HashiTalks 2021
2021-02-17..2021-02-18
-- online --
[HashiTalks 2019, HashiTalks 2020, HashiTalks 2021, HashiTalks 2022]
| title | author | length |
|---|---|---|
| Deploying CI/CD Infrastructure with Terraform and Packer | Vincent Brison | 29m |
Builds a production-ready pool of self-hosted runners on GCP using Terraform + Packer, Cloud Functions for scale-up/scale-down, and image baking to remove VM… | ||
| Pluralith – Developing a Proper Way to Visualize State | Daniel Putzer | 23m |
Tool that parses Terraform state files and draws an interactive graph, launched from the CLI by adding --p flag to terraform commands. Color‑coded diffing… | ||
| Building Datalakes for an International Bank with HashiCorp Terraform | Peter Gergely Marczis | 30m |
An international bank builds its datalake platform by packaging Terraform templates and tooling into a Docker delivery image that is tested and released via… | ||
| The 'Data, Transformations, and Resources' Pattern in Terraform | Robert Blumen | 25m |
Shows that by modeling your domain as data, then using Terraform 0.12 features to transform that data into provider inputs, you avoid massive copy‑paste and… | ||
| How to Write a Modern Terraform Provider: Tools and Patterns | Cyrus Javan | 29m |
Explains concrete patterns and SDK v2 features for building real Terraform providers: use context-aware CRUD so operations cancel on Ctrl‑C, return a read… | ||
| Zero Trust Security for Legacy Apps with Service Mesh | Rajesh K Mishra | 30m |
Claims a quick onramp to Zero Trust for VM‑based legacy apps without rewriting code, using Consul Connect sidecars to add mTLS between services. Demo wires a… | ||
| Using Vault with a Laravel App in OpenShift | Anand Capur | 28m |
Deploys Vault via Helm on OpenShift, enables the Kubernetes auth method, and uses a Vault Agent sidecar injected by a mutating admission webhook to render… | ||
| Curating the Best Twitter Feed: Christmas Pets Edition | Grace Nguyen | 19m |
A small site called Petmas scrapes Christmas-themed cat and dog tweets using Twitter API + Selenium, converts tweet URLs into publish.twitter.com HTML blocks… | ||
| Measuring Devops Success with Pipeline Analytics | Chris Riley | 29m |
Argues that pipeline analytics must treat the delivery chain as an app, ingesting logs and metrics from Terraform, Vault, Jenkins and repos, correlating… | ||
| Re-potting Overgrown Terraform Repositories | Kristin Smith | 24m |
Demo splits a mono Terraform repo into two and then grafts them back using an AWS S3 backend with keys demo starting repo and demo web application, wrapper… | ||
| Developing Terraform Modules at Scale | Tom Straub | 28m |
Practical guide to building reusable Terraform modules: argues for mid‑sized modules (not one‑resource or mega modules), shows a concrete refactor that… | ||
| Improving HashiCorp Vault Security with Data Visualization | Martez Reed | 26m |
Shows a working pipeline that pulls Vault metadata, Active Directory memberships, Git commits and Splunk audit logs into Neo4j graph database to visualize who… | ||
| Run Vault on Raspberry Pi and Unseal with Hardware! | Pato Arvizu | 27m |
Runs Vault as a systemd service on a Raspberry Pi 3B, initializes Vault and prints the root token, then stores split unseal material in local files and uses a… | ||
| Terraforming Data Analytics Environments | Marcelo Zambrana | 27m |
Shows code that provisions a full analytics stack end to end: Terraform (Terraform Cloud backend) plus the Databricks resource provider and Azure RM to create… | ||
| How the Dynamic Duo of Vault and Puppet Tame SSL Certificates | Nick Maludy | 24m |
Automates PKI using HashiCorp Vault and Puppet to issue, distribute and auto-rotate certificates and CA chains, with a Puppet module that requests certs from… | ||
| Fuzzing Nomad with Nomad | Kent Gruber | 32m |
Shows a reproducible stack that runs go-fuzz harnesses on HashiCorp Nomad using Terraform/Packer on Google Cloud, with Prometheus+Grafana for metrics and a… | ||
| Stop the (Password) Insanity! - Managing Credentials with HashiCorp Vault | Juan Peredo | 27m |
Microservices app using Postgres and NATS has 22 credentials to manage; Vault is used to store secrets, create a policy and a Kubernetes-auth role bound to… | ||
| Automating for Failure: Disaster Recovery Testing with Terraform & Gremlin | Samson Olufuwa, Olubusayo Amowe | 27m |
Claims an automated DR pipeline that actually spins a live replica after failure using Terraform + Gremlin for tests and AWS for recovery. Production EC2 state… | ||
