Registration Opens

Welcome Reception

Monday, 20 June

Registration Opens & Breakfast

Join HashiCorp Co-Founder and CTO Armon Dadgar, and CEO Dave McJannet as they kick off HashiConf Europe with the Opening Keynote, where you will hear the product updates and announcements that we have in store for you.

Gashouder

Armon Dadgar

Dave McJannet

Day 1 Opening Keynote

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This session will cover the path to infrastructure automation with a focus on the infrastructure provisioning workflows, the ecosystem, and infrastructure lifecycle management. We will highlight the most recent enhancements and features in Terraform and Packer, as well as our direction and vision for the next phases of infrastructure automation.

Transformatorhuis

Terraform

Packer

Harold Giménez

The Path to Modern Infrastructure Automation

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This session will explain the driving vision behind Nomad's recent changes, explain the upcoming features in Nomad, and provide insight into our long-term roadmap going forward. What is HashiCorp's plan for Nomad? Join this talk to find out!

Westerunie

Nomad

Michael Nomitch

Nomad: Past, Present, and Future

In this session, we will walk through the upcoming features and vision for Waypoint over the next six months.&nbsp;

Waypoint

HashiCorp Cloud Platform

Bukky Adebayo

Waypoint Roadmap

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nPoppy Rowse &amp; Chris Shepherd (Thoughtworks)\nNon-Technical Challenges of Platform Engineering&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[27]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[27]C[26]">Building successful infrastructure platforms is not just about IaC or using the latest technologies and tooling. Poppy and Chris will draw on their experiences of creating successful infra platforms to talk about why many technically awesome infra platforms fail. This will be a session about all of the non-technical aspects of building infrastructure platform, from strategy, product thinking, service design, and release planning, to team ways of working.

Vault

Chris Sheperd

Poppy Rowse

Non-Technical Challenges of Platform Engineering

Learn how NBIM tackles the challenge of brownfield deployments as they share their journey using Terraform and custom modules to self-service Azure AD applications.

Peter Barta

Terraforming Our Tenant: Self-Serving Apps as Code

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;The concept of cloud landing zones is standard practice for large corporations. Certain fundamentals need to be established: automation, blueprints, IAM, networking, and security. For Deutsche Bank, deploying to GCP was exciting but uncharted terrain. One of the key decisions has been the role granted to Terraform Enterprise. This talk will highlight the key features that have enabled teams to safely land in GCP, in production, during the first year of Deutsche Bank's partnership with Google.&quot;}" data-sheets-userformat="{&quot;2&quot;:14979,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;10&quot;:1,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:2236962},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">The concept of cloud landing zones is standard practice for large corporations. Certain fundamentals need to be established: automation, blueprints, IAM, networking, and security. For Deutsche Bank, deploying to GCP was exciting but uncharted terrain. One of the key decisions has been the role granted to Terraform Enterprise. This talk will highlight the key features that have enabled teams to safely land in GCP, in production, during the first year of Deutsche Bank's partnership with Google.

Thomas Chalmers

Jeremy Crawford

Steep Approach: Landing Safely in GCP With TFE

Lunch

Audience: Module Authors and Infrastructure Engineers
This lab is for infrastructure engineers who want to use Terraform features to validate infrastructure configuration and enforce compliance with organizational and industry standards.
Abstract&nbsp;
As your usage of Terraform matures and your organization grows, you will need to establish and enforce standards to ensure that infrastructure satisfies your organization's unique requirements and industry regulations. In this workshop, you will learn how to use Terraform features, such as pre- and post-conditions, and policy-as-code to validate your configuration and enforce policy for all deployments.

Virtual

Terraform Cloud: Validate Infrastructure and Enforce Policies

Audience: Intermediate Packer Users
This lab is for operators who are interested in building golden image pipelines. They are familiar with Packer and want to improve their organization&rsquo;s image management strategy by tracking and managing images across their organization.
Abstract&nbsp;
In this lab, you will use Packer to create a golden virtual machine (VM) image with security, monitoring, and logging tools built-in. You will then build a second image from the golden base image, reference it in Terraform configuration, and verify that it is valid using the HCP data source and a Terraform Cloud run task. Join us to learn best practices and considerations when building a golden image pipeline and how to leverage HCP Packer to simplify your workflows.

