The NIS2 (Network and Information Security) Directive and the DORA (Digital Operational Resilience Act) are key regulatory frameworks shaping the future of cybersecurity and operational resilience within the European Union. This presentation will explore how these new standards affect IT companies, emphasizing the practical steps businesses must take to comply and ensure stronger cybersecurity and operational continuity.
Key takeaways - DORA applies to IT companies when providing IT services to financial institutions. - If DORA is applicable, IT companies may be inspected by the financial institutions and indirectly by the financial supervisory authority. - If DORA is applicable, outsourcing agreements must be reviewed and amended in compliance with DORA. - NIS2 applies to medium and large IT companies across a broader range of sectors. - NIS2 brings mandatory incident reporting required within 24 hours of major cyber incidents. - NIS2 stipulates requirement for strengthened security measures, including risk management and business continuity. - Non-compliance can result in heavy penalties, making regulatory alignment critical.
In today's fast-evolving landscape, the adoption of Site Reliability Engineering (SRE) principles is essential to enhance reliability, scalability, and efficiency in software operations. This talk explores how GitOps—powered by GitLab CI and Flux—serves as a critical enabler in the transformation journey of organizations adopting SRE. By automating Kubernetes deployments, we ensure a declarative, version-controlled approach to managing applications. Attendees will learn about “pull” approach using Gitlab CI and Flux CD and how it differs from traditional CICD “push” approach.
Key takeaways - SRE transformation (very briefly focus on toil reduction using CICD) - GitLab CI: showing/explaining build, test and releasing to JFrog artifactory looking at code - Starting with FluxCD (explaining the most important concepts: GitRepository & Kustomization resource) – how the integration between Gitlab, K8s and Flux work looking at code/configs - Finally integration of CI & CD to put the pieces together how Git remains the only source of truth (probably a demo if we don’t have a demo effect 😉) - Short comparison between the traditional CICD approach (push method) vs the Gitops CICD (pull method)
I am an experienced leader in agile practices with a focus in automation, CI/CD processes and Generative AI initiatives. I have a proven track record in creating an innovative environment by facilitating cross-ART (agile release trains) and cross DVS (digital value stream) best practice... Read More →
Entigo Site Reliability Engineers keep the lights on for thousands of applications daily. Technology harmonisation and platform engineering have helped Entigo stay efficient and grow the business. Building on Entigo's experience, Rein will discuss how Internal Developer Platforms add value to organisations and how to make a business case for one. From there, Rein will give an overview of the building blocks used by the platform powering Entigo's Site Reliability Engineering business.
Key takeaways - A real-life example of internal developer platform motivation and implementation choices. - What are the typical characteristics of a successful platform? - What mechanisms are used by platforms to achieve promised results? - An example architecture of a platform for containerised applications
Rein is an entrepreneur with a technical background. He started in IT 20 years ago as C and Java developer and worked for Estonian government as an infrastructure architect. After joining Entigo 6 years ago, he has been working with global companies to improve software delivery and... Read More →
Thursday November 7, 2024 12:20pm - 1:00pm EET
ScreenX
In this talk, we will explore the journey of Bolt’s backend infrastructure evolution, migrating from traditional EC2-based architecture to a scalable, containerized environment powered by AWS Elastic Kubernetes Service (EKS). This session will cover the challenges faced, the decisions made, and the benefits reaped from moving to Kubernetes.
Key takeaways - Understanding the EC2 to EKS Transition from SRE perspective - Migration strategy that we followed - See how Bolt leveraged Kubernetes to automate operations, improve resource management - Scalability and Resilience with AWS EKS
Bolt has a lot of services, many of which use Redis as a cache. In recent years we migrated from old semi-automatic provisioning for Redises to automated pipeline, when new redis is automatically requested from service code and provisioned automatically. During this journey we hit interesting corner cases in many components which will be described in the presentation.
Key takeaways You'll find out how to operate a lot of redises and unexpected surprises that might wait you on this path.
As more and more organizations adopt multi-cloud strategies, the challenge of maintaining efficiency, consistency, and resilience in deployment processes becomes paramount. In my presentation I will shed some light how GitOps is helping future-proofing our multi-cloud platforms solution, while going through some of real-world challenges. I hope this presentation resonates with some engineers and encourages them to follow GitOps practices. Join our talk, how we build robust infrastructures that can adapt major cloud platforms and business needs.
