Type Virtual

4:50pm PDT

(VIRTUAL) Achieving End-to-end Visibility into Complex Event-sourcing Transactions using Distributed Tracing - Michael Haberman, Haberman

In recent years the usage of event-sourcing systems like Kafka or SQS is growing rapidly among Node.js applications. Building systems around an event-driven architecture simplifies horizontal scalability in distributed computing models and makes them more resilient to failure. This is because applications state can be copied across multiple parallel snapshots for high availability. But with these advantages new challenges are arising - mainly to get visibility in these complex processes. Since event-driven architecture is asynchronous by nature, it's hard to keep track of what happened when and what are the relations between the different components in the system. This can be extremely important when trying to debug transactions or figuring out bottlenecks in the system. In this talk, Michael will present ways to achieve end-to-end and granular visibility into complex event-sourcing transactions using distributed tracing. Michael will use open-source tools like OpenTelemetry, Jaeger, and Zipkin to showcase a complex Node.js system using SQS and Kafka.

Speakers

Michael Haberman

Co-Founder & CTO, Aspecto

Michael is the Co-Founder and CTO of Aspecto, an observability platform powered by OpenTelemetry. After serving as a software developer in an elite unit in the Israeli Intelligence branch, Michael worked with a few startups on building and scaling their microservices infrastructure... Read More →

OS Summit Apsecot Michael Haberman Achieving End to end Visibility into Complex Event sourcing Transactions using Distribu pdf

Monday September 27, 2021 4:50pm - 5:40pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Observability: Metrics + Logging + Tracing + Service Mesh

Experience Level Entry-level
Talk Type Virtual
Presentation Slides Attached Yes

11:00am PDT

(IN-PERSON) Introduction to Kubernetes Operators - Jonathan Berkhahn, IBM

Are you a Kubernetes application developer interested in operators but not sure where to start? Never heard of operators before and just want to know what they are? Operators are an exciting new pattern for Kubernetes application development that allows a Kubernetes application developer to take full advantage of the expressiveness of the Kubernetes API to manage their applications behavior and lifecycle. Come learn exactly what an operator is and isn't, and how you can painlessly convert your Kubernetes application to an operator. Watch as we use the Operator-SDK CLI tool can be used to scaffold a working operator from a pre-existing Helm chart in just a few minutes.

Speakers

Jonathan Berkhahn

Senior Software ENgineer, IBM

Jonathan is a member of the steering committee of Operator Framework, and a maintainer of Operator SDK. He's worked in the past on various open technologies in the cloud platform space, including Kubernetes and Cloud Foundry. His passions in open source include behavior driven development... Read More →

intro to operators pdf

Tuesday September 28, 2021 11:00am - 11:50am PDT
Elwha B

Cloud Native Development, Architectures & Architectural Patterns

Experience Level Entry-level
Talk Type In-person
Presentation Slides Attached Yes

11:00am PDT

(VIRTUAL) Security and Flexibility: Decouple Policy to Enable Architectural Choice - Ash Narkar, Styra

Perhaps for the first time, adding flexibility doesn’t have to come at the expense of increasing risk. Decoupled policy-as-code means that authorization rules, access governance, and policy guardrails can provide control, without mandating or locking in underlying systems.
Decoupling decisions from downstream projects and tools enables better control and visibility over who, and what, can do what - and allow distributed policy enforcement across a range of languages, execution environments, and protocols. In this session we’ll show how CNCF graduated project Open Policy Agent provides decoupled policy across:

Kubernetes: How to ensure deployment of the application is properly bound to the policies that are intended to secure it.
Microservices: How to write policies that limit the risk of data exfiltration, lateral movement and insider attacks or mistakes.
CICD: How to impose governance over the policies written by individual teams so that just like application code, bad policies are rejected well before they cause problems.

