HashiTalks 2020
2020-02-20..2020-02-21
-- online --
[HashiTalks 2019, HashiTalks 2020, HashiTalks 2021, HashiTalks 2022]
| title | author | length |
|---|---|---|
| Build and Test GCP Infrastructure Using Terraform Modules | Pradeep Bhadani | 25m |
Shows how a reusable Terraform module for GCP (bucket, VM, service account, network) is packaged, versioned and consumed from local or GitHub sources, and how… | ||
| Managing Vault with Terraform | Jacob Mammoliti | 23m |
Shows how Terraform plus the Terraform Vault provider configures Vault end-to-end: deploys a GKE cluster with Vault Helm chart and Consul, takes ~4–5 minutes… | ||
| Highly Available PostgreSQL Database Cluster Creation & Monitoring in Minutes | concerned boy | 36m |
Demo deploys a PostgreSQL cluster with EnterpriseDB using Terraform + Ansible, provisioning a 3-node cluster (1 master, 2 replicas) on AWS in minutes from a… | ||
| Deploying and Managing AWS Lambda With GitLab CI and Terraform | Will Hall | 22m |
Builds a Lambda pipeline that uses GitLab CI to lint, test, build a containerized function, push artifacts to S3 and Docker registry, then run Terraform plan… | ||
| Managing Terraform Module Versioning and Dependencies | Robert Paprocki | 30m |
Explains how an engineering team converts large Terraform setups into many small reusable modules, pins module versions via Terrafile (git tags) and orders… | ||
| Intermediate HCL: Configuration Languages in HCL2 | Russell Rollins | 22m |
Argues HCL2 is a language for domain-specific configuration languages, not just a data format, showing a Go-based parser using the HCL and cty libraries… | ||
| Encryption-as-a-Service with Vault's Transit Secret Engine | Jacob Mammoliti | 27m |
Vault Transit acts as encryption-as-a-service: keys never leave Vault, data is sent over TLS and Vault returns ciphertext for storage. Demo shows enabling the… | ||
| Securing AWS Accounts With HashiCorp Vault | Shrivatsa Upadhye | 22m |
Runs a Vault server, enables the AWS secrets engine, and creates an s3-role that issues policy-bound short-lived IAM credentials limited to S3. Vault issues… | ||
| How to Use AKS Pod Identity with Vault | Ned Bellavance | 28m |
Demo deploys Vault on AKS with the aad-pod-identity helm chart, installing the MIC controller and NMI daemonset, creating AzureIdentity and… | ||
| Better Together: JWT and Vault in Modern Apps | Shrivatsa Upadhye | 25m |
Demo runs a Vault dev server with OIDC configured to accept a JWT from an OIDC provider (GitHub via an auth0-like instance), Vault verifies the JWT access… | ||
| Understanding the GitHub Provider for Terraform | Kerim Satirli | 30m |
Covers using the GitHub Terraform provider to manage orgs, teams, memberships and ~500 repositories across half a dozen orgs, requiring Terraform 0.12+ and… | ||
| Vault Response Wrapping Makes Secret Zero Challenge A Piece Of Cake | Giuseppe Misurelli | 27m |
Shows a working Jenkins-to-Vault pipeline that uses Vault response wrapping to hand off a wrapped token instead of a raw secretID. Jenkins (trusted entity)… | ||
| Hands-On Terraform Module for AWS Landing Zone | Eugene Istrati | 26m |
A Terraform module published to the Terraform Registry builds an AWS Landing Zone as immutable, componentized configs that map one Terraform provider per… | ||
| Terraforming RDS: What Instacart has learned managing over 50 AWS RDS Postgres instances with Terr | Muffy Barkocy | 30m |
Instacart manages ~80 AWS RDS Postgres instances with Terraform and recounts terraforming ~15,000 AWS resources; the talk shows concrete failures and fixes… | ||
| Fully SaaS-Based DevOps with Terraform Cloud and GitLab | Mayank Tahilramani, Kelly Hair, Kawsar Kamal | 23m |
Shows a fully SaaS DevOps flow that glues GitLab CI/CD to Terraform Cloud Workspaces and Vault GCP secrets engine using private GitLab runners in GKE, with… | ||
| Design, Draw, Deploy Your AWS Infrastructure From Inception to Production | Anton Babenko | 27m |
A browser diagram built in Cloudcraft is exported as a zip that Cloudcraft → Terraform export converts into Terragrunt-orchestrated HCL using modules.tf… | ||
| Terraform Code Reviews: Supercharged with Conftest | Jay Wallace | 30m |
