Get ready for a spectacular summer edition of the Cloud Native Computing Foundation Timisoara Chapter!

Our colleague Romina Druta (Visma) - seasoned CNCF speaker - will start off the edition and our guest Azhari Mouhammad-Nashwan (Cloudbase Solutions) will go on a deep dive in K8s after.

Shift-left Security with Infrastructure as Code - presented by Romina Druta

As organisations are increasingly hosting theirs services in the cloud, Infrastructure as Code tools(IaC) are highly used in automating the provisioning of the cloud services. Those tools can introduce security weaknesses and risky changes to the cloud platforms which started to become a highly attractive attack surface for the hackers. This presentation is a study about IAC security of 22 projects having theirs cloud infrastructure hosted in GCP, AWS and Azure. The aim of this presentation is to make practitioners aware of vulnerabilities that can appear in their infrastructure when using IaC but also it shows what we have learned in our journey to Shift-Left security for the cloud.

Kubernetes under the hood - presented by Azhari Mouhammad-Nashwan

In a world where we're encouraged to treat Kubernetes as an all-encompassing YAML-consuming black box, it's very easy to get out of touch with what Kubernetes does: set up some isolated processes for our containerized apps.

In this talk, we'll be going through some of the OCI standards, demystifying the underlying Kubernetes resource interfaces (CRI/CNI/CSI), and poking around at the process level to see what how Kubernetes does things under the hood.