HashiConf Europe 2022
| title | author | length |
|---|---|---|
| Explaining Distributed Systems Like I'm 5 | Michele Riva | 13m |
Build for ingesting a >10 gigabyte CSV by avoiding direct uploads to the app server and instead writing to object storage, emitting a job to RabbitMQ or Kafka… | ||
| Terraform Practices: The Good, the Bad, and the Ugly | Hila Fish | 15m |
Advocates a concrete repo layout—team/project/cloud/region—that keeps each state small to limit blast radius and enables Terraform-as-a-platform; uses remote… | ||
| Terraforming AWS Control Tower | Marko Bevc | 18m |
AWS and HashiCorp publish an account factory for terraform module (Nov 2021) that provisions Control Tower accounts via Git-driven pipelines (CodePipeline +… | ||
| Secure Together: Consul + Vault | Rosemary Wang | 45m |
Combines Consul and Vault to automate mTLS and secret lifecycle: Vault PKI + KV v2 serve as CA and static secret store, with Vault Agent sidecars issuing… | ||
| HashiConf Europe 2022 Day 1 Keynote | Armon Dadgar, Dave McJannet | 44m |
Terraform 1.2 adds pre- and post-conditions for in-code functional checks and Terraform Cloud enters public beta for continuous drift detection, moving… | ||
| Nomad: Past, Present, and Future | Michael Nomitch | 27m |
Nomad presents concrete roadmap items: Nomad 1.3 adds max client disconnect for edge clients and native service discovery; clusters scale to 10,000 nodes and… | ||
| Using Terraform Enterprise to Support 3,000 Users | Woody Christy | 26m |
Booking.com describes running HashiCorp Terraform Enterprise with 3,000 active users by auto-creating GitLab repos, TFE workspaces and OpenStack projects from… | ||
| Non-Technical Challenges of Platform Engineering | Poppy Rowse, Chris Sheperd | 29m |
A practical guide to non-technical platform work that claims discovery, continuous user interviews and event storming cut wasted duplication and reveal real… | ||
| HCP Packer Learn Lab: Build a Golden Image Pipeline | Dane Christiansen | 56m |
Creates a golden AMI pipeline using Packer to publish AMIs to AWS and metadata to the HCP Packer registry, then uses Terraform (Terraform Cloud workspace + run… | ||
| 90 Days Of DevOps: The DevOps Learning Journey | Michael Cade | 15m |
A public 90 days learning log becomes a hands-on repo of daily labs and notes that uses Vagrant, VirtualBox, Minikube, Terraform, Argo CD, Jenkins, Golang and… | ||
| WebAssembly and Nomad for Next Wave Microservices | Matt Butcher | 27m |
A playable demo called Finicky Whiskers demonstrates WebAssembly microservices orchestrated with Nomad, Spin and Fermion Platform 1: the game uses about 30… | ||
| Automate an Observable Runtime with HashiCorp and Ansible | Jochen Maes | 13m |
An opinionated Ansible playbook deploys a multi-node Nomad + Consul runtime with Traefik ingress, Grafana, and an observability stack wired so Prometheus and… | ||
| HashiConf Europe 2022 Day 2 Keynote | Armon Dadgar | 34m |
Concrete product news and how they work: HCP Vault expands regions and skus, adds MFA, Vault acts as an OIDC provider and strengthens PKI while the Kubernetes… | ||
| Golden Image Factory With HCP Packer & Terraform | Jordan Glasner, Olena Kulik | 37m |
Walks through a turnkey golden image factory that links HCP Packer to Terraform Cloud so images are tracked, versioned, and consumed automatically. Uses Packer… | ||
| Steep Approach: Landing Safely in GCP With TFE | Thomas Chalmers, Jeremy Crawford | 29m |
Deutsche Bank uses Terraform Enterprise (after a Terraform Cloud pilot) to gate and automate GCP provisioning with a private module registry and a module‑ and… | ||
| Testing Terraform AWS Modules in Drone CI Pipelines with Localstack | Jim Sheldon | 12m |
Shows how running Terraform module tests inside Drone CI against LocalStack replaces real AWS for an AWS networking module (VPC, public/private subnets, NAT… | ||
