Product Manager, Waypoint

Bukky Adebayo

In this session, we will walk through the upcoming features and vision for Waypoint over the next six months.&nbsp;

Waypoint

HashiCorp Cloud Platform

Waypoint Roadmap

Lev Andelman

This session will show how Consul and Vault together can automate and secure access to your application using Consul Terraform Sync to automatically configure Boundary and Vault to generate a dynamic token for a Postgres database. Simple deployment of a new database to your Kubernetes will trigger automation for dynamic credentials, zero trust for human access, and rainbows with unicorns.

Vault

Consul

Terraform

Boundary

Auto-Configure Your Vault and Boundary With CTS

Global Product Manager

Leandro Javier Ausilio

Roche is a Swiss multinational healthcare company focusing on both pharmaceutical and diagnostics. As a global provider of a diverse set of products typically installed on customer premises, Roche faces heterogeneous environments that need security credentials for communicating with remote services and platforms. Join this talk to learn how they use HashiCorp Vault, Consul, and other technologies to securely distribute credentials from their corporate network to systems across the world.

Roche - Securing & Connecting Healthcare Platforms

Principal Engineer

Paul Banks

At HashiConf 2021, we talked about phases of adopting Consul to address networking challenges and achieve zero trust security through the lens of a fictitious space exploration startup. Join us in continuing this journey, as we describe additional product capabilities with a focus on a new federation model that enables loosely coupled service mesh architectures.

Consul - Product Updates and Future Vision

Cloud Security Engineer

Peter Barta

Learn how NBIM tackles the challenge of brownfield deployments as they share their journey using Terraform and custom modules to self-service Azure AD applications.

Terraforming Our Tenant: Self-Serving Apps as Code

Solutions Architect

Calum Bell

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Customer\nMatthew Bull (Elanco Animal Health)\nJourney to Hybrid Multi-Cloud&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16773836},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-16]C[13]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-16]C[27]">In 2019, Elanco completed a corporate separation, achieving 95% cloud adoption, and now embarks on a hybrid multi-cloud journey with HashiCorp Terraform Cloud.

Journey to Hybrid Multi-Cloud

Matthew Bull

Matt Butcher

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nMatt Butcher (Fermyon)\nWebAssembly and Nomad for Next Wave Microservices&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16773836},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-2]C[13]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-2]C[27]">First came virtual machines. Then containers. Now WebAssembly is poised to be the next wave of cloud computing. With blazing-fast speeds, tiny binaries, and security by default, Wasm is the foundation for a new generation of microservices. When they began building their open source Wasm platform, they chose to build it on Nomad, Consul, and Vault. Attendees will leave understanding WebAssembly, its potential on the cloud, and why Nomad is the ideal orchestrator for Wasm.

Nomad

WebAssembly and Nomad for Next Wave Microservices

Kris Buytaert

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nKris Buytaert &amp; Julien Pivotto (inuits.eu)\nObserving the HashiCorp Ecosystem From Prometheus&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[26]">Consul and Vault empower many production deployments. Therefore, monitoring them and understanding their behavior is critical to ensure business continuity. This talk will go over how to use Prometheus to monitor those services and will provide useful patterns you can apply to your local stack to do so. Lessons learned from the Nomad production stack will be highlighted as well as experience gathered at different customers.

Observing the HashiCorp Ecosystem From Prometheus

Sr. Product Education Engineer

Daniele Carcasole

Audience: Intermediate Consul Users
This Learn lab is intended for Consul operators and developers that have experience with Consul and want to learn about new Consul capabilities.
Abstract
This Learn lab features two topics, each topic will teach you how to consume two new Consul features; Vault as Secrets Management for Consul, and Consul API Gateway with HashiCorp Cloud Platform (HCP).
In the first part of the session, you will learn how to configure Vault as the secrets management for Consul in a Kubernetes environment. The second part of the session will teach you how to use Consul API Gateway with HCP.
Note
The Virtual Learn Labs will take place on the HashiConf Event Platform, but will also be broadcast to the breakout tracks in Amsterdam. If you would like to ask the instructors questions about the lab, please log in to the HashiConf event platform to participate.

