Keynote: Modern Least Privilege with DevSecOps

on YouTube ↗17m

" summary

Describes a platform-first security model built on Kubernetes that cuts patching from six months to about three days at one bank by automated rolling updates, immutable images and credential rotation, embedding roughly 10 of 12 pipeline controls so developers don’t craft Dockerfiles, and rotating secrets on node touch. Uses k-native scale-to-zero, Build Service and buildpacks, Cluster API for declarative OS rollouts, a Tanzu application catalog for vetted open source, and aims for ephemeral identity via SPIFFE and envoy + Mesh7 API protection.

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 0:18Platform teams
3. 1:17Continuous delivery
4. 2:59Least Privilege
5. 5:25The 3Rs
6. 7:48Modern Least Privilege
7. 9:52Scaling to Zero
8. 10:49Modern Software Supply Chain
9. 12:09declarative OS patching
10. 13:26Tanzu Application Catalog
11. 13:55Spring Framework
12. 15:02Wrapup

" related talks

• 09mKeynote: Modern Least Privilege and DevSecOpsJames Watters · Cloud Native Security Conference North America 2021
• 11mKeynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...Kirsten A. Newcomer · Cloud Native Security Conference North America 2021
• 06mSponsored Keynote: Kubernetes is the Perfect Platform for Enforcing Zero Trust SecurityFei Huang · CloudNativeSecurityCon North America 2023
• 04mKeynote: How Developers Help Scale Kubernetes SecurityConnor Gorman · KubeCon + CloudNativeCon Europe 2022
• 23mModern Least Privilege and DevSecOpsAndres Vega · DevOpsDays Cairo 2022
• 32mHow cloud-native applications are helping orgs stay ahead of cybersecurity threatsJerome Walter · FOSSASIA Summit 2020
• 28mKubernetes Security Low-Hanging FruitLuke Bond · Container Camp AU 2019
• 06mKeynote: Skip the Anxiety Attack - Build Secure Apps with KubernetesJason McGee · KubeCon + CloudNativeCon Europe 2018