Kubernetes Validating Admission Policy Changes The Game
Source: YouTube · DevOps & AI Toolkit · published Mar 27, 2023 · 30:01
This video introduces Kubernetes Validating Admission Policy, a new alpha feature in Kubernetes 1.26 that may replace existing policy management tools like Kyverno and OPA Gatekeeper 1:04.
Key Takeaways:
• Policy management is crucial in Kubernetes, with tools like Kyverno and OPA Gatekeeper currently used for validation and enforcement, but they may need to adapt to the new standard 0:00
• Kubernetes API request flow includes authentication, authorization, mutating admission controllers, and validating admission controllers before persistence to etcd 1:40
• Validating Admission Policy uses CEL (Common Expression Language) to define policies directly in Kubernetes without external dependencies 11:51
• Examples show how to create policies limiting replica counts and validating custom resources across different namespaces 8:18
• While currently in alpha with limited documentation, Validating Admission Policy is expected to become the de facto standard, forcing existing tools to adapt or risk obsolescence 23:44
The video recommends continuing with current policy tools but preparing to adopt Validating Admission Policy once it reaches beta status 28:02.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
policy management in kubernetes is a huge no massive deal it's probably one of the first things you want to do you want to apply after you set up the initial cluster since the emergence of kubernetes and Mission controllers we got tools that leverage them to validate and enforce policy we can use kyberno or be a gatekeeper that tree and others to Define and enforce policies if you're using kubernetes you're likely already using one of those tools if you're not well you should start by watching those videos but what if I tell you that those tools are in trouble what if I tell you that they are to be extinct or be forced to adapt to a new standard foreign [Music] validating admission policy which was introduced as an alpha feature in kubernetes 1.26 but before we dive into it let's see how a…