KubeCon + CloudNativeCon Europe 2025: Full Schedule

In-person
1-4 April 2025
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in British Summer Time (BST) (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

13:30 BST

🪧 Poster Session: A New Approach To Cluster Infrastructure Management for Kubernetes Service Providers - Pascal Fries & Sascha Rauch, ATIX AG

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Providing Kubernetes as a service is difficult, since clusters have to be administered extrinsically (i.e., at infrastructure level), as well as intrinsically (i.e., at API level). While platform providers will often want to delegate the latter task to their customers, separating responsibilities is not always easy because infrastructure components are usually deployed as API resources themselves. Externalising the control plane partially solves this issue, yet components such as network, storage, and monitoring still run as pods in the cluster.

In this session, we present a novel approach to cluster infrastructure that we call “ephemeral nodes”. Utilizing two kubelets, our method achieves separate interfaces for platform providers and users. Along with a general discussion, we provide an implementation based on mutating webhooks and a CSI shim plugin. Along the way, we also show how the present method can be used for bare metal node pooling without the need for virtualisation.

Speakers

Pascal Fries

Senior IT Consultant, ATIX AG

Pascal Fries is a Senior IT Consultant working at ATIX AG, Germany. He is passionate about optimising workflows in Kubernetes and container infrastructures in general. As a former high energy physicist, he loves taking things apart, see how they work in detail, and reassemble them... Read More →

Sascha Rauch

Lead DevOps Consultant, ATIX AG

Sascha has several years of experience in managing cloud projects and designing highly available cloud architectures. He is a specialist in DevSecOps and container orchestration and primarily supports companies in building cluster solutions, CI/CD chains and analytics stacks.

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Advanced

13:30 BST

🪧 Poster Session: Catch More Hackers With Koney: Automated Honeytokens for Cloud Native Apps - Mario Kahlhofer, Dynatrace & Matteo Golinelli, University of Trento

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Techniques to deceive hackers are not new. Placing honeytokens, such as a fake "passwords.txt" file in your container, wastes hackers' time and provides strong indicators of compromise when accessed. But do you set traps in your workloads? Probably not. Manually injecting a fleet of decoys into your applications and detecting access attempts to them isn't straightforward.

Kubernetes offers a great foundation into which we can easily integrate traps to detect hackers. This poster will introduce Koney, an operator that lets you define so-called deception policies for your clusters. Koney automates the setup, rotation, and teardown of honeytokens and fake API endpoints, and uses eBPF to detect, log, and forward alerts when your traps have been accessed.

Our poster will cover prior research on cyber deception, discuss why this concept is still rarely applied in practice, and how using cloud-native design patterns may finally accelerate the adoption of cyber deception.

Speakers

Mario Kahlhofer

Senior Research Scientist, Dynatrace

Mario is passionate about Cyber Security and Data Science, and is currently researching methods to detect hackers in cloud-native environments. In his spare time, Mario enjoys running, mountain biking, and tinkering with electronics.

Matteo Golinelli

PhD Student, University of Trento

Matteo Golinelli is a PhD student in cybersecurity at the University of Trento, Italy. He is mainly interested in web and cloud security and is focused on web caches and complex interactions between HTTP entities.

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Security

Content Experience Level Any

13:30 BST

🪧 Poster Session: Effortlessly Build High-Performance AI/ML Pipelines With Accelerator Chaining and K8s Native Tech - Kazuki Yamamoto, NTT & Derek Wang, Intuit

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Join us for an enlightening presentation on effortlessly building advanced, high-performance processing infrastructure for AI/ML workloads with low power consumption.

In streaming processing, accelerators are assigned only for specific tasks in the workload. By assigning each task to the appropriate accelerator and "chaining" them, we obtain high-performance infrastructure with low power consumption at the service level.

Native Kubernetes is a popular choice for deploying AI/ML workloads. However, more is needed to create a new processing form, described above, "Accelerator Chaining Pipelines."

This presentation will demonstrate how we leverage Numaflow and "Dynamic Resource Allocation"(DRA) to overcome challenges, and effortlessly build an "Accelerator Chaining Pipeline" in NTT. You will see a glimpse of future innovations, including direct data transfer and CNI extensions for high-speed communication between accelerators.