| Identifying Misconfigurations in your Terraform | Owen Rumney | 14m |
Shows how tfsec parses HCL to build a model, runs checks and surfaces concrete fixes: catch an S3 authenticated-read ACL exposure, require encryption on root… | ||
| Our Journey Into Secrets Management With Vault | Neven Vucinic | 28m |
TomTom documents a multi-year rollout: Vault open source POC in 2019, enterprise POC March 2020, MVP → limited availability → company standard. Kubernetes… | ||
| Consul + Vault Learn Lab: Consul API Gateway | Daniele Carcasole, Eddie Rowe | 58m |
Deploys HCP Vault and Vault Agent Injector into an EKS cluster, enables KV and PKI secret engine to generate a root CA and on‑the‑fly certificates, and stores… | ||
| If You Can, It Doesn't Mean You Should: Lessons From Terraforming Clouds | Natalie Godec | 15m |
Argues that just because Terraform can automate something doesn’t mean it should — packed modules and procedural hacks create fragile infra and surprise… | ||
| A Kubernetes Zero Trust Security Model Using a KMS Provider Plugin | Romuald Vandepoel | 16m |
Kubernetes Secrets and ConfigMaps become encrypted in etcd by a tiny Go KMS provider plugin, trousseau.io, that sits next to the API server and forwards… | ||
| HashiCorp Boundary: Then & Now | Lili Cosic, Pete Pacent | 34m |
HashiCorp launches HCP Boundary as a public beta offering that provisions a one‑click managed control plane while letting teams deploy either HCP‑hosted or… | ||
| Automating PKI: Paddy Power Betfair's Journey with Vault | Cristian Iaroi | 13m |
Paddy Power Betfair automates TLS certificate issuance for a hybrid estate of ~21,000 VMs and ~4,000 certificates using Vault PKI with roles defined in version… | ||
| How Nomad 1.3 Enables Running Work at the Edge | James Rasell | 36m |
Nomad 1.3 adds concrete edge changes: a task-group parameter max_client_disconnect lets Nomad wait (default up to one hour) before marking nodes lost so an… | ||
| Secure Remote Access With Boundary and Azure AD | Jonathan Lyon | 37m |
Shows a working integration that uses single sign-on via OIDC/SAML to connect Boundary to Azure AD, configures conditional access blocks high/medium risk to… | ||
| Achieving GitOps for Database Lifecycle at GoPay | William Albertus Dembo, Eko Simanjuntak | 29m |
GoPay moves 2,500+ self‑managed databases under a template-driven Git workflow that uses Terraform + Ansible + GitLab CI to render commits, run plan/apply… | ||
| The Path to Modern Infrastructure Automation | Harold Giménez | 25m |
Shows concrete new Terraform and Packer capabilities: Terraform adds a one-command Terraform Cloud integration, CDK for Terraform (use Python/TypeScript/Go… | ||
| Common Pitfalls When Using Terraform and How to Avoid Them | Mahamed Ali | 11m |
Covers concrete missteps: hard‑coding AWS or Google service keys causes leaked creds and CI failures, so prefer temporary credentials or CI OIDC… | ||
| Multi-Runtime Service Mesh With Consul | Eric Haberkorn, Luke Kysow | 45m |
Deploys Consul with Envoy sidecars across four runtimes (Kubernetes, ECS, Nomad, VMs) spanning three clouds, registers a Lambda via a terminating gateway, and… | ||
| Building a PaaS with Waypoint | George Peter Hantzaras | 21m |
Built a small PaaS on top of HashiCorp Waypoint called WayPaaS that auto-generates waypoint.hcl from team templates and enterprise identity, ties repos to… | ||
| Vault in BBVA, Secrets in a Hybrid Architecture | Ignacio Fuentes-Villegas | 26m |
BBVA runs two Vault layers: an open‑source infra cluster used by Jenkins/Ansible for machine bootstrapping and a Vault Enterprise runtime tier serving mobile… | ||
| Terraform Cloud Learn Lab: Validate Infrastructure and Enforce OPA Policies | Rita Sokolova | 52m |
Uses Terraform preconditions to block an 8‑core bastion instance (precondition checks AWS instance type cores) and Terraform Cloud Run Tasks + Styra to run… | ||
