KubeCon + CloudNativeCon India 2026: Full Schedule

18-19 June
Learn More and Register to Attend

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for KubeCon + CloudNativeCon India 2026 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

Please note: This schedule is automatically displayed in India Standard Time (UTC+5:30). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date." The schedule is subject to change and session seating is available on a first-come, first-served basis.

12:00pm IST

Commit-Then-Disclose: Cryptographic SBOM Auditing Without IP Leakage - Sharvil Bhatt, Reliance Industries limited & Swastik Gour, Improving

Thursday June 18, 2026 12:00pm - 12:30pm IST

205 (Level 2)

SBOM regulations (NTIA, EU CRA,CISA) create conflicting requirements: auditors demand transparency while vendors require confidentiality. We present a two-layer Merkle commitment architecture separating public change detection from private component disclosure. Layer 1 builds standard Merkle trees producing public roots for tamper detection—anyone monitors changes without seeing components. Layer 2 commits internal hashes with 256-bit random nonces, yielding private commitment roots shared only with auditors for cryptographic hiding. Selective disclosure reveals only changed components via decommitment tuples with O(log n) proofs. Auditors verify commitments reconstruct to trusted roots. Re-randomization refreshes nonces without altering data. Tested: 100 auditors, 100K components, 50K proofs, zero false accepts. Performance: 2.6M disclosures/second, 0.01ms proof generation, 625-byte paths. Policy-based filtering achieves 72% disclosure reduction.

Speakers

Swastik Gour

Product Engineer , CNCF ambassador, Improving

Swastik is a CNCF ambassador and a Product Engineer by profession who enjoys to contribute to opensource inclusing openssf hosted RSTUF , kyverno , knative , paralus , Kubevela and is also a CAPI CI signal release shadow . He likes to study about the latest tech And innovations going... Read More →

Sharvil Bhatt

Researcher and ex security auditor, Ex Reliance Industries limited

Published security researcher and Master's Candidate at LNMIIT. Former Security Auditor at Reliance Industries with expertise in OS kernel internals, eBPF-based threat detection, Rust and Go for secure tooling, and binary fuzzing. Skilled in container security, SBOM generation, supply-chain... Read More →

Thursday June 18, 2026 12:00pm - 12:30pm IST
205 (Level 2)

Security

Content Experience Level Intermediate

12:40pm IST

Root Without Risk: A Decade-Long Quest for True Container Isolation - Sumir Broota, Broota Enterprise

Thursday June 18, 2026 12:40pm - 1:10pm IST

205 (Level 2)

Kubernetes has long struggled with safe container isolation where `root` in a pod meant `root` on the node. This session shows how KEP‑127 and user namespaces finally make root inside a container harmless.

Real scenario: Your container needs CAP_SYS_ADMIN for FUSE mounts. An exploit succeeds. Without user namespaces: attacker = root on node, full cluster access. With user namespaces: attacker = UID 65536 - relatively powerless.

This talk chronicles the 9+ year journey mapping your pods "root" to an unprivileged nobody on the host.

Why it took 9 years:
- Early attempts (2016) failed-no kernel support
- v1.25-1.28: Three alpha rewrites
- v1.27: idmap mounts breakthrough
- v1.30: off-by-default Beta after CRI overhauls
- v1.33: Default beta-production-ready
- v1.34: Observability (metrics added)

What you'll learn:
✓ Live code walkthrough: kubelet → CRI → runc UID remapping
✓ Demos: container breakout attempts CVE-2024-21626 AKA Leaky Vessel patched
✓ Practical deployment patterns

Speakers

Sumir Broota

Sr DevSecOps Engineer & Tech Architect, Broota Enterprise

An independent DevSecOps and Tech Architecture consultant, kubestronaut, and cybersecurity and FOSS enthusiast, currently running Mumbai’s largest cybersecurity community -BreachForce.