Speakers

Ash Narkar

Software Engineer, Styra

Ash Narkar is a maintainer of the Open Policy Agent project. Ash has over 5 years of experience working on large-scale distributed systems. Ash is a Senior Software Engineer at Styra, Inc. working on OPA development and integrations. Previously he was a Principal Engineer at Verizon... Read More →

Tuesday September 28, 2021 11:00am - 11:50am PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Container & Infrastructure Security

Experience Level Mid-level
Talk Type Virtual

11:00am PDT

(VIRTUAL) Unify Data and Storage Management with SODA ODF - Steven Tan, Futurewei & Anjaneya ‘Reddy’ Chagam, Intel

The Open Data Framework (ODF) unifies data and storage management from the core, to cloud and to edge. In this talk, we will show how ODF simplifies Kubernetes storage management, provides data protection for applications, and connect data on-prem to clouds. We will also be introducing how ODF can be extended with other SODA projects such as DAOS - a distributed asynchronous object storage for HPC, ZENKO - a multicloud data controller with search functionality, CORTX - an object storage optimized for mass capacity storage and others (YIG, LINSTOR, OpenEBS).

SODA Foundation is a Linux Foundation project focused on building an ecosystem of open source data management and storage software for data autonomy.

Speakers

Reddy Chagam

Senior Principal Engineer and Lead Cloud Storage Architect, Intel

Anjaneya “Reddy” Chagam is a Senior Principal Engineer and Lead Cloud Storage Architect in Intel’s Cloud and Enterprise Solutions Group. He is responsible for developing software-defined storage strategy, architecture, and platform technology initiatives. He is a board member... Read More →

Steven Tan

VP & CTO Cloud Solution, SODA Foundation Chair, Futurewei

Steven Tan is VP & CTO Cloud Solution, Storage at Futurewei where he is responsible for open source strategy and collaboration. Steven brought together leaders across industries and founded the SODA Foundation which he currently serves as chair. SODA Foundation is a transformation... Read More →

Tuesday September 28, 2021 11:00am - 11:50am PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development

Experience Level Any
Talk Type Virtual

12:00pm PDT

(VIRTUAL) Instant Self-contained Development Environments for Everyone - Yshay Yaacobi, Livecycle

It has become increasingly difficult and time consuming to start working on a new codebase, especially in a polyglot microservice world. Using several patterns and developer containers we can create an amazing developer experience that will allow anyone to instantly deep-dive into coding on any machine. This talk will introduce the concept of a self-contained repository - a repository that contains all relevant information for workstation/dependency configuration, build, debug, CI/CD, secrets (encrypted), docs and more that reside in the repository. We'll explore the idea of a development container and how we can use free OSS technologies (like Git Docker & Docker Compose, Kubernetes, GPG, VSCode, Tilt...) to create a stable development environment that work out-of-the-box and provides all the power, speed and capabilities of modern development & cloud native tooling. Live code examples will be showcased as part of this talk.

Examples available on:
https://github.com/yshayy/self-contained-repositories

Speakers

Yshay Yaacobi

CTO, Livecycle

Yshay is the co-founder and CTO at Livecyle, an early-stage startup that specializes in collaboration on top of live environments. Yshay has more than a decade of experience with web and cloud technologies, has given local talks about various technologies and is co-organizer of the... Read More →

Instant developer onboarding with self contained repositories pptx

Tuesday September 28, 2021 12:00pm - 12:50pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Architectures & Architectural Patterns

Experience Level Mid-level
Talk Type Virtual

12:00pm PDT

(VIRTUAL) Wayfair Same-day Delivery: A Narrative in Painful Anecdotes about CI at Scale - Lelia Bray-Musso & Gary Preston White Jr., Wayfair

Continuous Integration. It’s the first step in most developer journeys to Cloud Native. It’s also a platform team’s worst nightmare. In this talk, listen to Lelia and Gary laugh through the pain of scaling from 30 engineers to 3000. Moving from direct deployments in FTP all the way up to automated deployments with Kubernetes and Buildkite. From 4 hour lead times to 10 minute keyboard-to-production deployments. We’ll use the backdrop of explosive growth at Wayfair to bring relatable hilarity to engineers working in operations, devops, and the software layer! This war story of reducing deploy train brain pain will also break with practical learnings and examples on how you might be able to benefit from our mistakes. Come laugh with us! (Or at us).