Speakers

Derek Wang

Principal Software Engineer, Intuit

Derek Wang is a Principal Software Engineer working for Intuit, his main focus is on the architecture of event-driven systems, as well as streaming data processing platforms. He is the project lead of a couple of open source projects: CNCF graduated project Argo Events, and Numaflow... Read More →

Kazuki Yamamoto

Software Research Engineer, NIPPON TELEGRAPH AND TELEPHONE CORPORATION（NTT）

Yamamoto Kazuki is a research engineer at NTT Software Innovation Center, engaging in distributed systems and virtualization. He has researched computing technology, optimizing compiler, and worked on CI/CD tasks. Currently, he focuses on disaggregated computing Infrastructure and... Read More →

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, AI + ML

Content Experience Level Beginner

13:30 BST

🪧 Poster Session: Enhancing Research and Data Delivery With the Data Delivery System (DDS) - Álvaro Revuelta M., SciLifeLab Data Centre & Valentin Georgiev, Uppsala Universtet

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

The Data Delivery System (DDS) is a cloud-based platform developed by the SciLifeLab Data Centre for the secure and efficient delivery of research data from SciLifeLab Facilities to their users, specifically research groups. The application is containerized and running in Kubernetes clusters. The deployments are synchronized with ArgoCD and uses modern GitOps tools such as SealedSecrets.

This poster session will present the architecture and key features of DDS, including its use of containerization, automated deployment, and robust data management capabilities. Attendees will gain insights into how DDS facilitates fast and secure data transfers, supporting the needs of the life sciences research community.

Speakers

Valentin Georgiev

Systems developer, Uppsala Universtet

With over 10 years of experience in High-Performance Computing (HPC), I have been working with microservices architecture since 2016 and have specialized in Kubernetes (k8s) and Kubernetes application development since 2020. My expertise spans designing, deploying, and managing scalable... Read More →

Álvaro Revuelta M.

System Developer, SciLifeLab Data Centre

System Developer, working to build reliable systems that enable life sciences research

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Intermediate

13:30 BST

🪧 Poster Session: Extensible Kubernetes CRDs Via Inheritance for Modularity and Reuse - Nik Dijkema & Mostafa Hadadian, University of Groningen

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Maintainability and adaptability are crucial for continuous deployment in dynamic cloud environments, emphasizing the need for modularity.

Kubernetes CRDs and controllers provide declarative APIs. But extensibility and reusability limitations pose a challenge and impair custom resource modularity. Extending CRD schemas induces API changes or requires weaker schemas, control logic is not reusable for similar resource types, and many operators are complex monolithic controllers.

This work solves these limitations by implementing inheritance to enable extension and reuse of CRD schemas and controllers. Schema inheritance enables extending an existing CRD schema without changing its API, providing APIs at different levels of abstraction. This allows reuse of common controller functionality through generalisation, promoting separation of concerns in operators. Finally, inheritance enables reasoning about substitutability of custom resources, providing opportunities for adaptability.

Speakers

Nik Dijkema

Graduate Student, University of Groningen

Nik is a Master's student in Software Engineering and Distributed Systems at the University of Groningen, where he also obtained his Bachelor's degree in Computing Science. His interests lie in cloud computing and cloud-native infrastructure.

Mostafa Hadadian

AI/MLOps Innovator| Founder & CEO, University of Groningen | CAIDEL

Mostafa is Founder and CEO of CAIDEL: Continuous AI Deliver. He is also completing his PhD in Computer Science at the University of Groningen. His work lies in cloud native and machine learning development, emphasizing MLOps. Complementing his academic pursuits, he brings a wealth... Read More →

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Emerging + Advanced

Content Experience Level Intermediate

13:30 BST

🪧 Poster Session: Helmless: Fast Serverless Deployments Without the Overhead of Kubernetes and Terraform - Michael Reichenbach, 1KOMMA5°

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Discover how helmless.io, an open-source solution, simplifies serverless deployments with Helm Charts and CI/CD pipelines. It delivers the GitOps-style workflows and velocity of Kubernetes CICD, tailored for serverless environments like AWS Fargate and Google Cloud Run—without the complexity of managing Kubernetes itself.

