Evolving Baremetal-as-a-Service: Secure Multi-Cluster Network... Yushiro Furukawa & Mitsuhiro Tanino

This talk covers the evolution of Baremetal-as-a-Service (BMaaS) into a cloud-native infrastructure by integrating Kubernetes Custom Controllers, OpenStack Nova extensions, and AthenZ-based automation. The speakers, Yushiro Furukawa and Mitsuhiro Tanino from LY Corporation, discuss the development of a secure and scalable environment that allows consistent operation of both physical and virtual machines. They explore the creation of declarative APIs for baremetal provisioning and lifecycle management, the implementation of ACL-based access control for secure communication between Kubernetes clusters, and the integration of AthenZ for automated certificate issuance during baremetal instance creation. This session shares valuable insights into combining legacy cloud expertise with modern automation and policy-driven design in Kubernetes environments.