Speakers

Gary Preston White Jr.

Staff Engineer, Wayfair

Gary White Jr. is a technologist, meme enthusiast, aspiring gearhead, and has-been musician. Working early in his career on Cloud Foundry and infrastructure automation, he has worked with many enterprise companies on solving difficult problems at scale. You can find Gary's previous... Read More →

Lelia Bray-Musso

Staff Engineer, Wayfair

Lelia Bray-Musso is an open-source enthusiast, automation aficionado, emoji connoisseur, and former film major. After switching to a career in technology in her mid-20's, she found herself unable to avoid the allure of Continuous Integration, no matter which title she held: Test Engineer... Read More →

Wayfair Same Day Delivery pdf

Tuesday September 28, 2021 12:00pm - 12:50pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, CI/CD (Configuration Management)

Experience Level Mid-level
Talk Type Virtual
Presentation Slides Attached Yes

4:00pm PDT

(IN-PERSON) Container Standards Explained - Melissa McKay, JFrog

Are you currently navigating containerization and cloud native deployment of your project? Do you understand how all of the container ecosystem components fit together and how OCI specifications are driving different implementations? What does it mean that Kubernetes is deprecating Docker??? Join Melissa McKay in a session about how the OCI Image Specification, the OCI Runtime Specification, and the OCI Distribution Specification came to be. Learn the technical details behind the specifications as well as the latest developments in Docker and other related projects in the container landscape. You will leave this session with a clear understanding of the goals of the Open Container Initiative and its effect on container implementations as well how to become an active member of this community. Leave with the essential knowledge you need that will help you choose your tech stack responsibly for your own project as well as prepare you for the future of your container deployments.

Speakers

Melissa McKay

Developer Advocate, Office of the CTO, JFrog

Melissa is passionate about Java, DevOps and Continuous Delivery. She is currently a Developer Advocate for JFrog, serves on the Continuous Delivery Foundation TOC and is a Co-Chair of the Interoperability SIG. Melissa has been recognized as a Java Champion and Docker Captain, is... Read More →

Tuesday September 28, 2021 4:00pm - 4:50pm PDT
Elwha B

Cloud Native Development, Containers

Experience Level Mid-level
Talk Type In-person

4:00pm PDT

(VIRTUAL) Tutorial: Istio Service Mesh Get Started Workshop - Lin Sun, Solo.io

You will be given a quick fly-over of what challenges service mesh solves, service mesh architecture, and various service mesh projects in the ecosystem. Then we will dive into the Istio service mesh project including how it works and the best practice to adopt the Istio service mesh through hands-on labs. We will cover the following topics in this workshop: - Install Istio - Secure services with Istio Ingress Gateway - Add services to the mesh - Secure interservice communication with Istio - Control traffic

Speakers

Lin Sun

Head of Open-Source, solo.io

Lin is the Head of Open Source at Solo.io, also serving as a CNCF TOC member and ambassador. She has been actively involved with the Istio service mesh since its inception in 2017, holding positions on both the Istio Steering Committee and Technical Oversight Committee. Prior to her... Read More →

Tuesday September 28, 2021 4:00pm - 5:50pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Cloud-native Developer & Operator Experience

Experience Level Entry-level
Talk Type Virtual

5:00pm PDT

(IN-PERSON) Making Complex Open Source Safe for Operations - Gordon Haff & William Henry, Red Hat

Open source communities have historically been most focused on source code and with developers, often at the individual project level. The associated open source development model has driven and continues to drive an increasing amount of the world’s innovation. But that world is changing. Hybrid cloud and edge computing architectures are complex. Increasingly, system engineering, architectural patterns, and integration can no longer be an afterthought. In this talk, Red Hat’s Gordon Haff and William Henry take you through these mounting challenges. But we’ll also share some of the work going on to deliberately build in operations and system design in an open source way. One project is Operate First, which lets open source developers bring their projects to a production cloud during development. We’ll also give an example of Blueprints. Open source Blueprints focus on specific solution patterns with the goal of providing a prescriptive architecture for deploying open source software based on real life implementations. One benefit among many of this approach is that it limits the interactions among component open source projects and products and thereby simplifies the evolution of the solution through its lifecycle.