HCP Packer: Build a Golden Image Pipeline

This session will present how Terraform Cloud adds never before realized ways to provision, manage, and track infrastructure at scale.

Kyle Ruddy

Evolution of Infrastructure Management

Edge computing encompasses a wide variety of use cases - from managing customer-facing interfaces in retail stores, to online game servers co-located with users. High-latency environments are tricky to manage. This session covers how new features in Nomad 1.3 enable running workloads anywhere using HashiCorp Nomad.

James Rasell

How Nomad 1.3 Enables Running Work at the Edge

Learn how Booking.com leverages Terraform Enterprise to support 2,500 active development users on its private cloud.&nbsp;

Sentinel

Woody Christy

Using Terraform Enterprise to Support 2500+ Users 

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nBram Vogelaar (The Factory)\nRunning Trusted Payloads With Nomad and Waypoint&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[8]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[8]C[26]">This talk will focus on steps we can add to our build pipelines to protect ourselves from supply chain attacks using Nomad and Waypoint.

Bram Vogelaar

Running Trusted Payloads With Nomad and Waypoint

This session will provide a walkthrough of the "golden image factory" workflow enabled by HCP Packer. Learn how to track and publish machine images via our new multi-cloud artifact registry and then how to let your application developers provision those images with guardrails in Terraform Cloud.&nbsp;

Jordan Glasner

Olena Kulik

Golden Image Factory With HCP Packer & Terraform

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Employee Deep-dive\nNic Jackson (HashiCorp)\nProgressive Deployments With Consul Service Mesh&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="=&quot;Employee Deep-dive&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[-5]C[26]">During this session, learn the risks associated with application deployments and how Consul service mesh can reduce these risks. This will include how to use Consul to enable application developers to introduce a new version of their application into production in a measured and safe way, protecting the end user from any errors in the new version. The talk will cover everything you need to know, from patterns and procedures and how to set up the required software in your own environment.

Consul

Nic Jackson

Progressive Deployments With Consul Service Mesh

Waypoint was released in 2020, to streamline the build, deploy, and release process for developers. In this session, see how Waypoint is leveraged to build a PaaS-like experience for developers with WayPaaS, automating the whole lifecycle of Waypoint and integrating GitOps practices.

George Hantzaras

Building a PaaS With Waypoint

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nKris Buytaert &amp; Julien Pivotto (inuits.eu)\nObserving the HashiCorp Ecosystem From Prometheus&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[26]">Consul and Vault empower many production deployments. Therefore, monitoring them and understanding their behavior is critical to ensure business continuity. This talk will go over how to use Prometheus to monitor those services and will provide useful patterns you can apply to your local stack to do so. Lessons learned from the Nomad production stack will be highlighted as well as experience gathered at different customers.

Kris Buytaert

Julien Pivotto

Observing the HashiCorp Ecosystem From Prometheus

HashiCorp Vault Enterprise is the ideal solution at Swiss Federal Railways (SBB) to tackle their secrets management challenges. In less than 6 months SBB went from zero to production. In a joint session by SBB and Adfinis, they present their learnings, challenges, and integrations in an enterprise environment. They will provide insights into the multi-cloud architecture on OpenShift following cloud native practices and how they address Vault governance using their self-service portal.

Andreas Meister

Michael Hofer

Secrets Management at Swiss Federal Railways (SBB)

GoTo Financial is one of the biggest payment providers in Southeast Asia. In this talk, hear about their experience in transforming the management of stateful components lifecycle from IaC to GitOps approach.
The speakers will delve deep into how they have managed 2,500+ database servers with Terraform, ranging from provisioning, updating, auditing, security hardening, to setting up database-specific observability metrics.

Eko Simanjuntak

William Albertus Dembo

Achieving GitOps for Database Lifecycle at GoPay

Evening Social

Tuesday, 21 June

Breakfast

HashiCorp Co-Founder and CTO Armon Dadgar will open the second day of HashiConf Europe with another morning keynote.

