Spotlight

Building a PCI-DSS Compliant GKE Framework for Financial Institutions: Data Protection, Governance & Audit Logging

Mohamed Rasvi

This tutorial explains how to build a PCI-DSS focused GKE security framework using:

  • Workload Identity,
  • Secret Manager,
  • Binary Authorization,
  • NetworkPolicy,
  • VPC Service Controls,
  • Private Service Connect,
  • Istio mTLS,
  • and audit logging.

More articles →

Tools and utilities

More projects →

Events starting soon

Discover more events onn Kube Events →

From KIAM to EKS Pod Identities
From KIAM to EKS Pod Identities

An unmaintained identity component can remain invisible until a routine Kubernetes upgrade turns it into an incident.

Fabián Sellés Rosa, Platform Engineer and Runtime Tech Lead at Adevinta, explains how his team moved from KIAM to EKS Pod Identities without discarding the security boundaries and application interface that their internal platform depended on.

In this interview:

  • Why KIAM became urgent to replace after years of stable operation
  • How Crossplane, a custom controller, and KRO with ACK compared against the team's criteria
  • Why managed EKS Capabilities reduced toil but introduced observability and rollout trade-offs
  • How Kyverno preserved namespace-level authorization for IAM roles

Learn from production

More case studies →

Matching jobs

    • DevOps Engineer with Mark43

    • Salary: $155K to $170K a year

    • Location: remote from

    • Tech stack: Kubernetes, Docker, Terraform

    • DevOps Engineer with RobCo

    • Salary: US$70.74K to US$440K a year

    • Location: based in the office in Munich, DE

    • Tech stack: Kubernetes, AWS, Go, Python, Terraform, Datadog, Grafana, Prometheus

    • Site Reliability Engineer with MyFitnessPal

    • Salary: $120K to $165K a year

    • Location: remote from

    • Tech stack: Kubernetes, AWS, Docker, Go, Python, Typescript, Terraform, GitHub Actions, Datadog

    • AI Enterprise Technical Program Manager with Redhorse Corporation

    • Salary: $37 to $485.65K a year

    • Location: based in the office in Arlington, VA, USA

    • Tech stack: Kubernetes, AWS, Azure, Docker, Spark

Discover more Kubernetes jobs on Kube Careers →

Subscribe to Learn Kubernetes Weekly

Trusted by 77K engineers. Delivered 195 issues and counting.

or subscribe via

Build something

More tutorials →

Call for Papers closing soon

  1. 7

    days

    AI Coding Summit Berlin

    The Call For Paper is open until 12 August 2026 at GMT-4. More info →
    • Location: Berlin, DE and virtual

    • Online & in-person conference organized by GitNation.

    • The conference starts on the 4 December 2026.

    • Apply here
  2. 9

    days

    Cloud Native AI Summit Europe

    The Call For Paper is open until 14 August 2026 at GMT-4. More info →
    • Location: Paris, FR

    • In-person conference organized by mate.dev.

    • The conference starts on the 3 December 2026.

    • Apply here
  3. 10

    days

    Cloud Security Space 2026

    The Call For Paper is open until 15 August 2026 at GMT-4. More info →
    • Location: Buenos Aires, AR

    • In-person conference organized by Cloud Security Space.

    • The conference starts on the 9 October 2026.

    • Apply here
  4. 10

    days

    Kubernetes Community Days Suisse Romande 2026

    The Call For Paper is open until 16 August 2026 at GMT-4. More info →
    • Location: Geneva, CH

    • In-person conference organized by KCD Suisse Romande.

    • The conference starts on the 9 December 2026.

    • Apply here
  5. 23

    days

    Monster Scale Summit 2027

    The Call For Paper is open until 28 August 2026 at GMT-4. More info →
    • This is a virtual event

    • Online conference organized by ScyllaDB.

    • The conference starts on the 11 March 2027.

    • Apply here
  6. 25

    days

    Devopsdays Warsaw

    The Call For Paper is open until 30 August 2026 at GMT-4. More info →
    • Location: Warsaw, PL

    • In-person conference organized by Devopsdays.

    • The conference starts on the 23 November 2026.

    • Apply here
  7. 25

    days

    Devopsdays Recife

    The Call For Paper is open until 30 August 2026 at GMT-4. More info →
    • Location: Recife, BR

    • In-person conference organized by Devopsdays.

    • The conference starts on the 12 December 2026.

    • Apply here

Thanks to our sponsors who make Kube Today possible

Find out more about being a sponsor →

More articles

Even more articles →