https://media.ccc.de/c/cmc2025 This feed contains all events from cmc2025 as mp3 see video outro Tue, 23 Jun 2026 19:39:27 -0000 https://static.media.ccc.de/media/events/cmc/2025/logo.png https://media.ccc.de/c/cmc2025 https://media.ccc.de/v/ghent2025-590-puppet-what-future- Puppet is a mature tool, the company behind it has changed over the years and most of the people who developed it, are no more working there. For somebody Puppet is old, solving problems that are no more current. Yet, Puppet is still around , and as long as there'll be systems to manage over time, there'll be the need of such a tool. The question is if the tool of choice is going to be Puppet or not. What's its present and future? We will analyse the current Puppet situation, market demand and perception, and spend our two cents on what could be done to improve perception, usage and adoption. We will also try to raise the topic with the people in the audience, when the presentation will turn into a discussion, possibly stirring ideas and suggestions. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/VQUFXW/ Tue, 04 Feb 2025 14:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-590-eng-Puppet_what_future_mp3.mp3?1743006192 04807566-a3e3-5533-9d56-081d4eb9504a 2025-02-04T14:00:00+01:00 Alessandro Franceschi No 590, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 2 Puppet is a mature tool, the company behind it has changed over the years and most of the people who developed it, are no more working there. For somebody Puppet is old, solving problems that are no more current. Yet, Puppet is still around , and as long as there'll be systems to manage over time, there'll be the need of such a tool. The question is if the tool of choice is going to be Puppet or not. What's its present and future? We will analyse the current Puppet situation, market demand and perception, and spend our two cents on what could be done to improve perception, usage and adoption. We will also try to raise the topic with the people in the audience, when the presentation will turn into a discussion, possibly stirring ideas and suggestions. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/VQUFXW/ 00:52:21 https://media.ccc.de/v/ghent2025-717-don-t-panic- Your organisation has been using Puppet to manage its infrastructure, but it's grown organically over time with best practices and the long-term implications of decisions never really being thought about. A new Puppet administrator has just been handed responsibility for the Puppet infrastructure, we need to help them out. This is a common scenario, the Puppet admin has left an organisation and a new Puppet admin has been assigned but doesn't have any real experience of Puppet, just like their predecessor. We need to teach them what Puppet is, help them understand what they've taken on and use Puppet best practices such as roles and profiles, and Hiera to organize their configuration management into a clear and robust structure that will give them confidence to make the required changes as and when they are needed as the infrastructure grows. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/NPG9HP/ Tue, 04 Feb 2025 16:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-717-eng-Dont_Panic_mp3.mp3?1742678001 bef26b01-eb1f-5f32-9476-f1c63e1657c5 2025-02-04T16:50:00+01:00 Andrew Jones No 717, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 2 Your organisation has been using Puppet to manage its infrastructure, but it's grown organically over time with best practices and the long-term implications of decisions never really being thought about. A new Puppet administrator has just been handed responsibility for the Puppet infrastructure, we need to help them out. This is a common scenario, the Puppet admin has left an organisation and a new Puppet admin has been assigned but doesn't have any real experience of Puppet, just like their predecessor. We need to teach them what Puppet is, help them understand what they've taken on and use Puppet best practices such as roles and profiles, and Hiera to organize their configuration management into a clear and robust structure that will give them confidence to make the required changes as and when they are needed as the infrastructure grows. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/NPG9HP/ 00:48:22 https://media.ccc.de/v/ghent2025-578-upgrading-to-puppet-8-the-good-the-bad-and-the-ruby We use Puppet for about 1200 Linux machines. This talk will recount our journey in upgrading from Puppet 7 to Puppet 8. I will talk about the incompatible changes to be aware of, how we handled them, and general strategy for handling Puppet major upgrades. The talk will cover: - our Puppetserver architecture - changes in Puppet 8 like legacy facts and Ruby 3.2 - how to prepare for any Puppet major upgrade - how to prepare for the Puppet 8 changes specifically - things that the ecosystem could do better Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/T97UPU/ Tue, 04 Feb 2025 16:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-578-eng-Upgrading_to_Puppet_8_The_Good_The_Bad_and_The_Ruby_mp3.mp3?1742675040 