| Proper Terraform Authentication for Azure Deployments | Peter De Tender | 29m |
Demo shows working Terraform deployments against Azure using interactive Azure CLI login, cloud shell, service principal app registrations (app ID + secret)… | ||
| Creating a Node.js App that Records and Retrieves Secrets from Vault | Rod Anami | 28m |
A minimal Node.js app demonstrates authenticating to HashiCorp Vault via AppRole to obtain a token, then writing and reading KV v2 secrets over HTTPS to a… | ||
| Database Administration in a Cloud Native World with Terraform at Tumelo | Benjamin King | 26m |
Demonstrates using Terraform Postgres provider plus Go Cloud tunneling to manage managed Postgres instances over GCP IAM proxies so databases never need… | ||
| HashiCorp APIs via HashiFUSE | John Boero | 32m |
Experimental FUSE clients map HashiCorp REST APIs into a browsable filesystem so Vault secrets, Consul KV, Nomad jobs and Terraform Cloud workspaces become… | ||
| How Secure are Your Sensitive Values in Terraform? Common Pitfalls of Scale Factory's Clients | Marko Bevc | 31m |
Shows concrete fixes: Terraform CLI generates a random password via the random provider, writes that credential into AWS Secrets Manager, and the state JSON… | ||
| Optimizing Terraform integration inside GitLab CI/CD pipelines | Niels Peto, Nicolas Pepinster | 27m |
Practical guidance for running Terraform in GitLab CI/CD to deploy AWS infrastructure, including using S3 for Terraform backend and DynamoDB for state locking… | ||
| Autoscaling Your Nomad Jobs Using SRE Insights | Bram Vogelaar | 25m |
Shows a working Nomad autoscaler setup that uses Prometheus metrics and Grafana dashboards to drive decisions, with a demo site that goes from 3 to 1 instance… | ||
| Don't be Afraid of CSI: How Critical TechWorks Orchestrates Stateful Apps with Nomad & a CSI Process | José Maia, Carlos Cunha | 26m |
Critical TechWorks builds an orchestration pipeline that uses Nomad 0.11 with CSI plus Terraform and Consul to run stateful apps (Jenkins, SonarQube, Nexus)… | ||
| Combining DevOps with PKI Compliance Using HashiCorp Vault & Consul | Tomas Gustavsson | 26m |
Shows a working EJBCA Vault plugin installed into Vault, using mTLS client auth to issue and revoke certificates and log every issuance to the PKI audit trail… | ||
| The HashiCorp Packer Plugin Repository, What’s init? | Wilken Rivera | 32m |
Packer 1.7 ships a GitHub-backed Packer Plugin Repository and the packer init command that automatically downloads plugin binaries defined in an ACL-only… | ||
| Deploying Cisco NXOSv with Vagrant | Hoon Jo | 30m |
Shows how NXOSv (Cisco Datacenter NOS) actually runs on Vagrant by patching Vagrantfiles so auto-detect and provisioning succeed; builds working boxes for… | ||
| Testing Your HCL Modules for Terraform | Gareth Brown | 29m |
Describes an automated way to unit test HCL by moving logic into locals, loading YAML with yamldecode, and feeding processed maps through Terraform’s external… | ||
| Branding Waypoint and Boundary | Kristopher Hughes | 28m |
HashiCorp turns product naming into distinct marks by building logos from letter-based metaphors: a permeable, drawable B for Boundary and a multi-stop W path… | ||
| Hyperledger Fabric from Docker-compose to Orchestration: Using Vault & Consul-Template for PKI | Sachin Gowda | 25m |
Shows how HashiCorp Vault PKI engine plus consul-template generate Hyperledger Fabric certificates via Vault API, using ECDSA ECDSA P-256 keys and role… | ||
| Terraform Modules & Providers: Check Your Source | Jay Wallace | 31m |
History: Terraform has 15 providers in 2015, splits providers out by 2017, adds required_providers in terraform 0.13, and the registry grows to ~600 providers… | ||
| A Nomadic Vault: Secrets for Schedulers and Runtimes | Anthony Burke | 26m |
Demonstrates a working Nomad-Vault integration that automatically issues ACL tokens and programs Nomad policies on demand, using Vault roles to create… | ||
| How Remote Work is Driving the Need for Multi-Cloud DevSecOps: How to Build a Pipeline | Mike Fraser | 28m |
Remote work drives a push to run security earlier and across multiple clouds, and the session shows a concrete, working pipeline: it runs IaC scans with… | ||
| Service Mesh - Beyond the Hype | Anubhav Mishra | 32m |
Consul Connect is presented as a production service mesh with a long history (launched 2014, known deployments with 30k+ agents) that provides automatic mTLS… | ||
