Booz Allen’s digital solutions busi- ness, the focus has been to address this challenge with the development of Smart- Edge, a decentralized approach that goes beyond data collection to data process- ing Brandon Gul- la, Tim Nicklas, Chris Nuber and the team at SUSE Rancher Government Services (SUSE RGS, formerly Rancher Federal), the Booz Allen team is underpinning its smart, tactical edge platform unat- tended, resource constrained, remote envi- ronments. This is the story of how, alongside the team at SUSE RGS, Booz Allen is delivering real tactical advantage to its clients with Kuber- netes and

ols/jib Build containers faster with Jib A container image builder for Java applications Our Team Cloud Tools for Java Appu Goundan @coollog @loosebazooka Qingyang “Q” Chen github.com/GoogleContainerTools/jib install -y python-software-properties software-properties-common RUN add-apt-repository ppa:webupd8team/java RUN echo "oracle-java8-installer shared/accepted-oracle-license-v1-1 boolean true" | debconf-set-selections running the container Java Development on Kubernetes Skaffold + Jib Continuous development for Kubernetes Skaffold is a command line tool that facilitates continuous development for Kubernetes applications

虛擬機-實體機之間 資料流與封包都提供 標準防火牆管控與 完整的視覺化能見度! ©2019 VMware, Inc. 17 Harbor對於容器映像的安全防護措施 Development Team RBAC UAA AUTH REPL Image Pull K8s Cluster deployed by PKS Build Image Push Image 更應該從一開始設計時就加入 企業所有團隊的思維都需要從DevOps進化為DevSecOps ​方法論: DevOps  DevSecOps ​DevSecOps的指導原則: • 團隊/社群而非個人 (Team/Community, not a person) • (自動化與自主性安全 (Automated and Autonomous Security) • 規模化安全管控 (Security

your organization to Kubernetes. In our experience, with only one team working on it, the knowledge becomes siloed within that team only. Centralized and Siloed • Instead of starting with onboarding deployment tool for Go-Jek International Expansion Projects Whiterabbit Kubernetes custom resources to support sharding with Kubernetes namespaces. Barito Log Open source on-demand logging infrastructure – Go-Jek System Team Prashant Mittal – Go-Jek Lambda Team Irfan Shah – Go-Jek Atlas Team Sumit Gupta – Go-Jek International Expansion Team Willem Pienaar – Go-Jek Data Science Team Arief Hermansyah

KMS • API server & kms-plugin • Cron job backup for KEKs (from KMS) • Static key configuration support in kms-plugin • One click decryption • Key force update • Liveness probe • Monitoring • Integration Version-based key synchronization • Adaption • apiserver KMS provider endpoint to support https endpoint • KMS plugin to support https [1] https://github.com/AliyunContainerService/sgx-device-plugin Secure Interface Demo • The purpose of this demo is to • Demonstrate TEE Transparency w/ Occlum’s Golang support • Showcase the confidentiality guaranteed by TEE Demo Demo Summary & Plan Summary & Next Steps

About Kubernetes Dashboard Dashboard 1.0 launched in 2016 github.com/kubernetes/dashboard SIG-UI Team Piotr Bryk, Google Jeffrey Sica, University of Michigan Jim Angel, General Motors Sebastian Florek since 2016 KubeCon update ● Exec into pod ● Global search ● Login mechanism ● Settings page ● Support for Cron Jobs ● Redesigned resource creation ● ...and much much more. github.com/kubernetes/dashboard/releases running Kubernetes in GCP and on-prem ● Custom Resource Definitions support ● Service topology view ● Mobile device support ● Cost estimates ● CI/CD pipelines ● ...and more! Additional feature

Huawei(Now) - Cloud Native batch system (Volcano) development • IBM spectrum computing - Cluster resource and workload scheduling platform development l Gaps for Spark • Agenda l Why Spark on Kubernetes Spark on Kubernetes Kubernetes extends beyond container orchestration, it has been expanded to support for data-intensive and stateful apps. Benefit: l Autoscaling in Cloud l Consolidate online service goal is to bring native support for Spark to use Kubernetes as a cluster manager like YARN, or Mesos. l Spark 2.3 added native support for Kubernetes. l Spark 2.4 added support for client mode, R, python

SIG VMware serves to bring together members of the VMware and Kubernetes community to maintain, support and provide guidance for running Kubernetes on VMware platforms. SIG VMware provides a forum for for hosting related architectural planning and discussion. Associated activities related to development, testing, and documentation are tracked and reported by the SIG as well as architectural planning discussion related to new CRDs, plug-ins and KEPs that allow the vSphere platform to supplement and support Kubernetes How to Join 6 SIG Sponsored projects vSphere cloud provider (In-tree and Out-of-tree)

Hypervisor VMs Docker Containers User Cases 9 •Ready-to-go development •Self-service portal Developer Sandbox • New application development • 12-factor apps, PCF Cloud Native •Simplify app maintenance Scheduling, provisioning, and resource management of multiple containers – Docker, Mesos à Kubernetes Support – AWS, Azure, Google à Kubernetes Services $docker run container1 $docker run container2 $docker

on Kubernetes Brian Redmond • Cloud Architect @ Microsoft (18 years) • Azure Global Black Belt Team • Live in Pittsburgh, PA, USA • Avid marathon runner and outdoors enthusiast • World traveler @chzbrgr71 Rita Zhang • Software engineer @ Microsoft, San Francisco • Azure Cloud Native Compute team • Kubernetes upstream features, Azure Kubernetes Service @ritazzhang OpenAI Scaling Kubernetes