Automated Policy-Based Service Assurance in Cloud-Native...

on YouTube ↗16m

" summary

An end-to-end closed loop is implemented: EMCO policy controller deploys agents that use Prometheus metrics and enrich events, sends KPIs to OPA as policy engine, and invokes Temporal workflows as the actor. A declarative intent ties an OPA rule (memory-usage threshold) to a workflow that migrates an application between two Kubernetes clusters. The live demo triggers the rule after changing the threshold and successfully terminates pods in cluster1 and brings them up in cluster2.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 0:30EMCO Overview
3. 2:00EMCO Background
4. 3:16Intro to Temporal
5. 6:13Open Policy Agent: Overview
6. 7:10EMCO Policy Controller
7. 9:51Policy Controller - Temporal Workflow Integration
8. 10:21Policy Controller - OPA- Temporal: Closed Loop Flow

" related talks

• 38mOPA for the cloud nativesPhilipp Krenn · DevOpsDays Warsaw 2022
• 19mDynamic Authorization and Policy Control for Your Kubernetes ClusterAsh Narkar · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 36mOPA for the cloud nativesPhilipp Krenn · Voxxed Days Ticino 2023
• 25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith NambiarMark Puddick, Amith Nambiar · Kubernetes Forum Sydney 2019
• 34mUnit Testing Your Kubernetes Configurations Using Open Policy AgentGareth Rushgrove · KubeCon + CloudNativeCon Europe 2019
• 20mDeep Dive: Kubernetes Policy WGZhipeng Huang, Torin Sandall, Da Ma · KubeCon + CloudNativeCon China 2018
• 27mEmbracing change: Policy-as-code with OPA and GatekeeperAra Pulido · Conf42 Cloud Native 2021
• 09mSecure UI + Microservices within Kubernetes using OPA AuthorizationAjeet Murmu, Shefali Pachori · Kubernetes Community Days Bengaluru 2023