Kubeaster

Dear Kubernauts,

Kube London is returning for an Easter edition with three exciting talks.

Easter is all about chocolates and YAML.

Agenda for the night:
Arrive at 6 pm
6:20 pm: Start
6:35 pm: Dino Fizzotti & Finlay Wright (Monzo) - Multiparty Authorization for Kubernetes
6:55 pm: David Flanagan - TBC
7:15 Break 🍕
7:40 pm: Salman & Mauricio - Lessons Learnt From Creating Platforms On Kubernetes
8 pm: 🍻

Talks

Dino Fizzotti & Finlay Wright (Monzo) - Securing Kubernetes Clusters at Monzo with Multi-Party Authorization

Privileged access to Kubernetes clusters at Monzo is enabled by using temporary credentials, granted only after the review and approval of a second engineer. In this talk we'll discuss the design and implementation of the system which brokers these credentials, including our use of AWS Nitro Enclaves, reproducible builds and signed attestation documents, all of which make our solution resilient to malicious interference - even from the administrators of the system itself.

David Flanagan - Scaling Workloads in 2023

Kubernetes continues to evolve and scheduling is no exception. Long gone are the days of setting `replicas: 12` on your Deployment and celebrating with a beer, because as we all know and learn the hard way: failure domains come just as fast as our pods.

Handling failure domains with scheduling has often boiled down to affinities and anti-affinities, but is there a better way?

In this session, David will guide you through the latest patterns for scaling your workloads on Kubernetes in 2023: Topology Spread Constraints, Scheduling Gates, and Dynamic Resource Allocation.

Let's have some fun.

Salman & Mauricio - Lessons Learnt From Creating Platforms On Kubernetes

Would you ask a gardener to fix your leaking toilet? Probably not. Then, why would you ask a data scientist to fix a crashing kubernetes pod? Or why would you ask your developers to understand the internals of the PyTorch framework?

Data science is hard enough without also needing to know about Kubernetes. Kubernetes application development is hard enough too, without having to do data science! Learn about why you can build a platform on Kubernetes that hides Kubernetes complexities from data science users and data science complexities from application developers.

Salman & Mauricio will take you through the painful lessons learnt while building such a platform and the struggles data scientists face in cloud native hyperspace. Ending with a demo of how they integrated Kubeflow, KFServing, ArgoCD, Crossplane, Dapr and Knative to build an effective platform!

About the speakers

Dino Fizzotti - Arctic explorer, professional tap dancer, award-winning chef - Dino is none of these things, but he is a backend engineer at Monzo working on infrastructure security. He's worked at a few different companies ranging in size from big tech to start-up, and in various roles, from test automation engineer to consultant. In his spare time he likes to work on DIY electronics.

Finlay Wright is a backend engineer focussed on infrastructure security at Monzo. Before joining Monzo, he worked at a cloud consulting startup for nearly six years, where he held various roles ranging from operations analyst to an engineering lead on app modernisation projects. Outside of work, he enjoys reading history books, cooking (or at least pretending he can), and escaping London to climb hills.

David Flanagan - https://sessionize.com/rawkode