# Elevating the Asturian technological landscape through world-wide collaboration

## What do we do?
We help promote the technology industry in Asturias by reducing the gap between our technology professionals and a broader international network of professionals around the world.

## Why do we do it?
In recent decades, traditional Asturian industries and sectors have been losing strength and relevance. It is time to shake it all up and place the tech industry as the main driver of our region. We have talent and great potential, so we must act locally and think globally.

## How do we do it?
We follow a bottom-up approach to empower our tech professionals. Cloud Native Asturias provides them the international framework needed to shine and be heard beyond our frontiers. We are all in the same boat and we can’t do it alone.

## When is it a good time to do it?
NOW! Join us! Reach out and start creating impact from day 1.



Cloud Native Asturias

Welcome to the Cloud Native Asturias Jun'21 event! On this occasion, we have two amazing speakers that bring to the table their cloud-related talks.

Note: All talks will be driven in English

# Docker: Strong Foundations for Verifiable Secure Deployments
## Jose Manuel Redondo, PhD & Associate Professor
Docker is one of the most used software for containerizing applications nowadays. However, deploying an application in Docker requires fine-tuning the configuration to achieve effective isolation and avoid security problems. In this talk I show a way of doing that following tried and trusted security recommendations, so anybody can follow them to achieve a high-security level even starting with basic knowledge of Docker.

# Advanced analysis of container's security
## Jesus Escolar, CEO of EXELERYS
CEO of EXELERYS, an emerging start-up fighting cybersecurity threats through multiple consolidated services and solutions portfolio across EMEA. He has intervened in multiple events including Cloud Expo Europe, ISACA, InfoSec, CNCF Paris, CNCF London, UbuCon Europe, UbuCon France, SWWARP, to provide a holistic view on the actual and future view on threat intelligence, where problems and solutions for known and unknown issues were addressed and discussed.

Prior to founding EXELERYS, Jesus was working actively with security vendors worldwide providing enablement and education across the different security issues the corporations faced, working closely with different cross-department teams for years building active solutions for their enterprise customers.

EXELERYS in pioneering the integration of security operations in the Cloud Native Applications ecosystem, in the DevOps CI/CD lifecycle and in the serverless ecosystem with multi-vendor integrations and open security standards.

You can reach him at jesus.escolar@exelerys.com or follow the Twitter accounts: @EXELERYS and @VirtualBlackCat

Cloud Native Asturias Jun'21

Welcome to the [Cloud Native Asturias Jun'21](https://community.cncf.io/events/details/cncf-asturias-presents-cloud-native-asturias-sep21/) event! On this occasion, we have two amazing speakers that bring to the table their cloud-related talks.

Note: All talks will be driven in English

# Practical Observability
## Daniel González Lopes, Site Reliability Engineer at k6.io
Observability gives developers the power to ask questions about their systems and get answers based on the existing telemetry they produce.

During this talk, we'll start by introducing some core observability concepts/ideas to quickly jump into the why's and how's of the most common types of telemetry that your system can expose: Logs, Metrics, Traces, and Profiles.

# Stranger Danger - How attackers can own your Kubernetes cluster
## Matt Jarvis, Senior Developer Advocate at Snyk
Kubernetes is a powerful and highly configurable tool, but by default it's extremely insecure. In this live hacking session, I'll show how an attacker can expand the blast radius of an application exploit through to control of the entire cluster whilst demonstrating the misconfigurations which allow this to occur and showing how you can avoid these scenarios in the real world. 

Cloud Native Asturias Sep'21

Welcome to the Cloud Native Asturias Dec'21 event! On this occasion, we have four amazing speakers that bring to the table their cloud-related talks.

- **If you want to attend in person**, please register at https://community.cncf.io/events/details/cncf-asturias-presents-cloud-native-asturias-dec21/ for this event (limited tickets available). You will get a free ticket that you will have to show at the entrance on the day of the event.
- **If you plan to attend virtually**, just connect to twitch.tv/cloudnativeasturias!

**Note**: All talks will be driven in English

# Cloud in telco business
## Abel Ruiz Huerta, VP Solution at Alvatross
In this talk, we will be presenting what Alvatross is, how the need to build this new product unit arose in Satec, and the products and services we provide to our customers.

We will explain how telecom operators and, in general, digital service providers and their needs are heterogeneously evolving in terms of information systems and infrastructure around the world.

Finally, we will present how Alvatross is providing them with solutions to facilitate their transformation, and how worldwide organizations like TMForum are defining standards based on cloud-oriented technologies, not only for computing hardware, but also for network infrastructures.

Infrastructure as Code meets Compliance as Code: Deploying secure machines automatically
Jose Manuel Redondo, Tenured Associate Professor at the University of Oviedo
There was a time when system administrators manually installed virtual machines or had “model machines” exported ready to be used. This is no longer the case, and virtual machines, and infrastructure in general can be expressed, and automatically obtained, from a source file that models them. The same happens with security compliance, as there are ways to develop code that, once executed, deploy a series of trusted security controls that harden a virtual machine making it less likely to be attacked. This presentation shows a practical example of both: a machine deployed automatically via Vagrant that uses their provisioners to also harden the machine to a very high security compliance index according to the Lynis audit tool.

# Kubernetes local development: Presentation of useful tools to develop with Kubernetes locally
## Andrés Torres, Director of Backend at Backbase
Kubernetes is an open-source project for automating deployment, scaling, and management of containers. It has rapidly become the standard to run production workloads and the community around it is just great!

But developing in Kubernetes presents some challenges. The typical development workflow looks like this: write code, build a Docker image, push it to the registry, redeploy, validate your changes, rinse and repeat. This flow is not only slow, but it also prevents us from benefiting from standard features of Java tools such as fast incremental builds, automatic hot reloads or powerful debuggers.

Of course, you could always run manual kubectl commands to deploy to your local cluster. But this process becomes quickly cumbersome and can be problematic in cases of microservices where you might have complex dependencies between the deployed applications.

Today, there are many available tools designed for Kubernetes deployments specifically for developers. Their primary goal is to help you make the feedback loop as fast as possible (code-deploy-refactor) and they can be used with any kind of cluster (remote or local) making them the perfect solution for developers who wish to develop Kubernetes enabled applications.

We will review some of those tools to improve the developer experience in Kubernetes for developers. You will be able to take full advantage of tools like Maven, Gradle, dependency caching, popular frameworks hot reloads (Spring Boot, Quarkus, Micronaut, ...) or IDE debuggers (Eclipse, IntelliJ, VS Code, ...) while developing your application directly in Kubernetes.

We will explain and demo with examples:

- Skaffold
- Telepresence
- Okteto


# You Heard of Infrastructure as Code, What About the Application? Introducing Application as Code
## Ravi Lachhman, Field CTO at Shipa
The amount of burden that is placed on software engineers is constantly increasing. With shortening sprints and the number of items shifting left, the learning curve and toil seem to be ever-increasing. Writing the feature today is less than half the battle to get the features into the hands of the end users. Navigating not only deployment complexities but cloud native infrastructure and confidence-building complexities. Similar to the benefits that Infrastructure-as-Code brought to the infrastructure world, Application-as-Code strives to simplify the developer experience. Abstracting away application infrastructure and deployment complexities such as networking and security scanning. Now the authors of AaC can be the enforcers. Learn in this session embracing the AaC paradigm and as new technologies are brought onboard how operational pushback can be erased with AaC.

.css-1v8m0oz{color:currentColor;-webkit-text-decoration:none;text-decoration:none;}Cloud Native Asturias

Cloud Native Asturias