Balancing Act: HanseMerkur's Regulatory Preparation through Process and Tool Innovation
summary
HanseMerkur replaces brittle multi-tenant clusters with a bare‑metal platform (three clusters, ~400 CPU cores, 6 TB RAM) using Calico Enterprise for microsegmentation and GitOps via Argo so teams submit YAML merge requests instead of tickets. Global tiers enforce ingress/egress and a single global pass enables namespace owners to manage workload NetworkPolicies; OPA checks selectors, Calico ships flows to Elastic/Kibana and SIEM, staging holds ~2x the policies of prod, and the org records ~3,000 merge requests with median merge time under one day.
AI-written summary · about
chapters (8)
- 0:00Introduction and speakers
- 1:05About Project Calico
- 8:08HanseMerkur’s regulatory needs
- 14:18Technical approach and setup
- 16:06Network policy tiers and segregation
- 23:50Micro segmentation and visibility
- 27:41Learnings and key takeaways
- 28:02Q&A session
related talks
23mContainer and Kubernetes security policy design: 10 critical best practices
52mImplementing holistic security for containers and Kubernetes
31munlighted, but what about Security and Multi tenancy?
37mApache Mesos and Security: The Joy of Mesos with Calico
32mContainer and Kubernetes security policy design
25mNetwork Segmentation at Scale: GitOps-Driven Multi-Tenant Isol...
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
29mManaging a Multi-Tenanted Kubernetes Cluster in Production