Lightning Talk: Namespaces-as-a-Service with HNC & Kyverno!
summary
Claim: HNC plus Kyverno deliver namespaces-as-a-service by automating creation, policy propagation and default configuration. HNC anchors create subnamespaces and propagate parent policies; Kyverno generates and mutates namespace resources to add resourcequotas, limitranges and a default-deny networkpolicy. Demo creates namespace "test" and subnamespace "test2", shows role-bound visibility constraints and propagated objects, and the workflow successfully prevents creation until required labels exist and then provisions the configured resources.
AI-written summary · about
chapters (4)
- 0:00Multi-tenancy models
- 1:30HNC and Kyverno roles
- 4:20Namespace automation demo
- 8:23Conclusion and resources
related talks
25mNetwork Policy Nirvana: Automating Security & Self-Service...
06mProject Lightning Talk: The Kyverno Five! Policy Types for the Full Resource Lifecycle
06mLightning Talk: Why Your Cluster-Wide Policies Are a Risk (And What To Do About It)
05mLightning Talk: Secure Multi User HPC Jobs in Kubernetes with Kyverno
06mProject Lightning Talk: Kyverno Lightning Update: CEL & Policy Types in Action
31mKubernetes Native Policy Management with Kyverno!
35mSharing is Caring: Your Kubernetes Cluster, Namespaces, and You
32mCloud Native Policy as Code: Principles and Best Practices