KubeCon + CloudNativeCon India 2025

In today's complex service mesh environments, ensuring secure and efficient network traffic management is a significant challenge. Many developers struggle with implementing robust, context-aware access control policies without disrupting existing systems. The Kyverno Envoy Plugin offers a solution by integrating with the Envoy proxy and leveraging the Kyverno Authz Server within the cluster, along with a cluster-wide resource called AuthorizationPolicy. This resource utilizes the CEL language to process these requests seamlessly, allowing you to authenticate and enforce policies seamlessly on all traffic.
In this hands-on session, the speakers will leverage this plugin to enhance the security and control of applications, ensuring they are protected from unauthorized access and threats without requiring changes to your microservices. They will also showcase how the plugin seamlessly integrates with various service meshes such as Istio, to extend its functionality across environments.

We spend countless hours making applications resilient and scalable, but often overlook their final moments. While we obsess over startup performance and runtime behavior, the shutdown process remains a mystery. Yet, understanding this crucial phase can mean the difference between clean service transitions and disrupted user experiences.

Join us as we decode Pod termination in Kubernetes, exploring the lifecycle from shutdown signal to final goodbye. We'll examine real-world scenarios through kubectl, kubelet, and API interactions, and share practical strategies for smooth shutdowns. Transform your chaotic Pod terminations into choreographed farewells and enhance your application's reliability.

For: DevOps engineers, SRE teams, and Kubernetes developers.

Providing application teams with a self-service way of deploying applications and their dependencies often means that platform administrators have to hide the implementation details of the platform via simple to consume APIs. In the case of Kubernetes this usually means having to deploy Custom Resource Definition that are either 3rd party or custom built in-house. These CRD’s in addition to allowing Kubernetes users to manage non-Kubernetes objects via the Kubernetes Resources Model (Aka YAML file), they also allow abstracting away the details of how some resources get created and managed.

In this session, you'll learn how KRO allows platform teams to:
- Create high-level APIs that reduce YAML complexity while maintaining flexibility
- Support both native Kubernetes and cloud-specific resources for more efficient orchestration
- Integrate KRO into your Kubernetes workflows for better scalability and simplicity

Building a CNCF community comes with wins and challenges. We launched KCD Sri Lanka in 2022 with a high-grade green screen production, featuring global speakers and over 1K YouTube livestream views. In 2023, our in-person KCD Sri Lanka was an early sold-out, house-full event, drawing speakers from around the world.

From securing sponsorships and growing engagement to handling setbacks, we’ll share key lessons from leading Kubernetes Sri Lanka. Whether you’re starting or scaling a CNCF community, this talk will provide practical takeaways to build a sustainable and impactful cloud native ecosystem.

APIs helped define cloud-native—but agentic systems need more.

In this talk, we introduce MCP (Model, Context, Protocol)—an architectural framework built for adaptive, AI-enhanced, agentic systems. You'll learn how MCP extends API-centric thinking to define not just interfaces, but also capabilities, environment-aware behavior, and reflective discovery.

We’ll explore:

How MCP aligns with Kubernetes' dynamic, declarative model
Why JSON-RPC (not REST/gRPC) is the best fit for dynamic agent tooling
Real-world examples of LLM-driven clients discovering tools, prompts, and commands at runtime
How to structure MCP clients and servers using C# or Go for cloud-native deployment
You'll leave with code samples, a conceptual model, and a UML-driven design for building MCP-based systems—ideal for Kubernetes-based platforms, autonomous agents, and AI-enhanced developer tools.

Kubernetes has become the de facto standard for container orchestration, yet managing complex workloads—particularly stateful applications and large-scale deployments—often requires extensions beyond its native capabilities. OpenKruise, addresses these gaps by introducing powerful and enhancements to streamline application lifecycle management.

This presentation explores how OpenKruise augments Kubernetes with features like in-place pod updates (reducing downtime by updating containers without restarting pods), advanced workload controllers (CloneSet, Advanced StatefulSet). These innovations enable DevOps teams to optimize deployments, minimize operational overhead, and scale stateful applications seamlessly.

We’ll delve into real-world use cases from our experiences, plus, how OpenKruise can be plugged to any complex systems/apps.

Attendees will leave with actionable insights into leveraging OpenKruise to enhance deployment strategies and achieve zero-downtime operations.

In today's fast-paced development landscape, maintaining reliable and up-to-date test environments is crucial yet challenging. Join us as we share our journey of evolving from traditional long-running test environments to testing directly in production, and eventually achieving scalable and ephemeral test environments for platform builders as well as application teams.

- Are you content with the current state of your test environments?
- Do you find yourself relying on outdated, long-running staging and test environments?
- How do you handle the risks of data staleness and unexpected environment corruption?

In this talk, we will go into the strategies and tools that helped us to transition to ephemeral test environments, highlighting the benefits and challenges encountered along the way. We aim to provide you with practical steps to improve the scalability and reliability of your own testing frameworks.

The rise of WebAssembly (WASM) has sparked comparisons with Docker which often leads to questions and confusion: Are WASM and Docker competing technologies?

In this talk, we will see how this is far from the truth. On one side, Docker revolutionised how we bundle and deploy applications, offering unparalleled portability and simplifying workflows across environments. On the other hand, WASM brings speed, security, and efficiency, enabling the execution of code written in languages like C, C++, and Rust almost at native speed, performance, and rapid startup time even in the browser.

We will explore how these two technologies bring the best of both worlds and help developers achieve portability, efficiency, security, and flexibility. We will also look at how Docker is actively working to make WASM mainstream by allowing WASM container images to be hosted on DockerHub and run WASM containers alongside traditional Linux and Windows containers.

This session focuses on enhancing Kubernetes autoscaling by integrating **KEDA** (Kubernetes Event-Driven Autoscaling) with **Prophet**, a time-series forecasting tool. Traditional Kubernetes autoscaling reacts to current resource metrics like CPU and memory, while predictive autoscaling anticipates future workload demands using historical data. By combining Prophet with KEDA, Kubernetes can proactively scale resources before traffic spikes, ensuring better performance and optimized resource usage.

Attendees will learn how to implement predictive autoscaling with KEDA and Prophet to improve efficiency, reduce latency, and manage resources proactively. This approach helps handle fluctuating workloads, enhancing system reliability and providing a seamless user experience.

Ideal for cloud architects, Kubernetes admins, and DevOps professionals, this session provides actionable insights to automate scaling strategies and improve cost efficiency in cloud-native environments.

Imagine presenting to your dream clients when your primary region decides to take a coffee break. That's exactly what happened to us - 25 minutes of unexpected manual failover, and watching hope drain from our team's & audience's faces. Our multi-region setup was more "disaster" than "recovery".

Join this talk as Prerit walk us over how they build an intelligent feature flag orchestration platform using OpenFeature which now processes 1k flag evaluations/second across 3 global regions, reduced infrastructure incident risk by 90% & DR time from 25 minutes to 125 seconds and has successfully handled 15 regional incidents without a single lost transaction.

We will also see they built the "infrastructure gates" to control traffic shifting with millisecond precision, feature state synchronization, and WARM-HOT-COLD DR strategies with just a toggle.