ChefConf 2017
who it's for
platform engineers, devops engineers, infrastructure engineers, site reliability engineers, compliance engineers, security engineers, engineering managers
topics
Habitat package and supervisor; Chef Automate on Azure; AWS OpsWorks for Chef Automate; InSpec agentless compliance scans; Policyfiles for cookbook policy; Chef cookbook testing with Test Kitchen; Air-gapped Chef deployment patterns; Chef Vault secrets management; Kubernetes integration with Habitat; Ephemeral apps with Terraform and Nomad; WinRM Windows node management; macOS fleet security with Chef
| title | author | length |
|---|---|---|
| Managing Your Systems on Microsoft Azure with Chef | Paul DeCarlo, David Justice | 43m |
Demonstrations show spinning up a Chef Automate marketplace image on Azure (30‑day trial), uploading cookbooks with Chef DK/knife from Bash on Windows or… | ||
| Credit Union, AIX, and DevOps Oh My | Alan Thatcher, Melissa Hernandez | 40m |
Navy Federal Credit Union migrates AIX and Linux infrastructure into Chef, pairing experienced AIX admins with Linux evangelists and replacing ad hoc scripts… | ||
| Kick Starting our DevOps Transition with Chef Compliance | Gary Bright | 38m |
Chooses a compliance-first route using Chef Compliance and InSpec, builds a multi-tenant Compliance-as-a-Service with a web front end and automated 24‑hour… | ||
| A Year with Chef and InSpec: A Retrospective with Optum | Adam Leff, Odie Routh, Tom Rennaker | 41m |
Optum spends a year replacing manual, PDF-driven compliance with Chef and InSpec, proving continuous compliance by running InSpec profiles locally, via scanned… | ||
| Getting Started with Habitat | Jamie Winsor | 45m |
Explains Habitat as three working systems: a package format and builder that performs dependent builds and publishes artifacts to a Depot, a networked… | ||
| Managed Chef in the Cloud: Introducing AWS OpsWorks for Chef Automate | Sean Carolan | 48m |
AWS OpsWorks launches a fully managed Chef Automate server that gets provisioned in about ten minutes, includes automatic Chef version upgrades, scheduled… | ||
| Howdy, Chef Partner Cookbook! | Anthony Eden, Aaron Kalin | 37m |
DNSimple joins the Chef Partner Cookbook program after an April–June 2016 push, signs a co‑marketing agreement, and rewrites the cookbook to be Chef 12/13… | ||
| Operationalizing Unknown Cloud Deployments (in a repeatable fashion) | Jared Reimer | 33m |
Cascadeo demonstrates a repeatable pipeline that takes an unknown customer cloud account, spins a temporary instance, runs Chef-driven automation to… | ||
| Incident Command at the Edge | Lisa Phillips | 42m |
Fastly runs a documented Incident Command system: a shared infinite commander rotation coordinates impact assessment, calls subject-matter on-call experts, and… | ||
| Python Applications with Habitat | George Marshall | 19m |
Shows a successful production Sentry cluster built and run with Habitat, replacing virtualenvs by packaging Python and all C libraries into Habitat packages so… | ||
| Mario Star Power Your Infrastructure: Getting the Most Out of InSpec | Victoria Jeffrey, Hannah Maddy | 33m |
InSpec is a free open source testing framework that runs agentless over SSH/WinRM via Train and installs four ways (chef-client, chefdk, gem, package) and… | ||
| An Approach to Air-Gapped Deployment | Joseph E. Gonzalez | 38m |
Built a small Chef-based system called chef countertop that packages Chef server, client RPMs, ChefDK, policyfiles and production cookbooks as… | ||
| How Habitat can Boost your Chef Ecosystem | Amulya Sharma, Deepak Sihag | 42m |
GE Digital replaces heavy Chef cookbooks with Habitat plans inside a custom runtime called Buffet, packaging each service with its dependencies, supervising… | ||
| Kubernetes & Habitat | Michael Ducy | 44m |
Claims that Habitat produces deterministic builds and removes OS dependency, then demonstrates it: a Habitat management supervisor runs as a Kubernetes… | ||
| Providing Monitoring Result Data to Chef | Justin Dossey | 31m |
A small library called Prometheus metrics cookbook queries Prometheus via the built‑in HTTPClient (no extra gems) and exposes a current_cluster_health routine… | ||
| Ephemeral Apps with Chef, Terraform, Nomad, and Habitat | Seth Vargo | 41m |
