Cloud Native Sydney: Holiday Wrap-Up 2026 🎄
Merry Christmas and happy holidays from Cloud Native Sydney! 🎄
Join us for our final meetup of 2026, a holiday wrap-up with plenty of festive cheer, good company and, of course, some more cloud native talks. It’s the perfect way to close out the year before we’re back in February 2027.
🎤 Talk 1: Can I Trust You? Service-to-Service Identity with SPIFFE
Oliver Bassett
Inside the cluster, services often just trust each other. That works until the Order Service tells Dispatch to ship packages without charging the customer. Follow an SRE’s journey from implicit network trust, through API keys, shared secrets and mTLS, to workload identity with SPIFFE and SPIRE. You’ll leave with a clear mental model of workload identity and practical patterns for your own services.
🎤 Talk 2: One Schema for Twenty Security Tools
Johan Cornelissen
Johan’s team pulls security findings from nearly twenty sources, including AWS Security Hub, Inspector, Prowler, Snyk, Tenable, Microsoft Defender, GCP Security Command Center, GitHub and GitLab, and normalises them all into OCSF, the open security finding schema. This talk covers what an open schema solves and what it still leaves to you:
Mapping vendor findings to OCSF classes, and extending the schema where it falls short
Handling vendors that disagree on timestamps, resource IDs and what “closed” means
Building one stable resource ID across tools and clouds
Keeping the contract honest with schema validation and generated clients in Go, Python and Node
You’ll come away with a practical approach to putting many data sources behind one schema, and an honest look at the trade-offs.
🗓️ Agenda
5:30pm: Doors open, food, drinks and festive cheer
6:00pm: Welcome
6:10pm: Can I Trust You? Service-to-Service Identity with SPIFFE
6:50pm: One Schema for Twenty Security Tools
7:30pm: Networking and holiday wrap-up
8:00pm: Close
Thanks for an amazing 2026, everyone. See you there! 🎉