SIG Auth Update and Deep Dive
Talkat KubeCon + CloudNativeCon North America 2019 · on Thursday, 2019-11-21· at 14:25· Room 32AB - San Diego Convention Center, Upper Level·
summary
SIG Auth reports active work to stabilize long-lived beta features, clean up deprecated admission controllers, and close tech debt; pod security policy (PSP) shows structural limits so the team proposes three buckets (privileged, restricted, default) and a migration path toward Gatekeeper/OPA with dry‑run and audit support; a new bound service account tokens flow projects tokens into volumes, adds audience binding and short expiry, and requires API flags plus client‑library updates before cluster rollout.
AI-written summary · about
chapters (19)
- 0:00Intro
- 1:05Containment
- 1:40Xkcd
- 3:53Theme
- 4:17Beta to GA
- 6:24Deprecate VAX
- 7:23Highlights
- 7:38retroactive caps
- 14:51SIG Auth mailing list
- 15:30Audience Poll
- 16:19What is Auth
- 17:13What does Auth do
- 17:49PSPs
- 19:04Pods
- 21:14Openshift
- 24:15Feedback
- 32:01Not like a Plant
- 40:12Fix PSPs
- 44:19Rego
