Gatekeeper is an open source project which lets you enforce policy in a Kubernetes cluster. It’s also the basis for Policy Controller, a hosted and managed version now available for all GKE users. Max Smythe, a senior SWE at Google, is a maintainer of Gatekeeper and the TL of Policy Controller. He joins us to talk constraints, config and Cruise.

Do you have something cool to share? Some questions? Let us know:

Chatter of the week

News of the week

APIs being removed in Kubernetes 1.22
ContainIQ launches
Postgres Operator 5.0
NetworkServiceMesh 1.0.0
Google Cloud Certificate Authority Service GA and cert-manager integration
Platform9 Managed KubeVirt
InsightCloudSec from Rapid7
Sophos acquires Capsul8
Spring 2021 graduating class from CNCF-sponsored LFX Mentorship program

Links from the interview

Brian May
Edge of Tomorrow
- The redemption thereof
Chubby
Riak
Gatekeeper
Anthos Config Management
- Config Sync
- Policy Controller
Episode 101, with Tim Hinrichs and Torin Sandall
PodSecurityPolicy is not going GA
- SIG Auth’s replacement proposal
- Using ACM constraints to enforce Pod security
OPA Constraint framework
Policy Controller:
- Creating constraints
- Writing a constraint template
Structural schemas
Design Patterns for Extendable, Scalable K8s Extensions by Rita Zhang and Max Smythe
Max Smythe on Twitter

Gatekeeper and Policy Controller, with Max Smythe

Kubernetes Podcast from Google