LinuxCon + ContainerCon + CloudOpen China 2018

As many large organizations move business-critical workloads onto Kubernetes, they bring diverse requirements around availability, performance, security, and governance.
Over time Kubernetes has added various features to address these requirements, one of such is that let administrators configure policies such as RBAC, admission control, NetworkPolicy, (anti-)affinity, etc. While these features can be combined to address some of the requirements from large enterprises, this is largely achieved through tribal knowledge in the most advanced segment of the user base and does not cover all of the requirements.
In this talk, we will introduce the newly formed Policy WG that aims to provide an overall architecture that unifies policy features. We will show how existing Kubernetes features can be leveraged to provide fine-grained policy-based control