--- title: "13 KubeCon North America 2026 sessions not to miss" description: "Plan KubeCon North America 2026 with 13 must-see sessions on supply chain security, policy-as-code and AI agents, plus Cloudsmith at Booth 175." canonical_url: "https://cloudsmith.com/blog/13-kubecon-north-america-2026-sessions-not-to-miss" last_updated: "2026-10-26T09:37:56.026Z" --- # 13 KubeCon North America 2026 sessions not to miss ## KubeCon North America 2026 FAQs ### When and where is KubeCon North America 2026? KubeCon + CloudNativeCon North America 2026 takes place November 9–12, 2026, at the Salt Palace Convention Center in Salt Lake City, Utah. CNCF-hosted co-located events run on Monday, November 9, and the main conference opens with keynotes at 9:00 AM MST on Tuesday, November 10. ### Do I need a separate pass for the co-located events? Yes. CNCF-hosted co-located events on November 9, including Open Source SecurityCon, Platform Engineering Day, and Agentics Day: MCP + Agents, require an All-Access Pass. Picks 4, 6, 9, 10, 11 and 12 on our list are co-located sessions. ### Which KubeCon North America 2026 sessions cover software supply chain security? Start with "Signed, Sealed, Denied" from AT&T, "I Packaged My Application in a Container Image, and Now What?", and "Mythos vs Maintainers." On Monday, Open Source SecurityCon adds AMPEL for SDLC hardening, VEX at scale, and the OpenSSF golden path panel. ### Where can I find Cloudsmith at KubeCon North America 2026? Cloudsmith is at Booth 175 in the Solutions Showcase. Catch our booth lightning talk on Tuesday, November 10 at 10:45 AM, play supply chain Jeopardy, and join us at AprèsKube SLC on Wednesday, November 11. The 13 KubeCon + CloudNativeCon North America 2026 sessions we recommend for platform, DevOps, and security teams cover software supply chain security, policy-as-code with OPA and Kyverno, packaging AI agents as OCI artifacts, and governing agentic workloads on Kubernetes. KubeCon North America 2026 runs November 9–12 at the Salt Palace Convention Center in Salt Lake City, Utah. All times below are MST. ```json { "_key": "7fff8383ce12", "_type": "tableBlock", "firstRowIsHeader": true, "markDefs": null, "table": { "rows": [ { "_key": "c8b4561f-89c5-432f-a0fd-9333b560b857", "_type": "tableRow", "cells": [ "#", "Session", "Speakers", "Date and time (MST)", "Theme" ] }, { "_key": "8948a46c-1fdb-46ac-a0bd-3beade567ccf", "_type": "tableRow", "cells": [ "1", "Signed, Sealed, Denied: Attestation-Driven Admission with Kyverno + CEL at AT&T", "Chad Swenson, Sagar Kundral", "Nov 10, 12:20 PM", "Security" ] }, { "_key": "79917467-6dca-454f-8e57-0d4aaee37bd1", "_type": "tableRow", "cells": [ "2", "KitOps: The Whole Kit for AI Agents", "Gorkem Ercan", "Nov 9, 2:15 PM", "AI + ML" ] }, { "_key": "32cd8862-ba3c-4485-9dbd-fa1a78401ea4", "_type": "tableRow", "cells": [ "3", "Mythos vs Maintainers: Drowning in the Vulnerability Tsunami", "Fabian Kammel, John Kjell", "Nov 10, 11:30 AM", "Security" ] }, { "_key": "9bc95602-6799-43a7-9d1d-083180eff3d6", "_type": "tableRow", "cells": [ "4", "The Golden Path Doesn't Exist Yet: What Platform Teams Told Us About OpenSSF Tools", "Katherine Druckman, Stacey Potter, Kadi McKean, Tabatha DiDomenico", "Nov 9, 12:45 PM", "Open Source SecurityCon" ] }, { "_key": "6963c139-696f-40af-a186-3e9d504d63f6", "_type": "tableRow", "cells": [ "5", "Rego Without Borders: Breaking Down Language Barriers for Security Policy", "Philip Conrad", "Nov 9, 2:08 PM", "Open Policy Agent" ] }, { "_key": "ad1b0f32-d722-4d0c-a2d5-fbddbc284b16", "_type": "tableRow", "cells": [ "6", "Set the Terms for Your Agents and Let Your Humans Be Creative: How to Govern Code Nobody Reviewed", "Thomas Schuetz, Dr. Constanze Roedig", "Nov 9, 11:50 AM", "Platform Engineering Day" ] }, { "_key": "64cffd16-ed89-43d5-9cb3-ba91e60782f9", "_type": "tableRow", "cells": [ "7", "I Packaged My Application in a Container Image, and Now What?", "Aurélie Vache", "Nov 10, 12:20 PM", "Supply chain fundamentals" ] }, { "_key": "69224ea1-1dc3-4516-8c52-1429a9a57004", "_type": "tableRow", "cells": [ "8", "The Identity Crisis: Who is the AI Agent in Your Cluster?", "Abdel Sghiouar", "Nov 10, 10:26 AM", "Keynote" ] }, { "_key": "706e7b93-1b8c-4f81-9cb2-de3cc8db2374", "_type": "tableRow", "cells": [ "9", "End to End Software Development Lifecycle Hardening with AMPEL", "Adolfo García Veytia", "Nov 9, 9:10 AM", "Open Source SecurityCon" ] }, { "_key": "5f63a650-eaa3-4ba1-9615-9aed15918078", "_type": "tableRow", "cells": [ "10", "Upstream First Security: Keeping Telco Infrastructure Secure at Cloud Native Scale", "Jan Melen, Kashif Khan", "Nov 9, 10:40 AM", "Open Source