Day 2 Opening Keynote

This talk will discuss the evolution of Vault in the past year and future direction (roadmap).&nbsp;

Vinod Muralidhar

Vault Updates & Future Directions

We often hear about the use of TF and TFE, but what about its use in large structure. Hear the story of OVHcloud, one of the biggest European hosting and cloud providers, with their challenges (large at-scale infra, security, self-provisioning via API) and the benefits. Was the choice to switch from an &ldquo;homemade&rdquo; solution to the migration of its teams to TFE easy? Aur&eacute;lie and Horacio will tell you this story through figures, anecdotes, and internal feedback from their teams.

Horacio Gonzalez

How a Top European Cloud Provider Migrated to TFE

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Boundary Product Roadmap Session\nLili Cosic &amp; Pete Pacent (HashiCorp)\nBoundary: Then and Now&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:2236962},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[9]C[21]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[9]C[26]">Since its initial delivery at HashiConf 2020, Boundary has made massive strides in providing users with a comprehensive solution to their secure remote access needs. Join us to learn more about this progress as well as what is next for Boundary.

Boundary

Lili Cosic

Pete Pacent

Boundary: Then and Now

At HashiConf 2021, we talked about phases of adopting Consul to address networking challenges and achieve zero trust security through the lens of a fictitious space exploration startup. Join us in continuing this journey, as we describe additional product capabilities with a focus on a new federation model that enables loosely coupled service mesh architectures.

Paul Banks

Consul - Product Updates and Future Vision

This session will show how Consul and Vault together can automate and secure access to your application using Consul Terraform Sync to automatically configure Boundary and Vault to generate a dynamic token for a Postgres database. Simple deployment of a new database to your Kubernetes will trigger automation for dynamic credentials, zero trust for human access, and rainbows with unicorns.

Lev Andelman

Auto-Configure Your Vault and Boundary With CTS

Roche is a Swiss multinational healthcare company focusing on both pharmaceutical and diagnostics. As a global provider of a diverse set of products typically installed on customer premises, Roche faces heterogeneous environments that need security credentials for communicating with remote services and platforms. Join this talk to learn how they use HashiCorp Vault, Consul, and other technologies to securely distribute credentials from their corporate network to systems across the world.

Harsha Vathsavayi

Leandro Javier Ausilio

Roche - Securing & Connecting Healthcare Platforms

Audience: Intermediate Consul Users
This Learn lab is intended for Consul operators and developers that have experience with Consul and want to learn about new Consul capabilities.
Abstract
This Learn lab features two topics, each topic will teach you how to consume two new Consul features; Vault as Secrets Management for Consul, and Consul API Gateway with HashiCorp Cloud Platform (HCP).
In the first part of the session, you will learn how to configure Vault as the secrets management for Consul in a Kubernetes environment. The second part of the session will teach you how to use Consul API Gateway with HCP.

Consul + Vault / Consul API Gateway

Audience: &nbsp;Intermediate Vault Operators/Administrators
This workshop is for operations and solution engineers who are looking to adopt HCP Vault instead of managing their own clusters.&nbsp;
Abstract&nbsp;
Two topics are covered in this Learn lab, including migration of a self-hosted Vault server to HashiCorp Cloud Platform (HCP) along with scaling and replication in HCP.
In the first part of the session, you will learn how to migrate a Vault server with Terraform codified configuration to HCP. The second part of the session will teach you about HCP Vault cluster scaling and performance replication.

HCP Vault Operations With Terraform

Operators today face an ever-growing list of runtimes to support: from container orchestrators like Kubernetes, Nomad, and ECS, to serverless platforms like Lambda, to VMs. In this deep dive, learn how Consul unifies networking across runtimes and helps implement zero-trust security, improve observability, and increase reliability.