This poster showcases real-world results, including a tenfold increase in deployment frequency and a 95% reduction in change lead time, powering hundreds of Google Cloud Run containers in production for over a year. Visuals include architecture diagrams, before-and-after comparisons, key metrics, and a roadmap for extending to other cloud providers.

Attendees will learn how to improve serverless workflows, reduce complexity, and adopt a cloud-agnostic GitOps approach, while contributing to the future of this innovative, developer-friendly solution.

Speakers

Michael Reichenbach

Senior Platform Engineer, 1KOMMA5°

Michael is a Senior Platform Engineer at 1KOMMA5°, leveraging over ten years of experience building developer-centric platforms. Michael has pioneered Helm-based deployments for Google Cloud Run, introduced service catalogues, and implemented Backstage in multiple organizations... Read More →

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Any

13:30 BST

🪧 Poster Session: Introducing the Last Level Cache Alignment Feature in Kubernetes for Performance Optimization - Charles Wong, AMD

Wednesday April 2, 2025 13:30 - 14:30 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

The increasing complexity and diversity of computing workloads are driving System-On-Chip (SoC) architectures towards modular designs to meet growing performance demands. These modular SoCs incorporate specialized optimizations such as split cache structures to enable higher core density. However, to fully leverage these hardware-level advancements, corresponding optimizations are required in the software layer. Kubernetes must adapt to capture these hardware optimizations effectively. We introduce a new Kubernetes feature, “prefer-align-cpus-by-uncorecache”, designed to automatically align workloads with the Last-Level-Cache in modular SoCs. This enhancement improves workload performance by reducing latency and optimizing resource utilization, bridging the gap between advance hardware capabilities and orchestration efficiency. This session will elaborate on how the feature assigns CPU resources and the potential performance improvements it can deliver to users.

Speakers

Charles Wong

Software System Design Engineer, AMD

Charles Wong is a Software Engineer and has worked at AMD for 2 years. His work focuses on optimization of Kubernetes on AMD hardware.

Wednesday April 2, 2025 13:30 - 14:30 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Operations + Performance

Content Experience Level Any

13:15 BST

🪧 Poster Session: From Pods To Petabytes: Managing Data Objects as Kubernetes Resources - Sebastian Beyvers & Jannis Hochmuth, Giessen University

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

As ML and data-intensive applications expand across industries, organizations face growing pressure to integrate more external and internal data sources into their data and compute ecosystems. This raises a crucial question: How do you integrate data lifecycle management in a distributed environment like Kubernetes? It turns out, there are striking parallels between orchestrating containerized applications in Kubernetes and managing datasets across various locations. From lifecycle management to replication to placement strategies, by applying Kubernetes' proven orchestration concepts to data, it is possible to deliver consistent, efficient, and scalable “data orchestration”, which can be a powerful tool for streamlining data-driven applications – all using familiar K8s interfaces. This presentation explores the benefits of rethinking distributed data management with Kubernetes-inspired strategies and showcases a prototypical data orchestration implementation.

Speakers

Sebastian Beyvers

Distributed Systems Researcher, Giessen University

Sebastian Beyvers is a distributed systems researcher in bioinformatics and a cloud-native Rust developer at Giessen University. Sebastian's current work focuses on cloud-native data storage and processing solutions that try to harmonize existing national and international data ecosystems... Read More →

Jannis Hochmuth

Data Management Enthusiast, Giessen University

Jannis Hochmuth is a research assistant at Giessen University with a strong interest in scientific data management, particularly within distributed systems. Currently engaged in the NFDI initiative, his work centers on harmonizing data ecosystems at a national level, advancing collaborative... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Data Processing + Storage

Content Experience Level Intermediate

13:15 BST

🪧 Poster Session: GitOps Reinvented: Leveraging Imperative Tools for CAPI Clusters Management - Damien Dassieu, Independent

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

The GitOps approach has become a cornerstone of Kubernetes workflows, offering a declarative way to manage infrastructure and applications. However, managing infrastructure like Kubernetes clusters with GitOps presents challenges. For instance, large and complex CAPI manifests can lead to misconfigurations with unintended consequences.

To address this, platform engineers can use tools like kubectl, oc, or web UIs for an imperative, user-friendly experience. These tools validate inputs before sending requests to the Kubernetes API server, reducing errors.