d203fb28-e159-5e5d-b8fb-f68a6189ccee 2025-02-04T16:00:00+01:00 Maximilian Gass No 578, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 2 We use Puppet for about 1200 Linux machines. This talk will recount our journey in upgrading from Puppet 7 to Puppet 8. I will talk about the incompatible changes to be aware of, how we handled them, and general strategy for handling Puppet major upgrades. The talk will cover: - our Puppetserver architecture - changes in Puppet 8 like legacy facts and Ruby 3.2 - how to prepare for any Puppet major upgrade - how to prepare for the Puppet 8 changes specifically - things that the ecosystem could do better Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/T97UPU/ 00:41:48 https://media.ccc.de/v/ghent2025-758-state-of-puppet In this talk well discuss what's happened in the open source product releases from Puppet to developer tools recently and what direction we're thinking.. did anyone say Puppet 9? We will also look at an overview of the state of community and where we think we can focus working better together. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/3BC7QX/ Mon, 03 Feb 2025 14:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-758-eng-State_of_Puppet_mp3.mp3?1742674072 34d5368f-a013-57b4-8cd8-586b15f7d53e 2025-02-03T14:00:00+01:00 David Sandilands No 758, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 In this talk well discuss what's happened in the open source product releases from Puppet to developer tools recently and what direction we're thinking.. did anyone say Puppet 9? We will also look at an overview of the state of community and where we think we can focus working better together. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/3BC7QX/ 00:24:59 https://media.ccc.de/v/ghent2025-740-compliance-as-code-building-an-open-source-compliance-backend-for-puppet Managing compliance in infrastructure as code environments is essential but can be daunting. Enter `compliance_engine`, a new open-source Ruby gem designed to streamline the mapping of compliance standards to Puppet code. Building on the foundation of SIMP's `compliance_markup`, this reimagined backend prioritizes performance, flexibility, and maintainability. In this session, we’ll explore the evolution from `compliance_markup` to `compliance_engine`, highlighting the architectural improvements that make it faster and easier to use. We’ll dive into real-world examples, demonstrating how the gem simplifies the enforcement of compliance policies, reduces complexity, and supports emerging standards. Attendees will gain insights into the challenges of implementing compliance as code and learn how `compliance_engine` can transform their approach to regulatory compliance in Puppet environments. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/NXJTDG/ Mon, 03 Feb 2025 16:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-740-eng-Compliance_as_Code_Building_an_Open_Source_Compliance_Backend_for_Puppet_mp3.mp3?1742290615 9883d525-270e-58bf-a7b0-24772539c487 2025-02-03T16:50:00+01:00 Steven Pritchard, Kendall Moore No 740, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 Managing compliance in infrastructure as code environments is essential but can be daunting. Enter `compliance_engine`, a new open-source Ruby gem designed to streamline the mapping of compliance standards to Puppet code. Building on the foundation of SIMP's `compliance_markup`, this reimagined backend prioritizes performance, flexibility, and maintainability. In this session, we’ll explore the evolution from `compliance_markup` to `compliance_engine`, highlighting the architectural improvements that make it faster and easier to use. We’ll dive into real-world examples, demonstrating how the gem simplifies the enforcement of compliance policies, reduces complexity, and supports emerging standards. Attendees will gain insights into the challenges of implementing compliance as code and learn how `compliance_engine` can transform their approach to regulatory compliance in Puppet environments. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/NXJTDG/ 00:54:30 https://media.ccc.de/v/ghent2025-675-doing-mass-puppet-enterprise-upgrades-in-highly-restricted-environments How do you upgrade 3000 individual PE environments? 3000 environments that you don't manage and others own. 3000 environments without SSH access. Come with me on a "funny" journey and learn how we made this possible and how the PE upgrade process differs from Open Source. Lets do a deep dive into PE 2019->2021->2023 Upgrades and our open source tooling that made this possible. You can also watch the slides online at: https://bastelfreak.de/cfgmgmtcamp2025/pe.html#1 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/9NUL9E/ Mon, 03 Feb 2025 16:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-675-eng-Doing_mass_Puppet_Enterprise_upgrades_in_highly_restricted_environments_mp3.mp3?1742289430 fabf1b83-78e5-5dff-a02c-61bb3c196407 2025-02-03T16:00:00+01:00 Tim Meusel No 675, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 How do you upgrade 3000 individual PE environments? 