Speakers

Gordon Haff

Technology Advocate, Red Hat

Gordon Haff is Technology Advocate at Red Hat where he works on market insights; writes about tech, trends, and their business impact; and is a frequent speaker at customer and industry events. Among the topics he works on are edge, AI, quantum, cloud-native platforms, and next-generation... Read More →

William Henry

Senior Distinguished Engineer, Red Hat

William Henry is a software and IT enthusiast with over 30 years experience developing distributed applications and systems and service oriented architectures for both government and private industry. His background involves research in software development risk management. He has... Read More →

SafeForOperations (1) pdf

Tuesday September 28, 2021 5:00pm - 5:50pm PDT
Room 301

Cloud Native Development, Cloud-native Developer & Operator Experience

Experience Level Mid-level
Talk Type In-person

10:30am PDT

(IN-PERSON) Running My Actions: An Introduction to GitHub and GitLab Workflows - Ryan M Cook, Red Hat

How cool is it that my code repository can store, test, and deploy my code? GitLab runners and GitHub actions can be used to perform a series of steps against a code base making it so the only thing your team has to do is push code and the pipelines handle everything afterwards from testing to even deploying! This session will start from Day 0, we will introduce and design workflows that will test, merge, and deploy an application and we will do it LIVE together!

Speakers

Ryan M Cook

Principal Software Developer, Red Hat

Ryan has been a Red Hatter for 7 years and lives for automation. Anything that can be done to make his life easier is always what he strives to do.

Running my actions, An introduction to GitHub and GitLab workflows pdf

Wednesday September 29, 2021 10:30am - 11:20am PDT
Room 301

Cloud Native Development, CI/CD (Configuration Management)

Experience Level Entry-level
Talk Type In-person
Presentation Slides Attached Yes

10:30am PDT

(IN-PERSON) What’s Breaking My Build? AIOps Tooling to Aid Your CI/CD Workflows - Oindrilla Chatterjee & Aakanksha Duggal, Red Hat

It’s easy to get lost in logs and dashboards while getting to the root of build or test failures. By leveraging the data made available by Kubernetes testing and visualization platforms like Prow and TestGrid, we have built AI4CI (Artificial Intelligence for Continuous Integration), an intelligent open source AIOps toolkit which can be used to better monitor builds to help developers get to the root cause of failures. AI4CI collects data from various Kubernetes CI/CD tools to calculate key performance indicator metrics. These metrics can help monitor the state of a CI workflow and can be shared via automated dashboards running on Kubeflow pipelines which can help investigate problematic tests, builds, or jobs.

Starting with this open source AIOps toolkit, there is a focus on cultivating an open source community which uses open operations data and an open infrastructure for data scientists and DevOps engineers to collaborate.

In this session, the speakers demonstrate some example ML use-cases, share dashboards, getting-started guides, and jupyter notebooks which attendees can easily get started with, to evaluate the current state of their CI workflow.

By the end of this session, attendees learn how to:

Use open source AIOps tools to monitor their CI/CD workflows.
Leverage dashboards to get more visibility into build failures and root cause analysis.
Speed up the development lifecycle by building smarter testing and visualization platforms.

Speakers

Oindrilla Chatterjee

Senior Data Scientist, Red Hat

Oindrilla is a Senior Data Scientist at Red Hat, in the Office of the CTO working on emerging trends and research in ML and AI. She works on evaluating new tools, platforms, and methodologies in the open source Data Science ecosystem, for enhancing Red Hat products and internal services... Read More →

Aakanksha Duggal

Senior Data Scientist, Red Hat Inc

Aakanksha Duggal is a Senior Data Scientist in the Emerging Technologies Group at Red Hat. She is a part of the Data Science team and works on developing open source software that uses AI and machine learning applications to solve engineering problems.

