You Shall Not Pass! Policy Compliance with OPA Gatekeeper
summary
Kubernetes policy enforcement using Open Policy Agent Gatekeeper: explains how admission controllers work, describes OPA Gatekeeper’s architecture, and shows how to write and enforce OPA rules in a cluster, ending with a demo of simple policies.
AI-written summary · about
chapters (21)
- 0:00Introduction
- 5:21Title meaning
- 6:27Policies in Kubernetes
- 8:57Security obstacles
- 10:02Admission vs validation
- 14:37Traditional limits
- 15:58OPA Gatekeeper intro
- 17:20Gatekeeper advantages
- 18:01Configuring Gatekeeper
- 20:29Rego rules language
- 22:14ConstraintTemplate creation
- 24:20First policy demo
- 27:57Namespace policies
- 30:23Container image policies
- 33:53Untrusted containers demo
- 34:57Duplicate resource policies
- 35:40External data queries
- 37:06Warnings instead of blocking
- 38:07Gatekeeper vs Kyverno
- 39:53Tool integration
- 40:35Closing remarks
related talks
40mIntro: Open Policy Agent
34mEmbracing Change, Policy as code for Kubernetes with OPA and Gatekeeper
28mEmbracing change: Policy-as-code for Kubernetes with OPA and Gatekeeper
27mEmbracing change: Policy-as-code with OPA and Gatekeeper
34mGatekeeper: Flexible, Shareable Policy for Kubernetes
14mPolicy-as-code for Kubernetes with Gatekeeper
17mOpen Policy Agent Intro
19mDynamic Authorization and Policy Control for Your Kubernetes Cluster