Stéphane Este-Gracias
Cloud-Native Innovation Lead at ITQ | CNCF Ambassador | Open Source Advocate
Luxembourg
Actions
As an advocate for free and open-source software, I am dedicated to promoting innovation and collaboration. My passion has led me to participate in various initiatives, educating others about the benefits of using open-source software.
Leveraging my expertise in cloud-native technologies, I help teams overcome challenges, identify improvement areas, and develop successful strategies. I am committed to driving positive change and fostering a culture of collaboration and continuous learning, whether working with external customers or our own internal team.
As a Cloud Native Ambassador, I am proud to continue promoting open-source software and inspiring others to join the movement.
Badges
Area of Expertise
Expanding the Contributor Pipeline through Inclusion
The growing demand for maintainers and contributors to sustain and evolve projects is an ongoing challenge. Yet, an untapped talent source—individuals from underrepresented groups—is often overlooked. Systemic barriers and a lack of inclusive practices most project members may not even realize.
This panel brings together members of TAG Contributor Strategy initiatives, including BIPOC, Women in Cloud Native, Blind and Visually Impaired, and Deaf and Hard of Hearing, to discuss how fostering inclusivity can unlock this potential. Panelists will share firsthand experiences of the barriers they’ve faced and discuss what a welcoming environment looks like from their perspectives.
Attendees will leave with actionable strategies to create more inclusive project spaces that attract and retain underrepresented contributors, ultimately ensuring the sustainability and vibrancy of open source for years to come.
Sécurisez la distribution automatique de vos certificats
L'utilisation de certificats est un des piliers de la sécurité.
La génération de ces certificats est habituellement effectuée manuellement et peut prendre plusieurs jours.
Ensuite, le certificat et sa clé privée sont généralement envoyés en clair dans un outil de messagerie,
ce qui fait de cette transaction, une des premières failles de sécurité, car la clé privée est possiblement exposée.
Ensuite, de plus en plus, les équipes de sécurité demandent une mise à jour plus fréquente de ces certificats.
Pour éviter que la gestion des certificats ne devienne un gouffre financier et de sécurité, il est nécessaire de mettre en place un système automatisé.
Cette session va montrer comment utiliser Vault et Consul-Template afin de sécuriser la génération et la distribution automatique de ces certificats.
Le discours s'appuie sur un exemple concret de mise en place d'une PKI interne à trois niveaux avec une CA racine externe, ce qui représente un cas d'usage courant.
A l'aide d'une démo, nous verrons comment générer et mettre à jour des certificats feuilles à courte durée de vie et les distribuer automatiquement.
Enfin, une rotation complète de la PKI gérée par Vault montrera que la mise à jour des certificats peut être rendue complètement transparente par l'utilisation de Consul-Template (ou outils similaires comme Vault en mode agent, Nomad).
Panel: Platform Resilience, Built on Belonging
Behind every high-impact Internal Developer Platform (IDP) lies a socio-technical system, but many platform teams struggle not with YAML or APIs but with attracting and retaining the right talent. A vast pool of skilled engineers hesitate to apply because they don't feel they belong, leaving organizations unknowingly missing out on innovation.
This panel brings together members of Merge Forward - a CNCF initiative uniting community groups across disability, gender, neuro- and speech diversity - to explore how designing for belonging drives measurable business outcomes: stronger Developer Experience (DevEx), higher platform adoption, greater retention, and ROI.
Through stories from platform engineers, attendees will learn how empathy, accessibility, and allyship accelerate team performance and maturity - turning cultural health into a core metric of business success.
Because in platform engineering, resilience isn't just built into systems - it's built between people.
OCI Registry: Beyond Container Images - Migrating from GitOps to RegistryOps
This session explores the expanded capabilities of OCI registries beyond traditional container image storage, focusing on a use case to migration from GitOps to RegistryOps.
Leveraging OCI registries for storing Helm charts and Kubernetes manifests presents a novel approach to manage deployments. The discussion will include key features and capabilities of tools such as Flux and ORAS, highlighting their role in enhancing the functionality of OCI registries.
By elaborating on the practical use cases, such as the deployment of signed Helm charts in secure environments, signed GitOps artefacts delivery, this presentation aims to showcase the versatility of OCI registries and their pivotal role in secured software supply-chain.
Merge Forward: Branching Inclusion, Merging Belonging
In open source, we branch to innovate and merge to unify. The Merge Forward initiative embodies that ethos by uniting diverse underrepresented groups and allies to build an inclusive and equitable cloud native future.
This panel brings together voices from Merge Forward to share stories of systemic barriers, allyship in action, and how belonging -not just representation- fuels innovation. From accessibility to neurodiversity, gender equity to speech diversity, each perspective adds depth to our collective innovation. Attendees will gain insight into how lived experiences can shape stronger, empathetic teams, driving technical and community success.
Through candid conversation, panelists will explore how merging perspectives transforms inclusion from initiative into infrastructure, and how allies can help shift culture from checkbox compliance to meaningful integration.
Because innovation begins not in code, but in connection - and belonging is the most powerful commit we can make.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top