Thursday June 18, 2026 12:40pm - 1:10pm IST
205 (Level 2)

Security

Content Experience Level Advanced

12:40pm IST

Zero Trust for Autonomous Agents: Isolating AI Workloads on Kubernetes - Kanagalingam Senthalan, WSO2

Friday June 19, 2026 12:40pm - 1:10pm IST

205 (Level 2)

AI Agents are moving from experimental scripts to autonomous "digital employees" creating a new security crisis. Because agents determine their own execution paths, standard security fails. Securing them requires strictly enforcing the 4 Pillars of Governance: Administration, Authentication, Authorization, and Audit at the infrastructure layer.

This talk presents a practical implementation of these pillars using Cell-Based Architecture on Kubernetes. We will demonstrate how to encapsulate agents into governed "Cells" to enforce Zero Trust controls at every critical traffic boundary:
1. User → Agent
2. Agent → Agent
3. Agent → Tool
4. Agent → LLM

We will translate these pillars into real Kubernetes primitives, giving attendees a blueprint to move from "unmanaged bots" to hardened, enterprise-ready workloads. All patterns demonstrated use CNCF-hosted projects and open-source identity primitives leveraging open standards like OIDC and OAuth 2.0.

Speakers

Kanagalingam Senthalan

Technical Lead, WSO2

Kanagalingam Senthalan is a core contributor and technical lead for Project Thunder, an open-source identity service designed for cloud-native workloads including AI agents. Previously, he led the Application Identity team for WSO2 Internal Developer Platform, where he embedded security... Read More →

Friday June 19, 2026 12:40pm - 1:10pm IST
205 (Level 2)

Security

Content Experience Level Any

2:30pm IST

Ready, Set, Go: WASM-Powered Containers Taking Your AI To New Heights - Anshika Tiwari, Amazon Web Services & Abhineet Saxena, Independent

Friday June 19, 2026 2:30pm - 3:00pm IST

205 (Level 2)

With the rise of containerization and edge computing, the demand for portable, efficient, and low-latency solutions is growing. WebAssembly (WASM), known for its small size and fast loading, is expanding beyond the browser into containerized and edge environments. When combined with CNCF projects like Kraken, WasmEdge Runtime, and containerd, WASM can unlock hardware accelerators (GPU, TPU, FPGA) to revolutionize AI/ML workloads across both containerized and edge deployments.

In this talk, we’ll explore:

1. How Kraken and WasmEdge Runtime enable seamless integration of WASM into containerized environments for enhanced performance.
2. Live demos showcasing WASM-powered containers running AI workloads across various hardware platforms.

By the end of this talk, you'll know how to take your containerized and edge AI/ML workloads to the next level with speed, portability, and hardware acceleration.

Speakers

Abhineet Saxena

Cloud Engineer, Atlassian India

Abhineet Saxena is a Cloud Engineer with expertise in AWS, Linux, and DevOps practices, as well as an AWS User Group Leader and CNCF Community Leader. He has actively contributed to the tech community by organizing and speaking at events like Kubernetes Birthday Bash, Grafana Jaipur... Read More →

Anshika Tiwari

CSA - Cloud Engineer, Amazon Web Services, Inc.

Anshika is a passionate DevOps/SRE Engineer who is always eager to learn & implement cloud-native solutions, she has contributed to streamlining deployment processes and enhancing system reliability. She is eager to share her experiences and insights at conferences, contributing to... Read More →

Friday June 19, 2026 2:30pm - 3:00pm IST
205 (Level 2)

Emerging + Advanced

Content Experience Level Any

3:10pm IST

When Kubernetes Becomes an Interface, Not a Cluster - Samarth Sharma, DataGenie & Goutam Verma, Expedia

Friday June 19, 2026 3:10pm - 3:40pm IST

205 (Level 2)

We often treat Kubernetes as a system you must continuously run and operate. But in practice, many teams interact with Kubernetes primarily as an API contract rather than as an always on control plane.
In this talk we'll explore a different way to think about Kubernetes, what if the Kubernetes API mattered more than the cluster itself?

