Admission Controllers - Feat. Kyverno, OPA, Kubewarden, Cloud Custodian, and VAP (Ch. 3, Ep. 1)

Choose Your Own Adventure: The Treacherous Trek to Security

In this episode, we'll figure out which policy solution based on Kubernetes Admission Controllers we should adopt.

Vote for your choice of admission controllers at https://cloud-native.slack.com/archiv...

This and all other episodes are available at    • You Choose  .

More information about the "Choose Your Own Adventure" project including the source code and links to all the videos can be found at https://github.com/vfarcic/cncf-demo.

٩( ᐛ )و Whitney's YouTube Channel →    / @wiggitywhitney  

#Kyverno #OPA #Kubewarden #ValidatingAdmissionPolicy

▬▬▬▬▬▬ 🔗 Additional Info 🔗 ▬▬▬▬▬▬
🔗 Admission Controller Policies: https://github.com/vfarcic/cncf-demo/...
🎬 Kubernetes-Native Policy Management With Kyverno:    • Kubernetes-Native Policy Management W...  
🎬 No-Code Policy with Kyverno:    • ⚡️ Enlightning - No-Code Policy with ...  
🎬 Signing And Verifying Container Images With Sigstore Cosign And Kyverno:    • Signing and Verifying Container Image...  
🎬 How to apply policies in Kubernetes using Open Policy Agent (OPA) and Gatekeeper:    • How to apply policies in Kubernetes u...  
🎬 Open Policy Agent and Rego - the Policy Power Duo!:    • ⚡️ Enlightning - Open Policy Agent an...  
🎬 Cloud Custodian - Policies? Resource Management? Something Else?:    • Cloud Custodian - Policies? Resource ...  
🎬 Cloud Custodian: Governance as Code That Developers Love:    • ⚡️ Enlightning - Cloud Custodian: Gov...  
🎬 Kubewarden, the Universal Policy Framework:    • ⚡️ Enlightning - Kubewarden, the Univ...  
🎬 Kubernetes Validating Admission Policy Changes The Game:    • Kubernetes Validating Admission Polic...  
🎬 What Is ValidatingAdmissionPolicy in Kubernetes?:    • ⚡️ Enlightning - What Is ValidatingAd...  

▬▬▬▬▬▬ ⏱ Timecodes ⏱ ▬▬▬▬▬▬
00:00 Admission Controller Policies
9:32 Intros
13:51 Tim Bannister - ValidatingAdmissionPolicy (VAP)
18:49 Kevin Sonney - Cloud Custodian
22:56 Rita Zhang - OPA Gatekeeper
28:49 Jim Bugwadia - Kyverno
34:41 Flavio Castelli - Kubewarden
39:39 Q1 VAP
42:07 Q2 VAP
43:29 Q3 Cloud Custodian
44:53 Q4/Q5 OPA Gatekeeper
47:06 Q6 WASM
48:15 Q7 Why not both?
49:16 Q8 Kubewarden WASM
49:40 Q9 OPA Gatekeeper (round table answers)