March 23, 2026 | 2:00 PM - 7:00 PM CET
In Person | Apollo Hotel Amsterdam, Amsterdam, the Netherlands
Virtual | Worldwide
Securing Autonomous AI Agents in Production
Practical lessons on agent identity, policy, and governance from Tigera. Apply for an In-Person Invitation | Limited Virtual Seats Available.
About the Event
While the industry focuses on LLM accuracy, technical decision-makers are facing a more complex challenge: How do we govern the autonomous AI agents that will soon operate across our entire infrastructure? Without a dedicated control plane, autonomous agents introduce significant risks to identity, authorization, and auditability.
Join Tigera CEO Ratan Tipirneni and CTO Peter Kelly for an exclusive, invite-only event focused on the control plane for governing autonomous agents running in Kubernetes. Whether joining us in-person at the Apollo Hotel or via our exclusive live stream, this session moves past the AI hype to discuss the architectural constraints and security patterns required to run agentic systems in highly regulated, enterprise environments.
The discussion will be followed by our iconic Happy Hour with Calico—a Networking Reception & Peer-to-Peer Exchange to connect with speakers and peers in a relaxed setting at the nearby restaurant, The Harbour Club.
Schedule (CET):
2:00 pm – 5:00 pm: AI Agent Governance Workshop (In-Person & Virtual)
5:00 pm – 7:00 pm: Networking Reception & Peer-to-Peer Exchange (In-Person Only)
Why Attend?
Master Agent Identity
Learn how to define and enforce cryptographically secure identities for autonomous agents that go beyond standard workload service accounts
Establish a Governance Control Plane
Discover the architectural requirements for managing agent behavior in real-time, ensuring compliance and preventing "agent sprawl"
Bridge the Gap Between AI and Security
Gain a clear roadmap for how agent governance differs from traditional workload security and how to implement zero-trust principles for non-human actors
Real-World Strategic Insights
Access the live workshop broadcast or join us on-site to discover and leverage insights learned through working with Global 1000 companies on how they are navigating the tension between AI speed and enterprise-grade security
Agenda
| 1:00-1:15 PM | Introduction & Welcome Address |
| 1:15-2:15 PM | What’s New in Calico v3.30 and Beyond |
| 2:15-3:00 PM | Everything You Need to Know About Calico eBPF |
| 3:00-3:15 PM | Coffee Break |
| 3:15-4:00 PM | Get Up and Running with Calico Ingress Controller |
| 4:00-4:30 PM | Implementing Observability-Driven Network Policies |
| 4:30-4:45 PM | QoS: Precise Traffic Controls for Kubernetes Workloads |
| 4:45-5:00 PM | AMA with Calico Engineers |
| 5:00-7:00 PM | Happy Hour with Calico |
Speakers
Peter Kelly
VP of Engineering, Tigera
As VP of Engineering at Tigera, Peter is responsible for leading all engineering teams and operations. With two decades of software development experience, including leadership roles at NGINX and F5 Networks, he brings deep expertise in control plane technology for open-source proxies. Peter’s expertise is a valuable asset to Tigera and will provide key insights for all CalicoCon attendees.
Ivan Sharamok
Manager, Solutions Architecture, Tigera
As Manager of Solutions Architecture at Tigera, Ivan brings over 15 years of combined experience in application development and network architecture. His journey with container technologies began at Docker, and now he specializes in applying security techniques and best practices to continuously protect cloud-native applications. Ivan will share his insights and expertise to help you secure your own platforms.
Pedro Coutinho
Senior Software Engineer, Tigera
As a Senior Software Engineer at Tigera, Pedro brings over a decade of IT experience. His background includes software development and systems analysis, focusing on the company’s container networking features, as well as Cloud-Native Application Protection Platform (CNAPP). Pedro is a core contributor for cluster network connectivity, security and observability. His unique blend of experience provides a valuable perspective on solving complex cloud challenges. He is excited to engage with fellow practitioners and share his insights at CalicoCon.
Aadhil Majeed
Senior Product Manager, Tigera
As a Senior Software Engineer at Tigera, Pedro brings over a decade of IT experience. His background includes software development and systems analysis, focusing on the company’s container networking features, as well as Cloud-Native Application Protection Platform (CNAPP). Pedro is a core contributor for cluster network connectivity, security and observability. His unique blend of experience provides a valuable perspective on solving complex cloud challenges. He is excited to engage with fellow practitioners and share his insights at CalicoCon.
Reza Ramezanpour
Developer Advocate, Tigera
Peter Kelly
VP of Engineering, Tigera
Shaun Crampton
Distinguished Engineer, Tigera
Lance Robson
Staff Software Engineer, Tigera
Ivan Sharamok
Manager, Solutions Architecture, Tigera
Leon Barron
Senior Solutions Architect, Tigera
Peter Kelly
VP of Engineering, Tigera
As VP of Engineering at Tigera, Peter is responsible for leading all engineering teams and operations. With two decades of software development experience, including leadership roles at NGINX and F5 Networks, he brings deep expertise in control plane technology for open-source proxies. Peter’s expertise is a valuable asset to Tigera and will provide key insights for all CalicoCon attendees.
Ivan Sharamok
Manager, Solutions Architecture, Tigera
As Manager of Solutions Architecture at Tigera, Ivan brings over 15 years of combined experience in application development and network architecture. His journey with container technologies began at Docker, and now he specializes in applying security techniques and best practices to continuously protect cloud-native applications. Ivan will share his insights and expertise to help you secure your own platforms.