Instead of running a full control plane with etcd, schedulers, and nodes, workloads are executed locally using lightweight runtimes, while applications continue to interact through Kubernetes-style APIs.

We'll see:

=> Which Kubernetes components are actually required to run workloads
=> Running workloads without etcd, schedulers, or nodes
=> Local-first execution with Kubernetes-compatible APIs
=> Clear limitations and failure modes of this approach
=> What this model enables for edge, disaster recovery, and local development

The goal is not to replace Kubernetes, but to understand which parts of it are essential and which are incidental. with a demo

Speakers

Goutam Verma

SDE II, Expedia

Samarth Sharma

Software Engineer, DataGenie

I am Samarth Sharma, a software engineer and an Opensource enthusiast. I have worked with various tech organizations as a Software Engineer Fellow, including Google Summer of Code' 22 and 23, Geeks for Geeks, MLH and Metafic.

Friday June 19, 2026 3:10pm - 3:40pm IST
205 (Level 2)

Emerging + Advanced

Content Experience Level Intermediate

4:10pm IST

Validating RK3588 for KubeEdge: Scalable ARM64 Edge Node Simulation Without Hardware - Sachin Jha, CNCF(KubeEdge)

Friday June 19, 2026 4:10pm - 4:40pm IST

205 (Level 2)

In this session, I’ll share how I validated support for the RK3588 ARM64 chip in KubeEdge—without using any physical hardware. Instead of relying on real devices, I built a simulation-based setup that mimics how an RK3588-powered edge node behaves inside KubeEdge.

I’ll walk through the practical steps: how the environment was emulated, how pods were tested, and how metrics, node status, and edge-core behavior were verified. Along the way, I’ll also highlight the challenges, what worked, what didn’t, and the key lessons that made the process smoother.

If you’re interested in edge computing, ARM devices, or contributing to KubeEdge without access to specialized hardware, this talk will give you a clear, realistic, and easy-to-follow blueprint.

Speakers

Sachin Jha

LFX Intern, CNCF(KubeEdge)

Sachin is a cloud-native enthusiast and an active contributor to CNCF projects, currently focusing on Kyverno. With a strong background in DevOps, Kubernetes, and containerization, Sachin has been actively involved in open-source communities, collaborating on policy-driven security... Read More →

Friday June 19, 2026 4:10pm - 4:40pm IST
205 (Level 2)

Emerging + Advanced

Content Experience Level Intermediate

4:50pm IST

LLMs Behind Bars: Sandboxes at Scale for AI on a Short Leash - Prashanth Pai, CodeRabbit

Friday June 19, 2026 4:50pm - 5:20pm IST

205 (Level 2)

LLMs can write code - and sometimes running that code is the most direct way to deliver product value. The moment you do, you’ve effectively introduced a remote-code-execution surface: the code is untrusted by default, but the system still has to execute it to stay useful.

In this talk, we’ll share what it took to build and operate production sandboxes for LLM-generated code at scale. We’ll cover the isolation model (containers, least-privilege defaults, syscall/filesystem restrictions), the operational reality (startup latency, resource limits, cold starts, observability), and the guardrails that matters when code or users try to misbehave. We’ll also dig into data protection: locking down egress, blocking exfiltration paths, and keeping secrets out of reach.

We’ll cover what worked, what failed, and what we’d do differently - ending with a practical, vendor-agnostic mental model and checklist you can apply.

Speakers

Prashanth Pai

Principal Engineer, CodeRabbit

Prashanth Pai is a Principal Engineer at CodeRabbit, where he builds the infrastructure that powers safe, reliable execution for AI products in production.

He started his career at Red Hat and has been passionate about open source ever since.

Friday June 19, 2026 4:50pm - 5:20pm IST
205 (Level 2)

AI + ML

Content Experience Level Beginner

12:00pm IST

12:40pm IST

12:40pm IST

2:30pm IST

3:10pm IST

4:10pm IST

4:50pm IST

Get help with the event