Gatekeeper: Flexible, Shareable Policy for Kubernetes

on YouTube ↗34m

" summary

Gatekeeper is a Kubernetes policy engine that wires Open Policy Agent into the cluster via CRDs and an admission webhook, letting admins write Rego templates and attach simple constraints. It provides audit and dry‑run modes, a library of reusable templates, and is in alpha but already runs as an AKS preview in production at Microsoft. Missing features include mutating webhooks, richer metrics, cross‑cluster context and improved policy authoring tooling.

AI-written summary · about

" chapters (19)

1. 0:00Introduction
2. 2:55Who are you
3. 4:57The problem
4. 8:44Common tools
5. 10:23Kubernetes capabilities
6. 12:13Access to metadata
7. 13:06Challenges
8. 14:49Solution Gatekeeper
9. 16:13Using Gatekeeper
10. 17:05Demo
11. 20:51Root Cause Analysis
12. 24:00How does it work
13. 25:48Why Gatekeeper
14. 27:45Audit
15. 29:15Lifecycle
16. 30:11New features
17. 31:46Thank you
18. 32:11How to get involved
19. 33:08Question

" related talks

• 34mGatekeeper: Flexible, Shareable Policy for KubernetesCraig Peters · KubeCon + CloudNativeCon China 2019
• 14mPolicy-as-code for Kubernetes with GatekeeperAra Pulido · KubeCon + CloudNativeCon Europe 2021
• 30mSecuring the Kubernetes Empire with OpenPolicyAgent and RegoNavin Pai · KubeDay India 2023
• 34mEmbracing Change, Policy as code for Kubernetes with OPA and GatekeeperAra Pulido · DevOpsDays Portugal 2022
• 28mEmbracing change: Policy-as-code for Kubernetes with OPA and GatekeeperAra Pulido · stackconf online 2021
• 30mOpen Policy Agent IntroMax Smythe, Patrick East · KubeCon + CloudNativeCon North America 2020 Virtual
• 27mEmbracing change: Policy-as-code with OPA and GatekeeperAra Pulido · Conf42 Cloud Native 2021
• 17mOpen Policy Agent IntroAsh Narkar, Oren Shomron · KubeCon + CloudNativeCon Europe 2021