Open Source Summit AI4CI pdf

Wednesday September 29, 2021 10:30am - 11:20am PDT
Elwha B

Cloud Native Development, CI/CD (Configuration Management)

Experience Level Entry-level
Talk Type In-person

11:30am PDT

(IN-PERSON) Kubernetes Policy as Code with Kyverno - Jim Bugwadia, Nirmata

Policies are used to validate and enforce rules for a system. Kubernetes provides a powerful configuration management system with some built-in policy objects. However, Kubernetes is also designed to be extensible and allows plug-ins to provide powerful capabilities. In this session, Jim will present and demonstrate Kyverno, a CNCF sandbox project, which acts as a policy management plug-in for Kubernetes and enables separation of concerns for Kubernetes operators and developers. You will learn why policies matter via real world examples covering use cases for security and automation of Kubernetes cluster and workload configurations. After covering the basics of Kubernetes policy management and Kyverno, Jim will discuss how to enable policy-as-code so Kyverno policies can be managed across multiple clusters using software management principles and best practices for versioning, change management, and deployment.

Speakers

Jim Bugwadia

Co-founder and CEO, Nirmata

Jim Bugwadia is a co-founder and the CEO of Nirmata, the Kubernetes policy and governance company. Jim is an active contributor in the cloud native community and currently serves as co-chair of the Kubernetes Policy and Multi-Tenancy Working Groups. Jim is also a co-creator and maintainer... Read More →

Kyverno OSS 2021 pdf

Wednesday September 29, 2021 11:30am - 12:20pm PDT
Room 301

Cloud Native Development, Cloud-native Developer & Operator Experience

Experience Level Entry-level
Talk Type In-person

11:30am PDT

(IN-PERSON) Long-Term Metrics with M3 and Prometheus - Matt Schallert, Chronosphere

Prometheus is the de facto solution when getting started with metrics, supporting use cases where a single node can store the entire dataset. When it comes to scaling out workloads or storing long-term data, Prometheus offers the Remote Write and Read interfaces to integrate with other storage solutions. In this talk, Matt will show attendees how they can scale their existing Prometheus metrics workloads with M3, an open source metrics platform originated at Uber. Matt will discuss the background of Prometheus’s remote storage interfaces, and how they enable users to integrate with any number of systems they’re familiar with. He will demonstrate how quickly users can get an M3 stack up and running and integrate it with Prometheus. The audience will walk away with a better understanding of the challenges of effectively scaling their metrics workloads, and how they can overcome these challenges with open source tools such as M3.

Speakers

Matt Schallert

Member of Technical Staff, Chronosphere

Matt is a Member of Technical Staff at Chronosphere, where he ensures Chronosphere's infrastructure meets the scale and reliability needs for cloud native observability. Previously, Matt was a Senior Site Reliability Engineer at Uber, where he helped launch the open source metrics... Read More →

Wednesday September 29, 2021 11:30am - 12:20pm PDT
Elwha B

Cloud Native Development, Observability: Metrics + Logging + Tracing + Service Mesh

Experience Level Mid-level
Talk Type In-person

11:30am PDT

(VIRTUAL) Open Source for Better Observability - Dotan Horovits, Logz.io

In the cloud native era systems are getting ever more dynamic and complex. With containers and microservices architecture, monitoring and troubleshooting systems is more challenging than ever before. The open source community has risen up to the challenge and delivered solutions that fit modern environments. Open source projects such as Prometheus and the ELK Stack have gathered massive adoption with developers and DevOps engineers, who also carry this skillset between companies and grow the adoption. New open standards, such as OpenMetrics, OpenTracing and OpenTelemetry, are emerging to converge the industry and prevent vendor lock-in. In this talk I will talk about observability, the recommended open source tools and standards, and how to combine them to help you achieve effective observability in your environment.

