Jul 6, 2023, 4:00 – 6:00 AM (UTC)
Hello #DevOps, #CloudOps, #Cloud-Native friends,
Welcome to our July 2023 Meetup. We are co-hosting the meetup with the Wellington OpenShift Meetup group.
Venue: BNZ, 96 The Terrace · Wellington
Sponsors
Refreshments: Red Hat
Venue: BNZ
Community: Cloud-Native Summit, CNCF, Wellington OpenShift Meetup Group
***************************
04:00 p.m. - Doors open, and Networking over refreshments.
04:15 p.m. - Open Policy Agent - A lightning Talk
04:30 p.m. - Andrew Block, Distinguished Architect, Red Hat - sharing his insights from Red Hat Summit: Explore What's Next
05:45 p.m. - Upcoming Events and community updates, thank you & wrap-up
*************************
Thank you
BMK
CLVR - Cloud Native Consulting
Cloud Native - Architect
Red Hat
Distinguished Architect
Thursday, July 6, 2023
4:00 AM – 6:00 AM (UTC)
4:00 AM | Door Opens & Networking | Welcome, connect with old friends, make new friends, network and hangout |
4:15 AM | Enforcing Policies with OPA and Gatekeeper | Chris Russo - Presentation As organizations evolve their Kubernetes clusters, ensuring policy compliance becomes crucial, especially during the upgrade process. This talk explores the significance of OpenPolicy Agent (OPA) in enforcing policies on Kubernetes clusters that require upgrading, considering the deprecation of Pod Security Policies (PSP). OpenPolicy Agent, an open-source policy engine, provides a flexible and extensible approach to policy enforcement on Kubernetes. With OPA, organizations can define and enforce policies that govern various aspects of cluster security, resource allocation, and application behavior. However, the deprecation of Pod Security Policies in recent Kubernetes versions presents a challenge. Pod Security Policies were widely used to enforce security policies at the pod level, but their removal necessitates alternative solutions. OPA fills this gap by enabling a declarative policy framework that can be used alongside Kubernetes admission controllers like Gatekeeper. During the cluster upgrade process, organizations can leverage OPA's capabilities to ensure policy compliance. By authoring custom policies in the Rego language, administrators can define rules that address security, resource usage, network access, and other requirements specific to their environment. OPA evaluates these policies against incoming requests, such as pod creations or updates, and enforces the defined policies by rejecting or modifying requests that violate the rules. Furthermore, OPA's integration with Kubernetes admission controllers allows seamless integration into the cluster upgrade workflow. Policies can be evaluated at different stages, such as during admission, mutation, or validation, ensuring that the desired policies are enforced consistently. This talk highlights the significance of OpenPolicy Agent in enforcing policies during Kubernetes cluster upgrades, particularly in light of PSP deprecation. By adopting OPA and its declarative policy framework, organizations can continue to maintain and enforce robust security and compliance measures while keeping pace with the evolving Kubernetes ecosystem. |
4:30 AM | Andrew Block, Distinguished Architect, Red Hat - sharing his insights from Red Hat Summit: Explore What's Next | Andrew Block, Red Hat's distinguished architect, is visiting Wellington. Hear more about it as he shares details on Red Hat Developer Hub, Trusted Content/RHTAP, ACS cloud service, OpenShift AI/ML, Service Interconnect and the Ansible integration, and much more. Ensure you bring in the questions you would have wanted regarding these new product announcements from Red Hat. |
5:45 AM | Announcements, Wrap-Up and Thank you | Thank you Update on the year 2023 Conferences, Meetups, Events |
SECTION6
Lead Organizer
CONTACT US
Your message has been successfully sent.
This event will start on Jul 6, 4:00 PM (NZST)
Refresh 15 minutes before to join.