logo
Dates

Author


Conferences

Tags

Sort by:  

Authors: Jinhong Brejnholt, Charles-Edouard Brétéché
2023-04-20

tldr - powered by Generative AI

The presentation discusses the use of Kubernetes and OPA for security policy enforcement in DevOps.
  • Take advantage of recommended policies and customize them to fit organizational needs
  • Start with validation, value, and audit before enforcing policies
  • Kubernetes and OPA have extensive policy libraries and strong community support
  • Kubernetes can automate resource management and validation, including image signature verification
  • An anecdote is given about a misconfigured pod disruption budget causing issues with upgrading
Authors: Chip Zoller, Dolis Sharma
2022-10-27

tldr - powered by Generative AI

Kubernetes policy engine Kubernos can help with validation, mutation, and generation of rules in a Kubernetes cluster, as well as provide image verification and cost control. It can also automate tasks and set expectations for others.
  • Kubernos is a policy engine for Kubernetes that can validate, mutate, and generate rules in a cluster
  • It provides image verification and generates reports on violations
  • Kubernos can help with cost control and automation
  • It can set expectations for others and save time
  • Real-life use cases include blocking bad pod requests and creating fine-grained RBAC