Helm Summit 2019: Full Schedule

Amsterdam, The Netherlands
September 11–12, 2019
Click here for more information and registration

09:25 CEST

Using Helm for Developing Marketplace Integrations - Néstor Salceda, Sysdig

It’s impressive to see how Kubernetes is conquering the world by storm. Several big players are offering managed Kubernetes and usually they also have a marketplace where they offer applications for installing them in your cluster with just a few clicks.

I’m one of those folks whose work consists on creating these integrations. I’m responsible for making Falco and Sysdig globally available on each cloud vendor, and yes, it may be a real nightmare if I wouldn’t have Helm.

In this talk, I will share with you how I maximized the ROI of each integration using Helm to distribute our applications on GKE, AWS, IBM or even building operators wrapping the Helm chart. I also will show you several tips and best practices based on my experience crafting these integrations.

Speakers

Néstor Salceda

Integrations Engineer, Sysdig

Néstor is a passionate and upbeat software engineer. He loves to pick an idea, develop it and making it real. He is also a Open Source Software enthusiast and right now, he is part of Sysdig team. While he is not in front of its computers, you will find him playing in the ground... Read More →

Using Helm for Developing Marketplace Integrations pdf

Wednesday September 11, 2019 09:25 - 09:50 CEST
Studio

Case Studies

10:00 CEST

Get Your Helm Charts Out There! - Reinhard Nägele, codecentric AG

The new Helm Hub (https://hub.helm.sh) is the central place where anyone can register their own chart repositories for easy discoverability. This session shows how to set up your own charts repo using GitHub Pages. It illustrates how to configure CI for your charts using Kind (https://github.com/kubernetes-sigs/kind) and the chart-testing tool (https://github.com/helm/chart-testing) so you can install and test pull requests for your charts and, thus, build trust in your community that things work as expected. Finally, chart-releaser (https://github.com/helm/chart-releaser) is used to upload chart packages as GitHub releases and to create the index.yaml file for the charts repo.

Speakers

Reinhard Nägele

Senior IT Consultant, codecentric AG

Reinhard is a Senior IT Consultant at codecentric's Munich office. He has more than 20 years of Java development experience and also likes programming in Go, Python, or Kotlin. He is a strong proponent of automation. In recent years, he has gained substantial knowledge in infrastructure... Read More →

get your helm charts out there pdf

Wednesday September 11, 2019 10:00 - 10:25 CEST
Studio

CI/CD

10:55 CEST

Ship It Faster, Safer & Cheaper - State of the Art of GitOps with Helm - Yusuke KUOKA, Z Lab Corporation

Let's build a highly customizable, cost-efficient, easily manageable CI & CD pipelines with Helm!

In this talk, we walk through a.) why we need CI & CD pipelines, important but unresolved problems, b.) what we would need exactly to rescue, and c.) how to build one yourself.

In the process you'll learn things like 1.) brief intro to GitOps, 2.) existing solutions, 3.) what are missing in the space, 4.) a proposed solution, 5.) theory behind it, and 6.) how Helm and its ecosystem helps.

Technologies and topics covered includes Helm, its plugins, Helmfile, Brigade, "The end of Kustomize vs Helm argument", and so on.

Through this talk, you are expected to get more confidence in the problems you have, what options are available, and how to choose one(or even build another!).

Speakers

Yusuke KUOKA

Research & Development Engineer, Z Lab Corporation

Yusuke Kuoka is a R&D engineer at Z Lab Corporation, a subsidiary of Yahoo Japan!. Z Lab is leading Kubernetes adoption in Japan, and providing hundreds-clusters-scale on-prem Kubernetes-as-a-Service(KaaS) for Yahoo! Japan. He's one of developers of KaaS today. He also led the design... Read More →

Ship It Faster, Safer & Cheaper (3) pdf

Wednesday September 11, 2019 10:55 - 11:20 CEST
Studio

CI/CD

11:30 CEST

Introducing Flux Helm Operator, a GitOps Approach to Helm Operations - Stefan Prodan, Weaveworks

GitOps is a way to do Continuous Delivery, it works by using Git as a source of truth for declarative infrastructure and workloads. For Kubernetes this means using git push instead of helm install/upgrade.

Weave Flux is an open source tool that automatically ensures that the state of a cluster matches the config in git. The Flux Helm Operator provides an extension to Weave Flux that automates Helm chart releases. A chart release is described through a Kubernetes custom resource named HelmRelease. The Flux daemon synchronises these resources from git to the cluster, and the Flux Helm operator makes sure Helm charts are released as specified in the resources.

