Registration opens

An open session to help prepare for HashiCorp certification exams. Study alongside your peers and experts, plus get access to exclusive preparation content.&rdquo;

Foothill G1

Certification study hall

Welcome reception

Tue, Oct 10

HashiCorp certifications offer cloud engineers a way to enhance their career by demonstrating their verified knowledge, skills, and expertise in HashiCorp products.&nbsp;
At&nbsp;HashiConf in San Francisco&nbsp;this year, we are offering attendees a chance to attempt an Associate-level exam for free with their&nbsp;in-person ticket. This is a unique opportunity to take your certification exam at a live, in-person testing event, and to do so without the $70 USD exam fee.&nbsp;
To take part in on-site testing, you will choose from our three Associate-level certifications, Terraform Associate 003, Vault Associate 002, and Consul Associate 002, and pick a day and time slot that works best for the rest of your conference schedule. Then, if you earn your certification during the conference, you&rsquo;ll receive your badge, certificate, and a special HashiCorp Certified sticker to wear throughout the conference to showcase your achievement.&nbsp;
Prepare for your exam ahead of time by joining us at Certification Study Hall on Tuesday, October 10. This will be dedicated time to study alongside your peers, ask questions of our HashiCorp experts, and get access to exclusive preparation materials only available at HashiConf San Francisco.&nbsp;
Exam appointment slots are&nbsp;limited&nbsp;and&nbsp;registration is required. Be sure to register before the event to save your spot.
<a href="https://hashiconf.com/2023/certifications">Learn more about how our certification exam testing at HashiConf San Francisco.</a>

Foothill G1-2

Terraform

Consul

Vault

Certification testing: Session #1

Co-Founder and CTO of HashiCorp, Armon Dadgar will kick off HashiConf with the opening keynote.&nbsp;

Yerba Buena 7-9

HashiCorp Cloud Platform

Boundary

Waypoint

Packer

Sentinel

Nomad

Armon Dadgar

Opening keynote

In this session, we will share the latest features and capabilities of Terraform, Terraform Cloud and HCP Packer, providing insight into the latest improvements and what to expect next.

Harold Giménez

Terraform and Packer roadmap

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Boundary has always been focused on simplifying how users access infrastructure resources in a secure manner. Boundary 0.14 is another example of our commitment to improving the user workflow and management of Boundary. Learn about how these improvements further simplify the the user experience for both end users and administrators.&quot;}" data-sheets-userformat="{&quot;2&quot;:14851,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">Boundary has always been focused on simplifying how users access infrastructure resources in a secure manner. Boundary 0.14 is another example of our commitment to improving the user workflow and management of Boundary. Learn about how these improvements further simplify the the user experience for both end users and administrators.

Yerba Buena 1-6

Van Phan

Further simplifying remote user access with Boundary

Consul helps you securely connect applications running in any environment, at any scale. Consul observability features let you monitor your service mesh so you can improve performance and debug your distributed services with precision. 
In this Learn Lab, you will troubleshoot a demo app using Consul. First, you will use Consul to gain deeper insight into your services with access logging and proxy metrics. Then, you will connect your cluster to HCP to further expand your service mesh insights.
Prerequisites:
<ul>
 <li style="font-weight: 400;" aria-level="1">An <a href="https://aws.amazon.com/account/">AWS account</a> configured for <a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs#authentication-and-configuration">use with Terraform</a></li>
 <li style="font-weight: 400;" aria-level="1">An <a href="https://portal.cloud.hashicorp.com/sign-in">HCP account</a> configured for <a href="https://registry.terraform.io/providers/hashicorp/hcp/latest/docs/guides/auth">use with Terraform</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html">aws-cli &gt;= 2.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/terraform/downloads">terraform &gt;= 1.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://helm.sh/docs/using_helm/">helm &gt;= 3.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/consul/downloads">consul &gt;= 1.16.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/consul/docs/k8s/installation/install-cli">consul-k8s &gt;= 1.2.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://git-scm.com/downloads">git &gt;= 2.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://kubernetes.io/docs/tasks/tools/install-kubectl/">kubectl ~&gt; 1.27</a></li>
</ul>

Golden Gate C1-2

Eddie Rowe

Deep observability insights at any scale with Consul

Certification testing: Session #2

Take a technical deep-dive into the latest announcements for Terraform and Terraform Cloud, including how the new Terraform Test framework improves the module development workflow for both authors and consumers. Learn about what these enhancements mean for you, and see them in action with live demos.

