Conference Milan 2023 | DevOps

Description:
Come affrontare l'evoluzione da un sistema end to end verso una piattaforma unica ma modulare, configurabile e integrabile sulla base delle esigenze del Cliente in ambito assicurativo? Come trasformare l'architettura di un software core per renderlo aperto all'integrazione con Terze parti e abilitare il modello open insurance? Nel nostro talk approfondiremo le sfide di sviluppo e le tecnologie alla base del re-platforming del nostro policy administration system.

Description:
Engineering organizations often face the consequences of building software in a way that prioritizes short-term gains over long-term ones. This has a lot of sociotechnical consequences, including tech debt, retention issues, and, ultimately, business risk. This talk focuses on how Platform Engineering can drive sustainability through its DevOps based principles, strong support system, and standardized shared architecture.

Description:
“Once you start down the dark path, forever will it dominate your destiny.” —Yoda, The Empire Strikes Back. Yoda is right. Becoming a DevOps Engineer, after more than 5 years as a Backend Developer, has changed my professional life forever. In this talk, I will explain how I was able to completely transform the way I solve engineering problems - From a narrow application perspective to a wide holistic system architecture approach. By the end of this talk you will know how you can do it too- whether you want to keep at it with your developer role, or switch to a DevOps role.

Description:
As more enterprises migrate to cloud native environments like Kubernetes and require scalable ways to define and enforce policy in Kubernetes, RBAC alone presents some limitations. Gatekeeper is an OSS project to integrate Open Policy Agent (OPA) in Kubernetes environments. It allows to define policy as Kubernetes objects, making it easier to adopt policy-as-code practices in and sharing reusable templates. In this talk we'll demo Gatekeeper in a real cluster. You’ll learn how to adopt policy-as-code techniques and how you can integrate Gatekeeper with your existing tools.

Description:
In 2022 Open Source Software’s supply chain attacks skyrocketed by 600% using popular libraries and tools as vectors. With 2.1 trillions of packages downloaded in the last year, NPM has become the preferred target of this kind of attacks. We will see the clever techniques and the subtle weaknesses exploited by attackers to allow malicious packages compromise our applications. Moreover we will learn: - what kind of risks we are exposed to - how to mitigate them - some notable supply chain attacks that hit the news Warning: after the talk you will not launch a npm install without fear again.

Description:
Choosing the right open-source project to use can be quite challenging - not knowing if it’s going to be the right fit, how it will behave, and if you end up wasting time trying to make it all work. We’ve all been there. But what if I told you there’s a practical way to have a clear understanding of how to incorporate an OSS project in your environment? In this talk, I’m going to speak about the DevOps perspective on open-source and the challenges Infra-focused engineers have with choosing the right project for their environment, and how to tackle them.