SecurityCon" ] }, { "_key": "085bc370-4d48-4bb6-956b-70f18dfd6c26", "_type": "tableRow", "cells": [ "11", "Creating VEX Documents at Scale: A Look into One Supplier's Process", "Jeff Mendoza", "Nov 9, 9:45 AM", "Open Source SecurityCon" ] }, { "_key": "ba93a878-4387-4885-90d9-5bee885fd7bb", "_type": "tableRow", "cells": [ "12", "The Agent Did What? Reconstructing MCP Tool-Call Attacks", "Jie Wu", "Nov 9, 12:55 PM", "Agentics Day" ] }, { "_key": "fdd9ff9a-1610-44ef-859c-2ba8b5b213aa", "_type": "tableRow", "cells": [ "13", "Platform Engineering after the AI Hype: Why IDPs Must Become Intent-Driven", "Daniel Bryant", "Nov 10, 12:20 PM", "Platform Engineering" ] } ] } } ``` ## **KubeCon North America 2026 at a glance** With hundreds of sessions across four days, it can be hard to know where to start. We recommend stopping by Cloudsmith at Booth 175 to say hello, play a round of supply chain Jeopardy, and catch a lightning talk from our Head of Security. As for the conference programming, here's our curated roadmap of the 13 talks we think will help you build with clarity, control, and confidence. **📍 Salt Palace Convention Center (100 S West Temple, Salt Lake City, UT 84101)** **👋 Booth 175** **🗓️ November 9–12, 2026** ## **Our top 13 picks** ### 1. Signed, Sealed, Denied: Attestation-Driven Admission with Kyverno + CEL at AT&T - **Date/Time:** November 10, 12:20 – 12:50 PM MST - **Location:** Salt Palace | Level 1 | 151 - **Theme:** Security Your image is signed. But does its evidence meet your deployment requirements, and can you prove that to an auditor? **Chad Swenson** and **Sagar Kundral** will show how **AT&T** and **Nirmata** built platform-managed controls where GitHub Actions emits Sigstore-backed Artifact Attestations and Kyverno's ImageValidatingPolicy evaluates them at admission. Every decision is retained as audit evidence. This is our top pick because it tackles a problem platform teams know well: internal builds and upstream images with different trust roots, living side by side. The talk covers mixed-source verification in Kyverno 1.19 and 1.20, plus patterns for exceptions and failure handling. If you want compliance that runs at machine speed instead of through spreadsheets, start here. [**See the AT&T attestation session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/?id=1247300) ### 2. KitOps: The Whole Kit for AI Agents - **Date/Time:** November 9, 2:15 – 2:20 PM MST - **Location:** Hyatt Regency | Level 4 | Regency Ballroom B-D - **Theme:** AI + ML An AI agent consists of a model, prompts, skill files, MCP servers, and code spread across Git repos, object storage, and loose config files. In this lightning talk, **Gorkem Ercan** shows how KitOps, a CNCF Sandbox project, bundles all of it into one versioned, immutable OCI artifact called a ModelKit, signed with Cosign and pushed to any registry you already use. When something breaks, the first question is always "what was actually running?" Treating agents as versioned artifacts gives AI the same provenance and governance teams already expect for container images and packages. [**See the KitOps lightning talk details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/?id=1289896) ### 3. Mythos vs Maintainers: Drowning in the Vulnerability Tsunami - **Date/Time:** November 10, 11:30 AM – 12:00 PM MST - **Location:** Hyatt Regency | Level 2 | Salt Lake Ballroom DE - **Theme:** Security LLMs are changing both sides of open source security. Attackers use them to scale campaigns against GitHub Actions misconfigurations and package ecosystems like PyPI and npm, while well-meaning researchers use them to file a flood of vulnerability reports. **Fabian Kammel** and **John Kjell** play out both roles, attacker and maintainer, using real examples from in-toto's Witness project. The session moves from recon and disclosure to remediation and using AI to proactively secure the project. For anyone consuming open source at scale, it's a look at why the trust decisions you make about upstream packages matter more than ever. [**See the Mythos vs Maintainers session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/) ### 4. The Golden Path Doesn't Exist Yet: What Platform Teams Told Us About OpenSSF Tools - **Date/Time:** November 9, 12:45 PM MST - **Location:** Salt Palace | Level 2 | 255 BC - **Theme:** Open Source SecurityCon The OpenSSF DevRel community asked platform teams a blunt question: what's standing between "this is a good idea" and "this is working for us"? **Katherine Druckman**, **Stacey Potter**, **Kadi McKean** and **Tabatha DiDomenico** report back on the real blockers, from SBOM accuracy and portability to