3000 environments that you don't manage and others own. 3000 environments without SSH access. Come with me on a "funny" journey and learn how we made this possible and how the PE upgrade process differs from Open Source. Lets do a deep dive into PE 2019->2021->2023 Upgrades and our open source tooling that made this possible. You can also watch the slides online at: https://bastelfreak.de/cfgmgmtcamp2025/pe.html#1 Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/9NUL9E/ 00:49:09 https://media.ccc.de/v/ghent2025-770-overview-of-the-new-openvox-build-pipeline Description: Most of us remember how long it took for Puppet to get Debian 12 packages. The build pipeline was long and complex and used a lot of internal tooling that had to be updated manually. In current news though, the new OpenVox build pipeline has been totally revamped and simplified and adding support for RHEL 10 took about 10 minutes. Most of that was spent waiting for the build to complete. Nick would like to explain how it works and what we still have left to do. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/7HXT7V/ Mon, 03 Feb 2025 15:15:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-770-eng-Overview_of_the_new_OpenVox_build_pipeline_mp3.mp3?1742289045 38b2215e-2323-557b-975d-bce5a7142ede 2025-02-03T15:15:00+01:00 Nick Burgan No 770, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 Description: Most of us remember how long it took for Puppet to get Debian 12 packages. The build pipeline was long and complex and used a lot of internal tooling that had to be updated manually. In current news though, the new OpenVox build pipeline has been totally revamped and simplified and adding support for RHEL 10 took about 10 minutes. Most of that was spent waiting for the build to complete. Nick would like to explain how it works and what we still have left to do. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/7HXT7V/ 00:26:32 https://media.ccc.de/v/ghent2025-663-bolt-dynamic-inventory-making-puppet-easy It is very common now for developers to code and test their applications on VMs, either locally hosted or on the cloud. As individuals have editor preferences (nvim, vscode, etc), so they have hypervisor. Once you create a bolt inventory file listing the server or servers, then bolt can easily configure those servers using custom puppet code. Instead of manually creating the bolt inventory, it is easy to create a dynamic inventory plugin--if it doesn't already exist--to suit your particular use case. This talk illustrates how we setup our own local dynamic inventory plugins to help with our automated development and testing. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/GYKK3P/ Mon, 03 Feb 2025 14:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-663-eng-Bolt_dynamic_inventory_making_puppet_easy_mp3.mp3?1742288325 8fca92f5-224d-5473-b1a0-479ad084423f 2025-02-03T14:50:00+01:00 Gavin Didrichsen No 663, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 It is very common now for developers to code and test their applications on VMs, either locally hosted or on the cloud. As individuals have editor preferences (nvim, vscode, etc), so they have hypervisor. Once you create a bolt inventory file listing the server or servers, then bolt can easily configure those servers using custom puppet code. Instead of manually creating the bolt inventory, it is easy to create a dynamic inventory plugin--if it doesn't already exist--to suit your particular use case. This talk illustrates how we setup our own local dynamic inventory plugins to help with our automated development and testing. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/GYKK3P/ 00:19:47 https://media.ccc.de/v/ghent2025-585-testing-puppet-code-with-voxbox Testing Puppet code can be a hassle, but voxbox is here to save the day! Testing Puppet code can be a hassle, but voxbox is here to save the day! Voxbox is a complete testing environment in a container, with all the good gems from Vox Pupuli. Active maintained and ready to run locally or in your CI. It also has jq and yamllint on board. I will showcase how it is build, how it is used and how it can be integrated into gitlab-ci. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/WHTKEC/ Mon, 03 Feb 2025 14:25:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-585-eng-Testing_Puppet_code_with_voxbox_mp3.mp3?1742286978 1f1d2cb2-e95b-5bff-a794-cd36b8a79eee 2025-02-03T14:25:00+01:00 Robert Waffen No 585, 2025, CMC2025, Puppet, Puppet 1 (B.1.015), CMC2025-eng, cmc2025, Day 1 Testing Puppet code can be a hassle, but voxbox is here to save the day! Testing Puppet code can be a hassle, but voxbox is here to save the day! Voxbox is a complete testing environment in a container, with all the good gems from Vox Pupuli. Active maintained and ready to run locally or in your CI. It also has jq and yamllint on board. I will showcase how it is build, how it is used and how it can be integrated into gitlab-ci. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/WHTKEC/ 00:15:47 https://media.ccc.de/v/ghent2025-628-1001-ways-of-assigning-a-class-to-a-node Overview of possibilities to assign classes to nodes The Puppet tutorial assembles configuration aus snippets in manifests/site.pp node default { include apache } . There are more possibilities than advertised by Puppet: * External Node Classifier * Roles und Profiles * Hiera Chainloading as Array or Hash * Puppet Enterprise Console/Foreman Host Groups We will get a quick intro to each of them, an explanation on how to shoot yourself in the knee with these and a field report of ways that have proven to cause less pain. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/TCKR7P/ Mon, 03 Feb 2025 17:15:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-628-eng-1001_ways_of_assigning_a_class_to_a_node_mp3.mp3?1742241433 2f26071c-db7b-5ea7-80cd-83d71419446f 2025-02-03T17:15:00+01:00 Marcus Poller No 628, 2025, CMC2025, Puppet, Puppet 2 (B.1.011), CMC2025-eng, cmc2025, Day 1 Overview of possibilities to assign classes to nodes The Puppet tutorial assembles configuration aus snippets in manifests/site.pp node default { include apache } . There are more possibilities than advertised by Puppet: * External Node Classifier * Roles und Profiles * Hiera Chainloading as Array or Hash * Puppet Enterprise Console/Foreman Host Groups We will get a quick intro to each of them, an explanation on how to shoot yourself in the knee with these and a field report of ways that have proven to cause less pain. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/TCKR7P/ 00:25:24 https://media.ccc.de/v/ghent2025-658-hdm-release-3 What is new in HDM Release 3? Hiera Data Manager (HDM) is a web UI, which provides insight into your Hiera Data. One can easily check, which values are set in which layer and recognize, why a node receives which configuration data. With the newest release we added some new features, which I would like to present. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/FCSFJP/ Mon, 03 Feb 2025 16:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-658-eng-HDM_Release_3_mp3.mp3?1742240881 1c265d8a-781e-5d17-af5f-a8d8ee033eb4 2025-02-03T16:50:00+01:00 Martin Alfke No 658, 2025, CMC2025, Puppet, Puppet 2 (B.1.011), CMC2025-eng, cmc2025, Day 1 What is new in HDM Release 3? Hiera Data Manager (HDM) is a web UI, which provides insight into your Hiera Data. One can easily check, which values are set in which layer and recognize, why a node receives which configuration data. With the newest release we added some new features, which I would like to present. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/FCSFJP/ 00:21:38 https://media.ccc.de/v/ghent2025-727-how-we-use-choria-orchestration-in-an-enterprise-setting A real life view into how an enterprise company uses Choria for orchestration and what we had to build around it. This talk gives the basics of Choria along with infrastructure considerations such as running only from Jenkins and code considerations including control repo organization, org specific stdlib and interacting with other teams. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/W7WAZG/ Mon, 03 Feb 2025 16:25:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-727-eng-How_we_use_Choria_orchestration_in_an_enterprise_setting_mp3.mp3?1742240839 c35c5337-c9ed-50ed-8add-43d5530cc162 2025-02-03T16:25:00+01:00 Garrett Honeycutt No 727, 2025, CMC2025, Puppet, Puppet 2 (B.1.011), CMC2025-eng, cmc2025, Day 1 A real life view into how an enterprise company uses Choria for orchestration and what we had to build around it. This talk gives the basics of Choria along with infrastructure considerations such as running only from Jenkins and code considerations including control repo organization, org specific stdlib and interacting with other teams. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/W7WAZG/ 00:22:36 https://media.ccc.de/v/ghent2025-759-progressive-infrastructure-delivery-using-kargo-and-argo-cd Since the day Kargo was released, I have been exploring the idea of using it not only to deliver and promote applications but also to deliver infrastructure through its progressive delivery capabilities. Using Kubernetes-based tools like Crossplane or Pulumi, we can define infrastructure as code and deliver it progressively to our management clusters and then promote this infrastructure through different stages without the need for extra CD script magic. Let me show you how Kargo helps platform engineering streamline and automate the progressive rollout of infrastructure changes to all stages. This talk will cover the basics of Kargo and how to use it with Infrastructure as Code tools. