Published Nov 29, 2024

Public safety Kubernetes

Marc Boorshtein from Tremolo Security delves into the complexities of deploying Kubernetes in the public sector, highlighting identity management challenges, the need to align outdated compliance rules with security practices, and strategies for ensuring robust public safety infrastructure.
Episode Highlights
Ship It! SRE, Platform Engineering, DevOps logo

Popular Clips

Questions from this episode

Episode Highlights

  • Infrastructure Challenges

    Public safety infrastructure presents unique challenges due to its siloed nature and slow adaptation to technological changes. highlights the complexities of integrating systems across multiple jurisdictions, emphasizing the need for compliance over security in federal standards 1. He shares an example of deploying an application on a commercial network, illustrating the difficulties faced with networking and certificate management 2.

    In the battle between compliance and security, compliance wins every time.

    ---

    These challenges underscore the importance of innovative solutions to enhance public safety systems.

       

    Identity Management

    The shift to remote work during COVID-19 accelerated the need for robust identity solutions in the public sector. discusses how Fairfax County, Virginia, adapted by upgrading their identity infrastructure, moving away from legacy systems to more flexible solutions like Kubernetes and Azure 3. He also addresses the complexities of integrating external accounts and federal users, which required creative solutions like email domain aliases to ensure seamless authentication 4.

    All of a sudden identity matters, and they're getting rid of AD fs.

    ---

    These adaptations highlight the critical role of identity management in maintaining secure and efficient operations.

       

    Infrastructure Evolution

    Adapting Kubernetes infrastructure for public safety requires resilience and automation. explains the transition to GitOps to manage configurations across multiple regions, ensuring continuity even if a network fails 5. He describes the evolution of their system from a static setup to a dynamic, forward-thinking infrastructure, thanks to a supportive customer base willing to embrace new technologies 6.

    It's not rocket science. It's just a bunch of web apps at the end of the day.

    ---

    These advancements demonstrate the importance of flexibility and innovation in public sector technology.

Related Episodes