How DTCC uses GitOps to accelerate customer value and security

How DTCC uses GitOps to accelerate customer value and security Facing a tight 10-month window Managing complex network policies with Red Hat Advanced Cluster Management Start your own GitOps journey Red Hat OpenShift Container Platform | Product Trial About the author Debbie Margulies More like this Northrop Grumman scales enterprise Kubernetes for AI and hybrid cloud with Red Hat OpenShift Dell Technologies modernizes the developer experience with Red Hat OpenShift Dev Spaces The Infrastructure Effect | Command Line Heroes Bad Bosses | Compiler: Tales From The Database Keep exploring Browse by channel Automation Artificial intelligence Open hybrid cloud Security Edge computing Infrastructure Applications Virtualization Share At the recent OpenShift Commons gathering in Atlanta, we had the opportunity to hear from Brian Cook, (director, Kubernetes site reliability engineer & Kubernetes security posture management), about how Depository Trust & Clearing Corporation (DTCC) is navigating a massive shift in how they operate. As the global heart of trading activities, DTCC faces intense global regulations and a critical need for velocity without compromising security. We learned how they transitioned from a legacy environment to a "zero touch" model built entirely on GitOps principles. One of our primary takeaways from the session was the sheer scale of the challenge DTCC overcame. When the program began, the team was tasked with moving to Red Hat OpenShift 4 within 10 months. To meet this deadline while maintaining the integrity of their massive securities processing volume, they realized they couldn't rely on traditional manual processes. Instead, they embraced a declarative, "everything is code" strategy where no engineering platform changes are allowed in any environment unless they are made through Git. "We have laid out what we call a zero touch model. This is built around GitOps. Everything is declarative, everything is code. No one on the engineering platform side. is allowed to make any changes in any environment.