Dan Barr

Integrated testing and more: What's new with Terraform Cloud

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Learn how to use Vault for modern PKI, certificate authority, and certificate management workflows in your organization. By leveraging Vault workflows and automation, you can avoid expensive expired certificate outages and run more efficiently without a lot of manual processes or heroics.&quot;}" data-sheets-userformat="{&quot;2&quot;:11011,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;16&quot;:9}">Learn how to use Vault for modern PKI, certificate authority, and certificate management workflows in your organization. By leveraging Vault workflows and automation, you can avoid expensive expired certificate outages and run more efficiently without a lot of manual processes or heroics.

David Mills

Beyond secrets: Using Vault to automate PKI

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Writing Vault ACL policies and testing them to ensure they meet security requirements is quite a challenge. However, fear not! HashiCorp Ambassador Ned Bellavance will show you how to harness the power of Python and unit tests to automate policy testing. Discover effective techniques and best practices to verify that your Vault ACL policies accurately reflect your security intent and leave with practical knowledge on how to automate and enhance your policy testing and deployment workflow.&quot;}" data-sheets-userformat="{&quot;2&quot;:8707,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;12&quot;:0,&quot;16&quot;:9}">Writing Vault ACL policies and testing them to ensure they meet security requirements is quite a challenge. However, fear not! HashiCorp Ambassador Ned Bellavance will show you how to harness the power of Python and unit tests to automate policy testing. Discover effective techniques and best practices to verify that your Vault ACL policies accurately reflect your security intent and leave with practical knowledge on how to automate and enhance your policy testing and deployment workflow.

Learn how to automate testing of Vault ACL policies using Python and unit tests. Ensure security requirements are met with ease.

Ned Bellavance

Testing Vault ACL policies with Python: Automating verification and intent

Managing secrets for an application is hard. Managing secrets at scale is even harder. Learn how we at athenahealth leveraged Vault to not only help our engineers manage secrets in a more reliable process, but also how we scaled to serve hundreds of millions of requests per day. What started as a desire to centralize secret storage has grown to become a core service that helps automate security workflows throughout our products.

Daniel Leich

Scalable secret storage with Vault

Lunch break

Certification testing: Session #3

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Wayfair has transformed access to cloud native infrastructure on Google Cloud using Terraform Enterprise. Our journey began with a growing Terraform monorepo and a custom pipeline built on OSS Terraform. While we battled problems such as pipeline maintenance and increasing review burden on platform teams, we built the next generation solution based on Terraform Enterprise and Google Cloud's folder structure to empower teams to decouple and own their infrastructure safely, with limited oversight.&quot;}" data-sheets-userformat="{&quot;2&quot;:8707,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;12&quot;:0,&quot;16&quot;:9}">Wayfair has transformed access to cloud native infrastructure on Google Cloud using Terraform Enterprise. Our journey began with a growing Terraform monorepo and a custom pipeline built on OSS Terraform. While we battled problems such as pipeline maintenance and increasing review burden on platform teams, we built the next generation solution based on Terraform Enterprise and Google Cloud's folder structure to empower teams to decouple and own their infrastructure safely, with limited oversight.

Nicholas Philbrook

Transforming access to cloud infrastructure with Terraform Enterprise

Covering the history of a leading European airline, how they got started with computing, their initial journey to the cloud, how we improved their cloud management with HashiCorp tools, starting with their primary cloud provider and moving to all cloud usage and how this improved the overall digital transformation efforts in the airline.

