SIG Usability: Deep Dive
Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 15:20· San Diego Ballroom A - Marriott Marquis San Diego Marina Hotel·
summary
SIG Usability details a concrete change: Kubernetes currently defaults to an open pod network and the proposal is to add namespace v2 which auto-creates a default deny network policy so clusters start locked down without breaking API guarantees. Work covers network policy, pod security policies versus OPA/Gatekeeper, conformance test gaps and CNI compatibility. The 1.16 deprecation shows how warnings alone fail, so adding kubectl warnings and opt-in namespace versions are part of the migration plan.
AI-written summary · about
chapters (17)
- 0:00Start
- 0:50We're New Here
- 1:26Dive: Default Security Considerations
- 2:09Network Abstractions
- 3:28Pod-Pod Networking
- 4:13Network Policy
- 5:05NetworkPolicy - Example
- 6:33Let's Change This...?
- 7:36Why Isn't It Like This Already?
- 9:07Lessons From The 1.16 API Removal
- 11:10How Do We Introduce A Default?
- 14:34Kubernetes Conformance Logistics
- 15:23User Experience
- 17:15Basics
- 20:26Obstacles
- 21:24Is PSP The Long-Term Solution?
- 24:35Where To Find Us
related talks
34mKubernetes SIG Node Intro and Deep Dive
28mKubernetes SIG Node Intro And Deep Dive
27mKubernetes SIG Architecture Intro and Updates
42mSIG-Network: Intro & Deep-Dive
51mKubernetes SIG-Network: Intro and Deep-Dive
01h 28mIntro + Deep Dive: Kubernetes (Network) SIG
25mKubernetes SIG CLI: Intro and Updates
06mKeynote: Kubernetes Project Updates