From Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
summary
Hamburg Port Authority runs a GitOps-driven fleet of 35 clusters using Terraform modules for infra, a homegrown templator for manifests, and an Argo CD per cluster pattern for deployment and reconciliation. Kyverno enforces a generated default-deny network policy so namespaces automatically get compliant rules, secrets live in an external Vault, and runtime/config scans use Falco rules and Trivy manifests declared in Git so audits and automated remediation work reliably in production.
AI-written summary · about
chapters (8)
- 0:00Introduction and context
- 1:12Organizational background
- 3:22Compliance and standards
- 4:44Infrastructure solution
- 13:51Policy enforcement
- 17:09Automated security auditing
- 19:47Summary and learnings
- 21:11Q&A session
related talks
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Gr...
25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...
20mScale production grade K8s Multi-Cluster environments using GitOps
30mDeclarative by Default, Secure by Design: GitOps as a Control Plane for Governance
24mOne stop talk for kubernetes security !!
28mHow To Automate Your Governance Strategy for Hundreds of Kubernetes Clusters
35mKubernetes journey
45mKubernetes Operability Tooling