Covering the history of a leading European airline, how they got started with computing, their initial journey to the cloud, how we improved their cloud management with HashiCorp tools, starting with their primary cloud provider and moving to all cloud usage and how this improved the overall digital transformation efforts in the airline.

Rob Lazzurs

Launching an airline into the cloud

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform 1.6 lets you write unit and integration tests for your configuration and run them before deploying infrastructure, with the new &ldquo;terraform test&rdquo; command.\nIn this Learn Lab, you will write tests using the new test file syntax. Then you will develop your own testing strategy using the many ways Terraform supports deployment validation: check blocks, preconditions, postconditions, and now tests.&quot;}" data-sheets-userformat="{&quot;2&quot;:11009,&quot;3&quot;:{&quot;1&quot;:0},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;16&quot;:9}">Terraform 1.6 lets you write unit and integration tests for your configuration and run them before deploying infrastructure, with the new &ldquo;terraform test&rdquo; command.
<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform 1.6 lets you write unit and integration tests for your configuration and run them before deploying infrastructure, with the new &ldquo;terraform test&rdquo; command.\nIn this Learn Lab, you will write tests using the new test file syntax. Then you will develop your own testing strategy using the many ways Terraform supports deployment validation: check blocks, preconditions, postconditions, and now tests.&quot;}" data-sheets-userformat="{&quot;2&quot;:11009,&quot;3&quot;:{&quot;1&quot;:0},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;16&quot;:9}">In this Learn Lab, you will write tests using the new test file syntax. Then you will develop your own testing strategy using the many ways Terraform supports deployment validation: check blocks, preconditions, postconditions, and now tests.
Prerequisites:&nbsp;
<ul>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/terraform/downloads">Terraform 1.6+</a> installed locally</li>
 <li style="font-weight: 400;" aria-level="1">An <a href="https://aws.amazon.com/">AWS free tier account</a> that is <a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs#authentication-and-configuration">locally authenticated</a></li>
 <li style="font-weight: 400;" aria-level="1">A <a href="https://github.com/">GitHub account</a> configured with your local credentials</li>
 <li style="font-weight: 400;" aria-level="1">A <a href="https://app.terraform.io/">Terraform Cloud account</a> that is <a href="https://developer.hashicorp.com/terraform/tutorials/cloud-get-started/cloud-login">locally authenticated</a> and is <a href="https://developer.hashicorp.com/terraform/cloud-docs/vcs/github">connected to your GitHub account</a></li>
 <li style="font-weight: 400;" aria-level="1">Git installed locally</li>
 <li style="font-weight: 400;" aria-level="1">Your text editor, terminal, and browser of choice</li>
</ul>

Brian McClain

Test your Terraform configuration

Consul simplifies monitoring and observability for microservices-based architectures. Learn how to use Consul, Terraform, and Vault to reduce friction between developer and platform teams and gain meaningful insights through Prometheus and Grafana. Join us for a demo of a real-world multi-cloud example, and streamline your workflows with comprehensive monitoring and observability.

Learn how to use Consul, Terraform, and Vault to reduce friction between developer and platform teams and gain meaningful insights through Prometheus and Grafana.

Marc LeBlanc

Seamless platform-dev collaboration with Terraform, Vault, and Consul

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;The Innovation Labs at Verizon partner internally and externally to develop and test innovative solutions for 5G and MEC. Boundary is playing a key role in providing secure MEC access to collaborate with external partners. By the use of self-managed workers, deployed in private networks, Boundary ensures secure, zero-trust method of allowing access to MEC resources; solving for critical pain points such as access key control, managing bastion hosts, and control user access&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">The Innovation Labs at Verizon partner internally and externally to develop and test innovative solutions for 5G and MEC. Boundary is playing a key role in providing secure MEC access to collaborate with external partners. By the use of self-managed workers, deployed in private networks, Boundary ensures secure, zero trust method of allowing access to MEC resources; solving for critical pain points such as access key control, managing bastion hosts, and control user access.