A tiny Go HTTP-echo app gets packaged with Habitat (plan, default.toml, run hook), updated to handle graceful shutdown on SIGTERM, and exported to Docker… | ||
| Adding Developers to the DevOps Process | Annie Hsieh | 38m |
Company moves developers into Chef-led deployments to reduce ops burnout and speed releases. Developers learn Chef and get AWS credentials, ops adds Test… | ||
| STIG Automation with Chef and InSpec | John Ray | 41m |
Shows how to automate DoD STIGs for RHEL6 using Chef and InSpec with concrete commands and code patterns: ingest SCAP XML via the InSpec SCAP plugin, triage… | ||
| Beyond the Cookbook: Using Workflow to Bring Continuous Delivery to Any Project | Jean-Paul Robinson | 38m |
Shows how Chef Workflow’s build cookbook plus the standard delivery truck run CI/CD for non-cookbook projects, driven by delivery review from Git. Demo… | ||
| DevOps Transformation at Absa Bank: Technical Evolution; Cultural Revolution | Andrew Holt, Benjamin Hinson | 53m |
Absa builds an isolated engineering network on AWS and automates infrastructure with Chef and Chef Automate plus CI/CD (Chef Workflow, Jenkins/Bamboo)… | ||
| From Solo to Happy: Migrating Chef Solo to Chef Server/Automate | Mark Rambow, Nadezda Zryanina | 31m |
Concrete plan to move a fleet from Chef Solo to Chef Server / Automate on AWS with OpsWorks integration. Claims a four step migration: upload cookbooks to… | ||
| WinRM: Ride the Adventure | Matt Wrock | 39m |
Explains WinRM as a HTTP-based sequence: create shell → create command → receive output → close shell, how the ruby winrm gem implements PowerShell remoting… | ||
| My Journey Into Technology Through InSpec | Annie Hedgpeth | 40m |
Claims a four-month path from no-dev background to cloud automation role by learning InSpec tests, publishing step-by-step tutorials on a Jekyll GitHub Pages… | ||
| Faking Coherence for Engineers | Yvonne Lam | 41m |
Release engineering at Chef includes CI, packaging and publishing tools, and the core claim is that coherence acts like invisible infrastructure whose failures… | ||
| The Road More Traveled: Putting Transformation Back on the Rails | George Miranda | 34m |
Argues that measurable, self-reinforcing cycles of metrics plus tools produce repeatable DevOps transformation, backed by five years of State of DevOps data… | ||
| Chef Vault: A Deep Technical Dive | Nell Shamrell-Harrington | 32m |
Explains how Chef Vault creates a single random vault key, encrypts a shared key per user/node using each entity's RSA key pair, and stores per-item keys so… | ||
| Policyfiles | Micheal Hedgpeth | 40m |
Claims onboarding Devs in a quarter of the time by replacing roles/environments with a concise policyfile.rb (four lines: policy name, source, run_list… | ||
| The Hand-Waver's Guide To Contributing To Open Source | Matt Stratton | 42m |
Open source contribution is the fastest way for architects and planners to learn tooling and constraints: rewrite attempts (rewrote a CLI from Ruby to Go)… | ||
| Keeping Secrets - A Practical Approach to Managing Credentials | Chris Antenesse | 38m |
Uses HashiCorp Vault as Vault as system of record with Consul HA storage, per-user tokens, and audited TLS access; CI (Rake + s_build gem) retrieves secrets… | ||
| "Acing" Infrastructure Testing with Chef | Brian O'Connell | 34m |
Team moves local testing to the IBM cloud using the kitchen OpenStack plugin and a gem that converts kitchen configs to cloud-friendly ones, cutting… | ||
| Chef Cookbook Testing Like a Pro | Tim Smith | 41m |
Automated cookbook testing pipeline uses Cookstyle (auto-fixes ~95%) and Foodcritic (≈87 rules) for linting, ChefSpec for unit tests, and Test Kitchen + InSpec… | ||
| Cooking Up Security for the Modern macOS Fleet | Meg Cassidy, Robert Wood | 45m |
Nuna uses Chef to manage macOS laptops: nodes bootstrap from a hosted Chef server, check in every 15 minutes, and are removed and wiped when reclaimed… | ||
| Diversity is Not Just a Checklist | Rhea Ghosh | 36m |
Argues that diversity fails as a checklist and requires everyday culture and communication choices: concrete actions include mentorship and pairing that let… | ||
| Habitat in Production | Fletcher Nichol | 40m |
Habitat’s Supervisor deploys and choreographs services with concrete behaviors: service topologies include standalone and leader-based clusters with a quorum… | ||
| nothing matches | ||