| A10 & HashiCorp Network Infrastructure Automation with Consul-Terraform-Sync | Rishi Sampat | 24m |
A10 demonstrates end-to-end cloud networking automation using Terraform modules and providers to spin up vThunder ADCs on Proxmox and KVM providers… | ||
| Credential-Free Cloud Provisioning with Terraform Cloud Agent | Andy Assareh | 29m |
Demonstrates using the Terraform Cloud Agent (Business tier) running on ECS Fargate to remove static credentials from workspaces by having the provider obtain… | ||
| I just want to ship my code. Waypoint, Nomad, and other things. | Michael Lange | 30m |
Compares three concrete deploys of a small Node.js site: Kubernetes + Docker, Nomad + Docker, and Nomad + Pkg (raw binary), using Waypoint so the developer… | ||
| Terraform Drift Detection and Reporting | Michael Simo | 29m |
Tool built in Go uses terraform-exec to run Terraform programmatically, scans a project directory for .tf modules, runs init/plan/show per module in parallel… | ||
| Ephemeral Cloud Infrastructure for Acceptance Tests with Terraform Enterprise & GitLab | Wes Novack | 29m |
Pluralsight Platform Engineering builds .NET and Node shared libraries and proves them by spinning ephemeral EC2/Kubernetes/Lambda environments via Terraform… | ||
| GitLab + Nomad: A GitOps Dream — How the Internet Archive Migrated from Kubernetes to Nomad & Consul | Tracey Jaquith | 29m |
The Internet Archive replaces Kubernetes with HashiCorp Nomad + Consul, using GitLab’s existing build phase and a simpler custom deploy phase that injects CI… | ||
| Getting your Python Development Environment Ready with Vagrant | Mario Garcia | 27m |
Shows how to reproduce a Python dev environment using Vagrant with VirtualBox or Docker providers, provisioning with shell scripts (or Ansible/Chef/Puppet) to… | ||
| HashiCorp's Game of Life | Daniel Bennett | 30m |
Implements Conway’s Game of Life using Nomad, Consul, Terraform and Go with each cell as its own process and rules applied locally. Prototype floods Nomad with… | ||
| Blank Apply: Destroying Without Terraform Configuration | Sunil Chopra | 25m |
When Terraform state exists but configuration is lost, creating an empty config and running terraform apply removes all resources referenced in that state — a… | ||
| Building and Deploying Applications to Kubernetes with GitLab and Waypoint | Jacob Mammoliti | 32m |
Shows a concrete GitLab CI/CD pipeline that runs Waypoint commands to build, push, deploy and release a Python Flask app to GKE, using buildpacks, docker login… | ||
| Terraforming Jupyter and Dask: How to Get Your Own Cloud Data Science Platform on the Cheap | Chris Ostrouchov | 26m |
Open-source platform QHub deploys multi-tenant JupyterHub plus Dask on Kubernetes across AWS, GCP, DigitalOcean and on‑prem using Terraform, Helm and GitHub… | ||
| From Training to Serving: Machine Learning Models with Terraform | Jeff Zemerick | 27m |
Terraform provisions an AWS pipeline that queues JSON job messages to SQS, triggers a Java Lambda via EventBridge every minute, then starts GPU-capable ECS… | ||
| Integrating HashiCorp Vault & Active Directory: Pretty Fly for a Windows Guy | Paul Lerner | 31m |
Walks through running Vault as a single Windows executable, enabling LDAP auth against Active Directory, and enabling the AD secrets engine to rotate passwords… | ||
| Automating the CIS Foundations Benchmark for AWS with Terraform | Evan Gertis | 22m |
Automates the center for internet security (CIS) Foundations Benchmark for AWS using Terraform to codify IAM (admin group policy, MFA with session tokens… | ||
| Serverless Secrets with HashiCorp Vault | Gabe Maentz | 28m |
Shows how to authenticate serverless functions to HashiCorp Vault and retrieve short‑lived credentials across AWS Lambda, Google Cloud Functions and Azure… | ||
| Deploying Terraform Enterprise in a Highly Secure Environment at Morgan Stanley | Itay Cohai, Travis Smith | 22m |
Morgan Stanley deploys Terraform Enterprise inside private subnets by converting all access to outbound only, using an API-driven pipeline that pulls committed… | ||
| How to Build a Usable Terraform Provider in 20 hours | Robert Ross | 24m |
Built live on Twitch over 10 two-hour sessions, a usable Terraform provider for Fire Hydrant reaches working status in about 20 hours and publishes to the… | ||
| HashiCorp Vault and Getting Day 2 Operations Right | Kevin Tuffner | 23m |
