A container platform for the banking industry why, what & how
summary
ABN AMRO builds a compliant container platform running on EKS (and ported to AKS) that integrates EKS, OPA, Twistlock plus Nexus, Jenkins, Helm, Terraform/CloudFormation, Prometheus and Splunk. Automated CI/CD scans images with Twistlock in Jenkins, stores approved images in Nexus, and provisions per-team clusters via Lambda→CloudFormation; OPA enforces image whitelist and OPA admission control and policies like “no internet-facing ALBs.” MVP lands mid‑2019, ~10 teams onboard, platform in dev/test and rolling to production.
AI-written summary · about
chapters (17)
- 0:00Container platform introduction
- 3:37ABN AMRO Bank context
- 9:50Stratos team role
- 11:56Platform building blocks
- 14:44Runtime orchestration choices
- 15:47CI/CD pipelines
- 18:20Security priorities
- 19:22Twistlock container security
- 22:37Helm deployment pipeline
- 25:05Pre-provisioned clusters
- 27:12Centralized logging
- 29:00Namespace security
- 31:52Twistlock runtime rules
- 33:16Compliance controls
- 36:30Policy enforcement with OPA
- 40:28Next steps rollout
- 42:16Q&A
related talks
19mKeynote: From COBOL to Kubernetes: A 250 Year Old Bank's Cloud-Native Journey
34mTaking Back Control: Building Cloud-Agnostic Container Platforms for Regulated Environments
22m06 Compliance in a bucket
37mCITIC Bank's Containerized Exploration Road
31munlighted, but what about Security and Multi tenancy?
25mAKS unlighted, but what about Compliancy, cost and Multi ten
36mKubernetes in the Enterprise Transforming Rabobanks On Premise Applications
45mLeverage AKS for your enterprise platform: H&M’s journey