But how can we integrate GitOps principles while using these tools? This session explores how ArgoCD & Syngit enable GitOps workflows for CAPI cluster management, combining declarative and imperative approaches for better results.

Speakers

Damien Dassieu

Kubernetes platform engineer, Independent

I am an active contributor to Kubernetes projects (Kubebuilder, controller-runtime, ...) with a focus on enabling scalable and efficient cluster management. I worked at Orange, the largest telecom company in France and as a tech-leader. I developed a solution to deliver and manage... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Intermediate

13:15 BST

🪧 Poster Session: Migrate Smarter, Not Harder: Mastering Object Storage With Chorus - Artem Torubarov & Andrei Ivashchenko, Clyso GmbH

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

This poster session showcases Chorus, an open-source tool that simplifies migrating and backing up object storage, like S3 or Swift. It begins with a quick overview of Chorus's features, followed by a live demonstration of its capabilities in action.

Attendees will explore two key migration strategies and their impact on disaster recovery goals—Recovery Time Objective (RTO) and Recovery Point Objective (RPO):

1. Zero-downtime migration: Avoids downtime (zero RTO) during normal operations but risks non-zero RPO if updates are lost during unexpected issues.
2. Zero-RPO migration: Ensures no data loss (zero RPO), even during failures, but requires planned downtime, resulting in non-zero RTO.

The session provides practical insights, trade-offs, and best practices for large-scale S3 migrations. It also empowers users to move beyond vendor-locked solutions with guidance on adopting cloud-native object storage tools like Rook.

Speakers

Artem Torubarov

Software engineer, Clyso GmbH

Senior software engineer with over 10 years of experience. I’m a passionate advocate for Go, Kubernetes, and the CNCF ecosystem. Most part of my careed developed deistributed backend applications. Currently, I work at Clyso, focusing on storage technologies, including running Ceph... Read More →

Andrei Ivashchenko

Tech Lead, Clyso GmbH

Research, development and stuff

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Data Processing + Storage

Content Experience Level Any

13:15 BST

🪧 Poster Session: Navigating the CNCF Wilderness: A Survival Guide To Container Signing and Verification - Ivan Wallis, CyberArk

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Confused about what container and artifact signing tools to use? Fear not! This session is your trusty map and compass for navigating the tricky terrain of container signing and verification. We’ll explore the current projects available, uncover advantages and disadvantages of them, and dodge common pitfalls lurking along the way especially when it comes to deploying in production. Packed with practical tips and a dash of adventure specifically around the Sigstore cosign and Notary Project projects, this session will help you tame the complexities of container signing and build trust in your software supply chain. Areas of focus include key management, PKI, signing and runtime enforcement policy, auditing and observability, and most importantly how to achieve a secure deployment leveraging enterprise infrastructure.

Speakers

Ivan Wallis

Architect, Cloud Native Solutions at Venafi, CyberArk

For more than 20+ years, Ivan has been a trusted advisor to some of the largest enterprise customers with PKI, code signing, SSH, TLS, and cryptographic systems, and is passionate about helping security teams acquire and implement machine identity management solutions. He closely... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Security

Content Experience Level Any

13:15 BST

🪧 Poster Session: NOMADIC: How To Build a Flexible and Automated Compute Continuum From a Telco Operator’s Perspective - Xuan Du & Adam Morsman, BT

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Telco cloud infrastructure is challenged on both a horizontal scale, as it extends towards the edge, and a vertical scale, given stringent KPIs from telco workloads. Thus, leveraging a blend of heterogeneous hardware such as multi-arch CPUs, GPUs, and other accelerators, and deploying them at large-scale and highly distributed locations is vital to having the most energy-efficient and cost-effective network.

What technologies from open-source and cloud-native communities can help address these challenges? NOMADIC (Network-oriented Multi-architecture Distributed Infrastructure as Code) is an answer by applying the declarative approach, DevOps practices, and self-service principles to demonstrate automated lifecycle management of telco cloud.

However, this presents yet unanswered questions on how to advertise heterogeneous resources so that intelligence driven workload placement can be achieved. A “single pane of glass” could enable this, but what implementation should this take?