Speakers

Dotan Horovits

Principal Developer Advocate, CNCF Ambassador, Logz.io

Horovits is an international speaker and thought leader, as well as a CNCF Ambassador. He brings a wealth of knowledge in cloud-native solutions, DevOps practices and more. Horovits runs the successful OpenObservability Talks podcast, and has served as an organizer of KCD, DevOpsDays... Read More →

Horovits Open Source for Better Observability LF OSSummit 2021 pdf

Wednesday September 29, 2021 11:30am - 12:20pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Observability: Metrics + Logging + Tracing + Service Mesh

Experience Level Entry-level
Talk Type Virtual

1:45pm PDT

(IN-PERSON) Building Scalable APIs Using Serverless - Qendresa Hoti & Albiona Hoti, We Tech

During this talk, we will discuss one of the categories of cloud computing services. We will be able to know more about what serverless means, how serverless has changed the way developers build applications. We will continue to focus on function as a service, principles of FaaS, benefits, use cases, and the types of functions. We will be talking about some of the FaaS providers, comparing FaaS vs PaaS.

Meanwhile, as mentioned above, there are multiple FaaS providers, we will stop by an introduction of AWS Lambda and Serverless applications. We will explore how lambda works, its history, its capabilities, the price of using it as a service, and how this service is being used.

In the past two years, we've seen a growing trajectory on tools to make it easier to build serverless applications. We will be ending this presentation knowing how to create serverless applications, deploy and manage them easily. We will learn the differences in use-cases provided by different open source frameworks and overviews of why you should pick one framework from another as a solution for your product.

We will work on an open-source project, the code will be open to the audience, and we will use a 'surprise' open-source framework for building serverless applications.

Speakers

Qendresa Hoti

Software Developer, We tech

I am Qendresa, a software engineer by day, a very energetic personality full time, passionate about building extraordinary things using technology. I've been working in different industries in software development, I've been building communities within these software industries for... Read More →

Albiona Hoti

Software Engineer, We Tech

Albiona is a passionate software developer and community builder. She enjoys learning new technologies and building active and fun communities around them. She has used that passion to work on various other projects in the past. Albiona is the founder of Coder Gals NGO with the goal... Read More →

Building scalable APIs using Serverless pdf

Wednesday September 29, 2021 1:45pm - 2:35pm PDT
Room 302

Cloud Native Development, Building Scalable APIs using Serverless

Experience Level Mid-level
Talk Type In-person
Presentation Slides Attached Yes

1:45pm PDT

(VIRTUAL) Deep-dive into Open Policy Agent + Conftest + GateKeeper: Kubernetes Policy in Action - Noaa Barki & Shimon Tolts, Datree

This talk will walk you through applying centralized policy for Kubernetes deployments leveraging Open Policy Agent, Conftest and Gatekeeper - both from the developer's and DevOps / operations perspectives. Open Policy Agent has been an excellent and complementary project to ensuring centralized policy management for your Kubernetes deployments. In this session, we will do a deep-dive session into: Open Policy Agent, Conftest, and GateKeeper, three projects that really enable you to apply granular policies and controls for highly distributed, microservices deployments. This talk will show real-life use cases of how to use those technologies in production in order to configure and enforce a centralized policy for Kubernetes, both from the developer and operations (DevOps) perspectives.

Speakers

Noaa Barki

Developer Advocate, Datree.io

My name is Noaa Barki I'm a software Developer at Datree, GitHub community leader, and tech writer who wish to encourage us, developers, to deepen the decisions we make during the development processes, research the technologies we use, and share our knowledge. I started my journey... Read More →

Shimon Tolts

CEO & Co-Founder, Datree

Shimon established and managed the Software Engineering Infrastructure department for 400 engineers at ironSource. Also as an AWS Community Hero, Shimon runs the largest AWS user-group worldwide and an avid speaker at conferences. Today, Shimon is the CEO & Co-Founder at Datree, an... Read More →

Wednesday September 29, 2021 1:45pm - 2:35pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Cloud-native Developer & Operator Experience

Experience Level Mid-level
Talk Type Virtual

3:55pm PDT

(VIRTUAL) CYOK - Choose Your Own Kubernetes For Local Development - Karthikeyan Govindaraj, BlackRock

There are so many options for running a local Kubernetes cluster. But how many of them are easy to run a local Highly Available Cluster right? In this session, Karthik will discuss creating a local Kubernetes cluster in a Highly Available manner for local development purposes only. This in turn will let you choose your own cluster in your local machine. We will discuss the HA Cluster options from microK8s, k3s, kind, and also the container registries for local deployment. And as a bonus, you will get to know about a remote cluster inside a cluster (KinK) as well: vCluster. This session will benefit the Kubernetes Application Developers to develop applications, containerize and test out the deployments from their local machine even before they go to the DEV/TST hosted environments. Since the created local cluster is HA and you own the control of the cluster, it really allows you to try out all of the feature flags and features from the newer version and provide feedback and/or raise issues back to the community.

