HashiTalks 2022
2022-02-17..2022-02-18
-- online --
[HashiTalks 2019, HashiTalks 2020, HashiTalks 2021, HashiTalks 2022]
| title | author | length |
|---|---|---|
| Nomad as a HashiCorp Operating System | John Boero | 30m |
A minimal Linux image runs Nomad as PID 1 with a tiny kernel and static Go binaries, boots from disk or PXE, and becomes a Nomad client in about 2–10 seconds… | ||
| Nomad + Flatcar: A Harmonious Marriage of Lightweights | Iago López Galeiras | 23m |
Flatcar Container Linux pairs with Nomad as a minimal, secure host: immutable root /usr partition prevents container escape like the runc overwrite exploit… | ||
| Consul Terraform Sync - Awesome Use Cases | Lev Andelman | 25m |
Consul Terraform Sync (CTS) watches Consul and on changes generates terraform tfvars map of services and runs terraform apply, enabling concrete automations… | ||
| Bootstrapping a Multi-DC Cloud Native Observability Stack | Bram Vogelaar | 28m |
Bootstraps a full observability stack across two datacenters that survives an entire campus failure by wiring Prometheus, Loki, Tempo, Alertmanager and Grafana… | ||
| Inspecting Nomad Events Using Grafana Loki | Karan Sharma | 25m |
Collects Nomad event stream with nomad-events-sink, uses the Nomad Go client to subscribe and batch events (flush on batch size 5 or 5s idle timeout), forwards… | ||
| Policy as Code for Network as Code | Nico Vibert | 26m |
Demonstration uses Terraform Cloud + GitHub with three Sentinel policies attached to a workspace; Terraform plan shows six resources and Sentinel policies run… | ||
| How to Build a Multi-Context Lab for Kubernetes | Hoon Jo | 28m |
Builds a local multi‑context Kubernetes lab with Vagrant and the Ubuntu-k8s box from a provided repo, creating three clusters (bk s, hk s, wk s) with… | ||
| A Waypoint 0.7 Deep Dive | Saiyam Pathak | 29m |
Waypoint 0.7 shows a concrete pipeline: a single waypoint.hcl single-file defines build, deploy, release; a single command waypoint up triggers a Cloud Native… | ||
| Take Control of Your Data by Integrating HashiCorp Vault | Elif Mosessohn-Samedin, Andrei Buzoianu | 23m |
An end-to-end backup pipeline uses HashiCorp Vault + Vault Agent to inject secrets, Restic to create an encrypted repository, and Ansible over SSH to restore… | ||
| Simplify Networking in Kubernetes with Consul and Wireguard | Greg Robinson | 26m |
Runs a Wireguard server in-cluster exposed publicly and configures clients to use the cluster DNS so local machines resolve ClusterIP and .consul names. Uses a… | ||
| Forget About DB Credentials with Terraform, Vault and Kubernetes | Carlos Juan Gómez Peñalver | 18m |
Provisioned databases use Vault as the only holder of a usable root password, with Terraform automating DB, role and policy setup and Kubernetes using the k8s… | ||
| Service Mesh and Your Legacy Apps: Connecting to Kubernetes with Consul | Marc LeBlanc | 19m |
Consul 1.6’s Consul mesh gateway links a VM-based legacy data center and a GKE cluster so services appear in a single control plane; demo shows Helm installs… | ||
| Dynamic User Creation with MySQL on Kubernetes and HCP Vault | Sergey Pronin | 26m |
Percona XtraDB Cluster on Kubernetes plus HAProxy integrates with HCP Vault using Vault’s database secret engine to create just‑in‑time MySQL accounts. A… | ||
| How Sunrise Banks Built a Symmetric Multi Cloud Architecture with Terraform & Vault | Sanjay Narendran | 30m |
Describes a reproducible pattern that builds mirrored Azure and AWS datacenters by allocating /16 vnet/vpc slots, splitting each into eight security zones (~8k… | ||
| Changing with HashiCorp at Mastercard Data and Services | Ryler Hockenbury | 30m |
Describes a replatforming that moves app teams to own infrastructure with Terraform + vSphere, Code Owners and Bitbucket PRs, and Atlantis auto-apply, cutting… | ||
| How HashiCorp SREs Built HCP's Incident Management Program | Martin Smith, Michael Main | 35m |
HashiCorp builds an HCP incident program from 2019–2022 using the company RFC process to define goals and get teams on call within months, defines four… | ||
