Platform Engineering Loves Security: Shift Down To Your Platform, Not Left To Your Developers! - Maxime Coquerel, Royal Bank of Canada
Talkat KubeCon + CloudNativeCon Europe 2025 · on Thursday, 2025-04-03· at 11:45· Level 1 | Hall Entrance N10 | Room F·
summary
Argues that platform teams must shift down to the platform by baking security controls into templates, CI and the developer UX rather than offloading them to engineers. Offers eight practical tips and examples from regulated financial environments: IaC scanning with Checkov/KICS, container scanning plus sign container images (ChainGuard), policy with Kyverno/OPA Gatekeeper and PSS, distroless images, runtime detection, CI enforcement in GitHub Actions/GitLab/Jenkins, Backstage portals and preventive security control defaults plus short‑lived OIDC credentials.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:44Cloud Native security challenges
- 6:38Security blocking innovation
- 9:46Platform engineering solution
- 13:39Security controls from code to cloud
- 19:54Shift left with templates
- 21:40Kubernetes foundation
- 23:08Start small prioritize pain
- 24:13Security culture mindset
- 25:18Resources and closing
related talks
21mIncorporating Security into Platform Engineering: The Dos and Dont’s
15mPlatform Engineering Security
29mSecuring the platform: Hard-won lessons from the teams who've been breached, scaled, and survived
31mPrioritizing Trust while Creating Applications
14mBuild Cyber-Awareness in Platform Development Teams
22mShifting left, how security fits into the DevOps story
38mPrioritizing Trust While Creating Applications
26mCompliance-Aware Platform Engineering