Is the Agent in the Room with Us Right Now? - Nick Rutigliano & Andrew Halaney, Netflix

This talk features Nick Rutigliano and Andrew Halaney from Netflix, who discuss the evolution of their compute environment from Mesos to a Kubernetes-based implementation. The speakers elaborate on the benefits and drawbacks of various isolation strategies they have adopted, addressing key topics such as advanced SECCOMP, AppArmor, and landlock enforcement, stringent RBAC network configurations, and user namespaces for container and user isolation. They also explore storage isolation and improvements in managing noisy neighbor challenges in a multi-tenant environment, highlighting how these strategies contribute to the safe and reliable operation of Netflix's diverse workloads.