In this talk, Stefan will discuss the benefits of GitOps and how the Flux community built the Helm Operator. Stefan will demo a GitOps pipeline and perform Helm operations with git commands.

Speakers

Stefan Prodan

Principal Engineer, Weaveworks

Stefan is a Principal Engineer at Weaveworks and an open source contributor to cloud-native projects. He is the creator of Flagger the progressive delivery operator for Kubernetes, and a core maintainer of the CNCF's Flux project. Stefan has over 15 years of experience with software... Read More →

Helm Summit Flux Helm Operator pdf

Wednesday September 11, 2019 11:30 - 11:55 CEST
Studio

CI/CD

13:25 CEST

Dancing with Helm, Skaffold and Minikube! - Medya Ghazizadeh, Google

In this talk, Medya will share with you how he picked the best tools to develop a ballroom dance app. This talk will cover a real-world developer workflow using the best tools for the job: Helm, Skaffold and Minikube.

Speakers

Medya Ghazizadeh

Technical Lead Manager, Google

Medya Ghazizadeh is a tech lead at Google's container tools team. holds masters degree from DePaul University. one of the minikube maintainers.loves open source, poetry and human languages.

Wednesday September 11, 2019 13:25 - 13:50 CEST
Studio

Application & Development

14:00 CEST

Lessons Learned from Maintaining Our Own Chart Repository - Tomas Pizarro Moreno, Bitnami

With Helm charts moving to a distributed format, it's very important to let people know how they can create and maintain their own repositories and make them discoverable to the community.

Tomas will share advice about how to create and maintain your own chart repository. This presentation will answer questions such as: how to keep your charts up-to-date efficiently, how to ensure your charts work on every Kubernetes distribution, how to make your charts discoverable, and how to efficiently apply feedback from your users?

At the end of this presentation, you should have the knowledge to deploy your own Helm chart repository and an understanding of the most important things you should care about.

Speakers

Tomas Pizarro Moreno

Advanced Engineer, Bitnami

Tomas Pizarro is one of the main contributors to the official Helm chart repository in number of commits, additions and deletions. Apart from that, he is part of the team that maintains the Bitnami chart catalog, a repository with over 50 different up-to-date charts

Lessons Learned From Maintaining Our Own Charts Repository pdf

Wednesday September 11, 2019 14:00 - 14:25 CEST
Studio

Chart Repositories

09:25 CEST

Library Charts: New to Helm 3 - Martin Hickey, IBM

One of the challenges with Helm in prior versions was the lack of a solid reuse pattern for chart definitions. While the concept of helper templates could be used in Helm v2 to mitigate this problem, Helm v3 has added support for a new class called "library charts" which allow for sharing and reuse across all the templates in a chart or sub-chart.

In this talk you will get clear answers to questions like "What is a library chart?", "How do I use a library chart?" and "What are the use cases for library charts?". In this session, I will focus on practical guidance that will help you improve chart development by chart definition reuse. I hope I can show you the advantages of using them through this technical deep dive and demo.

Speakers

Martin Hickey

Senior Technical Staff Member, Open Technologies, IBM

Martin Hickey is a Senior Technical Staff Member and an Open Source strategic leader at IBM. He has been contributing to various Open Source projects, most notably, Kubernetes, Helm, OpenTelemetry, OpenStack, and the Elastic community. Martin is a core maintainer of the Helm project... Read More →

Library Charts pdf

Thursday September 12, 2019 09:25 - 09:50 CEST
Studio

Helm 3

10:00 CEST

At the Helm without a Steering Wheel – Your Chart as a Kubernetes Operator - Daniel Messer, Red Hat

Since their inception Helm Charts have become the go-to solution for Day-1 operations of applications on Kubernetes. Today users are increasingly looking for Day-2 management when running their apps that are getting more complex by the day. Ideally they would be controlled and managed in the same goal-seeking, resilient way as Kubernetes itself.
Enter Operators: an application-specific workload manager that can turn your chart into a native Kubernetes object. With the Operator SDK you can now run your Helm chart without changes as an Kubernetes Operator and catch two birds with one stone: eliminate the need for tiller and get declarative configuration with constant lifecycle management.

