In this month's episode, John Jainschigg, Director of Open Source Initiatives at Mirantis hosts Kathleen Moyer, Director of Service Delivery at Corsec Security, and William Konitzer, Senior Solution Architect at Mirantis, to explore the recently achieved DISA STIG certification for Mirantis Kubernetes Engine (MKE). Together, they dive into the intricate certification process that enables public sector and enterprise users to deploy secure, compliant applications using MKE.

Listeners will gain insights into the collaborative effort between Mirantis and Corsec Security, where Kathleen shares her 25 years of expertise in security certifications, detailing how Corsec facilitated the process with government agencies like DISA and the DoD. William provides a behind-the-scenes look at the technical challenges and solutions that ensured MKE met stringent Department of Defense (DoD) security standards without compromising usability or performance. Furthermore, he highlights some of the team's learnings in the context of how it changed the thought process of Mirantis' engineering teams when it came to security.

Achieved in early 2024, this milestone positions MKE as a powerful tool for public sector organizations and industries with specific security and compliance needs. Whether you’re navigating public sector compliance requirements or interested in secure cloud native solutions, this episode offers practical advice and unique perspectives on implementing and managing a STIG-compliant Kubernetes platform.

A full list of this episode's topics include:

• Corsec Security's role in the MKE DISA STIG process
• Common challenges Orgs face in STIG process
• How Corsec handles security testing to ensure compliance
• SITG vs FEDRAMP - in terms of requirements
• How Corsec handles product updates re: the STIG
• Advice for companies getting started with STIG certification
• Role of documentation in STIG process
• Challenges in MKE STIG process
• Why Mirantis did a STIG for MKE
• Specific security features of MKE that affected DISA STIG approval
• Mirantis and Corsec collaboration
• MKE for the Public Sector
• Timelines for achieving STIG certification
• Mitigating evolving vulnerabilities
• How the SITG process for MKE impacted Mirantis engineering

If you want to listen to more episodes of Radio Cloud Native, please visit https://www.mirantis.com/radiocloudnative/ to download, or find them wherever you prefer to consume your podcasts.

If you are interested in contributing to Radio Cloud Native, please reach out to our podcast team: podcasts@mirantis.com

Welcome to Radio Cloud Native by Mirantis, your go-to podcast for all things cloud native, Kubernetes, and open source. Join us as we explore the latest trends, innovative solutions, and open source projects shaping the modern cloud landscape. For related links and/or diagrams, please check out the resources linked in the Chapters.

This episode is once again presented by Daniel Virassamy, Principal Solution Architect at Mirantis, who describes himself as curious by nature and open source by choice. Daniel will walk you through the steps and best practices for building your very own, bespoke, multi-cluster Kubernetes platform leveraging open source components and tools. He will also present some open source-based solutions from Mirantis that drastically streamline multi-cluster management at scale, as well as open source integrations that will optimize your Kubernetes spend and operations.

A full list of topics for this episode includes:

• Current multi-cluster landscape
• Where to run your infrastructure
• Core infrastructure services for multi-cluster
• How to choose a Kubernetes Distro
• How to choose a multi-cluster management solution
• Implementing a UI Portal & APIs
• Adding Observability & application delivery
• Common use cases for multi-cluster

Check out k0s by Mirantis: https://k0sproject.io/
Learn more about k0smotron by Mirantis: https://k0smotron.io/
Download Mirantis Lens, the Kubernetes IDE: https://k8slens.dev/

If you want to listen to more episodes of Radio Cloud Native, please visit https://www.mirantis.com/radiocloudnative/ to download, or find them wherever you prefer to consume your podcasts.

If you are interested in contributing to Radio Cloud Native, please reach out to our podcast team: podcasts@mirantis.com

Welcome to Radio Cloud Native by Mirantis, your go-to podcast for all things cloud native, Kubernetes, and Open Source. Join us as we explore the latest trends, innovative solutions, and open source projects shaping the modern cloud landscape. For related links and/or diagrams, please check out the resources linked in the Chapters.

This episode is presented by Daniel Virassamy, Principal Solution Architect at Mirantis, who describes himself as curious by nature and open source by choice. Daniel will cover, in-depth, the various costs associated with current Public Cloud offerings to debunk many of the myths that Public Cloud is always cheaper, simpler, and the easiest to use in comparison to Private Cloud offerings.

He will also offer recommendations for reducing cloud spend - on any architecture - by leveraging open source technologies wherever possible.

A full list of topics for this episode includes:

• The Iceberg model (of cloud cost)
• Yearly Cloud cost example
• The FinOps cloud cost model
• Staff requirement for Public Cloud
• Cloud migration return on investment
• Shifting from Capex to Opex
• Infrastructure Services to Function-as-a-Service
• Importance of cloud reversibility
• Cost of data in Public Cloud
• Public vs Private Cloud
• Private Cloud does NOT equal On Prem
• Mirantis OpenStack for Kubernetes (MOSK)
• Mirantis Support: OpsCare and OpsCare+
• The Mirantis TCO calculator

Learn more about Mirantis OpenStack for K8s (MOSK): http://www.mirantis.com/mosk

If you want to listen to more episodes of Radio Cloud Native, please visit https://www.mirantis.com/radiocloudnative/ to download, or find them wherever you prefer to consume your podcasts.

If you are interested in contributing to Radio Cloud Native, please reach out to our podcast team: podcasts@mirantis.com