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/DGYEV7/ Tue, 04 Feb 2025 16:25:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-759-eng-Progressive_Infrastructure_Delivery_using_Kargo_and_Argo_CD_mp3.mp3?1741042725 14d92cde-1c2f-52b6-ae1d-5d033cb8d83b 2025-02-04T16:25:00+01:00 Engin Diri No 759, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 2 Since the day Kargo was released, I have been exploring the idea of using it not only to deliver and promote applications but also to deliver infrastructure through its progressive delivery capabilities. Using Kubernetes-based tools like Crossplane or Pulumi, we can define infrastructure as code and deliver it progressively to our management clusters and then promote this infrastructure through different stages without the need for extra CD script magic. Let me show you how Kargo helps platform engineering streamline and automate the progressive rollout of infrastructure changes to all stages. This talk will cover the basics of Kargo and how to use it with Infrastructure as Code tools. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/DGYEV7/ 00:24:06 https://media.ccc.de/v/ghent2025-570-creating-immutable-infrastructures-with-kairos In this talk, we will introduce Kairos, an open-source project that aims to create immutable Operating Systems designed for Kubernetes. This includes a toolset that simplifies operations at the edge in a cloud-native way. Edge computing has become increasingly popular due to its ability to save costs by processing information closer to the data before sending filtered and computed information to a centralized application or data warehouse hosted in the cloud. Kubernetes is an ideal solution for edge computing because it natively builds components that facilitate the lifecycle management of modern edge applications. However, as we scale the number of edge locations, we face operational challenges, such as interacting with cluster configurations at scale without creating unique configurations for each location, ensuring security for remote clusters and applications, upgrading Kubernetes clusters without specific domain knowledge, and minimizing disruptions during maintenance windows for smaller form factor hardware. Kairos acts as an engine delivering immutable Kubernetes-enabled Linux OS from OCI conformant container images. It provides unique capabilities such as VPN peer-to-peer mesh, a distributed ledger to automate Kubernetes cluster bootstrapping and coordination, and zero-touch provisioning with a QR code scan. But more importantly, it uses a declarative model backed by Kubernetes CRDs. It manages distributed Kubernetes operations at the edge from a centralized Kubernetes cluster. In this presentation, we will explain the foundations and concepts of Kairos and demonstrate its capabilities. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/3BSKZB/ Tue, 04 Feb 2025 16:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-570-eng-Creating_Immutable_Infrastructures_with_Kairos_mp3.mp3?1741041845 71786d1a-ce2f-5294-9b04-648694fc8902 2025-02-04T16:00:00+01:00 Mauro Morales No 570, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 2 In this talk, we will introduce Kairos, an open-source project that aims to create immutable Operating Systems designed for Kubernetes. This includes a toolset that simplifies operations at the edge in a cloud-native way. Edge computing has become increasingly popular due to its ability to save costs by processing information closer to the data before sending filtered and computed information to a centralized application or data warehouse hosted in the cloud. Kubernetes is an ideal solution for edge computing because it natively builds components that facilitate the lifecycle management of modern edge applications. However, as we scale the number of edge locations, we face operational challenges, such as interacting with cluster configurations at scale without creating unique configurations for each location, ensuring security for remote clusters and applications, upgrading Kubernetes clusters without specific domain knowledge, and minimizing disruptions during maintenance windows for smaller form factor hardware. Kairos acts as an engine delivering immutable Kubernetes-enabled Linux OS from OCI conformant container images. It provides unique capabilities such as VPN peer-to-peer mesh, a distributed ledger to automate Kubernetes cluster bootstrapping and coordination, and zero-touch provisioning with a QR code scan. But more importantly, it uses a declarative model backed by Kubernetes CRDs. It manages distributed Kubernetes operations at the edge from a centralized Kubernetes cluster. In this presentation, we will explain the foundations and concepts of Kairos and demonstrate its capabilities. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/3BSKZB/ 00:27:16 https://media.ccc.de/v/ghent2025-614-embracing-karpenter-to-scale-optimize-upgrade-kubernetes Kubernetes is still quite a popular choice with wide community adoption to run containerised workloads in the Cloud, but it doesn’t come with batteries included. And some of that is intentional to allow freedom to make different choices or extend its functionality as needed. For example scaling compute nodes is one of the things which is not built-in. Making sure you’re doing it in most efficient and cost-efficient way is paramount. But it’s not just efficienty than separates Karpenter (an open-source node lifecycle management) from other options, but also how it can help you stay on top with compliance, patching and drift. The project has come a long way in the last couple of year and it was also adopted by CNCF/SIG Autoscaling making it alternative approach compared to de-facto Cluster Autoscaler project. I this talk I’ll show how to set it up, different use cases and demonstrate hands-on what to expect in the real world scenario. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/P7CTWQ/ Tue, 04 Feb 2025 14:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-614-eng-Embracing_Karpenter_to_scale_optimize_upgrade_Kubernetes_mp3.mp3?1741038516 afaf6d8a-c9c9-53a5-bd52-802131046e5e 2025-02-04T14:00:00+01:00 Marko Bevc No 614, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 2 Kubernetes is still quite a popular choice with wide community adoption to run containerised workloads in the Cloud, but it doesn’t come with batteries included. And some of that is intentional to allow freedom to make different choices or extend its functionality as needed. For example scaling compute nodes is one of the things which is not built-in. Making sure you’re doing it in most efficient and cost-efficient way is paramount. But it’s not just efficienty than separates Karpenter (an open-source node lifecycle management) from other options, but also how it can help you stay on top with compliance, patching and drift. The project has come a long way in the last couple of year and it was also adopted by CNCF/SIG Autoscaling making it alternative approach compared to de-facto Cluster Autoscaler project. I this talk I’ll show how to set it up, different use cases and demonstrate hands-on what to expect in the real world scenario. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/P7CTWQ/ 00:54:53 https://media.ccc.de/v/ghent2025-575-turning-cloud-nightmares-into-cost-saving-dreams cloud costs can feel like a nightmare, creeping up on your Kubernetes infrastructure. But with the right tools, you can be the hero your budget deserves! In this talk, we’ll dive into OpenCost, an open-source solution that can help you track and optimize your cloud spending in real time.You’ll discover how OpenCost works, why it matters, and how you can use it to become the cost-saving champion of your cloud environment. Get ready to conquer Kubernetes costs and take back control of your cloud! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/PVN3XX/ Tue, 04 Feb 2025 15:15:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-575-eng-Turning_Cloud_Nightmares_into_Cost-Saving_Dreams_mp3.mp3?1741041564 18a70ed8-4971-5c9c-9931-0eedcec8e67e 2025-02-04T15:15:00+01:00 Julia Lamenza No 575, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 2 cloud costs can feel like a nightmare, creeping up on your Kubernetes infrastructure. But with the right tools, you can be the hero your budget deserves! In this talk, we’ll dive into OpenCost, an open-source solution that can help you track and optimize your cloud spending in real time.You’ll discover how OpenCost works, why it matters, and how you can use it to become the cost-saving champion of your cloud environment. Get ready to conquer Kubernetes costs and take back control of your cloud! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/PVN3XX/ 00:18:05 https://media.ccc.de/v/ghent2025-679-running-kubernetes-on-small-scale-lessons-learned-on-operating-small-scale-clusters This talk will walk through and provide examples and war stories on how kubernetes can be used not only in large scale environments but also in small and small-ish scale environments. Kubernetes is often considered as the tool to tackle large scale traffic, which is supposed to be used by a big team of engineers. This talk presents an opposite approach which shows how Kubernetes can be used in a very small team with limited resources. It will explore the benefits of running k8s in a small scale and also what pitfalls come with it. It will walk through the steps of provisioning self hosted Kubernetes cluster - kOps - challenges of keeping clusters upgraded without downtime. It will discuss issues encountered in daily operations, applications taking too long to start up anyone, and then how it was tuned with tools like Goldilocks. It will delve into CI/CD on Kubernetes (using Jenkins and ArgoCD). Keeping an eye on operational costs is essential in a small environment and this talk will discuss how kOps can utlize spot instances everywhere and benefits/challenges with spot instances. The idea of downscaling on schedule with py-kube-downscaler project, mutating pods with kyverno will be discussed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/A3QEP7/ Tue, 04 Feb 2025 14:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-679-eng-Running_Kubernetes_on_small_scale_-_lessons_learned_on_operating_small_scale_clusters_mp3.mp3?1741040092 2cb8d161-5981-5564-aaab-659dcfde9606 2025-02-04T14:50:00+01:00 Soham Chakraborty No 679, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 