Venkatesh Konanur

Secure collaboration with Boundary

Certification testing: Session #4

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Running on multiple clouds and providing a uniform service plane is a workflow that Nomad enables Void to leverage easily. Our adoption wasn't overnight though, and this talk will cover some of the key things we learned when adopting nomad, and why even today Nomad doesn't have exclusive ownership over a number of our machines.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">Running on multiple clouds and providing a uniform service plane is a workflow that Nomad enables Void to leverage easily. Our adoption wasn't overnight though, and this talk will cover some of the key things we learned when adopting nomad, and why even today Nomad doesn't have exclusive ownership over a number of our machines.

Michael Aldridge

Void's global polyglot fleet: Gradual adoption of Nomad

Join this session to learn how to create, govern, and manage a catalog of approved Terraform configurations using Terraform Cloud and AWS Service Catalog. Learn how to maintain least privilege access during provisioning and establish tag governance. Enable self-service provisioning in your multi-account environment with AWS Service Catalog hub-and-spoke model. Discover how you can build workflow for end users to quickly discover and self-service provision approved AWS resources.

Arnaud Coulondre

Taylor Brooks

Terraform Cloud self-service provisioning with AWS Service Catalog

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Create a Terraform provider with HashiCorp&rsquo;s Plugin Framework. Terraform providers let you manage resources via their underlying product APIs. The Plugin Framework is a Go SDK you will use to develop your own Terraform providers.\nIn this lab, you will create a Terraform provider for an example application. Once you know how to use the Framework, you can use it to create Terraform providers for your company&rsquo;s products, internal services, and third-party applications.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">Create a Terraform provider with HashiCorp&rsquo;s Plugin Framework. Terraform providers let you manage resources via their underlying product APIs. The Plugin Framework is a Go SDK you will use to develop your own Terraform providers.
<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Create a Terraform provider with HashiCorp&rsquo;s Plugin Framework. Terraform providers let you manage resources via their underlying product APIs. The Plugin Framework is a Go SDK you will use to develop your own Terraform providers.\nIn this lab, you will create a Terraform provider for an example application. Once you know how to use the Framework, you can use it to create Terraform providers for your company&rsquo;s products, internal services, and third-party applications.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">In this lab, you will create a Terraform provider for an example application. Once you know how to use the Framework, you can use it to create Terraform providers for your company&rsquo;s products, internal services, and third-party applications.
Prerequisites:
<ul>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/terraform/downloads">Terraform 1.6+</a> installed locally</li>
 <li style="font-weight: 400;" aria-level="1">The <a href="https://go.dev/">Go programming language v1.21+</a> installed locally</li>
 <li style="font-weight: 400;" aria-level="1">A <a href="https://github.com/">GitHub account</a> configured with your local credentials</li>
 <li style="font-weight: 400;" aria-level="1">Git installed locally</li>
 <li style="font-weight: 400;" aria-level="1">Your text editor, terminal, and browser of choice</li>
</ul>

Robin Norwood

Create a Terraform provider with the Plugin Framework

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;This talk will discuss how platform providers can provide robust mircroservice \&quot;review app\&quot; functionality using Consul service mesh to logically isolate one or more applications for testing purposes, using service resolvers, routers, and namespaces. Isolating services allows engineers to safely test changes with access to upstream and downstream dependencies, without imposing overhead in the form of standing up a complete review environment.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">This talk will discuss how platform providers can provide robust mircroservice "review app" functionality using Consul service mesh to logically isolate one or more applications for testing purposes, using service resolvers, routers, and namespaces. Isolating services allows engineers to safely test changes with access to upstream and downstream dependencies, without imposing overhead in the form of standing up a complete review environment.

