KubeCon + CloudNativeCon North America 2024

Get ready, innovators! We’re embarking on an exciting journey through the CNCF ecosystem. We’ll discover valuable insights in the End User stream, explore new areas with our End User TAB progress, and examine the thriving hubs of our ever-changing ecosystem. This talk will remind you that in the vast expanse of cloud native technology, our strength lies not in isolated efforts, but in the community we build together.

As Generative AI reshapes the industry, the demands on AI platforms have rapidly evolved. Organizations now require centralized infrastructure to manage and optimize access to self-trained, open source, and commercial AI models at scale. In this talk, we introduce the Envoy AI Gateway, a collaborative open source effort led by engineers from Bloomberg and Tetrate. Learn how the Envoy AI Gateway, which is built atop Envoy Gateway and Envoy Proxy, provides a unified, scalable solution for model access, usage limiting, and upstream authorization.

Status quo approaches to network security are failing to meet the evolving needs of the Kubernetes user base and ecosystem. A comprehensive security posture requires the ability to secure, control, and observe any request on the network. Yet today, ingress traffic is treated differently than east west traffic. Outgoing requests to third party APIs, LLMs, and SaaS leverage a completely separate approach and toolchain. The technology used to solve these challenges is outdated, inconsistent, overlapping, and does not fit platform engineering principles of automation and configuration as code. Rather than settling for the status quo, new innovations in the cloud-native ecosystem allow us to reimagine our approach to network security. In this keynote, we’ll discuss a comprehensive approach to omni-directional network security for Kubernetes and beyond.

In the cloud native world, we've come a long way – after a decade of driving Kubernetes adoption, it feels like we’ve hit a milestone. With the pace of new Kubernetes features slowing down, some might think that we’ve reached a “steady state”. But have we really?

While the ecosystem feels more stable and secure than ever, the next decade holds challenges that demand our attention, especially in the realm of security. Sure, we all know security is vital, and there’s been a lot of fantastic work across the board, from OSS initiatives to innovative startups. But the threat landscape is shifting fast.

As we peer into the future, it's not just about refining what we already know. It's about tackling new challenges that are emerging on the horizon, like securing AI systems. Some may say it’s too early -- that AI security is just hype. But think again. AI introduces complexities we haven't seen before, offering both new vulnerabilities and fresh opportunities for defense. Are we ready to face the coming wave of security threats that could reshape the digital landscape?

This keynote will dive into what’s next in cloud native security, while showing why this "boring" phase is just the calm before a new storm of innovation and challenges that will shape the next decade.

Container images, AI weights, WebAssembly modules, and software packages – what’s the link? They are all examples of some of the many artifacts found throughout a software supply chain. With so many different artifacts, the real question becomes, “Is your software supply chain as secure as your production environment?”

In this keynote, we will navigate the journey of these artifacts from source to production, and showcase how to secure your software at each step of the supply chain using cloud native open-source tooling. With the help of key CNCF projects like in-toto, Notary Project, Ratify, and Copa, you will learn how to ensure your software is secure, consistent, and reliably delivered to production.

Artificial Intelligence is exposing technological and operational gaps in our industry faster than ever. Newer workloads are forcing application developers to innovate in ways that open source is uniquely positioned to help guide. This talk will discuss the current state of open source technologies and how application developers can collectively harness and contribute to transparent, open innovation and guide the next generation of cloud native development.

The CNCF has been a trailblazer in resilient open source software security by enabling innovation, coordination and community building. We will highlight some of the efforts and resources provided by TAG Security including security assessments for CNCF projects, one of the first supply chain security recommendations, A Reference Architecture to Securing the Software Supply Chain, and the Cloud Native Security Whitepaper.

We’ve done this all by fostering an open and welcoming community of security professionals. Come and join our community and help us improve cloud-native security for all!