Grafana Labs at KubeCon Japan 2026

What we're speaking about:

• • 
    4:30 PM
  • 
    30 minutes

  Vulnerability Response for Large Open Source Projects

  Jul 29 • 16:30-17:00 JST • 5F | 501

  Vulnerability management is an evolving topic that was hard pre-coding agents and can now become overwhelming for security and authentication teams. Add to that multi-version support, multi-tenancy and separate deployment waves and you have the recipe for an unmitigated headache.

  Join Grafana’s journey in this topic as we deep dive into how we handled CVE-2023-3128 three years ago and how we handle vulnerability classification and patch distribution, from our cloud environment to millions of Grafana instances worldwide, today.

  You’ll learn how to distinguish between a vulnerability and an intended feature, how to orchestrate the rollout of a vulnerability patch and how to remain transparent to your community of users without placing their deployments at risk. When maintainers face increasing pressure from a high volume of pull requests and AI-generated vulnerability reports, there is a critical need to refine and advance our security practices.

  • Jo GuerreiroManager, EngineeringGrafana Labs
  • Charline VoinotAppsec EngineerGrafana Labs
• • 
    3:50 PM
  • 
    50 minutes

  The Great Doubt: What Building an AI Agent Taught Us About Trust

  Jul 30 • 15:50-16:20 JST • 1F | Main Hall

  When we started building an AI assistant for observability, we thought the hard part would be making it smart. We were wrong. The hard part was knowing when to trust it.

  AI agents hallucinate, forget context, and confidently give wrong answers. Traditional testing doesn't catch these failures. What's needed is evaluation grounded in systematic doubt.

  This talk shares lessons from shipping an AI agent to production: how to build a golden dataset of use cases you must get right, how to use LLM-as-judge when there's no ground truth, and how to use OpenTelemetry traces to debug eval failures. You'll also hear what's still unsolved: evaluating multi-agent handoffs and closing the feedback loop between what users ask and what your evals cover.

  Kyoto School philosopher Nishitani Keiji called this "The Great Doubt" (大疑): questioning every assumption until only what survives is real. For AI agents, that's not philosophy. It's the job.

  • Nicole van der HoevenSenior Developer AdvocateGrafana Labs
• • 
    4:30 PM
  • 
    30 minutes

  One Binary, Two Ecosystems: Embedding Prometheus Exporters with OCB

  Jul 30 • 16:30-17:00 JST • 3F | 315

  Prometheus exporters are typically consumed as scrape targets. But what changes when they can be embedded directly into custom OpenTelemetry Collector distributions built with the OpenTelemetry Collector Builder (OCB)?

  This session explores how that shift creates a new operational model for observability teams, platform engineers, and users who rely on Prometheus exporters today. Instead of treating exporters only as external endpoints, teams can run them as Collector components and integrate them more directly into telemetry pipelines.

  The talk also examines an important ecosystem question this model brings into focus: how to expose semantic convention-compatible telemetry from Prometheus exporters.

  Attendees will leave with a clearer understanding of what this approach unlocks, where Prometheus exporters and Collector receivers overlap, and what this means for the future of interoperability between the two communities.

  • Arthur SensPrometheus Team member | Working on OpenTelemetryGrafana Labs
  • Kyle EckhartSenior Software EngineerGrafana Labs