Platform as a service

Managed Compliant Kubernetes

The managed Compliant Kubernetes platform includes the following features and capabilities:

Private container registry
Intrusion detection systems (IDS) for alerting in case of breaches
Automated image vulnerability scanning
Integration with authentication providers such as Active Directory, SAML, and OIDC, e.g. Google authentication
Audit logging in the Kubernetes API server to track activities in the cluster
Role based access control (RBAC)
Compliance policy enforcement
Secret management
Automated certificate handling
Network segregation (network zones and isolation east-west traffic)
Network isolation and restrictive firewalls, allowing only permitted network traffic into the platform. Inbound traffic to the cluster is securely handled using the Nginx ingress controller

OpenSearch and Kibana instances are kept up to date with security patches and new versions.

A full backup of the database is taken every day. In addition to this, point-in-time recovery is provided by means of a Write-Ahead-Log.
Disaster recovery is committed to be completed within four hours.

All logs are stored in OpenSearch and can be viewed in Kibana.
Logs are kept for a maximum of 30 days (GDPR compliance) or up to 50 GB, whichever comes first.

All logs are stored in OpenSearch and can be viewed in Kibana.
Logs are kept for a maximum of 30 days (GDPR compliance) or up to 50 GB, whichever comes first.