Open Source Summit Europe 2024

This talk delves into the transformative combination of WireGuard and Calico for enhancing network security in Kubernetes clusters. Despite the ubiquity of Kubernetes in microservice orchestration, securing the inter-node traffic often presents a significant challenge. We will first discuss the security risks associated with the non-encryption of inter-node traffic, such as data interception and potential injection of malicious payloads. It underscores the critical importance of implementing traffic encryption within Kubernetes clusters to thwart these threats. We examine WireGuard and ProjectCalico using its eBPF dataplane for securing traffic. The talk navigates the potential constraints, including the requirement for kernel support, the complexity of multi-cluster setups, and the compatibility issues across different environments.

The container landscape is undergoing a transformation with innovative snapshotters and image formats. But how do we leverage these advancements to empower developers with more cost-effective solutions? Open source projects like Colima and Finch are paving the way for this new wave of container tooling. While they didn't fully meet our specific needs, they provided valuable building blocks for our solution. In our pursuit of achieving truly reproducible builds, we explored Nix and Nix-snapshotter. Combining the power of Nix, a robust package manager, with Nix-snapshotter's efficient caching capabilities within containerd, and the cross-platform functionality of Lima for managing Linux VMs, we've unlocked a new level of consistency and reproducibility for developers' software builds. This project empowers developers with unprecedented flexibility and control over their containerized environments. By embracing these innovations, we can expect reduced CI resource consumption, faster build times, and simplified security and compliance.

This talk explores the challenges and solutions associated with conducting integration testing in hybrid cloud environments, where applications span both on-premises (z/OS) and cloud infrastructures. Focused on the innovative Galasa open-source project, the discussion delves into how Galasa addresses the complexities of hybrid cloud testing, offering a comprehensive framework for validating the interoperability of diverse components. Attendees will gain insights into practical strategies, best practices, and real-world examples, empowering them to effectively navigate the intricacies of integration testing in the evolving landscape of hybrid cloud computing.

Are you interested in building distributed applications or microservice architectures, but don't know where to start? Join this session and learn how the Dapr building block APIs can make your life easier! Dapr, the Distributed Application Runtime, provides a set of common APIs that makes building microservices a breeze. As the 10th largest CNCF project, Dapr is used in production by companies like IBM, Alibaba Cloud & Microsoft and is a trusted OSS technology backed by a vibrant developer community. This code heavy session covers the most popular building blocks of Dapr: service invocation, pub/sub messaging and state stores. In addition, the built-in cross-cutting concerns such as resiliency, observability, and security are covered. Code samples & live demos will be provided in .NET and JavaScript. After this session, you'll have a good understanding how Dapr can help you build reliable distributed applications faster.

One of the greatest out of the box features of K8s is its auto-scaling capabilities, which has a naive implementation or more advanced scheduling capabilities through native tooling. However, both of these models are reactive and not proactive in nature. What if we could employ proactive event-driven scaling of our clusters?! Over our many years of cloud native operations at scale, with the right tools we could! Enter KEDA (AKA Kubernetes Event-Driven Autoscaling). KEDA was built to make just this type of intelligent auto-scaling possible - this includes everything from event-driven and predictable actions like scaling up and down for predictable bursts of usage or shutting down dev clusters during specific and non-working hours, to managing scaling based on your workloads and message queues, or even your APMs and based on the metrics it ingests. In this talk we’ll walk through auto-scaling on steroids with KEDA, how it can be supercharged through CRDs, and in particular the cluster-API which now makes it possible to provision, update, customize and delete K8s clusters declaratively––that together are a game changer when it comes to the infinite scale K8s makes possible.