<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0">
    <channel>
      <title>Alek&#x27;s Blog - audit</title>
      <link>https://blog.none.at</link>
      <description>Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty.</description>
      <generator>Zola</generator>
      <language>en</language>
      <atom:link href="https://blog.none.at/tags/audit/rss.xml" rel="self" type="application/rss+xml"/>
      <lastBuildDate>Wed, 01 Jul 2026 00:00:00 +0000</lastBuildDate>
      <item>
          <title>K8s &amp; OpenShift: Compliance</title>
          <pubDate>Wed, 01 Jul 2026 00:00:00 +0000</pubDate>
          <author>aleks</author>
          <link>https://blog.none.at/blog/2026/2026-07-01-k8s-openshift-bp-compliance/</link>
          <guid>https://blog.none.at/blog/2026/2026-07-01-k8s-openshift-bp-compliance/</guid>
          <description xml:base="https://blog.none.at/blog/2026/2026-07-01-k8s-openshift-bp-compliance/">&lt;p&gt;&lt;a href=&quot;https:&#x2F;&#x2F;blog.none.at&#x2F;blog&#x2F;2026&#x2F;2026-07-01-k8s-openshift-bp-operations&#x2F;&quot;&gt;Part 6&lt;&#x2F;a&gt; covered the operational loop:
GitOps, observability, cost control, and upgrades. This final part maps the cluster configuration
covered throughout this series to the regulatory frameworks that require it — NIS2, DORA,
PCI-DSS, HIPAA, and the Cyber Resilience Act (CRA) — and covers the two topics that compliance
work adds on top of security: audit logging as evidence and log retention as a contractual
obligation.&lt;&#x2F;p&gt;</description>
      </item>
    </channel>
</rss>
