Cloud Native Computing Foundation / Crossplane Community Day EU 2021

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Cloud-Init with Crossplane - Marques Johansson, Equinix

Baremetal and VM instances provisioned with Crossplane must rely on user-data fields or other forms of provisioners. It is only with these additional provisioning steps that it is possible to replicate managed services on bare metal or managed infrastructure. Cloud-init is a standard format for user-data that allows for numerous config files or scripts to be combined, all in different formats. Cloud-init data can be lengthy and cloud providers limit the size of user data. It is often necessary to combine and compress cloud-init scripts. We’ll explore ways to leverage cloud-init as user-data, demonstrating the higher-order integrations that are possible when Crossplane manages low-level resources.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Constructing Building Blocks for Production Grade Cloud Native Deployments (with Crossplane) - Hasan Türken, Upbound

Deploying applications to the cloud is easy. It gets harder when it requires some infrastructure and harder if it needs to be deployed with a production-grade configuration. And most of the time, we need to automate all of these for a variety of reasons which further complicates the work. Wouldn't it be great if we could have re-usable building blocks that could be assembled and even better if we could later define them as new blocks that could be re-used further? In this talk, we will present how we are using Crossplane and composition to deploy a highly available, tls enabled Vault backed by a GCS bucket and configured to auto unseal with Cloud KMS using GCP workload identity. We will discuss how Crossplane helps us to easily assemble infra and application components and eases automation further with declarative configuration.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Deja Vu: Let's think about security again! - Shripad Nadgowda & Paolo Dettori, IBM

While Crossplane is emerging as the new CNCF project for provisioning and managing cloud infrastructure directly from Kubernetes, according to the National Security Agency (NSA), misconfiguration is still the #1 cloud vulnerability. So as we move the control plane for managing infrastructure to Kubernetes through Crossplane, we need to revisit and re-evaluate security and compliance implications. In this talk, we will review on-going security transformations for cloud-native solutions in the form of DevSecOps, Zero Trust and discuss their potential applicability to Crossplane. At the same time, it is equally critical to identify early if there any any gaps, need for new tools and techniques for developers and security experts and call for common best practices or standards across users and providers.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

How to Build Your Own PaaS from the Cloud Native Landscape - Jared Watts, Upbound

As the CNCF showed us in a preceding talk, the Cloud Native Landscape is growing fast and now has so many projects and options that end users are having trouble making sense of it all. The end user community would greatly benefit from an effort to turn these cloud native “ingredients” into “recipes”. In this talk, Jared Watts (co-creator of Crossplane) will take us on a deep dive of the technology, design, and implementation of cloud native “solutions” based on Crossplane. This talk builds on the introduction and perspective provided by the CNCF on the need for cloud native recipes, and brings those ideas to life with a practical walkthrough and demonstration.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Keynote: Crossplane at the Crossroads - Bassam Tabbara, Founder & CEO, Upbound

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Keynote: Operational Nirvana: The future belongs to the robots - Jay Pipes, Principal Engineer, Amazon Web Services

AWS Controllers for Kubernetes (ACK) lets you define and use AWS service resources directly from Kubernetes. The ACK project has a code generator that is now used for generating the Crossplane AWS provider. In this talk, we will discuss why declarative Kubernetes-native configuration management tools like ACK and Crossplane are so important: they enable a GitOps-centric operational model for safely deploying infrastructure and application resources.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Connecting the (platform) pieces for automated CI/CD - Jan Willies, Accenture

Application Development Platforms have a long history in modern IT, trying to solve many challenges along the way. From connecting git-repositories (push to deploy) over describing build & test steps to creating environments for different purposes (CI/CD). In this session we want to explore how we can leverage the open source software crossplane with its provider and XRM features to connect different pieces which compose an application development platform. We will start with the basics and setup a git repository from within crossplane, connect a CI/CD system and automate feedback into the respective system. In the end we will have an API in which we can not only describe application dependencies like infrastructure but also git repositories and CI/CD systems.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Crossplane and Promises - Steve Cavallo, Cloudcheckr

Configuration management has become virtually standard in every industry. As we have moved to infrastructure as code, and most recently serverless, the tools have changed but many of the principals for governing systems have remained the same. In this presentation I will talk about the Promise theory and how it applies to several of the most popular infrastructure-as-code solutions - Crossplane, terraform, cloudformation. https://www.linuxjournal.com/content/promise-theory%E2%80%94what-it Most notably, how Crossplane keeps promises and how this is fundamentally different than other existing toolsets, to quote Mark Burgess, "by shifting the attention away from what changes (or which algorithms to enact), onto what interfaces exist between components and what promises they keep and why." The approaches to describing systems will have different output and challenges when applied at scale.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Notes from Crossplane Newbs - Jeremy Tanner & Gianluca Arbezzano, Equinix

You’ve heard of Crossplane but you really aren’t sure what it is about. Is it Terraform for Kubernetes? Is it a multi-cloud toolkit? Does it do dishes? We’ll provide a new user perspective on the project, dispelling myths and highlighting what the most important features are today for everyday users.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: OCI Images for More Than Containers, Jon Johnson, Google

OCI images have become synonymous with containers, yet the fact that they are used for running containerized processes is nothing more than an implementation detail. In reality, OCI images are capable of packaging arbitrary data, and because of the wide proliferation of registry offerings, they are an attractive distribution mechanism for hosting and sharing standardized artifacts. In this talk, Jon and Dan will peel back the layers of the OCI image specification, exploring what components are required and which are optional, as well as how to build your own images by hand. The Crossplane package manager’s usage of the go-containerregistry library will serve as a reference for how these concepts can be used in practice. Attendees will leave with a greater knowledge of how Crossplane works under the hood, and how OCI images may be used to solve their own artifact distribution problems.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Scaling Kubernetes Global Balancer with Crossplane - Yury Tsarev, Absa Group

Global load balancing, commonly referred to as GSLB (Global Server Load Balancing) solutions, have typically been the domain of proprietary network software and hardware vendors and installed and managed by siloed network teams. k8gb is a completely open source, cloud native, global load balancing solution for Kubernetes. k8gb focuses on load balancing traffic across geographically dispersed Kubernetes clusters using multiple load balancing strategies to meet requirements such as region failover for high availability. Absa runs more than a hundred GSLB enabled clusters and the number is continuously growing. To handle the configuration overhead Absa uses the combination of Crossplane XRD abstracting and simplifying k8gb deployment configuration for cluster operators, minimizing the potential human errors and enabling GitOps best practices for huge scale hybrid cloud deployment.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Secure, Least Privilege Cloud Service provisioning with Crossplane - Lewis Marshall, Appvia Ltd

Providing production ready and secure cloud services for applications, whether that’s a database, cache, or object store is more of a challenge than just provisioning. Security and resilience is essential for application teams to deliver lasting business value. Crossplane provides a self service developer capability but challenges exist around ensuring secure and suitably scoped cloud service provisioning. We’ve investigated “least privilege” for Crossplane resource provisioning. We uncover how to enable the best practice of cloud managed identities with Crossplane with appropriately secure access. Through collaboration with large organisations and a desire to contribute to the Crossplane community, we aim to enable developer self service with maximum security.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Lightning Talk: Self-Service Provisioning with the Crossplane Service Broker- Tobias Brunner, VSHN AG

The Crossplane Service Broker exposes Crossplane primitives via the Open Service Broker API. Tobias will introduce the concepts behind the Crossplane Service Broker and demonstrate to the audience how it all works together. By leveraging the Open Service Broker API while coupling it with the powerful concept of Crossplane Compositions it's very easy to enable users of a platform which exposes Open Service Broker API integration (like Kubernetes Service Catalog or Cloudfoundry) to provision services fully automated. In a demonstration a real use case will be shown how a Redis service can be provisioned using the Open Service Broker API, leveraging the Crossplane Compositions and the Helm provider.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Outgrowing Terraform - Nic Cope, Upbound & Dalorion Johnson, Guidewire

Curious how Crossplane compares to Terraform? In this session Dalorion and Nic will discuss some of the challenges organisations can face when they need to scale their Terraform use to empower multiple teams to collaborate on declarative infrastructure management, and how Crossplane addresses these challenges. The session will be rooted in Dalorion’s experiences building and managing advanced Terraform configurations for a large software engineering organisation. Nic will highlight how the kind of challenges faced by Guidewire have informed Crossplane’s architectural decisions, allowing it to overcome some of Terraform’s pain points.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Panel: Bringing The Cloud To Kubernetes - Matthew Christopher, Microsoft, Dan Mangum, Upbound, Joyce Ma, Google and Jay Pipes, AWS, Moderated by: Nic Cope, Upbound

Organisations are increasingly realising that the Kubernetes approach to infrastructure orchestration can be applied to much more than just containers. Each of the major cloud providers are working on projects that use the Kubernetes Resource Model (KRM) to model their APIs. Similarly, Crossplane aims to model all cloud APIs (and more!) using a superset of the KRM that we think of as the Crossplane Resource Model (or XRM). In this session engineers from the Amazon Controllers for Kubernetes (ACK), Azure Service Operator (ASO), Google Config Connector, and Crossplane projects will discuss the common challenges of building a consistent experience atop a myriad of heterogeneous cloud APIs.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Panel: Emerging Trends in Cloud Engineering: Platform as product, APIs, self-service & more - Alex Jones, DevOps Institute Ambassador, Brian Gracely, RedHat Open Shift, Katie Gamanji, CNCF & Viktor Farcic, Shipa Moderator: Daniel Bryant, Ambassador Labs

The session aims to provide insights on the trends shaping the cloud native industry including the rise of platform teams, the need for increased automation and self service, Kubernetes as a universal control plane and the importance of organizing teams around APIs. Panelists will share insight, lessons learned as well as predicting technology and ecosystem trends for 2021.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

The How & Why for Building Crossplane Providers - Krish Chowdhary, Red Hat

Provisioning and managing cloud resources like infrastructure, services, and applications are one of the core features offered by Crossplane. We achieve this goal by creating independent Providers which expose Custom Resource Definitions in a Kubernetes cluster. Although the development of these Providers is community-driven, there are overarching design patterns that exist in all the Providers. In this talk, we will be going over the fundamentals of Crossplane Providers, the architecture, and how to contribute. Additionally, we will talk about the how and why for creating a Provider, what drives the use case, and when is it a good idea to create a Provider as opposed to other options like Helm Charts, Operators, or Kustomize resources. We will wrap up the talk by bootstrapping the development of a new Provider, as well as a small demo for creating a new resource.

Don’t miss out! Join us at our upcoming event: KubeCon + CloudNativeCon North America 2021 in Los Angeles, CA from October 12-15. Learn more at https://kubecon.io The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy, and all of the other CNCF-hosted projects.

Welcome + Opening Remarks - Dan Mangum, Program Committee Member