Trino and Data Governance on Kubernetes
Talkat KubeCon + CloudNativeCon Europe 2025 · on Wednesday, 2025-04-02· at 15:15· Level 1 | Hall Entrance S10 | Room D·
summary
Centralized platform deploys Trino on Kubernetes using a custom controller that exposes Trino CRDs (catalog, service, access-control) and mounts catalogs across namespaces while keeping credentials secret; runtime authorization uses Open Policy Agent with an OPA bundler distribution feeding per-cluster OPA instances and an OPA Envoy plugin for UI/query HTTP checks; supports column-level access controls, multi-tenant isolation, and a managed query endpoint and UI listed in CRD status fields; production users report stable interactive use.
AI-written summary · about
chapters (10)
- 0:00Trino and data governance intro
- 1:23Bloomberg’s data challenges
- 3:11What is Trino
- 6:00Trino on Kubernetes
- 7:26Centralized catalog & policies
- 8:28New platform design
- 15:07Reusing infra for access control
- 16:30Simplifying cluster creation
- 21:09Key takeaways & future plans
- 24:09Q&A
related talks
29mManaging a Multi-Tenanted Kubernetes Cluster in Production
33mCentralizing Kubernetes and Container Operations
47mData Mesh in Kubernetes
22mBuilding a Kubernetes Operator for Automated Distributed Tracing
24mUnifying Policy Observability in Kubernetes
25mSecuring Kubernetes Multi-Tenancy: Navigating Challenges Through DevSecOps Control and Visibility
01h 19mTutorial: Building an Enterprise Infrastructure Control Plane on Kubernetes
32mK8s: The Architecture of Digital Operational Resilience compliant with DORA