Making Dynamic Admission Control Even More Dynamic Using...

on YouTube ↗20m

" summary

Shows how WebAssembly (Wasm) can be used to implement Kubernetes dynamic admission policies by running validation and mutation logic as Wasm modules. Describes an open-source dynamic admission controller that executes Wasm-written policies against the Kubernetes API server, and discusses practical challenges encountered and future plans.

AI-written summary · about

" chapters (8)

1. 0:00Start
2. 0:39The $1m question
3. 1:35Security is hard
4. 9:22Our take on the problem
5. 9:59WebAssembly is fantastic
6. 12:41Cluster admins: we have you!
7. 16:54Current status
8. 18:26Policy Hub

" related talks

• 20mMaking Dynamic Admission Control Even More Dynamic Using...Flavio Castelli, Rafael Fernández López · KubeCon + CloudNativeCon Europe 2021
• 41mLeveraging WebAssembly to Write Kubernetes Admission PoliciesFlavio Castelli, Rafael Fernández López · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 20mLeveraging WebAssembly to Write Kubernetes Admission PoliciesRafael Fernández López · Cloud Native Wasm Day North America 2021
• 23mWhat If... Kubernetes Core Pieces Could Be Extended with Pluggable WebAssembly Modules?Flavio Castelli, Rafael Fernández López · Cloud Native Wasm Day Europe 2022
• 20mUsing, and mis-using K8s Dynamic Admission ControlRichard Finlay Tweed · SREday London 2024
• 41mKubernetes Policy As Code using WebAssemblyFlavio Castelli · KCD Italy 2021
• 50mWebAssembly: A Recovering Kubernetes Engineer's View of the FutureTaylor Thomas · KCD Los Angeles 2023
• 26mWhat If... Kube-Apiserver Could be Extended Via WebAssembly?Flavio Castelli · KubeCon + CloudNativeCon Europe 2022