Building a platform is not a "let's install a lot of awesome tools" exercise. Presenting developers with these toolboxes only increase the mental load. We need to take things to the next level by creating tools our developers love to use and hide all the tools they dont care about. But how do you hide Kubernetes, GitHub actions ect, and how do your developers release software? What are the interfaces to the platform we want developers to see? In this talk Linda will share the journey VELUX has been on while solving these exact problems.
Key takeaways By the end of the talk you will know how to make an interface in front of your toolbox your developers love and wants to use.
Platform Engineer, who can be easily provoked into rants about Fashion Industry.While putting aside my previous career in Clothing technology, I am all about Platform Engineering now. It started with CI/CD pipeline configuration, but currently I work with Kubernetes and many open-sourced... Read More →
Thursday November 7, 2024 4:20pm - 5:00pm EET
ScreenX
During this talk we'll build, deploy and protect an AI app within 25 minutes on Cloudflare starting with a blank project. Not only will we explore rapid prototyping, but also development and deployment workflows for production-ready applications.
Key takeaways Understanding the art-of-the-possible with true serverless platforms.
As a DevOps Engineer, navigating the balance between autonomy and keeping managers updated can be quite challenging. In this session, we’ll explore practical strategies to streamline your workflow, communicate proactively, and avoid frequent interruptions from your manager. Learn how to set clear boundaries, and optimize your systems so you can focus on delivering value without constant oversight. Whether you’re new to DevOps or a seasoned pro, this talk will offer tips and tricks to help you maintain your independence, boost productivity, and keep your manager happy—without endless check-ins.
Key takeaways - Utilize real-time dashboards to provide managers with updates, eliminating the need for frequent check-ins. - Set clear boundaries with managers, such as through scheduled briefings or proactive status reports, to maintain focus on your work. - Consistently deliver on your commitments and maintain transparency in your workflows to build trust with managers and minimise interruptions.
This presentation explores the evolving database needs of a rapidly growing startup. We follow a fictional company's journey from a very small team to a company with large user base facing regulatory obligations with a single PostgreSQL database. Discover how database access, migrations, and backups requirements change unexpectedly as customer expectations and data volume increase.
Practical insights for engineers and product owners to ensure long-term success.
Key takeaways - External-facing applications: No migration access or responsibilities. - Long-running (multiple days) migrations: Acceptable, no user or feature delivery impact. - Read-only replica offloading: Multiple database connections in the application. - PostgreSQL connection scaling: Connection pooler for primary instance. - Replication and backups: Complementary, as delayed replicas can help in some cases
Most people know and agree - Postgres is an awesome datastore fit for a multitude of DevOps flows due to it's "lightness", for example - environment cloning for feature testing and similar. But how to make Postgres even better? By running it at a fraction of the cost! This talk sheds light on an avenue that only a few brave have dared to explore - running Postgres in the cloud using Spot VMs, while persisting state and being DevOps-friendly.
We start with a general overview of Spot VM characteristics, typical cost savings and common interruption statistics. Proceeding to deployment possibilities - K8s versus self-managed, and performance aspects, compared to typical managed databases like RDS Postgres.
To finish off, an example Open Source implementation of a "Spot-aware" Postgres toolkit (revolving around Ansible), designed to simplify and DevOps-ify dealing with Spot instance, is introduced and demoed.
Key takeaways: - Explains the essence of Spot VMs and their behaviour - Shows that Spot VMs can also be used for stateful workflows
A long time PostgreSQL professional wearing various hats along the way. Worked with some of the biggest Postgres setups around Europe, and enjoy sharing that knowledge occasionally at conferences and local meetups.
Friday November 8, 2024 12:20pm - 1:00pm EET
ScreenX
Falco offers real-time monitoring and detection of anomalous behaviors within Kubernetes clusters and Linux machines empowering security teams to respond swiftly to potential threats. Through a comprehensive exploration of Falco's capabilities, attendees will gain insights into how it enhances security posture by continuously monitoring system calls, network activity, and file system changes.
See how a devops person saves on AWS with no-engineering and no-commitments with advanced rate optimization, using real life examples. We will showcase different ways of optimisation, for which devops people can use vendor tools or create them on their own. We are just introducing new ideas.
Key takeaways: - learn what to do after you buy a Savings Plan to save the maximum possible amount
Ott covers challenges Scoro and 3commas were facing to maximize automated cloud savings while not compromising on uptime, security or compliance. You will get an overview of the process and tools which were used to achieve reasonable cost level as well as follow-up activities to keep... Read More →
Friday November 8, 2024 2:40pm - 3:20pm EET
ScreenX