Consul + Vault / Consul API Gateway [Virtual Learn Lab]

Cloud Engineer

Thomas Chalmers

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;The concept of cloud landing zones is standard practice for large corporations. Certain fundamentals need to be established: automation, blueprints, IAM, networking, and security. For Deutsche Bank, deploying to GCP was exciting but uncharted terrain. One of the key decisions has been the role granted to Terraform Enterprise. This talk will highlight the key features that have enabled teams to safely land in GCP, in production, during the first year of Deutsche Bank's partnership with Google.&quot;}" data-sheets-userformat="{&quot;2&quot;:14979,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;10&quot;:1,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:2236962},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">The concept of cloud landing zones is standard practice for large corporations. Certain fundamentals need to be established: automation, blueprints, IAM, networking, and security. For Deutsche Bank, deploying to GCP was exciting but uncharted terrain. One of the key decisions has been the role granted to Terraform Enterprise. This talk will highlight the key features that have enabled teams to safely land in GCP, in production, during the first year of Deutsche Bank's partnership with Google.

Steep Approach: Landing Safely in GCP With TFE

Terraform Education Engineer

Dane Christiansen

Audience: Intermediate Packer Users
This lab is for operators who are interested in building golden image pipelines. They are familiar with Packer and want to improve their organization&rsquo;s image management strategy by tracking and managing images across their organization.
Abstract&nbsp;
In this lab, use Packer to create a golden virtual machine (VM) image with the Loki Docker plugin and Promtail built in. You will then build an application image from the golden base image, reference it in Terraform configuration, and verify that it is valid using the HCP data source and a Terraform Cloud run task. Finally observe the application streaming logs to Grafana using the tools it inherited from its golden base-image. Join us to learn how to build golden image pipelines for your immutable infrastructure with HCP Packer and Terraform Cloud.
Note
The Virtual Learn Labs will take place on the HashiConf Event Platform, but will also be broadcast to the breakout tracks in Amsterdam. If you would like to ask the instructors questions about the lab, please log in to the HashiConf event platform to participate.

Packer

HCP Packer: Build a Golden Image Pipeline [Virtual Learn Lab]

Principal Developer

Woody Christy

Learn how Booking.com leverages Terraform Enterprise to support 2,500 active development users on its private cloud.&nbsp;

Sentinel

Using Terraform Enterprise to Support 2500+ Users 

Senior Software Engineer

Lili Cosic

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Boundary Product Roadmap Session\nLili Cosic &amp; Pete Pacent (HashiCorp)\nBoundary: Then and Now&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:2236962},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[9]C[21]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[9]C[26]">Since its initial delivery at HashiConf 2020, Boundary has made massive strides in providing users with a comprehensive solution to their secure remote access needs. Join us to learn more about this progress as well as what is next for Boundary.

Boundary: Then and Now

Sr. Product Manager

Blake Covarrubias

Join us for a deep dive and demo of connecting and routing services running across different data centers with Consul.

Mesh Federation Deep Dive

Head of Cloud Product

Jeremy Crawford

DevOps Engineer

Kevin De Notariis

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Customer\nKevin De Notariis (Yoox Net-A-Porter Group)\nVault &amp; AWS Lambda - Towards a Sub-Minute Recovery&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16773836},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-5]C[13]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-5]C[27]">Hear about how Yoox Net-A-Porter Group solved the challenge of making operations on a Vault cluster hosted on AWS and how to construct a scalable infrastructure. In particular, the operations of demoting/promoting Vault DR clusters, generating DR operations batch tokens, switching the weights of a DNS weighted-policy between DR clusters' endpoints and more. Leveraging all these lambdas, they managed to have a Mean Time To Recovery (MTTR) of just, in principle, a couple of seconds.<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Customer\nKevin De Notariis (Yoox Net-A-Porter Group)\nVault &amp; AWS Lambda - Towards a Sub-Minute Recovery&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16773836},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-5]C[13]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-5]C[27]">

Vault & AWS Lambda - Towards a Sub-Minute Recovery

Cloud Platform Engineer

William Albertus Dembo

GoTo Financial is one of the biggest payment providers in Southeast Asia. In this talk, hear about their experience in transforming the management of stateful components lifecycle from IaC to GitOps approach.
The speakers will delve deep into how they have managed 2,500+ database servers with Terraform, ranging from provisioning, updating, auditing, security hardening, to setting up database-specific observability metrics.