Shows using Conftest + Rego to run Terraform plan JSON checks inside Atlantis CI so policies run as part of PRs, set per-policy GitHub status, and block merges… | ||
| Enterprise Deployment to Azure and AWS in Azure DevOps | Kyler Middleton | 25m |
Migration from SparkleFormation/CloudFormation and Jenkins to Terraform and Azure DevOps consolidates multi-cloud provisioning and CI/CD. Teams build Linux… | ||
| Automating FedRAMP Security Compliance with Terraform | Eric Evans | 26m |
Shows how Terraform modules map actual FedRAMP controls into reusable code, targeting FedRAMP Moderate (about 325 controls) while noting cloud providers… | ||
| Securing RabbitMQ with Vault | Robert Barnes | 30m |
Shows how Vault is configured to create dynamic credentials for RabbitMQ and refactors a simple Go producer/consumer to fetch them at runtime instead of… | ||
| Authenticating to HashiCorp Vault in a VMware vSphere Environment | Martez Reed | 24m |
Shows a working open source platform called vAuth that mimics a cloud metadata service in vSphere so VMs can authenticate to HashiCorp Vault. It reads VM… | ||
| HashiCorp Vault Configuration as Code via HashiCorp Terraform: Stories From the Trenches | Andrey Devyatkin | 31m |
Shows a practical path to manage Vault with Terraform: deploy Vault separately from its Terraform-managed configuration, delete root tokens after bootstrap… | ||
| Keybase Vault Auto-Unseal | Bas Meijer | 27m |
Automates Vault init and unseal by storing Shamir shares encrypted to a Keybase team and retrieving them via each user’s PGP key; uses Ansible playbooks plus… | ||
| Deploying a Multi-Cloud MMORPG with Terraform, Nomad and Consul | Scott Winkler | 28m |
Demonstrates deploying Nomad and Consul across AWS and Azure with Terraform, bootstrapping clusters (three-node quorums for servers) then deploying an MMO RPG… | ||
| Monitoring Nomad with Prometheus and Icinga | Bram Vogelaar | 21m |
Builds a working pipeline that wires Nomad -> Consul -> Prometheus -> Icinga2 and Grafana, using Traefik for dynamic ingress and Nomad job metadata (example… | ||
| HashiQube: A Development Lab Using All the HashiCorp Products | Riaan Nolan | 24m |
A ready-made VM lab runs Vagrant, Packer, Terraform, Nomad, Consul, Vault and Sentinel plus Localstack, Fabio and Jenkins and wires them together so the… | ||
| I Can’t Do This With Terraform, Now What? | Patrick Conheady | 21m |
Shows how Terraform remains usable when a resource property is missing, focusing on Azure API Management attaching to a virtual network which Terraform… | ||
| Terraforming in a Serverless World | Marcos Nils | 24m |
Practical patterns for provisioning AWS Lambda with Terraform: use source_code_hash so Terraform detects code changes and updates functions; run a… | ||
| Deployment Patterns for Consul in Kubernetes | Vishal Biyani | 24m |
A live demo builds a Go app with two endpoints and deploys Consul via Consul servers + agents via Helm to show that watch delivery depends on agent topology… | ||
| Shifting Security and Sanity Left by Testing Terraform with InSpec | Annie Hedgpeth | 29m |
Demonstrates a concrete workflow: use Test Kitchen with the kitchen-terraform driver to spin up isolated Terraform sandboxes (Ruby + bundler required), run… | ||
| Shifting Terraform Configuration Security Left | Gareth Rushgrove, Gareth Rushgul | 29m |
Cloud misconfiguration drives most breaches—Rapid7 finds misconfig issues on ~96% of penetration tests—so analyze HCL before apply. The talk shows fast, local… | ||
| Multi-Cloud Foundations with Terraform | Carl Javier | 14m |
Shows how Terraform and Terraform Enterprise codify AWS GCP and Azure foundations into reusable modules and CI workflows that shrink a typical six to eight… | ||
| Extending Nomad with Plugins | Chris Baker | 29m |
Nomad adds two plugin types: a Python task driver (a separate binary using the HashiCorp go-plugin library) that starts, recovers and reports a task handle… | ||
| TDD for Infrastructure Code | Diarmuid Moloney, Diarmuid Molony | 17m |
Shows a concrete pipeline: run Terraform validate for syntax, enforce rules with Terraform compliance, then run Terratest (Go) to deploy a Terraform module… | ||
