Founder

Ned Bellavance

Storing static security credentials in your GitHub secrets is a practice fraught with peril. Static credentials can expire, be leaked, and need to be updated manually. Instead of using static credentials, why not leverage the OIDC provider for HashiCorp Vault to dynamically generate short-lived credentials for your GitHub Actions workflow? In this talk, you'll learn how to set up the OIDC provider, configure dynamic cloud credentials, and use them in GitHub Actions.

Terraform

Vault

Using OIDC With HashiCorp Vault and GitHub Actions

Senior DevOps Engineer

Hila Fish

Terraform is a very flexible tool -- you can do a lot with it. But how do you make the most of it for your specific use case? How do you structure your code to maximize re-usability across different use cases? In this talk, Hila will cover "beyond the basics" practices that were put together with a lot of blood, sweat, and tears. With these, you&rsquo;ll have a paved road for working with Terraform, whether it&rsquo;s an existing codebase or a new project.

Terraform Beyond the Basics

Senior Security Software Engineer

Prasanth Kommini

Threat modeling can be laborious due the back &amp; forth between teams that collab to decide risks &amp; mitigations. While each deployment is unique &amp; poses disparate threats, common components exist. Security can implement &amp; share these components which when used can expedite downstream deployments due to using secure defaults &amp; secure design patterns. We demo tf modules to package best practices such as secure defaults, good RBAC to maintain resources using the sfc provider.

Packaging Security in Terraform Modules

Principal Engineer

Brian Menges

When is a module a module? How do you support one, dozens, hundreds of workspaces? These are many common problems that face companies as their utilization of Terraform expands. This talk strives to answer a few important ones around adoption and growth pains.

Terraforming Success

Director of Technical Evangelism

Saiyam Pathak

Waypoint aims to solve challenges in three areas (building, deploying and releasing software) by providing consistent workflows. In this talk, Saiyam will go through the concepts, functionality and recent features of Waypoint, and answer the questions of how a single "waypoint up" command can be used to deploy an application to production so easily.

Waypoint

A Mini-PaaS for Developers With Waypoint

Field CTO EMEA

Sarah Polan

With ephemeral workloads, containers, and microservices on the rise, infrastructure is undeniably becoming faster and more dynamic, so why do we settle for slow, static Secrets Management? We will examine strategic ways of embedding Zero Trust and Dynamic Secrets to ensure Secrets are moving at the same speed as the infrastructure and decreasing the attack surface for a credential breach.

HashiCorp Cloud Platform

Fast Secrets: Why Secrets Need to Match the Infrastructure

VP, IT Team Manager of Cloud Services

Andrew Rau

As companies move into public cloud, many aspire to Infrastructure as Code yet struggle to make that a reality. Skill gaps and the urgency of rapid delivery often lead to manually provisioned and maintained cloud environments, resulting in operational burdens and increased risk. Learn how BOK Financial created an "as-code" operating model with no prior automation or coding experience in a highly regulated industry, while strengthening security, increasing resiliency, and driving efficiencies.

Packer

Adopting GitOps and the Cloud in a Regulated Industry

Elif Samedin

Nowadays VMs and containers co-exist side-by-side within the same infrastructure. Despite being different, they comprise the components of highly complex systems we manage, components which need to be connected and secured. Consul offers a fully featured Service Mesh solution that solves the networking and security challenges of operating applications at scale. This talk explores how to deploy Consul in heterogeneous workloads, mixing VMs and containers.

Featured Speakers