KubeCon + CloudNativeCon Japan 2025: Full Schedule

16-17 June
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon Japan 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in Japan Standard Time (UTC+9:00). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

arrow_back View All Dates

09:30 JST

Keynote: Introductory Remarks - Jim Zemlin, Executive Director, The Linux Foundation

Monday June 16, 2025 09:30 - 09:40 JST

Level 1 | Pegasus A-B1

Speakers

Jim Zemlin

Executive Director, The Linux Foundation

Jim Zemlin’s career spans three of the largest technology trends to rise over the last decade: mobile computing, cloud computing, and open source software. Today, as executive director of The Linux Foundation, he uses this experience to accelerate innovation in technology through... Read More →

Monday June 16, 2025 09:30 - 09:40 JST
Level 1 | Pegasus A-B1

Keynote Sessions

Content Experience Level Any
Presentation Language English

09:42 JST

Keynote: Community Opening Remarks - Chris Aniszczyk, CTO, Cloud Native Computing Foundation

Monday June 16, 2025 09:42 - 09:52 JST

Level 1 | Pegasus A-B1

Speakers

Chris Aniszczyk

CTO, CNCF

Chris Aniszczyk is an open source executive and engineer with a passion for building a better world through open collaboration. He's currently a CTO at the Linux Foundation focused on developer relations and running the Open Container Initiative (OCI) / Cloud Native Computing Foundation... Read More →

Monday June 16, 2025 09:42 - 09:52 JST
Level 1 | Pegasus A-B1

Keynote Sessions

Content Experience Level Any
Presentation Language English

09:54 JST

Keynote: Platform Alchemy: Transforming Kubernetes Into Generative AI Gold - Alexa Griffith, Bloomberg & Mauricio "Salaboy" Salatino, Diagrid

Monday June 16, 2025 09:54 - 10:04 JST

Level 1 | Pegasus A-B1

As Generative AI reshapes the tech landscape, its tools and solutions often feel overwhelming and disconnected - like scattered elements waiting to be forged into something greater. What does a complete GenAI platform look like? And how does it differ from application-focused platforms many organizations already run?

We’ll guide you through a practical transmutation of your platforms to add GenAI features. We’ll first define the base elements needed to deploy LLM inference on Kubernetes. We’ll then blend key elements into the MVP stage, adding core enterprise AI components like an AI Gateway, shared interfaces via Dapr, and KServe-based deployment strategies. Finally, we’ll tackle advanced features - intelligent load balancing for LLMs, observability patterns, and cost optimizations.

More than a tools showcase, this session is packed with real lessons from enterprise GenAI platform engineers, to help transmute your platform into the philosopher’s stone for AI innovation.

Speakers

Mauricio Salatino

Software Engineer, Diagrid

Mauricio works as an Open Source Software Engineer at @Diagrid, contributing to and driving initiatives for the Dapr OSS project. Mauricio also serves as a Steering Committee member for the Knative Project and Co-Leading the Knative Functions initiative. He published a book titled... Read More →

Alexa Nicole Griffith

Senior Software Engineer, Bloomberg

Alexa Griffith is a Senior Software Engineer on Bloomberg’s Cloud Native Compute Services organization. She works on building an inference platform for ML workflows and the open source project KServe. She enjoys solving engineering challenges at scale and writing code in Go. She... Read More →

Monday June 16, 2025 09:54 - 10:04 JST
Level 1 | Pegasus A-B1

Keynote Sessions, Platform Engineering

Content Experience Level Any
Presentation Language English

10:06 JST

Keynote: Service Mesh is Evolving into the Service Network - Lin Sun, Head of Open Source, Solo.io

Monday June 16, 2025 10:06 - 10:11 JST

Level 1 | Pegasus A-B1

Traditional service meshes often rely on sidecars, which can introduce added complexity and require application restarts. But things are changing. Modern service mesh is evolving into what we now call a service network—where the mesh dissolves into the infrastructure itself, becoming part of the infrastructure.