Achieving GitOps for Database Lifecycle at GoPay

Jonathan Frappier

Audience: &nbsp;Intermediate Vault Operators/Administrators
This workshop is for operations and solution engineers who are looking to adopt HCP Vault instead of managing their own clusters.&nbsp;
Abstract&nbsp;
Two topics are covered in this Learn lab, including migration of a self-hosted Vault server to HashiCorp Cloud Platform (HCP) along with scaling and replication in HCP.
In the first part of the session, you will learn how to migrate a Vault server with Terraform codified configuration to HCP. The second part of the session will teach you about HCP Vault cluster scaling and performance replication.
Note
The Virtual Learn Labs will take place on the HashiConf Event Platform, but will also be broadcast to the breakout tracks in Amsterdam. If you would like to ask the instructors questions about the lab, please log in to the HashiConf event platform to participate.

HCP Vault Operations With Terraform [Virtual Learn Lab]

DevSecOps Tech Lead

Moran Frimer

Wix uses multi-regional, replicated clusters running on Kubernetes. Upgrading these at scale can be a chore, so they took the documentation and automated them using a CD pipeline. In this talk, you will learn how they went from manual upgrades to fully automated upgrades clusters at scale.

Using CD Pipelines to Upgrade Vault at Scale

Security Manager

Ignacio Fuentes-Villegas

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Customer\nIgnacio Fuentes-Villegas (BBVA)\nVault in BBVA, Secrets in a Hybrid Architecture&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[-11]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[-11]C[26]">Hear about Vault usage within BBVA's new architecture, implementing all services supporting the best banking application of the world for five years in a row (The Forrester Digital Experience Review). The speakers will cover how and why they transitioned from OSS to Enterprise, to adopt BBVA's required hybrid architecture on-prem / AWS, in both Spain and Mexico. Vault has become one of the best replicated services BBVA, with an outstanding performance and a flawless implementation.

Vault in BBVA, Secrets in a Hybrid Architecture

VP R&D, Infrastructure Products

Harold Giménez

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This session will cover the path to infrastructure automation with a focus on the infrastructure provisioning workflows, the ecosystem, and infrastructure lifecycle management. We will highlight the most recent enhancements and features in Terraform and Packer, as well as our direction and vision for the next phases of infrastructure automation.

The Path to Modern Infrastructure Automation

Senior Product Manager

Jordan Glasner

This session will provide a walkthrough of the "golden image factory" workflow enabled by HCP Packer. Learn how to track and publish machine images via our new multi-cloud artifact registry and then how to let your application developers provision those images with guardrails in Terraform Cloud.&nbsp;

Golden Image Factory With HCP Packer & Terraform

Director of Developer Relations

Horacio Gonzalez

We often hear about the use of TF and TFE, but what about its use in large structure. Hear the story of OVHcloud, one of the biggest European hosting and cloud providers, with their challenges (large at-scale infra, security, self-provisioning via API) and the benefits. Was the choice to switch from an &ldquo;homemade&rdquo; solution to the migration of its teams to TFE easy? Aur&eacute;lie and Horacio will tell you this story through figures, anecdotes, and internal feedback from their teams.

How a Top European Cloud Provider Migrated to TFE

Sr Software Engineer & Engineering Lead

Eric Haberkorn

Operators today face an ever-growing list of runtimes to support: from container orchestrators like Kubernetes, Nomad, and ECS, to serverless platforms like Lambda, to VMs. In this deep dive, learn how Consul unifies networking across runtimes and helps implement zero-trust security, improve observability, and increase reliability.

Multi-Runtime Service Mesh With Consul

Director, Cloud Platform Engineering

George Hantzaras

Waypoint was released in 2020, to streamline the build, deploy, and release process for developers. In this session, see how Waypoint is leveraged to build a PaaS-like experience for developers with WayPaaS, automating the whole lifecycle of Waypoint and integrating GitOps practices.

