Member-only story

A full-featured HA production Kubernetes environment, in an hour

A proposal for a faster, more secure path to production through industry-wide collaboration

Wilson Mar
8 min readDec 20, 2022

It’s a big ask to set up a production-quality Kubernetes-based capability within an enterprise:

  1. Versioning of code in various states of readiness across DEV, QA, STAGE, PROD
  2. Invocation of CI/CD Pipelines (via Git Hooks, CLI, or webapp GUI) to build, scan, and test container images and resources in clouds
  3. Synchronization of data across multiple Kubernetes nodes repeated in each Availability Zones and replicated among Regions for High Availability
  4. Enforcement of rules for each type of code to identify known vulnerabilities
  5. Enforcement of permissions to define “least-privilege” access by each separate persona/role
  6. Enforcement ACL (Access Control Lists) so services only talk to services they need (but only to them, and none other)
  7. Configuration and coordination of dozens of additional services (add-ons within Kubernetes) so they work well with each other
  8. Prepare, process, and move data using utilities inside and outside Kubernetes (using mTLS to communicate with services outside Kubernetes)
  9. Running functional test code and test data to determine whether Continuous Deployment to production should occur (and quickly)

--

--

Wilson Mar
Wilson Mar

Written by Wilson Mar

Leader in DevSecOps in CI/CD performance to secure machine learning and data systems. https://linkedin.com/in/wilsonmar https://montana.medium.com/membership

No responses yet