September Edition: Secrets in the cluster, resources and metapods

Welcome to our September Meetup hosted by the Aalto University!

Schedule:
17:00 Doors open
17:00 - 17:30 Networking
17:30 - 18:00 Host & organizers - Welcome and practicalities
18:00 - 18:30 There are Secrets in the Cluster: A field investigation into eight years of secrets management - Andrei Maltsev @ AlphaSense
18:30 - 19:00 Break. networking with food and drinks
19:00 - 19:30 Kubernetes resource operations - Joseph Shriner @ Polar Squad
Most IaC tools introduce a second runtime, proprietary DSLs, and brittle state files. But if you run Kubernetes, you already have a declarative control plane for your infrastructure.
This session shows how to manage cloud and baremetal platforms using standard CNCF tools: Flux CD, Cluster API (CAPI), cloud operators, and SOPS. We walk through a GitOps monorepo pattern that provisions clusters and cloud resources with zero HCL and zero state files directly from your laptop.
19:30 - 20:00 MetaPod: Remotely attesting large Kubernetes applications - Lachlan Gunn @ Aalto university, ELASTIC Project
A microservice application deployed using confidential computing runs each instance of a service in a hardware-protected virtual machine, that can prove its state to remote parties using attestation. However, remote attestation can only prove the state of individual virtual machines, and not the application as a whole when it is spread across many physical hosts. We have developed MetaPod, a system that combines the remote attestation evidence from the component pods of a Kubernetes application to ensure the correctness not only of the individual pods in an application, but that they have been correctly orchestrated as an entire MetaPod application.
20:00 - 20:30 Networking

We are taking registrations to the event on Meetabit: https://www.meetabit.com/events/september-edition-secrets-in-the-cluster-and-other-topics

NOTE: The event will be live-streamed on the Cloud Native Nordics YouTube.
NOTE: Signing up for the event gets you a seat at the onsite event.
NOTE: Pictures might be taken during the event and be published to this meetup page. Also there will be a livestream during the event which picks up audio from the space. If you do not want to be included in any pictures, please let the organizers know.