Is it ODD to shift left? Becoming elite DevSecOps performers
summary
Cites a Red Hat survey of ~3,600 customers where 86% adopt containers but only 26% run them in production and over 90% of those saw breaches or outages, arguing the gap is process not just skills. Recommends OpenTelemetry and open pipelines, GitOps with GitHub Actions/flux, Terraform to provision dashboards and alerts, CI tests that define spec limits and SLIs/SLOs, frequent chaos engineering to destroy and rebuild clusters, and measures shown by DORA metrics to reach elite DevSecOps performance.
AI-written summary · about
chapters (9)
- 0:00Introduction and agenda
- 1:41Challenges in modern systems
- 3:51Process capability and rigor
- 7:13Data quality and metrics
- 13:32Observability as code
- 17:04Observability-driven development
- 23:28Performance engineering tactics
- 34:44Characteristics of elite teams
- 44:15Implementation and conclusion
related talks
56mDevOps in a containerized world
41mDevOps for Java Developers (or maybe against them?!)
44mDevOps for developers (or maybe against them?!)
10mDevOps on the Edge!
46mWhat Security People Want: Making DevSecOps Happen with Containers
11mKeynote: Like a Magic Eye Illusion: Seeing the Bigger Picture for Cloud-Native S...
40mDevOps, 12 Factor, and Open Source
42mCloud Native Applications