In this live demo, Lin will showcase how today's service mesh can be completely transparent to applications. She'll demonstrate how you can use gateways to implement Layer 7 traffic management and security policy enforcement, all while running her AI application that engages with and analyzes the audience's mood.

Speakers

Lin Sun

Head of Open Source & CNCF TOC, Solo.io

Lin is the Head of Open Source at Solo.io, and a CNCF TOC member and ambassador. She has worked on the Istio service mesh since the beginning of the project in 2017 and serves on the Istio Steering Committee and Technical Oversight Committee. Previously, she was a Senior Technical... Read More →

Monday June 16, 2025 10:06 - 10:11 JST
Level 1 | Pegasus A-B1

Keynote Sessions, Platform Engineering

Content Experience Level Any
Presentation Language English

10:13 JST

Keynote: From ECS To Kubernetes (and Sometimes Back Again): A Pragmatist's Guide To Migration - Marc Hildenbrand, Canva

Monday June 16, 2025 10:13 - 10:23 JST

Level 1 | Pegasus A-B1

Migrating to Kubernetes offers numerous benefits, but few organizations start from "greenfields" circumstances. Many have critical services running on existing platforms, each leveraging unique capabilities. Transitioning these services to Kubernetes can be a complex and non-trivial challenge.

At Canva—a leading design and collaboration platform serving 220 million monthly active users—we recently undertook an ambitious project to migrate over 400 services from Amazon Elastic Container Service (ECS) to Kubernetes (EKS). These services now span 15,000 pods across two clusters on a typical day.

In this talk, we’ll share the strategies, tools, and processes Canva developed to achieve a (mostly) seamless migration with minimal disruption to our teams and users. Whether you're planning your own migration or just curious about what it takes to migrate at this scale, this session will provide practical insights and lessons learned.

Speakers

Marc Hildenbrand

Staff Engineer, Canva

Marc is a software engineer with 20+ years of experience spanning gaming, consulting, finance, and cloud technologies. He’s served as CTO of a cloud-native consultancy, Lead Gamesystems Engineer for the MMO Lord of the Rings Online, and Developer Advocate for Kubernetes/Openshift... Read More →

Monday June 16, 2025 10:13 - 10:23 JST
Level 1 | Pegasus A-B1

Keynote Sessions, Platform Engineering

Content Experience Level Intermediate
Presentation Language English

10:25 JST

Sponsored Keynote: Challenging to the Innovative Infrastructure for the AI Revolution - Yuichi Saotome, VP, Platform BG Executive Director, Fujitsu Limited

Monday June 16, 2025 10:25 - 10:30 JST

Level 1 | Pegasus A-B1

Generative AI's rise demands massive compute resources and energy, conflicting with the urgent need for sustainability.

Composable Disaggregated Infrastructure (CDI) offers a solution by disaggregating servers into modular components connected via PCIe/CXL, enabling software-defined "composed server".

To address the growing resource demands of AI, particularly GPU utilization, Fujitsu is challenging the open-sourcing of a Kubernetes (K8s) mechanism for orchestrating CDI, under the CNCF community." This promotes vendor-neutral standardization, crucial for next-gen data centers handling explosive AI workload growth.

We aim to establish this as an open standard within CNCF/CNCJ, encouraging broad participation. Looking ahead, Fujitsu is developing "Optical Disaggregated Computing" for high-speed, low-power infrastructure in the 2030s.

Leveraging our CDI-based cloud technologies and photonics technologies, it delivers cloud-to-edge computing, improving efficiency, reducing power, and enabling low-latency.

Beyond K8s, Fujitsu's OSS contributions span AI, edge, and networking. We've strengthened our organization to focus on Linux/K8s and are committed to collaborating within the LF/CNCF ecosystem.

