Hybrid-Cloud, HIPAA Compliant Enterprise with Kubernetes
summary
UPMC runs Kubernetes on-prem (VMware, Red Hat Atomic/CoreOS) and in AWS us-east-1 across three AZs, with CI pipelines pushing images to ECR and VPNs to on‑prem. Compliance choices: encryption at rest via encrypted EBS volumes and KMS, encryption in transit with TLS/searchguard, user-level auditing and BAAs. For stateful workloads an Elasticsearch Operator manages TLS, AZ distribution and automated S3 snapshots; a Kong operator plus Kubernetes NetworkPolicies forces inter-service traffic through the API gateway to centralize auth, logging and rate‑limiting.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 1:41What is HIPAA
- 3:16Why HIPAA
- 4:56OnPremises
- 6:46APIs
- 7:20Cloud Infrastructure
- 11:40Stateless Apps
- 12:13Stateful Apps
- 14:53Elastic Operator
- 17:09Kong Operator
- 20:53Questions
- 26:10HIPAA Compliance
related talks
15mZuluCloud Keynote
30mEdge Kubernetes and Healthcare: A Next-Gen Architecture that Scales Across Thousands of Locations
49mPublic cloud in regulated industry, not just swipe of a cred
05mSponsored Keynote: Kubernetes Everywhere
39mDelivering Secure Healthcare Applications with OSS
25mBreaking Free From the Cloud: Banking on Self-Hosted Kubernetes
31mAn Adventure in Multi Cloud with Kubernetes and Distributed Data
15mGoing Multi Cloud in a Hurry with Quality and Style