Skip to content

Compliance: case studies over time

14 case studies across 10 events, oldest first. Generated by wiki find "compliance"; each moment links to where the talk discusses it.

Organizations: DoD, Elastisys, Lunar, Nav, Palantir, Shopify, Spotify, Standard Chartered

2018 · KubeCon + CloudNativeCon China 2018 (Shanghai)

Compliance as Code - Lessons Learned From Regulated Organizations - Sergiu Bodiu, Standard Chartered — Standard Chartered

2018 · KubeCon + CloudNativeCon Europe 2018 (Copenhagen)

Case study: How Containers Makes Security and Compliance Instantly Easier - John Morello

2018 · KubeCon + CloudNativeCon North America 2018 (Seattle)

How We Survived Our First PCI/HIPAA Compliant Check with Kubernetes - Travis Jeppson, Nav — Nav

Nav shares how it passed its first PCI/HIPAA compliance check while running on Kubernetes.

2019 · KubeCon + CloudNativeCon Europe 2019 (Barcelona)

5 Simple Steps To Simplifying Your Compliance Journey With a Service Mesh – Granville Schmidt

2021 · KubeCon + CloudNativeCon Europe 2021

Compliance Beyond Security: a Cloud Native GDPR Implementation Experience - Johan Tordsson — Elastisys

Elastisys shares its experience implementing GDPR compliance on a cloud native platform.

How DoD Uses K8s & Flux to Achieve Compliance & Deployment Consistency - M. Medellin & G. Tillman — DoD

2022 · KubeCon + CloudNativeCon Europe 2022

Fun with Continuous Compliance - Ann Wallace, Shopify & Zeal Somani, Google — Shopify

Shopify, with Google, shares how it approaches continuous compliance for its Kubernetes infrastructure.

2023 · KubeCon + CloudNativeCon Europe 2023

Paved Paths Leading the Way to Compliance - Kasper Borg Nissen & Brian Nielsen, Lunar — Lunar

Lunar describes how paved paths helped it achieve compliance.

2023 · KubeCon + CloudNativeCon NA 2023

Deploying Kubernetes in Classified Environments - Vlad Ungureanu & Ali Monfre, Palantir Technologies — Palantir

Palantir shares how it deploys and operates Kubernetes in classified environments.

Software Delivery in Regulated Environments: Critical Infrastructure... Austen Bryan & Steven Ollek

Speakers share experience delivering software in regulated, critical-infrastructure environments.

Real-World Knative: Success Stories from Production Environments...

Four guest speakers describe how their organizations use Knative in production.

  • ▶ 6:32 … use something that is SAS and cloudbased because we have high compliance um standards so we have to choose something that is very um …
  • ▶ 8:44 … some environments which are high side so air environments and specific compliance standards we have to agree to firewalls are a huge issue custom …
  • ▶ 13:07 … um if you are in a regulated environment like public sector compliance think about that in the beginning not at the end or you …
  • Full transcript

2024 · KubeCon + CloudNativeCon Europe 2024

Search at Shopify: Highly Available Platform for Data Resilience and Compliance - Leila Vayghan — Shopify

Lessons Learned from Generating 100M SBOMs: Google’s Approach to SBOM Compliance

2025 · KubeCon + CloudNativeCon North America 2025

Adopting a Fleet-first Mindset - Andy Beane, Spotify — Spotify

Spotify explains how adopting a fleet-first mindset and its Fleetshift platform enabled fleet-wide changes at scale.

  • ▶ 10:58 … So with our software catalog integrated with backstage, we can know our fleet and using our internal check system, we can measure the compliance …
  • ▶ 28:19 … using our internal check system we actually can see uh the compliance of our components in our fleet. So we have something in backstage …
  • Full transcript

References

Videos

  1. Real-World Knative: Success Stories from Production Environments... (CNCF [Cloud Native Computing Foundation]), cited at 6:32, 8:44, 13:07
  2. Adopting a Fleet-first Mindset - Andy Beane, Spotify (CNCF [Cloud Native Computing Foundation]), cited at 10:58, 28:19