Speakers

Yuichi Saotome

VP, Platform BG Executive Director, Fujitsu Limited

From the early days of IaaS in Japan, he has been a driving force in cloud technology.As a founding member of Fujitsu's cloud services, he led the planning, design, development, and operation of virtual network functions.Now, as Executive Director in Fujitsu's Platform Business Group... Read More →

Monday June 16, 2025 10:25 - 10:30 JST
Level 1 | Pegasus A-B1

Keynote Sessions

Content Experience Level Any
Presentation Language English

10:32 JST

Keynote: Cloud Native Darwinism: Continuous Evolution of Platforms for Competitive Edge - Masaya Aoyama, Senior Software Engineer, CyberAgent

Monday June 16, 2025 10:32 - 10:42 JST

Level 1 | Pegasus A-B1

In the rapidly evolving world of cloud native technologies, new projects and paradigms are constantly emerging. To keep up with this momentum, platforms built on Kubernetes and cloud native ecosystem must continuously evolve as well. Choosing technologies and architectures is no longer a one-time decision—it requires continuous reevaluation and adaptability. By embracing flexibility and continuously adopting better solutions as they become available, end-users can maintain the competitive edge. This session will highlight the importance of continuously evolving platforms within the open-source ecosystem and introduce the powerful extensibility of Kubernetes that enables such evolution. Attendees will gain insights into how to keep competitive through continuous evolution, and we'll explore the next actions of early adopters and the trends in the upstream Just as the sun continues to rise in the Land of the Rising Sun, the evolution of your platform will illuminate the path to a brighter future for you, your company and your country.

Speakers

Masaya Aoyama

Senior Software Engineer, KaaS Product Owner, CyberAgent, Inc.

Masaya Aoyama is a Co-Chair for KubeCon + CloudNativeCon Japan 2025, and He is Senior Software Engineer and Product Owner of a managed Kubernetes platform at CyberAgent, Inc. He also serves as a Technical Advisor to 3-shake, Inc. and CREATIONLINE, Inc., both of which are CNCF member... Read More →

Monday June 16, 2025 10:32 - 10:42 JST
Level 1 | Pegasus A-B1

Keynote Sessions

10:42 JST

Keynote: Closing Remarks

Monday June 16, 2025 10:42 - 10:45 JST

Level 1 | Pegasus A-B1

Monday June 16, 2025 10:42 - 10:45 JST
Level 1 | Pegasus A-B1

Keynote Sessions

Content Experience Level Any
Presentation Language English

11:30 JST

A Journey and Lessons Learned To Enable IBM AIU Accelerators in Kubernetes - Takuya Mishina & Tatsuhiro Chiba, IBM Research

Monday June 16, 2025 11:30 - 12:00 JST

Level 1 | Pegasus A-B1

In this presentation, we will unveil the secrets and journey to enable an IBM's AI Accelerator in Kubernetes. We utilize wide range of tools and frameworks such as device plugin, custom scheduler, metrics exporter, webhooks and custom resources together to satisfy real requirements from various stakeholders - general users, cluster administrators and driver/runtime developers. Our device plugin and custom scheduler can accept special preference such as topology-aware allocation to enable RDMA, and webhook-based validator guides them to follow specification changes. To sync up allocation status among the components, we carefully defined a custom resource after performance estimation. From developer perspective, we provide various debug-purpose capabilities: for example, device allocation by PCI address for inspection, and pseudo device mode to achieve non-real-device test. In addition, multi-architecture support gives freedom of platform choice to all of the participants.

