How the Department of Defense Moved to Kubernetes and Istio
Talkat KubeCon + CloudNativeCon North America 2019 · on Tuesday, 2019-11-19· at 11:50· Ballroom Sec 20CD - San Diego Convention Center, Upper Level·
summary
Department of Defense migrates production to Kubernetes and Istio using OCI‑compliant, hardened containers stored in a signed artifact repo (170 images) with runtime behavioral detection and custom OPA admission policies that block removal of hardening. A zero‑trust sidecar stack (Envoy/istio + sidecars) runs on legacy F‑16 hardware after a 45‑day pilot and scales across disconnected classified clouds and on‑prem clusters; training targets 100,000 users and CI/CD preserves image fidelity so the approach works at weapon‑system scale.
AI-written summary · about
chapters (16)
- 0:00Intro
- 9:13Layers
- 11:50Cycle
- 14:36Simulators
- 18:01Demo
- 19:37Tech Questions
- 25:03CICD Pipeline
- 27:18Distribution
- 28:28Challenges
- 29:25Fit for Use
- 32:27Open Source
- 33:18Culture
- 34:44Convergence
- 36:37Process and people challenges
- 37:45Container Stack
- 38:25Kubernetes on AWS Gov Cloud
related talks
43mHow the DoD Use Istio for End-to-End Encryption and Authentication
18mKeynote: DevSecOps in the US Air Force
27mHow DoD Uses K8s & Flux to Achieve Compliance & Deployment Consistency
47mIstio on Kubernetes: Chaos, Canaries, Dark Launches
39mUsing Kubernetes to Change Legacy Systems and Processes in the Public Sector
46mThe Journey of Migrating 2500 Apps to Multi-Cluster Kubernetes and Zero Trust Istio
36mExperiences From Running Istio in a K8s Production Environment
40mIstio, your K8S cluster best friend