Kubernetes and compliance in the Real World by Travis Jeppson from Nav

GDG Salt Lake
Wed, Jun 12, 2019, 6:00 PM (MDT)

About this event

We'll serve Pizza provided by our sponsor, Nav Inc, at 6:00 P.M., the talk will start at 6:30 P.M.

Travis Jeppson is Sr Director of Engineering at Nav (nav.com), husband, father, Star Wars fanatic, and bald.

At a high level, Travis will go over what it took for Nav to pass their first compliance check with their application in Kubernetes.

At a lower level, he'll discuss what PCI/HIPAA compliance is like in a world of containers. How to translate, and prioritize, the requirements from a traditional model, using virtual machines, to using a containerized model. What tools are already provided with Kubernetes, such as taints and tolerances, which tools are plug-ins, such as network policies; and what is missing and requires an external service.

He'll briefly cover Nav's build pipelines and why adding in security checks into the docker builds is important to maintaining a compliant environment.

Finally, he'll discuss how moving forward you can reach a point of attaining a state of constant compliance; there is no reason to struggle to "become" compliant on a quarterly, or yearly, cadence.

The Google Development Group Salt Lake is sponsored by Google, Inc. and the meeting space is provided by ., our sponsor. JetBrains provides a license for one attendee; drawing takes place at the end of the evening.