HashiTalks 2019
2019-02-21..2019-02-22
-- online --
[HashiTalks 2019, HashiTalks 2020, HashiTalks 2021, HashiTalks 2022]
| title | author | length |
|---|---|---|
| The Right Way to DevOps with Terraform and Ansible | Shrivatsa Upadhye | 25m |
Recommends using Terraform for cloud provisioning and Ansible for configuration, with concrete demos: Terraform creates a planned graph and provisions 22… | ||
| Azure Authentication With Vault | Ned Bellavance | 20m |
Demo shows Vault configured to use Azure AD: an Azure service principal is created and Vault enables the azure auth method with tenant, client ID and secret… | ||
| Terraform Hybrid: Unifying Your Physical and Cloud Datacenters | Jeffrey Dillon, Irena Shashchuk | 22m |
Wayfair builds a single CI/CD pipeline for Terraform that provisions bare‑metal servers, ESX/vCenter VMs and GCP instances from one codebase; Packer creates… | ||
| AWS Serverless Deployment with Terraform Enterprise | Stenio Ferreira | 29m |
Argues that Serverless Framework breaks down at enterprise scale and shows a concrete Terraform Enterprise workflow that replaces fragile Serverless… | ||
| Vagrant: The Stick and Carrot of a DevOps Leader | Anatoly Litovsky | 25m |
Shows how Vagrant is used as a concrete prototyping layer: a Vagrantfile prototype spins full environments on laptops using VirtualBox and Docker Swarm… | ||
| Integrating Vault and Terraform with Enterprise Machine Identity Services | Carl Bourne | 27m |
Shows a working integration that wires a centralized machine identity service into infrastructure-as-code and secrets tooling: a Terraform custom provider… | ||
| Advanced Multipurpose Infrastructure: A Self-Managed Cloud Environment with HashiCorp Terraform | Aleks Volochnev | 27m |
Team builds self‑managed cloud that spins complete test or demo environments from code and tears them down automatically, cutting cloud spend and delivering… | ||
| Machine Learning Workflows with HashiCorp Nomad and Apache Spark | Chris Baker | 23m |
HashiCorp provides an open-source Nomad-Spark integration that runs Apache Spark executors and drivers as Nomad tasks, supporting both cluster mode and client… | ||
| Operating Consul at Scale | Pierre Souchay | 28m |
35,000 bare‑metal hosts across 8 data centers run Consul for service discovery with ~3,000 service types and ~250,000 instances serving ~2.5M requests/sec… | ||
| Leveraging Infrastructure as Code to Create Zero Trust Access to Your Apps and Infrastructure | Leonid Belkind | 27m |
Argues that replacing VPN/network trust with a software‑defined perimeter and per‑operation policy reduces attack surface by cloaking resources so they aren’t… | ||
| TGI Vault: Securing Kafka with Vault PKI | Mateus Pimenta | 27m |
A working three‑node Kafka cluster uses Vault PKI to mint node and client certificates and enforces mutual TLS for authentication while ACLs restrict topic… | ||
| Adopting HashiCorp Vault: Deployment, Adoption, and Beyond | Nicolas Corrarello | 29m |
Detailed Day‑0 to Day‑N playbook for Vault deployments: use Consul storage backend for strong consistency, prefer immutable IaC deployments… | ||
| Vagrant + Terraform: The Awesome Software Development Duo | Samuel Nwoye | 23m |
Shows how Vagrant creates identical developer VMs for parity with production and Terraform actually spins up AWS resources so the demo provisions an EC2 AMI… | ||
| Integrating HashiCorp Vault and K8s Apps - No Code Changes Needed | Andrey Devyatkin | 32m |
Shows a working, no-app-code change integration: Kubernetes auth exchanges a service account token for a Vault token, a Vault Agent sidecar writes the token to… | ||
| Managing VMware Environments with HashiCorp Vault | Gabe Maentz | 27m |
Demo shows using HashiCorp Vault with PowerCLI to discover ESXi hosts, seed and store root credentials, then generate and rotate unique per host passwords… | ||
| How Preemption Works in Nomad | Preetha Appan | 28m |
Nomad adds a scheduler preemption feature that makes room for higher-priority work by evicting lower-priority allocations instead of waiting for autoscaling… | ||
| Container Security Best Practices | Gunjan Patel | 27m |
94% of respondents say containers raise security concerns, 60% report incidents last year, 47% run at least one vulnerable image and 46% don't know if they do… | ||
| Building Automated Pipelines for Infrastructure Code with Terraform and Packer | Tilen Faganel | 33m |
Uses Terraform and Packer to build immutable images and provision resources, adds automated CI pipelines that build Packer images, run Terratest-style checks… | ||
| Declarative Infrastructure Basics for Systems Admins | Tim Davis | 16m |
Defines declarative vs imperative infrastructure and argues that Terraform becomes the practical standard for writing less code to describe end states, not… | ||
| HashiCorp Vault Operational Intelligence | Martez Reed | 20m |
Describes building a Vault operational pipeline that queries mounts and KV v1/v2 backends with a read-only reporting role, uses the HVAC Python client to count… | ||
