Скачать или смотреть Big Techday 25: Secure bare-metal Kubernetes @ idgard - A. Dirscherl, Dr. L. Rammelmüller & V. Golob

Secure bare-metal Kubernetes at idgard: Zero internal access to customer data by design

Idgard, a security-first file-sharing application, demands stringent operational requirements to guarantee user data privacy. Especially its core promise, namely no unauthorized access, not even by developers or operational personnel, restricts operational possibilities drastically. This talk explores these challenges and technical intricacies of establishing a secure, bare-metal Kubernetes environment to meet these requirements, covering network bootstrap, immutable cluster setup, multi-layer access control, and robust monitoring and alerting mechanisms.

About the speakers:
Andreas Dirscherl: Andreas Dirscherl is Director of Engineering Technology at idgard based in Munich. With extensive experience leading technical teams, he drives innovation and efficiency in complex development projects. As part of a strategic datacenter initiative, he developed a Cloud-native operator-secure bare-metal Kubernetes stack for the patented Sealed Cloud – a technological breakthrough in secure cloud infrastructure. Andreas combines deep technical expertise with business acumen, fostering a culture of excellence, sustainability, and agile development.

Dr. Lukas Rammelmüller: Lukas Rammelmüller is Senior Consultant at TNG Technology Consulting. Formerly wrangling random numbers as a physics researcher, he now specializes in platform engineering and Kubernetes cluster operation in both cloud and bare metal environments. At TNG, he is involved in operating the internal GPU cluster and serves as a point of contact for various AI services.

Valentino Golob: Valentino Golob is a Senior Consultant at TNG Technology Consulting. With a background in mechanical and computational engineering, he now specializes in platform engineering and Kubernetes cluster operation in bare metal environments, where he also drives security topics in the platform context.