Developing and testing new features for applications on only one cloud environment can quickly lead to a situation where several features block each other and time-consuming solutions need to be found. In this talk feature environments will be presented to accelerate the development of new features by creating environments automatically via CI/CD pipeline when a new feature branch is created. The feature environment creates a short-lived copy of the current development infrastructure for the development and testing of a specific feature.

In this talk, Chris will trace back the origins of how policies are often incepted, how they can get out of hand, be slow if not impossible to update and measure compliance, and often lead us to the question of **is the policy helping or hindering**.
From this talk you'll learn how to use a software development pattern and product ways of thinking towards how your organization can manage policy; achieve continual updates to the policy allow the risk mitigations to move as fast as the risk does, and not get in the way and be easy to measure compliance.

Choosing the right open-source project to use can be quite challenging - not knowing if it’s going to be the right fit, how it will behave, and if you end up wasting time trying to make it all work. We’ve all been there. But what if I told you there’s a practical way to have a clear understanding of how to incorporate an OSS project in your environment? In this talk, I’m going to speak about the DevOps perspective on open-source and the challenges Infra-focused engineers have with choosing the right project for their environment. As a DevOps Engineer, I’ve seen a lot of things, stumbled upon a lot of non-biased decisions, and so will present practical advice on how to choose an OSS project for your dev/prod environment and will talk about the business mindset you should have to evaluate the key indicators based on your needs and specific pain points.

Onboarding is difficult, finding information can be a pain, collaborating across teams or domains is hard, and no one likes context-switching between cloud portals, CI/CD Tooling, and whatnot. This and other modern frustrations are causing friction in the day-to-day lives of developers. This friction is taking away pleasure, and effectiveness, and will eventually result in bad code, and people leaving or being burnt out. Investing in Developer Happiness is key, but where to begin? Should you build yet another portal? Implement that new DevOps platform? Try that Inner Source thing? In this session, we're discussing all of this and taking a look at Backstage, an Open Source platform you can use to build an Internal Developer Portal and massively improve your developer experience. Because happy developers write happy code.

Security-specific tools are often overlooked until they become a requirement, necessity, or things go terribly wrong. While many organizations will build a security team to address related issues, smaller organizations and individual contributors do not have this option. This talk is divided into two sections. In the first one, Anais will share the similarities between climbing and the importance of establishing a security-centric mindset. What happens if we do not have security specialists supporting our team? Free-climbing might be an option for experts with years of experience but not for most cluster admins. The second part will go over security-specific tools in the cloud-native ecosystem. A live demo will focus on Trivy, an open-source tool with 11k+ stars on GitHub. Anais will showcase how we can get started and the benefits of integrating cloud-native security tools, such as Trivy, into our existing processes and monitoring stack.