| How We Built a DevOps Dojo to Upskill Our Organization in Terraform | Brad McCoy | 19m |
Claims a real outcome: deployment time: 6 weeks → 1 hour. Describes building a reusable Terraform open source framework with encrypted remote state, templates… | ||
| Massive Terraform Imports and Why you should Avoid Building Monoliths | Joe Bell | 22m |
A platform team migrates a monolithic Terraform module that granted per-service-account IAM members and hits GCP's 1,500 assignment limit, forcing a migration… | ||
| Building an Internal Development Platform at Bloom and Wild with Terraform | Ivan Zupancic | 14m |
Platform team builds a repo-and-infra generator that uses Terraform Cloud to provision ECR and networking, creates a GitHub repo from a template, and wires… | ||
| Compliance At Scale: Hardened Terraform Modules at Morgan Stanley | Brett Tegart, Itay Cohai | 29m |
Morgan Stanley enforces cloud controls by shipping hardened Terraform modules plus pipeline checks: modules live in a private module registry, resources like… | ||
| 'Static Typing' in Vault | Glynn Forrest | 25m |
A concrete fix for mismatched S3 creds and other Vault secrets: a command-line tool called vault helper that uses JSON Schema to validate, describe and write… | ||
| Automating Image Pipelines with HCP Packer | Caleb Albers | 26m |
HashiCorp builds an automated image pipeline that uses HCP Packer channels as a cloud‑agnostic image registry and GitHub Actions to run Packer builds, spin up… | ||
| How to Migrate from Vault Open Source to Vault Enterprise | Nick Young | 30m |
Shows a concrete path that moves a Vault OSS cluster using DynamoDB into Vault Enterprise by running vault operator migrate with a migrate.hcl targetting… | ||
| Codify Your JWT-OIDC Vault Auth Method with Terraform | Guy Barros | 18m |
Shows how Terraform fully configures Vault JWT/OIDC auth for GitLab, Okta, and GitHub with working examples and a public repo, including the exact resources… | ||
| Zero Trust Security and Identity Management with Boundary | Suman Chakraborty | 29m |
Shows HashiCorp Boundary replacing VPN/bastion workflows with dynamic credentials via KMS, a controller/worker architecture and Postgres storage to proxy… | ||
| Upgrade Your Vault Using Failover | Laurentius Purba | 28m |
Upgrade uses a passive region to test a new Vault version before cutting over so production keeps running. Cluster architecture is two regional HA clusters… | ||
| Terraform in Edge Network Architectures | Robert Belson, Robbie Belson | 25m |
Shows Terraform provisioning of AWS Wavelength edge resources (subnets, carrier gateway, elastic IPs used as carrier IPs) across 17 locations, plus a small… | ||
| Exploring HashiCorp Vault and ArgoCD the GitOps Way | Tracy Holmes | 14m |
Compares HashiCorp Vault vs file-based GitOps secrets (Bitnami Sealed Secrets, sops, Kubernetes Secrets) and demonstrates a working ArgoCD pipeline that… | ||
| Developer-First Application Security and DevSecOps | Kevin Alwell | 24m |
Claims a 50% compound annual growth in credential leaks and shows a demo workflow that moves from a static repo secret to secret scanning with a ~95%… | ||
| Patterns of Evolution from Monolith to Microservices | Karina Mora | 24m |
Shows step-by-step moves from monolith to event-oriented microservices: build a microservice that first uses an anti-corruption layer instead of a DB, then add… | ||
| Spring Cloud Integration with HashiCorp Vault and Consul | Kris Iyer | 29m |
Practical demo of Spring Cloud integration with HashiCorp Vault and Consul, showing Vault sidecar for mounting secrets, Spring Cloud Vault using KV/Consul/AWS… | ||
| VaultPass: Enabling Teams to Share Secrets Confidentially | Chris Blum | 28m |
Browser extension that reads secrets from a HashiCorp Vault key-value store and autofills logins in Chrome and Firefox, backed by a Docker dev Vault at… | ||
| The Meshery Adapter for HashiCorp Consul | Shivay Lamba | 29m |
Meshery provides a management plane that already interfaces with Consul v1.8.4 via adapter v0.5.2, implemented as a Go server using gRPC/GraphQL and a React UI… | ||
