2.0 -//Pentabarf//Schedule//EN PUBLISH PBFFVX@@cfp.cfgmgmtcamp.org -PBFFVX Infrastructure-as-code drifts aren't like Pokemon : you can't catch em all en en 20210206T100000 20210206T103000 0.03000

Infrastructure-as-code drifts aren't like Pokemon : you can't catch em all

There are a lot of juicy stories from the trenches to be told on infrastructure drift. Sure enough, we all do GitOps by the book! Or we all have the right processes in place. But we also have to interact with other teams. We also have to grant some level of access to our infrastructures to some services or tools that may eventually generate uncontrolled changes. What if we couldn't catch them all? What if all drift reporting so far was faulty? You can't efficiently improve what you don't track. We track coverage for unit tests, why not infrastructure as code coverage? How can we make sure our infrastructure code matches our actual infrastructure state? In this talk, using Terraform with AWS resources, I will show how infrastructure drift can go undetected despite our best efforts or tooling and cause issues and end the talk by showing our own tool driftctl, (just released under Apache-2.0 licence) that tracks IaC coverage and warns of infrastructure drift. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/PBFFVX/ D.infra Stephane Jourdan PUBLISH YRKSAZ@@cfp.cfgmgmtcamp.org -YRKSAZ A hands-off approach for your Terraform en en 20210206T103000 20210206T110000 0.03000

A hands-off approach for your Terraform

If Continuous Integration/Continuous Delivery is critical for application deployment, why is it not being equally leveraged to manage infrastructure. Most teams I've seen have reached the first goal of defining their infrastructure configuration as code (often with Terraform), but they tend to stop there. Access and/or education on how to run Terraform is given to a few select people, and they then run it in the wild jungle that is there own machine. In this talk, Jeff with highlight some of the techniques, tools, quick wins, advanced features, and key measurements for putting your Terraform code through the pipes of automation. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/YRKSAZ/ D.infra Jeff Knurek PUBLISH YGEZVP@@cfp.cfgmgmtcamp.org -YGEZVP State assessment and data validation using Ansible en en 20210206T110000 20210206T113000 0.03000

State assessment and data validation using Ansible

This talk will do a deep dive on how Ansible can be used to assess the operational state of your IT infrastructure (especially network appliances) and effectively take remediation actions as required. The following will be demonstrated for both Linux as well as network devices. Collect the current operational state from the remote host and convert it into normalised structure data. Define the desired state criteria in a standard’s based format Validate the current state data against the pre-defined criteria to identify if there is any deviation. Take corrective remediation action as required. Data validation PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/YGEZVP/ D.infra Ganesh B Nalawade PUBLISH 8REKHL@@cfp.cfgmgmtcamp.org -8REKHL Kubernetes Config Management Landscape en en 20210206T113000 20210206T120000 0.03000

Kubernetes Config Management Landscape

In a 30-minute talk it makes sense to talk about no more than a handful of tools. Will look into those that are more popular or growing fast. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/8REKHL/ D.infra Tomasz Tarczynski PUBLISH C3ZCYH@@cfp.cfgmgmtcamp.org -C3ZCYH An alternative to Heroku: An end-to-end open source infrastructure automation toolchain en en 20210206T120000 20210206T123000 0.03000

An alternative to Heroku: An end-to-end open source infrastructure automation toolchain

The talk will demonstrate how to make the most of free, open source infrastructure tooling to fully automate tests, monitoring, code deployment and infrastructure deployment. You can get a lot of mileage out of free! PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/C3ZCYH/ D.infra Cristina Muñoz PUBLISH HUXAUA@@cfp.cfgmgmtcamp.org -HUXAUA The Great Cloud Migration with Network Automation & Service Mesh en en 20210206T123000 20210206T130000 0.03000

The Great Cloud Migration with Network Automation & Service Mesh

How to Migrate to Cloud, Supercharged Step 1: Re-platform application on public cloud. Step 2: Deploy service mesh in public cloud and edge of datacenter. Step 3. Configure datacenter routing with network automation. Step 4: Send traffic using blue/green deployment to the new application. Step 5: Continue to run in both datacenter and public cloud. I’ll demonstrate how to add observability and failure tolerance to this workflow. By combining HashiCorp Consul service mesh and Consul Terraform Sync, I can manage, automate, and shape traffic in my hybrid environment from a single pane of glass. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/HUXAUA/ D.infra Rosemary Wang PUBLISH JNJ3VT@@cfp.cfgmgmtcamp.org -JNJ3VT your management layer should be cattle too en en 20210206T130000 20210206T133000 0.03000

your management layer should be cattle too

In this talk we will show how to fully automate the deployment and configuration of [Foreman](https://theforeman.org) using [Ansible](https://ansible.com), which allows for reproducible setups, redeployments and testing environments that actually match production. The presented solution should not (and can not) replace working backups, but it might still save you when the restore isn't going as expected or someone asks to start "fresh" while keeping all the important details the same as before. We will show how to deploy Foreman from scratch in an reproducible way, reusing the same bits the project uses itself. This will also include plugins like [Katello](https://theforeman.org/plugins/katello/) and [Ansible](https://theforeman.org/plugins/foreman_ansible/) for best possible client management later. We'll continue with integrating Foreman with compute resources and managing content in Katello, which will result in trivial deployments of further cattle systems from Foreman, which then can be managed via Ansible. The result is a set of playbooks that can be stored in a git repository and deployed at will. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/JNJ3VT/ D.infra Evgeni Golov PUBLISH GZETVZ@@cfp.cfgmgmtcamp.org -GZETVZ Registry native delivery of software content with Pulp3. en en 20210206T133000 20210206T140000 0.03000

Registry native delivery of software content with Pulp3.