Speakers

Daniel Messer

Senior Product Manager, Red Hat

Daniel is a Senior Product Manager for OpenShift at Red Hat working on the Operator Framework. He's been using Kubernetes and Containers since their inception and in his 10 years of IT careers so far he worked as a Developer, PreSales Consultant, Solution Architect and now as Technical... Read More →

Helm Summit 2019 At the helm without a steering wheel pdf

Thursday September 12, 2019 10:00 - 10:25 CEST
Studio

Application & Development

10:55 CEST

More Charts, More Problems. Lets Talk Bringing Sanity - Shikha Srivastava & Kirti Apte, IBM

Now that you have an application running in Kubernetes, what will your next steps be? Can you deploy this application to any cloud? If someone else wishes to install your helm chart would you have all necessary resources to deploy it successfully? Do you have a certification process to ensure your helm chart is enterprise ready? Creating a helm chart to deploy your application is just the first step, but now you need a process to ensure that the helm chart follows guidelines established by your enterprise and future versions of the chart are created efficiently as part of your CI/CD pipeline. In this presentation, you will learn about effective ways to create, organize and maintain enterprise grade helm charts. We will also discuss how our CI/CD pipeline is implemented using custom linter, verification test cases to make sure only certified charts are promoted into production.

Speakers

Shikha Srivsatava

Distinguished Engineer and Master Inventor, IBM

Shikha is a Distinguished Engineer & Master Inventor at IBM. She is the lead architect at Automation and Integration SaaS, where she brings her expertise in architecture, design, leadership towards collaboratively creating innovative pragmatic solutions leading to multi-cloud based... Read More →

Kirti Apte

Senior Software Engineer, IBM

Kirti is Senior Software Engineer at IBM. She is a technical lead for IBM Cloud Private Enterprise Catalog which is responsible to containerize, deploy and manage IBM and non-IBM middleware. She brings her expertise in architecture, design, and leadership to create consumable hybrid... Read More →

Helm Summit 2019 handling large number of charts sept 10 pdf

Thursday September 12, 2019 10:55 - 11:20 CEST
Studio

Application & Development

11:30 CEST

From ChartMuseum to Harbor - Josh Dolitsky, Blood Orange

The ChartMuseum project was originally created for advanced chart repository use cases - things such as chart uploads, pluggable storage, and multi-tenancy. However, as more requirements piled up over time, it became increasingly clear to the Helm maintainers that the entire repository system was insufficient.

After many meetings, a decision was finally made that Helm would adopt the OCI Distribution Spec for the next generation of chart repos - the same API that Docker uses whenever you run a "docker pull" / "docker push".

Meanwhile, Project Harbor was focusing efforts on building a robust, cloud-native registry. Harbor is built atop the Docker Distribution project, which is essentially the reference implementation for OCI Distribution.

In Helm 3, the obvious successor to ChartMuseum will be Project Harbor. This talk will cover the move to OCI and how to use Harbor to serve charts.

Speakers

Josh Dolitsky

Founder & Chief Engineer, bloodorange.io

From ChartMuseum to Harbor pdf

Thursday September 12, 2019 11:30 - 11:55 CEST
Studio

Chart Repositories

13:25 CEST

Securing Helm 3 - Matthew Fisher, Microsoft

Providing a secure end-to-end deployment pipeline is important when running Kubernetes in production. It’s important to understand each component of the deployment pipeline to better understand how to secure your cluster from certain attack scenarios.

Helm 3 removed a very significant piece of the architecture called Tiller. Many users are excited about the removal of Tiller, but it's left questions about how the security story changes for Helm 3.

In this session, we'll dive deep into Helm 3's architecture, what changed, and how the removal of Tiller affects Helm's security model. We'll also share best practices for securing Helm 3 in different operational contexts.

Speakers

Matt Fisher

Software Engineer, Microsoft

Matt is a core maintainer of the Helm project, and a Software Engineer at Microsoft. Off hours, Matt enjoys spending time camping, woodworking and spending time with his family.

Securing Helm 3 Helm Summit EU 2019 pptx

Thursday September 12, 2019 13:25 - 13:50 CEST
Studio

Helm 3

14:00 CEST

Increasing Reliability via Helm Pre-Release Checks - Bridget Kromhout, Microsoft

Ever had to clean up from a failed Helm release because you didn't have the right RBAC? Let’s take an in-depth look at how you can effectively detect and mitigate release failures using a variety of methods including checking resource schema validity with kubeval, ensuring conformance to policy with conftest, and verifying role-based access control with kubectl can-i. We’ll increase our release confidence with better guarantees against the unexpected!

Speakers

Bridget Kromhout

Principal Product Manager, Microsoft

Technologist, podcaster, conference speaker, devopsdays organizer. Herds cats and wrangles docs; still team #opslife.

