DeveloperWeek New York 2019

Installing Kubernetes is easy. Ensuring it complies with your organization’s enterprise governance and security requirements isn’t and requires a technology plan. In this technically-focused talk, Arkadii will summarize common prerequisites for running Kubernetes in production, and how to leverage fine-grained controls and separation of responsibilities to meet enterprise governance and security needs. The presentation will outline a technology plan and discuss basic requirements for audit, security, authentication, authorization, integration with existing identity broker, logging, and monitoring. The audience will learn whether cloud-hosted Kubernetes cover these requirements, how to integrate a compliant Kubernetes installation with their existing cloud infrastructure and how to handle cross-team communication (network/compute/storage/security). Additionally, since on premise Kubernetes deployments have their challenges, Arkadii will cover the limitations of a bare-metal installation, interactions with vSphere’s API, achieving HA, reliability and disaster recovery, as well as handling OS upgrades, security patches, and Kubernetes upgrades. The session will conclude with a quick outlook of what’s next, including infrastructure as a code, immutable infrastructure, and GitOps.