Скачать или смотреть Building a universal policy platform for Kubernetes - Victor Cuadrado Juan

Policy-as-code is the process of writing code that defines checks and rules. In the context of Kubernetes, these policies are used to keep clusters secure and compliant.

Since there are many ways to write code, a policy developer should be granted the freedom to use the solution that works best for them or for the problem space they are operating in. This will improve the developer productivity and the overall quality of the final code.

At the same time, this flexibility should not lead to a sprawl of policy frameworks being used; since that would cause operational complexity.

This talk shows how Kubewarden, a CNCF project, allows policies to be expressed in different ways, while still providing a standardized way to manage them.