DevSecOps

Regulated GKE Platform on Google Cloud

Every project created from code, microservices on GKE, security from the edge to the containers, releases only through the pipeline.

A reference design for a platform under a regulation on Google Cloud. Every project and every release goes through Terraform and CI/CD with security and quality gates; microservices run on GKE behind edge security; container scanning, a SIEM and daily observability watch the platform; disaster recovery is a rebuild from code.

mergedeployprovisionfindingsDeliveryGoogle CloudOrganization · folders per environmentProduction projectVPC networkSecurity and operationsNGT DevOps and SRECI/CD pipelineevery releaseTerraformevery project from codeResource hierarchyOrganization PolicyCloud IdentityCloud KMSCloud LoggingProjectsall from codeEdge firewalledge securityCloud Load BalancingGKEmicroservicesContainer securityimage and runtime scanningManaged databasesregulation-eligible servicesSIEMsecurity eventsDatadogobservabilityDisaster recoveryrebuilt from code

Point at a component to light its links; select it for what it does here and the practice that makes it right on Google Cloud. A Google Cloud product without an icon of its own shows its category's icon, as Google's icon set does.

When to use it

  • A regulated platform: health, finance or public data
  • Many projects and environments that must stay identical
  • A product team that needs DevOps and SRE engineers quickly

How NGT delivers it

Built from code, reviewed at a gate by an NGT architect, and handed over with runbooks your team can run.

DevSecOps