Speakers

Takuya Mishina

Researcher, IBM Research

Takuya Mishina is a Staff Research Scientist at IBM Research - Tokyo. He has been working for enhancing cloud infrastructure lifecycle management such as security and compliance posture management. Recent interests include extending the automation mechanism to provide usable AI hardware... Read More →

Tatsuhiro Chiba

Senior Technical Staff Member, IBM Research

Tatsuhiro Chiba is a STSM and Manager at IBM Research, specialized in performance optimization and acceleration of large scale AI and HPC workloads on Hybrid Cloud. He is leading a project to enhance OpenShift performance and sustainability for AI and HPC by exploiting various cloud... Read More →

Monday June 16, 2025 11:30 - 12:00 JST
Level 1 | Pegasus A-B1

AI + ML

Content Experience Level Intermediate
Presentation Language English

12:10 JST

Beyond Stock Outs: Scaling Inference on Mixed GPU Hardware With DRA - John Belamaric & Bo Fu, Google

Monday June 16, 2025 12:10 - 12:40 JST

Level 1 | Pegasus A-B1

Pods are PENDING?!? Ugh, none of the latest GPUs are available. But there are tons of older ones! If only you could tell Kubernetes “use the best GPU available, as long as it has 20GB+”...(enter: DRA).

Kubernetes’ Dynamic Resource Allocation (DRA) system, beta since 1.32, allows variations on which GPUs get allocated to Pods. You can write a flexible spec so that when the Deployment scales, Pods can land on whatever nodes have available GPUs. DRA works even if you need different numbers of devices for different hardware! This enables a new level of utilization and efficiency, saving your organization real money.

Combined with an advanced Node Autoscaler like Google’s Custom Compute Classes or Karpenter, you can spin up more VMs with whatever GPUs are available - or the most economical - all for a single Deployment. Scaling is simpler and more reliable, and your workload can scale even when your preferred type of GPU is stocked out.

Come learn how, and see it in action with a demo!

Speakers

John Belamaric

Senior Staff Software Engineer, Google

John is a Sr Staff SWE, co-chair of K8s SIG Architecture and of K8s WG Device Management, helping lead efforts to improve how GPUs, TPUs, NICs and other devices are selected, shared, and configured in Kubernetes. He is also co-founder of Nephio, an LF project for K8s-based automation... Read More →

Bo Fu

Senior Product Manager, Google

Monday June 16, 2025 12:10 - 12:40 JST
Level 1 | Pegasus A-B1

AI + ML

Content Experience Level Intermediate
Presentation Language English

14:10 JST

⚡ Lightning Talk: Embracing Culture and Breaking Language Barriers: A Story of Fostering Global Opensource Communities - Sreeram Venkitesh, DigitalOcean

Monday June 16, 2025 14:10 - 14:15 JST

Level 1 | Pegasus A-B1

Open source communities are a celebration of our different cultures. The single reason open source communities are able to build and ship software like Kubernetes, which is used so widely, is because of the collaboration of people from all around the globe.

This also means a lot of challenges when people are working together, like language barriers, cultural differences and timezones. In this talk I'll be sharing some lessons I've learnt about fostering open source communities amidst the differences. In the last two years, serving in the K8s release team and as the SIG Docs New Contributor Ambassador, I've experienced first hand how challenges like language barriers can hinder enthusiastic contributors. This talk is about these different challenges and how we can overcome them.

In an effort to inspire everyone in the open source community to embrace our differences and welcome everyone as we work together, I'm learning Nihongo to attempt giving this talk in the Japanese language.

Speakers

Sreeram Venkitesh

Senior Software Engineer, DigitalOcean

Sreeram is a contributor to the Kubernetes project who is primarily active in SIG Release, SIG Contribex Comms and SIG Node. He was part of the Kubernetes release team from v1.29 to v1.32 and was the Enhancements sub-team lead for Kubernetes v1.31. He is also the subproject lead for... Read More →

Monday June 16, 2025 14:10 - 14:15 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Cloud Native Experience

Content Experience Level Any
Presentation Language Japanese

14:17 JST

⚡ Lightning Talk: Enhanced Service Redirection: eBPF Ensures the High Availability of Node-Local DNS - Weizhou Lan, Daocloud

