CloudNativeCon + KubeCon 2016

Everyone is talking about using containers to deploy microservices, but exactly how all the pieces fit together is still a bit of a mystery. In this talk, we'll go over how Box went from bare-metal infrastructure that took six months to deploy a new service to using Kubernetes and Docker to deploy services in under an hour. Learn the practical details of how Box implemented containers in production, including packaging, deployment, service discovery, secret management and more, and how you can use our techniques to get containers up and running in your own organization.

It can be hard to fundamentally change how applications are built at a fast moving SaaS startup. Getting buy in, training and changing engineer’s daily workflows are some of the many challenges. Working as a fully remote team, often these challenges can be magnified. It’s often hard to know where to start when your team is trying to move fast, but you know how much your team will benefit from everything that Kubernetes has to offer. Our remote team had been struggling to scale our development process as we’ve grown. A couple of years ago, our team rallied around the idea that we would ship code the minute it is better than what is in production. With a single monolithic application and a growing engineering team, this became a bottle neck and deploying our tightly coupled app started to create new challenges and problems. We needed a new way for each part of our application to deployed independently and quickly. Kubernetes was the missing piece that has allowed us to stay true to our engineering culture, empowering out team of engineers to move fast while also having a resilient and stable application infrastructure. If you’re trying to figure out how to get your company to start using Kubernetes or want to encourage wider adoption on a fast moving team, you’ll need to have a plan. In this presentation, you’ll learn about one plan that worked and is continuing to work at a 6 year old company whose team has grown from 10 to 80 since they last updated their infrastructure. This presentation hopes to illustrate how Kubernetes has enabled our infrastructure to reflect our organization itself; a distributed group of autonomous people aiming to work together while not getting in each other’s way.

Docker and Kubernetes provides delightful APIs to show various statuses of our
applications. From CPU, Load average, HTTP response times, etc. we all have
what we need to make sure our app is running healthily. When things are on
fire, we Ops people twiddle some knobs like spin up more Pods to keep things
going. We use mostly our experience and knowledge of the systems that we are
running to know what to do.

However, if you look at everyday things like your airconditioners and
thermostats, they don't have an Ops team that gets paged to set the correct
level of the coolant to set your room to the right temperature. They use some
math behind called *Control Theory* to keep your room's temperature stable. In
this talk, I will show how we can use the same concepts to autoscale and manage
the health of our applications on Kubernetes.

With the rise of DevOps, containers are at the brink of becoming a pervasive technology in Enterprise IT to accelerate application delivery for the business. When it comes to adopting containers in the enterprise, Security is the highest adoption barrier. Is your organization ready to address the security risks with containers in a DevOps environment?

In this presentation, you'll learn about:

- An understanding of the underlying technologies for Containers and how they enable DevOps
- The security risks with deploying containers in the enterprise
- The dangers of untrusted content and importance of maintaining container images
- How to make your Container workflow more secure using Kubernetes without slowing down DevOps
- Automating vulnerability management, security management, and compliance checking for container images in a Kubernetes environment

Join, Chris Van Tuin, Chief Technologist, West at Red Hat, as he walks through an overview of the underlying Container technologies, the security risks with deploying containers, and how to address these security challenges in a DevOps environment with Kubernetes

A Security State of Mind: Compliance and Vulnerability Audits for Containers

Data breaches are on the rise and placing increased pressure on Enterprise IT to protect the business. With the rise of DevOps and as hackers takes advantage of known vulnerabilities on unpatched or misconfigured systems, Enterprise IT increasingly needs to automate vulnerability management, security management, and compliance checking. OpenSCAP is an opensource tool for automatically verifying the presence of patches, checking system security configuration settings, and examining systems for signs of compromise.

In this presentation, you'll learn about:

* How Containers enable DevOps, Container Technology, and the security risks with deploying containers in the enterprise
* Security vulnerability (CVEs) and Configuration issues (CCEs) notifications and checks
* Automating vulnerability management, security management, and compliance checking with OpenSCAP
* Scanning online and offline Containers and Virtual Machines with OpenSCAP
* Generating and understanding OpenSCAP audit reports
* Customizing OpenSCAP profiles

Join Chris Van Tuin, Chief Technologist, West at Red Hat, as he walks through the inherent security risks of deploying containers in the enterprise and how OpenSCAP can help protect and secure the business.

As Kubernetes becomes more popular, the number of use cases for it grow as well, bringing with them more specialized requirements. Scheduling and launch of containers that interact with GPUs is one of such new frontiers. We'll talk about the current state of affairs, as well as ongoing work in the area. Learn also how an end user of Kubernetes can get involved and become a code contributor.