air-gapped friction, and map them against Sigstore, Zarf, GUAC, and SLSA. This panel addresses the gap between supply chain tooling and day-to-day adoption. Platform teams should expect to learn which tools solve which problems today. [**See the OpenSSF golden path panel details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cncf-hosted-co-located-schedule/?id=1268994) ### 5. Rego Without Borders: Breaking Down Language Barriers for Security Policy - **Date/Time:** November 9, 2:08 – 2:13 PM MST - **Location:** Hyatt Regency | Level 4 | Regency Ballroom B-D - **Theme:** Open Policy Agent OPA usually runs as a sidecar. **Philip Conrad** will show how the Rego Intermediate Representation lets the compiler generate execution plans that other languages consume natively, so Rego-powered security policy can run inside Swift and Java applications too. At Cloudsmith, teams write policy-as-code in Cloudsmith using OPA and Rego. Consistent policy across more runtimes means fewer gaps between what you intend and what you enforce. [**See the Rego Without Borders lightning talk details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/?id=1325640) ### 6. Set the Terms for Your Agents and Let Your Humans Be Creative: How to Govern Code Nobody Reviewed - **Date/Time:** November 9, 11:50 AM MST - **Location:** Salt Palace | Level 1 | Grand Ballroom BDF - **Theme:** Platform Engineering Day Anyone can generate an application in minutes, but deploying it safely remains a challenge. **Thomas Schuetz** and **Dr. Constanze Roedig** give platform owners a framework of "desired state" abstractions that let teams develop, deploy, and verify AI-generated code. Their live demos start with vibe-coded apps that violate SLSA, GDPR, and internal architecture decisions, then bring them into line. This session treats AI-assisted coding as something to enable, not fear, and puts the guardrails in the platform rather than in a review queue. That's the same approach Cloudsmith takes toward governing the dependencies those apps pull in. [**See the governing AI-generated code session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cncf-hosted-co-located-schedule/?id=1255381) ### 7. I Packaged My Application in a Container Image, and Now What? - **Date/Time:** November 10, 12:20 – 12:50 PM MST - **Location:** Hyatt Regency | Level 4 | Regency Ballroom B-D - **Theme:** Supply chain fundamentals You built your image and pushed it to a registry, but what comes next? **Aurélie Vache** walks step by step through signing images, generating an SBOM, checking for vulnerabilities and whether they're exploitable, and using attestations, with live demos you can repeat locally and in CI/CD. This session looks to be one of the clearest on-ramps to software supply chain security on the schedule. [**See the container image supply chain session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/) ### 8. The Identity Crisis: Who is the AI Agent in Your Cluster? - **Date/Time:** November 10, 10:26 – 10:36 AM MST - **Location:** Salt Palace | Level 1 | Hall DE - **Theme:** Keynote Kubernetes was built for deterministic, stateless microservices with static identity boundaries. AI agents generate dynamic network calls, trigger external APIs, and run machine-generated code on the fly. In this keynote, **Abdel Sghiouar** asks a simple question with big consequences: when an agent calls a tool or a database, what identity does it present? Identity is the foundation every other control builds on, from authorization to audit. This keynote sets up a theme you'll hear all week, and the emerging open source standards that aim to answer it. [**See the Identity Crisis keynote details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/) ### 9. End to End Software Development Lifecycle Hardening with AMPEL - **Date/Time:** November 9, 9:10 AM MST - **Location:** Salt Palace | Level 2 | 255 BC - **Theme:** Open Source SecurityCon Hardening a pipeline requires a lot of checking: who can run CI, how repositories are configured, commit signatures, build provenance, and vulnerabilities. There's a tool for each step, but stitching them together gets messy fast. **Adolfo García Veytia** introduces AMPEL, a supply chain policy engine that uses policy-as-code to evaluate each stage of the SDLC and block builds that don't meet the bar. This is a hands-on session, so bring a laptop and a project. You'll map controls to frameworks like the OSPS Baseline and NIST SSDF. [**See the AMPEL session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cncf-hosted-co-located-schedule/?id=1269816) ### **10. Upstream First Security: Keeping Telco Infrastructure