Monday June 16, 2025 14:17 - 14:22 JST

Level 1 | Pegasus A-B1

Excessive DNS query pressure can cause CoreDNS failures, leading to a cluster-wide meltdown. Thus, per-pod or per-node DNS proxy is a common high-availability solution. By binding the clusterIP of the kube-dns service to the local node, node-local DNS can provide seamless DNS interception and proxying, meeting the demands of low latency and high throughput. However, proxy's breakdown can directly lead to access failures, lacking high availability.
To solve this issue, we use cgroup eBPF to implement enhanced service redirection for node-local DNS, inspired by Cilium's LocalRedirectPolicy. Based on the health status of the local proxy or the redirection QoS strategy, the query of the kube-dns service can be dynamically resolved to the local node-local DNS, otherwise normally forwarded to CoreDNS. This scheme is independent of the CNI, and could cooperate with kube-proxy, offer multiple service redirection strategies and provide production-grade quality assurance for node-local DNS.

Speakers

Weizhou Lan

Senior Teach Leader, Daocloud

I currently serve as a Senior Tech Lead at DaoCloud, with over 14 years of engineering experience. I have had the experience of being a speaker at KubeCon three times. I am the initiator and maintainer of the CNCF sandbox project Spiderpool, and an active community member of Cilium... Read More →

EnhancedServiceRedirection eBPFEnsuresTheHigAvailabilityOfNodeLocalDNS weizhouLan pdf

Monday June 16, 2025 14:17 - 14:22 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Connectivity

Content Experience Level Beginner
Presentation Language English

14:24 JST

⚡ Lightning Talk: From Kernel To Kubernetes: Mapping eBPF-Detected Processes To Pods - Yuki Nakamura, mapbox

Monday June 16, 2025 14:24 - 14:29 JST

Level 1 | Pegasus A-B1

When a process like /usr/bin/curl runs in a pod (e.g., xwing in the default namespace), Tetragon detects it like bellow:

```
🚀 process default/xwing /bin/bash -c "curl https://ebpf.io/applications/#tetragon"
🚀 process default/xwing /usr/bin/curl https://ebpf.io/applications/#tetragon
💥 exit default/xwing /usr/bin/curl https://ebpf.io/applications/#tetragon 60
```

But how does it map that process to its pod?

This Lightning Talk explores how Tetragon connects the Linux kernel to Kubernetes by enriching eBPF-detected process data with Kubernetes metadata. I’ll break down how it extracts cgroup information from task_struct in kernel space and maps it to pod details using the Kubernetes API.

Speakers

Yuki Nakamura

Platform Engeneer, mapbox

- Master’s degree in Computer Science at the University of Tokyo - IBM - Mapbox Blog: https://yuki-nakamura.com/

Monday June 16, 2025 14:24 - 14:29 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Security

Content Experience Level Intermediate
Presentation Language English

14:31 JST

⚡ Lightning Talk: Optimizing Web Applications by Offloading Heavy Processing To Kubernetes Jobs - Asami Okina, Craftsman Software, Inc.

Monday June 16, 2025 14:31 - 14:36 JST

Level 1 | Pegasus A-B1

While typical web applications do not require large amounts of resources constantly, there are cases where specific processes consume significant CPU and memory.
In this session, we will introduce an architecture that offloads such resource-intensive processes to Kubernetes Jobs.
We will explain specific methods for Job management, how to integrate web applications (Next.js, @kubernetes/client-node) with the Kubernetes API, methods for data integration between Jobs and web applications, and real-time tracking of Job progress in the UI, all while sharing practical examples. Furthermore, we will provide a detailed introduction to a pattern where Kubernetes Job definitions generated from applications are managed using ConfigMaps, enabling quick configuration switching between environments, and offer hints to optimize your applications in terms of cost, performance, and management.

Speakers

Asami Okina

Software Engineer, Craftsman Software, Inc.