Pedro Coutinho
Senior Software Engineer, Tigera
As a Senior Software Engineer at Tigera, Pedro brings over a decade of IT experience. His background includes software development and systems analysis, focusing on the company’s container networking features, as well as Cloud-Native Application Protection Platform (CNAPP). Pedro is a core contributor for cluster network connectivity, security and observability. His unique blend of experience provides a valuable perspective on solving complex cloud challenges. He is excited to engage with fellow practitioners and share his insights at CalicoCon.
Aadhil Majeed
Senior Product Manager, Tigera
As a Senior Software Engineer at Tigera, Pedro brings over a decade of IT experience. His background includes software development and systems analysis, focusing on the company’s container networking features, as well as Cloud-Native Application Protection Platform (CNAPP). Pedro is a core contributor for cluster network connectivity, security and observability. His unique blend of experience provides a valuable perspective on solving complex cloud challenges. He is excited to engage with fellow practitioners and share his insights at CalicoCon.
Reza Ramezanpour
Developer Advocate, Tigera
Jeremy Guerrand
Solutions Architect, Tigera
Reza Ramezanpour
Developer Advocate, Tigera
Venue Information
- Location: Apollo Hotel Amsterdam
- Address: Apollolaan 2, 1077 BA, Amsterdam, the Netherlands
Secure Your Invitation
This is an exclusive, small-group summit held during KubeCon + CloudNativeCon Europe 2026. To maintain an intimate environment for technical exchange, we offer two ways to participate:
Attend In-Person (Amsterdam)
- Space at the Apollo Hotel is strictly limited. Physical attendees will participate in the hands-on workshop and the networking reception.
- Entry Requirements: Confirmed guests will receive a personalized Confirmation Email. Please have your email ready for check-in at the workshop entrance.
Attend Virtually
- Due to high demand, we have opened a limited number of virtual seats for the AI Agent Governance Workshop (2:00pm – 5:00pm CET). Virtual attendees will be able to stream the keynote and workshop sessions live.
- Access Requirements: Confirmed virtual guests will receive a Unique Login Link via email to join the live broadcast and participate in the technical deep-dive remotely.
Request an Invitation
Select your attendance preference below to join the conversation on the future of agentic governance.
Watch replays
Learn about the latest container security trends and discover strategies and technologies
that will help your organization secure, observe, and troubleshoot cloud-native applications.
Share The Event
Copyright ©2021 Tigera, Inc.
Get Started with Kubernetes & Calico eBPF data plane
This event is designed for platform engineers, developers, and system administrators who are new to Kubernetes or cloud networking and are evaluating Standard Linux, eBPF, Windows HNS dataplanes.
Attendees will learn about Kubernetes basics, container networking principles, and how to implement Calico to secure and manage network traffic effectively.
The session will also cover practical examples, best practices, and common challenges to help you kickstart your journey towards cloud-native excellence for on-premises and public cloud environments.
Master Container Networking & Security with Calico eBPF data plane (Includes Latest Kubernetes Admin Network Policy)
Hands-on workshop to learn about how to implement Adminnetworkpolicy updates of Kubernetes networking and security using Calico. You will learn how to design, configure, deploy, and secure your Kubernetes network for single and multi-cluster environment across Standard Linux, eBPF, and Windows dataplanes. With this experience, you will be able to architect and implement a scalable and secure Kubernetes-based SaaS or CaaS platform.
The workshop will cover the following topics:
- Kubernetes deployment and networking
- Networking Options across Linux, eBPF, Windows dataplanes
- Secure workload access and strengthen your cluster’s security posture
- Implement network policies
- Implement Network admin policies
- Implement cluster-wide encryption with WireGuard
- Observe and troubleshoot workload traffic and network policies
What you’ll need on the day: A device with a modern web browser.
What is Admin Network Policy, Policy Tiers and why do you need it
Are you ready for the new changes that are coming to Kubernetes? Admin network policy and baseline admin network policy are two anticipated policy extensions that add cluster wide, proirotization, action and grouping to the Kubernetes engine.
This session is tailored to get you up and running with the Admin Network Policy changes and how Calico implements them in your Kubernetes environment. On top of that we will explore Tiers, a newly added feature to Calico open source that allows you to establish security without compremise.
Mastering Kubernetes Security: Top 3 Network Policy Patterns
Explore how to enhance your Kubernetes cluster’s security posture by implementing the top three network policy patterns: Deny-list policy, namespace isolation, and workload isolation.
In this session, we will cover how to author, stage, preview and enforce:
- Deny-list Policy: How to block unwanted traffic explicitly within your cluster.
- Namespace Isolation: Techniques to keep workloads in different namespaces securely separated unless explicitly allowed.
- Workload Isolation: Strategies to restrict traffic between workloads based on specific security requirements.
This session is ideal for platform engineers, DevOps, and cloud engineers to have a clear understanding of these essential network policy patterns and how to apply them effectively in their Kubernetes environments.
Up and running with Calico BGP
Calico is known for its robust networking capabilities, with Border Gateway Protocol (BGP) at the core of its network architecture. BGP empowers Calico to extend Kubernetes beyond the limitations of a single cluster by enabling seamless networking between BGP-capable devices and Kubernetes clusters. This provides an elegant solution for connecting Kubernetes clusters to any on-premises or cloud-based network.
In this in-depth session, we will explore the intricacies of Calico BGP, starting with the fundamentals of peering Calico BGP with a single direct router. As we progress, we will delve into advanced topics such as multihop routers and crafting effective BGP filters. Attendees will gain hands-on knowledge and see real-world examples of how to pair Calico with industry-standard routers, including Cisco, Mikrotik, and Fortinet.
This event is ideal for network engineers, Kubernetes administrators, and IT professionals seeking to enhance their network infrastructure by leveraging the full potential of Calico BGP. Whether you’re looking to connect Kubernetes clusters across diverse environments or optimize your existing network architecture, this session will equip you with the practical skills and insights needed to succeed.
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
