Kubernetes Policy, Governance, And Compliance: A WG Policy Update
Talkat KubeCon + CloudNativeCon North America 2022 · on Thursday, 2022-10-27· at 11:00· 252 AB, Huntington Place: 1 Washington Blvd·
summary
The working group publishes a policy architecture paper, a policy-report CRD that standardizes results retrievable via the Kubernetes API, and adapters for Kyverno, OPA Gatekeeper, kube-bench, Trivy, Falco and KubeArmor plus a policy-reporter subproject; it also provides OSCAL translation via Trestle to map Kubernetes policy results to NIST OSCAL assessment artifacts. Future work creates a governance draft, GitOps-friendly templatized policies for multi-cluster deployment, and automation to reduce audit cost and manage exceptions.
AI-written summary · about
chapters (9)
- 0:00Kubernetes policy intro
- 1:25Policy Working Group goals
- 3:12CNCF policy governance
- 5:21Policy architecture paper
- 8:14CRDs for policy results
- 10:00Kubernetes governance focus
- 14:19NIST OSCAL alignment
- 21:46Q&A on policy challenges
- 35:26Closing remarks
related talks
16mDeep Dive: Kubernetes Policy WG
27mPolicy Matters! The Why, What, and How of Kubernetes Policy Management
46mKubernetes Policy WG Deep Dive
38mKubernetes Policy WG Intro
20mDeep Dive: Kubernetes Policy WG
26mIntro + Deep Dive: Kubernetes Policy WG
49mKubernetes Policy as Code with Kyverno
41mKubernetes Policy As Code using WebAssembly