Focuses on cloud-native application development and operations centered on Kubernetes, holding CKAD and CKA certifications. Specializes in automation using GitHub Actions and loves reducing tedious work. Has expertise in designing and operating systems combining Web Application... Read More →

KubeCon CloudNativeConJapan2025 okinaasami Optimizing Web Applications by Offloading Heavy Processing to Kubernetes Jobs pdf

Monday June 16, 2025 14:31 - 14:36 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Application Development

Content Experience Level Beginner
Presentation Language Japanese

14:38 JST

⚡ Lightning Talk: Practical Monitoring for Knative Serving - Kazuki Higashiguchi, Autify

Monday June 16, 2025 14:38 - 14:43 JST

Level 1 | Pegasus A-B1

Knative is a widely adopted CNCF-hosted software for running serverless applications using Kubernetes. Knative Serving consists of many system components, such as Activator, Autoscaler, Controller, Webhook, and Istio or Kourier as an ingress gateway. Therefore, end users need to implement monitors for common error patterns and best metrics from many metrics. However, there is relatively little knowledge and resources for Knative end users.

This talk will present a production case study of monitoring for Knative Service. Specifically, it will explain how we can monitor Knative control plane efficiency, reconciliation operations, pod scaling health, concurrency observation, HTTP request success rate, and more.
That includes how Knative components implement Prometheus metrics, metrics pipelines (on Google Kubernetes Engine), dashboards and alerts.

This case study will benefit existing Knative users and potential users considering employing Knative in their Kubernetes clusters.

Speakers

Kazuki Higashiguchi

Senior Site Reliability Engineer, Autify

Kazuki Higashiguchi has more than 9 years of industrial experience, focusing on SRE and operational excellence. He is a Senior Site Reliability Engineer at Autify, a company serving AI-powered quality assurance platforms. He is mainly responsible for designing business infrastructure... Read More →

Monday June 16, 2025 14:38 - 14:43 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Observability

Content Experience Level Intermediate
Presentation Language English

14:45 JST

⚡ Lightning Talk: Providing Sufficient PVCs for Your StatefulSets: Creating New Volumes Larger Than the PVCTemplate - Kaoru Esashika, Cybozu, Inc.

Monday June 16, 2025 14:45 - 14:50 JST

Level 1 | Pegasus A-B1

Have you ever used automatic PVC resizing tools in Kubernetes? Have you ever encountered a situation where newly created PVCs remained at the small, template-defined size, causing capacity shortages during restores or clones?

To address this challenge, this session introduces a new approach in pvc-autoresizer, one of the tools for automatically resizing PVCs. By aligning newly created PVCs with the largest capacity in the same group, it ensures that PVCs have sufficient space right from creation time. Using annotations and a Mutating Webhook, we avoid capacity shortages during restores by provisioning enough volume capacity immediately after a PVC is generated. We will also explain why we chose a Webhook-based method over a Controller-based one, along with the design trade-offs involved.

Anyone seeking to enhance reliability for stateful workloads should not miss this session. Learn how a new PVC management strategy can deliver more stable Kubernetes storage.

Speakers

Kaoru Esashika

Software Engineer, Cybozu, Inc.

He works at Cybozu, Inc. For the past three years, he has focused on the operation and development of the storage area for a new infrastructure using Kubernetes. His work includes developing and operating distributed storage with Rook and Ceph, and own CSI plugin, TopoLVM.

Monday June 16, 2025 14:45 - 14:50 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Data Processing + Storage

Content Experience Level Intermediate
Presentation Language English

14:52 JST

⚡ Lightning Talk: What's New in Prometheus-Operator? - Ashwin Sriram, IIT-BHU

Monday June 16, 2025 14:52 - 14:57 JST

Level 1 | Pegasus A-B1

Join us for an exciting overview of the latest developments in Prometheus-Operator! This lightning talk will explore game-changing features, including the new ScrapeClasses for simplified monitoring configuration, DaemonSet Mode in PrometheusAgent for enhanced deployment flexibility, and expanded Service Discovery support across multiple cloud providers.

We'll explore how these additions, along with our improved documentation and new Scale Subresource capabilities, are making Prometheus-Operator more powerful and user-friendly than ever. You'll also learn about "poctl", our new command-line tool that is designed to handle Prometheus-Operator custom resources.

