DevSecOps Ain't That Hard, a Framework
summary
Claim: a generic DevSecOps cloud is built at home on my dime using open-source tools and deployable immediately. Implementation uses Terraform bootstrapping Kubernetes then Flux plus Istio, Keycloak, Vault, Grafana, Tekton for CI/CD and GitOps templates. Result: templates produce runnable services with SSO and mesh-level auth, observability and alerts, and a cost profile dominated by telemetry — cost $2,500 to $3,000 a month versus SaaS bills — demonstrated end-to-end and operable.
AI-written summary · about
chapters (13)
- 0:00DevSecOps framework intro
- 2:04DevSecOps computer model
- 5:08Cloud hardware components
- 7:43Five pillars of DevSecOps
- 9:00Open source tooling choices
- 11:13Kubernetes with Terraform/Flux
- 13:24Tool installation order
- 14:56DevSecOps platform advantages
- 17:37Adding new services
- 22:38Security with SSO and zero trust
- 25:29Service mesh visualization
- 28:27Cost optimization strategies
- 30:26Total cost benefits
related talks
38mDevSecOps - what does it mean and where is it taking us?
28mSupport and Tools to Help You Accelerate Toward DevOps
01h 01mRethinking the “Sec” in DevSecOps for modern architectures
25mDevOps for the Startup
31mDevSecOps, or How to Integrate Security into DevOps Practices
39mDevOps to DevSecOps journey: what is possible to cover with free and open source tools
36mDevOps Security - Is It Really So Difficult?
32mHow to fit Sec into DevOps without Security team