News for hackers. Stuff that matters.

A comment on The Red Hat model only worked for Red Hat. Parent comment

Re:The Red Hat model only worked for Red Hat by mnahkies on Sunday April 16, 2023 @08:56AM (#35589638)
We use https://cloud.google.com/container-optimized-os/docs for our kubernetes nodes on GCP, as I'm sure most companies that use GKE do.

Your comment made me want to say "but COS is certified too!" however now I'm unsure - a quick Google certainly doesn't bring anything up. Why have Google not done this, is the demand not there? Or have they and they just don't document it prominently?

(Note we don't have any PCI requirements as we offload those to the likes of stripe etc)

[ Parent | on HN ]
Re:The Red Hat model only worked for Red Hat by eitally on Sunday April 16, 2023 @09:20AM (#35589823)
Vanilla options on GCP would not be certified for specific regulatory requirements. You would need to be -- in the cases of government regulations -- need to be running Assured Workloads.

https://cloud.google.com/assured-workloads

As to your question of why: maintaining compliance is expensive, especially if you're accustomed to pushing prod code changes hundreds of times per quarter.

[ Parent | on HN ]