Ask a platform team how many AI agents are running in their clusters and you usually get a pause. Agents arrive through application teams, not platform teams. They call tools over MCP, invoke other agents and reach external model providers, and a Kubernetes service account tells you which pod made the call but not which agent and on whose behalf.
That gap is what we’re bringing to KubeCon + CloudNativeCon North America 2026, November 9–12 in Salt Lake City. Find Tigera at booth 150 for quick Lynx sessions on identifiying, governing and containing AI agents, and pick up a new t-shirt while you’re there. On November 9, before the show floor opens, join us for a workshop on securing AI agents on Kubernetes and a happy hour with the Lynx community.
November 9: Workshop and happy hour
Both events are at Le Méridien Salt Lake City Downtown (131 S 300 W), about a five-minute walk from the Salt Palace.
Discovering and Securing AI Agents on Kubernetes
2:00–7:00 PM MST · Triumph Salon · In-person or virtual
Peter Kelly, CTO at Tigera, walks through the path we’ve watched teams take with agents in production, in order. Discovery comes first, because agents rarely arrive through the platform team. Identity comes next, because a service account can’t tell you which agent is acting or on whose behalf. Then governance: policy expressed at the level of tools and data rather than IPs and ports, run in observation mode until you trust it enough to enforce.
The session is architecture-first and vendor-neutral. You leave with a mental model you can apply to whatever you’re building on, not a product pitch. In-person seats are limited; virtual attendees can stream the workshop live.
Happy Hour with Tigera
5:00–7:00 PM MST · Pre-Function Lounge · In-person only
Kick off the week with the maintainers behind Calico and the team behind Lynx. Expect drinks, local bites, and enough room to hear each other talk. No pitches, only platform engineers swapping stories from the trenches.
Already registered for the workshop? You’re automatically covered for the happy hour, too. Capacity is limited.
November 10 – 12: Silent disco sessions at booth 150
Grab a headset at booth 150 and watch Tigera engineers work through real agent-security problems live in Lynx. Each session follows one question a platform team asks once agents show up in production.
| Day | Time | Topic |
| Day 1 | 11:00 – 11:30 am | Follow the agent: Who called what, and on whose behalf? |
| Day 1 | 12:15 – 12:45 pm | From shadow agent to fully managed agent in Lynx |
| Day 1 | 1:00 – 1:30 pm | Is something already running AI? |
| Day 1 | 2:15 – 2:45 pm | Kill Switch: Quarantining and sandboxing an agent you don’t trust |
| Day 1 | 4:10 – 4:40 pm | Your agent found another way out |
| Day 1 | 5:15 – 5:45 pm | Claude Code is inside your enterprise. Can you see what it’s doing? |
| Day 1 | 6:15 – 6:45 pm | Kill Switch: Quarantining and sandboxing an agent you don’t trust |
| Day | Time | Topic |
| Day 2 | 10:30 – 11:00 am | Follow the agent: Who called what, and on whose behalf? |
| Day 2 | 12:30 – 1:00 pm | From shadow agent to fully managed agent in Lynx |
| Day 2 | 1:45 – 2:15 pm | Is something already running AI? |
| Day 2 | 3:40 – 4:10 pm | Kill Switch: Quarantining and sandboxing an agent you don’t trust |
| Day 2 | 4:30 – 5:00 pm | Your agent found another way out |
| Day | Time | Topic |
| Day 3 | 10:30 – 11:00 am | From shadow agent to fully managed agent in Lynx |
| Day 3 | 12:45 – 1:15 pm | Kill Switch: Quarantining and sandboxing an agent you don’t trust |
Sessions run on a rotating schedule throughout the expo hours. Stop by between talks to ask questions, or book a deeper walkthrough.
Answer a trivia question and take home a t-shirt
While you’re at booth 150, answer one trivia question from our team and pick up a new Tigera t-shirt. It takes a minute, and it’s a good excuse to say hello between sessions.
Find us with our partners
VMs on Kubernetes Day with Everpure
November 9 · Marriott, about five minutes from the convention center
Running VMs and containers side by side on Kubernetes changes how you think about network identity, policy and migration. Veronika Smolik joins Isovalent for a 30-minute joint session on securing VM workloads on Kubernetes, then stays on for the closing panel.
Tigera at the SUSE booth
We’re presenting a 45-minute session at the SUSE booth. Stay tuned for more details.
See you in Salt Lake City
AI agents belong on your Kubernetes platform: identified, governed and contained like every other production workload. Come compare notes. Start your week with the workshop and happy hour on November 9, then find us at booth 150 for a silent disco session, a t-shirt, or a one-on-one conversation with our engineers.
