Practical Guide to Frictionless Cloud Native Security for DevOps
summary
Comcast demonstrates that security can be password-free service delivery by wiring Cloud Foundry and Kubernetes into a central secret management system, automating patch and stemcell updates via CI/CD pipelines, and adding a small Cloud Foundry plugin to inject credentials at runtime. The claim is concrete: bake security into build/test/deploy so teams stop rotating spreadsheets, reduce manual ops, and keep deployment velocity high — the live demo and internal rollout show it working in production.
AI-written summary · about
chapters (10)
- 0:00Introduction to frictionless security
- 3:02Security vs velocity compromise
- 7:25Baking security into defaults
- 10:26Implementing mesh security
- 14:46Living systems and repair
- 18:24Central management and secrets
- 21:43Open source commitment
- 25:23Community and collaboration
- 28:09Spring Cloud security example
- 30:42Summary and Q&A
related talks
41mCloud Native Security For The Rest Of Us
23mCloud Native Security for the Rest of Us
35mCloud Native Security for the Rest of Us
22mKeynote: Cloud Native Security: Rotate, Repair, Repave
53mWe Come Bearing Gifts: Enabling Product Security with Culture and Cloud
35mBuilding Security In: Using Cloud Foundry to Secure CF Apps
10mKeynote: CloudNativeDevSecOps
52mSecurity in Cloud-Native