Plus, get a sneak peek into our roadmap and upcoming features that will shape the future of Kubernetes monitoring. Perfect for anyone interested in Kubernetes monitoring, this talk will equip you with knowledge about the latest tools to enhance your observability stack.

Speakers

Ashwin Sriram

Student

I'm an engineering student in my final year at IIT-BHU, majoring in metallurgy, but my heart truly lies in software engineering. I'm a maintainer for the Prometheus-Operator website repository, a role I earned after completing my GSoC mentorship. Through this experience, I've developed... Read More →

Monday June 16, 2025 14:52 - 14:57 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Observability

Content Experience Level Intermediate
Presentation Language English

14:59 JST

⚡ Lightning Talk: VexLLM: Silence Negligible CVE Alerts Using LLM - Akihiro Suda, NTT

Monday June 16, 2025 14:59 - 15:04 JST

Level 1 | Pegasus A-B1

When using container image vulnerability scanners like Trivy, a large number of vulnerabilities may be detected. However, not all of them necessarily require an action. This is because not all libraries or command-line tools included in the container image are actually utilized.

For example, the `python:3.12.4` image includes a `git` binary with the vulnerability CVE-2024-32002. This vulnerability does not need an immediate action if it is known that the Python application being run does not execute `git` commands.

VEX (Vulnerability-Exploitability eXchange) formats such as OpenVEX can be used to suppress such false alarms.
However, VEX is still not widely adopted due to the difficulty of manual analysis and classification of vulnerabilities.

This presentation introduces VexLLM, a tool that helps writing VEX by leveraging LLMs. VexLLM is available as a plugin for Trivy.

GitHub: https://github.com/AkihiroSuda/vexllm

Speakers

Akihiro Suda

Software Engineer, NTT

Akihiro Suda is a software engineer at NTT Corporation. He has been a maintainer of Moby (dockerd), BuildKit, containerd, runc, etc. He is also a founder of nerdctl and Lima (CNCF project).

Monday June 16, 2025 14:59 - 15:04 JST
Level 1 | Pegasus A-B1

⚡ Lightning Talks, Security

Content Experience Level Any
Presentation Language English

15:50 JST

Scaling AI Responsibly: Building Ethical, Sustainable, and Cloud Native AI Systems - Amita Sharma & Vincent Caldeira, Red Hat; Mohit Suman, Salesforce; Shamsher Ansari, Platform9

Monday June 16, 2025 15:50 - 16:20 JST

Level 1 | Pegasus A-B1

Panel Discussion - As AI continues to reshape industries, organizations face mounting pressure to scale AI systems responsibly while addressing challenges in efficiency, sustainability, and trust. This panel convenes leading experts to discuss how cloud-native technologies and CNCF projects are paving the way for scalable, ethical, and resource-efficient AI. Attendees will gain actionable insights into optimizing AI workflows, reducing environmental impact, and ensuring transparency in AI decision-making. From leveraging open-source tools to implementing cost-effective and ethical AI practices, this session will equip you with the knowledge to build AI systems that are both innovative and responsible. Discover how to harness the power of cloud-native ecosystems to drive AI transformation without compromising on sustainability or trust.
AI/ML engineers and data scientists looking to scale AI systems in cloud-native environments.

Speakers

Amita Sharma

AI/ML Engineering Manager, Red Hat

Amita is an Engineering Manager at Red Hat, leading Kubeflow Training, Feature Store. With 20 years of industry experience, including 14 years at Red Hat, she has held various roles. She is an active open-source contributor. Since 2011, she has contributed to the Fedora Project and... Read More →

Vincent Caldeira

CTO APAC, Red Hat

Vincent Caldeira, CTO of Red Hat in APAC, is responsible for strategic partnerships and technology strategy. Named a top CTO in APAC in 2023, he has 20+ years in IT, excelling in technology transformation in finance. An authority in open source and cloud-native technologies, Vincent... Read More →

