Cloud native for governmental workloads
summary
Romanian government workloads run on on‑prem Kubernetes with Terraform provisioning and Ansible for cluster init, deploying Prometheus, NGINX, Fluent Bit and MinIO; CI/CD uses Jenkins + Maven + SonarQube to build images, an artifact repo and Argo CD for GitOps deployment. A management cluster hosts shared proxy microservices and Argo application sets; most clusters migrate to Cilium network policies and containerd/CRI‑O. Scale: about 8–9 platforms across up to 30‑node clusters, ~150 cronjobs (≈100/min) causing an identity limit bug that is mitigated by disabling Cilium identities for cronjob pods.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:50STS and Kubernetes overview
- 3:39Kubernetes cluster design
- 5:47CI/CD with Jenkins
- 8:14Proxy microservices with Argo CD
- 10:00Argo CD app sets
- 13:58Calico and Cilium for policies
- 15:43Cilium CNI migration challenges
- 17:54Cloud-native evolution at STS
- 20:46Key learnings and future
- 21:26Q&A
related talks
44mEssential-8 Security in Practice with Kubernetes
24mHigh-Scale Networking for ML Workloads With Cilium
34mInfrastructure at Scale Using ArgoCD
26mThe Road To Cilium: Migrating 150+ Kubernetes Clusters at Airbnb
29mTowards Sustainable Multi-Cluster Management in Real-World Academic Infrastructure
33mCNCF TAG-Runtime: Cloud Native Open...
24mSelf-Service Multi-Cloud K8s Platform at a Regulated Financial Enterprise
36mHow CERN empowers its users with Kubernetes and OpenShift