Speakers

Karthikeyan Govindaraj

Developer Evangelist, BlackRock

Karthik is a DevOps Architect and Developer Evangelist at BlackRock. He is passionate about Cloud and Cloud-Native Infrastructure, Developer Tools & Experience, and Open Source Enthusiast. He contributes to the Kubernetes community as an active developer and member of various SIGs... Read More →

CYOK OSPOCon 2021 pptx

Wednesday September 29, 2021 3:55pm - 4:20pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Cloud-native Developer & Operator Experience

Experience Level Mid-level
Talk Type Virtual
Presentation Slides Attached Yes

3:55pm PDT

(IN-PERSON) Agile and Dependable Service Development with Bosque and Morphir - Mark Marron, Microsoft & Stephen Goldbaum, Morgan Stanley

Join us to learn about how we are automating the definition, implementation, deployment, and management of cloud services in the open source Bosque and Morphir projects!

Speakers

Mark Marron

Principal Research SDE, Microsoft

Mark Marron is a Principal Research SDE at Microsoft Research where he works on a range of programming language and software engineering topics. He is currently leading work on the Bosque Programming Language project. His other work includes cloud runtimes, low-overhead diagnostic... Read More →

Stephen Goldbaum

Distinguished Engineer, Morgan Stanley

Stephen Goldbaum is co-creator of Morphir and an Executive Director at Morgan Stanley, where he has performed a variety of technical leadership roles. Stephen’s career has spanned a number of industries. He has presented extensively on Morphir, functional domain modeling, and software... Read More →

BosqueMorphirAPI pptx

Wednesday September 29, 2021 3:55pm - 4:55pm PDT
Elwha A

Cloud Native Development, APIs

Experience Level Mid-level
Talk Type In-person
Presentation Slides Attached Yes

4:55pm PDT

(VIRTUAL) Distributed Authorization for Microservices Powered by Kubernetes, Istio and Open Policy Agent - Gong Mengnan, Ninja Van

Managing user access could be hard. Previously, Ninja Van adopted a typical RBAC (Role-based access control) approach and applied it to the application layer. The permissions required for accessing endpoints are only available in the code itself. It’s difficult for engineers to get the whole picture of the permissions required for a service/endpoint, and it’s even more difficult for non-technical users to understand our system. What’s worse, the account managers have to guess the permissions behind the name and often end up granting undesirable permissions, which compromises the overall system security. Mengnan introduced a new authorization flow leveraging the power of Kubernetes, Istio and OPA (Open Policy agent). The OPA is deployed as a sidecar, resides side by side with the Envoy proxy. Envoy talks to OPA via the external authorization interface to evaluate all the incoming requests. The access policy is defined as Kubernetes CRD, managed by our in-house Kubernetes operator and then distributed to all the OPA sidecars. The distributed authorization approach eliminates the single point of failure, extracts the access control out of code and integrates it with CI/CD pipeline. Furthermore, the user access can be shown as an interactive tree now ;)

Speakers

Gong Mengnan

Senior Software Engineer, Ninja Van

Mengnan is a software engineer with 5 years of experience in backend, infrastructure, and cloud. He is also a Certified Kubernetes Administrator / APAC TUG (TiDB User Group) ambassador / Gopher / Open-source enthusiast. He is part of the infra team in Ninja Van, a logistics company... Read More →

OSS 2021 Distributed Authorization for Microservices Powered by Kubernetes, Istio and OPA pptx

Wednesday September 29, 2021 4:55pm - 5:45pm PDT
MeetingPlay Platform + Virtual Learning Lab

Cloud Native Development, Security/Authentication

Experience Level Entry-level
Talk Type Virtual
Presentation Slides Attached Yes