Talks at conferences

I spoke about ways to secure your clusters, trust applications, monitor for data leaks, and defend against supply chain attacks.

I covered topics ranging from basic Kubernetes primitives like securityContext and NetworkPolicy, through image signature verification, all the way to runtime-enforcement engines such as Falco, Tetragon, and KubeArmor.

At KCD, after a year (this time in Bratislava), I gave a talk on attestations and OCI image signatures — how to use them and how to validate image signatures and whitelist registries from which images in Kubernetes are allowed to run. Slides (PowerPoint presentation) are available for download here.

If you want to try it yourself, check out the demo project on GitHub, the recording on YouTube, or get started on your own with Sigstore and Cosign!

At this year’s KCD in Bratislava, I also participated in a panel discussion on the topic of AI/ML Meets Cloud Native. I shared some of my insights and experiences, for example from GLAMI, where I worked on MLOps and operated recommendation systems serving 14 countries where GLAMI was active at the time. A recording is available on YouTube.

At P2D2, I gave an updated version of my talk from KCD Prague 2024, with a few adjustments for an audience less familiar with Kubernetes. The talk was about running a highly available Postgres cluster on Kubernetes using CloudNativePG — a Kubernetes operator.

At Kubernetes Community Days Prague 2024, I gave a talk on running a PostgreSQL cluster on Kubernetes. How to do it properly and sleep well at night without PagerDuty waking you up, using the CloudNativePG Kubernetes Operator.

I wrote a short blog post about KCD.

A talk on self-hosted vs managed solutions. What are the differences, what are the individual advantages and risks, and how to actually choose between them.

A short talk with a live demo on how you can scale on Kubernetes beyond the classic HPA approach. KEDA is a great tool that helps you scale using a wide range of so-called Scalers. For example, based on messages in a RabbitMQ or Kafka queue, events in AWS Event Hub, or simply using a cron schedule (eight pods at 8 AM, only three pods at night), and many more. Today, KEDA offers over sixty scalers plus the option to write your own.