| Splicing the Identity Based Access Gene into your Infrastructure DNA with HashiCorp Boundary | Joe Thompson | 32m |
Claims that infrastructure can auto-provision access by treating access as code and shows a working stack: Boundary 0.7 for identity-based TCP brokering… | ||
| From Intern to Engineer with Terraform - An African Automation Journey | Oreoluwa Adegbite | 23m |
Deimos runs a six-month paid internship sourced from a SheCode Africa bootcamp, teaches an SRE curriculum centered on Terraform, and reports four interns hired… | ||
| HashiCorp Vault and Jenkins - Leveraging AWS IAM to Empower a Hybrid Scenario | Piermarco Zerbini, Kevin De Notariis | 30m |
Built a Fargate container called Trust Manager that uses an IAM role, S3-stored Ansible inventory and the Vault AWS auth method to create AppRoles per… | ||
| Cloud Native Debugging in Production - Dig Deep into your agents | Shai Almog | 30m |
Demonstrates using continuous observability with a Lightroom agent wired into Nomad to inject logs, capture snapshots (non‑breaking breakpoints), and emit… | ||
| Best Practices for Terraform AWS Tags | Jirawat Uttayaya | 30m |
Introduces Terraform's default_tags (Terraform 0.12.31 + AWS provider 3.38.0) as a 10-line way to auto-tag almost every AWS resource, shows using… | ||
| Using tfsec to Scan Your Terraform Code | Owen Rumney | 30m |
tfsec scans .tf and .tf.json files and in the demo finds seven issues then reduces them to zero by adding an aws_s3_bucket_public_access_block and a KMS… | ||
| Building a Secure AWS Golden Image Pipeline with Packer, Vault and Terraform | Mihai Criveti, Elif Mosessohn-Samedin | 23m |
Demo shows a full CI/CD pipeline that uses Packer, Vault and Terraform to bake secure OS images, triggers OpenSCAP-to-Ansible remediations, and produces usable… | ||
| Importing Terraform Resources the Safe Way | Samuel Baena Hayas | 25m |
A practical procedure for importing Terraform-managed EC2 and Security Group resources into Terraform Cloud that avoids accidental destruction: prepare… | ||
| Writing High Quality Terraform Modules for Exponential Organizations | Leonardo Rodrigues de Oliveira | 26m |
Shows a reusable aws vpc module with main, variables, outputs and an examples directory and a GitHub repo; uses a count attribute to create subnets and… | ||
| Nomad the Easy Way - Creating GitHub & GitLab Pipelines in Minutes | Tracey Jaquith | 23m |
Claim: full CI/CD from commit to Nomad deploy in minutes using 15-line YAML and one NOMAD_TOKEN secret. Uses GitHub Actions (or GitLab Auto DevOps) to build… | ||
| Terraform Config Drift How to Handle Out of Band Infrastructure Changes | Ned Bellavance | 26m |
Explains exactly how Terraform detects and reacts to out‑of‑band changes: Terraform refreshes state against providers, treats managed vs non-managed resources… | ||
| Create Preview Environments for Terraform | Rita Sokolova | 24m |
Shows how Terraform, Terraform Cloud, GitHub Actions and Vercel combine to create a workspace per PR that Terraform Cloud creates, applies and later destroys… | ||
| Engineering the Ability to Destroy Non-Production with Terraform | Shlomo Bielak | 19m |
Claims a reproducible pipeline that adds a Terraform destroy stage to cut idle non‑production spend 40–50% and recover roughly $434B of wasted cloud cost by… | ||
| Building Efficient Continuous Integration Pipelines with Nomad, Vault and Jenkins | Bram Vogelaar | 39m |
Shows a concrete pipeline that wires Jenkins, Nomad and Vault so Jenkins autoscale job runners on Nomad, automatically installs plugins and config as code, and… | ||
| Rebuilding Infrastructure (as Code) | John Weigand | 25m |
Trimble moves from manual AWS provisioning to a unified codebase using Terraform Cloud, with environment-specific workspaces and a three-branch promotion… | ||
| Scaling Communities to be more Inclusive | Kunal Kushwaha | 17m |
Defines community by a shared struggle — newcomers overwhelmed by a large codebase and unsure where to start — and shows concrete responses: run weekly office… | ||
| nothing matches | ||