Verifizierer

Sovereign connectivity in dataspaces requires automating network access to ensure security, compliance, and operational scale. In the Data Intelligence Hub, we replace manual firewall updates with a declarative, Kubernetes-native model using Custom Resource Definitions (CRDs). Customers define their allowed IP ranges through a self-service portal, which generates an IpAccessPolicy object representing the desired state. A controller then reconciles this state with the underlying infrastructure, automatically updating Kubernetes Ingress configurations and preventing drift. This architecture ensures auditability, validates inputs before enforcement, and keeps network access aligned with the principles of data sovereignty across multi-tenant environments.

Sovereign observability is now essential as organizations operate Kubernetes across fragmented multi-cloud environments. Traditional monitoring approaches fail when logs and metrics cannot leave their originating region due to compliance and data-residency constraints. This architecture solves the challenge by decoupling storage from querying: each cloud environment writes logs and metrics to its own sovereign object storage while a central observer cluster queries them on demand. Leveraging Prometheus, Thanos, Loki, and Promtail, the system provides global visibility, secure mTLS communication, isolated buckets, and a unified Grafana experience — all without violating sovereignty rules.

Im Dezember 2025 stärkte T-Systems die Präsenz von Catena-X und trusted dataspaces in Asien durch zwei zentrale Veranstaltungen: den Catena-X Supplier Onboarding Day in Tokio und den Global Data Spaces Roundtable in Peking. Von praxisnahem Supplier Onboarding bis hin zu großskaligen Automotive-Piloten in China standen regulatorische Anforderungen, Datensouveränität und sicherer unternehmensübergreifender Datenaustausch im Fokus. Gemeinsam mit Partnern wie Siemens, BMW Group, BASF und Flex zeigte T-Systems, wie dataspaces skalierbare und regelkonforme Zusammenarbeit entlang globaler automobilen Wertschöpfungsketten ermöglichen.