2 This talk will walk through and provide examples and war stories on how kubernetes can be used not only in large scale environments but also in small and small-ish scale environments. Kubernetes is often considered as the tool to tackle large scale traffic, which is supposed to be used by a big team of engineers. This talk presents an opposite approach which shows how Kubernetes can be used in a very small team with limited resources. It will explore the benefits of running k8s in a small scale and also what pitfalls come with it. It will walk through the steps of provisioning self hosted Kubernetes cluster - kOps - challenges of keeping clusters upgraded without downtime. It will discuss issues encountered in daily operations, applications taking too long to start up anyone, and then how it was tuned with tools like Goldilocks. It will delve into CI/CD on Kubernetes (using Jenkins and ArgoCD). Keeping an eye on operational costs is essential in a small environment and this talk will discuss how kOps can utlize spot instances everywhere and benefits/challenges with spot instances. The idea of downscaling on schedule with py-kube-downscaler project, mutating pods with kyverno will be discussed. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/A3QEP7/ 00:29:14 https://media.ccc.de/v/ghent2025-715-continuous-delivery-on-multi-architecture-kubernetes-clusters-with-argocd Kubernetes is the most popular container orchestration platform out there, and for anyone who wants to do GitOps on Kubernetes, ArgoCD is a leading open source project in this space. This presentation will walk you through the management of multi-architecture applications for Kubernetes with ArgoCD. In this presentation, we will run through the process of managing container applications on hybrid arm64 and x86 Kubernetes clusters using ArgoCD for GitOps, including: * Why add arm64 compute nodes to your Kubernetes clusters? * Tooling to build and manage multi-arch containers * Continuous integration and delivery patterns * Workload placement and orchestration in Kubernetes Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/L7WJRN/ Mon, 03 Feb 2025 16:50:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-715-eng-Continuous_Delivery_on_multi-architecture_Kubernetes_clusters_with_ArgoCD_mp3.mp3?1741038225 06f5c5a0-1c46-5ed2-8325-1808a66424e6 2025-02-03T16:50:00+01:00 Dave Neary No 715, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 1 Kubernetes is the most popular container orchestration platform out there, and for anyone who wants to do GitOps on Kubernetes, ArgoCD is a leading open source project in this space. This presentation will walk you through the management of multi-architecture applications for Kubernetes with ArgoCD. In this presentation, we will run through the process of managing container applications on hybrid arm64 and x86 Kubernetes clusters using ArgoCD for GitOps, including: * Why add arm64 compute nodes to your Kubernetes clusters? * Tooling to build and manage multi-arch containers * Continuous integration and delivery patterns * Workload placement and orchestration in Kubernetes Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/L7WJRN/ 00:34:55 https://media.ccc.de/v/ghent2025-760-got-a-secret-can-you-keep-it-mastering-secret-management-in-kubernetes Managing secrets in Kubernetes can be a complex and overwhelming process, especially with the wide range of available options. This talk, designed for intermediate users, aims to demystify the process by providing a practical roadmap drawn from my own journey. I will explore common challenges and share insights from transitioning through various approaches, from Kubernetes' built-in secrets to external tools like Sealed Secrets, CSI Secrets Store, and External Secrets. Through real-world examples and lessons learned, attendees will leave with actionable strategies to manage secrets more securely and efficiently in their Kubernetes environments, while contributing to stronger community practices and more resilient applications. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/HS8ELE/ Mon, 03 Feb 2025 16:25:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-760-eng-Got_a_Secret_Can_You_Keep_It_-_Mastering_Secret_Management_in_Kubernetes_mp3.mp3?1741036907 7de00237-1885-514d-aa72-b4f8405fb1d4 2025-02-03T16:25:00+01:00 Engin Diri No 760, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 1 Managing secrets in Kubernetes can be a complex and overwhelming process, especially with the wide range of available options. This talk, designed for intermediate users, aims to demystify the process by providing a practical roadmap drawn from my own journey. I will explore common challenges and share insights from transitioning through various approaches, from Kubernetes' built-in secrets to external tools like Sealed Secrets, CSI Secrets Store, and External Secrets. Through real-world examples and lessons learned, attendees will leave with actionable strategies to manage secrets more securely and efficiently in their Kubernetes environments, while contributing to stronger community practices and more resilient applications. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/HS8ELE/ 00:26:35 https://media.ccc.de/v/ghent2025-620-simplifying-kubernetes-monitoring-with-icinga Monitoring Kubernetes doesn’t have to be complicated. In this talk, I’ll introduce a new module we’re developing for Icinga, currently in beta, that simplifies Kubernetes monitoring in the same way Icinga has for traditional infrastructure. We’ll explore how this module makes it easier to monitor your clusters’ health and performance, allowing you to identify issues early. Whether you’re new to Kubernetes or managing large-scale clusters, this session will provide a preview of what’s to come and how it can streamline your monitoring processes. Feedback and insights are welcome as we refine the tool. Kubernetes offers powerful orchestration capabilities, but monitoring its dynamic environment can be tricky. In this session, we’ll dive into the development of a new module for Icinga that simplifies Kubernetes monitoring, making it more accessible for users who are familiar with traditional IT infrastructure setups. While the module is still in the beta phase, I’ll walk through its current features, show how it integrates with your existing Icinga setup, and discuss future enhancements. We’ll look at practical examples of monitoring critical aspects like node health, pod status, and resource utilization, all through Icinga’s familiar interface. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/AH78JZ/ Mon, 03 Feb 2025 16:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-620-eng-Simplifying_Kubernetes_Monitoring_with_Icinga_mp3.mp3?1741036827 c76ec3a0-c2f0-5111-9d04-c628dd57a296 2025-02-03T16:00:00+01:00 Blerim Sheqa No 620, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 1 Monitoring Kubernetes doesn’t have to be complicated. In this talk, I’ll introduce a new module we’re developing for Icinga, currently in beta, that simplifies Kubernetes monitoring in the same way Icinga has for traditional infrastructure. We’ll explore how this module makes it easier to monitor your clusters’ health and performance, allowing you to identify issues early. Whether you’re new to Kubernetes or managing large-scale clusters, this session will provide a preview of what’s to come and how it can streamline your monitoring processes. Feedback and insights are welcome as we refine the tool. Kubernetes offers powerful orchestration capabilities, but monitoring its dynamic environment can be tricky. In this session, we’ll dive into the development of a new module for Icinga that simplifies Kubernetes monitoring, making it more accessible for users who are familiar with traditional IT infrastructure setups. While the module is still in the beta phase, I’ll walk through its current features, show how it integrates with your existing Icinga setup, and discuss future enhancements. We’ll look at practical examples of monitoring critical aspects like node health, pod status, and resource utilization, all through Icinga’s familiar interface. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/AH78JZ/ 00:27:00 https://media.ccc.de/v/ghent2025-565-kubernetes-from-scratch-the-hard-way To understand the inner workings of Kubernetes and to prepare for the K8s certification exams, I decided to create a K8s cluster from scratch, the hard way, on premises (“de meterkast”) on virtual machines all using Alpine Linux. This talk is how I tried to do it, how I succeeded, failed and added a CEPH cluster and ETCD cluster along the way. It includes a lot of technical details, but if there is one thing that you should learn during this talk, it’s not about K8s at all: Containers are not VMs! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/CR8UGL/ Mon, 03 Feb 2025 14:00:00 +0100 https://cdn.media.ccc.de/events/cmc/2025/mp3/CMC2025-565-eng-Kubernetes_from_Scratch_The_Hard_Way_mp3.mp3?1741030014 10a3a7bd-bc29-5449-88ed-cfcb5619ddf8 2025-02-03T14:00:00+01:00 Alain van Hoof No 565, 2025, CMC2025, Kubernetes, Kube (B.3.032), CMC2025-eng, cmc2025, Day 1 To understand the inner workings of Kubernetes and to prepare for the K8s certification exams, I decided to create a K8s cluster from scratch, the hard way, on premises (“de meterkast”) on virtual machines all using Alpine Linux. This talk is how I tried to do it, how I succeeded, failed and added a CEPH cluster and ETCD cluster along the way. It includes a lot of technical details, but if there is one thing that you should learn during this talk, it’s not about K8s at all: Containers are not VMs! Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://cfp.cfgmgmtcamp.org/ghent2025/talk/CR8UGL/ 00:42:31 media.ccc.de / RSS 0.3.3 CCC media team media@c3voc.de CCC media team No CCC Congress Hacking Security Netzpolitik A wide variety of video material distributed by the CCC. All content is taken from cdn.media.ccc.de and media.ccc.de A wide variety of video material distributed by the Chaos Computer Club. This feed contains all events from cmc2025 as mp3