Member-only story
A full-featured HA production Kubernetes environment, in an hour
A proposal for a faster, more secure path to production through industry-wide collaboration
8 min readDec 20, 2022
It’s a big ask to set up a production-quality Kubernetes-based capability within an enterprise:
- Versioning of code in various states of readiness across DEV, QA, STAGE, PROD
- Invocation of CI/CD Pipelines (via Git Hooks, CLI, or webapp GUI) to build, scan, and test container images and resources in clouds
- Synchronization of data across multiple Kubernetes nodes repeated in each Availability Zones and replicated among Regions for High Availability
- Enforcement of rules for each type of code to identify known vulnerabilities
- Enforcement of permissions to define “least-privilege” access by each separate persona/role
- Enforcement ACL (Access Control Lists) so services only talk to services they need (but only to them, and none other)
- Configuration and coordination of dozens of additional services (add-ons within Kubernetes) so they work well with each other
- Prepare, process, and move data using utilities inside and outside Kubernetes (using mTLS to communicate with services outside Kubernetes)
- Running functional test code and test data to determine whether Continuous Deployment to production should occur (and quickly)