Kubernetes Admission Control
Control cluster operations with Rego policies
Kubernetes automates deployment, scaling, and management of containerized applications. OPA provides fine-grained, context-aware authorization and admission control for clusters.
Blogs:
- @sbueringer > Kubernetes Authorization Via Open Policy Agent (medium.com)
- @jimmy.ray > Policy Enabled Kubernetes With Open Policy Agent (medium.com)
- Securing The Kubernetes Api With Open Policy Agent (blog.openpolicyagent.org)
- Kubernetes Authorization Via Open Policy Agent (itnext.io)
- Capital One Tech > Policy Enabled Kubernetes With Open Policy Agent (medium.com)
- Fine Grained Policy Enforcement In Openshift With Open Policy Agent (blog.openshift.com)
Code:
- Open Policy Agent > Kube Mgmt (github.com)
- Open Policy Agent > Gatekeeper (github.com)
Videos:
- Securing Kubernetes With Admission Controllers - Kubecon Seattle 2018
- Dave Strebel - microsoft
- Using OPA for Admission Control in Production - Kubecon Seattle 2018
- Zach Abrahamson - Capital One
- Todd Ekenstam - Intuit
- Liz Rice Keynote - Kubecon Seattle 2018
- Liz Rice - AquaSecurity
- Intro to Open Policy Agent Gatekeeper - Kubecon Barcelona 2019
- Rita Zhang - microsoft
- Max Smythe - google
- Policy Enabled Kubernetes and CICD - OPA Summit at Kubecon San Diego 2019
- Jimmy Ray - capitalone
- TripAdvisor: Building a Testing Framework for Integrating OPA into K8s - OPA Summit at Kubecon San Diego 2019
- Luke Massa - tripadvisor
- Enforcing automatic mTLS with Linkerd and OPA Gatekeeper - Kubecon San Diego 2019
- Ivan Sim - buoyant
- Rita Zhang - microsoft
- Enforcing Service Mesh Structure using OPA Gatekeeper - Kubecon San Diego 2019
- Sandeep Parikh - google
- TGIK: Exploring the Open Policy Agent
- Joe Beda - VMware
Tutorials:
- Docs > Kubernetes (openpolicyagent.org)
Category: containers
Layer: orchestration
Layer: orchestration