| Cool New Packer Features | Megan Marsh | 30m |
Shows how Packer now reads variables directly from console KV and from Vault KV v2, demoing a service version pulled from Consul and a secret value printing as… | ||
| Terraform on Azure for Beginners | Sean Carolan | 29m |
Demo provisions a working Linux VM and a tiny “cat app” website on Azure in under 15 minutes using the Azure cloud shell and Terraform. The workflow shows… | ||
| HashiCorp Vault Dynamic Database Credentials with Cassandra | John Dohoney, Jr. | 24m |
Demo configures HashiCorp Vault to issue ephemeral Casandra credentials, creates three different users with a 2-minute TTL and shows the last one expire and… | ||
| What's New in Terraform 0.12? | Nic Jackson, Kristin Laemmert | 25m |
Terraform 0.12 merges HCL and the interpolation language into a single new HCL2, delivering first-class expressions, dynamic blocks and a generalized splat… | ||
| How to Provision Serverless Infrastructure Using Terraform and Azure Pipelines | Mark Gossa | 24m |
Provisioning creates an Azure Function App, App Service Plan and Storage Account from Terraform modules, then deploys a .NET Core Durable Function via Azure… | ||
| What You See is What You Get… for AWS Infrastructure | Anton Babenko | 31m |
Drawn Cloudcraft diagrams convert to a downloadable Terraform archive that instantiates real AWS resources, using terraform-aws-modules (VPC module cited at ~2… | ||
| Terraforming Minecraft | Scott Winkler | 28m |
A Terraform provider targets a running Minecraft server by talking to a plugin that launches a Jersey REST API which drives the low level spigot library. The… | ||
| Using HashiCorp Vault with Google's Serverless Solutions | JP Robinson | 29m |
New York Times engineers build and open-source a small Go library called gcp-vault that actually logs into Vault from Google App Engine and Cloud Functions by… | ||
| Kubernetes the Hard Way Using Terraform | Aidan Daniels-Soles | 27m |
Reproduces Kelsey Hightower’s Kubernetes The Hard Way by encoding each step in Terraform and shell scripts, including CA and TLS generation with CFSSL, kubelet… | ||
| Vault Fastly Secret Engine Design and Integration | Ling Zhang, Shawn Bower | 25m |
NYT replaces dozens of static Fastly tokens with a Vault secret engine plugin that generates dynamic short-lived tokens on demand via the Fastly API using an… | ||
| Runtime Protection for Vault & Consul | Yan Michalevsky | 33m |
Shows a concrete runtime: Vault runs inside an Intel SGX enclave using a wrapper runtime that loads the existing Vault binary unchanged, seals TLS keys and… | ||
| Jumpboxes at Easy: How Terraform and Packer Enable the Easy Creation of Secure Jumpboxes | Diego Casati | 26m |
Shows a reproducible pipeline that uses Packer to bake FreeBSD 12 images and uses Terraform to deploy those images on Azure, with Packer running provisioning… | ||
| Simplifying Secrets Management in the Public Cloud | Kevin Tuffner | 30m |
Shows Vault centralizing secrets across clouds with live demos that work: an SSH one-time passwords flow using the SSH secrets engine, an AWS secrets engine… | ||
| High Availability Vault with DynamoDB in Kubernetes | Vinh Quoc Nguyen | 26m |
HashiTalks 2020: The 24-hour virtual community event will return on Thursday, February 20th at 9am GMT. Register here… | ||
| Staying DRY Using Terraform Workspaces with GitLab-CI | George Coyne | 18m |
Demo shows a CI/CD workflow that uses Terraform Workspaces with GitLab-CI to avoid copying env folders by naming state files via workspace interpolation, using… | ||
| Terraform for Serverless: Best Practices, Lessons Learned | Eugene Istrati | 22m |
Shows concrete Terraform for serverless practices: split a monolithic repo into ~100 components and reduce 34,000 HCL lines to ~22,000 by converting to YAML… | ||
| Implementing Unit Tests for Terraform with Open Policy Agent | Dave Strebel | 18m |
Shows how to run Open Policy Agent with Rego against Terraform plan JSON (uses parse-terraform-plan npm to convert HCL to JSON) to compute weighted scores for… | ||
| Terraform-Powered Platform-as-a-Service | Juan Sebastian Ruiz Villa | 35m |
Builds a per-customer PaaS by generating Terraform from tokenized templates and applying it on AWS; orchestration uses a Jenkins JSON webhook that runs a… | ||
| Designing High Availability for HashiCorp Vault in AWS | Bryan Krausen | 29m |
Shows how to run Vault HA on AWS using Consul or DynamoDB storage, with concrete configs (DynamoDB example and Consul client on :8500), recommends AWS KMS… | ||
| Dynamic AWS Security Groups with Terraform | Mike Augustine | 28m |
Shows how Terraform builds paired client/server security groups from a map of services using a 1/0 nomenclature, auto-creating per-service SGs and separate SG… | ||
| Is Immutable Infrastructure Feasible? | Kamal Muralidharan | 26m |
HashiTalks 2020: The 24-hour virtual community event will return on Thursday, February 20th at 9am GMT.
Register here… | ||
| nothing matches | ||