Kubernetes Policies

Show: 60Show Overview: Brian and new co-host John Osborne (@OpenShiftFed) discuss policies in and around Kubernetes.Show Notes:Try OpenShift 4 - http://try.openshift.comOpenShift in Action - https://www.manning.com/books/openshift-in-actionKubernetes Policies - https://kubernetes.io/docs/concepts/policy/Kubernetes SIGs and Working Groups - https://github.com/kubernetes/community/blob/master/sig-list.mdOpen Policy Agent - https://www.openpolicyagent.org/Topic 1 - Welcome John Osborne to the show. Let’s talk about your background. Topic 2 - We decided to discuss “policy” in Kubernetes. Where do you usually find that discussion begins. If I were to do a Google search, the Kubernetes site highlights “Pod Security Policies” and “Quotas”. Topic 3 - What types of tools do you see in production being used to apply and track policy within Kubernetes environments? Topic 4 - Grafaes and Kritis are often discussed around policy for “securing Kubernetes software supply chain”. Are these types of projects focused on Kubernetes as a platform, or applications running on Kubernetes, with more of a focus on the CI/CD and Testing pipelines?Topic 5 - There is a newer framework that’s starting to emerge, called “Open Policy Agent”. What are some of the things that it is focused on? Topic 6 - Are there communities within Kubernetes that are focused on policy, if people want to follow discussions or contribute to projects? Feedback?Email: PodCTL at gmail dot comTwitter: @PodCTLWeb: http://podctl.com