Michael F. Weinberg

Microservice review apps with Consul service mesh

With the EQ Bank's growth over the last few years as Canada's leading digital bank and their focus on a zero trust approach while being fully cloud-native by 2026, they needed to anchor on a new generation of Privileged Access Management. EQ Bank chose its PAM platform on HashiCorp Boundary and Vault; this talk focuses on the journey so far and what lies ahead, and how EQ Bank is enabling access for privileged users while also dealing with the rise in non-human (machine) identities and secrets.

Tarun Khandelwal

Nicole Landry

Anchoring on a new generation privilege access management platform

Evening social at Hibernia

Wed, Oct 11

Certification testing: Session #5

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;HashiCorp Co-Founder and CTO Armon Dadgar will open the second day of HashiConf Global with another morning keynote.&quot;}" data-sheets-userformat="{&quot;2&quot;:15235,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Helvetica&quot;,&quot;16&quot;:10}">HashiCorp Co-Founder and CTO Armon Dadgar will open the second day of HashiConf with another morning keynote.

Day 2 keynote

This session covers Vault, BluBracket, and Boundary roadmaps and describes the HashiCorp vision for security products.

James Bayer

Pete Pacent

Vault and Boundary futures: The roadmap ahead

This session will cover practical advice for using HCP Consul to migrate on-prem services to the cloud, discuss the most common architectural patterns incorporating HCP Consul and outlines the shared responsibility model for operations that reduces overhead in your organization.

Steven Wang

Journey to the cloud with HCP Consul

Certification testing: Session #6

HCP Waypoint lets you describe your application's infrastructure and configurations with Terraform and make infrastructure available to your developers through HCP Waypoint and Terraform Cloud. In this Learn lab you will define your infrastructure and configurations with Terraform, make it available to developers in HCP Waypoint, and create a Waypoint application.
Prerequisites:&nbsp;
<ul>
 <li style="font-weight: 400;" aria-level="1">An HCP account</li>
 <li style="font-weight: 400;" aria-level="1">A TFC account</li>
 <li style="font-weight: 400;" aria-level="1">A GitHub account</li>
 <li style="font-weight: 400;" aria-level="1">Git installed locally</li>
 <li style="font-weight: 400;" aria-level="1">Waypoint CLI (most recent version) installed locally</li>
</ul>

Anthony Russo

Develop applications faster with HCP Waypoint

In this overview of HCP Vault Secrets, you will learn how to create, store, retrieve and organize secrets for your applications all without having to manage or operate a Vault server. The session will also cover integrations with popular cloud providers and CI systems as well as how to inspect activity logs to aid incident analysis.

Sam Pandey

Kelly Kitagawa

Simplifying cloud secrets with HCP Vault Secrets

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Learn how site reliability and platform engineering came together at Indeed to scale Vault into a resilient, reliable platform that delivers millions of secrets every day to globally distributed workloads. We'll take a deep dive into how we prioritize observability, set SLOs and SLAs, build out runbooks, and enable a team of platform engineers - unfamiliar with Vault's internals - to successfully handle common incidents.&quot;}" data-sheets-userformat="{&quot;2&quot;:11011,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;16&quot;:9}">Learn how site reliability and platform engineering came together at Indeed to scale Vault into a resilient, reliable platform that delivers millions of secrets every day to globally distributed workloads. We'll take a deep dive into how we prioritize observability, set SLOs and SLAs, build out runbooks, and enable a team of platform engineers - unfamiliar with Vault's internals - to successfully handle common incidents.

Marc Billow

All the 9s: Keeping Vault resilient and reliable

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;You&rsquo;re ready to build a platform for developers to improve developer experience. What&rsquo;s the right platform interface? In this session, Rosemary answers questions about handling Day 2 operations, access control, infrastructure dependency management, and local to remote development environments when building a developer platform. You&rsquo;ll learn how to use HCP Vault, Consul, Boundary, and Terraform to pave a &ldquo;golden path&rdquo; for developers across different teams, environments, and technologies.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">You&rsquo;re ready to build a platform for developers to improve developer experience. What&rsquo;s the right platform interface? In this session, Rosemary answers questions about handling Day 2 operations, access control, infrastructure dependency management, and local to remote development environments when building a developer platform. You&rsquo;ll learn how to use HCP Vault, Consul, Boundary, and Terraform to pave a &ldquo;golden path&rdquo; for developers across different teams, environments, and technologies.

