Name: Glasgow Cloud Native June
Start: 2025-06-24T17:30:00+01:00
End: 2025-06-24T20:00:00+01:00
Location: Morgan Stanley Financial Advisors

This June at Glasgow Could Native we have 2 exciting talks for you, delivered by members of the local community!

**Tales of Running Istio Across Multiple Clusters in Prod: From 1.4 to 1.24**
Speakers: John Clark & Guy Templeton

Skyscanner adopted Istio to enable a resilient Kubernetes architecture - enabling an architecture that (barring some not so minor incidents) has allowed our services and platform to roll out changes to a global infrastructure serving 160m monthly travellers in a safe manner over the past 6 years as well as make use of a number of other benefits of service meshes.

It hasn't been without its challenges however - in particular we adopted Istio in prod all the way back at Istio 1.4, a very different time, as those familiar with Mixer, Citadel, Pilot, and Galley will be aware. We were even forced to create our own architecture to support a multi-cluster mesh before this was supported upstream. Over time we've wanted to reduce the areas where we were "Doing a Skyscanner" and get closer to vanilla Istio, allowing us to more easily upgrade and adopt upstream functionality.

Join us for the tale of the challenges from early adopters to 20+ versions of upgrades later.

*John is a senior software engineer at Skyscanner, where he's the SME on our Istio setup. He's been driving improvements internally and upstream in the open source project to enable significant improvements in efficiency whilst maintaining resiliency.*

*Guy is a principal software engineer at Skyscanner, working in the Production Platform org where he’s focused on providing the best possible platform for Skyscanner’s travelers and engineers. Within Skyscanner he's focused on enabling the rest of the engineering org to build on top of AWS reliably. He’s also a co-chair of Kubernetes’ SIG Autoscaling. When he's not knees-deep in YAML he can usually be found having type 2 fun on a bike.*

**SPIFFE & SPIRE for workload identity in zero trust architectures**
Speaker: Jason Costello

The CNCF SPIFFE project, and its reference implementation SPIRE, promise a bright future for workload identity; legacy systems with implicit trust and long-lived credentials can be replaced with open standards-based identity that is consistent and highly automated. Many top platform engineering teams are in the process of adopting these technologies in their architectures to enable *de facto* mutual TLS, and there’s been significant development in the core projects and their tooling over the last few years.

In this talk, we’ll introduce the SPIFFE standard and its open source projects, sketch out the path towards a modern workload identity landscape, and talk about some of the opportunities and challenges on the road ahead. We’ll also step through some example use cases with Kubernetes to keep things relevant and concrete to Cloud Nativers.

*Jason is a founding engineer at Cofide, where he works with the team to build products based on open standards that address the workload identity requirements of the modern zero trust architecture.*

Huge thanks to Morgan Stanley for hosting us!

**Schedule:**
5.30pm - Doors open, food and drink courtesy of Morgan Stanley
6.00pm - Talks
7.45pm - Wrap Up

**Please note that you must RSVP via [Meetup.com](http://Meetup.com) at least 24 hours prior in order to attend this event!**

**Code of Conduct**
Attendees are required to adhere to our [Code of Conduct](https://github.com/cncf/foundation/blob/main/code-of-conduct.md).

Nick Ebbitt

Graham Packer

Cloud Native Glasgow

Technology

Open Source

Cloud Computing

PaaS (Platform as a Service)

Prometheus

DevOps

OpenShift

Docker

Container Linux 

Kubernetes

Microservices

Containers

Cloud Native

Glasgow Cloud Native June

Morgan Stanley Financial Advisors

Share

Cloud Native Glasgow

Glasgow Cloud Native June

Cloud Native Glasgow

Details

Members are also interested in