| Secrets Management at Swiss Federal Railways (SBB) | Michael Hofer, Andreas Meister | 28m |
Swiss Federal Railways deploys HashiCorp Vault into OpenShift with a primary and DR cluster, S3 snapshots, AWS KMS auto-unseal, Prometheus and Splunk for… | ||
| HashiConf Europe 2022 Recap | 02m | |
HashiConf Europe took place in Amsterdam and online June 20-22, 2022. Thank you to the community who joined us from all over Europe, the HashiConf Europe… | ||
| Observing the HashiCorp Ecosystem From Prometheus | Kris Buytaert, Julien Pivotto | 28m |
Shows how to configure Prometheus to scrape Consul and Vault: use consul_sd_config or the official consul_exporter, set scrape intervals to 15–30s, point… | ||
| Empowering Developers with Self-Serve IaC Using GitOps Principles | Maoz Ovadia | 12m |
AppsFlyer runs 400 engineers, 850+ microservices, 60+ Kafka clusters and thousands of cloud resources and moves from platform bottlenecks to self-serve by… | ||
| Consul Mesh Federation Deep Dive | Blake Covarrubias, Hannah Hearth | 27m |
Consul 1.13 introduces cluster peering: a token-based gRPC peering over TCP port 8300 that exchanges service entries, TLS material, and heartbeats so remote… | ||
| Vault & AWS Lambda: Towards a Sub Minute Recovery | Kevin De Notariis | 31m |
Vault Enterprise plus AWS Lambda automates promotion and DNS failover to reach sub-minute recovery. Architecture uses four Lambdas: an auth lambda that signs… | ||
| Event Driven Access Controls | Kerim Satirli | 40m |
Prototype automates event-driven access: PagerDuty webhook triggers a Boundary + Vault + PagerDuty workflow that vends ephemeral Postgres credentials via… | ||
| How a Top European Cloud Provider Migrated to Terraform Enterprise | Horacio Gonzalez | 31m |
OVHcloud replaces a brittle homegrown deployment service with Terraform Enterprise to gain RBAC, dashboards, collaboration and scalability, migrating… | ||
| Evolution of Infrastructure Management | Kyle Ruddy | 44m |
Terraform Cloud adds concrete features to provision, manage, and track infrastructure at scale: a cloud block that pushes local workspaces to Terraform Cloud… | ||
| Journey to Hybrid Multi-Cloud | Matthew Bull, Calum Bell | 15m |
Elanco documents moving from 95% cloud adoption to a hybrid multi‑cloud platform that standardizes developer experience across ~1,000 applications by mining… | ||
| HCP Vault Learn Lab: Operations with Terraform | Brian Shumate, Jonathan Frappier | 42m |
Shows how to codify Vault with Terraform and the Vault provider then apply that config from a local dev server to an HCP Vault cluster; it creates ACL policies… | ||
| Auto-Configure Your Vault and Boundary With CTS | Lev Andelman | 29m |
Deploys Postgres and a sample app to Kubernetes while Consul Terraform Sync watches the Consul catalog and writes terraform tfvars that trigger Terraform… | ||
| Roche: Securing & Connecting Healthcare Platforms | Leandro Javier Ausilio, Harsha Vathsavayi | 24m |
Roche secures and distributes device and platform credentials by deploying HashiCorp Vault with namespace isolation, provisioning namespaces via Terraform and… | ||
| Using CD Pipelines to Upgrade Vault at Scale | Moran Frimer | 16m |
Describes an automated CD pipeline that upgrades Wix’s multi‑regional, DR‑replicated HashiCorp Vault clusters on Kubernetes by sequencing upgrades from DR… | ||
| Elastic ❤️ Terraform: And Why They're Splitting Up Their Providers | Philipp Krenn | 07m |
Elastic splits its Terraform integration into two real providers: a cloud provider that provisions managed Elasticsearch clusters and a stack provider that… | ||
| Progressive Deployments with Consul Service Mesh | Nic Jackson | 46m |
Shows a concrete progressive delivery pipeline built with Consul service mesh, Nomad, Prometheus and Grafana that automatically canaries and promotes releases… | ||
