Now let's talk about the core part of the journey - the conference itself. I must admit it was one of the most interesting conferences I've been to.
The main focus of the event was security and observability within K8s. This time I often felt like I made the right choice when sitting in a talk. Either the topic was interesting, the speaker was outstanding, or both combined.
So let me highlight a few of them.
eBPF for Runtime Security - Liz Rice, Isovalent
eBPF seems to be THE thing when it comes to security and observability within Kubernetes.
eBPF is a framework that allows users to load and run custom programs within the kernel of the operating system. That means it can extend or even modify the way the kernel behaves.
As an eBPF program is loaded into the kernel, a verifier ensures that it is safe to run, and rejects it if not. Once loaded, an eBPF program needs to be attached to an event, so that whenever the event happens, the program is triggered.
You might already be using eBPF in your deployments, in the form of CNCF projects like Cilium or Falco, lower-level tools like bpftrace or even in the form of seccomp profiles.
eBPF-based tools like these can connect, observe and secure applications without having to make any changes at all to those applications - you don't even have to restart them or to have different tools on the different layers of the stack. It's an all-in-one solution.
As eBPF is a complex and huge topic, I can only recommend watching the talk from Liz Rice:
https://www.youtube.com/watch?v=maP3ceTjugk&list=PLHhKcdBlprMdIMzUZX6ho0OPTikTamLwa&index=48(opens in new tab)