Secure at Cloud Native Scale** - **Date/Time:** November 9, 10:40 AM MST - **Location:** Salt Palace | Level 2 | 255 BC - **Theme:** Open Source SecurityCon When a CVE lands in a Go dependency under 5G infrastructure, waiting until next quarter isn't an option. **Jan Melen** and **Kashif Khan** share how they triage CVEs across a dependency tree spanning 15+ upstream repositories, why they always fix upstream first, and how they keep production within one minor version of the latest release. They'll share info about time to fix and the real cost of backporting versus upgrading. This should be a grounded business case for treating dependency hygiene as a core engineering practice. [**See the upstream-first security session details**]() ### 11. Creating VEX Documents at Scale: A Look into One Supplier's Process - **Date/Time:** November 9, 9:45 AM MST - **Location:** Salt Palace | Level 2 | 255 BC - **Theme:** Open Source SecurityCon What is a VEX, what goes into it, and when should you create one? In this lightning talk, **Jeff Mendoza** answers those questions through a case study of how **Microsoft** is preparing to automate VEX document creation, covering CSAF VEX required fields and OpenVEX. With the EU Cyber Resilience Act (CRA) asking for VEX alongside SBOMs, and AI speeding up vulnerability discovery, VEX is how suppliers tell customers which vulnerabilities actually matter. [**See the VEX at scale lightning talk details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cncf-hosted-co-located-schedule/?id=1268168) ### 12. The Agent Did What? Reconstructing MCP Tool-Call Attacks - **Date/Time:** November 9, 12:55 PM MST - **Location:** Salt Palace | Level 1 | Grand Ballroom IG - **Theme:** Agentics Day An agent reads a web page with a hidden instruction, then uses Model Context Protocol (MCP) tools to retrieve data and send it outside your environment. **Jie Wu** reproduces the attack in a controlled demo, then rebuilds it step by step by joining MCP tool-call logs with cloud audit logs, using a minimal MCP audit proxy that emits OpenTelemetry spans to Jaeger. This session shows how to build a repeatable method for turning an agent incident into a trace, and gives a clear sense of what those logs can and can't prove. [**See the MCP tool-call attacks session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/co-located-events/cncf-hosted-co-located-schedule/?id=1249143) ### 13. Platform Engineering after the AI Hype: Why IDPs Must Become Intent-Driven - **Date/Time:** November 10, 12:20 – 12:50 PM MST - **Location:** Hyatt Regency | Level 2 | Salt Lake Ballroom C - **Theme:** Platform Engineering For our final pick, **Daniel Bryant** looks at what comes after the first wave of platform engineering: templates, golden paths, and self-service APIs. Infrastructure requests now come from copilots and agents operating at machine speed, so platforms need capabilities that encode organizational policy, security, and operational knowledge for humans and AI alike. [**See the intent-driven IDPs session details**](https://events.linuxfoundation.org/kubecon-cloudnativecon-north-america/program/schedule/) ## **Secure software starts at Booth 175** Cloudsmith is a Gold sponsor at KubeCon North America 2026, and we're bringing plenty to keep you busy between sessions. Find us at Booth 175 in the Solutions Showcase. - **Booth lightning talk:** On Tuesday, November 10 at 10:45 AM, our Head of Security **James Matchett** presents _Patient zero is a dependency: tracing one attack two ways_. Grab a coffee after the keynotes and join us. - **Supply chain Jeopardy:** Can you spot a supply chain threat, tackle a compliance question, and name that package format? Play at the booth for a chance to win a Keychron keyboard. - **Talk to the team:** See how Cloudsmith governs every package, container, and ML model that enters your environment, with policy-as-code (OPA and Rego) enforced at first pull. Bring your questions about AI coding tools, dependency governance, or moving off a self-hosted artifact server. ## **Join us at AprèsKube SLC** The unofficial KubeCon after-party is back. On Wednesday, November 11, from 7:30 to 11:00 PM, join us at Keys on Main Dueling Pianos for AprèsKube, co-sponsored with Endor Labs, Echo, Tailscale, Sentry, and ClickHouse. Expect live music, good company, and plenty of conversation about everything you saw at KubeCon. [Register for AprèsKube SLC](https://luma.com/apreskube-slc) before spots run out. AI is changing how fast teams build and ship cloud-native software. We'll see you in Salt Lake City to talk about maintaining that speed with clarity, control, and confidence.