tldr - powered by Generative AI

• Backstage is a centralized developer portal that reduces the cognitive load of developers and provides paved paths for compliance requirements
• The portal enables experimentation and fast feedback loops for both customers and engineers
• Requirements for Backstage were collected through forms and asking developers what would be most valuable to them
• The showcase of Backstage's capabilities includes the ability to create a service in three minutes
• The team is also working on aligning internal asynchronous communication and adding metadata around Pi data to schemas
• The balance between enabling fast development and maintaining compliance is crucial for the success of Backstage

tldr - powered by Generative AI

• The Kubernetes infrastructure project relies on donations from cloud providers such as GCP and AWS to bootstrap infrastructure.
• The project is working on a multi-cloud approach to provide CI for the community and ensure compatibility and conformance with other projects in the CNCF landscape.
• The project is also working with third parties such as Fastly to provide access to different services.
• Contributor experience is handled by the SIG Contributor Experience, which has full ownership of moderation on different communication platforms.
• The project is unable to directly talk to cloud providers and relies on the CNCF to interact with them.

tldr - powered by Generative AI

• KGB was created to solve the global server load balancing problem in a cloud-native way
• It is designed to be simple to use and does not require any management cluster
• KGB has no single point of failure and is designed on top of a well battle-tested DNS protocol
• KGB integrates with environmental DNS and steers traffic to a secondary cluster if the primary cluster fails
• KGB makes applications globally highly available

tldr - powered by Generative AI

• Research potential mentors and align goals and interests
• Approach mentors professionally and provide meaningful insight into your background and interests
• Utilize open source projects to gain experience and build your resume
• Collaborate with diverse communities to foster innovation and knowledge sharing
• Overcome communication barriers by asking specific questions and seeking out mentorship
• Manage time effectively to balance coursework and open source contributions
• Combat imposter syndrome by recognizing your value and belonging in the community

tldr - powered by Generative AI

• Threat modeling is important to identify and address security risks in a system before it goes into production.
• The Microsoft threat matrix for Kubernetes is a useful resource for identifying tactics and entry points an attacker could use and the mitigations to prevent them.
• The presentation demonstrates six exploit scenarios, including leveraging a compromised container, exploiting RBAC misconfigurations, and hijacking the entire cluster.
• For each scenario, the impact of the attack is discussed, and controls and mitigation strategies are presented.
• The presentation concludes with a summary of the lessons learned.

tldr - powered by Generative AI

• An internal platform is necessary to meet the expectations of application developers, business stakeholders, and platform engineers.
• Before Kubernetes, building an internal platform required an army of experts and took many months to build.
• Kubernetes was a perfect match for building an internal platform due to its scalability, reliability, resiliency, and extensibility.
• Kubernetes has fulfilled its promise and is the engine of productivity for platform teams.
• The CNCF end user developer experience community discusses all things related to building and operating a Kubernetes platform.

tldr - powered by Generative AI

• Cortex is designed for Kubernetes and is not a separate project from Prometheus
• Cortex uses Thanos for reliability and provides limits to ensure reliability
• Cortex implements vulnerable replication to ensure data is replicated across instances
• Cortex has upcoming projects such as Gateway, Down Sampling, Federated Rules, and Native Histogram
• There are plans to improve observability on the Cortex layer for cardinality