Shamsher Ansari

Technical Product Manager, Platform9

Shamsher Ansari is a Technical Product Manager at Platform9, driving cloud-native infrastructure and Kubernetes solutions. With extensive experience in cloud, edge computing, and open-source technologies, he focuses on delivering scalable and cost-efficient products. Previously, at... Read More →

Mohit Suman

Senior Product Manager, Salesforce

Mohit Suman is a Product Management Leader at Salesforce, driving AI Observability, MLOps, and AI App Dev. With 12+ years in product strategy, engineering, and architecture, he builds scalable solutions for developer productivity. A passionate advocate for open source and public speaking... Read More →

Monday June 16, 2025 15:50 - 16:20 JST
Level 1 | Pegasus A-B1

AI + ML

Content Experience Level Intermediate
Presentation Language English

16:30 JST

Optimizing Data Locality and GPU Utilization for Training Workloads in Kubernetes - Bin Fan, Alluxio

Monday June 16, 2025 16:30 - 17:00 JST

Level 1 | Pegasus A-B1

As organizations scale their model training workloads in cloud-native environments, they face significant data processing and storage challenges: managing massive training datasets across distributed storage systems while ensuring optimal I/O performance. While Kubernetes excels at compute orchestration, the increasing distribution of data across multiple storage backends creates bottlenecks that impact training performance and infrastructure costs.

This presentation introduces a Kubernetes-native distributed caching system that utilizes NVMe storage to overcome data locality challenges. Haoyuan Li will also share real-world, large-scale production use cases to show how this architecture lowers data infrastructure costs, increases GPU utilization, and enables workload portability to navigate GPU scarcity challenges.

Speakers

Bin Fan

Alluxio

Bin Fan is VP of open source at Alluxio and the PMC maintainer of Alluxio open source. Prior to joining Alluxio as a founding engineer, he worked for Google to build the next-generation storage infrastructure. Bin received his Ph.D. in computer science from Carnegie Mellon University... Read More →

Monday June 16, 2025 16:30 - 17:00 JST
Level 1 | Pegasus A-B1

Data Processing + Storage

Content Experience Level Intermediate
Presentation Language English

17:10 JST

Addons Need Love Too: Maintaining Addons for Better Cluster Security - Stevie Caldwell & Andy Suderman, Fairwinds

Monday June 16, 2025 17:10 - 17:40 JST

Level 1 | Pegasus A-B1

Projects both within and outside of the CNCF ecosystem provide additional capabilities for Kubernetes clusters. These "addons" become integral to the functioning of our clusters, but we don't often talk about their impact as a whole or managing them holistically as first-class citizens.

We know there are barriers to keeping things like addons up-to-date and that it can be difficult to get buy-in for allocating the time and resources for updating something that is working just fine (for now), especially if you’re multiple major versions behind. In this session we will help you understand and articulate the benefits of catching up and keeping addons updated and how to be proactive moving forward. You will walk away with some tools and strategies for navigating the complexity of the addon ecosystem and make the process as painless as possible. You will be able to create an action plan for improving the stability and security of your clusters and share that with stakeholders.

Speakers

Stevie Caldwell

Senior Tech Lead, Fairwinds

Stevie Caldwell is a Senior Site Reliability Engineering Technical Lead at Fairwinds. Stevie also participates in the R&D arm of Fairwinds where she contributes to Fairwinds’s open source projects. She has worked with Kubernetes for 6+ years, has presented at a number of webinars... Read More →

Andy Suderman

CTO, Fairwinds

Andy Suderman is CTO at Fairwinds, a managed Kubernetes-as-a-Service provider. Andy has worked with cloud native technologies for the last eight years helping organizations adopt and manage Kubernetes. Andy is the creator and primary developer of Goldilocks—an open source tool that... Read More →

Monday June 16, 2025 17:10 - 17:40 JST
Level 1 | Pegasus A-B1

Security

Content Experience Level Intermediate
Presentation Language English