Registry native delivery of software content with Pulp3. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/GZETVZ/ D.infra Ina Panova PUBLISH CAMHYU@@cfp.cfgmgmtcamp.org -CAMHYU Don't get stuck on Pulp 2! en en 20210206T140000 20210206T143000 0.03000

Don't get stuck on Pulp 2!

In this talk, we'll share: - how we are doing the migration - what are the benefits - when you want to use it - how it goes (demo) The target audience are Pulp 2 users. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/CAMHYU/ D.infra Tanya Tereshchenko PUBLISH XCGPDX@@cfp.cfgmgmtcamp.org -XCGPDX Host your own on-premise Ansible Galaxy en en 20210206T143000 20210206T150000 0.03000

Host your own on-premise Ansible Galaxy

A single container is all that is needed for setup. Once setup, I will demonstrate: * Creating one or more repositories to store Collections and Roles * Installing Role and Collection content using the `ansible-galaxy` CLI client from these repositories * Synchronizing Collections and Roles from galaxy.ansible.com * Uploading Collection content via `ansible-galaxy` CLI * Copying Collections and Roles between multiple repositories, simulating dev -> staging -> production environments * Perform these operations using a great UI, whenever possible, and APIs otherwise PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/XCGPDX/ D.infra Brian Bouterse PUBLISH GSDFGG@@cfp.cfgmgmtcamp.org -GSDFGG Principles, Patterns, and Practices for Effective Infrastructure as Code en en 20210206T150000 20210206T153000 0.03000

Principles, Patterns, and Practices for Effective Infrastructure as Code

Infrastructure as Code (IaC) is an approach that takes proven coding techniques used by software systems and extends it to infrastructure. It is one of the key DevOps practices that enable teams to deliver infrastructure, and the software running on it, rapidly and reliably, at scale. In this presentation, we will look at Principles, Patterns, and Practices for Effective Infrastructure as Code that have helped me and the teams I have worked with over the years. We will look at anecdotes about deploying & operating infrastructure and applications in production. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/GSDFGG/ D.infra Adarsh Shah PUBLISH RHRVBQ@@cfp.cfgmgmtcamp.org -RHRVBQ Config, config everywhere en en 20210206T153000 20210206T160000 0.03000

Config, config everywhere

In a micro service based architecture it's common to have to manage configurations and secrets based on different variables, such as the microservice, flavors of the microservice, the execution environment and data center, etc. Since it is an arduous task both in the time needed to add a new variable and to refactor existing ones I have created MHConfig. MHConfig is a microservice in charge of composing configurations and secrets according to different labels and notifying the clients who use it when a change has occurred, providing various features to facilitate this work as references to recurrent or global values, traceability of the clients using a configuration, access control lists to prevent obtain to other microservice configurations/secrets, etc. In this session I'm going to talk about how the tool works and how it can help solve common problems when managing configurations and secrets in a complex environment. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/RHRVBQ/ D.infra Juan Manuel Fdez PUBLISH 8BKLNJ@@cfp.cfgmgmtcamp.org -8BKLNJ Cluster API as Code en en 20210206T160000 20210206T163000 0.03000

Cluster API as Code

Cluster API is a great piece of technology, but managing and constructing the YAML can be painful and difficult. This talk introduces the audience to using Pulumi and custom built libraries for exposing Cluster API via TypeScript, Go, and Python. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/8BKLNJ/ D.infra David McKay PUBLISH HET7SC@@cfp.cfgmgmtcamp.org -HET7SC Scaling Release Management with GitOps en en 20210206T163000 20210206T170000 0.03000

Scaling Release Management with GitOps

Shipping operational knowledge into a software is a big milestone towards better configuration management. In this talk, I will explain how we introduced configuration management practices into release management team while leveraging the software engineering principles during this journey. I will start by clarifying what problem(s) were we trying to solve, namely: Lack of system Reliability, huge dependencies among silos, Rework between Dev, QA and release teams. Then, I will explain the solution that I proposed to solve these problems, namely: Service Offering Model, Killing environments gap and treating everything as CI (Configuration item). After that , I will move forward on challenges that I faced while trying to solve the issue: migration from Legacy system, security compliance & disconnected environment, .. and others. Finally, I will give overview about the solution implementation. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/HET7SC/ D.infra Abdennour TOUMI PUBLISH QUGC8W@@cfp.cfgmgmtcamp.org -QUGC8W Desktop Linux Management at Facebook en en 20210206T170000 20210206T173000 0.03000

Desktop Linux Management at Facebook

Facebook runs CentOS on its server fleet, and offers Fedora (and soon, CentOS) as supported Linux distributions on laptops and desktops. This is a recent development - we previously recommended Ubuntu LTS as a self-supported option, but found that switching to Fedora (and officially supporting it) allows for not only reusing the infrastructure already used in the server fleet (e.g. the pipeline for creating packages) but also to serve as an integration point for driving features into CentOS. I'll also discuss how we manage the desktop fleet, and contrast it with how servers are managed. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/QUGC8W/ D.infra Michel Salim PUBLISH RT8CWT@@cfp.cfgmgmtcamp.org -RT8CWT Application centric deployment with foreman / katello en en 20210206T173000 20210206T180000 0.03000

Application centric deployment with foreman / katello

foreman_acd is a new plugin for foreman developed by ATIX AG and released as open source. PUBLIC CONFIRMED Talk https://cfp.cfgmgmtcamp.org/fosdem2021/talk/RT8CWT/ D.infra Bernhard Suttner