| Vault Updates & Future Direction 2022 | Vinod Muralidhar | 32m |
Vault announces a new FIPS 140-2 compliant binary and ongoing work toward 140-3, adds a Kubernetes dynamic secrets engine (Vault 1.11) and HSM offload for PKI… | ||
| Smooth Operator: Vault & the Kubernetes Operator Framework | Ric Featherstone | 14m |
Proposes a service layer built as a suite of Kubernetes operators that wrap Vault APIs to provide opinionated, auditable self-service: uses Operator SDK, Vault… | ||
| The HashiStack from the Perspective of a Web Dev | Mason Acie | 14m |
A web dev recounts adopting Vault, Terraform and Consul to secure and run a drone‑based solar‑farm app: Vault handles secret storage and 90‑day key rotation… | ||
| Consul Product Updates & Future Vision 2022 | Paul Banks | 29m |
Consul introduces admin partitions (released in 1.11) to give per-cluster multi-tenancy on shared servers and a new cluster peering model (tech preview in… | ||
| Real Life End-to-End Building, Testing, and Deploying of a Buzzword-Heavy Application | Eugene Romero | 18m |
A real Norwegian maritime licensing app is fully automated end to end using Terraform to provision AKS, Azure AD, Key Vault, SQL pools and Helm‑driven… | ||
| HashiConf Global is coming October 4-6 in Los Angeles, CA | 01m | |
Overview of HashiCorp product usage and community interaction at the conference with concrete takeaways on Terraform, Vault, Consul, Nomad, Boundary, Waypoint… | ||
| Terraforming Our Tenant: Self-Serving Apps as Code | Peter Barta | 26m |
NBIM codifies Azure AD app management with Terraform plus custom modules and API scripts, targeting 600 applications and using YAML-based templates for… | ||
| Nomad: Past, Present, and Future [Abridged] 2022 | Michael Nomitch | 13m |
Nomad claims to run from one node to 10,000+ nodes and demonstrates a path from 100 Raspberry Pis to a HA cloud cluster with three servers, zero-downtime… | ||
| Waypoint Roadmap 2022 | Bukky Adebayo | 18m |
HashiCorp launches HCP Waypoint in private beta and moves the Waypoint server to the cloud so teams avoid selfhosting and reliability work; a lightweight local… | ||
| Running Trusted Payloads With Nomad and Waypoint | Bram Vogelaar | 25m |
Describes a concrete pipeline: Waypoint builds and fingerprints Docker images, runs vulnerability scans (Snyk), stores SBOMs, and promotes artifacts not… | ||
| A Diary of Change in the Dusty Financial Sector | Christian Bergner | 15m |
Operations teams standardize legacy landing zones with Terraform, introduce Vault (including Enterprise) to dynamically generate AWS secrets via Vault, and… | ||
| The Path to Modern Infrastructure Automation [Abridged] | Harold Giménez | 18m |
Roadmap and product details for Terraform and Packer: Terraform core now offers native Terraform Cloud integration and CDK support, HCL gains HCL… | ||
| Boundary: Then and Now [Abridged] | Lili Cosic | 15m |
Launches a managed HCP Boundary beta that provisions controllers with one-click and offers either HashiCorp-managed workers or bring-your-own-worker so targets… | ||
| Waypoint Roadmap [Abridged] 2022 | Bukky Adebayo | 14m |
Waypoint is an app-delivery tool that records build, deploy, and release steps in a waypoint.hcl file and ships with build plugins for Docker and deploy… | ||
| Vault Updates & Future Direction [Abridged] 2022 | Vinod Muralidhar | 20m |
Vault reports a new FIPS 140-2 binary and a roadmap toward 140-3, an open‑source binary with ~130 million downloads and a Vault on Kubernetes binary with 8.8… | ||
| Consul Product Updates & Future Vision [Abridged] 2022 | Paul Banks | 16m |
Consul adds concrete features: Admin partitions in Consul Enterprise 1.11 (Dec) give per-cluster catalogs, namespaces, ACLs and delegated mesh control but only… | ||
| nothing matches | ||