logo

Sponsored Session: Datadog - Policy-as

Authors:   Ara Pulido


Summary

The presentation discusses the use of Gatekeeper, an open source project that integrates Open Policy Agent (OPA) in Kubernetes environments, to define and enforce fine-grained policies in cloud native environments.
  • Gatekeeper allows for policy to be defined as Kubernetes objects, making it easier to adopt policy-as-code practices in Kubernetes environments and sharing reusable policy templates
  • Policy rules that cannot be described with role based access control (RBAC) in Kubernetes, such as controlling third-party image registries and ensuring required labels are present, can be addressed with Gatekeeper and OPA
  • Gatekeeper comes with observability baked in, including out of the box metrics and integration with Datadog for monitoring and analytics
  • An anecdote is not provided in the text

Abstract

Sharing of Personal Information with Sponsors In order to facilitate networking and business relationships at the event, you may choose to visit a third partyʼs virtual booth or to access sponsored content. You are never required to visit third party booths or to access sponsored content. When visiting a booth (e.g. by clicking on a third partyʼs logo in the Solutions Showcase or exhibitor directory, and any actions within the booth thereafter including viewing resources), when accessing sponsored sessions in the Sponsor Theater, or by participating in sponsored activities, the third party will receive some of your registration data. This data includes your first name, last name, title, company, address, email, standard demographics questions (i.e. job function, industry), and details about the sponsored content or resources you interacted with. If you choose to interact with a virtual booth or access sponsored content, you are explicitly consenting to receipt and use of such data by the third-party recipients, which will be subject to their own privacy policies.This is an on-demand session and will be available for the duration of the event.As more enterprises migrate to cloud native environments like Kubernetes, the need for scalable ways to define and enforce fine-grained policies increases: how can I limit the number of replicas of a pod for certain users? how can I ensure that all images come from trusted registries?Gatekeeper is an open source project to integrate Open Policy Agent (OPA) in Kubernetes environments. Gatekeeper allows to define policy as Kubernetes objects, making it easier to adopt policy-as-code practices in Kubernetes environments and sharing reusable policy templates.In this demo we will explain how to set up Gatekeeper for Kubernetes environments. You’ll learn how to adopt policy-as-code techniques and how you can integrate Gatekeeper with your existing tools.

Materials:

Tags: