Conference Milan 2022 | DevOps

Description:
In this session, Chris and Sebass will provide an overview of GitHub. Many of you may be familiar with it for your own Open Source (OSS) projects. But, did you know that you can run your end-to-end development using GitHub Enterprise? Join us for a whistle-stop tour into GitHub Codespaces, GitHub Actions, GitHub Copilot and how you can bring DevSecOps best practices into your day-to-day work!

Description:
Kubernetes is the most popular container orchestration platform. With more and more applications running in Kubernetes, it is crucial to understand Kubernetes security risks. This talk guides you through various security risk of Kubernetes, focusing on OWASP Kubernetes Top 10 list. In live demos, you’ll find out how to exploit a range of past and present CVEs or misconfigurations in your k8s clusters, attacking containers, pods, supply chain, network, or storage. You’ll learn about common mistakes and vulnerabilities along with the best practices for hardening your Kubernetes systems.

Description:
Imagine you are part of a Data science team and the IT department is the owner of self-managed K8s serving infrastructure. In order to deploy a model properly, you need a workflow that once the model is ready, it would test, build and release it into a staging and production environment. Here is where CI/CD practices come into play.

Description:
"Nell’ambito dell’automazione legata al provisioning e alla manutenzione di infrastrutture multi environments l’Infrastructure as Code (IaC) assume un ruolo centrale. L’utilizzo di Terraform, strumento opensource leader di mercato, orchestrato mediante Jenkins permette la collaborazione tra i team di lavoro utilizzando un linguaggio comune nella realizzazione di infrastrutture multi cloud ed automatizzando e verificando l’intero processo mediante gli standard DevOps."

Description:
A real showcase of etherogeneous enterprise web application development where CI/CD finally becomes sustainable. We will explore the entire lifecycle of an application, from processes to tools, with special attention to the development of an Angular-based frontend Application Framework to faciltate the production of widgets and microapplications coming by distributed teams. We will close the journey showing a complete Build and Delivery management in a totally integrated way, always under control using Kubernetes paradigms. Check out the speakers' material: https://drive.google.com/file/d/1bCgHNaAGYzf8yqObuOvUWx1IpWrhFBV1/view?usp=share_link

Description:
Secure coding practices help find and remove vulnerabilities that could end up in the final code. Cyber attackers could exploit those vulnerabilities, causing data leaks, data corruption, or other kinds of damage. Cyber attackers will find it difficult to hack the code and gain access to applications and systems if you start developing secure code from the early stages of the project, thereby reducing data breaches. Learn together with us all the features that GitHub Advanced Security puts at your disposal to help you improve and maintain the quality of your code.

Description:
Il versionamento del codice sorgente è oramai una prassi ed è arrivato il tempo di versionare tutto! GitOps è l'unica àncora di salvezza per non dover ricordare tutto a memoria. Vi racconterò come il nostro team, usando GitOps, è riuscito a sopravvivere alla delivery di soluzioni multitenant ed As a Service costruite su Azure e Kubernetes e perché non è più necessario rispondere a domande come: Chi ha toccato la configurazione di Keycloak? Come hai fatto questa configurazione? Spoiler alert: GitOps si estende anche a pratiche non prettamente dev!!! Consulta il materiale della speaker: https://drive.google.com/file/d/1CVllivhk57vaawCxGfXZptpbsoNEMOw/view?usp=sharelink

Description:
All software that is successful for a long period will become eventually legacy software. This brings important challenges, as it makes it harder to find developers, and evolving the system becomes more and more expensive. Eventually, the software has to be migrated, preserving all the knowledge accumulated in it over the years. In this presentation, we will look at why companies may want to automatically translate their code to a more modern language. We will see what are the challenges and how they can be tackled. Check out the speaker's material: https://drive.google.com/file/d/1ZoQKxBcoQcHcehkUsUfxSexjPWlCJfb/view?usp=sharelink