Open Source Summit Europe 2025

Join us for a tech talk where we'll demonstrate how we operate and automate a highly available, geo-redundant DNS service for Swisscom's 5G mobile network using a cloud-native tech stack. We'll provide an in-depth look into our multi-cluster architecture that leverages ExternalDNS, PowerDNS, and CoreDNS. Additionally, we'll showcase how the system behaves when a cluster breaks down, and how we monitor and troubleshoot this multi-cluster setup at scale.

This talk will be particularly interesting for those with demanding DNS requirements—such as applications which require rare DNS resource records like NAPTR—as well as engineers and architects tasked with building a DNS service using cloud-native tools who, due to compliance, governance, or availability concerns, cannot use publicly available DNS-as-a-service offerings.

As the modern applications running on Kubernetes become more dynamic, a reliable stateful storage becomes essential. These applications don’t just need storage; they need it to be fast, intelligent, and cost-effective. 
With so many open source tools available—like Rook-Ceph, NooBaa, and Longhorn—how do you pick the right one? And once you do, how do you make sure it’s reliable and doesn’t break the budget?

In this session, we’ll discuss how one can use open storage in Kubernetes—what works well, what causes problems, and how to avoid common mistakes. We’ll cover storage for different use cases (like block, file, and object), and talk about features like dynamic provisioning, snapshots, and scaling.

Whether you're a developer, architect, or admin, this session will help you understand how to choose, deploy, and manage open source storage in Kubernetes.

The original version of the CNCF Security TAG’s Supply Chain Security Best Practices was published in May 2021. To say “a lot has changed” since then would be a dramatic understatement—software supply chain attacks cost over $45 billion in 2023, with projections exceeding $80 billion by 2026.

In this talk, we'll take a whirlwind tour of the latest updates to the newly released second version of the Supply Chain Best Practices guide. One of the most significant changes is the increased adoption and maturity of SBOMs and attestations, supported by a rapidly growing ecosystem of tools for generating, verifying, and consuming this metadata.

We’ll explore how the open source community has responded to rising threats with a surge of new tools, improved standards, and broader best practice adoption—and how to chain these tools together for maximum impact.

We’ll showcase key open source projects from across the CNCF and OpenSSF ecosystems, including in-toto, TUF, SLSA, Guac, bomctl, SBOMit, and protobom.

Telco infrastructure is rapidly evolving to adopt cloud-native paradigms, but operating Kubernetes in telecom-grade environments brings unique challenges—stringent SLAs, real-time performance, and complex hybrid infrastructure. At Ericsson, we've embraced the open source ecosystem to build scalable, resilient, and fully automated platforms tailored to telco needs. This talk presents our technical journey in managing large-scale infrastructure using Kubernetes, Cluster API, and multiple open-source providers—including Metal3 for bare metal provisioning and Cluster API Provider OpenStack (CAPO) for cloud-based workloads. We’ll demonstrate how we orchestrate heterogeneous environments, spanning bare metal and OpenStack-based compute, through a unified, declarative lifecycle approach. We’ll also cover observability and alerting using tools like Prometheus and more, as well as real-world strategies for zero-downtime upgrades, failure remediation, and long-term cluster maintenance—all aligned with demanding telecom-grade requirements like high availability and real-time traffic handling.

The open source Platform Mesh project, is part of an open reference architecture for building a multi-provider cloud-edge continuum that should span the European continent. Some of the central questions the project wants to answer are: How can the different service offerings across a wide array of providers be unified? How can they communicate in a common language?

We discuss how a combination of Cloud Native building blocks (kcp and kube-bind, among others) is used to create the foundation for the next generation of cloud platforms. We demonstrate a prototype which meshes together Kubernetes-like APIs that allows us to consume services across multiple control plane instances, instantiating what we call the “Platform Mesh”. Platform Mesh is a project in the newly founded Linux Foundation sub-foundation, NeoNephos, originating from the ApeiroRA initiative.

This talk is for operators of cloud service providers and internal developer platforms (IDPs), giving them an outlook at a technology that unifies both worlds and creates a standard to consume services from (nearly) everywhere.