Building PCI Compliant Kubernetes Platforms - Demystified, Fun, and Possible

Learn to build PCI compliant Kubernetes platforms through this 29-minute conference talk that demystifies the process of creating secure, scalable infrastructure while maintaining regulatory compliance. Discover how to leverage self-managed Kubernetes as your organization's backbone, combining efficiency with stringent security requirements. Explore GitOps and Zero Trust principles as foundational approaches, utilizing ArgoCD for automated, consistent, and auditable deployments that enable rapid development without compromising stability. Master the use of Crossplane and Cluster API (CAPI) to manage Kubernetes complexity through declarative cluster and resource management aligned with SDLC best practices and PCI standards. Understand how to effectively balance responsibilities between platform engineering teams and tenants, fostering collaboration and usability while maintaining robust security postures. Gain practical insights from real-world implementation experiences and acquire a comprehensive blueprint of technologies and practices that can be directly applied to your own environment for building compliant, efficient, and trusted platforms.