Deep Dive: Kubernetes Policy WG
summary
Summarizes half-year progress and next plans for Kubernetes Policy WG, focusing on concrete work: a multi-tenancy design that populates tenant resources via a tenant policy CRD, experiments to migrate PodSecurityPolicy into a control-plane addon using Gatekeeper and OPA, and a research effort to apply formal verification (SMT solvers and symbolic graphs) to check privilege-escalation and policy enforcement. Roadmap includes a cloud-native policy white paper, cross-SIG integrations, and open implementation experiments for population constraints and enforcement semantics.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:42Why form a policy working group
- 2:24Policy in other aspects
- 3:05Working group
- 4:00Work items
- 4:46Multitenancy
- 7:14CakeKeeper
- 8:17oppa
- 8:29pol migration
- 9:24formal verification
- 11:03symbolic graph
- 11:56current discussion
- 12:58policy type system
- 13:39policy vs configuration
- 14:40examples
related talks
26mIntro + Deep Dive: Kubernetes Policy WG
46mKubernetes Policy WG Deep Dive
36mKubernetes Policy, Governance, And Compliance: A WG Policy Update
38mKubernetes Policy WG Intro
35mDeep Dive: Kubernetes Working Group for Multi-tenancy
20mDeep Dive: Kubernetes Policy WG
27mPolicy Matters! The Why, What, and How of Kubernetes Policy Management
47mDeep Dive: Kubernetes WG for Multitenancy