Building GDPR, ISO27001 Containerized Application for continuous compliance
summary
Shows a concrete pipeline: image scanner builds SBOMs, maps 932 images to CVEs and an admission controller blocks pods with high‑severity CVEs before deployment; network policies are auto‑recommended from observed traffic and can be staged then enforced to move a namespace to default‑deny without outages. Adds an egress gateway that gives pods stable external IPs for firewall audit, uses WireGuard for cluster encryption, and emits enriched flow logs (5‑tuple + k8s context) for on‑demand compliance reports.
AI-written summary · about
chapters (10)
- 0:00Compliance for containers
- 4:49Traditional methods fail in Kubernetes
- 7:39Dynamic networking challenges
- 14:21Vulnerability management
- 18:58Micro-segmentation and egress
- 25:13Encryption in transit
- 27:20Compliance reports and monitoring
- 31:19Calico simplifies compliance
- 40:44Policy enforcement in Calico
- 48:04Summary and Q&A
related talks
30mA secure journey on Kubernetes
37mAchieving High Security at Scale with Microservices
48mSecurity and compliance for container-based microservices
21mHow containers make security and compliance instantly easier
24mA Checklist for Security from the Container to the Kubernetes: An Overview End to End
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
18mPractical End-to-End Container Security at Scale
27mRethinking Compliance in a Containerised World