How To Automate Your Governance Strategy for Hundreds of Kubernetes Clusters
summary
Describes automating policy enforcement across hundreds of clusters by treating policies like apps: policies live in Git, ArgoCD deploys YAML CRDs and Gatekeeper enforces them, and Thanos (or metrics) aggregates violations. Shows value files used as flavors for environments, a GitOps workflow that auto-enrolls new clusters and applies resource-quotas and namespace lists, and a demo where adding a cluster creates monitoring, produces a namespace violation, and is remediated when the namespace is added to Git.
AI-written summary · about
chapters (9)
- 0:00Policy-based governance intro
- 2:28Chaotic multi-cluster K8s
- 5:20Kubernetes policy governance
- 9:18Multi-cluster policy challenges
- 11:32Designing governance stack
- 15:06Treating policies like applications for scalability
- 21:08Namespace governance enforcement
- 25:03Live demo: policy violations
- 27:32Summary
related talks
25mPolicy-Based GitOps: How Policies Can Help Secure and Automate GitOps...
38mEnabling Autonomous Teams With Policy Enforcement at Yubico
30mDeclarative by Default, Secure by Design: GitOps as a Control Plane for Governance
06mKeynote: Beyond Automation: Kubernetes Success Requires a GitOps Mindset
10mThe Power of OPA Gatekeeper: Enforcing Kubernetes Access Control to secure your runtime
23mFrom Policy to Production: Implementing ISO27001/BSI IT-Grundschutz in Kubernetes with..
27mPolicy Matters! The Why, What, and How of Kubernetes Policy Management
27mSecure Multicluster Istio Configuration Using GitOps...