Delivering Secure Healthcare Applications with OSS
summary
A Kubernetes platform called Batcave uses exclusively open source components (notably Big Bang from Platform One) to stand up secure EKS clusters with EKS + Flux + Argo CD, Kyverno, Istio, Prometheus and Grafana; it hits an 80% inheritance of the NIST 800-53/ARS baseline, earns a full independent ATO, and goes from zero to prod in under six months. Delivery options include single-tenant clusters or multi-tenant namespace/node isolation (node-per-app reduces blast radius), and an 18-month migration was compressed to ~3 months in a real migration.
AI-written summary · about
chapters (10)
- 0:00Introduction to Batcave
- 2:57Overcoming federal barriers
- 4:58Cultivating user value
- 10:37Open source and partnerships
- 14:24The utility belt tech stack
- 16:43Platform delivery models
- 22:16ATO and operational strategy
- 25:25Security data lake strategy
- 29:07Accomplishments and future
- 35:32Q&A and closing thoughts
related talks
34mDemystifying Platform Engineering with OSS
33mKubernetes is Open by Default, Use Open Source to Secure
44mEvolving Dev and Ops with Kubernetes: Enterprise Adoption for Security, Speed, and Ease
35mHybrid-Cloud, HIPAA Compliant Enterprise with Kubernetes
37mAchieving High Security at Scale with Microservices
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
19mKeynote: From COBOL to Kubernetes: A 250 Year Old Bank's Cloud-Native Journey
51mMaking Complex Open Source Safe for Operations