KubeCon 2015

Once you get past the work of installing and configuring Kubernetes to your liking, the real challenge begins. Without any documentation to guide you, you'll need to figure out which people, groups and projects will access the system, what resources they can consume, where resources live and how these pieces will interact. And then you'll have to do that again and again, tweaking the configuration each time the requirements of your organization change. The more successful your infrastructure is, the more complex the process of actually managing your Kubernetes installation becomes.

In this talk, you'll learn how a powerful, policy-driven tool can help you with the complexity of managing systems like Kubernetes at scale. A comprehensive and pervasive policy approach with automatic enforcement enables Operations and IT teams to model and control the steady state of a system they want, while still giving your developers the freedom to claim the resources they need. This lets everyone associated with your organization's Kubernetes installation win.

This talk will include:

- How a policy system works in this context
- How to structure policy so it is most effective in a distributed, multi-cloud system
- Crucial points for policy enforcement
- Initial work to add a comprehensive policy system to Kubernetes as part of the Cloud Native Initiative