Thursday September 12, 2019 14:00 - 14:25 CEST
Studio

Helm 3

14:35 CEST

ErrTooMuchHelm = fmt.Errorf("A Maintainer's Story About Helping with Helm") - Taylor Thomas, Microsoft & Martin Hickey, IBM

As Helm becomes more commonplace in many people's workflows, the community continues to expand. The Helm community has always been a welcoming place, but sometimes it seems hard to jump in and help, especially with how large it has become. Come join me as I walk through some enlightening (and entertaining) mistakes and success to illustrate how to best contribute to Helm. We will discover the various ways you can participate in the community – from documentation to writing code and everything in between. To finish, we will discuss some possible improvements for the future.

Speakers

Martin Hickey

Senior Technical Staff Member, Open Technologies, IBM

Taylor Thomas

Director of Engineering, Cosmonic

Taylor Thomas is an Engineering Director working on WebAssembly platforms at Cosmonic. He actively participates in the open source community and is one of the creators of Krustlet and Bindle. He is currently core maintainer of wasmCloud, Bindle, and Krustlet. He is a regular speaker... Read More →

Thursday September 12, 2019 14:35 - 15:00 CEST
Studio

Community

15:10 CEST

ytt: An Alternative to Text Templating of YAML Configuration in Helm - Nima Kaviani, IBM & Dmitriy Kalinin, Pivotal

Helm currently uses go/template package to perform text templating which ultimately results in various problems such as wrong indentation, incorrect escaping, etc. ytt (https://get-ytt.io) on the other hand, understands YAML structures (maps, lists, scalars, etc.) and can more effectively template YAML documents than plain text templating tools. Furthermore ytt uses a Pythonic language that is already familiar to most users, making it easier to write imperative logic. By replacing the go/template engine with ytt, we think users have a better experience with templating YAML configuration.

Speakers

Nima Kaviani

senior software engineer, IBM

Nima Kaviani is a senior cloud engineer with IBM. He is a contributor to Knative and Cloud Foundry's Eirini. Prior to that Nima was the contributor to Cloud Foundry's Diego for over two years. Nima holds a PhD in computer science and tweets and blogs about Serverless, Kubernetes... Read More →

Dmitriy Kalinin

Principal Software Engineer, Pivotal

Dmitriy Kalinin works at Pivotal on various projects, most recently contributing to Kubernetes and Knative. Recently he has been working on several open source tools that help manage applications on Kubernetes.

ytt helm summit 2019 pdf

Thursday September 12, 2019 15:10 - 15:35 CEST
Studio

Community

16:05 CEST

Day 2 Operations of Helm Charts - Dex Horthy, Replicated, Inc

Helm install is just the beginning. Once a chart is installed, we need to know when new versions are available, review the change and assess the risk (is it a major, minor or patch?), assess the priority (is this a security patch?), and then deploy and test the update. This talk proposes a workflow and shows an OSS framework built on the Replicated Ship project that helps reduce the manual work (toil) involved with updating and operationalizing charts. We’ll see that with a little work up front, operators can greatly reduce the cost and toil involved in Day 2 Operations of Helm.

Speakers

Dex Horthy

Core Engineer, Replicated, Inc

Dex is a core engineer at Replicated, where he has helped hundreds of companies deploy and consume Kubernetes based applications. Additionally, Dex is a core contributor to several OSS projects including Replicated Ship. Replicated is a platform for cloud-native applications to distribute... Read More →

Day 2 operations of Helm Charts (updated) pdf

Thursday September 12, 2019 16:05 - 16:30 CEST
Studio

CI/CD

16:40 CEST

Case Study: Managing Secrets and Charts at CERN - Spyros Trigazis & Ricardo Rocha, CERN

Declarative deployments, secret management and containerized workloads are in high demand in the CERN community. At the CERN's on-premise kubernetes clusters, a diverse range of workloads are running from data analysis to traditional IT services. Helm Charts is in an increasingly popular pattern to package application with business logic and many members of the CERN community start to adopt it. In this talk, we will describe a user facing plugin to manage secrets in git using an external key manager service, codenamed barbican. Additionally, we will describe the charts we are using to manage our private cloud, storage plugins and data analysis software.

Speakers

Spyros Trigazis

Computing Engineer, CERN

Spyros Trigazis is a computing engineer and a member of the CERN Cloud infrastructure team which provides computing resources to the High Energy Physics community. He has been contributing to open source projects like Fedora, Kubernetes and OpenStack.

Ricardo Rocha

Computing Engineer, CERN

Ricardo is a Computing Engineer at CERN IT focusing on containerized deployments, networking and more recently machine learning platforms. He has led for several years the internal effort to transition services and workloads to use cloud native technologies, as well as dissemination... Read More →

Thursday September 12, 2019 16:40 - 17:05 CEST
Studio

Case Studies