Building a PaaS With Waypoint

Sr. Product Design Manager

Hannah Hearth

Head of Engineering

Michael Hofer

HashiCorp Vault Enterprise is the ideal solution at Swiss Federal Railways (SBB) to tackle their secrets management challenges. In less than 6 months SBB went from zero to production. In a joint session by SBB and Adfinis, they present their learnings, challenges, and integrations in an enterprise environment. They will provide insights into the multi-cloud architecture on OpenShift following cloud native practices and how they address Vault governance using their self-service portal.

Secrets Management at Swiss Federal Railways (SBB)

Developer Advocate

Nic Jackson

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Employee Deep-dive\nNic Jackson (HashiCorp)\nProgressive Deployments With Consul Service Mesh&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="=&quot;Employee Deep-dive&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[-5]C[26]">During this session, learn the risks associated with application deployments and how Consul service mesh can reduce these risks. This will include how to use Consul to enable application developers to introduce a new version of their application into production in a measured and safe way, protecting the end user from any errors in the new version. The talk will cover everything you need to know, from patterns and procedures and how to set up the required software in your own environment.

Progressive Deployments With Consul Service Mesh

Sr. Software Engineering Manager

Olena Kulik

Luke Kysow

Principal Program Manager, Identity Engineering

Jonathan Lyon

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;The need for secure remote access to dynamic, cloud-based resources is growing rapidly, and traditional access solutions are no longer suitable for protecting critical infrastructure resources at scale. Join this talk to hear about the latest trends in identity-based security and to see a demo of how HashiCorp Boundary and Microsoft Azure Active Directory are transforming privileged access with automated, simple, and secure remote access. Pete Pacent of HashiCorp will be co-presenting.&quot;}" data-sheets-userformat="{&quot;2&quot;:15299,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:3,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;16&quot;:9}">The need for secure remote access to dynamic, cloud-based resources is growing rapidly, and traditional access solutions are no longer suitable for protecting critical infrastructure resources at scale. Join this talk to hear about the latest trends in identity-based security and to see a demo of how HashiCorp Boundary and Microsoft Azure Active Directory are transforming privileged access with automated, simple, and secure remote access. Pete Pacent of HashiCorp will be co-presenting.

Secure Remote Access With Boundary and Azure AD

Software Engineering Team Lead & Security Architect

Andreas Meister

Sr. Director, Product Management

Vinod Muralidhar

This talk will discuss the evolution of Vault in the past year and future direction (roadmap).&nbsp;

Vault Updates & Future Directions

Product Manager, Nomad

Michael Nomitch

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This session will explain the driving vision behind Nomad's recent changes, explain the upcoming features in Nomad, and provide insight into our long-term roadmap going forward. What is HashiCorp's plan for Nomad? Join this talk to find out!

Nomad: Past, Present, and Future

Lead Product Manager, Boundary

Pete Pacent

Principal Software Architect & Co-Founder

Julien Pivotto

James Rasell

Edge computing encompasses a wide variety of use cases - from managing customer-facing interfaces in retail stores, to online game servers co-located with users. High-latency environments are tricky to manage. This session covers how new features in Nomad 1.3 enable running workloads anywhere using HashiCorp Nomad.

How Nomad 1.3 Enables Running Work at the Edge

Product Education Engineer

Eddie Rowe

Business Analyst

Poppy Rowse

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nPoppy Rowse &amp; Chris Shepherd (Thoughtworks)\nNon-Technical Challenges of Platform Engineering&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[27]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[27]C[26]">Building successful infrastructure platforms is not just about IaC or using the latest technologies and tooling. Poppy and Chris will draw on their experiences of creating successful infra platforms to talk about why many technically awesome infra platforms fail. This will be a session about all of the non-technical aspects of building infrastructure platform, from strategy, product thinking, service design, and release planning, to team ways of working.

Non-Technical Challenges of Platform Engineering

Senior Technical Marketing Manager

Kyle Ruddy

This session will present how Terraform Cloud adds never before realized ways to provision, manage, and track infrastructure at scale.

Evolution of Infrastructure Management

Sr. Developer Advocate

Kerim Satirli

Learn how to create an automated process system that automatically grants access to infrastructure for on-call engineers when an incident is triggered and revokes access once the incident is resolved. The talk will walk through the steps required to build a fully automated event-driven workflow using HashiCorp Boundary, Consul, and Vault that gives engineers the required access while adhering to the principle of least privilege, managed by a central security policy.