Luke Kysow

Eric Haberkorn

Multi-Runtime Service Mesh With Consul

Learn how to create an automated process system that automatically grants access to infrastructure for on-call engineers when an incident is triggered and revokes access once the incident is resolved. The talk will walk through the steps required to build a fully automated event-driven workflow using HashiCorp Boundary, Consul, and Vault that gives engineers the required access while adhering to the principle of least privilege, managed by a central security policy.

Kerim Satirli

Event-Driven Access Controls

Hear about the process of integrating HashiCorp Vault Enterprise in TomTom - the choice of HashiCorp Vault for secret management, the process of creating the first POC (OSS), MVP, and what the challenges were. Learn about TomTom's automatization of infrastructure deployments, Vault management in Terraform, and the ups and downs of that. Lastly, see how Vault was integrated with Kubernetes and how the secret management solution is being offered to clients (developers).

Neven Vucinic

Our Journey Into Secrets Management With Vault

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Customer\nIgnacio Fuentes-Villegas (BBVA)\nVault in BBVA, Secrets in a Hybrid Architecture&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-11]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-11]C[26]">Hear about Vault usage within BBVA's new architecture, implementing all services supporting the best banking application of the world for five years in a row (The Forrester Digital Experience Review). The speakers will cover how and why they transitioned from OSS to Enterprise, to adopt BBVA's required hybrid architecture on-prem / AWS, in both Spain and Mexico. Vault has become one of the best replicated services BBVA, with an outstanding performance and a flawless implementation.

Ignacio Fuentes-Villegas

Vault in BBVA, Secrets in a Hybrid Architecture

How do you better secure service-to-service communication? In this session, you will learn the ways you can combine Consul and Vault to encrypt traffic between services, control API authorization, and implement least-privilege access across services. Dive into setting up Vault to manage certificates for Consul API Gateway and service mesh on Kubernetes, Consul-Terraform-Sync to automate Vault configuration, and Consul intentions and Vault secrets engines to control access to services.

Rosemary Wang

Secure Together: Consul + Vault

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;The need for secure remote access to dynamic, cloud-based resources is growing rapidly, and traditional access solutions are no longer suitable for protecting critical infrastructure resources at scale. Join this talk to hear about the latest trends in identity-based security and to see a demo of how HashiCorp Boundary and Microsoft Azure Active Directory are transforming privileged access with automated, simple, and secure remote access. Pete Pacent of HashiCorp will be co-presenting.&quot;}" data-sheets-userformat="{&quot;2&quot;:15299,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">The need for secure remote access to dynamic, cloud-based resources is growing rapidly, and traditional access solutions are no longer suitable for protecting critical infrastructure resources at scale. Join this talk to hear about the latest trends in identity-based security and to see a demo of how HashiCorp Boundary and Microsoft Azure Active Directory are transforming privileged access with automated, simple, and secure remote access. Pete Pacent of HashiCorp will be co-presenting.

Jonathan Lyon

Secure Remote Access With Boundary and Azure AD

Wix uses multi-regional, replicated clusters running on Kubernetes. Upgrading these at scale can be a chore, so they took the documentation and automated them using a CD pipeline. In this talk, you will learn how they went from manual upgrades to fully automated upgrades clusters at scale.

Moran Frimer

Using CD Pipelines to Upgrade Vault at Scale

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Consul provides the ability to connect and route services running across different data centers. Join us for a deep dive and demo that highlights how to deploy and federate these Consul clusters, while securing service to service communication.&quot;}" data-sheets-userformat="{&quot;2&quot;:15235,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16776960},&quot;10&quot;:1,&quot;11&quot;:0,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}" data-sheets-note="Consul 1.13 introduces a new federation model that enables connecting and routing to services running across independent service mesh environments. Join us for a deep dive and demo that highlights how to deploy and peer service meshes across networking boundaries, which are common in large organizations with multiple autonomous product teams. We will describe how the new peering model provides authorization controls and secures service communication, between autonomous service meshes.
">Consul provides the ability to connect and route services running across different data centers. Join us for a deep dive and demo that highlights how to deploy and federate these Consul clusters, while securing service to service communication.

In-person Schedule

01:00 PM (UTC)

Registration Opens

03:00 PM (UTC)

Welcome Reception