Rosemary Wang

Building a developer platform? Ask these questions.

TBA 

Certification testing: Session #7

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;How Epic Games uses Nomad to reliably and securely convert creator content into games and experiences in Fortnite Creative 2.0 (UEFN) and for the future metaverse. These cooking jobs involve untrusted, user-generated content and use the Unreal Engine, running in the cloud, to render and convert assets that are then live-loaded into a running UEFN session. This Nomad-based pipeline is capable of handling tens of thousands of concurrent cooks.&quot;}" data-sheets-userformat="{&quot;2&quot;:8707,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;12&quot;:0,&quot;16&quot;:9}">How Epic Games uses Nomad to reliably and securely convert creator content into games and experiences in Fortnite Creative 2.0 (UEFN) and for the future metaverse. These cooking jobs involve untrusted, user-generated content and use the Unreal Engine, running in the cloud, to render and convert assets that are then live-loaded into a running UEFN session. This Nomad-based pipeline is capable of handling tens of thousands of concurrent cooks.

How Epic Games uses Nomad to reliably and securely convert creator content into games and experiences in Fortnite Creative 2.0 (UEFN) and for the future metaverse.

Paul Sharpe

Cooking with Nomad: Powering the Fortnite creator ecosystem

This deep dive shows how platform teams can use Terraform, Packer, and Waypoint to create seamless developer experience for creating and deploying applications. Starting with Terraform Cloud (TFC), we will show how you can create no-code modules to define the underlying application infrastructure and then leverage HCP Packer and HCP Waypoint to standardize and deploy applications. Using these tools, developers can enjoy a smooth and seamless workflow.

Roshan Chandna

Gerald Yerden II

Self-service infrastructure for application teams

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;HashiCorp Boundary is an identity-based secure access management tool. Boundary&rsquo;s session recording lets security administrators monitor and audit user access to your infrastructure.\nIn this Learn lab you will inject short-lived Vault credentials into Boundary sessions and record session activity to an Amazon S3 bucket. This lets you audit user actions and control user-to-machine access throughout your organization.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">HashiCorp Boundary is an identity-based secure access management tool. Boundary&rsquo;s session recording lets security administrators monitor and audit user access to your infrastructure. In this Learn lab you will inject short-lived Vault credentials into Boundary sessions and record session activity to an Amazon S3 bucket. This lets you audit user actions and control user-to-machine access throughout your organization.
Prerequisites:
<ul>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/boundary/docs/install-boundary/install">Boundary 0.13.1</a> or greater installed</li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://releases.hashicorp.com/boundary/">boundary-enterprise</a> binary locally downloaded</li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/vault/downloads">Vault 1.7</a> or greater installed</li>
 <li style="font-weight: 400;" aria-level="1">An <a href="https://portal.cloud.hashicorp.com/sign-in">HCP account</a></li>
 <li style="font-weight: 400;" aria-level="1">An <a href="https://aws.amazon.com/account/">AWS account</a> that is <a href="https://registry.terraform.io/providers/hashicorp/aws/latest/docs#authentication-and-configuration">locally authenticated</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html">aws-cli &gt;= 2.0</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://developer.hashicorp.com/terraform/downloads">Terraform 1.6+</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://git-scm.com/downloads">git 2.0+</a></li>
 <li style="font-weight: 400;" aria-level="1"><a href="https://jqlang.github.io/jq/">jq 1.6+</a></li>
 <li style="font-weight: 400;" aria-level="1">Your text editor, terminal, and browser of choice</li>
</ul>