| Ground Control to Nomad Job Dispatch | Michael Lange | 26m |
Begins with Nomad parameterized jobs and demonstrates job dispatch calling a job template with meta params and a payload file; a survey found 56% use periodic… | ||
| Self-Service Vault in Kubernetes | Pato Arvizu | 28m |
Move Vault from VM-hosted Terraform to a Kubernetes-native, declarative system that removes PR bottlenecks and human apply steps. Uses the open-source… | ||
| HashiTLS: Demystifying Security Certs | Alan Scherger | 30m |
Explains what X.509 v3 certificates actually contain and how they fail in practice, cites a 3-hour outage from mis-rotated certs and a recent Nomad CVE caused… | ||
| Yes, One Can Simply "Terraform" Their App to Azure, Easily | Omer Barel | 26m |
Shows a full end-to-end pipeline that uses GitHub, Terraform and Azure DevOps to build an AKS cluster, deploy four microservices via Helm and store plan… | ||
| Automating Chaos Engineering GameDays with Terraform | Yury Yineth Niño Roa | 28m |
Automates chaos gamedays by provisioning repeatable learning environments with Go and Terraform, spinning up AWS EC2 instances with a Gremlin agent on EC2 via… | ||
| Building a Repeatable and Hardened Vault POC | Gabe Maentz | 31m |
Builds a repeatable, hardened Vault POC: automated image creation with Packer, TLS via Let's Encrypt certs, deployment with Terraform using a three-node Vault… | ||
| Nomad Best Practices for Reliable Deploys | Bram Vogelaar, Srinivas Vadlamani | 27m |
Defines concrete Nomad settings and tooling: force placement with constraint "distinct_host = true" and spread across datacenters, health checks on HTTP every… | ||
| Chef Tools & Terraform: Better Together | Matt Ray | 32m |
Chef shows concrete integrations with Terraform: a demo boots AWS with Terraform 0.12.20, runs chef-client 15.8.23 to install Apache via the Chef provisioner… | ||
| Post-Quantum Cryptography and HashiCorp Vault | Andy Manoske | 37m |
Explains why Shor's algorithm breaks RSA and Diffie‑Hellman while Grover's algorithm halves symmetric key strength, notes current quantum devices sit below… | ||
| Making Automatically Compliant Design Documents With Infrastructure as Code | Yutaro Sasaki | 25m |
Claims a reproducible pipeline that turns plain text design data into automation code so parameter sheets stop being a manual error source. Uses a CSV-based… | ||
| Terraform, Infrastructure as Code, and the Robot Dog | Pedram Nimreezi | 28m |
Claims a practical pipeline that uses Terraform + Packer + Vault to manage cloud and edge infrastructure for a walking robot, tying ROS topics, sensors and… | ||
| Leveraging Chef, Packer, and Habitat for Effortless AMI Deployments | Evan Machnic | 22m |
Describes a layered AMI pipeline that uses Packer plus Chef Infra to bake a base AMI with OS patches and Habitat installed, then a second application AMI that… | ||
| Using an Image Release Process for Security Wins | Alexander Rose Escovedo | 28m |
Shows a one and a half year effort to build a self‑service image release pipeline that produces golden AWS AMIs and lets teams publish and consume images via… | ||
| Commodified IaC using Terraform Cloud | Marko Bevc | 31m |
Overview of Terraform Cloud showing concrete features and a working demo that creates and destroys an AWS EC2 instance via a VCS-triggered run. It claims to… | ||
| Tricks and Treats with HashiCorp's OSS | Allee Clark | 27m |
Proposes a cost‑effective pipeline that automates Terraform plan and apply by using go-getter to fetch repository subdirectories (github, S3, GCS detectors)… | ||
| A Consul Service Mesh Integration Case Study With Presto | Arturo Viveros, Fredrik Hoem Grelland | 27m |
A case study that integrates Presto with Consul Connect by adding a tiny Presto plugin that consumes Consul Connect native integration and uses mutual TLS plus… | ||
| User Experience Research (UXR) at HashiCorp, a Space Oddity. | Erika Feldman | 15m |
Explains how HashiCorp runs UXR with concrete activities: remote usability studies (task links or live sessions), one-on-one customer interviews, focus groups… | ||
| nothing matches | ||