Speakers

Adam Morsman

Research Professional, BT

Adam started his career as an apprentice in the research department at BT studying Digital and Technology Solutions Degree with a specialism in Data Analysis from the University of Exeter. Following completion of the apprenticeship in 2022 he began his current role of Research Professional... Read More →

Xuan Du

Senior Research Specialist, BT Group

Xuan Du is currently a Senior Research Specialist in the Cloud Infrastructure Centre of Excellence at BT Research in the UK, where he focuses on cloud-native technologies and approaches for building and running telco cloud infrastructure to host telco workloads, including radio access... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Intermediate

13:15 BST

🪧 Poster Session: Optimising OpenCRVS Deployment With Kubernetes: Lessons for DPI Adoption in the Global South - Andrew Amstrong Musoke, Upanzi DPI Network & Samuel Emmanuel, Carnegie Mellon University-Africa (Upanzi Network)

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

Open source Digital Public Infrastructure, DPI is the leading approach for lowering the barrier of digital transformation for governments in the global south and boosting inclusive socio-economic development.
Lower technical skills, heterogeneous digital infrastructure and fragmented digital sovereignty significantly hinder the adoption and scalability of critical public services like OpenCRVS, a project for civil registration and vital statistics.
Learn how a Kubernetes based architecture addresses these challenges, using OpenCRVS as a case study to demo a shift from inefficient, manual deployments with artisanal scripts to an out-of-box and automated process while reducing the resource footprint. Explore the practical strategies employed to optimize and deploy OpenCRVS in a heterogenous air-gapped environment, reducing development and deployment times from months to days while enhancing security and maintainability. The lessons we gleaned are recommendations for DPIs in general.

Speakers

Andrew Amstrong Musoke

Research Engineer, Upanzi DPI Network

Andrew is a Cloud and DevSecOps engineer aspiring to architect affordable, scalable and secure cloud solutions to accelerate the digitalization of Africa.He is currently exploring DPI deployability as a research engineer with CMU in Rwanda. He also has a passion for capacity building... Read More →

Samuel Emmanuel

Research Engineer at Carnegie Mellon University-Africa, Carnegie Mellon University-Africa (Upanzi Network)

Samuel Eneojo Emmanuel is a Research Engineer at Carnegie Mellon University-Africa (Upanzi Network), focusing on Digital Public Infrastructures (DPIs) and Digital Public Goods (DPGs). He is passionate about cloud-native technologies, AIOps, and their applications in Africa. With a... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Emerging + Advanced

Content Experience Level Any

13:15 BST

🪧 Poster Session: Reliable K8s Resource Submission & Bookkeeping - Tiancheng Yin & Yao Lin, Bloomberg

Thursday April 3, 2025 13:15 - 14:15 BST

Level 1 | Hall Entrances S8 - S9, N8 - N9

At Bloomberg, we maintain a cloud-native container orchestration platform for general utility compute. This internal service offering has seen rapid growth, which imposes challenges related to the reliability of resource submission and post-deployment status tracking.

Creating resources in a cluster is easy. Developers could build an API that performs resource creation against the Kubernetes API server. However, it gets complicated if and when the API needs to support large volumes of resource creation requests in multiple clusters.

In this talk, we will explore our current implementation of resource submission and bookkeeping, which utilizes in-cluster pull agents and source-of-truth. We will then compare this to our proposed solution, which involves a highly available PostgreSQL database, a Kubernetes resource watcher, and Apache Kafka. We will conclude our talk with a proposed design that allows for more reliable resource submission and post-deployment status tracking.

Speakers

Yao Lin

Senior Software Engineer, Bloomberg

Yao Lin is a senior software engineer at Bloomberg, where she has worked for six years. She works as a platform engineer on the company's workflow orchestration platform, which is built on Kubernetes and hosts Argo Workflows as its orchestration back-end. This multi-tenant platform... Read More →

Tiancheng Yin

Senior Software Engineer, Bloomberg

Gabriel Yin is a senior software engineer on the Workflow Orchestration Platform engineering team at Bloomberg, which is built on Kubernetes and hosts Argo Workflows as its orchestration back-end. With years of experience in data science, he is now building a general utility compute... Read More →

Thursday April 3, 2025 13:15 - 14:15 BST
Level 1 | Hall Entrances S8 - S9, N8 - N9

🪧 Poster Sessions, Platform Engineering

Content Experience Level Any