What we’re about
Cloud Native Glasgow will focus on providing presentations and workshops on building, deploying and maintaining software in a cloud environment, with a focus on containers, micro-services and automation.
Upcoming events (1)
See all- Glasgow Cloud Native JuneMorgan Stanley Financial Advisors, Glasgow
This June at Glasgow Could Native we have 2 exciting talks for you, delivered by members of the local community!
Tales of Running Istio Across Multiple Clusters in Prod: From 1.4 to 1.24
Speakers: John Clark & Guy TempletonSkyscanner adopted Istio to enable a resilient Kubernetes architecture - enabling an architecture that (barring some not so minor incidents) has allowed our services and platform to roll out changes to a global infrastructure serving 160m monthly travellers in a safe manner over the past 6 years as well as make use of a number of other benefits of service meshes.
It hasn't been without its challenges however - in particular we adopted Istio in prod all the way back at Istio 1.4, a very different time, as those familiar with Mixer, Citadel, Pilot, and Galley will be aware. We were even forced to create our own architecture to support a multi-cluster mesh before this was supported upstream. Over time we've wanted to reduce the areas where we were "Doing a Skyscanner" and get closer to vanilla Istio, allowing us to more easily upgrade and adopt upstream functionality.
Join us for the tale of the challenges from early adopters to 20+ versions of upgrades later.
John is a senior software engineer at Skyscanner, where he's the SME on our Istio setup. He's been driving improvements internally and upstream in the open source project to enable significant improvements in efficiency whilst maintaining resiliency.
Guy is a principal software engineer at Skyscanner, working in the Production Platform org where he’s focused on providing the best possible platform for Skyscanner’s travelers and engineers. Within Skyscanner he's focused on enabling the rest of the engineering org to build on top of AWS reliably. He’s also a co-chair of Kubernetes’ SIG Autoscaling. When he's not knees-deep in YAML he can usually be found having type 2 fun on a bike.
SPIFFE & SPIRE for workload identity in zero trust architectures
Speaker: Jason CostelloThe CNCF SPIFFE project, and its reference implementation SPIRE, promise a bright future for workload identity; legacy systems with implicit trust and long-lived credentials can be replaced with open standards-based identity that is consistent and highly automated. Many top platform engineering teams are in the process of adopting these technologies in their architectures to enable de facto mutual TLS, and there’s been significant development in the core projects and their tooling over the last few years.
In this talk, we’ll introduce the SPIFFE standard and its open source projects, sketch out the path towards a modern workload identity landscape, and talk about some of the opportunities and challenges on the road ahead. We’ll also step through some example use cases with Kubernetes to keep things relevant and concrete to Cloud Nativers.
Jason is a founding engineer at Cofide, where he works with the team to build products based on open standards that address the workload identity requirements of the modern zero trust architecture.
Huge thanks to Morgan Stanley for hosting us!
Schedule:
5.30pm - Doors open, food and drink courtesy of Morgan Stanley
6.00pm - Talks
7.45pm - Wrap UpPlease note that you must RSVP via Meetup.com at least 24 hours prior in order to attend this event!
Code of Conduct
Attendees are required to adhere to our Code of Conduct.
