A Practical Guide To Kubernetes Policy as Code

on YouTube ↗30m

" summary

Practical steps and tradeoffs for running Policy as Code: use ValidatingAdmissionPolicy for fast, in-server checks and MutatingAdmissionPolicy (alpha) only when inline mutation is required; author expressions in CEL (recommended) or Rego and run them via OPA/Gatekeeper for audit, metrics, external-data lookups, or use Kyverno to auto-generate VAP/MAP, perform image validation with cosign/notary, background scans, exceptions and reporting. Kubernetes 1.33 status is current; keep mutation minimal.

AI-written summary · about

" chapters (6)

1. 0:00Kubernetes policy as code intro
2. 2:50Why policy matters in Kubernetes
3. 9:12Validating Admission Policy with CEL
4. 17:27Gatekeeper for policy enforcement
5. 25:31Summary on Kubernetes policy
6. 27:40Q&A on policy performance

" related talks

• 26mPolicy as Code: Past, Present and Future for NoviceHoon Jo · KubeCon + CloudNativeCon China 2025
• 27mPolicy Matters! The Why, What, and How of Kubernetes Policy ManagementJim Bugwadia, Jayashree Ramanathan, Robert Ficcaglia, Aradhna Chetal · KubeCon + CloudNativeCon North America 2021
• 28mEmbracing change: Policy-as-code for Kubernetes with OPA and GatekeeperAra Pulido · stackconf online 2021
• 49mKubernetes Policy as Code with KyvernoJim Bugwadia · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 34mEmbracing Change, Policy as code for Kubernetes with OPA and GatekeeperAra Pulido · DevOpsDays Portugal 2022
• 35mHow to fight misconfiguration and bad intentions with Kubernetes admission policyVictor Farcic · KCD Guatemala 2023
• 14mPolicy-as-code for Kubernetes with GatekeeperAra Pulido · KubeCon + CloudNativeCon Europe 2021
• 27mEmbracing change: Policy-as-code with OPA and GatekeeperAra Pulido · Conf42 Cloud Native 2021