Deploys must be Packer images built into CI/CD and provisioned with Terraform; policies, secrets engines and upgrades are codified so day‑2 changes are… | ||
| Building Reliability into Kubernetes using Chaos Experiments with Terraform | Yury Yineth Niño Roa, Jhonnatan Gil Chaves | 32m |
Claims that chaos experiments can be fully automated to improve Kubernetes reliability by provisioning infra with Terraform automation on AWS, installing… | ||
| Integration and Unit Testing on HashiCorp Terraform and Nomad | Thiago Carvalho | 27m |
Explains a practical workflow for unit and integration testing Terraform and Nomad using Terratest and Kitchen to exercise the Nomad API, shows solitary vs… | ||
| How to Store Secrets—and When Do You Need Them—in HashiCorp Vault | Guy Barros | 28m |
Shifts the question from how to store secrets to when do I need my secrets and maps a practical Vault adoption path from API foundations through namespaces… | ||
| How Terraform and Behavior-Driven Development Help Shift Security Left | Josh Amitage | 26m |
Shows how terraform-compliance and BDD produce an executable specification that runs against terraform plans (prevention only), enforces tag presence and… | ||
| Terraform Structure & Enablement | Lachlan White | 31m |
Practical roadmap for Terraform adoption: start from ad hoc TF files (terith), move to local modules and env folders (terramod), then use Terraform… | ||
| Multi-Tenant Nomad: Considerations for Your Cluster | Anthony Burke | 30m |
Covers concrete steps to make a HashiCorp Nomad cluster multi-tenant: create logical partitions with Namespaces, limit consumption with Resource Quotas… | ||
| Packer: A Swiss Army Knife for Architectural Enablement | Ryan J. Price | 33m |
Argues that HashiCorp Packer solves real organization friction by building parallelized VM images across clouds and hypervisors, with 30+ built‑in builders and… | ||
| Edge Security in Untrusted IoT Environments | Issac Goldstand | 36m |
Demonstrates a concrete edge security design that uses HashiCorp Vault as a PKI and secrets broker to issue short‑lived X.509 certs (mTLS) for OpenVPN… | ||
| Observability with HashiCorp Consul Connect (Service Mesh) | Bram Vogelaar | 24m |
Explains how to instrument a Consul Connect service mesh by enabling Consul Connect sidecar telemetry, exposing Envoy metrics on a local scrape port, and… | ||
| Secure Your Terraform Deploys in GitLab-CI with HashiCorp Vault | Mehdi Laruelle | 25m |
Shows a working pipeline that uses GitLab-CI + Terraform + HashiCorp Vault in AWS to replace static AWS keys with dynamic AWS creds by having Vault assume… | ||
| Adding Observability to HashiCorp Nomad Applications with Grafana | Cyril Tovena | 22m |
Deploys Grafana, Prometheus, Loki, Tempo into a Nomad cluster (demo uses Vagrant) and shows concrete configs: Consul service discovery, Promtail for logs, and… | ||
| HashiStack Loopback: How Does HashiCorp Use the HashiStack? | Jeffrey Hogan | 28m |
Engineering Services builds an internal HashiStack running Vault, Consul, Nomad and Terraform (Terraform Cloud / HCP), using Packer-built AMIs, ASGs and a… | ||
| Production-Ready Infrastructure + DevOps Workflows in 5 Minutes with Terraform + GitLab | Abubakar Siddiq Ango, Sri Rangan, Darby Frey | 30m |
Claim: GitLab CI/CD plus Terraform provisions a production-ready web stack in under five minutes and the demo shows it working end-to-end for a Rails app… | ||
| The State of Infrastructure Drift: What We Learned From 100+ DevOps Teams | Stephane Jourdan | 27m |
Survey of 150 teams and interviews with 50+ teams finds drift common: nearly half see it weekly and 41% once a month, a third lose ~1 hour every week or two… | ||
| Orchestration to Delivery: Integrating GitLab with HashiCorp Terraform, Packer, Vault, and Waypoint. | Abubakar Siddiq Ango | 13m |
Concrete integration patterns and outcomes: GitLab supplies managed Terraform state and a Terraform CI template that runs plan and apply and surfaces diffs… | ||
| Secure Your Multi-Cloud Delivery Pipeline with HashiCorp Vault | Vincent Poilvert | 31m |
Shows a concrete pipeline replacement for static high‑privilege credentials using HashiCorp Vault as an identity broker across private cloud plus multiple AWS… | ||
| Simple Deployment Pipelines with HashiCorp Waypoint | Suman Chakraborty | 27m |
A concrete pipeline built as a single HCL file uses Waypoint plus Cloud Native Buildpacks to produce an image, push it to a registry, and deploys to Google… | ||
| nothing matches | ||