Self-Service Multi-Cloud K8s Platform at a Regulated Financial Enterprise
summary
An enterprise-grade self‑service multi‑cloud Kubernetes platform provisions production clusters from CI/CD using Terraform patterns per cloud and Flux CD GitOps, integrates CSI drivers, external‑dns, KMS and monitoring, and enforces 20–30 Gatekeeper policies with unit tests. Cluster specs and platform releases become immutable artifacts in a datastore, dependabot suggests updates, and a custom controller issues time‑bound RBAC tied to the entitlement system. Platform supports separate clusters per BU (example: ~100 clusters) for 20k developers and reports compliance centrally.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:48Developer challenges
- 3:16Building multi-cloud K8s
- 7:29Multi-cloud GitOps
- 10:57Security and compliance
- 13:05Audit chain for security
- 15:35GitOps deployments
- 17:24Just-in-time cluster access
- 18:50Platform benefits
- 19:11Q&A
related talks
23mScaling Kubernetes in Regulated Environments Through Platform APIs
37mBuilding a Managed Platform While Maintaining a Good Developer Experience
36mThe Architecture of a Multi-Cloud Environment with Kubernetes
34mTaking Back Control: Building Cloud-Agnostic Container Platforms for Regulated Environments
33mKubernetes-Driven Multi-Cloud Deployments: Maximizing Scalability and Flexibility
36mBuilding a CI/CD driven infrastructure for managing Kubernetes clusters
35mKubernetes journey
27mHow DoD Uses K8s & Flux to Achieve Compliance & Deployment Consistency