Event-Driven Access Controls

Nomad Engineering Team Lead

Michael Schurter

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This session will explain the driving vision behind Nomad's recent changes, explain the upcoming features in Nomad, and provide insight into our long-term roadmap going forward. What is HashiCorp's plan for Nomad? Join this talk to find out! 
<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Terraform, Packer Product Roadmap Session\nHarold Gim&eacute;nez (HashiCorp)\nThe Path to Modern Infrastructure Automation&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[5]C[22]&amp;&quot; Product Roadmap Session&quot;&amp;CHAR(10)&amp;'Speaker Tracker'!R[5]C[27]">This is an abridged version of the full session, which will take place live in Amsterdam. The full version will be available on demand after the conference.

Nomad: Past, Present, and Future [Abridged]

Tech Lead

Chris Shepherd

Brian Shumate

Eko Simanjuntak

Product Education Engineer, Terraform

Rita Sokolova

Audience: Module Authors and Infrastructure Engineers
This lab is for infrastructure engineers who want to use Terraform features to validate infrastructure configuration and enforce compliance with the Styra OPA run task.
Abstract&nbsp;
In this lab, use both Terraform preconditions and Terraform Cloud run tasks to validate configuration and enforce policy compliance. First, use Terraform preconditions to make sure that users don&rsquo;t deploy bastion hosts that are too big. Then, configure a Terraform Cloud run task to enforce Styra OPA policies that prevent users from creating AWS security groups that allow public ingress. Finally, define organizational policies that only let specific Terraform Cloud users deploy infrastructure changes on Fridays. 
Note
The Virtual Learn Labs will take place on the HashiConf Event Platform, but will also be broadcast to the breakout tracks in Amsterdam. If you would like to ask the instructors questions about the lab, please log in to the HashiConf event platform to participate.

Terraform Cloud: Validate Infrastructure and Enforce OPA Policies [Virtual Learn Lab]

DevOps Lead

Harsha Vathsavayi

DevOps Cloud Engineer

Bram Vogelaar

<span data-sheets-value="{&quot;1&quot;:2,&quot;2&quot;:&quot;Community\nBram Vogelaar (The Factory)\nRunning Trusted Payloads With Nomad and Waypoint&quot;}" data-sheets-userformat="{&quot;2&quot;:1055683,&quot;3&quot;:{&quot;1&quot;:0},&quot;4&quot;:{&quot;1&quot;:2,&quot;2&quot;:16777215},&quot;9&quot;:1,&quot;10&quot;:1,&quot;11&quot;:4,&quot;12&quot;:0,&quot;14&quot;:{&quot;1&quot;:2,&quot;2&quot;:0},&quot;15&quot;:&quot;Arial&quot;,&quot;23&quot;:1}" data-sheets-formula="='Speaker Tracker'!R[8]C[12]&amp;CHAR(10)&amp;'Speaker Tracker'!R[8]C[26]">This talk will focus on steps we can add to our build pipelines to protect ourselves from supply chain attacks using Nomad and Waypoint.

Running Trusted Payloads With Nomad and Waypoint

Senior DevOps/Application Engineer

Neven Vucinic

Hear about the process of integrating HashiCorp Vault Enterprise in TomTom - the choice of HashiCorp Vault for secret management, the process of creating the first POC (OSS), MVP, and what the challenges were. Learn about TomTom's automatization of infrastructure deployments, Vault management in Terraform, and the ups and downs of that. Lastly, see how Vault was integrated with Kubernetes and how the secret management solution is being offered to clients (developers).

Our Journey Into Secrets Management With Vault

Rosemary Wang

How do you better secure service-to-service communication? In this session, you will learn the ways you can combine Consul and Vault to encrypt traffic between services, control API authorization, and implement least-privilege access across services. Dive into setting up Vault to manage certificates for Consul API Gateway and service mesh on Kubernetes, Consul-Terraform-Sync to automate Vault configuration, and Consul intentions and Vault secrets engines to control access to services.

Featured Speakers