Robin Beck

Enable session recording with HashiCorp Boundary and Vault

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Between 2022 and 2023, the cloud infrastructure team at PagerDuty had upgraded Nomad 3 times, made numerous changes to Vault, and jumped 6 major versions of Consul in just 6 weeks. And we didn't cause a major outage during or after any of the upgrades. Let's talk about how the cloud infrastructure team plans for and upgrades Nomad, Consul, and Vault with no downtime to our customers or the engineering teams at PagerDuty. We will cover some of our architecture, upgrades, and lessons learned.&quot;}" data-sheets-userformat="{&quot;2&quot;:15105,&quot;3&quot;:{&quot;1&quot;:0},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">Between 2022 and 2023, the cloud infrastructure team at PagerDuty had upgraded Nomad 3 times, made numerous changes to Vault, and jumped 6 major versions of Consul in just 6 weeks. And we didn't cause a major outage during or after any of the upgrades. 
<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Between 2022 and 2023, the cloud infrastructure team at PagerDuty had upgraded Nomad 3 times, made numerous changes to Vault, and jumped 6 major versions of Consul in just 6 weeks. And we didn't cause a major outage during or after any of the upgrades. Let's talk about how the cloud infrastructure team plans for and upgrades Nomad, Consul, and Vault with no downtime to our customers or the engineering teams at PagerDuty. We will cover some of our architecture, upgrades, and lessons learned.&quot;}" data-sheets-userformat="{&quot;2&quot;:15105,&quot;3&quot;:{&quot;1&quot;:0},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">Let's talk about how the cloud infrastructure team plans for and upgrades Nomad, Consul, and Vault with no downtime to our customers or the engineering teams at PagerDuty. We will cover some of our architecture, upgrades, and lessons learned.

Todd Whitney

HashiCorp upgrades the PagerDuty way

The engineering team at SPH Media is tasked with accelerating our digital initiatives, with new workloads and modernisation of existing applications and services. We started by addressing an intricate web of virtual private clouds (VPCs), where VPCs were connected to one another, as well as to an on-premises data center, via Direct Connect and transit gateways. As a consequence of this massive and deeply interconnected network, our cloud estate offered low visibility into the network traffic, and had started to suffer from IP address starvation. We use HCP Consul and Vault to transform how our services are connected and enrich our developer team's capabilities.

Yong Wen Chua

Nirosan Paramanathan

Transforming into a modern era of developer environments with service mesh

The cloud engineering team at Experian manages governance and standards across five cloud platforms: AWS, Azure, Google Cloud, Oracle Cloud, and Alibaba Cloud. In this presentation, I will show how we built a hybrid solution to build golden images across clouds using HCP Packer. We have also enabled a post-build configuration with Ansible, adding the logic that configures the required security, monitoring, and logging agents based on the cloud metadata at instance launch with images tested, updated, and published monthly.

In this presentation, I will show how we built a hybrid solution to build golden images across clouds using HCP Packer.

Natalia Marin

Managing a golden image factory across all major cloud platforms

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;BlackRock has 200 separate client environments in our SaaS platform. These environments include a mix of host-based &amp; cloud native workloads. We chose Vault Enterprise and Terraform to build out the infrastructure required to support application identity and secrets management for these workloads. We are about 2.5 years into our journey migrating our workloads our Vault solution. This session will discuss the challenges faced, solutions employed, and lessons learned building out Vault at scale.&quot;}" data-sheets-userformat="{&quot;2&quot;:15107,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">BlackRock has 200 separate client environments in our SaaS platform. These environments include a mix of host-based &amp; cloud native workloads. We chose Vault Enterprise and Terraform to build out the infrastructure required to support application identity and secrets management for these workloads. We are about 2.5 years into our journey migrating our workloads our Vault solution. This session will discuss the challenges faced, solutions employed, and lessons learned building out Vault at scale.

San Francisco schedule