talk-data.com

Kubernetes gives us abstraction and power—but with great YAML comes great responsibility. In this talk, we’ll walk through live demos of real-world misconfigurations that allow attackers to escape containers and tamper with the host. You’ll see exactly what happens when Pods run in privileged mode, use hostPath volumes carelessly, or retain excess Linux capabilities. We’ll also show how to detect these attacks in real time using Falco, and enforce safety nets with Pod Security Admission. If you’ve ever wondered "what’s the worst that could happen?"—this session answers that with receipts.

In this session, we’ll explore the real-world journey of implementing a scalable, secure, and resilient data streaming platform—from the ground up. Bridging DevOps and DataOps practices, we’ll cover how our team designed the architecture, selected the right tools (like Kafka and Kubernetes), automated deployments, and enforced data governance across environments. You'll learn how we tackled challenges like schema evolution, CI/CD for data pipelines, monitoring at scale, and team collaboration. Whether you're just starting or scaling your data platform, this talk offers practical takeaways and battle-tested lessons from the trenches of building streaming infrastructure in production.

🗓 Agenda:

• 6:00pm: Doors open
• 6:00pm - 6:30pm: Food, Drinks & Networking
• 6:30pm - 7:15pm: Rafael Natali, Lead DevSecOps, Marionete
• 7:15pm - 8:00pm - Additional Q&A & Networking

💡 Speaker: Rafael Natali, Lead DevSecOps, Marionete

Title of Talk: Kubernetes Network in Action

Abstract: Curious about how networking works in Kubernetes? In this session, Rafael Natali will guide us through the essential building blocks of Kubernetes networking. You will learn what happens behind the scenes when pods communicate, how DNS works inside a cluster, and gain a solid understanding of key concepts such as Services, Ingress, and Network Policies.

This session is ideal for those embarking on their Kubernetes journey or anyone looking to reinforce their foundational knowledge. Don’t miss this opportunity to enhance your skillset and navigate the complexities of Kubernetes networking with confidence!

Bio: Rafael Natali has 20 years of experience in the IT industry, specifically as a System Administrator and DevSecOps professional. Throughout his career, he has developed extensive knowledge in designing, operating, and troubleshooting solutions that prioritize scalability and reliability. Rafael is also an expert in Automation as well as Continuous Integration and Delivery. He has been working with Kubernetes since 2018 and is recognised as a Kubestronaut since 2024. Currently, Rafael leads a team that is implementing a hybrid streaming data and analytics platform for a major insurance company in the UK.

*** DISCLAIMER NOTE: We are unable to cater for any attendees under the age of 18.