CoreOS Fest 2016

etcd is an open source distributed consistent key-value store that was introduced by the team at CoreOS. Since its release two years ago it has become a mature cornerstone of a variety of systems in the container ecosystem for doing networking, service discovery, configuration management and load balancing. This talk will explore what etcd is, how it works, why it is used, and introduce etcd v3. Brandon will show how a cluster is maintained and some best practices. It will show off some example applications built on etcd such as locksmith, vulcand, Kubernetes, skydns and confd.

rkt is a modern container runtime, built for security, efficiency, and composability. Kubernetes is a modern cluster orchestration system allowing users. Kubernetes doesn't directly execute application containers but instead delegate to a container runtime, which is integrated at the kubelet (node) level. When Kubernetes first launched, the only supported container runtime was Docker - but in recent months, we've been hard at work integrating rkt as an alternative container runtime, aka "rktnetes". The goal of "rktnetes" is to have first-class integration between rkt and the kubelet, and allow Kubernetes users to take advantage of some of rkt's unique features.

This talk will describe how rkt works, some of the features that make it unique as a container runtime, and some of the process of integrating an alternative container runtime with Kubernetes, as well as the latest state of "rktnetes."

What are your containers doing? It’s one thing to know which containers are coming and going; it’s an entirely different thing to understand how your applications, microservices, are behaving in this brave new containerized world.

In this demo-driven presentation, Luca Marturana will cover the current state of the art of container and microservice monitoring, including the pros and cons of some popular approaches. Using real tools running in live environments, he will demonstrate how to effectively monitor, explore and troubleshoot production rkt deployments.

The presentation will feature live interaction with container environments and live demos of all tools and techniques discussed. Special emphasis will be put on Kubernetes, the open source orchestration tool,  as well as sysdig, an open source container and system troubleshooting tool developed by the presenter.

GitHub link: https://github.com/draios/sysdig

Specific topics will include:
* visualizing the physical vs logical architecture of rkt deployments
* understanding performance at the holistic microservice/application level for orchestrated systems
* Leveraging Kubernetes metadata such as pods and replication controllers for more intelligent troubleshooting
* identifying and surfacing system activity of individual rkt containers
* extracting process and application-level performance metrics from inside containers using non-intrusive methods
* troubleshooting detailed network activity among distributed containers

As software becomes more and more complex, we, as software developers, have been splitting up our code into smaller and smaller components. This is also true for the environment in which we run our code: going from bare metal, to VMs to the modern-day Cloud Native world of containers, schedulers and microservices.

While we have figured out how to run containerized applications in the cloud using schedulers such as Kubernetes, we've yet to come up with a good solution to bridge the gap between getting your containers from your laptop to the cloud.

How do we build software for containers? How do we ship containers? How do we do all of it without shooting ourselves in the foot?

In this talk, we'll explore how current delivery systems are falling behind, and how we need to change the mental model, create new best-practices and treat containers as a first-class citizen. We'll be showcasing how we think about continuous delivery at Wercker in combination with Kubernetes, in this new Cloud Native paradigm.

CoreOS is an excellent starting point for a secure environment, but there are many challenges to deploying and managing CoreOS under common compliance requirements. Compliance itself does not provide security, but it can present roadblocks to adopting revolutionarily awesome technology. A reduced attack surface, automatic updates, a slimmed down base OS, modern systemd and new automation tools should make a system more secure, but they also invalidate traditional approaches to compliance, and raise red flags for people unfamiliar with the technology.

This talks shares our experiences and explores solutions to deploy and manage CoreOS in light of common compliance themes. The presentation will also serve as a guide to those who are leading change in their organizations and are interested in showing how CoreOS can be adopted in the face of traditional ideas about compliance.