DevPort Meetup

Wees welkom op de meetup van DevPort BV.

Tijdens deze meetup zullen er wederom 2 talks zijn. Aleks Yanchuck (DevOps & Solutions Architect @ KLM) zal het spits afbijten waarna Lars Nieuwenhuizen (DevOps Engineer @ TrueFullstaq) de 2e talk voor zijn rekening zal nemen.

Aleks Yanchuck zal ons in zijn talk laten zien hoe de verborgen kennis in traditioneel software ontwikkeling ervoor kan zorgen dat je jouw vaardigheden als infrastructure engineer naar een hoger niveau kan tillen. Nieuwsgierig? Meld je snel aan!

Lars Nieuwenhuizen laat je zien hoe je, wanneer je een EKS cluster van een klant in je eigen AWS account beheerd, nog steeds makkelijk gebruik kunt maken van de secrets die zich bevinden in het AWS account van de klant. Deze scheiding is niet de meest praktische, maar in sommige gevallen is de architectuur op deze wijze bepaald om een harde scheiding van rechten en verantwoordelijkheden te garanderen. Maar dat maakt het niet onmogelijk.

Programma
17.30 uur - 18.45 uur: Inloop en eten
18.45 uur - 19.15 uur: Talk Aleks Yanchuck: Building Continuous Resilience into Modern DevOps Pipelines
19.20 uur - 20.00 uur: Talk Lars Nieuwenhuizen - EKS, the pod identity agent and multi tenancy secret usage
20.00 uur - ..... : Napraten & Borrel

Talk Aleks Yanchuck - Level Up DevOps: What Dev Can Teach Ops About Coding Excellence:
As an industry, we’ve been moving to the cloud and adopting best practices for quite some time. Outside of sectors with heavy regulatory constraints, most modern and exciting applications are now built using services from major cloud providers—or even across multiple providers. It's a thrilling time to be in tech.
Modern software engineering now relies on multidisciplinary teams. No single person can realistically both develop complex business logic and manage the infrastructure it runs on. Instead, natural specialization occurs—some team members focus on application development, while others focus on enabling and running that code reliably through infrastructure.
Yet despite IaC, CI/CD, configuration management, GitOps, and other best practices being widely adopted, something odd is happening: infrastructure changes are getting slower. Platform teams are falling behind. Shouldn’t things be speeding up? Isn’t everyone doing DevOps?
This talk was inspired by seeing these same patterns of inefficiency emerge across different teams in completely different organizations. The conclusion? These aren’t isolated issues—they’re symptoms of a deeper, systemic problem.
The root cause lies in how we treat infrastructure code. Many teams could benefit from implementing core practices that developers have honed over the last 50 years before DevOps was eventa word. And it turns out, development lore has a lot to teach platform and DevOps engineers—lessons that can help avoid costly re-learning curves.
Intrigued? Join us to explore the hidden knowledge in traditional software development that can level up your infrastructure engineering game—so you don’t have to learn it the hard way.

Talk Lars Nieuwenhuizen - EKS, the pod identity agent and multi tenancy secret usage:
Within AWS you can create your own Kubernetes cluster managed with EKS, great!
And you can now even assign IAM roles directly to your Kubernetes service accounts with the pod identity agent, also great!
These IAM roles can get whatever permission you give to them. Wonderful!
Now you have to manage a cluster in your AWS account for a different team in a different AWS account. And that team wants to use the secrets in their account. You cannot assign an IAM role from their account to your pod identity. A challenge.
The reason this became a need for us, is because the company security rules demanded a very hard separation of responsibilities. This is not the best, easiest or cheapest solution in the long run, but it did create a very well defined and hard boundary between the resources and thus the security compliancy rules were met. So this became an EKS cluster in account A and the tenant resources in account B.
In this talk I will show you the strategy on how to handle this nice an secure so you can prevent the mistake I made, by thinking the other way around!

Locatie:
De locatie is in Meet Tuesday (Weena 690) te Rotterdam (op de 23e verdieping van de Millennium Tower, recht tegenover Rotterdam Centraal) en we zorgen uiteraard voor wat te eten en te drinken voor iedereen.