5 ms·
We use https://cloud.google.com/container-optimized-os/docs https://cloud.google.com/container-optimized-os/docs for our kubernetes nodes on GCP, as I'm sure mo
by mnahkies 4y ago
We use https://cloud.google.com/container-optimized-os/docs https://cloud.google.com/container-optimized-os/docs for our kubernetes nodes on GCP, as I'm sure most companies that use GKE do.
Your comment made me want to say "but COS is certified too!" however now I'm unsure - a quick Google certainly doesn't bring anything up. Why have Google not done this, is the demand not there? Or have they and they just don't document it prominently?
(Note we don't have any PCI requirements as we offload those to the likes of stripe etc)
- eitally 4y agoVanilla options on GCP would not be certified for specific regulatory requirements. You would need to be -- in the cases of government regulations -- need to be running Assured Workloads. https://cloud.google.com/assured-workloads https://cloud.google.com/assured-workloads As to your question of why: maintaining compliance is expensive, especially if you're accustomed to pushing prod code changes hundreds of times per quarter.