Delivering a CF Platform for Data Protection Services at Gemalto - Dan Young
summary
Gemalto runs a Cloud Foundry-based marketplace called D-Pod that provisions per-tenant orgs on Pivotal CF in AWS, fronting physical HSMs in two data centres to offer HSM as a service and key-management bundles for apps. Deployment is fully reproducible via Concourse: non‑prod foundations are shut down at night, upgrades from package feeds narrow CVE exposure to hours, smoke tests run every 5–10 minutes, and a Concourse stopover snapshot pattern promotes identical artefacts across environments. Compliance targets include FIPS 140‑2 aiming level 3 and GDPR; Canada production is live, Frankfurt region coming.
AI-written summary · about
chapters (9)
- 0:00Introduction and welcome
- 1:24Platform as a product mindset
- 5:40Sustainable engineering culture
- 9:17Reproducible Cloud Foundry pipelines
- 12:32D-Pod platform overview
- 18:44HSM as a service architecture
- 21:45Global expansion plans
- 24:33Continuous compliance auditing
- 26:30Q&A session
related talks
15mPivotal CF, Everything Changes
31mPut Your Money Where Your CF Is
35mRunning Cloud Foundry in a Compliance and Security Focused Environment
32mLearnings from a DevOps Organization in the Making
26mKeynote: A Platform for the Enterprise: Where Maturity and Innovation Intersect
25mThe Essential Getting Started Guide to Cloud Foundry
19mKeynote: Confessions of a Cloud Foundry PaaS Product Owner: How to Create a Successful Devops Team
02mCloud Foundry