Operations | Monitoring | ITSM | DevOps | Cloud

Regulatory compliance and data privacy requirements require financial institutions (FIs) to consider carefully where their applications are running and where the customer data is stored. The data protection and data sovereignty laws in most countries require an enterprise to keep data in certain geographic locations. PCI Data Security Standard, for example, regulates the way the customer and financial transactions data is stored and transmitted.

With recent releases, the Kubewarden stack supports verifying the integrity and authenticity of content using the Sigstore project. In this post, we focus on Kubewarden Policies and how to create a Secure Supply Chain for them.

Running infrastructure at scale almost always guarantees dizzying complexity and anxiety-inducing pressure to maintain systems in a production environment. This is further exacerbated when multiple delivery teams require slight variations of the same infrastructure components, across several cloud providers, each with a different set of observability requirements. Gradually, production environments become large, unmanageable, difficult to change, and perhaps resembling the figure below.