Let's Learn Kubewarden
Source: YouTube · Kubesimplify · published Jun 23, 2021 · 1:02:05
Cube Warden is a Kubernetes policy engine enabling "policy as code" using WebAssembly, offering a secure, cross-platform alternative to traditional query languages like Rego.
Key Takeaways:
• Cube Warden was developed to simplify the complexity of writing policies as code in existing solutions, aiming to reduce context switching for developers. 4:06
• It uses WebAssembly modules compiled from various programming languages and distributed via container registries, ensuring portability and security sandboxes. 9:00
• The system architecture involves a ClusterAdmissionPolicy CRD, a controller for reconciliation, and a policy server for runtime evaluation. 21:27
• The kwctl CLI tool allows users to pull, test, and generate Kubernetes manifests for policies locally before deployment. 27:24
• A key feature in development allows importing existing Open Policy Agent (OPA) and Gatekeeper policies by compiling Rego into WebAssembly. 47:09
This technology provides a flexible, language-agnostic approach to enforcing security policies on Kubernetes clusters, bridging the gap between developers and security requirements.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hello everyone and welcome to this stream uh so if you are new to the channel my name is sam pathak and i am a cncf ambassador working as director of technical evangelism at cevo and uh very excited to start this particular session and this particular series uh to be honest uh so basically we are doing uh uh ranchers who say uh live stream series of the open source products that they are working super hard on which makes very much sense to be discussed in the cloud native community with respect to kubernetes and they are i mean amazing products that the team is working on and i am super excited to show you um some of these starting today with cube warden uh which is a kind of policy engine for writing uh the policies uh and policy as code basically so we'll be talking all about the policy …